Prob. installation ATI/Carte graphique

Question

Bonjour,

J'ai récemment acheté une nouvelle carte graphique pour pouvoir jouer convenablement à Gears of War mais j'ai un soucis pendant l'installation... 

J'ai désinstallé tous les programmes ATI, changé la carte graphique et utilisé le CD fourni avec pour tenter d'installer les pilotes, mais pendant l'installation d'ATI Catalyst center une erreur apparait qui dit : "La compatibilité avec Window n'est pas vérifiée, vous n'aurez pas le logo window si vous continuez l'installation et ca pourra causer des problèmes a votre système d'exploitation" (un truc comme ca du moins)

Effectivement je ne peux plus jouer a GoW et le PC redémarre quand je lance certains programmes :s

Je ne sais pas si le problème vient de là.
J'ai téléchargé les derniers drivers pour ma carte graphique pourtant. Mais j'ai toujours le même problème qui revient pour ATI.

Je n'ai pas l'icône ATI dans la barre des tâches ni dans le panneau de configuration.

Carte graphique : Asus EAH3450


Merci d'avance pour vos réponses j'espère que j'ai mis assez de détails

Destrio5 · Answer

Salut,

AGP ou PCI-E ?

Jall · Answer

Ah oui PCI pardon

Destrio5 · Answer

Tu as essayé le Catalyst 8.12 ?

Jall · Answer

Je viens de tester, même problème : "Le logiciel n'a pas été validé pendant le test permettant d'obtenir le logo windows" et gnagnagna peut entrainer des erreurs tout ça...

Destrio5 · Answer

---> Télécharge et installe Everest Ultimate :
http://www.clubic.com/lancer-le-telechargement-25730-0-everest-ultimate.html

---> Lance-le, va dans "Ordinateur" puis "Résumé" et donne-nous le résumé. Pour prendre le résumé, utilise la fonction Rapport en haut de ton écran :
http://sd-1.archive-host.com/membres/up/3288717712384394/Config.jpg

PS : Supprime ton adresse mail si elle apparaît dans le rapport.

Jall · Answer

Voilà voilà :

--------[ EVEREST Ultimate Edition ]------------------------------------------------------------------------------------

    Version                                           EVEREST v4.50.1330/fr
    Module de benchmark                               2.3.224.0
    Site web                                          http://www.lavalys.com/
    Type de rapport                                   Rapport rapide [ TRIAL VERSION ]
    Ordinateur                                        HP25207153182
    Générateur                                        Administrateur
    Système d'exploitation                            Microsoft Windows XP Professional 5.1.2600 (WinXP Retail)
    Date                                              2008-12-14
    Heure                                             12:14


--------[ Résumé ]------------------------------------------------------------------------------------------------------

    Ordinateur:
      Type de système                                   PC multiprocesseur ACPI
      Système d'exploitation                            Microsoft Windows XP Professional
      Service Pack du système                           [ TRIAL VERSION ]
      Internet Explorer                                 7.0.5730.13 (IE 7.0)
      DirectX                                           4.09.00.0904 (DirectX 9.0c)
      Nom du système                                    HP25207153182
      Nom de l'utilisateur                              Administrateur
      Domaine de connexion                              [ TRIAL VERSION ]
      Date / Heure                                      2008-12-14 / 12:14

    Carte mère:
      Type de processeur                                DualCore Intel Pentium D 945, 3400 MHz (17 x 200)
      Nom de la carte mère                              Hewlett-Packard HP Compaq dc7600 Convertible Minitower
      Chipset de la carte mère                          Intel Lakeport-G i945G
      Mémoire système                                   [ TRIAL VERSION ]
      DIMM1: Apacer Tech. 78.01GA0.9K5                  1 Go DDR2-800 DDR2 SDRAM  (5-5-5-18 @ 400 MHz)  (4-4-4-12 @ 266 MHz)  (3-3-3-9 @ 200 MHz)
      DIMM3: Samsung M3 78T6553CZ3-CD5                  [ TRIAL VERSION ]
      DIMM4: Samsung M3 78T6553CZ3-CD5                  [ TRIAL VERSION ]
      Type de BIOS                                      Compaq (04/24/06)
      Port de communication                             Port de communication (COM1)
      Port de communication                             Port imprimante ECP (LPT1)

    Moniteur:
      Carte vidéo                                       ATI Radeon HD 3400 Series  (512 Mo)
      Carte vidéo                                       ATI Radeon HD 3400 Series  (512 Mo)
      Accélérateur 3D                                   ATI Radeon HD 3450 (RV620)
      Moniteur                                          AOC LM720  [17" LCD]  (11249JA083474)

    Multimédia:
      Carte audio                                       ATI Radeon HDMI @ ATI RV620 - High Definition Audio Controller
      Carte audio                                       Realtek ALC260 @ Intel 82801GB ICH7 - High Definition Audio Controller [A-1]

    Stockage:
      Contrôleur IDE                                    Intel(R) 82801GB Serial ATA Storage Controllers - 27C0
      Contrôleur IDE                                    Intel(R) 82801GB Ultra ATA Storage Controllers - 27DF
      Disque dur                                        ST3250824AS  (250 Go, 7200 RPM, SATA-II)
      Lecteur optique                                   HL-DT-ST DVD+-RW GSA-H21L  (DVD+R9:8x, DVD+RW:16x/8x, DVD-RW:16x/6x, DVD-ROM:16x, CD:48x/32x/48x DVD+RW/DVD-RW)
      Lecteur optique                                   HL-DT-ST DVD-ROM GDR8164B  (16x/52x DVD-ROM)
      État des disques durs SMART                       OK

    Partitions:
      C: (NTFS)                                         [ TRIAL VERSION ]
      Taille totale                                     [ TRIAL VERSION ]

    Entrée:
      Clavier                                           Clavier standard 101/102 touches ou clavier Microsoft Natural Keyboard PS/2
      Souris                                            Souris compatible PS/2

    Réseau:
      Adresse IP principale                             [ TRIAL VERSION ]
      Adresse MAC principale                            00-17-A4-43-79-E5
      Carte réseau                                      Broadcom NetXtreme Gigabit Ethernet  (192. [ TRIAL VERSION ])
      Modem                                             Modem 56000 bps Standard

    Périphériques:
      Imprimante                                        Canon MP150 Series Printer
      Contrôleur USB1                                   Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
      Contrôleur USB1                                   Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
      Contrôleur USB1                                   Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
      Contrôleur USB1                                   Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
      Contrôleur USB2                                   Intel 82801GB ICH7 - Enhanced USB2 Controller [A-1]

    DMI:
      Distributeur du BIOS                              Hewlett-Packard
      Version du BIOS                                   786D1 v01.56
      Fabricant du système                              Hewlett-Packard
      Nom du système                                    HP Compaq dc7600 Convertible Minitower
      Version du système                                
      Numéro de série du système                        [ TRIAL VERSION ]
      UUID du système                                   [ TRIAL VERSION ]
      Fabricant de la carte mère                        Hewlett-Packard
      Nom de la carte mère                              09F0h
      Version de la carte mère                          
      Numéro de série de la carte mère                  [ TRIAL VERSION ]
      Fabricant du châssis                              Hewlett-Packard
      Version du châssis                                
      Numéro de série du châssis                        [ TRIAL VERSION ]
      Identifiant du châssis                            [ TRIAL VERSION ]
      Type du châssis                                   Mini Tower


--------[ Debug - PCI ]-------------------------------------------------------------------------------------------------

    B00 D00 F00:  Intel 82945G Memory Controller Hub [A-2]
                  
      Offset 000:  86 80 70 27  06 01 90 20  02 00 00 06  00 00 00 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  00 00 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  E0 00 00 00  00 00 00 00  00 00 00 00 
      Offset 040:  01 90 D1 FE  01 40 D1 FE  05 00 00 F0  01 80 D1 FE 
      Offset 050:  00 00 02 00  03 00 00 10  00 00 00 00  00 00 00 00 
      Offset 060:  01 30 D1 FE  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  10 11 11 11  11 11 33 00  FF 03 00 00  80 1A B8 00 
      Offset 0A0:  10 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 01 00 00 
      Offset 0E0:  09 00 09 51  02 E1 9B 88  06 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 03 00  00 00 00 00 

    B00 D01 F00:  Intel 82945G PCI Express Root Port [A-2]
                  
      Offset 000:  86 80 71 27  07 01 10 00  02 00 04 06  10 00 01 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 01 01 00  10 10 00 20 
      Offset 020:  50 E0 70 E0  01 D0 11 E0  00 00 00 00  00 00 00 00 
      Offset 030:  00 00 00 00  88 00 00 00  00 00 00 00  10 01 0A 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 02 
      Offset 080:  01 90 02 C8  00 00 00 00  0D 80 00 00  86 80 00 00 
      Offset 090:  05 A0 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  10 00 41 01  00 00 00 00  00 00 00 00  01 25 01 02 
      Offset 0B0:  40 00 01 11  80 25 08 00  C0 01 48 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  04 00 00 00 
      Offset 0F0:  00 00 01 00  00 00 00 00  86 0F 03 00  00 00 00 00 

    B00 D1B F00:  Intel 82801GB ICH7 - High Definition Audio Controller [A-1]
                  
      Offset 000:  86 80 D8 27  06 01 10 00  01 00 03 04  10 00 00 00 
      Offset 010:  04 00 A0 E0  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  00 00 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  50 00 00 00  00 00 00 00  15 01 00 00 
      Offset 040:  01 00 00 03  07 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  01 60 42 C8  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  05 70 80 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  10 00 91 00  00 00 00 00  00 08 10 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 01  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1C F00:  Intel 82801GB ICH7 - PCI Express Root Port 1 [A-1]
                  
      Offset 000:  86 80 D0 27  07 01 10 00  01 00 04 06  10 00 81 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 20 20 00  F0 00 00 20 
      Offset 020:  F0 FF 00 00  F1 FF 01 00  00 00 00 00  00 00 00 00 
      Offset 030:  00 00 00 00  40 00 00 00  00 00 00 00  FF 00 06 00 
      Offset 040:  10 80 41 01  C0 0F 00 00  00 00 10 00  11 4C 11 01 
      Offset 050:  00 00 01 10  60 05 10 00  00 00 00 00  00 00 00 00 
      Offset 060:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  05 90 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  0D A0 00 00  3C 10 10 30  00 00 00 00  00 00 00 00 
      Offset 0A0:  01 00 02 C8  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 11 80  00 00 00 00 
      Offset 0E0:  00 00 C7 00  06 07 08 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1C F01:  Intel 82801GB ICH7 - PCI Express Root Port 2 [A-1]
                  
      Offset 000:  86 80 D2 27  07 01 10 00  01 00 04 06  10 00 81 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 3F 3F 00  F0 00 00 00 
      Offset 020:  20 E0 40 E0  F1 FF 01 00  00 00 00 00  00 00 00 00 
      Offset 030:  00 00 00 00  40 00 00 00  00 00 00 00  11 02 06 00 
      Offset 040:  10 80 41 01  C0 0F 00 00  00 00 10 00  11 2C 11 02 
      Offset 050:  40 00 11 30  60 05 18 00  00 00 48 01  00 00 00 00 
      Offset 060:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  05 90 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  0D A0 00 00  3C 10 10 30  00 00 00 00  00 00 00 00 
      Offset 0A0:  01 00 02 C8  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 11 80  00 00 00 00 
      Offset 0E0:  00 00 C7 00  06 07 08 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1D F00:  Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
                  
      Offset 000:  86 80 C8 27  05 00 80 02  01 00 03 0C  00 00 80 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  01 20 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  00 00 00 00  00 00 00 00  14 01 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  10 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 2F 00 00  03 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1D F01:  Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
                  
      Offset 000:  86 80 C9 27  05 00 80 02  01 00 03 0C  00 00 00 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  21 20 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  00 00 00 00  00 00 00 00  12 02 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  10 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 2F 00 00  03 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1D F02:  Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
                  
      Offset 000:  86 80 CA 27  05 00 80 02  01 00 03 0C  00 00 00 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  41 20 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  00 00 00 00  00 00 00 00  15 03 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  10 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 2F 00 00  03 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1D F03:  Intel 82801GB ICH7 - USB Universal Host Controller [A-1]
                  
      Offset 000:  86 80 CB 27  05 00 80 02  01 00 03 0C  00 00 00 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  61 20 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  00 00 00 00  00 00 00 00  16 04 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  10 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 2F 00 00  03 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1D F07:  Intel 82801GB ICH7 - Enhanced USB2 Controller [A-1]
                  
      Offset 000:  86 80 CC 27  06 01 90 02  01 20 03 0C  00 00 00 00 
      Offset 010:  00 40 A0 E0  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  00 00 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  50 00 00 00  00 00 00 00  14 01 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  01 58 C2 C9  00 00 00 00  0A 00 A0 20  00 00 00 00 
      Offset 060:  20 20 FF 01  00 00 00 00  01 00 00 00  00 00 00 C0 
      Offset 070:  00 00 D7 3F  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  01 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 AA FF 00  FF 00 FF 00  20 00 00 88 
      Offset 0E0:  00 00 00 00  DB B6 6D 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 80 00 09  88 85 40 00  86 0F 01 00  06 17 02 20 

    B00 D1E F00:  Intel 82801GB I/O Controller Hub 7 (ICH7) [A-1]
                  
      Offset 000:  86 80 4E 24  07 01 10 00  E1 01 04 06  00 00 01 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 05 05 20  F0 00 80 22 
      Offset 020:  F0 FF 00 00  F1 FF 01 00  00 00 00 00  00 00 00 00 
      Offset 030:  00 00 00 00  50 00 00 00  00 00 00 00  FF 00 06 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  00 12 00 00 
      Offset 050:  0D 00 00 00  3C 10 10 30  00 00 00 00  00 00 00 00 
      Offset 060:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1F F00:  Intel 82801GB ICH7 - LPC Bridge [A-1]
                  
      Offset 000:  86 80 B8 27  07 01 10 02  01 00 01 06  00 00 80 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  00 00 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  E0 00 00 00  00 00 00 00  00 00 00 00 
      Offset 040:  01 F8 00 00  80 00 00 00  01 FA 00 00  10 00 00 00 
      Offset 050:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  8A 8A 8A 85  D0 00 00 00  85 8B 8B 80  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  10 00 0D 14  01 04 7C 00  81 04 0C 00  B1 0C 0C 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  10 06 00 00  01 00 00 00  13 00 00 00  00 13 00 00 
      Offset 0B0:  00 00 F0 00  00 00 00 00  00 00 00 04  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  33 22 11 00  67 45 00 00  C0 C0 00 00  02 00 00 00 
      Offset 0E0:  09 00 0C 10  A8 00 24 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  01 C0 D1 FE  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1F F01:  Intel 82801GB ICH7 - ATA-100 IDE Controller [A-1]
                  
      Offset 000:  86 80 DF 27  05 00 80 02  01 8A 01 01  00 00 00 00 
      Offset 010:  C1 20 00 00  E1 20 00 00  C9 20 00 00  E5 20 00 00 
      Offset 020:  A1 20 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  00 00 00 00  00 00 00 00  0A 01 00 00 
      Offset 040:  33 E3 22 C0  0B 00 00 00  03 00 21 00  00 00 00 00 
      Offset 050:  00 00 00 00  31 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  03 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1F F02:  Intel 82801GB ICH7 - SATA Controller [A-1]
                  
      Offset 000:  86 80 C0 27  05 00 B0 02  01 8F 01 01  00 00 00 00 
      Offset 010:  D1 20 00 00  E9 20 00 00  D9 20 00 00  ED 20 00 00 
      Offset 020:  B1 20 00 00  00 00 00 00  00 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  70 00 00 00  00 00 00 00  13 02 00 00 
      Offset 040:  27 E3 22 C0  00 00 00 00  01 00 01 00  00 00 00 00 
      Offset 050:  00 00 00 00  10 10 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  01 00 02 40  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  05 70 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 11 00  80 01 00 40  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  05 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B00 D1F F03:  Intel 82801GB ICH7 - SMBus Controller [A-1]
                  
      Offset 000:  86 80 DA 27  01 00 80 02  01 00 05 0C  00 00 00 00 
      Offset 010:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  01 FC 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 030:  00 00 00 00  00 00 00 00  00 00 00 00  05 02 00 00 
      Offset 040:  01 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 050:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 060:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  86 0F 01 00  00 00 00 00 

    B01 D00 F00:  Asus EAH3450 Video Adapter
                  
      Offset 000:  02 10 C5 95  07 00 10 00  00 00 00 03  10 00 80 00 
      Offset 010:  0C 00 00 D0  00 00 00 00  04 00 50 E0  00 00 00 00 
      Offset 020:  01 10 00 00  00 00 00 00  00 00 00 00  43 10 D4 01 
      Offset 030:  01 00 58 E0  50 00 00 00  00 00 00 00  10 01 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  43 10 D4 01 
      Offset 050:  01 58 03 06  00 00 00 00  10 A0 12 00  A0 8F 2C 01 
      Offset 060:  14 09 00 00  01 0D 00 00  40 00 01 11  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  01 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  05 00 80 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 

    B01 D00 F01:  ATI RV620 - High Definition Audio Controller
                  
      Offset 000:  02 10 28 AA  07 00 10 00  00 00 03 04  10 00 80 00 
      Offset 010:  04 00 51 E0  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  00 00 00 00  00 00 00 00  00 00 00 00  43 10 28 AA 
      Offset 030:  00 00 00 00  50 00 00 00  00 00 00 00  11 02 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  00 00 00 00  43 10 28 AA 
      Offset 050:  01 58 03 06  00 00 00 00  10 A0 12 00  A0 8F 2C 01 
      Offset 060:  14 08 00 00  01 0D 00 00  00 00 01 11  00 00 00 00 
      Offset 070:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 080:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 090:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0A0:  05 00 80 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0D0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0E0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 

    B3F D00 F00:  Broadcom NetXtreme Gigabit Ethernet Controller
                  
      Offset 000:  E4 14 00 16  06 00 10 00  01 00 00 02  10 00 00 00 
      Offset 010:  04 00 40 E0  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 020:  00 00 00 00  00 00 00 00  07 00 00 00  3C 10 10 30 
      Offset 030:  00 00 00 00  48 00 00 00  00 00 00 00  11 01 00 00 
      Offset 040:  00 00 00 00  00 00 00 00  01 50 02 C0  00 20 00 64 
      Offset 050:  03 58 00 00  04 01 20 82  05 D0 86 00  20 2A 80 40 
      Offset 060:  01 01 82 50  20 00 00 00  98 02 01 60  00 00 1B 76 
      Offset 070:  92 10 00 00  20 00 00 00  2C 00 00 00  08 02 00 00 
      Offset 080:  3C 10 10 30  00 00 00 00  34 00 13 04  82 00 08 14 
      Offset 090:  41 B8 00 01  00 00 00 C4  00 00 00 00  D2 00 00 00 
      Offset 0A0:  00 00 00 00  0A 00 00 00  00 00 00 00  C4 00 00 00 
      Offset 0B0:  00 00 00 00  00 00 00 4B  00 00 00 00  00 00 00 00 
      Offset 0C0:  00 00 00 00  00 80 00 00  0E 00 00 00  00 00 00 00 
      Offset 0D0:  10 00 01 00  A2 0F 28 00  00 50 10 00  11 6C 03 00 
      Offset 0E0:  40 00 11 10  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 0F0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 

    PCI-8086-2770:  Intel i945/955/975/E7230 MCHBAR
                  
      Offset 100:  20 20 20 20  00 00 00 00  03 00 00 00  07 00 05 00 
      Offset 110:  E8 28 50 B9  22 89 61 02  5F 02 00 80  FF 01 FF 03 
      Offset 120:  06 0A 00 40  00 05 00 E2  F0 01 00 00  00 00 00 00 
      Offset 130:  C4 06 00 00  6D 06 1A 87  08 01 02 00  00 00 00 00 
      Offset 140:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 150:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 160:  00 00 00 00  20 00 00 00  00 49 62 33  98 87 21 E0 
      Offset 170:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset 180:  10 10 20 20  00 00 00 00  03 03 00 00  3F 00 00 00 
      Offset 190:  E8 28 50 B9  22 89 61 03  5F 02 00 80  FF 01 FF 03 
      Offset 1A0:  06 0A 00 40  00 05 00 E2  00 00 00 00  00 00 00 00 

    PCI-8086-2770:  Intel i945/955/975/E7230 MCHBAR
                  
      Offset 200:  02 02 0F 00  00 00 00 00  02 04 01 00  00 00 00 00 
      Offset 210:  01 00 00 00  00 C6 8F 00  88 CD 39 04  88 CD 39 04 

    PCI-8086-2770:  Intel i945/955/975/E7230 MCHBAR
                  
      Offset C00:  22 00 00 00  01 01 01 01  00 00 00 00  00 00 00 00 
      Offset C10:  00 00 00 00  03 02 80 00  0B 0E 07 07  07 66 23 32 
      Offset C20:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset C30:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset C40:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset C50:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset C60:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset C70:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset C80:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset C90:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset CA0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset CB0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset CC0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 
      Offset CD0:  01 01 01 01  00 00 00 00  01 00 00 FF  00 00 00 00 
      Offset CE0:  00 00 00 00  00 00 80 00  00 00 00 00  00 00 00 00 
      Offset CF0:  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00 


--------[ Debug - Video BIOS ]------------------------------------------------------------------------------------------

    C000:0000  U............................IBM............... 761295520......
    C000:0040  ................08/12/08 01:00..1................c..4c......C...
    C000:0080  PA`P.*..............113-AB37400-104.RV620.PCI_EXPRESS.DDR2...95C
    C000:00C0  5.10.75.0.2.AS07                    ..                          
    C000:0100             ... ...(C) 1988-2005, ATI Technologies Inc. .ATOMBIOS
    C000:0140  BK-ATI VER010.075.000.002.027510.SV27510.bin .382855  .58643   .
    C000:0180          .B35004\config.h....$...ATOM..o.a...........C.....:.....
    C000:01C0  PCIR.............K.....ATI ATOMBIOS.\. K..........+vl...;L...}.
    C000:0200  2....V.......LP. .^..fPfQfRfSfUfVfW.............6....f......f.(.
    C000:0240  .....2.......)..)..)....z..G).[).|).S........DP. u......c..d....
    C000:0280  v..LP........f.......fP. .....fXt.. f.J.......f_f^f]f[fZfYfX....
    C000:02C0  .....F.f3..F...F..R......CZ..........f........f.\.f.L.;.u...f.^.
    C000:0300  f.N............>...u........w...f....e.....@.....B.............
    C000:0340  |."l..~.....5p.........f............f..f..f...PMID...K.........
    C000:0380  .............f.........................fPfR.1f...f....fZfX.fPfR.
    C000:03C0  1f...f....fZfX........t..:&..u$<.u .W....:&..u..K.....Ou...F....


------------------------------------------------------------------------------------------------------------------------

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Destrio5 · Answer

C'est le bon pilote pourtant.

Installe ceci :
http://downloadcenter.intel.com/confirm.aspx?httpDown=http://downloadmirror.intel.com/16023/a08/infinst_autol.exe&agr=&ProductID=2115&DwnldId=16023&strOSs=&OSFullName=&lang=eng

Destrio5 · Answer

Ton XP est modifié genre LSD, Gold, Ultimate, etc ?

Destrio5 · Answer

Peut-être avec HijackThis.

- Télécharge HijackThis v2.0.2 sur ton Bureau.

- Double-clique sur HJTInstall afin de lancer l'installation.

- Clique sur Install ensuite sur I Accept.

- Clique sur Do a system scan and save a logfile.

- Le bloc-notes s'ouvrira, fais un copier/coller de tout son contenu ici dans ton prochain message.

Destrio5 · Answer

Ton PC s'est mangé une infection Vundo.

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.

Destrio5 · Answer

Et le info ?

Jall · Answer

Il est avec pourtant

Destrio5 · Answer

Pardon ^^

Destrio5 · Answer

---> Télécharge Toolbar S&D (Team IDN) sur ton Bureau.
* Lance l'installation du programme en exécutant le fichier téléchargé.
* Double-clique maintenant sur le raccourci de Toolbar S&D.
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
* Poste le rapport généré. (C:\TB.txt)

Destrio5 · Answer

---> Relance ToolBar S&D, fais l'option 2 et poste le rapport.

Jall · Answer

-----------\  ToolBar S&D 1.2.6   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) D CPU 3.40GHz )
   BIOS : Default System BIOS
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 081213-0] 4.8.1229 (Activated)
   C:\ (Local Disk) - NTFS - Total:232 Go (Free:130 Go)
   D:\ (CD or DVD) - UDF - Total:7 Go (Free:0 Go)
   E:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
   Option : [2] ( 14.12.2008|12:51 )

   -----------\ SUPPRESSION

   Supprime! - C:\WINDOWS\System32\SmartShopper

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.google.com/?gws_rd=ssl"
   "Search Page"="https://www.google.com/?gws_rd=ssl"
   "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
   "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"


   --------------------\  Recherche d'autres infections

   C:\WINDOWS\system32\MlVxayxx.ini
   C:\WINDOWS\system32\MlVxayxx.ini2
   [b]==> VUNDO <==/b
 
   --------------------\  ROGUES ..

   C:\DOCUME~1\ADMINI~1\APPLIC~1\DriveCleaner Free
   C:\DOCUME~1\ADMINI~1\APPLIC~1\WinAntiVirus Pro 2006
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinAntiVirus Pro 2006
   C:\PROGRA~1\FICHIE~1\DriveCleaner Free
   C:\PROGRA~1\FICHIE~1\WinAntiVirus Pro 2006
   C:\PROGRA~1\WinAntiVirus Pro 2006




   1 - "C:\ToolBar SD\TB_1.txt" - 14.12.2008|12:46 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 14.12.2008|12:51 - Option : [2]

   -----------\  Fin du rapport a 12:51:44.93

Jall · Answer

Bon je pars manger merci pour ton aide et j'espère que tu pourra m'aider à résoudre ce problème vraiment ch***t

A toute à l'heure

Destrio5 · Answer

---> Télécharge ComboFix.exe de sUBs sur ton Bureau :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\

---> Double-clique sur Combofix.exe
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...".
Accepte en cliquant sur "Oui"

---> Je te conseille vivement d'installer la Console de récupération.

---> Mets-le en langue française F
Tape sur la touche 1 (Yes) pour démarrer le scan.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\

En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

Note : Le rapport se trouve également là : C:\ComboFix\Combofix.txt

Jall · Answer

Alors voilà le rapport de ComboFix et avant son installation, la résolution de mon écran est passée en 800 x 600 automatiquement. Que dois-je faire à présent? ComboFix 08-12-13.03 - Administrateur 2008-12-14 17:15:11.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.2047.1685 [GMT 1:00] Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe * Un nouveau point de restauration a été créé [COLOR=RED][B]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/B][/COLOR] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\docume~1\ADMINI~1\LOCALS~1\Temp\tmp2.tmp c:\documents and settings\Administrateur\Application Data\DriveCleaner Free c:\documents and settings\Administrateur\Application Data\DriveCleaner Free\Logs\update.log c:\documents and settings\Administrateur\Application Data\WinAntiVirus Pro 2006 c:\documents and settings\Administrateur\Application Data\WinAntiVirus Pro 2006\Logs\update.log c:\documents and settings\Administrateur\Application Data\WinAntiVirus Pro 2006\Logs\wa6Support.log c:\documents and settings\Administrateur\Application Data\WinAntiVirus Pro 2006\Logs\winav.log c:\documents and settings\Administrateur\Application Data\WinAntiVirus Pro 2006\PGE.dat c:\documents and settings\Administrateur\err.log c:\documents and settings\Administrateur\ResErrors.log c:\documents and settings\All Users\Application Data\WinAntiVirus Pro 2006 c:\program files\Fichiers communs\drivecleaner free c:\program files\Fichiers communs\winantivirus pro 2006 c:\program files\Fichiers communs\winantivirus pro 2006\err.log c:\program files\winantivirus pro 2006 c:\program files\winantivirus pro 2006\msvcp71.dll c:\program files\winantivirus pro 2006\msvcr71.dll C:\WA6P c:\windows\BM6af6f5cd.txt c:\windows\BM6af6f5cd.xml c:\windows\cookies.ini c:\windows\pskt.ini c:\windows\system32\bwbqscwb.ini c:\windows\system32\disviwki.ini c:\windows\system32\dllvirtual.exe c:\windows\system32\ildofuff.ini c:\windows\system32\lrpqyjca.ini c:\windows\system32\mcrh.tmp c:\windows\system32\MlVxayxx.ini c:\windows\system32\MlVxayxx.ini2 c:\windows\system32\stera.job c:\windows\system32\stera.log c:\windows\system32\uoaxdjwt.ini . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_DHLP -------\Legacy_FOPN -------\Legacy_VSPF -------\Legacy_VSPF_HK -------\Service_FOPN -------\Service_vspf -------\Service_vspf_hk ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-14 au 2008-12-14 )))))))))))))))))))))))))))))))))))) . 2008-12-14 12:44 . 2008-12-14 12:51 d-------- C:\ToolBar SD 2008-12-14 12:31 . 2008-12-14 12:31 d-------- C:\rsit 2008-12-14 12:27 . 2008-12-14 12:27 d-------- c:\program files\Trend Micro 2008-12-14 12:21 . 2008-12-14 12:21 d-------- c:\program files\Intel 2008-12-14 12:21 . 2008-05-01 16:35 53,248 --a------ c:\windows\system32\CSVer.dll 2008-12-14 12:20 . 2008-12-14 12:20 d-------- C:\Intel 2008-12-14 12:11 . 2008-12-14 12:11 d-------- c:\program files\Lavalys 2008-12-14 11:33 . 2008-12-14 11:33 d-------- C:\ATI 2008-12-07 15:50 . 2004-08-04 00:55 16,384 --a------ c:\windows\system32\ipsink.ax 2008-12-07 15:50 . 2004-08-03 23:10 15,360 --a------ c:\windows\system32\drivers\StreamIP.sys 2008-12-07 15:50 . 2004-08-03 23:10 11,136 --a------ c:\windows\system32\drivers\SLIP.sys 2008-12-07 15:29 . 2008-12-07 15:29 d-------- c:\documents and settings\All Users\Application Data\ATI 2008-12-07 15:16 . 2008-02-19 14:37 3,107,788 -ra------ c:\windows\system32\ativvaxx.dat 2008-12-07 15:16 . 2008-02-19 14:37 3,107,788 -ra------ c:\windows\system32\ativva5x.dat 2008-12-07 15:16 . 2008-02-19 14:37 887,724 -ra------ c:\windows\system32\ativva6x.dat 2008-12-07 15:16 . 2008-02-19 15:07 372,736 -ra------ c:\windows\system32\ATIDEMGX.dll 2008-12-07 15:16 . 2008-02-19 15:02 307,200 -ra------ c:\windows\system32\atiiiexx.dll 2008-12-07 15:16 . 2008-01-11 08:50 165,746 -ra------ c:\windows\system32\atiicdxx.dat 2008-12-07 15:16 . 2007-08-31 02:20 7,167 -ra------ c:\windows\system32\atifglpf.xml 2008-12-07 13:27 . 2008-12-07 15:23 d-------- c:\program files\ATI Technologies 2008-12-07 13:24 . 2008-12-07 13:24 12,288 --a------ c:\windows\system32\drivers\EIO64_xp.sys 2008-12-06 15:18 . 2004-08-03 23:10 10,880 --a------ c:\windows\system32\drivers\NdisIP.sys 2008-12-06 15:16 . 2004-08-04 00:55 91,648 --a------ c:\windows\system32\kswdmcap.ax 2008-12-06 15:16 . 2004-08-04 00:55 61,952 --a------ c:\windows\system32\kstvtune.ax 2008-12-06 15:16 . 2004-08-04 00:54 54,784 --a------ c:\windows\system32\vfwwdm32.dll 2008-12-06 15:16 . 2004-08-04 00:55 43,008 --a------ c:\windows\system32\ksxbar.ax 2008-12-06 15:16 . 2004-08-04 00:55 28,672 --a------ c:\windows\system32\vidcap.ax 2008-12-06 14:14 . 2008-12-06 14:15 d-------- c:\program files\ma-config.com 2008-12-06 14:14 . 2008-12-06 14:14 d-------- c:\documents and settings\All Users\Application Data\ma-config.com 2008-12-06 13:42 . 2006-06-14 13:44 12,288 -ra------ c:\windows\system32\drivers\EIO_XP.sys 2008-12-06 13:39 . 2008-12-07 13:24 d-------- c:\program files\ASUS 2008-12-06 13:39 . 2007-10-23 17:48 12,416 --a------ c:\windows\system32\drivers\asusgsb.sys 2008-12-06 13:24 . 2008-12-06 13:24 d-------- c:\program files\My Company Name 2008-12-06 13:19 . 2008-12-06 13:19 d-------- c:\program files\Fichiers communs\ATI Technologies 2008-12-06 13:07 . 2006-12-28 04:44 84,992 -ra------ c:\windows\system32\drivers\AtiHdAud.sys 2008-12-06 13:07 . 2008-01-21 02:48 12,477 -ra------ c:\windows\atiogl.xml 2008-12-06 13:07 . 2008-12-06 13:07 0 --a------ c:\windows\ativpsrm.bin 2008-11-16 20:25 . 2008-11-16 20:25 d-------- c:\documents and settings\All Users\Application Data\Messenger Plus! 2008-11-16 20:23 . 2008-11-16 20:23 d-------- c:\program files\Circle Developement 2008-11-16 20:22 . 2008-11-16 20:22 d-------- c:\program files\Windows Live 2008-11-16 20:22 . 2008-11-16 20:22 d-------- c:\program files\Messenger Plus! Live 2008-11-14 23:01 . 2008-11-14 23:01 d-------- c:\program files\World of Warcraft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-14 11:46 382 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb1942.dat 2008-12-14 11:44 179,200 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb4827.dat 2008-12-14 11:44 142 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb7652.dat 2008-12-14 11:44 13,046 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb5436.dat 2008-12-14 11:44 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb4604.dat 2008-12-13 21:55 196,608 ----a-w c:\windows\system32\drivers\nStandard.bin 2008-12-07 16:14 --------- d-----w c:\documents and settings\Administrateur\Application Data\Microsoft Games 2008-12-07 15:32 --------- d-----w c:\program files\Microsoft Games 2008-12-07 12:24 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-06 12:27 --------- d-----w c:\documents and settings\Administrateur\Application Data\ATI 2008-12-04 16:03 --------- d-----w c:\program files\LimeWire 2008-11-16 19:22 --------- d-----w c:\program files\MSN Messenger 2008-10-23 14:35 19,560 ----a-w c:\documents and settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT 2008-06-24 19:40 49 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb41.dat 2006-11-18 22:10 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb2391.dat 2006-11-16 20:01 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb153.dat 2006-11-13 16:54 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb8253.dat 2006-11-13 16:54 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb3902.dat 2006-10-15 11:21 9,216 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb8467.dat 2006-10-15 11:21 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb6334.dat . ------- Sigcheck ------- 2004-08-05 03:00 14336 1bd6c2f707a275cb7c16fd99fe0f31ca c:\windows\system32\svchost.exe 2004-08-05 03:00 578048 e46fb493e3b33704f0715020cf52106b c:\windows\$NtUninstallKB890859$\user32.dll 2005-03-02 19:20 578048 c34920eb988ce98910bd6b0417f334eb c:\windows\$NtUninstallKB925902$\user32.dll 2007-03-08 16:50 579072 4d88aaf39adabfe45958ea1384e2c4ff c:\windows\system32\user32.dll 2007-03-08 16:50 579072 4d88aaf39adabfe45958ea1384e2c4ff c:\windows\system32\dllcache\user32.dll 2004-08-05 03:00 82944 bc41f51a39d3b255805fdb759b7814ae c:\windows\system32\ws2_32.dll 2006-01-09 19:02 666112 5404e2ead19d7e2a5c4086015062343c c:\windows\$hf_mig$\KB912945\SP2QFE\wininet.dll 2007-12-07 02:42 825344 f4fd487241d3ac291046a22cebd2cf71 c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll 2008-03-01 13:34 827392 5a0093f59b505c008ed0cee615563c72 c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll 2008-04-23 08:19 827392 78d3d2b0be6ad3e6d82ccb115cf74310 c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll 2006-01-09 19:02 662528 e795f45061710e1ed8e80dd4188f5b26 c:\windows\$NtUninstallKB912945$\wininet.dll 2004-08-05 03:00 660480 58fe94ef42e074f4cad8bf02e70e6478 c:\windows\$NtUninstallKB912945_0$\wininet.dll 2006-01-09 19:02 666112 5404e2ead19d7e2a5c4086015062343c c:\windows\$NtUninstallKB918899$\wininet.dll 2006-06-23 12:25 668672 582953780721ac5d38f98cab229ec7b9 c:\windows\$NtUninstallKB922760$\wininet.dll 2006-09-14 09:38 668672 b8b6f05885a6f42724e8d6bfede6bd3f c:\windows\$NtUninstallKB925454$\wininet.dll 2006-10-23 16:34 668672 efa0c2870cba1747809a13e09f35bf82 c:\windows\$NtUninstallKB928090$\wininet.dll 2007-01-04 15:02 669184 114342601ac7ea73b0d2a0ed8505b8b9 c:\windows\$NtUninstallKB931768$\wininet.dll 2007-02-19 16:23 669696 1bde6d5dba35797eca8db8fcb80fc015 c:\windows\$NtUninstallKB933566$\wininet.dll 2007-04-18 13:44 669696 a3bf56a786b277e881fd9137f55f0b4b c:\windows\$NtUninstallKB937143$\wininet.dll 2007-06-26 15:36 669696 19058fbdc72f7bae085369c6d0a7d074 c:\windows\$NtUninstallKB939653$\wininet.dll 2007-08-22 13:57 669696 4f6a45b54d26708e2c2bf2c43d83edea c:\windows\$NtUninstallKB942615$\wininet.dll 2007-10-11 06:59 670208 0465cde31add22f6233ffb4fe4af01cf c:\windows\$NtUninstallKB944533$\wininet.dll 2007-12-07 01:47 670208 c057d734b1951393fd07e2607513d4d9 c:\windows\ie7\wininet.dll 2007-08-13 18:54 818688 a4a0fc92358f39538a6494c42ef99fe9 c:\windows\ie7updates\KB944533-IE7\wininet.dll 2007-12-07 03:08 824832 4fc90bece54fac81b0090b94e27bfb6b c:\windows\ie7updates\KB947864-IE7\wininet.dll 2008-03-01 13:58 826368 8e027981ddffa690d456fe18b37415a0 c:\windows\ie7updates\KB950759-IE7\wininet.dll md5deep: c:\windows\SoftwareDistribution\Download\[u]0[/u]54c3b7a8a3c5c57c0110276bdacfc86\SP2GDR\wininet.dll: No such file or directory md5deep: c:\windows\SoftwareDistribution\Download\[u]0[/u]54c3b7a8a3c5c57c0110276bdacfc86\SP2QFE\wininet.dll: No such file or directory 2008-04-23 05:16 826368 02d6aabd5f5a32c61478b5cdfe50e4a8 c:\windows\system32\wininet.dll 2008-04-23 05:16 826368 02d6aabd5f5a32c61478b5cdfe50e4a8 c:\windows\system32\dllcache\wininet.dll 2006-04-20 13:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys 2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys 2004-08-05 03:00 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB917953$\tcpip.sys 2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$NtUninstallKB941644$\tcpip.sys 2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\system32\dllcache\tcpip.sys 2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\system32\drivers\tcpip.sys 2004-08-05 03:00 506368 d2de785aeab0bb8ca4c14a8a199dbe4e c:\windows\system32\winlogon.exe 2004-08-05 03:00 182912 558635d3af1c7546d26067d5d9b6959e c:\windows\system32\drivers\ndis.sys 2004-08-05 03:00 29056 4448006b6bc60e6c027932cfc38d6855 c:\windows\system32\drivers\ip6fw.sys 2004-08-03 23:49 2017280 35567c8c50986c2bc5c3efd79cb045e4 c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe 2005-03-02 19:13 2017280 90e59ecf2d0541312c9eb36568810588 c:\windows\$NtUninstallKB929338$\ntkrnlpa.exe 2006-12-19 19:45 2019328 c46168890982d41fb8accdbac8e0a56c c:\windows\$NtUninstallKB931784$\ntkrnlpa.exe 2007-02-28 17:08 2061440 7a56a64eb50399613587e90292dd2aab c:\windows\Driver Cache\i386\ntkrnlpa.exe 2007-02-28 17:08 2019328 3e3df9f5d56b719f055e7d652e79f96b c:\windows\system32\ntkrnlpa.exe 2007-02-28 17:08 2061440 7a56a64eb50399613587e90292dd2aab c:\windows\system32\dllcache\ntkrnlpa.exe 2004-08-03 23:48 2150400 36f32a5a83df734e022734d93860a9a4 c:\windows\$NtUninstallKB890859$\ntoskrnl.exe 2005-03-02 19:13 2137600 5967696e9138c5337437e6b8653ab836 c:\windows\$NtUninstallKB929338$\ntoskrnl.exe 2006-12-19 19:45 2139648 d9f5291648962a1733f8d3e59da47bee c:\windows\$NtUninstallKB931784$\ntoskrnl.exe 2007-02-28 17:08 2184192 8e244108562e0e452eb68dff64cb08a9 c:\windows\Driver Cache\i386\ntoskrnl.exe 2007-02-28 17:08 2139648 de41f3b43b9f15e08ccd4b98a7bb2ca3 c:\windows\system32\ntoskrnl.exe 2007-02-28 17:08 2184192 8e244108562e0e452eb68dff64cb08a9 c:\windows\system32\dllcache\ntoskrnl.exe 2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 c:\windows\explorer.exe 2007-06-13 14:10 1037312 b795475444d6d57a572c14b9e1a29839 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe 2004-08-05 03:00 1036288 4c33e5b9a6197b6ed215f6cfba0a2daa c:\windows\$NtUninstallKB938828$\explorer.exe 2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 c:\windows\system32\dllcache\explorer.exe 2004-08-05 03:00 108544 732e0b1abaace15d80ec19056b0a2af9 c:\windows\system32\services.exe 2004-08-05 03:00 13312 9f3744a5c6f49291a7a685040a013399 c:\windows\system32\lsass.exe 2004-08-05 03:00 15360 5584247b568c2e53934873f4b655fe6a c:\windows\system32\ctfmon.exe 2005-06-11 01:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe 2004-08-05 03:00 57856 b4ef928e4fad79364a80acba6d999934 c:\windows\$NtUninstallKB896423$\spoolsv.exe 2005-06-11 00:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\system32\spoolsv.exe 2004-08-05 03:00 25088 d6d65ea32b190401b57edb6706f29669 c:\windows\system32\userinit.exe 2004-08-05 03:00 297984 7d521b8cf926459e270d18c559323815 c:\windows\system32\termsrv.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-12 68856] "EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2008-07-21 2752512] "ASUS SmartDoctor"="c:\program files\ASUS\SmartDoctor\SmartDoctor.exe" [2008-03-07 1130496] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PTHOSTTR"="c:\program files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2005-10-04 86016] "SetRefresh"="c:\program files\Compaq\SetRefresh\SetRefresh.exe" [2003-11-20 525824] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-11-14 286720] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2007-11-15 267048] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440] "ASUSGamerOSD"="c:\program files\ASUS\GamerOSD\GamerOSD.exe" [2007-10-23 380928] "Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe" [2005-01-07 c:\windows\system32\hdashcut.exe] "RTHDCPL"="RTHDCPL.EXE" [2005-03-08 c:\windows\RTHDCPL.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360] Sonic CinePlayer Quick Launch.lnk - c:\program files\Fichiers communs\Sonic Shared\CineTray.exe [2005-10-15 114688] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB] 2001-12-20 22:34 24576 c:\program files\Stardock\Object Desktop\ThemeManager\fastload.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=wbsys.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3acm"= l3codecp.acm "VIDC.ACDV"= ACDV.dll "vidc.asv2"= asusasv2.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "c:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu(tm)\game.dat"= "c:\Program Files\LimeWire\LimeWire.exe"= "c:\Program Files\Messenger\msmsgs.exe"= "c:\Valve\Steam\steamapps\dragon2434\condition zero\hl.exe"= "c:\Documents and Settings\Administrateur\Mes documents\Warcraft III\Warcraft III.exe"= "c:\Documents and Settings\Administrateur\Mes documents\Warcraft III\War3.exe"= "c:\World of Warcraft\WoW-1.12.0-frFR-downloader.exe"= "c:\World of Warcraft\WoW-1.12.x-to-2.0.1-frFR-patch-downloader.exe"= "c:\World of Warcraft\WoW-2.0.3-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.3.6299-to-2.0.5.6320-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.5.6320-to-2.0.6.6337-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.6.6337-to-2.0.7.6383-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.7.6383-to-2.0.8.6403-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.8.6403-to-2.0.10.6448-frFR-downloader.exe"= "c:\Program Files\MSN Messenger\msnmsgr.exe"= "c:\Program Files\MSN Messenger\livecall.exe"= "c:\World of Warcraft\BackgroundDownloader.exe"= "c:\Program Files\EA GAMES\Battlefield 1942\BF1942.exe"= "c:\Valve\Steam\Steam.exe"= "c:\Program Files\iTunes\iTunes.exe"= "c:\Program Files\NAMCO BANDAI Games\Warhammer® Mark of Chaos\Warhammer.exe"= "c:\Program Files\Electronic Arts\EADM\Core.exe"= "c:\Program Files\Microsoft Games\Gears of War\Binaries\WarGame-G4WLive.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3724:TCP"= 3724:TCP:Blizzard Downloader: 3724 R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-11-09 78416] R1 EIO_XP;EIO_XP;\??\c:\windows\system32\drivers\EIO_XP.sys [2008-12-06 12288] R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-11-09 20560] R3 Video3D;ASUS Video3D Service;c:\windows\system32\Drivers\Video3D32.sys [2008-12-07 10752] S3 {DEF85C80-216A-43ab-AF70-1665EDBE2780};{DEF85C80-216A-43ab-AF70-1665EDBE2780};\??\c:\windows\TEMP\11.tmp [] S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" [2008-11-17 195752] S3 pnicml;pnicml;\??\c:\docume~1\ADMINI~1\LOCALS~1\Temp\pnicml.sys [] . Contenu du dossier 'Tâches planifiées' 2008-09-28 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{56F69795-45AC-4C52-9E8A-E9C9E031A842} - c:\windows\system32\xxyaxVlM.dll HKCU-Run-Steam - (no file) HKLM-Run-BMN - c:\program files\Fichiers communs\VirusGarde\bm.exe dm=http://virusgarde.com ad=http://virusgarde.com HKLM-Run-Device Detector - DevDetect.exe HKLM-Run-Windows Acer Service - acersv.exe HKLM-Run-Windows svchost - avserv.exe Notify-iifCSMFw - iifCSMFw.dll . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.com/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 mWindow Title = uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000 O16 -: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://ma-config.com/activex/hardwaredetection_3_0_4_0.cab c:\windows\Downloaded Program Files\hardwaredetection.inf . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-14 17:20:42 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{DEF85C80-216A-43ab-AF70-1665EDBE2780}] "ImagePath"="\??\c:\windows\TEMP\11.tmp" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(672) c:\windows\system32\Ati2evxx.dll c:\program files\Stardock\Object Desktop\ThemeManager\fastload.dll . ------------------------ Autres processus actifs ------------------------ . c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\windows\ATKKBService.exe c:\program files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe c:\program files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe c:\program files\Fichiers communs\Symantec Shared\Security Center\SymSCUI.exe c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe c:\program files\iPod\bin\iPodService.exe c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe . ************************************************************************** . Heure de fin: 2008-12-14 17:24:38 - La machine a redémarré ComboFix-quarantined-files.txt 2008-12-14 16:24:35 Avant-CF: 143'401'283'584 octets libres Après-CF: 148,994,486,272 octets libres 315 --- E O F --- 2008-06-11 11:22:50

Destrio5 · Answer

Tu peux changer la résolution ?

---> Télécharge Lop S&D sur ton Bureau.
---> Double-clique dessus pour lancer l'installation.
---> Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau.
---> Sélectionne la langue souhaitée, puis choisis l'option 1 (Recherche).
---> Patiente jusqu'à la fin du scan.
---> Poste le rapport généré (C:\lopR.txt).

Jall · Answer

Oui j'ai pu changer la résolution de l'écran

 --------------------\  Lop S&D 4.2.4-9c   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) D CPU 3.40GHz )
   BIOS : Default System BIOS
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 081213-0] 4.8.1229 (Activated)
   C:\ (Local Disk) - NTFS - Total:232 Go (Free:138 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
   Option : [1] ( 14.12.2008|18:40 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [15.10.2006|12:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\ACD Systems
   [15.10.2006|19:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
   [15.10.2006|19:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\AdobeUM
   [01.09.2007|10:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
   [06.12.2008|13:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
   [09.10.2006|07:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
   [09.10.2006|16:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [16.02.2008|20:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
   [23.08.2007|19:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\La Bataille pour la Terre du Milieu
   [05.08.2008|20:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Leadertech
   [01.02.2007|17:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [07.12.2008|15:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [07.12.2008|17:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft Games
   [17.06.2008|18:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\SecuROM
   [05.08.2008|20:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
   [30.09.2008|17:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\SPORE
   [05.01.2007|18:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
   [13.10.2006|16:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
   [25.03.2008|10:16] C:\DOCUME~1\ADMINI~1\APPLIC~1	eamspeak2
   [22.06.2008|21:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\VirusGarde

   [15.10.2006|12:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
   [09.10.2006|07:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [12.08.2007|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [12.08.2007|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [07.12.2008|15:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
   [27.09.2008|15:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [29.10.2006|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [09.10.2006|07:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpqLog
   [06.12.2008|14:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [16.11.2008|20:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [08.11.2008|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [22.06.2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMon
   [24.06.2008|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [03.03.2007|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [24.03.2007|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [09.10.2006|07:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Google
   [09.10.2006|16:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [09.10.2006|07:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [09.10.2006|07:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [14.12.2008|17:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [03.03.2007|11:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [03.11.2006|20:05] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [11.07.2007|13:10] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [28.09.2008 11:55][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [14.12.2008 17:20][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05.08.2004 03:00][-rah-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [15.10.2006|12:00] C:\Program Files\ACD Systems
   [09.10.2006|07:18] C:\Program Files\Adobe
   [12.09.2007|17:42] C:\Program Files\Altiris
   [24.06.2008|20:40] C:\Program Files\Alwil Software
   [28.09.2008|11:56] C:\Program Files\Apple Software Update
   [07.12.2008|13:24] C:\Program Files\ASUS
   [07.12.2008|15:23] C:\Program Files\ATI Technologies
   [09.10.2006|07:17] C:\Program Files\Broadcom
   [16.11.2008|20:23] C:\Program Files\Circle Developement
   [06.12.2006|18:46] C:\Program Files\Common Files
   [09.10.2006|07:23] C:\Program Files\Compaq
   [09.10.2006|16:03] C:\Program Files\ComPlus Applications
   [09.02.2008|14:58] C:\Program Files\DivX
   [08.09.2007|07:38] C:\Program Files\EA GAMES
   [30.09.2008|17:50] C:\Program Files\Electronic Arts
   [14.12.2008|17:17] C:\Program Files\Fichiers communs
   [05.02.2007|11:40] C:\Program Files\Google
   [09.10.2006|07:22] C:\Program Files\Hewlett-Packard
   [09.10.2006|07:22] C:\Program Files\HPQ
   [07.12.2008|13:24] C:\Program Files\InstallShield Installation Information
   [14.12.2008|12:21] C:\Program Files\Intel
   [11.06.2008|12:22] C:\Program Files\Internet Explorer
   [25.11.2007|10:25] C:\Program Files\iPod
   [25.11.2007|10:25] C:\Program Files\iTunes
   [09.10.2006|07:14] C:\Program Files\Java
   [14.12.2008|12:11] C:\Program Files\Lavalys
   [04.12.2008|17:03] C:\Program Files\LimeWire
   [06.12.2008|14:15] C:\Program Files\ma-config.com
   [22.09.2008|12:13] C:\Program Files\Maxis
   [13.10.2006|17:23] C:\Program Files\Messenger
   [16.11.2008|20:22] C:\Program Files\Messenger Plus! Live
   [09.10.2006|16:03] C:\Program Files\microsoft frontpage
   [07.12.2008|16:32] C:\Program Files\Microsoft Games
   [17.01.2008|16:28] C:\Program Files\Microsoft Office
   [17.01.2008|16:28] C:\Program Files\Microsoft Visual Studio
   [09.10.2006|16:03] C:\Program Files\Movie Maker
   [11.10.2006|17:51] C:\Program Files\MSN
   [09.10.2006|16:03] C:\Program Files\MSN Gaming Zone
   [16.11.2008|20:22] C:\Program Files\MSN Messenger
   [06.01.2007|00:45] C:\Program Files\MSXML 4.0
   [06.12.2008|13:24] C:\Program Files\My Company Name
   [16.02.2008|20:44] C:\Program Files\NAMCO BANDAI Games
   [09.10.2006|16:03] C:\Program Files\NetMeeting
   [24.06.2008|21:48] C:\Program Files\Norton AntiVirus
   [09.10.2006|16:03] C:\Program Files\Online Services
   [13.06.2007|16:20] C:\Program Files\Outlook Express
   [15.10.2006|12:22] C:\Program Files\PuzzleDesktop
   [25.11.2007|10:24] C:\Program Files\QuickTime
   [09.10.2006|08:06] C:\Program Files\Raccourcis de programmes
   [09.10.2006|07:18] C:\Program Files\Realtek
   [31.05.2008|13:11] C:\Program Files\Rema Fahrschule
   [09.10.2006|07:22] C:\Program Files\Roxio
   [09.10.2006|16:03] C:\Program Files\Services en ligne
   [22.03.2007|19:59] C:\Program Files\SLD Codec Pack
   [11.10.2006|17:55] C:\Program Files\Stardock
   [24.06.2008|21:52] C:\Program Files\Symantec
   [15.10.2006|11:49] C:\Program Files\Teamspeak2_RC2
   [14.12.2008|12:27] C:\Program Files\Trend Micro
   [09.10.2006|16:03] C:\Program Files\Uninstall Information
   [16.11.2008|20:22] C:\Program Files\Windows Live
   [12.09.2007|19:46] C:\Program Files\Windows Media Connect 2
   [03.03.2007|11:39] C:\Program Files\Windows Media Player
   [09.10.2006|16:03] C:\Program Files\Windows NT
   [09.10.2006|16:03] C:\Program Files\WindowsUpdate
   [14.11.2008|23:01] C:\Program Files\World of Warcraft
   [24.05.2008|17:00] C:\Program Files\WowCartographe
   [09.10.2006|16:03] C:\Program Files\xerox
   [24.03.2007|11:36] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [24.06.2008|21:42] C:\Program Files\Fichiers communs\ACD Systems
   [15.10.2006|19:05] C:\Program Files\Fichiers communs\Adobe
   [12.08.2007|15:08] C:\Program Files\Fichiers communs\Apple
   [06.12.2008|13:19] C:\Program Files\Fichiers communs\ATI Technologies
   [15.01.2007|17:44] C:\Program Files\Fichiers communs\Blizzard Entertainment
   [17.01.2008|16:28] C:\Program Files\Fichiers communs\Designer
   [09.10.2006|07:18] C:\Program Files\Fichiers communs\InstallShield
   [09.10.2006|07:14] C:\Program Files\Fichiers communs\Java
   [17.01.2008|16:29] C:\Program Files\Fichiers communs\Microsoft Shared
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\MSSoap
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\ODBC
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\Services
   [09.10.2006|07:22] C:\Program Files\Fichiers communs\Sonic Shared
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\SpeechEngines
   [11.10.2006|17:55] C:\Program Files\Fichiers communs\Stardock
   [24.06.2008|21:52] C:\Program Files\Fichiers communs\Symantec Shared
   [17.01.2008|16:28] C:\Program Files\Fichiers communs\System
   [10.01.2007|20:12] C:\Program Files\Fichiers communs\Teleca Shared

   --------------------\  Process

   ( 40 Processes )

   IEXPLORE.EXE ~ [PID:1576]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\Program Files\Circle Developement
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertstream[1].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adultfriendfinder[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising.marketnetwork[1].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adex.bigpoint[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@bigpoint[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adopt.euroclick[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@sr2.livemediasrv[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@sr2.livemediasrv[3].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@pacificpoker[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@partygaming.122.2o7[1].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@partypoker[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@lasvegascasino-web[1].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@vegas-millions[1].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.vegas-millions[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@2xmoinscher[1].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.2xmoinscher[2].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@888[1].txt
   C:\DOCUME~1\ADMINI~1\Cookies\administrateur@888[2].txt
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-14 18:41:33
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 3
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:2082][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
   [F:208][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 14.12.2008|18:42 - Option : [1]

   --------------------\  Fin du rapport a 18:42:41

Destrio5 · Answer

---> Relance Lop S&D.
---> Choisis cette fois-ci l'option 2 (Suppression).
---> Ne ferme pas la fenêtre lors de la suppression !
---> Poste le rapport généré (C:\lopR.txt).

(Si le Bureau ne réapparait pas, presse Ctrl+Alt+Suppr, Onglet Fichier, Nouvelle tâche, tape explorer.exe et valide)

Jall · Answer

Ok c'est fait


   --------------------\  Lop S&D 4.2.4-9c   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
   X86-based PC ( Multiprocessor Free :               Intel(R) Pentium(R) D CPU 3.40GHz )
   BIOS : Default System BIOS
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 081213-0] 4.8.1229 (Activated)
   C:\ (Local Disk) - NTFS - Total:232 Go (Free:138 Go)
   D:\ (CD or DVD)
   E:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
   Option : [2] ( 14.12.2008|18:51 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertstream[1].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adultfriendfinder[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising.marketnetwork[1].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adex.bigpoint[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@bigpoint[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@adopt.euroclick[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@sr2.livemediasrv[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@sr2.livemediasrv[3].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@pacificpoker[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@partygaming.122.2o7[1].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@partypoker[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@lasvegascasino-web[1].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@vegas-millions[1].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.vegas-millions[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@2xmoinscher[1].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@www.2xmoinscher[2].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@888[1].txt
   Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@888[2].txt
   Supprime! - C:\Program Files\Circle Developement
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [15.10.2006|12:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\ACD Systems
   [15.10.2006|19:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
   [15.10.2006|19:05] C:\DOCUME~1\ADMINI~1\APPLIC~1\AdobeUM
   [01.09.2007|10:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
   [06.12.2008|13:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\ATI
   [09.10.2006|07:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
   [09.10.2006|16:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [16.02.2008|20:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\InstallShield
   [23.08.2007|19:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\La Bataille pour la Terre du Milieu
   [05.08.2008|20:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Leadertech
   [01.02.2007|17:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [07.12.2008|15:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [07.12.2008|17:14] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft Games
   [17.06.2008|18:03] C:\DOCUME~1\ADMINI~1\APPLIC~1\SecuROM
   [05.08.2008|20:20] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sonic
   [30.09.2008|17:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\SPORE
   [05.01.2007|18:35] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
   [13.10.2006|16:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
   [25.03.2008|10:16] C:\DOCUME~1\ADMINI~1\APPLIC~1	eamspeak2
   [22.06.2008|21:00] C:\DOCUME~1\ADMINI~1\APPLIC~1\VirusGarde

   [15.10.2006|12:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ACD Systems
   [09.10.2006|07:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [12.08.2007|15:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [12.08.2007|15:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [07.12.2008|15:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ATI
   [27.09.2008|15:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
   [29.10.2006|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [09.10.2006|07:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpqLog
   [06.12.2008|14:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [16.11.2008|20:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [08.11.2008|19:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [22.06.2008|19:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SalesMon
   [24.06.2008|21:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [03.03.2007|11:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [24.03.2007|13:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [09.10.2006|07:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Google
   [09.10.2006|16:03] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [09.10.2006|07:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [09.10.2006|07:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

   [14.12.2008|17:28] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [03.03.2007|11:40] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [03.11.2006|20:05] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [11.07.2007|13:10] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [28.09.2008 11:55][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [14.12.2008 17:20][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05.08.2004 03:00][-rah-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [15.10.2006|12:00] C:\Program Files\ACD Systems
   [09.10.2006|07:18] C:\Program Files\Adobe
   [12.09.2007|17:42] C:\Program Files\Altiris
   [24.06.2008|20:40] C:\Program Files\Alwil Software
   [28.09.2008|11:56] C:\Program Files\Apple Software Update
   [07.12.2008|13:24] C:\Program Files\ASUS
   [07.12.2008|15:23] C:\Program Files\ATI Technologies
   [09.10.2006|07:17] C:\Program Files\Broadcom
   [06.12.2006|18:46] C:\Program Files\Common Files
   [09.10.2006|07:23] C:\Program Files\Compaq
   [09.10.2006|16:03] C:\Program Files\ComPlus Applications
   [09.02.2008|14:58] C:\Program Files\DivX
   [08.09.2007|07:38] C:\Program Files\EA GAMES
   [30.09.2008|17:50] C:\Program Files\Electronic Arts
   [14.12.2008|17:17] C:\Program Files\Fichiers communs
   [05.02.2007|11:40] C:\Program Files\Google
   [09.10.2006|07:22] C:\Program Files\Hewlett-Packard
   [09.10.2006|07:22] C:\Program Files\HPQ
   [07.12.2008|13:24] C:\Program Files\InstallShield Installation Information
   [14.12.2008|12:21] C:\Program Files\Intel
   [11.06.2008|12:22] C:\Program Files\Internet Explorer
   [25.11.2007|10:25] C:\Program Files\iPod
   [25.11.2007|10:25] C:\Program Files\iTunes
   [09.10.2006|07:14] C:\Program Files\Java
   [14.12.2008|12:11] C:\Program Files\Lavalys
   [04.12.2008|17:03] C:\Program Files\LimeWire
   [06.12.2008|14:15] C:\Program Files\ma-config.com
   [22.09.2008|12:13] C:\Program Files\Maxis
   [13.10.2006|17:23] C:\Program Files\Messenger
   [16.11.2008|20:22] C:\Program Files\Messenger Plus! Live
   [09.10.2006|16:03] C:\Program Files\microsoft frontpage
   [07.12.2008|16:32] C:\Program Files\Microsoft Games
   [17.01.2008|16:28] C:\Program Files\Microsoft Office
   [17.01.2008|16:28] C:\Program Files\Microsoft Visual Studio
   [09.10.2006|16:03] C:\Program Files\Movie Maker
   [11.10.2006|17:51] C:\Program Files\MSN
   [09.10.2006|16:03] C:\Program Files\MSN Gaming Zone
   [16.11.2008|20:22] C:\Program Files\MSN Messenger
   [06.01.2007|00:45] C:\Program Files\MSXML 4.0
   [06.12.2008|13:24] C:\Program Files\My Company Name
   [16.02.2008|20:44] C:\Program Files\NAMCO BANDAI Games
   [09.10.2006|16:03] C:\Program Files\NetMeeting
   [24.06.2008|21:48] C:\Program Files\Norton AntiVirus
   [09.10.2006|16:03] C:\Program Files\Online Services
   [13.06.2007|16:20] C:\Program Files\Outlook Express
   [15.10.2006|12:22] C:\Program Files\PuzzleDesktop
   [25.11.2007|10:24] C:\Program Files\QuickTime
   [09.10.2006|08:06] C:\Program Files\Raccourcis de programmes
   [09.10.2006|07:18] C:\Program Files\Realtek
   [31.05.2008|13:11] C:\Program Files\Rema Fahrschule
   [09.10.2006|07:22] C:\Program Files\Roxio
   [09.10.2006|16:03] C:\Program Files\Services en ligne
   [22.03.2007|19:59] C:\Program Files\SLD Codec Pack
   [11.10.2006|17:55] C:\Program Files\Stardock
   [24.06.2008|21:52] C:\Program Files\Symantec
   [15.10.2006|11:49] C:\Program Files\Teamspeak2_RC2
   [14.12.2008|12:27] C:\Program Files\Trend Micro
   [09.10.2006|16:03] C:\Program Files\Uninstall Information
   [16.11.2008|20:22] C:\Program Files\Windows Live
   [12.09.2007|19:46] C:\Program Files\Windows Media Connect 2
   [03.03.2007|11:39] C:\Program Files\Windows Media Player
   [09.10.2006|16:03] C:\Program Files\Windows NT
   [09.10.2006|16:03] C:\Program Files\WindowsUpdate
   [14.11.2008|23:01] C:\Program Files\World of Warcraft
   [24.05.2008|17:00] C:\Program Files\WowCartographe
   [09.10.2006|16:03] C:\Program Files\xerox
   [24.03.2007|11:36] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [24.06.2008|21:42] C:\Program Files\Fichiers communs\ACD Systems
   [15.10.2006|19:05] C:\Program Files\Fichiers communs\Adobe
   [12.08.2007|15:08] C:\Program Files\Fichiers communs\Apple
   [06.12.2008|13:19] C:\Program Files\Fichiers communs\ATI Technologies
   [15.01.2007|17:44] C:\Program Files\Fichiers communs\Blizzard Entertainment
   [17.01.2008|16:28] C:\Program Files\Fichiers communs\Designer
   [09.10.2006|07:18] C:\Program Files\Fichiers communs\InstallShield
   [09.10.2006|07:14] C:\Program Files\Fichiers communs\Java
   [17.01.2008|16:29] C:\Program Files\Fichiers communs\Microsoft Shared
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\MSSoap
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\ODBC
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\Services
   [09.10.2006|07:22] C:\Program Files\Fichiers communs\Sonic Shared
   [09.10.2006|16:03] C:\Program Files\Fichiers communs\SpeechEngines
   [11.10.2006|17:55] C:\Program Files\Fichiers communs\Stardock
   [24.06.2008|21:52] C:\Program Files\Fichiers communs\Symantec Shared
   [17.01.2008|16:28] C:\Program Files\Fichiers communs\System
   [10.01.2007|20:12] C:\Program Files\Fichiers communs\Teleca Shared

   --------------------\  Process

   ( 40 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-12-14 18:52:37
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 3
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:2063][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
   [F:277][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 14.12.2008|18:42 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 14.12.2008|18:53 - Option : [2]

   --------------------\  Fin du rapport a 18:53:22

Destrio5 · Answer

---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
---> Sélectionne Exécuter un examen rapide.
---> Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
---> Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.

Jall · Answer

Résultat :

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1500
Windows 5.1.2600 Service Pack 2

14.12.2008 19:15:06
mbam-log-2008-12-14 (19-15-06).txt

Type de recherche: Examen rapide
Eléments examinés: 48733
Temps écoulé: 2 minute(s), 44 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{def85c80-216a-43ab-af70-1665edbe2780} (Spyware.Sinowal) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ugac (Rogue.PCSecureSystem) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\SalesMon (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\SalesMon\Data (Rogue.Multiple) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.

Destrio5 · Answer

---> Relance MBAM, van dans Quarantaine et supprime tout.

---> Désinstalle Norton avec ceci :
ftp://ftp.symantec.com/public/francais/removal_tools/Norton_Removal_Tool.exe

---> Supprime le dossier RSIT situé dans C:\

---> Refais un scan RSIT et poste les deux rapports.

Jall · Answer

Voilà le premier je te passe tout de suite le 2ème

Logfile of random's system information tool 1.04 (written by random/random)
Run by Administrateur at 2008-12-14 19:41:52
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 142 GB (60%) free of 238 GB
Total RAM: 2047 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:41:57, on 14.12.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Stardock\Object Desktop\ThemeManager\wbload.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe  /start
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Sonic CinePlayer Quick Launch.lnk = C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin
pjpi150.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_0_4_0.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)

Jall · Answer

info.txt logfile of random's system information tool 1.04 2008-12-14 19:42:00

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
ACDSee 8-->MsiExec.exe /I{DD54C6DE-B787-406D-A5A7-A49E0471E45B}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 6.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-000000000001}
Adobe Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Apple Mobile Device Support-->MsiExec.exe /I{B5C209B1-8DDB-4642-A573-375B951514CB}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ASUS Gamer OSD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{315ACD04-BCEB-478B-9B1D-5431D0E6CB11}\setup.exe" -l0x40c  -removeonly
ASUS Smart Doctor-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{12E11FBB-7CA6-4A86-834D-5E6390D51009} /l1036 
ASUS VideoSecurity Online-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{7A529246-912F-4C40-A82A-E608DB702FD7} 
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI AVIVO Codecs-->MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI Parental Control & Encoder-->MsiExec.exe /I{9862B19F-4CAD-4EED-920F-2F378D84393F}
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Battlefield 1942: Secret Weapons of WWII-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B73B4A99-4173-4747-BBEC-0F05E966F9D2}\setup.exe" -l0x40c 
Battlefield 1942: The Road To Rome-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D057AA08-8CBF-42E3-9EAB-23B8FED1C279}\setup.exe" -l0x40c 
Battlefield 1942-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}\setup.exe" -l0x40c 
Broadcom Management Programs-->MsiExec.exe /I{063BF5C1-89DB-433F-9D74-2E4F043E3F5E}
Canon MP150-->"C:\WINDOWS\system32\CanonMP Uninstaller Information\{CA9A3609-3ECC-4574-8824-A8161A71A603}\DelDrv.exe" /U:{CA9A3609-3ECC-4574-8824-A8161A71A603} /L0x000c
Catalyst Control Center - Branding-->MsiExec.exe /I{4893A35F-0A23-48EC-8E74-24969244D6F2}
Companion wizard-->C:\Program Files\Common Files\Companion Wizard\compwiz.exe -u
Condition Zero Deleted Scenes-->"C:\Valve\Steam\steam.exe" steam://uninstall/100
Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB935448)-->"C:\WINDOWS\$NtUninstallKB935448$\spuninst\spuninst.exe"
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB885884-->C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Counter-Strike: Condition Zero-->C:\Valve\CONDIT~1\UNWISE.EXE C:\Valve\CONDIT~1\INSTALL.LOG
DivX Content Uploader-->C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EA Download Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036 
EVEREST Ultimate Edition v4.50-->"C:\Program Files\Lavalys\EVEREST Ultimate Edition\unins000.exe"
Fraps-->"C:\Fraps\uninstall.exe"
Gears of War-->C:\Program Files\InstallShield Installation Information\{1170D24F-42B7-40CF-AA1B-6395CE562354}\Setup.exe -runfromtemp -l0x040c
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar3.dll"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
HP BIOS Configuration for ProtectTools 2.00 A17-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AE052EF7-2640-48D7-8915-69B810D975CB}\Setup.Exe" -l0x40c  biosuninst
HP Help and Support 4.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\SETUP.exe" -l0x40c  -removeonly
HP ProtectTools Security Manager 2.00 B3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{914E1AB1-DCA0-4A7D-935F-B58C4B887A2B}\SETUP.exe" -l0x40c  hpquninst
HP Safety and Comfort Guide-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AAC4426A-42CD-4B4E-8057-9738C96F2C8F}\SETUP.EXE" -l0x40c 
Impossible Creatures-->"C:\Program Files\Microsoft Games\Impossible Creatures\UNINSTAL.EXE" /runtemp /addremove
iTunes-->MsiExec.exe /I{4F5CE18C-D97D-48FF-A510-A0D90C918294}
J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
La Bataille pour la Terre du Milieu(tm)-->C:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu(tm)\EAUninstall.exe
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Les Sims-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Maxis\Les Sims\Uninst.isu"
LimeWire 4.18.8-->"C:\Program Files\LimeWire\uninstall.exe"
Ma-Config.com-->MsiExec.exe /X{3A4EE7A4-356E-43B7-A4A3-9C55B22A05B3}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Messenger Plus! Live & Sponsor (CiD)-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{20DEB77C-21D6-4D22-BB47-233E47613D57}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896424)-->"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899589)-->"C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB904706)-->"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911567)-->"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB912919)-->"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913433)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917422)-->"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917953)-->"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918899)-->"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920214)-->"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921398)-->"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921883)-->"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922616)-->"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922760)-->"C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923694)-->"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924191)-->"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925454)-->"C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925486)-->"C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928090)-->"C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929969)-->"C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931768)-->"C:\WINDOWS\$NtUninstallKB931768$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933566)-->"C:\WINDOWS\$NtUninstallKB933566$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB937143)-->"C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB937894)-->"C:\WINDOWS\$NtUninstallKB937894$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB939653)-->"C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB942615)-->"C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944533)-->"C:\WINDOWS\$NtUninstallKB944533$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB912945)-->"C:\WINDOWS\$NtUninstallKB912945$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB929338)-->"C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB931836)-->"C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB933360)-->"C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB936357)-->"C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942840)-->"C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB946627)-->"C:\WINDOWS\$NtUninstallKB946627$\spuninst\spuninst.exe"
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
PunkBuster pour Battlefield 1942-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{127B684B-A002-44C8-99A7-6CF8F1E26873}\setup.exe" -l0x40c 
PuzzleDesktop-->C:\Program Files\PuzzleDesktop\uninstall.exe
QuickTime-->MsiExec.exe /I{9763E36A-08E9-4228-BBCE-12989A4EB1A8}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" REMOVE
Roxio CinePlayer-->MsiExec.exe /I{26792CA7-D87A-4DBE-896B-C2F66B344511}
Search Enhancer-->C:\WINDOWS\system32\SearchTool\uninstallSE.exe
SLD Codec Pack-->C:\Program Files\SLD Codec Pack\uninstall.exe
Software Setup-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\COMPAQ\Software Setup\Uninst.isu" -c"C:\Program Files\COMPAQ\Software Setup\CPQUNST.DLL"
SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly
Steam-->C:\Valve\Steam\UNWISE.EXE C:\Valve\Steam\INSTALL.LOG
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Warhammer® Mark of Chaos-->C:\Program Files\InstallShield Installation Information\{5F374D5D-DB43-4263-9C29-BAB2C93FEFE6}\setup.exe -runfromtemp -l0x040c -removeonly
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
World of Warcraft Desktop-->C:\PROGRA~1\Stardock\OBJECT~1\THEMEM~1	hememgr.exe /uninstallwise
World of Warcraft-->C:\Program Files\Fichiers communs\Blizzard Entertainment\World of Warcraft (2)\Uninstall.exe
Worms Armageddon Demo-->C:\WINDOWS\IsUninst.exe -f"c:\Team17\Worms Armageddon Demo\Uninst.isu"
Wow Cartographe 1.07-->C:\Program Files\WowCartographe\uninst.exe
XviD MPEG-4 Video Codec-->C:\WINDOWS\system32undll32.exe setupapi,InstallHinfSection Remove_XviD 132 C:\WINDOWS\INF\xvid.inf
Yahoo! Install Manager-->C:\WINDOWS\system32egsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Security center information======

AV: avast! antivirus 4.8.1229 [VPS 081214-0]

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0604
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\Java\jre1.5.0\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre1.5.0\lib\ext\QTJava.zip

-----------------EOF-----------------

Destrio5 · Answer

/!\ Seul Jall peut suivre cette procédure /!\


1/

---> Clique sur Démarrer, Exécuter, tape notepad clique sur OK.

---> Copie le texte ci-dessous par sélection puis Ctrl+C :






KillAll::

Driver::
Planificateur LiveUpdate automatique
pnicml

Folder::
C:\DOCUME~1\ADMINI~1\APPLIC~1\VirusGarde 






---> Colle la sélection dans le bloc-notes

---> Enregistre ce fichier sur le bureau (Impératif)

---> Nom du fichier : CFScript
---> Type du fichier : tous les fichiers
---> Clique sur Enregistrer
---> Quitte le bloc-notes


2/

---> Fait un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe comme sur la capture :
http://www.searchengines.pl/phpbb203/pliki/picasso/virus/programs/combofix/combofix_cfscript.gif

[*] Une fenêtre bleue va apparaître : au message qui apparaît, tu acceptes.

[*] Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises : c'est normal !
Ne touche à rien tant que le scan n'est pas terminé.

[*] Une fois le scan achevé, un rapport va s'afficher : poste-le

[*] Si le fichier ne s'ouvre pas, il se trouve ici C:\ComboFix\Combofix.txt

Jall · Answer

Et tac c'est fait ComboFix 08-12-13.03 - Administrateur 2008-12-14 20:50:32.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.2047.1665 [GMT 1:00] Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe Commutateurs utilisés :: c:\documents and settings\Administrateur\Bureau\CFScript.txt * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\docume~1\ADMINI~1\APPLIC~1\VirusGarde c:\docume~1\ADMINI~1\APPLIC~1\VirusGarde\Logs hreats.log c:\docume~1\ADMINI~1\APPLIC~1\VirusGarde\Logs\update.log . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_PLANIFICATEUR_LIVEUPDATE_AUTOMATIQUE -------\Legacy_PNICML -------\Service_Planificateur LiveUpdate automatique -------\Service_pnicml ((((((((((((((((((((((((((((( Fichiers créés du 2008-11-14 au 2008-12-14 )))))))))))))))))))))))))))))))))))) . 2008-12-14 19:41 . 2008-12-14 19:42 d-------- C: sit 2008-12-14 19:35 . 2008-12-14 19:35 d-------- c:\documents and settings\All Users\Application Data\NortonInstaller 2008-12-14 19:10 . 2008-12-14 19:10 d-------- c:\program files\Malwarebytes' Anti-Malware 2008-12-14 19:10 . 2008-12-14 19:10 d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2008-12-14 19:10 . 2008-12-14 19:10 d-------- c:\documents and settings\Administrateur\Application Data\Malwarebytes 2008-12-14 19:10 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2008-12-14 19:10 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2008-12-14 18:38 . 2008-12-14 18:53 d-------- C:\Lop SD 2008-12-14 17:28 . 2008-12-14 17:28 d--hs---- c:\documents and settings\LocalService\UserData 2008-12-14 17:28 . 2008-12-14 17:28 dr------- c:\documents and settings\LocalService\Favoris 2008-12-14 12:44 . 2008-12-14 12:51 d-------- C:\ToolBar SD 2008-12-14 12:27 . 2008-12-14 12:27 d-------- c:\program files\Trend Micro 2008-12-14 12:21 . 2008-12-14 12:21 d-------- c:\program files\Intel 2008-12-14 12:21 . 2008-05-01 16:35 53,248 --a------ c:\windows\system32\CSVer.dll 2008-12-14 12:20 . 2008-12-14 12:20 d-------- C:\Intel 2008-12-14 12:11 . 2008-12-14 12:11 d-------- c:\program files\Lavalys 2008-12-14 11:33 . 2008-12-14 11:33 d-------- C:\ATI 2008-12-07 15:50 . 2004-08-04 00:55 16,384 --a------ c:\windows\system32\ipsink.ax 2008-12-07 15:50 . 2004-08-03 23:10 15,360 --a------ c:\windows\system32\drivers\StreamIP.sys 2008-12-07 15:50 . 2004-08-03 23:10 11,136 --a------ c:\windows\system32\drivers\SLIP.sys 2008-12-07 15:29 . 2008-12-07 15:29 d-------- c:\documents and settings\All Users\Application Data\ATI 2008-12-07 15:16 . 2008-02-19 14:37 3,107,788 -ra------ c:\windows\system32\ativvaxx.dat 2008-12-07 15:16 . 2008-02-19 14:37 3,107,788 -ra------ c:\windows\system32\ativva5x.dat 2008-12-07 15:16 . 2008-02-19 14:37 887,724 -ra------ c:\windows\system32\ativva6x.dat 2008-12-07 15:16 . 2008-02-19 15:07 372,736 -ra------ c:\windows\system32\ATIDEMGX.dll 2008-12-07 15:16 . 2008-02-19 15:02 307,200 -ra------ c:\windows\system32\atiiiexx.dll 2008-12-07 15:16 . 2008-01-11 08:50 165,746 -ra------ c:\windows\system32\atiicdxx.dat 2008-12-07 15:16 . 2007-08-31 02:20 7,167 -ra------ c:\windows\system32\atifglpf.xml 2008-12-07 13:27 . 2008-12-07 15:23 d-------- c:\program files\ATI Technologies 2008-12-07 13:24 . 2008-12-07 13:24 12,288 --a------ c:\windows\system32\drivers\EIO64_xp.sys 2008-12-06 15:18 . 2004-08-03 23:10 10,880 --a------ c:\windows\system32\drivers\NdisIP.sys 2008-12-06 15:16 . 2004-08-04 00:55 91,648 --a------ c:\windows\system32\kswdmcap.ax 2008-12-06 15:16 . 2004-08-04 00:55 61,952 --a------ c:\windows\system32\kstvtune.ax 2008-12-06 15:16 . 2004-08-04 00:54 54,784 --a------ c:\windows\system32\vfwwdm32.dll 2008-12-06 15:16 . 2004-08-04 00:55 43,008 --a------ c:\windows\system32\ksxbar.ax 2008-12-06 15:16 . 2004-08-04 00:55 28,672 --a------ c:\windows\system32\vidcap.ax 2008-12-06 14:14 . 2008-12-06 14:15 d-------- c:\program files\ma-config.com 2008-12-06 14:14 . 2008-12-06 14:14 d-------- c:\documents and settings\All Users\Application Data\ma-config.com 2008-12-06 13:42 . 2006-06-14 13:44 12,288 -ra------ c:\windows\system32\drivers\EIO_XP.sys 2008-12-06 13:39 . 2008-12-07 13:24 d-------- c:\program files\ASUS 2008-12-06 13:39 . 2007-10-23 17:48 12,416 --a------ c:\windows\system32\drivers\asusgsb.sys 2008-12-06 13:24 . 2008-12-06 13:24 d-------- c:\program files\My Company Name 2008-12-06 13:19 . 2008-12-06 13:19 d-------- c:\program files\Fichiers communs\ATI Technologies 2008-12-06 13:07 . 2006-12-28 04:44 84,992 -ra------ c:\windows\system32\drivers\AtiHdAud.sys 2008-12-06 13:07 . 2008-01-21 02:48 12,477 -ra------ c:\windows\atiogl.xml 2008-12-06 13:07 . 2008-12-06 13:07 0 --a------ c:\windows\ativpsrm.bin 2008-11-16 20:25 . 2008-11-16 20:25 d-------- c:\documents and settings\All Users\Application Data\Messenger Plus! 2008-11-16 20:22 . 2008-11-16 20:22 d-------- c:\program files\Windows Live 2008-11-16 20:22 . 2008-11-16 20:22 d-------- c:\program files\Messenger Plus! Live 2008-11-14 23:01 . 2008-11-14 23:01 d-------- c:\program files\World of Warcraft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-12-14 18:36 --------- d-----w c:\program files\Fichiers communs\Symantec Shared 2008-12-14 11:46 382 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb1942.dat 2008-12-14 11:44 179,200 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb4827.dat 2008-12-14 11:44 142 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb7652.dat 2008-12-14 11:44 13,046 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb5436.dat 2008-12-14 11:44 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb4604.dat 2008-12-13 21:55 196,608 ----a-w c:\windows\system32\drivers Standard.bin 2008-12-07 16:14 --------- d-----w c:\documents and settings\Administrateur\Application Data\Microsoft Games 2008-12-07 15:32 --------- d-----w c:\program files\Microsoft Games 2008-12-07 12:24 --------- d--h--w c:\program files\InstallShield Installation Information 2008-12-06 12:27 --------- d-----w c:\documents and settings\Administrateur\Application Data\ATI 2008-12-04 16:03 --------- d-----w c:\program files\LimeWire 2008-11-16 19:22 --------- d-----w c:\program files\MSN Messenger 2008-10-23 14:35 19,560 ----a-w c:\documents and settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT 2008-06-24 19:40 49 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb41.dat 2006-11-18 22:10 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb2391.dat 2006-11-16 20:01 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb153.dat 2006-11-13 16:54 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb8253.dat 2006-11-13 16:54 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb3902.dat 2006-10-15 11:21 9,216 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb8467.dat 2006-10-15 11:21 0 ----a-w c:\documents and settings\Administrateur\Application Data\internaldb6334.dat . ------- Sigcheck ------- 2004-08-05 03:00 14336 1bd6c2f707a275cb7c16fd99fe0f31ca c:\windows\system32\svchost.exe 2004-08-05 03:00 578048 e46fb493e3b33704f0715020cf52106b c:\windows\$NtUninstallKB890859$\user32.dll 2005-03-02 19:20 578048 c34920eb988ce98910bd6b0417f334eb c:\windows\$NtUninstallKB925902$\user32.dll 2007-03-08 16:50 579072 4d88aaf39adabfe45958ea1384e2c4ff c:\windows\system32\user32.dll 2007-03-08 16:50 579072 4d88aaf39adabfe45958ea1384e2c4ff c:\windows\system32\dllcache\user32.dll 2004-08-05 03:00 82944 bc41f51a39d3b255805fdb759b7814ae c:\windows\system32\ws2_32.dll 2006-01-09 19:02 666112 5404e2ead19d7e2a5c4086015062343c c:\windows\$hf_mig$\KB912945\SP2QFE\wininet.dll 2007-12-07 02:42 825344 f4fd487241d3ac291046a22cebd2cf71 c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll 2008-03-01 13:34 827392 5a0093f59b505c008ed0cee615563c72 c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll 2008-04-23 08:19 827392 78d3d2b0be6ad3e6d82ccb115cf74310 c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll 2006-01-09 19:02 662528 e795f45061710e1ed8e80dd4188f5b26 c:\windows\$NtUninstallKB912945$\wininet.dll 2004-08-05 03:00 660480 58fe94ef42e074f4cad8bf02e70e6478 c:\windows\$NtUninstallKB912945_0$\wininet.dll 2006-01-09 19:02 666112 5404e2ead19d7e2a5c4086015062343c c:\windows\$NtUninstallKB918899$\wininet.dll 2006-06-23 12:25 668672 582953780721ac5d38f98cab229ec7b9 c:\windows\$NtUninstallKB922760$\wininet.dll 2006-09-14 09:38 668672 b8b6f05885a6f42724e8d6bfede6bd3f c:\windows\$NtUninstallKB925454$\wininet.dll 2006-10-23 16:34 668672 efa0c2870cba1747809a13e09f35bf82 c:\windows\$NtUninstallKB928090$\wininet.dll 2007-01-04 15:02 669184 114342601ac7ea73b0d2a0ed8505b8b9 c:\windows\$NtUninstallKB931768$\wininet.dll 2007-02-19 16:23 669696 1bde6d5dba35797eca8db8fcb80fc015 c:\windows\$NtUninstallKB933566$\wininet.dll 2007-04-18 13:44 669696 a3bf56a786b277e881fd9137f55f0b4b c:\windows\$NtUninstallKB937143$\wininet.dll 2007-06-26 15:36 669696 19058fbdc72f7bae085369c6d0a7d074 c:\windows\$NtUninstallKB939653$\wininet.dll 2007-08-22 13:57 669696 4f6a45b54d26708e2c2bf2c43d83edea c:\windows\$NtUninstallKB942615$\wininet.dll 2007-10-11 06:59 670208 0465cde31add22f6233ffb4fe4af01cf c:\windows\$NtUninstallKB944533$\wininet.dll 2007-12-07 01:47 670208 c057d734b1951393fd07e2607513d4d9 c:\windows\ie7\wininet.dll 2007-08-13 18:54 818688 a4a0fc92358f39538a6494c42ef99fe9 c:\windows\ie7updates\KB944533-IE7\wininet.dll 2007-12-07 03:08 824832 4fc90bece54fac81b0090b94e27bfb6b c:\windows\ie7updates\KB947864-IE7\wininet.dll 2008-03-01 13:58 826368 8e027981ddffa690d456fe18b37415a0 c:\windows\ie7updates\KB950759-IE7\wininet.dll 2008-10-16 21:18 826368 cfbfa47415e85018e2cdc509e5e3d011 c:\windows\SoftwareDistribution\Download\c914e30b725f78658cd8e47174da4d57\SP2GDR\wininet.dll 2008-10-16 20:33 827904 37d1a1bfe3d9904f2c3d11592456f9c0 c:\windows\SoftwareDistribution\Download\c914e30b725f78658cd8e47174da4d57\SP2QFE\wininet.dll 2008-04-23 05:16 826368 02d6aabd5f5a32c61478b5cdfe50e4a8 c:\windows\system32\wininet.dll 2008-04-23 05:16 826368 02d6aabd5f5a32c61478b5cdfe50e4a8 c:\windows\system32\dllcache\wininet.dll 2006-04-20 13:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 c:\windows\$hf_mig$\KB917953\SP2QFE cpip.sys 2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 c:\windows\$hf_mig$\KB941644\SP2QFE cpip.sys 2004-08-05 03:00 359040 9f4b36614a0fc234525ba224957de55c c:\windows\$NtUninstallKB917953$ cpip.sys 2006-04-20 12:51 359808 1dbf125862891817f374f407626967f4 c:\windows\$NtUninstallKB941644$ cpip.sys 2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\system32\dllcache cpip.sys 2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 c:\windows\system32\drivers cpip.sys 2004-08-05 03:00 506368 d2de785aeab0bb8ca4c14a8a199dbe4e c:\windows\system32\winlogon.exe 2004-08-05 03:00 182912 558635d3af1c7546d26067d5d9b6959e c:\windows\system32\drivers dis.sys 2004-08-05 03:00 29056 4448006b6bc60e6c027932cfc38d6855 c:\windows\system32\drivers\ip6fw.sys 2004-08-03 23:49 2017280 35567c8c50986c2bc5c3efd79cb045e4 c:\windows\$NtUninstallKB890859$ tkrnlpa.exe 2005-03-02 19:13 2017280 90e59ecf2d0541312c9eb36568810588 c:\windows\$NtUninstallKB929338$ tkrnlpa.exe 2006-12-19 19:45 2019328 c46168890982d41fb8accdbac8e0a56c c:\windows\$NtUninstallKB931784$ tkrnlpa.exe 2007-02-28 17:08 2061440 7a56a64eb50399613587e90292dd2aab c:\windows\Driver Cache\i386 tkrnlpa.exe 2008-08-14 14:44 2059776 f9720d61df1e3e47614c4fc891f3fe44 c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP2GDR tkrnlpa.exe 2008-08-14 14:39 2065024 dcbc1a6d150b5ee1bd6257186157b0f3 c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP2QFE tkrnlpa.exe 2008-08-14 14:23 2068096 8da71f1900721e1e4fcb5b02d55fb771 c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP3GDR tkrnlpa.exe 2008-08-14 19:26 2068096 755b50949d0dbc0f0136b0db58765331 c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP3QFE tkrnlpa.exe 2007-02-28 17:08 2019328 3e3df9f5d56b719f055e7d652e79f96b c:\windows\system32 tkrnlpa.exe 2007-02-28 17:08 2061440 7a56a64eb50399613587e90292dd2aab c:\windows\system32\dllcache tkrnlpa.exe 2004-08-03 23:48 2150400 36f32a5a83df734e022734d93860a9a4 c:\windows\$NtUninstallKB890859$ toskrnl.exe 2005-03-02 19:13 2137600 5967696e9138c5337437e6b8653ab836 c:\windows\$NtUninstallKB929338$ toskrnl.exe 2006-12-19 19:45 2139648 d9f5291648962a1733f8d3e59da47bee c:\windows\$NtUninstallKB931784$ toskrnl.exe 2007-02-28 17:08 2184192 8e244108562e0e452eb68dff64cb08a9 c:\windows\Driver Cache\i386 toskrnl.exe 2008-08-14 14:44 2182400 449566d74b5c261a3a54aa216f0c532b c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP2GDR toskrnl.exe 2008-08-14 14:39 2188032 c6649255e51f145b6e15c505ab68e459 c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP2QFE toskrnl.exe 2008-08-14 14:23 2191232 c8d4d5974f9671da0a37175650912960 c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP3GDR toskrnl.exe 2008-08-14 19:26 2191232 d79210549bbf09b7638e860440504299 c:\windows\SoftwareDistribution\Download\ce3fdd705c204e10a3af0769e281cace\SP3QFE toskrnl.exe 2007-02-28 17:08 2139648 de41f3b43b9f15e08ccd4b98a7bb2ca3 c:\windows\system32 toskrnl.exe 2007-02-28 17:08 2184192 8e244108562e0e452eb68dff64cb08a9 c:\windows\system32\dllcache toskrnl.exe 2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 c:\windows\explorer.exe 2007-06-13 14:10 1037312 b795475444d6d57a572c14b9e1a29839 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe 2004-08-05 03:00 1036288 4c33e5b9a6197b6ed215f6cfba0a2daa c:\windows\$NtUninstallKB938828$\explorer.exe 2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 c:\windows\system32\dllcache\explorer.exe 2004-08-05 03:00 108544 732e0b1abaace15d80ec19056b0a2af9 c:\windows\system32\services.exe 2004-08-05 03:00 13312 9f3744a5c6f49291a7a685040a013399 c:\windows\system32\lsass.exe 2004-08-05 03:00 15360 5584247b568c2e53934873f4b655fe6a c:\windows\system32\ctfmon.exe 2005-06-11 01:17 57856 ad3d9d191aea7b5445fe1d82ffbb4788 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe 2004-08-05 03:00 57856 b4ef928e4fad79364a80acba6d999934 c:\windows\$NtUninstallKB896423$\spoolsv.exe 2005-06-11 00:53 57856 da81ec57acd4cdc3d4c51cf3d409af9f c:\windows\system32\spoolsv.exe 2004-08-05 03:00 25088 d6d65ea32b190401b57edb6706f29669 c:\windows\system32\userinit.exe 2004-08-05 03:00 297984 7d521b8cf926459e270d18c559323815 c:\windows\system32 ermsrv.dll . ((((((((((((((((((((((((((((( snapshot@2008-12-14_17.24.13.21 ))))))))))))))))))))))))))))))))))))))))) . - 2007-07-30 17:19:20 92,504 ----a-w c:\windows\system32\cdm.dll + 2008-10-16 13:09:44 92,696 ----a-w c:\windows\system32\cdm.dll - 2007-07-30 17:19:20 92,504 ----a-w c:\windows\system32\dllcache\cdm.dll + 2008-10-16 13:09:44 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll - 2007-07-30 17:19:36 549,720 ----a-w c:\windows\system32\dllcache\wuapi.dll + 2008-10-16 13:12:20 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll - 2007-07-30 17:19:16 53,080 ----a-w c:\windows\system32\dllcache\wuauclt.exe + 2008-10-16 13:09:44 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe - 2007-07-30 17:19:42 1,712,984 ----a-w c:\windows\system32\dllcache\wuaueng.dll + 2008-10-16 13:13:40 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll - 2007-07-30 17:19:32 325,976 ----a-w c:\windows\system32\dllcache\wucltui.dll + 2008-10-16 13:12:22 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll - 2007-07-30 17:18:40 33,624 ----a-w c:\windows\system32\dllcache\wups.dll + 2008-10-16 13:08:58 34,328 ----a-w c:\windows\system32\dllcache\wups.dll - 2007-07-30 17:19:28 203,096 ----a-w c:\windows\system32\dllcache\wuweb.dll + 2008-10-16 13:13:40 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll + 2008-10-16 13:08:58 34,328 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.788\wups.dll + 2008-10-16 13:09:44 43,544 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.788\wups2.dll - 2007-07-30 17:19:36 549,720 ----a-w c:\windows\system32\wuapi.dll + 2008-10-16 13:12:20 561,688 ----a-w c:\windows\system32\wuapi.dll - 2007-07-30 17:19:16 53,080 ----a-w c:\windows\system32\wuauclt.exe + 2008-10-16 13:09:44 51,224 ----a-w c:\windows\system32\wuauclt.exe - 2007-07-30 17:19:42 1,712,984 ----a-w c:\windows\system32\wuaueng.dll + 2008-10-16 13:13:40 1,809,944 ----a-w c:\windows\system32\wuaueng.dll - 2007-07-30 17:19:32 325,976 ----a-w c:\windows\system32\wucltui.dll + 2008-10-16 13:12:22 323,608 ----a-w c:\windows\system32\wucltui.dll - 2007-07-30 17:18:40 33,624 ----a-w c:\windows\system32\wups.dll + 2008-10-16 13:08:58 34,328 ----a-w c:\windows\system32\wups.dll - 2007-07-30 17:19:12 43,352 ----a-w c:\windows\system32\wups2.dll + 2008-10-16 13:09:44 43,544 ----a-w c:\windows\system32\wups2.dll - 2007-07-30 17:19:28 203,096 ----a-w c:\windows\system32\wuweb.dll + 2008-10-16 13:13:40 202,776 ----a-w c:\windows\system32\wuweb.dll + 2008-12-14 19:52:48 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_5f4.dat . -- Instantané actualisé -- . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-05 15360] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-12 68856] "EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2008-07-21 2752512] "ASUS SmartDoctor"="c:\program files\ASUS\SmartDoctor\SmartDoctor.exe" [2008-03-07 1130496] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PTHOSTTR"="c:\program files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2005-10-04 86016] "SetRefresh"="c:\program files\Compaq\SetRefresh\SetRefresh.exe" [2003-11-20 525824] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-11-14 286720] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2007-11-15 267048] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 78008] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440] "ASUSGamerOSD"="c:\program files\ASUS\GamerOSD\GamerOSD.exe" [2007-10-23 380928] "Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe" [2005-01-07 c:\windows\system32\hdashcut.exe] "RTHDCPL"="RTHDCPL.EXE" [2005-03-08 c:\windows\RTHDCPL.EXE] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-05 15360] c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360] Sonic CinePlayer Quick Launch.lnk - c:\program files\Fichiers communs\Sonic Shared\CineTray.exe [2005-10-15 114688] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\WB] 2001-12-20 22:34 24576 c:\program files\Stardock\Object Desktop\ThemeManager\fastload.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=wbsys.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3acm"= l3codecp.acm "VIDC.ACDV"= ACDV.dll "vidc.asv2"= asusasv2.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "c:\Program Files\EA GAMES\La Bataille pour la Terre du Milieu(tm)\game.dat"= "c:\Program Files\LimeWire\LimeWire.exe"= "c:\Program Files\Messenger\msmsgs.exe"= "c:\Valve\Steam\steamapps\dragon2434\condition zero\hl.exe"= "c:\Documents and Settings\Administrateur\Mes documents\Warcraft III\Warcraft III.exe"= "c:\Documents and Settings\Administrateur\Mes documents\Warcraft III\War3.exe"= "c:\World of Warcraft\WoW-1.12.0-frFR-downloader.exe"= "c:\World of Warcraft\WoW-1.12.x-to-2.0.1-frFR-patch-downloader.exe"= "c:\World of Warcraft\WoW-2.0.3-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.3.6299-to-2.0.5.6320-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.5.6320-to-2.0.6.6337-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.6.6337-to-2.0.7.6383-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.7.6383-to-2.0.8.6403-frFR-downloader.exe"= "c:\World of Warcraft\WoW-2.0.8.6403-to-2.0.10.6448-frFR-downloader.exe"= "c:\Program Files\MSN Messenger\msnmsgr.exe"= "c:\Program Files\MSN Messenger\livecall.exe"= "c:\World of Warcraft\BackgroundDownloader.exe"= "c:\Program Files\EA GAMES\Battlefield 1942\BF1942.exe"= "c:\Valve\Steam\Steam.exe"= "c:\Program Files\iTunes\iTunes.exe"= "c:\Program Files\NAMCO BANDAI Games\Warhammer® Mark of Chaos\Warhammer.exe"= "c:\Program Files\Electronic Arts\EADM\Core.exe"= "c:\Program Files\Microsoft Games\Gears of War\Binaries\WarGame-G4WLive.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "3724:TCP"= 3724:TCP:Blizzard Downloader: 3724 R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-11-09 78416] R1 EIO_XP;EIO_XP;\??\c:\windows\system32\drivers\EIO_XP.sys [2008-12-06 12288] R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-11-09 20560] R3 Video3D;ASUS Video3D Service;c:\windows\system32\Drivers\Video3D32.sys [2008-12-07 10752] S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" [2008-11-17 195752] . Contenu du dossier 'Tâches planifiées' 2008-09-28 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] . . ------- Examen supplémentaire ------- . uStart Page = hxxp://www.google.com/ uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 mWindow Title = uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000 O16 -: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://ma-config.com/activex/hardwaredetection_3_0_4_0.cab c:\windows\Downloaded Program Files\hardwaredetection.inf . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-12-14 20:53:12 Windows 5.1.2600 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(672) c:\windows\system32\Ati2evxx.dll c:\program files\Stardock\Object Desktop\ThemeManager\fastload.dll . ------------------------ Autres processus actifs ------------------------ . c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\windows\ATKKBService.exe c:\program files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe c:\program files\iPod\bin\iPodService.exe . ************************************************************************** . Heure de fin: 2008-12-14 20:56:42 - La machine a redémarré ComboFix-quarantined-files.txt 2008-12-14 19:56:40 ComboFix2.txt 2008-12-14 16:24:39 Avant-CF: 148'742'057'984 octets libres Après-CF: 148,792,324,096 octets libres WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect 328 --- E O F --- 2008-06-11 11:22:50

Destrio5 · Answer

1/

---> Menu Démarrer > Exécuter > Tape combofix /u et valide par OK.

---> Mets à jour Adobe Reader :
https://get2.adobe.com/reader/otherversions/


2/

---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous : 





:processes
explorer.exe 

:files 
C:\WINDOWS\system32\SearchTool
C:\Program Files\Common Files\Companion Wizard

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

Jall · Answer

Voilà se qu'il te faut

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\WINDOWS\system32\SearchTool moved successfully.
C:\Program Files\Common Files\Companion Wizard moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Perflib_Perfdata_284.dat scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS	emp\Perflib_Perfdata_5f4.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
Temp folders emptied.
Explorer started successfully
 
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12142008_212147

Files moved on Reboot...
File C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Perflib_Perfdata_284.dat not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.
File C:\WINDOWS	emp\Perflib_Perfdata_5f4.dat not found!

Destrio5 · Answer

1/

---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
* Lance-le. Va dans Outils puis Programmes de désinstallations.
* Sélectionne Companion wizard puis clique sur Efface l'Entrée.
* Fais de même pour Search Enhancer.


2/

---> Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries sur ton Bureau :
* Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
* Double-clique sur le répertoire JavaRa.
* Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
* Clique sur Search For Updates.
* Sélectionne Update Using jucheck.exe puis clique sur Search.
* Autorise le processus à se connecter s'il le demande, clique sur Install et suis les instructions d'installation qui prennent quelques minutes.
* L'installation est terminée, reviens à l'écran de JavaRa et clique sur Remove Older Versions.
* Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur Ok, puis une deuxième fois sur Ok.
* Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
* Ferme l'application.
Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

Jall · Answer

Je n'arrive pas à télécharger Javara.zip, je ne trouve pas où je dois clicker pour le télécharger, je vais retenter demain soir car là je pars dormir. En attandant je te remercie déjà pour se que tu a fais jusqu'à présent. A demain

Destrio5 · Answer

http://sd-1.archive-host.com/membres/up/3288717712384394/JavaRa.zip

Jall · Answer

A merci ça devient de plus en plus dur cette histoire ^^

JavaRa 1.11 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Dec 14 22:26:26 2008

Found and removed: C:\Program Files\Java\jre1.5.0

Found and removed: Software\JavaSoft\Java2D\1.5.0

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510000

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510000

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510000

Found and removed: SOFTWARE\Classes\JavaPlugin.150

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510000

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510000

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150000}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0\

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

------------------------------------

Finished reporting.

Destrio5 · Answer

Tu sens que ton PC va mieux ?

---> Supprime le dossier RSIT situé dans C:\

---> Refais un scan RSIT et poste les deux rapports.

Jall · Answer

Euh si il va mieux j'en sais rien, mais moi maitenant faut que je désinstalle ATI et que je le réinstalle ?

Logfile of random's system information tool 1.04 (written by random/random)
Run by Administrateur at 2008-12-14 22:36:54
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 142 GB (59%) free of 238 GB
Total RAM: 2047 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:36:59, on 14.12.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Stardock\Object Desktop\ThemeManager\wbload.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrateur\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Administrateur.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe  /start
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Sonic CinePlayer Quick Launch.lnk = C:\Program Files\Fichiers communs\Sonic Shared\CineTray.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://ma-config.com/activex/hardwaredetection_3_0_4_0.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

Destrio5 · Answer

Bien.

Tu as essayé ton jeu ?

Jall · Answer

Alors ce qui se passe maintenant c'est que quand j'allume mon ordi, il m'affiche sur le bureau comme quoi je n'ai pas ATI et donc quand je lance mon jeu il me dit que je n'ai pas les exigences requis... 

Donc il me suffit de désinstaller ATI (oui c'est spécial car dans ajou et supprime de programme dans panneaux de configuration j'ai toujours ATI).

En résumer je pensais désinstaller ATI et le réinstaller avec le CD de la boite de ma carte graphique mais j'attend juste que tu me confirme que c'est bon :)

Destrio5 · Answer

Réinstalle ton pilote ATI.

Jall · Answer

Bon ben j'ai désinstaller et j'ai relancer l'installation a partir du Cd fourni et j ai toujours une fenêtre qui apparait avec le même problème du tout début il me dit que si je continu l'installation l'ordinateur risque d'avoir des disfonctionnement alors je met arreter l'installation et la un message me dit:

Setup n'a pas trouvé de pilote compatible avec votre matériel actuel ou votre système d'exploitation Setup va se fermer

que dois-je faire stp :s

Destrio5 · Answer

Passe un coup de Driver Cleaner :
https://www.clubic.com/telecharger-fiche18788-driver-cleaner-pe.html

Puis réessaie le pilote du CD et celui du site ATI.

Si ça ne fonctionne pas, il te faudra formater et réinstaller Windows.

Jall · Answer

Ben malheureusement ça ne va toujours pas. 

Un grand merci quand même pour avoir passé pas mal de temps à m'aider, bonne soirée et encore merci

Destrio5 · Answer

Je suis désolé de n'avoir pas pu régler ton problème.

Prob. installation ATI/Carte graphique

45 réponses

Votre réponse

Discussions similaires

Newsletters