Vers bagle???

bah pas grave jvais garder ca comme ca, le pc tourne quand meme bien . s'il y a quelque chose je reformaterais
merci d'avoir essayer

tu as toujous les probleme d'installation car la jvois pas d'ou sa peut venir

desolé mais jpeux plus t'aider la :/

bon voici la rapport de bitdefender il na rine trouvé

BitDefender Online Scanner - Rapport virus en temps réel

Généré à: Mon, Jan 12, 2009 - 08:40:47

--------------------------------------------------------------------------------

Info d'analyse

Fichiers scannés
144852

Infectés Fichiers
0

Virus Détectés

Aucun virus trouvé.

--------------------------------------------------------------------------------

Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

ben alors la franchement jcompends pas pourquoi tu ne peut pas installer malware

fait un scan en ligne ici et poste le rapport

http://www.bitdefender.fr/scan_fr/scan8/ie.html

supprime si des infections sont trouvées

je ne vois rien sur les rapports donc si un membre a identifié quelque chose qu'il le fasse savoir

voici les 2 rapport

info.txt logfile of random's system information tool 1.05 2009-01-11 17:56:06

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 K:\WINDOWS\INF\PCHealth.inf
3DMark06-->RunDll32 K:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "K:\Program Files\InstallShield Installation Information\{7F3AD00A-1819-4B15-BB7D-08B3586336D7}\setup.exe" -l0x9 -removeonly
7-Zip 4.60 beta-->"K:\Program Files\7-Zip\Uninstall.exe"
ACDSee Photo Manager 2009-->MsiExec.exe /I{300578F9-9EFF-4B93-9AB1-C0E5707EF463}
Active@ ISO Burner v 1.7-->"K:\Program Files\LSoft Technologies\Active ISO Burner\UNWISE.EXE" "K:\Program Files\LSoft Technologies\Active ISO Burner\INSTALL.LOG"
Adobe Acrobat 4.0-->K:\WINDOWS\ISUN040C.EXE -f"K:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"K:\Program Files\Fichiers communs\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player 10 ActiveX-->K:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->K:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A90000000001}
Assistant de connexion Windows Live-->MsiExec.exe /I{D6E592B3-67DA-4BBB-9783-E1838FB253A2}
Avira AntiVir Personal - Free Antivirus-->K:\Program Files\Avira\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
CCleaner (remove only)-->"K:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"K:\Program Files\CDBurnerXP\unins000.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
CloneCD-->"K:\Program Files\SlySoft\CloneCD\ccd-uninst.exe" /D="K:\Program Files\SlySoft\CloneCD"
Désinstaller Raveille-->"K:\Program Files\Raveille\unins000.exe"
FileZilla Client 3.1.5-->K:\Program Files\FileZilla FTP Client\uninstall.exe
FindyKill-->K:\Program Files\FindyKill\Uninstal.exe
Google Desktop-->K:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Toolbar for Internet Explorer-->"K:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
GTK+ 2.4.14 runtime environment-->"K:\Program Files\Fichiers communs\GTK\2.0\unins000.exe"
HashTab 2.1.1-->K:\Program Files\HashTab Shell Extension\uninst.exe
HijackThis 2.0.2-->"K:\Documents and Settings\merle\Bureau\HijackThis.exe" /uninstall
HiYo -->MsiExec.exe /X{8F3A13FC-DFDA-4001-A6C3-030495A1E66E} ARPVAL="UnInst" /qf /L*V "%temp%\HiYoUninstallLog.log"
HiYo-->MsiExec.exe /X{8F3A13FC-DFDA-4001-A6C3-030495A1E66E}
Hot CPU Tester Pro 4.4.1-->"K:\Program Files\Hot CPU Tester Pro 4 LE\unins000.exe"
Installation Windows Live-->K:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{3CCB732A-E472-4CF9-B1EE-F18365341FE0}
J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
Java(TM) 6 Update 10-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010F0}
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
K-Lite Codec Pack 4.2.5 (Full)-->"K:\Program Files\K-Lite Codec Pack\unins000.exe"
Labtec WebCam-->MsiExec.exe /X{995BF1A7-30E5-49E5-A0E4-AD3213D9E330}
LimeWire 4.18.8-->"K:\Program Files\LimeWire\uninstall.exe"
Logitech Audio Echo Cancellation Component-->MsiExec.exe /X{BEF726DD-4037-4214-8C6A-E625C02D2870}
Logitech Gaming Software-->RunDll32 K:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "K:\Program Files\InstallShield Installation Information\{5C1DA723-24FC-48AD-93BA-925695C3EF26}\setup.exe" -l0x40c -removeonly
Logitech Video Enumerator-->MsiExec.exe /X{EA516024-D84D-41F1-814F-83175A6188F2}
Malwarebytes' Anti-Malware-->"K:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5-->K:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Compression Client Pack 1.0 for Windows XP-->"K:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Flight Simulator 2002-->"K:\Program Files\Microsoft Games\FS2002\FSUNINSTALL.EXE" /runtemp /addremove
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Windows Thème Nunavut-->MsiExec.exe /X{828600A6-B64A-439D-858C-16DA548BE549}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"K:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"K:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"K:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->K:\WINDOWS\system32\MacroMed\Flash\genuinst.exe K:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB954459)-->"K:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"K:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"K:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"K:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"K:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"K:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mozilla Firefox (3.0.5)-->K:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.17)-->K:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MVision-->MsiExec.exe /I{35725FBC-A136-4A46-9F29-091759D9BB93}
Myst V End Of Ages-->K:\Program Files\Ubisoft\Cyan Worlds\Myst V End Of Ages\_uninst\uninstaller.exe
Need for Speed™ Undercover-->MsiExec.exe /X{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}
Notepad++-->K:\Program Files\Notepad++\uninstall.exe
NVIDIA Drivers-->K:\WINDOWS\system32\nvudisp.exe UninstallGUI
OCCT Perestroika 2.0.1-->"K:\Program Files\OCCT\unins000.exe"
Okoker AVI to DVD VCD DIVX MPEG Converter&Burner 2.2-->"K:\Program Files\AVI to DVD VCD DIVX MPEG Converter&Burner\unins000.exe"
Orbit Downloader-->"K:\Program Files\Orbitdownloader\unins000.exe"
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PC Wizard 2008.1.87-->"K:\Program Files\PC Wizard 2008\unins000.exe"
PerfectDisk 2008 Professional-->MsiExec.exe /I{2B6EC03E-6FA0-4D7C-9CCE-1B03819AB613}
PKR-->"K:\Program Files\PKR\uninstall-pkr.exe"
Programme de gestion Camera de Labtec®-->"K:\Program Files\Fichiers communs\Labtec\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
QT Lite 2.7.0-->"K:\Program Files\QT Lite\unins000.exe"
Real Alternative 1.9.0 Lite-->"K:\Program Files\Real Alternative\unins000.exe"
Realtek High Definition Audio Driver-->RunDll32 K:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "K:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Serious Samurize-->"K:\Program Files\Samurize\Uninstall.exe"
SIW version 2008-12-16-->"K:\Program Files\SIW\unins000.exe"
SuperCopier2-->"K:\Program Files\SuperCopier2\SC2Uninst.exe"
Windows Live Call-->MsiExec.exe /I{01523985-2098-43AF-9C97-12B07BE02A9B}
Windows Live Communications Platform-->MsiExec.exe /I{F69E83CF-B440-43F8-89E6-6EA80712109B}
Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
Windows Media Format 11 runtime-->"K:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"K:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"K:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
WinRAR archiver-->K:\Program Files\WinRAR\uninstall.exe
Winter Wonders-->K:\Program Files\SoundSpectrum\Winter Wonders\Uninstall.exe
XML Paper Specification Shared Components Language Pack 1.0-->"K:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
X'nBeep 1.1-->"K:\Program Files\X'nBeep 1.1\unins000.exe"

======Security center information======

AV: Avira AntiVir PersonalEdition Classic

System event log

Computer Name: MERLE-38C3581CB
Event Code: 15007
Message: La réservation de l'espace de nom identifié par le préfixe d'URL http://*:2869/ a été correctement ajoutée.

Record Number: 5
Source Name: HTTP
Time Written: 20081210103501.000000-300
Event Type: Informations
User:

Computer Name: MERLE-38C3581CB
Event Code: 6011
Message: Le nom NetBIOS et le nom de l'hôte DNS de cet ordinateur ont été modifiés de MACHINENAME vers MERLE-38C3581CB.

Record Number: 4
Source Name: EventLog
Time Written: 20081210103156.000000-300
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Pendant la validation de \Device\Serial0 en tant que port série, une FIFO a été détectée. La FIFO sera utilisée.

Record Number: 3
Source Name: Serial
Time Written: 20081210111537.000000-300
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 2
Source Name: EventLog
Time Written: 20081210111516.000000-300
Event Type: Informations
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20081210111516.000000-300
Event Type: Informations
User:

Application event log

Computer Name: MERLE-38C3581CB
Event Code: 0
Message: The ServiceModelReg tool has completed successfully.

Record Number: 259
Source Name: System.ServiceModel.Install 3.0.0.0
Time Written: 20081222205451.000000-300
Event Type: Informations
User:

Computer Name: MERLE-38C3581CB
Event Code: 0
Message: HTTP namespace reservations are not installed.

Record Number: 258
Source Name: System.ServiceModel.Install 3.0.0.0
Time Written: 20081222205451.000000-300
Event Type: Avertissement
User:

Computer Name: MERLE-38C3581CB
Event Code: 0
Message: ASPNET local user account does not exist, skipped setting WMI permissions for ASP.NET

Record Number: 257
Source Name: System.ServiceModel.Install 3.0.0.0
Time Written: 20081222205449.000000-300
Event Type: Informations
User:

Computer Name: MERLE-38C3581CB
Event Code: 0
Message: HttpModules node ServiceModel does not exist in System.Web section group.

Record Number: 256
Source Name: System.ServiceModel.Install 3.0.0.0
Time Written: 20081222205448.000000-300
Event Type: Avertissement
User:

Computer Name: MERLE-38C3581CB
Event Code: 0
Message: HttpHandlers node *.svc does not exist in System.Web section group.

Record Number: 255
Source Name: System.ServiceModel.Install 3.0.0.0
Time Written: 20081222205448.000000-300
Event Type: Avertissement
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;K:\Program Files\Fichiers communs\GTK\2.0\bin
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=1706
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SamDir"=SINSTDIR

-----------------EOF-----------------

Logfile of random's system information tool 1.05 (written by random/random)
Run by merle at 2009-01-11 17:55:48
Microsoft Windows XP Professionnel Service Pack 3
System drive K: has 31 GB (44%) free of 71 GB
Total RAM: 3071 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:56:03, on 11/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
K:\WINDOWS\System32\smss.exe
K:\WINDOWS\system32\winlogon.exe
K:\WINDOWS\system32\services.exe
K:\WINDOWS\system32\lsass.exe
K:\WINDOWS\system32\svchost.exe
K:\WINDOWS\System32\svchost.exe
K:\WINDOWS\system32\spoolsv.exe
K:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
K:\WINDOWS\Explorer.EXE
K:\WINDOWS\system32\RUNDLL32.EXE
K:\WINDOWS\RTHDCPL.EXE
K:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
K:\WINDOWS\system32\rundll32.exe
K:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
K:\Program Files\HiYo\bin\HiYo.exe
K:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
K:\WINDOWS\system32\ctfmon.exe
K:\Program Files\Windows Media Player\WMPNSCFG.exe
K:\Program Files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe
K:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
K:\WINDOWS\System32\svchost.exe
K:\Program Files\Java\jre6\bin\jqs.exe
K:\Program Files\CDBurnerXP\NMSAccessU.exe
K:\WINDOWS\system32\nvsvc32.exe
K:\WINDOWS\system32\PnkBstrA.exe
K:\WINDOWS\system32\svchost.exe
K:\WINDOWS\System32\svchost.exe
K:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
K:\WINDOWS\system32\wbem\wmiapsrv.exe
K:\Program Files\Windows Live\Contacts\wlcomm.exe
K:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
K:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
K:\WINDOWS\system32\rundll32.exe
K:\WINDOWS\system32\PnkBstrB.exe
K:\Program Files\Internet Explorer\iexplore.exe
K:\Documents and Settings\merle\Bureau\RSIT.exe
K:\Documents and Settings\merle\Bureau\merle.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - K:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - K:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - K:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - K:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - K:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - K:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - K:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - K:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - K:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - K:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: IEHlprObj Class - {F62A47A7-4CA3-9D00-95A3-6724d43a9E8C} - LineAudio.dll (file missing)
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - K:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - K:\Program Files\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE K:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE K:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "K:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "K:\Program Files\Labtec\WebCam10\WebCam10.exe" /hide
O4 - HKLM\..\Run: [Google Desktop Search] "K:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [CloneCDTray] "K:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [avgnt] "K:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "K:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Hiyo] K:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKCU\..\Run: [swg] K:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] K:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "K:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [X'nBeep] K:\Program Files\X'nBeep 1.1\XnBeep.exe
O4 - HKCU\..\Run: [WMPNSCFG] K:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] K:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] K:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Registration Myst V
O4 - Global Startup: Orbit.lnk = K:\Program Files\Orbitdownloader\orbitdm.exe
O8 - Extra context menu item: &Download by Orbit - res://K:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://K:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://K:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://K:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://K:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - K:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - K:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - K:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {05CA9FB0-3E3E-4b36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6e32070a-766d-4ee6-879c-dc1fa91d2fc3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - K:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - K:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - K:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - K:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - K:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - K:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LVSrvLauncher - Labtec Inc. - K:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NMSAccessU - Unknown owner - K:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - K:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PD91Engine - Raxco Software, Inc. - K:\Program Files\Raxco\PerfectDisk2008\PD91Engine.exe
O23 - Service: PnkBstrA - Unknown owner - K:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - K:\WINDOWS\system32\PnkBstrB.exe

Télécharge Random's System Information Tool (RSIT) par random/random et sauvegarde-le sur ton Bureau.
http://images.malwareremoval.com/random/RSIT.exe
2 rapport s ouvrirons poste les 2

voici le rapport que sa ma donnée avec le programme Genproc
mais il n'a pas été capable de scanner le disque K/boot.ini ou quelque chose du genre

Rapport GenProc 2.323 [1] - 11/01/2009 - Windows XP

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
- C:\Program Files\EsetOnlineScanner\log.txt

__________________________________________________________________________________________________________

Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com

essaye de telecharger ceci GENPROC dezippe toute l'archive dans 1nouveau dossier

http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip

executer le GENProc en administrateur, une page internet va s'ouvrir poste le rapport dans ta prochaine reponse

up

up merci

tjs incapable de l'installer meme en mode sans echec, grrr ...

re

as tu pu telecharger l'installeur malware si oui

redemarre en mode sans echec : tu redemarre ton PC au bip tu tapote F8 et choisit mode sans echec et essaye de l'installer et fait un scan complet

tjrs incapable d'installer mbam :(... crime en plus je l'ai téléchargeé avec firefox... tout d'un coup!!! mais tjs sans succes... on dirais que ma connection est devenu lente... et elle n'est plus securisé (ie)... moi jc plus la :(

bon ok

alors réessaye d'installer malwarebyte, si tu peux met le a jour et fais un scan complet (ou miniutieux) supprime toutes les infections trouvées et poste le rapport

puis après reposte un hijackthis

ben mon disque dur c K mais il y a seulement 2 fichier txt selui de findykill et celui de combofix

c'est a la racine de C la ou tu as les dossier programmefile, windows etc...tu dois avoir plusieurs fichier texte dont 2 de combofix tu m'envoie le 1er

je ne le trouve pas ... la premiere fois il me ouvert notepad mais avec un rapport vide :s ..jvais regarder encore

le rapport ce trouve a la racine de C tu double clic sur tonposte de travail va dans C et regarde les fichier .txt

arff sa c'est le 2eme tu dois pouvoir retrouver le 1rapport

Va dans C c'est un doc .txt regarde et envoie moi le premier stp

bon ok voici le rapport combofix... mais g du le rafaire 2 fois; la premiere fois le rapport ne c'est pas affiché et il a fais un genre de back up pcq il disait qt'il y en avais pas de fait sur mon ordi. et il y a un icone internet explorer sur mon bureau qui est apparue... alors j'ai fait un second scan qui ma donner un rapport et quand j'ai voulus me connecter ma connection ne fonctionnais plus???? bizzard.. tres bizzard??? non??

ComboFix 09-01-09.03 - merle 2009-01-10 11:16:22.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.3071.2635 [GMT -5:00]
Lancé depuis: k:\documents and settings\merle\Bureau\ComboFix.exe
.

((((((((((((((((((((((((((((( Fichiers créés du 2008-12-10 au 2009-01-10 ))))))))))))))))))))))))))))))))))))
.

2009-01-10 11:10 . 2009-01-10 11:10 <REP> d-------- k:\windows\system32\xircom
2009-01-10 11:10 . 2009-01-10 11:10 <REP> d-------- k:\windows\srchasst
2009-01-10 11:10 . 2009-01-10 11:10 <REP> d-------- k:\program files\microsoft frontpage
2009-01-10 00:19 . 2009-01-10 00:19 <REP> d-------- k:\program files\Lavalys
2009-01-09 22:41 . 2009-01-09 22:41 4,096 --a------ k:\windows\d3dx.dat
2009-01-09 14:10 . 2009-01-09 14:10 <REP> d--hs---- K:\$RECYCLE.BIN
2009-01-09 14:08 . 2009-01-09 14:08 <REP> d-------- k:\program files\Malwarebytes' Anti-Malware
2009-01-09 14:08 . 2008-12-03 19:52 38,496 --a------ k:\windows\system32\drivers\mbamswissarmy.sys
2009-01-09 14:08 . 2008-12-03 19:52 15,504 --a------ k:\windows\system32\drivers\mbam.sys
2009-01-09 14:02 . 2008-12-10 11:16 <REP> d--h----- k:\documents and settings\Administrateur\Voisinage réseau
2009-01-09 14:02 . 2008-12-10 11:16 <REP> d--h----- k:\documents and settings\Administrateur\Voisinage d'impression
2009-01-09 14:02 . 2008-12-10 10:32 <REP> d--h----- k:\documents and settings\Administrateur\Modèles
2009-01-09 14:02 . 2008-12-10 11:16 <REP> d-------- k:\documents and settings\Administrateur\Mes documents
2009-01-09 14:02 . 2008-12-10 11:16 <REP> dr------- k:\documents and settings\Administrateur\Menu Démarrer
2009-01-09 14:02 . 2008-12-10 11:16 <REP> d-------- k:\documents and settings\Administrateur\Favoris
2009-01-09 14:02 . 2008-12-10 11:16 <REP> d-------- k:\documents and settings\Administrateur\Bureau
2009-01-09 14:02 . 2009-01-09 14:02 <REP> d-------- k:\documents and settings\Administrateur
2009-01-09 13:37 . 2009-01-10 00:40 <REP> d-------- k:\program files\PC Wizard 2008
2009-01-09 13:37 . 2007-09-15 15:11 27,136 --a------ k:\windows\system32\PCWizard.cpl
2009-01-08 22:44 . 2009-01-08 22:44 <REP> d-------- k:\program files\X'nBeep 1.1
2009-01-08 18:42 . 2009-01-08 18:42 <REP> d-------- k:\program files\Microsoft CAPICOM 2.1.0.2
2009-01-08 17:52 . 2008-10-16 14:06 268,648 --a------ k:\windows\system32\mucltui.dll
2009-01-08 17:52 . 2008-10-16 14:06 27,496 --a------ k:\windows\system32\mucltui.dll.mui
2009-01-08 15:45 . 2009-01-08 15:45 <REP> d-------- k:\program files\Microsoft
2009-01-08 15:44 . 2009-01-08 15:44 <REP> d-------- k:\program files\Windows Live SkyDrive
2009-01-08 14:17 . 2009-01-08 22:55 <REP> d-------- k:\program files\FindyKill
2009-01-08 12:44 . 2009-01-08 12:47 <REP> d-------- k:\program files\AVI to DVD VCD DIVX MPEG Converter&Burner
2009-01-08 12:44 . 2005-06-01 12:15 966,144 --a------ k:\windows\system32\NCTAudioInformation2.dll
2009-01-08 12:44 . 2005-04-26 14:17 643,072 --a------ k:\windows\system32\DVDProX2.dll
2009-01-08 12:44 . 2005-06-01 11:54 634,880 --a------ k:\windows\system32\NCTAudioEditor2.dll
2009-01-08 12:44 . 2005-05-31 16:02 522,752 --a------ k:\windows\system32\NCTAudioTransform2.dll
2009-01-08 12:44 . 2005-03-28 15:54 478,208 --a------ k:\windows\system32\NCTAudioVisualization2.dll
2009-01-07 17:50 . 2009-01-07 17:50 <REP> d-------- k:\documents and settings\All Users\Application Data\PopCap
2009-01-06 20:03 . 2009-01-06 20:03 <REP> d-------- k:\program files\HiYo
2009-01-06 20:03 . 2009-01-06 20:03 <REP> d-------- k:\documents and settings\merle\Application Data\HiYo
2009-01-06 20:03 . 2009-01-06 20:03 <REP> d-------- k:\documents and settings\All Users\Application Data\HiYo
2009-01-06 14:17 . 2009-01-06 14:17 <REP> d-------- k:\documents and settings\merle\Application Data\TaskCoach
2009-01-06 08:52 . 2009-01-06 08:52 <REP> d-------- k:\documents and settings\merle\Saved Games
2009-01-06 08:52 . 2009-01-06 08:52 <REP> d-------- k:\documents and settings\merle\Application Data\Flood Light Games
2009-01-06 08:52 . 2009-01-06 08:52 <REP> d-------- k:\documents and settings\All Users\Application Data\Flood Light Games
2009-01-05 23:13 . 2009-01-05 23:13 <REP> d-------- k:\program files\Fichiers communs\GTK
2009-01-05 23:12 . 2009-01-05 23:16 <REP> d-------- k:\program files\Raveille
2009-01-05 22:37 . 2009-01-05 22:37 <REP> d-------- k:\documents and settings\merle\Application Data\Media Player Classic
2009-01-05 18:34 . 1994-08-24 00:00 188,960 --a------ k:\windows\system\WINGDE.DLL
2009-01-05 18:34 . 1994-09-21 00:00 92,208 --a------ k:\windows\system\WING.DLL
2009-01-05 18:34 . 1994-09-21 00:00 12,800 --a------ k:\windows\system32\WING32.DLL
2009-01-05 18:34 . 1994-09-08 00:00 7,168 --a------ k:\windows\system\DISPDIB.DLL
2009-01-05 18:34 . 1994-09-21 00:00 6,736 --a------ k:\windows\system\WINGDIB.DRV
2009-01-05 18:34 . 1994-09-21 00:00 5,024 --a------ k:\windows\system\WINGPAL.WND
2009-01-05 17:31 . 2009-01-05 17:31 <REP> d-------- k:\program files\Microsoft Games
2009-01-05 17:30 . 2009-01-05 17:30 <REP> d-------- k:\documents and settings\merle\WINDOWS
2009-01-05 17:30 . 1998-11-13 12:16 308,224 --a------ k:\windows\IsUn040c.exe
2008-12-26 23:48 . 2008-12-26 23:48 <REP> d-------- k:\program files\Fichiers communs\Real
2008-12-26 23:42 . 2009-01-05 14:49 <REP> d-------- k:\program files\NOS
2008-12-26 23:42 . 2009-01-05 14:50 <REP> d-------- k:\documents and settings\All Users\Application Data\NOS
2008-12-26 09:14 . 2008-12-26 09:14 <REP> d-------- k:\program files\SIW
2008-12-25 01:06 . 2008-12-25 01:06 <REP> d-------- k:\documents and settings\merle\Application Data\Thunderbird
2008-12-23 11:36 . 2008-12-23 11:36 <REP> d-------- k:\documents and settings\merle\Application Data\Canneverbe_Limited
2008-12-22 22:25 . 2008-12-22 22:25 <REP> d-------- k:\program files\Avira
2008-12-22 22:25 . 2008-12-22 22:25 <REP> d-------- k:\documents and settings\All Users\Application Data\Avira
2008-12-22 22:09 . 2009-01-05 17:30 <REP> d-------- k:\program files\Fichiers communs\Adobe
2008-12-22 22:03 . 2008-12-22 22:03 <REP> d-------- k:\documents and settings\merle\Application Data\ACD Systems
2008-12-22 21:58 . 2008-12-26 23:48 <REP> d-------- K:\Downloads
2008-12-22 21:36 . 2008-12-22 21:36 <REP> d-------- k:\program files\Raxco
2008-12-22 21:36 . 2009-01-07 18:02 <REP> d-a------ k:\program files\emule
2008-12-22 21:36 . 2008-12-22 21:36 <REP> d-------- k:\documents and settings\All Users\Application Data\Raxco
2008-12-22 21:36 . 2008-08-28 05:16 71,184 --a------ k:\windows\system32\drivers\DefragFS.sys
2008-12-22 21:33 . 2008-12-26 14:28 <REP> d-------- k:\program files\Mozilla Thunderbird
2008-12-22 21:32 . 2008-12-26 13:55 <REP> d-------- k:\program files\Samurize
2008-12-22 21:32 . 2008-12-22 21:32 <REP> d-------- k:\program files\CDBurnerXP
2008-12-22 21:32 . 2007-04-09 12:23 28,040 --a------ k:\windows\system32\mdimon.dll
2008-12-22 21:32 . 2008-12-22 21:32 385 --a------ k:\windows\ODBC.INI
2008-12-22 21:30 . 2008-12-22 21:31 <REP> d-------- k:\windows\SHELLNEW
2008-12-22 21:30 . 2008-12-22 21:30 <REP> d-------- k:\program files\Microsoft.NET
2008-12-22 21:27 . 2008-12-22 21:27 <REP> d-------- k:\program files\Real Alternative
2008-12-22 21:27 . 2008-12-22 21:27 <REP> d-------- k:\program files\QT Lite
2008-12-22 21:27 . 2008-12-27 01:18 <REP> d-------- k:\program files\Orbitdownloader
2008-12-22 21:27 . 2009-01-10 11:15 <REP> d-------- k:\documents and settings\merle\Application Data\Orbit
2008-12-22 21:27 . 2008-12-22 21:27 <REP> d-------- k:\documents and settings\merle\Application Data\GrabPro
2008-12-22 21:27 . 2008-12-22 21:27 <REP> d-------- k:\documents and settings\All Users\Application Data\Apple Computer
2008-12-22 21:27 . 2008-09-15 19:14 3,596,288 --a------ k:\windows\system32\qt-dx331.dll
2008-12-22 21:27 . 2008-09-15 19:11 683,520 --a------ k:\windows\system32\divx.dll
2008-12-22 21:27 . 2008-09-06 15:09 90,112 --a------ k:\windows\system32\QuickTimeVR.qtx
2008-12-22 21:27 . 2008-09-15 19:12 81,920 --a------ k:\windows\system32\dpl100.dll
2008-12-22 21:27 . 2008-09-06 15:09 57,344 --a------ k:\windows\system32\QuickTime.qts
2008-12-22 21:26 . 2008-12-22 21:26 <REP> d-------- k:\program files\Foxit Reader
2008-12-22 21:26 . 2008-12-22 21:26 <REP> d-------- k:\program files\FileZilla FTP Client
2008-12-22 21:26 . 2008-12-22 21:26 <REP> d-------- k:\program files\Fichiers communs\ACD Systems
2008-12-22 21:26 . 2008-12-22 21:26 <REP> d-------- k:\program files\ACD Systems
2008-12-22 21:26 . 2008-12-22 21:26 <REP> d-------- k:\documents and settings\All Users\Application Data\ACD Systems
2008-12-22 21:25 . 2008-12-26 14:31 <REP> d-a------ k:\program files\XYplorer
2008-12-22 21:25 . 2008-12-22 21:25 <REP> d-------- k:\program files\Kaspersky Lab
2008-12-22 21:24 . 2008-12-22 21:24 <REP> d-------- k:\program files\SuperCopier2
2008-12-22 21:24 . 2009-01-06 14:32 <REP> d-a------ k:\program files\Process Explorer
2008-12-22 21:24 . 2008-12-24 10:01 <REP> d-------- k:\program files\Notepad++
2008-12-22 21:24 . 2008-12-22 21:24 <REP> d-------- k:\program files\HashTab Shell Extension
2008-12-22 21:24 . 2008-12-22 21:24 <REP> d-------- k:\program files\CCleaner
2008-12-22 21:24 . 2008-12-22 21:24 <REP> d-------- k:\program files\7-Zip
2008-12-22 21:24 . 2008-12-22 21:46 <REP> d-------- k:\documents and settings\merle\Application Data\Notepad++
2008-12-22 21:23 . 2008-12-22 21:23 <REP> d-------- k:\windows\Logs
2008-12-22 20:59 . 2008-09-16 12:08 291 --a------ k:\windows\system32\mu_launcher.bat
2008-12-22 20:58 . 2008-02-04 18:23 693,792 --a------ k:\windows\system32\OGACheckControl.dll
2008-12-22 20:58 . 2008-10-16 14:06 208,744 --a------ k:\windows\system32\muweb.dll
2008-12-22 20:56 . 2008-12-22 20:56 <REP> d-------- k:\windows\system32\URTTEMP
2008-12-22 20:54 . 2008-12-22 21:21 <REP> d-------- k:\windows\system32\XPSViewer
2008-12-22 20:54 . 2008-12-22 20:54 <REP> d-------- k:\program files\Reference Assemblies
2008-12-22 20:54 . 2008-12-22 20:54 <REP> d-------- k:\program files\MSBuild
2008-12-22 20:54 . 2006-06-29 06:07 14,048 --------- k:\windows\system32\spmsg2.dll
2008-12-22 20:53 . 2006-08-24 09:15 150,808 --a------ k:\windows\system32\rgb9rast_2.dll
2008-12-22 20:52 . 2007-03-22 23:07 1,683,280 --------- k:\windows\system32\XpsSvcs.dll
2008-12-22 20:52 . 2007-03-22 23:07 1,683,280 --------- k:\windows\system32\dllcache\XpsSvcs.dll
2008-12-22 20:52 . 2007-03-22 13:25 677,376 --------- k:\windows\system32\dllcache\PrintFilterPipelineSvc.exe
2008-12-22 20:52 . 2007-03-22 23:07 583,504 --------- k:\windows\system32\XPSSHHDR.dll
2008-12-22 20:52 . 2007-03-22 23:07 583,504 --------- k:\windows\system32\dllcache\XPSSHHDR.dll
2008-12-22 20:51 . 2007-03-22 13:25 124,928 --------- k:\windows\system32\prntvpt.dll
2008-12-22 20:51 . 2007-03-22 13:24 28,160 --------- k:\windows\system32\dllcache\FilterPipelinePrintProc.dll
2008-12-22 16:07 . 2008-12-22 16:07 <REP> d-------- k:\program files\LimeWire
2008-12-22 12:13 . 2008-12-22 12:15 24 ---hs---- k:\windows\S4E6FB21E.tmp
2008-12-22 12:12 . 2008-12-22 12:12 <REP> d-------- k:\program files\SlySoft
2008-12-21 11:50 . 2008-12-21 11:50 <REP> d-------- k:\documents and settings\All Users\Application Data\n7-89-o9-3r-4t-r9
2008-12-20 23:37 . 2008-12-20 23:37 <REP> d--hs---- k:\windows\ftpcache
2008-12-20 23:37 . 2009-01-05 17:48 <REP> d-------- k:\program files\The Scruffs
2008-12-20 21:51 . 2008-12-20 21:54 <REP> d-------- k:\documents and settings\merle\Application Data\Pirateville
2008-12-20 21:04 . 2008-12-20 21:04 <REP> d-------- k:\documents and settings\merle\Application Data\GameHouse
2008-12-20 20:51 . 2008-12-20 20:51 <REP> d-------- k:\program files\LSoft Technologies

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-13 06:37 3,593,216 ------w k:\windows\system32\dllcache\mshtml.dll
2008-12-11 10:40 --------- d-----w k:\program files\Google
2008-12-10 21:49 --------- d--h--w k:\program files\InstallShield Installation Information
2008-12-10 19:33 --------- d-----w k:\program files\Fichiers communs\InstallShield
2008-12-10 16:55 --------- d-----w k:\program files\Fichiers communs\Windows Live
2008-12-10 16:40 315,392 ----a-w k:\windows\HideWin.exe
2008-12-10 16:40 --------- d-----w k:\program files\Realtek
2008-12-10 15:35 --------- d-----w k:\program files\Services en ligne
2008-12-10 15:33 --------- d-----w k:\program files\Windows Media Connect 2
2008-12-03 03:37 49,480 ----a-w k:\windows\system32\sirenacm.dll
2008-11-21 21:44 161,096 ----a-w k:\windows\system32\DivXCodecVersionChecker.exe
2008-10-30 14:05 58,880 ----a-w k:\windows\system32\dmutil.dll
2008-10-30 14:05 52,736 ----a-w k:\windows\system32\wzcsapi.dll
2008-10-30 14:05 50,688 ----a-w k:\windows\system32\cnbjmon.dll
2008-10-30 14:05 483,840 ----a-w k:\windows\system32\wzcsvc.dll
2008-10-30 14:05 47,616 ----a-w k:\windows\system32\iyuv_32.dll
2008-10-30 14:05 35,328 ----a-w k:\windows\system32\pid.dll
2008-10-30 14:05 20,992 ----a-w k:\windows\system32\hid.dll
2008-10-30 14:05 16,896 ----a-w k:\windows\system32\msyuv.dll
2008-10-30 14:05 15,360 ----a-w k:\windows\system32\pjlmon.dll
2008-10-30 13:59 219,648 ----a-w k:\windows\system32\uxtheme.dll
2008-10-30 13:59 142,336 ----a-w k:\windows\system32\sfc_os.dll
2008-10-30 13:59 1,847,040 ----a-w k:\windows\system32\win32k.sys
2008-10-30 13:58 74,240 ----a-w k:\windows\system32\mscms.dll
2008-10-30 13:58 691,712 ----a-w k:\windows\system32\inetcomm.dll
2008-10-30 13:58 414,720 ----a-w k:\windows\system32\msscp.dll
2008-10-30 13:58 253,952 ----a-w k:\windows\system32\es.dll
2008-10-30 13:58 247,808 ----a-w k:\windows\system32\mswsock.dll
2008-10-30 13:58 1,294,336 ----a-w k:\windows\system32\quartz.dll
2008-10-30 13:57 90,112 ----a-w k:\windows\system32\wshext.dll
2008-10-30 13:57 430,080 ----a-w k:\windows\system32\vbscript.dll
2008-10-30 13:57 180,224 ----a-w k:\windows\system32\scrobj.dll
2008-10-30 13:57 172,032 ----a-w k:\windows\system32\scrrun.dll
2008-10-30 13:57 155,648 ----a-w k:\windows\system32\wscript.exe
2008-10-30 13:57 135,168 ----a-w k:\windows\system32\cscript.exe
2008-10-23 12:36 286,720 ----a-w k:\windows\system32\gdi32.dll
2008-10-23 12:36 286,720 ------w k:\windows\system32\dllcache\gdi32.dll
2008-10-16 19:13 202,776 ----a-w k:\windows\system32\wuweb.dll
2008-10-16 19:13 1,809,944 ----a-w k:\windows\system32\wuaueng.dll
2008-10-16 19:12 561,688 ----a-w k:\windows\system32\wuapi.dll
2008-10-16 19:12 323,608 ----a-w k:\windows\system32\wucltui.dll
2008-10-16 19:09 92,696 ----a-w k:\windows\system32\cdm.dll
2008-10-16 19:09 51,224 ----a-w k:\windows\system32\wuauclt.exe
2008-10-16 19:09 43,544 ----a-w k:\windows\system32\wups2.dll
2008-10-16 19:08 34,328 ----a-w k:\windows\system32\wups.dll
2008-10-16 13:12 70,656 ------w k:\windows\system32\dllcache\ie4uinit.exe
2008-10-16 13:11 13,824 ------w k:\windows\system32\dllcache\ieudinit.exe
2008-10-15 07:06 633,632 ------w k:\windows\system32\dllcache\iexplore.exe
2008-10-15 07:04 161,792 ------w k:\windows\system32\dllcache\ieakui.dll
2008-12-11 10:40 122,880 ----a-w k:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="k:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-12-10 39408]
"ctfmon.exe"="k:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"msnmsgr"="k:\program files\Windows Live\Messenger\msnmsgr.exe" [2008-12-02 3882312]
"X'nBeep"="k:\program files\X'nBeep 1.1\XnBeep.exe" [2007-01-06 1067520]
"WMPNSCFG"="k:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="k:\windows\system32\NvCpl.dll" [2007-08-13 8466432]
"NvMediaCenter"="k:\windows\system32\NvMcTray.dll" [2007-08-13 81920]
"LogitechCommunicationsManager"="k:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2007-03-06 488984]
"LogitechQuickCamRibbon"="k:\program files\Labtec\WebCam10\WebCam10.exe" [2007-03-06 1060376]
"Google Desktop Search"="k:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-12-11 30192]
"CloneCDTray"="k:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 57344]
"avgnt"="k:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"Adobe Reader Speed Launcher"="k:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"Hiyo"="k:\program files\HiYo\bin\HiYo.exe" [2008-12-23 300336]
"nwiz"="nwiz.exe" [2007-08-13 k:\windows\system32\nwiz.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 k:\windows\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 k:\windows\SkyTel.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="k:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_2"="shell32" [X]
"_nltide_3"="advpack.dll" [2008-10-16 k:\windows\system32\advpack.dll]

k:\documents and settings\merle\Menu D‚marrer\Programmes\D‚marrage\
Registration Myst V [2008-12-10 0]

k:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Orbit.lnk - k:\program files\Orbitdownloader\orbitdm.exe [2008-12-22 1711304]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)
"NoStartMenuMyMusic"= 1 (0x1)
"NoNetworkConnections"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.ACDV"= ACDV.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\[u]0/uautocheck autochk *

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Post Install]
--a------ 2008-10-16 15:18 124928 k:\windows\system32\advpack.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"k:\\Program Files\\uTorrent\\uTorrent.exe"=
"k:\\Program Files\\LimeWire\\LimeWire.exe"=
"k:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe"=
"k:\\Program Files\\PKR\\pkr.exe"=
"k:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"k:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"k:\\Program Files\\EA GAMES\\Need for Speed Undercover\\nfs.exe"=
"k:\\Program Files\\Microsoft Games\\FS2002\\fs2002.exe"=
"k:\\Program Files\\emule\\eMule.exe"=
"k:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"34369:TCP"= 34369:TCP:µtorrent

S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;k:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2008-12-11 30192]
S3 PD91Engine;PD91Engine;k:\program files\Raxco\PerfectDisk2008\PD91Engine.exe [2008-09-09 906504]
S4 PD91Agent;PD91Agent;k:\program files\Raxco\PerfectDisk2008\PD91Agent.exe [2008-09-09 693512]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.ca/
IE: &Download by Orbit - k:\program files\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - k:\program files\Orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - k:\program files\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - k:\program files\Orbitdownloader\orbitmxt.dll/202
IE: E&xporter vers Microsoft Excel - k:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - k:\documents and settings\merle\Application Data\Mozilla\Firefox\Profiles\h2k1ufgj.default\
FF - prefs.js: browser.startup.homepage - hxxp://search.orbitdownloader.com
FF - component: k:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: k:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: k:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: k:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: k:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-10 11:17:25
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1454471165-117609710-1177238915-1003\Software\SecuROM\License information*]
"datasecu"=hex:2d,18,e9,d8,cf,d3,b9,a9,d6,c4,8f,4c,a6,50,3e,35,1d,b5,95,45,86,
c3,a1,5e,76,8a,67,87,57,f7,b5,aa,7a,c9,e4,da,1f,6b,68,fa,29,2e,d7,91,c1,60,\
"rkeysecu"=hex:4e,03,82,1e,34,a4,e8,4f,b1,38,4b,0d,06,ce,0c,82

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="K?\\WINDOWS\\system32\\FM20ENU.DLL"
.
Heure de fin: 2009-01-10 11:18:04
ComboFix-quarantined-files.txt 2009-01-10 16:18:02
ComboFix2.txt 2009-01-10 16:14:02

Avant-CF: 34,530,951,168 octets libres
Après-CF: 34,523,422,720 octets libres

304 --- E O F --- 2009-01-08 23:45:09