Infecté de virus

Voilà :

############################## [ FindyKill V4.716 ]

# User : Poste de Travail () # MIKA
# Update on 10/02/09 by Chiquitine29
# Start at: 17:03:57 | 16/02/2009

# Intel(R) Pentium(R) 4 CPU 3.40GHz
# Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 7.0.5730.11
# Windows Firewall Status : Disabled
# AV : Avira AntiVir PersonalEdition Classic 8.0.1.30 [ (!) Disabled | (!) Outdated ]

# C:\ # Disque fixe local (BOOT) # NTFS
# D:\ # Disque fixe local (BACKUP) # NTFS
# E:\ # Disque fixe local (RECOVER) # FAT32
# F:\ # Disque fixe local (DATA) # NTFS
# G:\ # Disque CD-ROM
# H:\ # Disque CD-ROM
# K:\ # Disque amovible
# L:\ # Disque amovible
# P:\ # Disque amovible

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Wireless LAN Utility\SiWake.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Fichiers / Dossiers infectieux C:\ ]

################## [ C:\WINDOWS ]

################## [ C:\WINDOWS\Prefetch ]

################## [ C:\WINDOWS\system32 ]

################## [ C:\WINDOWS\system32\drivers ]

################## [ C:\Documents and Settings\Poste de Travail\Application Data ]

################## [ C:\DOCUME~1\POSTED~1\LOCALS~1\Temp ]

################## [ Registre / Clés infectieuses ]

################## [ Etat / Services ]

# Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio # Type de démarrage = 3

EapHost # Type de démarrage = 2

Ip6Fw # Type de démarrage = 2

SharedAccess # Type de démarrage = 2

wuauserv # Type de démarrage = 2

wscsvc # Type de démarrage = 2

################## [ Recherche dans supports amovibles]

# presence des fichiers :

################## [ Registre / Mountpoint2 ]

# -> Not found !

################## [ ! Fin du rapport # FindyKill V4.716 ! ]

OK, c'est fait :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Poste de Travail at 2009-02-16 16:08:45
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 24 GB (33%) free of 72 GB
Total RAM: 1023 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:08:55, on 16/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Wireless LAN Utility\SiWake.exe
C:\Documents and Settings\Poste de Travail\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Poste de Travail.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8100
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: SiWake.lnk = C:\Program Files\Wireless LAN Utility\SiWake.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.carrefour.fr/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2

Voici :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder c:\windows\services.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled\\ deleted successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_334.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02162009_141616

Files moved on Reboot...
File C:\WINDOWS\temp\Perflib_Perfdata_334.dat not found!

Voilà pour toi :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder c:\windows\services.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled\\ deleted successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_334.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02162009_141616

Files moved on Reboot...
File C:\WINDOWS\temp\Perflib_Perfdata_334.dat not found!

@MikaDsl, double post, je pensais que le post n'était pas passé.

Salut gen-hackman, voilà le rapport malwarebytes :

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 5.1.2600 Service Pack 3

16/02/2009 11:21:17
mbam-log-2009-02-16 (11-21-17).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|)
Eléments examinés: 166430
Temps écoulé: 2 hour(s), 35 minute(s), 50 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Bon vu que ça met plus de 2h à ce faire, je te poste le résultat demain.

Je te souhaite de passer une bonne soirée.

Voilà :

ComboFix 09-02-11.03 - Poste de Travail 2009-02-15 20:26:32.8 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1023.670 [GMT 1:00]
Lancé depuis: c:\documents and settings\Poste de Travail\Bureau\moi.exe
Commutateurs utilisés :: c:\documents and settings\Poste de Travail\Bureau\CFScript.txt
AV: Avira AntiVir PersonalEdition Classic *On-access scanning disabled* (Outdated)
* Un nouveau point de restauration a été créé

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!

FILE ::
c:\windows\system32\wunilog.ini
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\wunilog.ini

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_Passthru

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-15 au 2009-02-15 ))))))))))))))))))))))))))))))))))))
.

2086-03-17 07:19 . 2086-03-17 07:19 27,023 --a------ C:\acqmod
2086-03-17 07:13 . 2003-03-18 19:05 89,088 --a------ c:\windows\system32\atl71.dll
2086-03-17 07:13 . 2003-03-18 20:44 65,536 --a------ c:\windows\system32\MFC71DEU.DLL
2086-03-17 07:13 . 2003-03-18 20:44 61,440 --a------ c:\windows\system32\MFC71ITA.DLL
2086-03-17 07:13 . 2003-03-18 20:44 61,440 --a------ c:\windows\system32\MFC71ESP.DLL
2086-03-17 07:13 . 2003-03-18 20:44 57,344 --a------ c:\windows\system32\MFC71ENU.DLL
2086-03-17 07:13 . 2003-03-18 20:44 49,152 --a------ c:\windows\system32\MFC71KOR.DLL
2086-03-17 07:13 . 2003-03-18 20:44 49,152 --a------ c:\windows\system32\MFC71JPN.DLL
2086-03-17 07:13 . 2003-03-18 20:44 45,056 --a------ c:\windows\system32\MFC71CHT.DLL
2086-03-17 07:13 . 2003-03-18 20:44 40,960 --a------ c:\windows\system32\MFC71CHS.DLL
2086-03-15 23:37 . 2001-05-11 13:18 420,240 --a------ c:\windows\system32\mpg4c32.dll
2086-03-15 23:37 . 2001-03-26 04:41 245,760 --a------ c:\windows\system32\mp4sds32.ax
2009-02-15 19:16 . 2009-02-15 19:16 <REP> d-------- C:\Rooter$
2009-02-14 21:20 . 2009-02-14 21:22 <REP> d-------- c:\program files\Wireless LAN Utility
2009-02-14 21:20 . 2009-02-14 21:20 <REP> d-------- c:\program files\SiSWLAN
2009-02-14 21:20 . 2005-08-04 17:28 69,632 --a------ c:\windows\system32\unWdWu.exe
2009-02-14 21:20 . 2005-04-14 17:02 31,872 --a------ c:\windows\system32\drivers\sisnpf.sys
2009-02-14 21:08 . 2009-02-14 21:10 <REP> d-------- C:\Lop SD
2009-02-14 19:58 . 2009-02-15 19:32 <REP> d-------- c:\documents and settings\All Users\Application Data\ma-config.com
2009-02-11 17:45 . 2009-02-11 18:41 <REP> d-------- c:\program files\FindyKill
2009-02-11 17:18 . 2009-02-11 19:04 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-02-11 17:18 . 2009-02-11 17:18 <REP> d-------- c:\documents and settings\Poste de Travail\Application Data\Malwarebytes
2009-02-11 17:18 . 2009-02-11 17:18 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-02-11 17:18 . 2009-01-14 16:11 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 17:18 . 2009-01-14 16:11 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-02-11 16:38 . 2009-02-11 16:38 579,584 --a--c--- c:\windows\system32\dllcache\user32.dll
2009-02-11 16:36 . 2009-02-11 16:37 <REP> d-------- c:\windows\ERUNT
2009-02-11 16:33 . 2009-02-11 16:45 <REP> d-------- C:\SDFix
2009-02-11 16:27 . 2009-02-11 16:27 <REP> d-------- C:\_OTMoveIt
2009-02-11 15:58 . 2009-02-11 15:58 213,632 --a--c--- c:\windows\system32\dllcache\ndis.sys
2009-02-11 15:33 . 2009-02-11 15:33 <REP> d-------- C:\rsit
2009-02-11 14:56 . 2009-02-11 14:56 <REP> d-------- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-02-11 14:55 . 2009-02-11 14:55 1,374 --a------ c:\windows\imsins.BAK
2009-02-11 14:43 . 2009-02-11 14:43 <REP> d-------- c:\program files\Opera
2009-02-11 12:45 . 2005-02-22 10:27 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage réseau
2009-02-11 12:45 . 2005-02-22 10:27 <REP> d--h----- c:\documents and settings\Administrateur\Voisinage d'impression
2009-02-11 12:45 . 2005-02-22 13:15 <REP> d---s---- c:\documents and settings\Administrateur\UserData
2009-02-11 12:45 . 2005-02-22 09:31 <REP> d--h----- c:\documents and settings\Administrateur\Modèles
2009-02-11 12:45 . 2009-02-15 19:26 <REP> dr------- c:\documents and settings\Administrateur\Mes documents
2009-02-11 12:45 . 2009-02-15 19:26 <REP> dr------- c:\documents and settings\Administrateur\Menu Démarrer
2009-02-11 12:45 . 2009-02-15 19:26 <REP> dr------- c:\documents and settings\Administrateur\Favoris
2009-02-11 12:45 . 2005-02-22 13:05 <REP> d-------- c:\documents and settings\Administrateur\Bureau
2009-02-11 12:45 . 2005-02-22 12:49 <REP> d-------- c:\documents and settings\Administrateur\Application Data\You've Got Pictures Screensaver
2009-02-11 12:45 . 2005-02-22 12:27 <REP> d-------- c:\documents and settings\Administrateur\Application Data\CyberLink
2009-02-11 12:45 . 2008-05-06 16:52 <REP> d-------- c:\documents and settings\Administrateur\Application Data\AOL
2009-02-11 12:45 . 2009-02-11 12:45 <REP> d-------- c:\documents and settings\Administrateur
2009-02-11 12:41 . 2009-02-11 16:06 137,408 --a------ c:\windows\system32\drivers\ethdbzdh.sys
2009-02-11 12:13 . 2009-02-11 12:13 <REP> d-------- c:\program files\Trend Micro
2009-02-11 11:37 . 2009-02-11 11:49 250 --a------ c:\windows\gmer.ini
2009-02-11 11:32 . 2009-02-11 11:32 <REP> d-------- c:\program files\Avira
2009-02-11 11:32 . 2009-02-11 11:32 <REP> d-------- c:\documents and settings\All Users\Application Data\Avira
2009-02-11 11:10 . 2009-02-11 11:10 <REP> d-------- c:\documents and settings\Poste de Travail\DoctorWeb
2009-02-11 10:13 . 2009-02-11 11:16 <REP> d-------- c:\windows\BDOSCAN8
2009-02-11 10:13 . 2008-10-16 14:06 268,648 --a------ c:\windows\system32\mucltui.dll
2009-02-11 10:13 . 2008-10-16 14:06 27,496 --a------ c:\windows\system32\mucltui.dll.mui
2009-02-10 22:51 . 2009-02-10 22:52 <REP> d-------- c:\documents and settings\All Users\Application Data\Lavasoft
2009-02-10 22:41 . 2009-02-10 22:41 410,984 --a------ c:\windows\system32\deploytk.dll
2009-02-10 22:41 . 2009-02-10 22:41 73,728 --a------ c:\windows\system32\javacpl.cpl
2009-02-10 22:10 . 2009-02-10 23:00 <REP> d-------- c:\windows\SxsCaPendDel
2009-02-10 22:00 . 2009-02-10 22:00 <REP> d-------- c:\program files\Uniblue
2009-01-30 16:39 . 2007-11-06 20:00 158,263 --a------ c:\windows\system32\nvapps.nvb
2009-01-25 16:09 . 2008-10-10 04:52 4,379,984 --a------ c:\windows\system32\D3DX9_40.dll
2009-01-25 16:09 . 2008-10-10 04:52 2,036,576 --a------ c:\windows\system32\D3DCompiler_40.dll
2009-01-25 16:09 . 2008-10-27 10:04 514,384 --a------ c:\windows\system32\XAudio2_3.dll
2009-01-25 16:09 . 2008-10-10 04:52 452,440 --a------ c:\windows\system32\d3dx10_40.dll
2009-01-25 16:09 . 2008-10-27 10:04 235,856 --a------ c:\windows\system32\xactengine3_3.dll
2009-01-25 16:09 . 2008-10-27 10:04 70,992 --a------ c:\windows\system32\XAPOFX1_2.dll
2009-01-25 16:08 . 2008-10-27 10:04 23,376 --a------ c:\windows\system32\X3DAudio1_5.dll
2009-01-22 10:59 . 2009-01-22 10:59 <REP> d-------- c:\documents and settings\Poste de Travail\Application Data\GlarySoft
2009-01-22 10:52 . 2009-01-22 10:52 <REP> d-------- c:\program files\Glary Utilities
2009-01-20 14:19 . 2009-02-14 21:19 <REP> d-------- c:\program files\Inventel
2009-01-20 14:19 . 2009-01-20 14:19 81,920 --a------ c:\windows\system32\W32N50.DLL
2009-01-20 14:19 . 2009-02-14 20:41 17,134 --a------ c:\windows\system32\PCANDIS5.SYS

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2086-03-17 06:12 --------- d-----w c:\documents and settings\All Users\Application Data\QuickTime
2009-02-15 19:29 17,408 ----a-w c:\windows\system32\drivers\USBCRFT.SYS
2009-02-14 12:57 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-11 19:52 --------- d-----w c:\program files\DB Commander 2000 PRO
2009-02-11 14:58 213,632 ----a-w c:\windows\system32\drivers\ndis.sys
2009-02-11 14:00 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-02-11 11:54 --------- d-----w c:\program files\CCleaner
2009-02-11 11:54 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-11 10:28 77,784 ----a-w c:\windows\bdoscandel.exe
2009-02-11 10:28 562,176 ----a-w c:\windows\zHotkey.exe
2009-02-11 10:28 110,592 ----a-w c:\windows\Dit.exe
2009-02-11 10:28 1,054,720 ----a-w c:\windows\explorer.exe
2009-02-10 21:41 --------- d-----w c:\program files\Java
2009-02-10 19:55 --------- d-----w c:\program files\Windows Media Connect
2009-02-10 19:46 --------- d-----w c:\program files\Fichiers communs\Ahead
2009-02-10 17:45 --------- d-----w c:\documents and settings\Poste de Travail\Application Data\Azureus
2009-02-10 11:56 137,688 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-01-30 14:48 --------- d-----w c:\program files\7-Zip
2009-01-29 08:09 --------- d-----w c:\program files\Azureus
2009-01-03 15:33 --------- d-----w c:\documents and settings\Poste de Travail\Application Data\www.pro-evo.xooit.fr
2009-01-01 22:08 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-12-28 14:17 --------- d-----w c:\program files\NBA 2K9
2007-09-18 11:24 1,880 ----a-w c:\documents and settings\Poste de Travail\Application Data\wklnhst.dat
.

------- Sigcheck -------

2004-08-05 13:00 31232 155873e0ae86b97e1cd9bf5360d20795 c:\windows\$NtServicePackUninstall$\svchost.exe
2008-04-14 03:34 31232 99fa8eb6e6fbcd7e16aed1597a248950 c:\windows\system32\svchost.exe

2004-08-05 13:00 182912 558635d3af1c7546d26067d5d9b6959e c:\windows\$NtServicePackUninstall$\ndis.sys
2008-04-13 20:20 182656 1df7f42665c94b825322fae71721130d c:\windows\ServicePackFiles\i386\ndis.sys
2009-02-11 15:58 213632 ed336342ef3a2b4481cbcb026688b959 c:\windows\system32\dllcache\ndis.sys
2009-02-11 15:58 213632 0befb1abd0e498ae8a73088df192bb51 c:\windows\system32\drivers\ndis.sys

2009-02-11 11:28 1054720 e0e3680b0c32629ca358bf7f51e0ee78 c:\windows\explorer.exe
2004-08-05 13:00 1053184 e837f8fc2503dee64d3ee84255bc029d c:\windows\$NtServicePackUninstall$\explorer.exe
2008-04-14 03:34 1054720 c074e540441eade940d6f59bc0364138 c:\windows\ServicePackFiles\i386\explorer.exe

2008-04-14 03:33 32768 a17baf1275ac2982ad670e5dcd1b5e8c c:\windows\ServicePackFiles\i386\ctfmon.exe
2009-02-11 11:28 32256 56ff52afc4cad4c55ca7ab4e8c766809 c:\windows\system32\ctfmon.exe

2008-04-14 03:34 74752 f433148b7c7f29dd87b02a407b13b283 c:\windows\ServicePackFiles\i386\spoolsv.exe
2009-02-11 11:28 75264 77b1b9d5b2c0e847330f17b457eb939b c:\windows\system32\spoolsv.exe

2004-08-05 13:00 41984 525693d91b03f32d5f9fbbb05c635315 c:\windows\$NtServicePackUninstall$\userinit.exe
2009-02-11 11:28 43520 0263cb6fc0e1da11104544ce1e59e5ab c:\windows\system32\userinit.exe
.
((((((((((((((((((((((((((((( SnapShot@2009-02-12_18.29.27.90 )))))))))))))))))))))))))))))))))))))))))
.
- 2000-08-31 07:00:00 179,200 ----a-w c:\windows\SWREG.exe
+ 2000-08-31 07:00:00 179,712 ----a-w c:\windows\SWREG.exe
- 2009-02-12 17:27:36 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2009-02-15 19:28:46 16,384 ----a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2009-02-12 17:27:36 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2009-02-15 19:28:46 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
- 2009-02-12 17:27:36 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2009-02-15 19:28:46 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2009-02-12 17:27:33 303,624 ----a-w c:\windows\system32\FNTCACHE.DAT
+ 2009-02-15 19:28:43 303,624 ----a-w c:\windows\system32\FNTCACHE.DAT
+ 2009-02-15 19:28:47 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_348.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2009-02-11 32256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-06 8523776]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-06 81920]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-10 148888]
"nwiz"="nwiz.exe" [2009-02-11 c:\windows\system32\nwiz.exe]
"Dit"="Dit.exe" [2009-02-11 c:\windows\Dit.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2004-10-08 c:\windows\AGRSMMSG.exe]
"CHotkey"="zHotkey.exe" [2009-02-11 c:\windows\zHotkey.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2009-02-11 32256]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
SiWake.lnk - c:\program files\Wireless LAN Utility\SiWake.exe [2009-02-14 176128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.enc"= ITIG726.acm

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Omnipage"=c:\program files\ScanSoft\OmniPageSE\opware32.exe
"services"=c:\windows\services.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Azureus\\Azureus.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3sp.exe"=
"c:\\Program Files\\CCleaner\\ccleaner.exe"=
"c:\\Program Files\\NBA 2K9\\nba2k9.exe"=
"c:\\Program Files\\Outlook Express\\msimn.exe"=
"c:\\Program Files\\Uniblue\\RegistryBooster 2\\RegistryBooster.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"f:\\Jeux\\PES 2009\\pes2009.exe"=
"c:\\Documents and Settings\\Poste de Travail\\Mes documents\\My telechargements\\Jeux\\PES 09\\pes2009.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

R1 oxser;OX16C95x Serial port driver;c:\windows\system32\drivers\OXSER.SYS [2005-02-22 51169]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [2005-02-22 945152]
R3 cmudax;C-Media High Definition Audio Interface;c:\windows\system32\drivers\cmudax.sys [2005-02-22 1272000]
R3 wbscr;Winbond Smartcard Reader for I/O;c:\windows\system32\drivers\wbscr.sys [2005-02-22 19928]
S1 ethdbzdh;ethdbzdh;c:\windows\system32\drivers\ethdbzdh.sys [2009-02-11 137408]
S3 Camdrv30;Philips ToUcam XS;c:\windows\system32\drivers\camdrv30.sys [2005-04-21 171264]
S3 CardReaderFilter;Card Reader Filter;c:\windows\system32\drivers\USBCRFT.SYS [2005-02-22 17408]
S3 Ndisprot;ArcNet NDIS Protocol Driver;c:\windows\system32\drivers\ndisprot.sys [2008-11-20 27904]
S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [2008-10-30 217088]
S3 w300mgmt;Sony Ericsson W300 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\w300mgmt.sys [2007-01-24 87824]
S3 w300obex;Sony Ericsson W300 USB WMC OBEX Interface;c:\windows\system32\drivers\w300obex.sys [2007-01-24 85696]
.
Contenu du dossier 'Tâches planifiées'

2009-02-15 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-01-10 17:02]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://google.fr/
mStart Page = hxxp://www.01net.com/telecharger/
uInternet Settings,ProxyServer = 127.0.0.1:8100
uInternet Settings,ProxyOverride = localhost
IE: &Recherche AOL Toolbar - c:\program files\AOL Toolbar\toolbar.dll/SEARCH.HTML
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-15 20:29:07
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwOpenFile

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1698149477-2342113533-2771304400-1006\Software\G*e*n*i*e*"!\FM Genie Scout 2009 XE]
"GameDir"=""
"ShortlistDir"=""
"ScreenshotsDir"=""
"SaveDir"=""
"LangDB"=""
"LastSaveGame"=""
"Language"="English"
"LoadLangDB"=dword:00000000
"CompressHistoryPoints"=dword:00000000
"HighlightedAttributes"=dword:00000000
"MinCondition"=dword:00000050
"SkinName"="Champions League"
"LastUpdateCheck"=dword:00000000
"HighQualityGUI"=dword:00000001
"AutomaticallyUpdateCheck"=dword:00000001
"AdvancedGeneration"=dword:00000000
"TranslateStaffSkills"=dword:00000001
"TranslatePlayerSkills"=dword:00000001
"TranslatePositions"=dword:00000001
"ShowHistory"=dword:00000001
"Version"=dword:00000066
"UniqueID"="44-0840-451F"
"UseProxy"=dword:00000000
"ProxyHost"=""
"ProxyPort"=""
"UseAuthentication"=dword:00000000
"UserName"=""
"UserPassword"=""
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\scardsvr.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\rundll32.exe
.
**************************************************************************
.
Heure de fin: 2009-02-15 20:31:21 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-02-15 19:31:18
ComboFix2.txt 2009-02-15 17:36:21
ComboFix3.txt 2009-02-14 17:17:06
ComboFix4.txt 2009-02-14 15:47:47
ComboFix5.txt 2009-02-15 19:26:10

Avant-CF: 24 863 535 104 octets libres
Après-CF: 24,896,786,432 octets libres

278 --- E O F --- 2009-02-11 14:00:12

C'est fait, voilà le log RSIT :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Poste de Travail at 2009-02-15 19:29:16
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 24 GB (33%) free of 72 GB
Total RAM: 1023 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:29:23, on 15/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Wireless LAN Utility\SiWake.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Poste de Travail\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Poste de Travail.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8100
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: SiWake.lnk = C:\Program Files\Wireless LAN Utility\SiWake.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.carrefour.fr/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2

Voici le rapport :

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Poste de Travail ( Administrator )
BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Not Activated)

C:\ (Local Disk) - NTFS - Total:70 Go (Free:22 Go)
D:\ (Local Disk) - NTFS - Total:68 Go (Free:67 Go)
E:\ (Local Disk) - FAT32 - Total:9 Go (Free:7 Go)
F:\ (Local Disk) - NTFS - Total:149 Go (Free:74 Go)
G:\ (CD or DVD)
H:\ (CD or DVD)
K:\ (USB)
L:\ (USB)
P:\ (USB)

15/02/2009|19:16

----------------------\\ Search..

No infections found !

1 - "C:\Rooter$\Rooter_1.txt" - 15/02/2009|19:16

----------------------\\ Scan completed at 19:16

Salut gen-hackman, voici le rapport OTMoveIt3 :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\2_solid converter pdf crack.txt moved successfully.
C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\Solid Converter Crack.txt moved successfully.
C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\Solid Converter Pdf Crack(2).txt moved successfully.
C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\Solid Converter Us (Crack).txt moved successfully.
C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd moved successfully.
File/Folder C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\gta_sa(original).exe not found.
File/Folder C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\GTA_SA.EXE not found.
File/Folder C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\HOODLUM.NFO not found.
File/Folder C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\Lisez-moi.txt not found.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\"AppInit_DLLS"|"" /E : value set successfully!
========== COMMANDS ==========
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_388.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02152009_104409

Files moved on Reboot...
File C:\WINDOWS\temp\Perflib_Perfdata_388.dat not found!

@MikaVoilà le rapport malwarebytes, il n'a rien trouvé mais bon :

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 5.1.2600 Service Pack 3

15/02/2009 13:26:52
mbam-log-2009-02-15 (13-26-52).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|)
Eléments examinés: 166726
Temps écoulé: 2 hour(s), 35 minute(s), 34 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

@MikaEt voivi le rapport RSIT :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Poste de Travail at 2009-02-15 13:29:15
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 23 GB (32%) free of 72 GB
Total RAM: 1023 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:29:24, on 15/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Dit.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Wireless LAN Utility\SiWake.exe
C:\Documents and Settings\Poste de Travail\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Poste de Travail.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8100
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: SiWake.lnk = C:\Program Files\Wireless LAN Utility\SiWake.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.carrefour.fr/
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2

Voilà le rapport :

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.40GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Poste de Travail ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Not Activated)
C:\ (Local Disk) - NTFS - Total:70 Go (Free:22 Go)
D:\ (Local Disk) - NTFS - Total:68 Go (Free:67 Go)
E:\ (Local Disk) - FAT32 - Total:9 Go (Free:7 Go)
F:\ (Local Disk) - NTFS - Total:149 Go (Free:74 Go)
G:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
H:\ (CD or DVD)
K:\ (USB)
L:\ (USB)
P:\ (USB)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 14/02/2009|21:09 )

--------------------\\ Listing des dossiers dans APPLIC~1

[06/05/2008|16:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\AOL
[22/02/2005|12:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\CyberLink
[22/02/2005|09:34] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[22/02/2005|13:43] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[22/02/2005|11:27] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
[22/02/2005|13:52] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
[22/02/2005|11:51] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
[22/02/2005|12:49] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

[17/09/2006|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\4D
[24/01/2007|16:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[22/02/2005|11:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
[01/12/2008|10:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
[11/02/2009|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
[03/11/2008|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[10/02/2009|22:52] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
[14/02/2009|19:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
[11/02/2009|17:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
[10/02/2009|21:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[11/02/2009|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
[22/02/2005|13:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
[25/04/2005|14:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[17/03/2086|07:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
[22/02/2005|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
[11/02/2009|12:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[30/05/2007|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanAppDataDir
[30/05/2007|12:02] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SSScanWizard
[18/09/2008|15:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
[31/10/2008|13:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[01/01/2009|23:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[06/05/2008|16:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\AOL
[22/02/2005|12:27] C:\DOCUME~1\DEFAUL~1\APPLIC~1\CyberLink
[22/02/2005|09:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[22/02/2005|13:43] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[22/02/2005|11:27] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
[22/02/2005|13:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
[22/02/2005|11:51] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
[22/02/2005|12:49] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

[01/12/2008|10:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
[22/02/2005|13:31] C:\DOCUME~1\LOCALS~1\APPLIC~1\X10 Commander

[01/12/2008|10:14] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
[22/02/2005|13:12] C:\DOCUME~1\NETWOR~1\APPLIC~1\X10 Commander

[05/12/2008|22:32] C:\DOCUME~1\POSTED~1\APPLIC~1\2K Sports
[24/01/2007|16:09] C:\DOCUME~1\POSTED~1\APPLIC~1\Adobe
[21/11/2005|16:28] C:\DOCUME~1\POSTED~1\APPLIC~1\AdobeUM
[26/02/2007|19:15] C:\DOCUME~1\POSTED~1\APPLIC~1\Ahead
[06/05/2008|16:52] C:\DOCUME~1\POSTED~1\APPLIC~1\AOL
[29/05/2006|10:35] C:\DOCUME~1\POSTED~1\APPLIC~1\ArcSoft
[10/02/2009|18:45] C:\DOCUME~1\POSTED~1\APPLIC~1\Azureus
[06/10/2008|17:18] C:\DOCUME~1\POSTED~1\APPLIC~1\Canon
[09/07/2008|16:34] C:\DOCUME~1\POSTED~1\APPLIC~1\CyberLink
[04/11/2008|00:27] C:\DOCUME~1\POSTED~1\APPLIC~1\DAEMON Tools
[16/04/2007|19:23] C:\DOCUME~1\POSTED~1\APPLIC~1\dvdcss
[22/01/2009|10:59] C:\DOCUME~1\POSTED~1\APPLIC~1\GlarySoft
[18/04/2005|12:41] C:\DOCUME~1\POSTED~1\APPLIC~1\Help
[22/02/2005|09:34] C:\DOCUME~1\POSTED~1\APPLIC~1\Identities
[07/09/2006|18:33] C:\DOCUME~1\POSTED~1\APPLIC~1\Inkscape
[30/06/2008|16:10] C:\DOCUME~1\POSTED~1\APPLIC~1\Leadertech
[24/08/2008|18:47] C:\DOCUME~1\POSTED~1\APPLIC~1\Macromedia
[11/02/2009|17:18] C:\DOCUME~1\POSTED~1\APPLIC~1\Malwarebytes
[14/02/2009|13:26] C:\DOCUME~1\POSTED~1\APPLIC~1\Microsoft
[07/09/2006|18:28] C:\DOCUME~1\POSTED~1\APPLIC~1\Mozilla
[06/05/2008|16:51] C:\DOCUME~1\POSTED~1\APPLIC~1\MSNInstaller
[11/02/2009|14:43] C:\DOCUME~1\POSTED~1\APPLIC~1\Opera
[01/12/2008|13:56] C:\DOCUME~1\POSTED~1\APPLIC~1\Qualcomm
[09/07/2008|10:10] C:\DOCUME~1\POSTED~1\APPLIC~1\Real
[30/05/2007|12:02] C:\DOCUME~1\POSTED~1\APPLIC~1\ScanSoft
[22/02/2005|11:51] C:\DOCUME~1\POSTED~1\APPLIC~1\Sun
[24/01/2007|16:11] C:\DOCUME~1\POSTED~1\APPLIC~1\Teleca
[12/01/2006|08:16] C:\DOCUME~1\POSTED~1\APPLIC~1\Template
[01/01/2008|18:08] C:\DOCUME~1\POSTED~1\APPLIC~1\Tributech
[22/04/2008|20:42] C:\DOCUME~1\POSTED~1\APPLIC~1\Uniblue
[01/12/2008|13:48] C:\DOCUME~1\POSTED~1\APPLIC~1\uTorrent
[15/10/2006|22:06] C:\DOCUME~1\POSTED~1\APPLIC~1\vlc
[11/02/2009|16:43] C:\DOCUME~1\POSTED~1\APPLIC~1\WinRAR
[03/01/2009|16:33] C:\DOCUME~1\POSTED~1\APPLIC~1\www.pro-evo.xooit.fr
[22/02/2005|12:49] C:\DOCUME~1\POSTED~1\APPLIC~1\You've Got Pictures Screensaver

[26/10/2005|11:15] C:\DOCUME~1\PROPRI~1\APPLIC~1\You've Got Pictures Screensaver

--------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

[14/02/2009 16:45][--a------] C:\WINDOWS\tasks\GlaryInitialize.job
[05/08/2004 13:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini
[14/02/2009 18:17][--ah-----] C:\WINDOWS\tasks\SA.DAT

--------------------\\ Listing des dossiers dans C:\Program Files

[30/01/2009|15:48] C:\Program Files\7-Zip
[11/07/2008|13:38] C:\Program Files\Activision
[10/07/2008|13:12] C:\Program Files\Adobe
[06/05/2008|16:47] C:\Program Files\ArcSoft
[24/08/2008|18:40] C:\Program Files\AVG
[11/02/2009|11:32] C:\Program Files\Avira
[29/01/2009|09:09] C:\Program Files\Azureus
[07/09/2006|18:31] C:\Program Files\Blender Foundation
[16/01/2006|12:12] C:\Program Files\Borland
[11/02/2009|12:54] C:\Program Files\CCleaner
[22/02/2005|11:48] C:\Program Files\Common Files
[22/02/2005|09:55] C:\Program Files\Create bootable flashcards
[22/02/2005|12:22] C:\Program Files\CyberLink
[11/02/2009|20:52] C:\Program Files\DB Commander 2000 PRO
[26/11/2008|15:28] C:\Program Files\EA SPORTS
[14/02/2009|18:15] C:\Program Files\Fichiers communs
[11/02/2009|18:41] C:\Program Files\FindyKill
[01/05/2007|17:20] C:\Program Files\FLV Player
[07/11/2008|13:14] C:\Program Files\Free Easy Burner
[22/01/2009|10:52] C:\Program Files\Glary Utilities
[22/02/2005|13:29] C:\Program Files\HighMAT CD Writing Wizard
[14/02/2009|13:57] C:\Program Files\InstallShield Installation Information
[22/02/2005|09:46] C:\Program Files\Intel
[31/10/2008|14:14] C:\Program Files\Internet Explorer
[20/01/2009|14:19] C:\Program Files\Inventel
[10/02/2009|22:41] C:\Program Files\Java
[23/08/2006|15:46] C:\Program Files\Logitech
[14/02/2009|19:58] C:\Program Files\ma-config.com
[11/02/2009|19:04] C:\Program Files\Malwarebytes' Anti-Malware
[20/11/2008|11:17] C:\Program Files\Messenger
[11/02/2009|14:56] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[22/02/2005|09:34] C:\Program Files\microsoft frontpage
[10/02/2009|17:18] C:\Program Files\Microsoft Office
[13/09/2007|22:32] C:\Program Files\Microsoft Visual Studio
[13/09/2007|22:32] C:\Program Files\Microsoft.NET
[20/11/2008|11:15] C:\Program Files\Movie Maker
[13/09/2007|22:33] C:\Program Files\MSBuild
[06/05/2008|16:51] C:\Program Files\MSN
[22/02/2005|09:31] C:\Program Files\MSN Gaming Zone
[31/10/2008|17:22] C:\Program Files\MSXML 4.0
[07/11/2008|08:07] C:\Program Files\MSXML 6.0
[28/12/2008|15:17] C:\Program Files\NBA 2K9
[20/11/2008|11:12] C:\Program Files\NetMeeting
[14/03/2005|13:03] C:\Program Files\OfficeUpdate11
[11/02/2009|14:43] C:\Program Files\Opera
[10/02/2009|21:06] C:\Program Files\Outlook Express
[19/06/2008|11:47] C:\Program Files\PowerISO
[01/12/2008|13:56] C:\Program Files\Qualcomm
[22/02/2005|10:08] C:\Program Files\RALINK
[07/11/2008|08:13] C:\Program Files\Reference Assemblies
[27/02/2007|18:17] C:\Program Files\roms
[30/05/2007|12:02] C:\Program Files\ScanSoft
[26/11/2008|13:00] C:\Program Files\Spybot - Search & Destroy
[11/02/2009|12:13] C:\Program Files\Trend Micro
[10/02/2009|22:00] C:\Program Files\Uniblue
[03/09/2006|14:06] C:\Program Files\Uninstall Information
[07/09/2006|18:29] C:\Program Files\VideoLAN
[18/09/2008|15:11] C:\Program Files\Viewpoint
[12/09/2006|17:49] C:\Program Files\Wesnoth
[22/02/2005|13:06] C:\Program Files\Winbond Electronics Corp
[22/02/2005|12:12] C:\Program Files\Windows Journal Viewer
[10/02/2009|20:55] C:\Program Files\Windows Media Connect
[10/02/2009|20:55] C:\Program Files\Windows Media Player
[20/11/2008|11:12] C:\Program Files\Windows NT
[11/02/2009|10:46] C:\Program Files\WinRAR
[22/02/2005|11:52] C:\Program Files\X10 Hardware
[22/02/2005|09:34] C:\Program Files\xerox

--------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

[09/07/2008|16:36] C:\Program Files\Fichiers communs\Adobe
[10/02/2009|20:46] C:\Program Files\Fichiers communs\Ahead
[06/05/2008|16:52] C:\Program Files\Fichiers communs\AOL
[23/08/2006|17:52] C:\Program Files\Fichiers communs\aolshare
[22/02/2005|13:06] C:\Program Files\Fichiers communs\Borland Shared
[13/09/2007|22:32] C:\Program Files\Fichiers communs\DESIGNER
[23/04/2005|18:17] C:\Program Files\Fichiers communs\InstallShield
[22/02/2005|11:39] C:\Program Files\Fichiers communs\Java
[11/01/2006|14:53] C:\Program Files\Fichiers communs\Labtec
[23/08/2006|17:49] C:\Program Files\Fichiers communs\Logitech
[10/02/2009|17:18] C:\Program Files\Fichiers communs\Microsoft Shared
[22/02/2005|09:32] C:\Program Files\Fichiers communs\MSSoap
[22/02/2005|12:48] C:\Program Files\Fichiers communs\Nullsoft
[13/09/2007|22:32] C:\Program Files\Fichiers communs\ODBC
[09/07/2008|10:10] C:\Program Files\Fichiers communs\Real
[30/05/2007|12:02] C:\Program Files\Fichiers communs\ScanSoft Shared
[22/02/2005|09:32] C:\Program Files\Fichiers communs\Services
[24/01/2007|23:48] C:\Program Files\Fichiers communs\Softwin
[22/02/2005|10:28] C:\Program Files\Fichiers communs\SpeechEngines
[20/11/2008|11:12] C:\Program Files\Fichiers communs\System
[09/07/2008|16:31] C:\Program Files\Fichiers communs\Teleca Shared
[23/04/2005|09:41] C:\Program Files\Fichiers communs\Vivendi Universal Games
[01/12/2008|12:34] C:\Program Files\Fichiers communs\WindowsLiveInstaller

--------------------\\ Process

( 29 Processes )

... OK !

--------------------\\ Recherche avec S_Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Recherche de Fichiers / Dossiers Lop

Aucun fichier / dossier Lop trouvé !

--------------------\\ Verification du Registre

..... OK !

--------------------\\ Verification du fichier Hosts

Fichier Hosts PROPRE

--------------------\\ Recherche de fichiers avec Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-14 21:09:56
Windows 5.1.2600 Service Pack 3 NTFS
detected NTDLL code modification:
ZwOpenFile
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\2_solid converter pdf crack.txt
C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\Solid Converter Crack.txt
C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\Solid Converter Pdf Crack(2).txt
C:\DOCUME~1\POSTED~1\Mes documents\Mes images\Logiciels\solidconverterpdf\Solid Converter Us (Crack).txt
C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd
C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\gta_sa(original).exe
C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\GTA_SA.EXE
C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\HOODLUM.NFO
C:\DOCUME~1\POSTED~1\Mes documents\My telechargements\Jeux\GTA\utilitaire\crack-nodvd\Lisez-moi.txt

[F:2][D:3]-> C:\DOCUME~1\POSTED~1\LOCALS~1\Temp
[F:2][D:0]-> C:\DOCUME~1\POSTED~1\Cookies
[F:58][D:4]-> C:\DOCUME~1\POSTED~1\LOCALS~1\TEMPOR~1\content.IE5
[F:2][D:0]-> C:\Recycled

1 - "C:\Lop SD\LopR_1.txt" - 14/02/2009|21:10 - Option : [1]

--------------------\\ Fin du rapport a 21:10:26

Pour ce qui est de l'installer à partir du bureau ce que j'ai fait à chaque fois que j'ai essayé de l'installer. J'ai même essayé de télécharger le setup à partir de plusieurs site différent mais le résultat est toujours le même message d'erreur.

Pour le info rsit, le voici:

info.txt logfile of random's system information tool 1.05 2009-02-11 15:33:20

======Uninstall list======

-->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
7-Zip 4.64-->"C:\Program Files\7-Zip\Uninstall.exe"
802.11 USB Wireless LAN Adapter-->C:\WINDOWS\system32\unwlsdrv.exe SiS163u
Adobe Acrobat - Reader 6.0.2 Update-->MsiExec.exe /I{AC76BA86-0000-0000-0000-6028747ADE01}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 6.0.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A00000000001}
ArcSoft PhotoStudio 5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{03F1CC67-5BD8-4C36-8394-76311B2AE69A}\setup.exe" -l0x40c -uninst
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
Call of Duty(R) 4 - Modern Warfare(TM) 1.2 Patch-->C:\Program Files\InstallShield Installation Information\{E5141379-B2D9-4BBC-BB2A-5805541571DD}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.3 Patch-->C:\Program Files\InstallShield Installation Information\{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch-->C:\Program Files\InstallShield Installation Information\{3BD633E0-4BF8-4499-9149-88F0767D449C}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch-->C:\Program Files\InstallShield Installation Information\{8503C901-85D7-4262-88D2-8D8B2A7B08B8}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c
CanoScan LiDE20,30 Manual-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B360A8E5-C171-4AAE-9777-65B3CDB0072C}\setup.exe" -l0x40c
CanoScan Toolbox 4.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BCE46757-7674-4416-BEDB-68205A60409E}\setup.exe" -l0x40c
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP Pro 3-->MsiExec.exe /I{896D642C-7125-44F0-AC49-A23ABF82209C}
C-Media High Definition Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Creatix V.92 Data Fax Modem-->agrsmdel
DB Commander 2000 PRO-->C:\WINDOWS\uninst.exe -f"C:\Program Files\DB Commander 2000 PRO\DeIsL1.isu" -c"C:\Program Files\DB Commander 2000 PRO\_ISREG32.DLL"
Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
Free Easy Burner V 1.0.313-->"C:\Program Files\Free Easy Burner\unins000.exe"
Generic USB CardReader 2.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA1CB7AC-E221-4822-A789-0ADB051DC498}\Setup.exe" -l0x9 -wUninst
Glary Utilities 2.10.0.622-->"C:\Program Files\Glary Utilities\unins000.exe"
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
J2SE Runtime Environment 5.0 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150010}
Java(TM) 6 Update 12-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
Macromedia Flash Player 8-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\swflash.inf,DefaultUninstall,5
Madden NFL 08-->C:\Program Files\EA Sports\Madden NFL 08\EAUninstall.exe
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
Multimedia Keyboard Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6E66ECBD-FCA7-4AE1-A8C5-1CA78BEEB057}\Setup.exe" -l0x40c
NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OmniPage SE-->MsiExec.exe /I{6249C22D-E6A8-407B-BA8B-40298848ED94}
Opera 9.63-->MsiExec.exe /X{1BC4026B-1957-4514-9058-2B542557F143}
PC Aquarium Deluxe 3.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{08830FBE-81C6-4286-8A62-27D0018B1F7D}\Setup.exe" -l0x9
PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"
Quick File Renamer Demo-->MsiExec.exe /I{F0661D66-2A50-4C3C-AE9E-C8566B86C561}
Registry Mechanic 7.0-->"C:\Program Files\Registry Mechanic\unins000.exe"
RT2500 USB Wireless LAN Card-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490B6EF-5A48-40B7-A9E0-D3B886D17A29}\setup.exe" -l0x40c -removeonly
Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for 2007 Microsoft Office System (KB958439)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {6491B8AA-D11C-4648-A461-6234B31EB7E2}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Microsoft Office Excel 2007 (KB958437)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {648FC016-2D6B-4A16-8D87-404533642F4B}
Security Update for Microsoft Office PowerPoint 2007 (KB951338)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {558B709B-821B-4FC5-90FC-9A8890641E77}
Security Update for Microsoft Office Publisher 2007 (KB950114)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {F9C3CDBA-1F00-4D4D-959D-75C9D3ACDD85}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office system 2007 (KB956828)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {885E081B-72BD-4E76-8E98-30B4BE468FAC}
Security Update for Microsoft Office Word 2007 (KB956358)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {4551666D-0FD6-4C69-8A81-1C6F2E64517C}
Security Update for Outlook 2007 (KB946983)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {66B9496E-C0C3-4065-9868-85CCA92126C3}
Smart Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1E02403C-C469-4937-9B94-7DF9F78888FA}\Setup.exe" -l0x40c
Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
TVAnts 1.0-->C:\PROGRA~1\TVAnts\UNWISE.EXE C:\PROGRA~1\TVAnts\INSTALL.LOG
Uniblue RegistryBooster 2-->"C:\Program Files\Uniblue\RegistryBooster 2\unins000.exe"
Update for Office 2007 (KB934391)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {B3091818-7C56-4C45-BE7D-CA23027A5EA5}
Update for Office 2007 (KB946691)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {A420F522-7395-4872-9882-C591B4B92278}
Update for Outlook 2007 Junk Email Filter (kb959634)-->msiexec /package {90120000-0011-0000-0000-0000000FF1CE} /uninstall {50C77E2F-5C1C-467D-9BC8-3CA07D28C9F2}
Utilitaire de sauvegarde Windows-->MsiExec.exe /I{76EFFC7C-17A6-479D-9E47-8E658C1695AE}
VideoLAN VLC media player 0.8.5-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u
Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
W83L518D-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CD815603-AB71-4CFB-B3AC-522298037ACC}\Setup.exe" -l0x40c
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Media Connect-->msiexec.exe /I {F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
Windows Media Connect-->MsiExec.exe /I{F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
X10 Hardware(TM)-->C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\X10HAR~1\Install.log
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

=====HijackThis Backups=====

O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\Poste de Travail\oocbvbb.exe \s

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: Avira AntiVir PersonalEdition Classic (disabled) (outdated)

System event log

Computer Name: NOM-B77E8DA6E97
Event Code: 7035
Message: Un contrôle Arrêter a correctement été envoyé au service PnkBstrB.

Record Number: 34567
Source Name: Service Control Manager
Time Written: 20090207120329.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: NOM-B77E8DA6E97
Event Code: 7036
Message: Le service PnkBstrB est entré dans l'état : arrêté.

Record Number: 34566
Source Name: Service Control Manager
Time Written: 20090207120329.000000+060
Event Type: Informations
User:

Computer Name: NOM-B77E8DA6E97
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service PnkBstrK.

Record Number: 34565
Source Name: Service Control Manager
Time Written: 20090207120312.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: NOM-B77E8DA6E97
Event Code: 7036
Message: Le service PnkBstrB est entré dans l'état : en cours d'exécution.

Record Number: 34564
Source Name: Service Control Manager
Time Written: 20090207120306.000000+060
Event Type: Informations
User:

Computer Name: NOM-B77E8DA6E97
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service PnkBstrB.

Record Number: 34563
Source Name: Service Control Manager
Time Written: 20090207120306.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Application event log

Computer Name: NOM-B77E8DA6E97
Event Code: 103
Message: wuaueng.dll (3044) SUS20ClientDataStore: Le moteur de base de données a arrêté une instance (0).

Record Number: 6393
Source Name: ESENT
Time Written: 20080315153417.000000+060
Event Type: Informations
User:

Computer Name: NOM-B77E8DA6E97
Event Code: 102
Message: wuaueng.dll (3044) SUS20ClientDataStore: Le moteur de base de données a démarré une nouvelle instance (0).

Record Number: 6392
Source Name: ESENT
Time Written: 20080315152916.000000+060
Event Type: Informations
User:

Computer Name: NOM-B77E8DA6E97
Event Code: 100
Message: wuauclt (3044) Le moteur de base de données 5.01.2600.2180 est démarré.

Record Number: 6391
Source Name: ESENT
Time Written: 20080315152916.000000+060
Event Type: Informations
User:

Computer Name: NOM-B77E8DA6E97
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 6390
Source Name: SecurityCenter
Time Written: 20080315152823.000000+060
Event Type: Informations
User:

Computer Name: NOM-B77E8DA6E97
Event Code: 102
Message: wuaueng.dll (2960) SUS20ClientDataStore: Le moteur de base de données a démarré une nouvelle instance (0).

Record Number: 6389
Source Name: ESENT
Time Written: 20080315134243.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Fichiers communs\GTK\2.0\bin
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0304
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"LANG"=fr

-----------------EOF-----------------

Bah, nan quand je vais dans "AntiVir PersonalEdition Classic", il n'y a que 3 fichier .dll dans le dossier, pas de fichier .exe ni autre chose. Et quand j'essaie de l'installer il veut, il me met le message d'erreur suivant :
" La somme CRC de
C:\DOCUME~1\POSTED~1\Temp\RarSFX0\basics\setup.exe
a été modifié ! Cela pourrait avoir été provoqué par un virus ! "

Ok, merci pour le lien et pour tout d'ailleur.

Pour antivir, il veut malheureusement toujours pas s'installer, je pense que je vais tenter AVG du coup.

Merci pour la protection.

J'ai essayer ma-config.com, je l'ai installé manuellement sur mon autre ordi. Mais quand je le lance il se passe rien, tu pense pas qu'il a besoin d'internet pour fonctionner ?

Sinon je t'ai pas dis, mais quand je connecte une clé usb, le lancement automatique ne se fait pas, il faut que j'aille dans poste de travail. Et quand j'insère ma clé wi-fi, c'est pareil sauf que la il ne se passe rien, l'ordi ne la détecte même pas.

Déjà je te remercis infiniment pour ton aide et ta disponibilité.

Pour PES la réponse est non.

Sinon j'avais effectivement deux questions :
- la 1ère : quelle protection me conseil tu, c'est à dire antivirus, anti-malware....
- la 2ème concerne mes périphériques : étant donné que je n'arrive plus à me connecter à internet, je pense avoir trouvé le problème car quand je suis aller voir dans mon gestionnaire de périphérique. Je me suis aperçu que tout ce qui est dans l'onglet carte réseau à un petit point d'exclamation noir dans un cercle jaune et lorsque je fais "résoudre le problème", l'ordi me propose que de désinstaller et de réinstaller mais quand j'ai essayer pour mon accès à internet ça n'a pas marché. Donc je sais que je t'en demande beaucoup mais aurais tu une solution pour que l'ordinateur capte à nouveau ma clé wi-fi.

Merci d'avance.