Personal security

vous allumé votre pc des que la session est ouverte vous sauté sur le panneau de configuration vous cherché un truc vk "restauration système " vous sélectionner un jour avent installation de se.....de virus ! et votre pc sera comme au jour que vous avez sélectionner ! tout clean ca ma pris moins de deux min !!

Bonjour,
Je suis dans la même situation que bon nombre d'entre vous sur ce forum: "Infecter par Personal Security".
Je viens d'installer MalawareByte et j'ai fais un scan dont voici le rapport :

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3763
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

19/02/2010 22:23:53
mbam-log-2010-02-19 (22-23-53).txt

Type de recherche: Examen complet (C:\|Q:\|)
Eléments examinés: 157192
Temps écoulé: 24 minute(s), 37 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 5
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 12

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{c73fd00d-a099-405c-92b4-8997710d187d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c73fd00d-a099-405c-92b4-8997710d187d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c73fd00d-a099-405c-92b4-8997710d187d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\PersSecurity (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servises (Malware.Trace) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\perssecurity (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\PersSecurity (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\Program Files\Common Files\PersSecurityUninstall (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Windows\System32\win32extension.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Program Files\PersSecurity\psecurity.exe (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\Program Files\Common Files\PersSecurityUninstall\Uninstall.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity\Computer Scan.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity\Help.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity\Personal Security.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity\Registration.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity\Security Center.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity\Settings.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\PersSecurity\Update.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\Users\ManonetSeb\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PersSecurity.lnk (Rogue.PersonalSecurity) -> Quarantined and deleted successfully.
C:\Users\ManonetSeb\Desktop\Personal Security.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.

Est ce que quelqu'un peut m'aider dans la suppression de cette infection.
Par avance Merci !!

Bonjour,
J'ai également attrapé ce virus et je voudrais m'en débarasser au plus vite ! Pourrais savoir ce qu'il faut faire pour pouvoir réussir à le supprimer !

J'ai installé combofix et j'ai eu le rapport suivant !!

ComboFix 10-01-23.06 - Aurélie 24/01/2010 16:15:17.1.2 - x86 NETWORK
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.2596 [GMT 1:00]
Lancé depuis: c:\users\Aurélie\Desktop\bibitte.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-1801944788-1470032905-1259546438-500
c:\$recycle.bin\S-1-5-21-542954357-4199997397-989294168-500
c:\program files\PersonalSec
c:\program files\PersonalSec\psecurity.exe
c:\users\Aurélie\AppData\Roaming\Mozilla\Firefox\Profiles\8zipuxzb.default\extensions\{0d16ed64-1b51-4785-b592-d6befd7b14d4}
c:\users\Aurélie\AppData\Roaming\Mozilla\Firefox\Profiles\8zipuxzb.default\extensions\{0d16ed64-1b51-4785-b592-d6befd7b14d4}\chrome.manifest
c:\users\Aurélie\AppData\Roaming\Mozilla\Firefox\Profiles\8zipuxzb.default\extensions\{0d16ed64-1b51-4785-b592-d6befd7b14d4}\chrome\xulcache.jar
c:\users\Aurélie\AppData\Roaming\Mozilla\Firefox\Profiles\8zipuxzb.default\extensions\{0d16ed64-1b51-4785-b592-d6befd7b14d4}\defaults\preferences\xulcache.js
c:\users\Aurélie\AppData\Roaming\Mozilla\Firefox\Profiles\8zipuxzb.default\extensions\{0d16ed64-1b51-4785-b592-d6befd7b14d4}\install.rdf
c:\windows\system32\AuxiliaryDisplayDriverLib32.dll
c:\windows\system32\avicap3232.dll
c:\windows\system32\win32extension.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-12-24 au 2010-01-24 ))))))))))))))))))))))))))))))))))))
.

2010-01-24 15:23 . 2010-01-24 15:23 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-24 15:01 . 2010-01-24 15:10 -------- d-----w- C:\bibitte
2010-01-24 12:45 . 2010-01-19 11:42 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-01-24 12:45 . 2010-01-19 13:13 162640 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-01-24 12:45 . 2010-01-19 11:43 23248 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-01-24 12:45 . 2010-01-19 11:46 46544 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-01-24 12:45 . 2010-01-19 11:43 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-01-24 12:44 . 2010-01-19 11:57 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-01-24 12:44 . 2010-01-19 11:57 152672 ----a-w- c:\windows\system32\aswBoot.exe
2010-01-24 12:44 . 2010-01-24 12:44 -------- d-----w- c:\programdata\Alwil Software
2010-01-24 12:44 . 2010-01-24 12:44 -------- d-----w- c:\program files\Alwil Software
2010-01-24 12:35 . 2010-01-24 12:35 -------- d-----w- c:\program files\Common Files\PersonalSecUninstall
2010-01-23 20:15 . 2010-01-23 20:17 -------- d-----w- c:\program files\Google
2010-01-16 21:13 . 2010-01-16 21:13 -------- d-----w- c:\program files\Ask Search Assistant
2010-01-13 05:33 . 2009-10-19 13:38 156672 ----a-w- c:\windows\system32\t2embed.dll
2010-01-13 05:33 . 2009-10-19 13:35 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-12-28 08:43 . 2009-12-28 08:43 -------- d-----w- c:\program files\Microsoft.NET
2009-12-28 08:39 . 2009-12-28 08:39 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-12-28 08:36 . 2009-12-28 08:36 -------- d-----r- C:\MSOCache

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-23 07:26 . 2008-05-27 15:26 669566 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-23 07:26 . 2008-05-27 15:26 123556 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-20 19:51 . 2009-03-24 20:54 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-20 19:29 . 2008-12-23 17:19 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-16 21:13 . 2009-01-11 10:42 -------- d-----w- c:\programdata\Messenger Plus!
2010-01-16 21:13 . 2008-10-25 13:23 -------- d-----w- c:\program files\Messenger Plus! Live
2010-01-14 10:12 . 2009-10-03 06:57 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-13 21:02 . 2008-05-27 07:11 -------- d-----w- c:\programdata\Microsoft Help
2010-01-13 21:01 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-01-02 06:38 . 2010-01-22 05:55 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-22 05:55 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-22 05:55 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-22 05:55 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-12-28 08:45 . 2008-05-27 06:48 -------- d-----w- c:\program files\Microsoft Works
2009-12-28 08:45 . 2006-11-02 12:37 -------- d-----w- c:\program files\MSBuild
2009-12-15 15:27 . 2008-05-27 07:38 -------- d-----w- c:\program files\Java
2009-12-10 17:55 . 2009-05-08 18:37 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-10 16:16 . 2008-10-25 13:03 -------- d-----w- c:\program files\Windows Live
2009-11-26 17:32 . 2009-11-26 17:31 -------- d-----w- c:\program files\Finale Reader
2009-11-25 15:33 . 2009-11-25 15:33 -------- d-----w- c:\program files\Audacity
2009-11-17 23:05 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-09 12:31 . 2009-12-11 22:01 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-11-09 12:30 . 2009-12-11 22:00 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-11-09 10:36 . 2009-12-11 22:00 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-11-08 17:06 . 2009-11-08 17:06 1608372 ----a-w- c:\programdata\SPL49BD.tmp
2009-10-29 09:17 . 2009-11-25 06:03 2048 ----a-w- c:\windows\system32\tzres.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-02-26 2289664]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2009-04-07 102400]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-12-24 222504]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-05-14 468264]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"lxcrmon.exe"="c:\program files\Lexmark 2400 Series\lxcrmon.exe" [2007-01-11 291760]
"EzPrint"="c:\program files\Lexmark 2400 Series\ezprint.exe" [2006-12-11 82864]
"FaxCenterServer"="c:\program files\Lexmark Fax Solutions\fm3032.exe" [2006-12-11 295856]
"LXCRCATS"="c:\windows\system32\spool\DRIVERS\W32X86\3\LXCRtime.dll" [2006-11-21 106496]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-04-19 198160]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-06-27 442467]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-12-18 40368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-01-19 2743104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

c:\users\Aur‚lie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de notification Live Search.lnk - c:\users\Aur‚lie\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe [2008-12-22 143360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=""
"FirewallOverride"=""

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):79,81,d7,a5,93,34,ca,01

R0 Amddfltr;Amd Disk Lower Filter Driver;c:\windows\System32\drivers\Amddfltr.sys [20/09/2008 05:15 15416]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [23/01/2008 22:23 52736]
S1 aswSP;aswSP;c:\windows\System32\drivers\aswSP.sys [24/01/2010 13:45 162640]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_a7e996cd\AEstSrv.exe [27/06/2008 20:53 77824]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [08/05/2009 19:37 108289]
S2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [24/01/2010 13:45 19024]
S2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [24/01/2010 13:45 51792]
S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21/01/2008 03:23 21504]
S2 FsUsbExService;FsUsbExService;c:\windows\System32\FsUsbExService.Exe [03/09/2009 19:13 233472]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [23/01/2010 21:16 135664]
S2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [18/03/2008 15:24 19456]
S2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [27/05/2008 08:32 341328]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [27/05/2008 07:19 193840]
S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21/01/2008 03:23 21504]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\System32\FsUsbExDisk.Sys [03/09/2009 19:13 36608]
S3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [01/04/2008 12:14 81296]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\System32\drivers\ss_bbus.sys [03/09/2009 19:14 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\System32\drivers\ss_bmdfl.sys [03/09/2009 19:14 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\System32\drivers\ss_bmdm.sys [03/09/2009 19:14 121856]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-02-26 12:06 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'

2010-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-23 20:15]

2010-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-23 20:15]

2010-01-13 c:\windows\Tasks\HPCeeScheduleForAurélie.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2008-05-27 13:14]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://www.tropal.net/
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
Trusted Zone: uhp-nancy.fr\langues
Trusted Zone: uhp-nancy.fr\langues
FF - ProfilePath - c:\users\Aurélie\AppData\Roaming\Mozilla\Firefox\Profiles\8zipuxzb.default\
FF - prefs.js: browser.search.selectedEngine - Ask
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - plugin: c:\programdata\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{03B8A33B-3D0E-40CA-991C-252C90B42159} - c:\windows\System32\avicap3232.dll
BHO-{6551001F-A07B-40B1-8F55-B44BF35A42A6} - c:\windows\System32\win32extension.dll
HKCU-Run-TomTomHOME.exe - c:\program files\TomTom HOME 2\TomTomHOMERunner.exe
HKCU-Run-RTHDBPL - c:\users\Aurélie\AppData\Roaming\SystemProc\lsass.exe
HKLM-Run-NPSStartup - (no file)
HKLM-RunOnce-<NO NAME> - (no file)
AddRemove-PersonalSec - c:\program files\PersonalSec\psecurity.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-24 16:23
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCRCATS = rundll32 c:\windows\system32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
RTHDBPL = c:\users\Aur?lie\AppData\Roaming\SystemProc\lsass.exe???????????????????????????????#???????????????????????????????????????????

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2010-01-24 16:26:10
ComboFix-quarantined-files.txt 2010-01-24 15:26

Avant-CF: 148 514 209 792 octets libres
Après-CF: 148 368 814 080 octets libres

- - End Of File - - 9A0F30CEF04609B8DF064B000A12B3CB

Que dois-je faire maintenant ???
Merci d'avance

Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1934 [GMT 1:00]
Lancé depuis: c:\users\client\Desktop\bibitte.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.Voici mon rapport de Combofix pour ma part, que dois-je supprimer, j'ai le meme soucis que mon camarade... ;(

((((((((((((((((((((((((((((( Fichiers créés du 2009-12-08 au 2010-01-08 ))))))))))))))))))))))))))))))))))))
.

2010-01-08 22:40 . 2010-01-08 22:40 -------- d-----w- c:\users\client\AppData\Local\temp
2010-01-08 22:40 . 2010-01-08 22:40 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-01-08 22:40 . 2010-01-08 22:40 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-01-08 21:36 . 2009-11-24 23:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-01-08 21:36 . 2009-11-24 23:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-01-08 21:36 . 2009-11-24 23:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2010-01-08 21:36 . 2009-11-24 23:50 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-01-08 21:36 . 2009-11-24 23:50 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-01-08 21:35 . 2009-11-24 23:54 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2010-01-08 21:35 . 2009-11-24 23:49 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-01-08 21:35 . 2010-01-08 21:35 -------- d-----w- c:\program files\Alwil Software
2010-01-08 20:59 . 2010-01-08 20:59 -------- d-----w- c:\program files\Common Files\PersonalSecUninstall
2010-01-06 17:01 . 2007-04-06 03:12 4637520 ----a-w- c:\windows\system32\xpsrchvw.exe
2010-01-06 17:01 . 2007-03-23 03:23 856064 ----a-w- c:\windows\system32\XpsFilt.dll
2009-12-17 15:33 . 2009-12-17 15:33 -------- d-----w- c:\users\client\AppData\Roaming\Malwarebytes
2009-12-17 15:32 . 2009-12-30 13:55 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-17 15:32 . 2010-01-07 13:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-17 15:32 . 2009-12-30 13:54 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-17 13:18 . 2010-01-08 22:12 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-12-13 15:39 . 2009-12-17 12:43 -------- d-----w- c:\users\client\AppData\Roaming\LimeWire
2009-12-10 11:15 . 2009-11-09 12:31 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-10 11:15 . 2009-11-09 12:30 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-10 11:15 . 2009-11-09 10:36 411648 ----a-w- c:\windows\system32\drivers\http.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-08 22:10 . 2008-01-21 08:40 672322 ----a-w- c:\windows\system32\perfh00C.dat
2010-01-08 22:10 . 2008-01-21 08:40 124434 ----a-w- c:\windows\system32\perfc00C.dat
2010-01-08 22:05 . 2009-01-20 15:28 256 ----a-w- c:\windows\system32\pool.bin
2010-01-08 22:03 . 2008-04-07 08:35 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-08 21:47 . 2008-04-07 08:44 -------- d-----w- c:\program files\Google
2009-12-10 11:34 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-12-10 11:09 . 2009-07-17 07:13 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-09 10:19 . 2009-08-30 07:48 -------- d-----w- c:\users\client\AppData\Roaming\HpUpdate
2009-11-30 18:37 . 2009-08-31 15:50 -------- d-----w- c:\users\client\AppData\Roaming\Research In Motion
2009-11-21 06:40 . 2009-12-09 07:25 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34 . 2009-12-09 07:25 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 06:34 . 2009-12-09 07:25 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 04:59 . 2009-12-09 07:25 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-19 07:34 . 2009-11-19 07:34 -------- d-----w- c:\program files\TurnTool
2009-11-18 08:14 . 2009-11-18 08:07 78312 ----a-w- c:\windows\hpqins05.dat
2009-11-18 08:12 . 2009-01-16 13:03 111264 ----a-w- c:\users\client\AppData\Local\GDIPFONTCACHEV1.DAT
2009-11-18 07:40 . 2009-11-18 07:40 -------- d-----w- c:\program files\Windows Portable Devices
2009-11-18 07:40 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-18 07:40 . 2009-11-18 07:40 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-11-18 07:39 . 2009-11-18 07:39 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-11-17 07:36 . 2008-04-07 12:04 -------- d-----w- c:\program files\Java
2009-11-02 19:42 . 2009-10-04 17:13 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-10-29 09:17 . 2009-11-26 08:38 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-11 03:17 . 2009-02-16 12:24 411368 ----a-w- c:\windows\system32\deploytk.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-02-28 4915200]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-10 835584]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2007-11-21 311296]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"WD Drive Manager"="c:\program files\Western Digital\WD Drive Manager\WDBtnMgrUI.exe" [2008-02-19 438272]
"HPWireless"="c:\program files\HP Wireless Adapter\HPWLAN.exe" [2007-05-15 733184]
"BlackBerryAutoUpdate"="c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe" [2009-07-01 623960]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]

c:\users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de d‚tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2009-3-13 385024]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Camera Monitor HD.lnk - c:\program files\PIXELA\Everio MediaBrowser HD Edition\MBCameraMonitor.exe [2009-9-3 541976]
Desktop Manager.lnk - c:\program files\Research In Motion\BlackBerry\DesktopMgr.exe [2009-7-1 1717592]
Gestionnaire de connexion.lnk - c:\program files\HP Wireless Printer Adapter\ConnectMgr.exe [2009-5-18 1552384]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2008-02-21 08:26 98304 ----a-w- c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
2009-12-30 13:55 1389904 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe
"MarketingTools"=c:\program files\Sony\Marketing Tools\MarketingTools.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=""
"FirewallOverride"=""

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):b0,06,f1,4a,55,1a,ca,01

R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [08/01/2010 22:36 114768]
R1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\System32\drivers\RtlProt.sys [18/05/2009 10:12 15360]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [08/01/2010 22:36 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [08/01/2010 22:35 53328]
R2 regi;regi;c:\windows\System32\drivers\regi.sys [17/04/2007 20:09 11032]
R2 uCamMonitor;CamMonitor;c:\program files\ArcSoft\Magic-i Visual Effects\uCamMonitor.exe [13/01/2007 17:52 104960]
R2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [13/01/2007 17:59 333088]
R2 WDBtnMgrSvc.exe;WD Drive Manager Service;c:\program files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe [19/02/2008 02:15 106496]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\System32\drivers\ArcSoftKsUFilter.sys [13/01/2007 17:52 17408]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [07/04/2008 10:09 28464]
R3 hpnuhst;HP NUSB Host;c:\windows\System32\drivers\hpnuhst.sys [18/05/2009 10:15 13824]
R3 HPNUHUB;HP NUSB Hub;c:\windows\System32\drivers\hpnuhub.sys [18/05/2009 10:15 35840]
R3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\System32\drivers\R5U870FLx86.sys [13/02/2008 01:01 73472]
R3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\System32\drivers\R5U870FUx86.sys [13/02/2008 01:01 43904]
R3 SFEP;Sony Firmware Extension Parser;c:\windows\System32\drivers\SFEP.sys [17/12/2007 02:57 9344]
R3 ti21sony;ti21sony;c:\windows\System32\drivers\ti21sony.sys [16/11/2007 01:29 818688]
S2 gupdate1c98ea3335bd2d8;Service Google Update (gupdate1c98ea3335bd2d8);c:\program files\Google\Update\GoogleUpdate.exe [14/02/2009 13:53 133104]
S3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21/01/2008 03:23 21504]
S3 HPNUCMP;HP NUSB Composite;c:\windows\System32\drivers\hpnucmp.sys [18/05/2009 10:15 14336]
S3 hwusbfake;Huawei DataCard USB Fake;c:\windows\System32\drivers\ewusbfake.sys [05/08/2009 08:17 100224]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;c:\windows\System32\drivers\PCAMp50.sys [28/11/2006 20:46 28224]
S3 RTL8187;Wireless Adapter;c:\windows\System32\drivers\hpl8187.sys [18/05/2009 10:12 219648]
S3 Service CANALPLAY;Service CANALPLAY;c:\program files\Lecteur CANALPLAY\CanalPlayService.exe [13/01/2007 17:33 423584]
S3 SOHCImp;VAIO Media plus Content Importer;c:\program files\Sony\VAIO Media plus\SOHCImp.exe [13/01/2007 18:02 104288]
S3 SOHDms;VAIO Media plus Digital Media Server;c:\program files\Sony\VAIO Media plus\SOHDms.exe [13/01/2007 18:02 350048]
S3 SOHDs;VAIO Media plus Device Searcher;c:\program files\Sony\VAIO Media plus\SOHDs.exe [13/01/2007 18:02 63328]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [13/01/2007 17:59 87328]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
HPService REG_MULTI_SZ HPSLPSVC
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contenu du dossier 'Tâches planifiées'

2010-01-08 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-01-16 15:35]

2010-01-08 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-13 20:28]

2010-01-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-14 12:53]

2010-01-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-14 12:53]

2010-01-08 c:\windows\Tasks\User_Feed_Synchronization-{92B6FE47-C4B0-43D5-B317-5F4F22510E33}.job
- c:\windows\system32\msfeedssync.exe [2009-12-09 04:59]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://orange.fr/
IE: Ajouter au fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir la sélection en Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la sélection en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir les liens sélectionnés en fichier Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convertir les liens sélectionnés en un fichier PDF existant - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Envoyer au périphérique &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Envoyer l'&image au périphérique Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
Trusted Zone: canalplay.com
Trusted Zone: canalplusactive.com
Trusted Zone: canalplay.com
Trusted Zone: canalplusactive.com
TCP: {A1B0A49A-AA2D-4A33-BAD1-6A51C3D83006} = 193.252.19.3,193.252.19.4
TCP: {BD9D870A-7215-4146-957B-256258575D02} = 0.0.0.0
TCP: {CEC4A5F9-6465-4203-AABE-3E30267A9A60} = 193.252.19.3,193.252.19.4
FF - ProfilePath - c:\users\client\AppData\Roaming\Mozilla\Firefox\Profiles\786e6yfh.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\users\client\AppData\Roaming\Mozilla\Firefox\Profiles\786e6yfh.default\extensions\turntoolviewer@turntool.com\plugins\nptnt.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************
Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés:

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:0000003d

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2010-01-08 23:43:45
ComboFix-quarantined-files.txt 2010-01-08 22:43
ComboFix2.txt 2010-01-08 22:22

Avant-CF: 150 454 456 320 octets libres
Après-CF: 150 404 894 720 octets libres

- - End Of File - - 791C9F1995AD4BA22AA8B73FF880D552

je n'ai plus de problemes. Alors le sujet est terminé. Si c'est le cas, merci bcp pour tout ce que t'as fait pour moi. J'espere te revoir bientot. Salutations......................

que reste-t-il comme problème?

j'ai terminé tous ce que tu m'as demandé de faire. Alors que dois-je faire d'autres? Le sujet n'est pas encore resolu alors ne me laisse pas stp

j'ai reussi à instaler IE8. J'ai aussi fait toutes les manip que tu m'as demandé. Que me reste t-il a faire encore? Merci pour IE8

re
une autre solution
https://support.microsoft.com/fr-fr/help/949220
http://www.libellules.ch/...

fais tout ce qui est indiqué ensuite, restauration nettoyage défragmentation après cela tu essaies à nouveau d'installer IE8

si tu n'y arrives toujours pas
tente ceci
démarrer
exécuter
copie colles
sfc /scannow
il te sera vraisemblablement demandé le cd de windows, suis les invites
essaie à nouveau l'installation

si cela ne fonctionne toujours pas, télécharge IE8 sur windows update
redémarre en mode sans échec
1) Redémarre ton ordi
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
3) Tu verras un écran avec options de démarrage apparaître
4) Choisis la première option : Sans Échec, et valide avec "Entrée"
5) Choisis ton compte habituel, et non Administrateur
installe le en mode sans échec
dis moi si cela a fonctionné

bonjour papyber,

voici le rapport de toolscleaner:

[ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\Combofix.txt: trouvé !
C:\Bibitte\ComboFix.exe: trouvé !

---------------------------------
--> Suppression:

C:\Bibitte\ComboFix.exe: supprimé !
C:\Combofix.txt: supprimé !

justement concernant ce qui est d'internet, je ne peux pas migrer en IE8 parce que lors de l'installation on me dit qu'il y a des trucs que je ne me rappelle plus qui manque. que dois-je faire pour resoudre ce probleme

Tu vois qu'il y avait encore du monde!
on termine
tu tapes sur démarrer
tu cliques sur exécuter
tu copies colles cette ligne dans la fenêtre qui s'ouvre
combofix /uninstall
cela va supprimer combofix qu'il ne faut pas conserver sur ton Pc, il est d'ores et déjà obsolète car mis à jour constamment
ensuite tu fais ceci
Télécharge ToolsCleaner (de A.Rothstein) sur ton Bureau.
http://pc-system.fr/
Clique sur Recherche et laisse le Scan se terminer.
Clique sur Suppression pour finaliser.
Tu peux, si tu le souhaites, te servir des Options facultatives.
Clique sur Quitter, pour que le rapport puisse se créer.
Poste-moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

vide la quarantaine de malwarebytes
recherche et supprime si encore présent
c;\Qoobox

ceci est un texte générique pour tous utilisateurs
pour ta sécurité et afin de ne plus être aussi gravement infecté


En plus des mises à jour Microsoft, il est fortement recommandé d'avoir tous ses logiciels de sécurité à jour, afin d'éviter les failles par lesquelles s'engouffrent les infections.
Le site Secunia est un excellent moyen de le vérifier :
https://www.flexera.com/products/operations/software-vulnerability-management.html
• sur la page d'accueil du site, clique sur le bouton Start Scanner
• sur la page suivante, clique sur le bouton Start
• une fois le scan terminé, les logiciels non mis à jour seront identifiés et listés
• effectue les mises à jour pour chaque logiciel cité.
Pour suivre l'évolution des mises à jour des logiciels de protection ainsi que de Java, je te conseille de regarder ici :
https://forum.pcastuces.com/default.asp
https://forum.pcastuces.com/sujet.asp?f=25&s=25842

vérifie également, toujours pour éviter les failles, que ta version d'Adobe soit aussi à jour

vérifier que Internet Explorer est à jour aussi, nous en sommes à IE8,
à faire également, toujours pour la même raison

Devant la recrudescence des infections par MSN, paramètre celui ci de façon plus sécuritaire !
un tuto pour te guider dans ce paramétrage
https://forum.zebulon.fr/topic/130590-infection-par-msn-ou-wlm

Maintenant il te reste ceci à effectuer

1/
Supprime tous les outils utilisés:

Supprime aussi tous les rapports obtenus!

Tu peux néanmoins conserver Ccleaner et malwarebyte, mis à jour régulièrement, ils te serviront, l'un, Ccleaner, pour le nettoyage quotidien de ton PC, l'autre, malwarebytes, pour la recherche d'éventuelles infections...

2/
Restauration système
Désactive ta restauration
Clique droit sur poste de travail/propriétés/onglet Restauration du système/coche la case désactiver la restauration, appliquer, OK
Redémarre ton PC
Réactive ta restauration
Clique droit sur poste de travail/propriétés/ onglet Restauration du système /décoche la case désactiver la restauration, appliquer, OK
Redémarre ton PC

3/
Nettoyage et Défragmentation de tes Disques
Nettoyage
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général"
Clique sur le bouton "nettoyage de disque", OK
tu le fais pour chacun de tes disques

Vérifications des erreurs
Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil"
"Vérifier maintenant", une boîte s'ouvre, cocher les cases
réparer automatiquement les erreurs...
rechercher et tenter une récupération...
Démarrer, ok
tu le fais pour chacun de tes disques
la vérification se fera au redémarrage de ton PC et va durer un certain temps, c'est normal et attendu

ensuite toujours dans le même onglet tu choisis
Défragmentation
"défragmenter maintenant", OK
une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter». OK
tu le fais pour chacun de tes disques

==>

Tu as été infecté, et je pense qu'au travers des différentes manœuvres données, tu as compris que tu étais mal protégé...

Je te conseille donc de lire attentivement ce qui suit et de suivre les conseils prodigués

==>

Tu trouveras sur ce lien les différentes mises à jour de sécurité à effectuer, suivant les logiciels que tu possèdes.
https://forum.pcastuces.com/sujet.asp?f=25&s=25842

==>

La protection de ton Pc

La sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...
N'oublie pas que la meilleure protection se tient entre le clavier et l'écran...
Outre la parfaite mise à jour du système d'exploitation,
Désormais, pour surfer tranquillement et sans soucis sur "le Net", il faut se protéger au maximum!

1. en résident : Il est résident sur ton PC, c'est à dire qu'il fonctionne dès la mise en route de ton Système.
/- un bon antivirus, gratuit ou payant, mis régulièrement à jour, qui te protège en temps réel!
/- un pare feu autre que celui fourni par Windows, comme Zone Alarm ou Online Armor qui te protège aussi en temps réel!
2. pour Scanner régulièrement ton PC
/- un anti trojan efficace. Je te conseille MalwareByte
Voir ici son tutoriel
https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm

3. un logiciel comme Spyware Blaster qui empêche l'installation d'ActiveX nuisibles.
Il faut régulièrement le mettre à jour pour inscrire les ActiveX dangereux dans sa base de données, et ainsi être protégé contre eux, puisque son rôle est d'empêcher leur installation.

4. un bon navigateur tel Firefox ou Opera pour remplacer IE, que tu ne conserves que pour effectuer les mises à jour de Windows!

Tu trouveras dans ce tuto, "Sécuriser son PC de Philae", de quoi satisfaire tous tes désirs en matière de logiciels gratuits et performants ainsi que des conseils efficaces de prévention.
https://forum.pcastuces.com/default.asp

ce texte de Ogu est très explicite sur les risques du P2P
http://www.libellules.ch/...

dans celui-ci, tesgaz t'explique les risques du P2P
https://forum.zebulon.fr/topic/85544-pr%C3%A9vention-le-p2p-et-ses-cons%C3%A9quences/

dans celui-là, les risques du crack
https://forum.zebulon.fr/topic/93281-pr%C3%A9vention-le-crack-dans-toute-sa-splendeur/

==>

bonne surf, en sécurité

voici le rapport de Malwarebytes':

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3305
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

07/12/2009 00:22:25
mbam-log-2009-12-07 (00-22-25).txt

Type de recherche: Examen complet (A:\|C:\|D:\|)
Eléments examinés: 127962
Temps écoulé: 1 hour(s), 20 minute(s), 20 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 60

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servises (Malware.Trace) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32 (Worm.Archive) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000018.exe (Rogue.Multiple) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000020.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000021.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000022.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000023.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000024.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000025.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000026.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000027.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000028.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000029.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000030.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000031.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000032.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000033.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000035.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000019.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000246.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000230.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000231.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000232.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000233.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000234.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000235.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000236.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000237.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000238.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000239.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000240.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000241.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000242.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000243.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000244.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000245.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000247.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000248.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000249.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000250.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000251.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000252.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000253.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000254.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000255.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000256.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000257.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000258.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000259.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000260.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A8DE1DE0-80D6-4951-9F02-F24BBEFB7886}\RP1\A0000267.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity\Computer Scan.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity\Help.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity\Personal Security.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity\Registration.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity\Security Center.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity\Settings.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\PSecurity\Update.lnk (Rogue.PSecurity) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu584274795v0.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu584274795v1.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu584274795v2.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu584274795v3.kwd (Worm.Archive) -> Quarantined and deleted successfully.

lorsque tu dis

Démarrer/executer
copie colle
combofix /uninstal

qu'est que je fais parce que je ne comprends pas cette manip

démarrer/executer
copie colle
combofix /uninstall

supprime malwarebytes, télécharge le à nouveau, mets le à jour et scanne ton PC avec scan long
supprime tout ce qu'il trouve et poste son rapport
as tu encore des dysfonctionnements?

voici le rapport nouveau de ComboFix:

ComboFix 09-12-06.07 - User 06/12/2009 21:40.2.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.503.214 [GMT 0:00]
Lancé depuis: c:\documents and settings\User\Bureau\Bibitte.exe
Commutateurs utilisés :: c:\documents and settings\User\Bureau\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

FILE ::
"c:\program files\Fichiers communs\PSecurityUninstall"
"c:\windows\system32\antiwpa.dll"
"c:\windows\system32\dfsshlex32.dll"
"c:\windows\system32\dimsroam32.dll"
"c:\windows\system32\divx_xx1132.dll"
"c:\windows\system32\dmintf32.dll"
"c:\windows\system32\dot3dlg32.dll"
"c:\windows\system32\dpvvox3232.dll"
"c:\windows\system32\drmv2clt32.dll"
"c:\windows\system32\dx7vb32.dll"
"c:\windows\system32\E5.tmp"
"c:\windows\system32\eapp3hst32.dll"
"c:\windows\system32\eappcfg32.dll"
"c:\windows\system32\eapphost32.dll"
"c:\windows\system32\EqnClass32.dll"
"c:\windows\system32\extmgr32.dll"
"c:\windows\system32\faultrep32.dll"
"c:\windows\system32\filemgmt32.dll"
"c:\windows\system32\FM2032.dll"
"c:\windows\system32\FM20FRA32.dll"
"c:\windows\system32\fsusd32.dll"
"c:\windows\system32\FXCompChannel32.dll"
"c:\windows\system32\gcdef32.dll"
"c:\windows\system32\glmf3232.dll"
"c:\windows\system32\hash232.dll"
"c:\windows\system32\hnetmon32.dll"
"c:\windows\system32\hppapr0432.dll"
"c:\windows\system32\htui32.dll"
"c:\windows\system32\ialmdnt532.dll"
"c:\windows\system32\ialmgdev32.dll"
"c:\windows\system32\iashlpr32.dll"
"c:\windows\system32\iasnap32.dll"
"c:\windows\system32\iasrecst32.dll"
"c:\windows\system32\icm3232.dll"
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\User\Application Data\02000000dccb76ed705C.manifest
c:\documents and settings\User\Application Data\02000000dccb76ed705O.manifest
c:\documents and settings\User\Application Data\02000000dccb76ed705P.manifest
c:\documents and settings\User\Application Data\02000000dccb76ed705S.manifest
c:\program files\Fichiers communs\PSecurityUninstall
c:\program files\Fichiers communs\PSecurityUninstall\Uninstall.lnk
c:\windows\system32\1253797462
c:\windows\system32\antiwpa.dll
c:\windows\system32\dfsshlex32.dll
c:\windows\system32\dimsroam32.dll
c:\windows\system32\divx_xx1132.dll
c:\windows\system32\dmintf32.dll
c:\windows\system32\dot3dlg32.dll
c:\windows\system32\dpvvox3232.dll
c:\windows\system32\drmv2clt32.dll
c:\windows\system32\dx7vb32.dll
c:\windows\system32\E5.tmp
c:\windows\system32\eapp3hst32.dll
c:\windows\system32\eappcfg32.dll
c:\windows\system32\eapphost32.dll
c:\windows\system32\EqnClass32.dll
c:\windows\system32\extmgr32.dll
c:\windows\system32\F.tmp
c:\windows\system32\faultrep32.dll
c:\windows\system32\filemgmt32.dll
c:\windows\system32\FM2032.dll
c:\windows\system32\FM20FRA32.dll
c:\windows\system32\fsusd32.dll
c:\windows\system32\FXCompChannel32.dll
c:\windows\system32\gcdef32.dll
c:\windows\system32\glmf3232.dll
c:\windows\system32\hash232.dll
c:\windows\system32\hnetmon32.dll
c:\windows\system32\hppapr0432.dll
c:\windows\system32\htui32.dll
c:\windows\system32\ialmdnt532.dll
c:\windows\system32\ialmgdev32.dll
c:\windows\system32\iashlpr32.dll
c:\windows\system32\iasnap32.dll
c:\windows\system32\iasrecst32.dll
c:\windows\system32\icm3232.dll
c:\windows\system32\unrar.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-11-06 au 2009-12-06 ))))))))))))))))))))))))))))))))))))
.

2009-12-06 21:31 . 2009-12-06 21:38 -------- d-----w- C:\Bibitte
2009-12-06 14:56 . 2009-12-06 14:56 -------- d-----w- c:\windows\system32\wbem\snmp
2009-12-06 14:56 . 2009-12-06 14:56 -------- d-----w- c:\windows\srchasst
2009-12-06 14:55 . 2009-12-06 14:55 -------- d-----w- c:\windows\system32\xircom
2009-12-06 14:55 . 2009-12-06 14:55 -------- d-----w- c:\program files\microsoft frontpage
2009-12-06 13:54 . 2009-12-03 16:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-06 13:54 . 2009-12-03 16:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-06 13:54 . 2009-12-06 13:54 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-06 00:50 . 2009-12-06 00:50 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-12-05 01:15 . 2009-12-05 01:15 -------- d-----w- c:\documents and settings\User\Application Data\Malwarebytes
2009-12-05 01:15 . 2009-12-05 01:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-04 19:35 . 2009-12-04 20:18 -------- d-----w- c:\program files\Zumas Revenge
2009-12-04 16:18 . 2009-12-04 16:18 -------- d-----w- c:\windows\Sun
2009-12-01 22:01 . 2009-12-01 22:03 -------- d-sh--w- c:\windows\system32\SysWoW32
2009-12-01 13:57 . 2009-12-01 13:57 -------- d-----w- c:\program files\uTorrent
2009-12-01 13:40 . 2009-12-06 21:50 -------- d-----w- c:\documents and settings\User\Application Data\uTorrent
2009-11-28 19:29 . 2009-11-28 22:20 -------- d-----w- C:\Downloads
2009-11-28 19:29 . 2007-12-18 13:56 1412608 ----a-w- c:\documents and settings\User\Application Data\Download Master\temp\skin.dll
2009-11-28 19:29 . 2009-11-28 19:39 -------- d-----w- c:\documents and settings\User\Application Data\Download Master
2009-11-25 15:01 . 2009-11-25 15:01 -------- d-----w- c:\program files\Alcohol Soft
2009-11-25 14:58 . 2009-11-25 14:58 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-11-23 19:56 . 2009-12-06 21:48 -------- d-----w- c:\documents and settings\User\Application Data\translateclient
2009-11-23 19:55 . 2009-11-23 19:55 -------- d-----w- c:\program files\Translate Client
2009-11-22 12:50 . 2009-11-22 12:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Zylom
2009-11-22 09:11 . 2009-11-22 09:17 -------- d-----w- c:\program files\TmNationsForever
2009-11-21 14:59 . 2009-11-21 14:59 -------- d-----w- c:\documents and settings\User\Application Data\DivX
2009-11-21 14:42 . 2009-11-21 14:42 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-11-21 14:42 . 2009-11-25 09:07 -------- d-----w- c:\program files\DivX
2009-11-20 19:48 . 2009-11-22 22:46 -------- d-----w- c:\documents and settings\User\Application Data\Nero
2009-11-20 19:43 . 2009-11-20 19:44 -------- d-----w- c:\program files\Nero
2009-11-20 19:43 . 2009-11-22 21:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
2009-11-20 19:43 . 2009-11-22 21:11 -------- d-----w- c:\program files\Fichiers communs\Nero
2009-11-16 08:01 . 2009-11-16 08:01 -------- d-----w- c:\documents and settings\Partage
2009-11-14 15:06 . 2009-12-05 19:13 14 ----a-w- c:\windows\popcinfot.dat
2009-11-14 11:37 . 2009-12-06 21:31 -------- d-----w- c:\documents and settings\User\Application Data\LimeWire
2009-11-14 11:35 . 2009-11-14 11:34 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-11-14 11:34 . 2009-11-14 11:34 -------- d-----w- c:\program files\Java
2009-11-14 11:34 . 2009-11-14 11:34 152576 ----a-w- c:\documents and settings\User\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2009-11-14 11:25 . 2009-11-14 11:25 -------- d-----w- c:\program files\LimeWire
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
2009-11-12 01:21 . 2009-11-14 15:25 -------- d-----w- c:\documents and settings\User\Local Settings\Application Data\Temp
2009-11-09 12:49 . 2009-11-09 12:49 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-11-09 12:48 . 2009-12-06 00:02 -------- d-----w- c:\documents and settings\User\Application Data\skypePM
2009-11-09 09:06 . 2009-11-09 09:06 -------- d-----w- c:\documents and settings\User\Local Settings\Application Data\Identities
2009-11-08 12:52 . 2009-03-30 10:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-11-08 12:52 . 2009-02-13 12:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-11-08 12:52 . 2009-02-13 12:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-11-08 12:52 . 2009-11-08 12:52 -------- d-----w- c:\program files\Avira
2009-11-08 12:52 . 2009-11-08 12:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-11-07 21:11 . 2009-11-07 21:17 -------- d-----w- c:\windows\system32\NtmsData
2009-11-07 10:11 . 2009-11-08 22:32 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-06 18:08 . 2009-11-02 10:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-06 00:29 . 2009-11-04 18:05 -------- d-----w- c:\documents and settings\User\Application Data\Skype
2009-12-05 19:13 . 2009-09-17 23:57 -------- d-----w- c:\program files\zuma deluxe
2009-12-03 23:13 . 2009-11-02 00:09 -------- d-----w- c:\documents and settings\All Users\Application Data\TmForever
2009-11-28 18:59 . 2009-11-04 18:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-11-24 18:36 . 2009-11-04 18:02 -------- d-----r- c:\program files\Skype
2009-11-24 18:36 . 2009-10-31 16:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-11-24 18:36 . 2009-10-31 16:51 -------- d-----w- c:\program files\Yahoo!
2009-11-14 19:27 . 2008-04-14 12:00 72714 ----a-w- c:\windows\system32\perfc00C.dat
2009-11-14 19:27 . 2008-04-14 12:00 461736 ----a-w- c:\windows\system32\perfh00C.dat
2009-11-14 00:49 . 2009-11-21 14:44 9464 ------w- c:\windows\system32\drivers\cdralw2k.sys
2009-11-14 00:49 . 2009-11-21 14:44 9336 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2009-11-14 00:49 . 2009-11-21 14:44 43528 ------w- c:\windows\system32\drivers\PxHelp20.sys
2009-11-14 00:49 . 2009-11-21 14:44 129784 ------w- c:\windows\system32\pxafs.dll
2009-11-14 00:49 . 2009-11-21 14:44 120056 ------w- c:\windows\system32\pxcpyi64.exe
2009-11-14 00:49 . 2009-11-21 14:44 118520 ------w- c:\windows\system32\pxinsi64.exe
2009-11-07 09:28 . 2009-10-31 14:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-11-07 09:21 . 2009-10-31 14:03 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-11-07 09:01 . 2009-10-31 16:43 64576 ----a-w- c:\documents and settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-11-07 01:03 . 2009-10-31 13:55 -------- d-----w- c:\program files\Microsoft Works
2009-11-05 09:02 . 2009-10-31 20:58 -------- d-----w- c:\program files\Microsoft Silverlight
2009-11-04 18:14 . 2009-10-31 16:40 -------- d-----w- c:\program files\Google
2009-11-04 18:02 . 2009-11-04 18:02 -------- d-----w- c:\program files\Fichiers communs\Skype
2009-11-03 08:46 . 2009-10-31 20:44 -------- d-----w- c:\program files\Microsoft
2009-11-02 08:56 . 2009-10-31 16:31 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-11-01 14:08 . 2009-11-01 13:42 -------- d-----w- c:\documents and settings\User\Application Data\Media Player Classic
2009-10-31 21:28 . 2009-10-31 21:28 0 ----a-w- c:\windows\nsreg.dat
2009-10-31 20:58 . 2009-10-31 20:58 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-10-31 20:56 . 2009-10-31 20:43 -------- d-----w- c:\program files\Windows Live
2009-10-31 20:47 . 2009-10-31 20:47 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-10-31 20:46 . 2009-10-31 20:46 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-10-31 20:43 . 2009-10-31 20:43 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-10-31 17:19 . 2009-10-31 17:19 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-10-31 16:59 . 2009-10-31 16:59 -------- d-----w- c:\program files\Lavalys
2009-10-31 16:58 . 2009-09-12 23:05 -------- d-----w- c:\program files\Downloads
2009-10-31 16:57 . 2008-07-21 11:34 -------- d-----w- c:\program files\VCop2
2009-10-31 16:55 . 2009-10-31 16:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-10-31 16:54 . 2009-10-31 16:54 -------- d-----w- c:\documents and settings\User\Application Data\Yahoo!
2009-10-31 16:45 . 2009-10-31 16:42 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-10-31 16:40 . 2009-10-31 16:40 -------- d-----w- c:\program files\SuperCopier2
2009-10-31 16:27 . 2009-10-31 16:27 -------- d-----w- c:\program files\CCleaner
2009-10-31 14:34 . 2009-10-31 13:42 86331 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-10-31 13:57 . 2009-10-31 13:57 -------- d-----w- c:\program files\Microsoft.NET
2009-10-31 13:41 . 2009-10-31 13:41 -------- d-----w- c:\program files\Services en ligne
2009-10-31 13:39 . 2009-10-31 13:39 21892 ----a-w- c:\windows\system32\emptyregdb.dat
2009-10-31 13:38 . 2009-10-31 13:38 -------- d-----w- c:\program files\Windows Media Connect 2
2009-09-11 14:18 . 2008-04-14 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys

[-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys

[-] 2008-04-14 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-14 . 16813155807C6881F4BFBF6657424659 . 25216 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys

[-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys

[-] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys

[-] 2008-04-14 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-07 . 8E036EEC565910417EA020CE0962AA24 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys

[-] 2008-04-14 . 06B54A7B1EF7CB16BFD0E208D343FA71 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll

[-] 2008-04-14 . 91E6024D6D4DCDECDB36C43ECF9BBECB . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe

[-] 2008-04-14 . BE0CB143FA427D93440DED18DB8C918B . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll

[-] 2008-04-14 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll

[-] 2009-02-09 . F83B964469D230F445613C44DF9FE25D . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . 3D65EB82E1FA6DB15A33E024C9E03CAB . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll

[-] 2009-02-09 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 62789101F9C2401ED598AA2CDE7450C0 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . 54CB50058851D95E56EC70D09F70857F . 109056 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe

[-] 2008-04-14 . 460E4CE148BD07218DA0B6A3D31885A9 . 57856 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe

[-] 2008-04-14 . DD73D6B9F6B4CB630CF35B438B540174 . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe

[-] 2008-04-14 . B4AA331468315B6A174C3F0D5B3BC135 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll

[-] 2008-04-14 . 7A6D0B71035E123FDDA2156A25578AD3 . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll

[-] 2008-07-07 20:28 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:28 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:24 . 157F9C595FD0D10502497DC4C1348D17 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-04-14 12:00 . 9FD4A0615BF3E9388A46EDF8774C7294 . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll

[-] 2008-04-14 . 0469B73DB32E5520F342C5E163AA3CCA . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll

[-] 2009-03-21 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . C3AF0EEE26B59484E674673E3016AAB7 . 1056768 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . 3AC8886DFA5AB641417DF4D3B7F5512E . 1054720 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll

[-] 2008-04-14 . 5C64008E661307C4A3C3C25D9086CDE7 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll

[-] 2008-04-14 . 982B2C204337C3B12211E1E1D9BA8C9C . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll

[-] 2009-10-21 . 0C52593238E9886E1646295C9210F745 . 3598336 . . [7.00.6000.16939] . . c:\windows\system32\mshtml.dll
[-] 2009-10-21 . 0C52593238E9886E1646295C9210F745 . 3598336 . . [7.00.6000.16939] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2009-10-21 . 1411E21288C951FA0011C4EE6DCB70AB . 3602432 . . [7.00.6000.21142] . . c:\windows\$hf_mig$\KB976749-IE7\SP3QFE\mshtml.dll
[-] 2009-08-29 . CDE840862EBE2DB23ED82686FC263708 . 3598336 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976749-IE7\mshtml.dll
[-] 2009-08-29 . 5929FA14CE47CC401E43AA7489BFA692 . 3600384 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtml.dll
[-] 2008-06-07 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . c:\windows\ie7updates\KB974455-IE7\mshtml.dll

[-] 2008-04-14 . 3891413139EAABFEFE9B0CA49B5CD395 . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll

[-] 2008-06-20 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . C759B3790D3BA760C52E218EF4886DAC . 247808 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-04-14 . 196CCC3FDD21665DCAA9F83FFC03B41A . 247808 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll

[-] 2008-04-14 . 04821179C3171554C1BD1F9888A113E2 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll

[-] 2009-08-04 . 263FA3A73C588A26306D3B403A45F5A9 . 2191232 . . [5.1.2600.5857] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2009-08-04 . 263FA3A73C588A26306D3B403A45F5A9 . 2191232 . . [5.1.2600.5857] . . c:\windows\system32\ntoskrnl.exe
[-] 2009-08-04 . 263FA3A73C588A26306D3B403A45F5A9 . 2191232 . . [5.1.2600.5857] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2009-08-04 . 63864AF70CAC631077A6C1223617336B . 2191360 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . BEF458B8424553279E95E250D1E0CE7E . 2191232 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2008-04-14 . 099D639DA1EF6968D4E41795BB507E6B . 2191104 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB971486$\ntoskrnl.exe

[-] 2008-04-14 . 9F2C862E39BF8E8FC51C3F6A6BCEB415 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll

[-] 2008-04-14 . 973B36634C544948C663E8269AA1B3A3 . 187392 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll

[-] 2008-04-14 . 9A4E7ECBB5B7FB86F3B926AB039F4FEC . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll

[-] 2008-04-14 . E4BDF223CD75478BF44567B4D5C2634D . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe

[-] 2008-04-14 . 8E5231171AD6595FF002E848CC54FCD7 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll

[-] 2008-04-14 . E853F84D3CE2FAA2A802E33CF89AC023 . 579584 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll

[-] 2008-04-14 . E74DDB12188C2FF57A78624DBF7332FC . 26624 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe

[-] 2009-08-29 . 21AB2D2F2F48BD2D566777D0ABB36A45 . 832512 . . [7.00.6000.16915] . . c:\windows\system32\wininet.dll
[-] 2009-08-29 . 21AB2D2F2F48BD2D566777D0ABB36A45 . 832512 . . [7.00.6000.16915] . . c:\windows\system32\dllcache\wininet.dll
[-] 2009-08-29 . 7F40D3CD13090D03552B1FC6B28C94B5 . 840704 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\wininet.dll
[-] 2008-06-07 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . c:\windows\ie7updates\KB974455-IE7\wininet.dll

[-] 2008-04-14 . FB836F9E62D82904C983AD21296A5D9C . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll

[-] 2008-04-14 . F2317622D29F9FF0F88AEECD5F60F0DD . 1037824 . . [6.00.2900.5512] . . c:\windows\explorer.exe

[-] 2008-04-14 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll

[-] 2008-04-14 . 02DA31AB433A6C1110A736C85701DECA . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe

[-] 2008-04-14 . F92A87FDDA0C11C8604FBC2B864FA726 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll

[-] 2008-04-14 . 4EC800BDF80521B0207BD2301DFC7D14 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll

[-] 2008-04-14 . E17C85D5B5CF477638433B851A98499E . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll

[-] 2008-04-14 . 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe

[-] 2008-04-14 . B9F20D71E5B6CE89A7A94B38351FDBDC . 135680 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll

[-] 2008-04-14 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll

[-] 2008-04-14 . 55F5C5C1BE1A78E285033E432BA01597 . 194560 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll

[-] 2008-04-14 . EA9E0DB8684CEF2FD3BADD671DF5A112 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll

[-] 2008-04-14 . 710BC85A8C22626EE094439E3EA0D38C . 297984 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll

[-] 2008-04-14 . F36C9F78FC902C8DCE4D3B576BB0435A . 176640 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll

[-] 2008-04-14 . E4ABC1212B70BB03D35E60681C447210 . 12032 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 07:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys

[-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys

[-] 2008-04-14 12:00 . CE21FE79AD3B913A79E0C742BED6BF85 . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll

[-] 2008-04-14 . E67A66A3781C1A483F0F8992664CBE0D . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll

[-] 2008-06-07 14:18 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll

[-] 2009-08-04 . FE0C9C9035E3FDC193255C646BAC2C3D . 2068224 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . 6472BC2A0D37D13D9D177CCC11F9726B . 2068096 . . [5.1.2600.5857] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2009-08-04 . 6472BC2A0D37D13D9D177CCC11F9726B . 2068096 . . [5.1.2600.5857] . . c:\windows\system32\ntkrnlpa.exe
[-] 2009-08-04 . 6472BC2A0D37D13D9D177CCC11F9726B . 2068096 . . [5.1.2600.5857] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2009-02-09 . ED5E20AE4AC5A63A4FF43FFE704A5153 . 2068224 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-06-07 . B71A8F101CEFAF82FC5EC16130A54A3F . 2067968 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe

[-] 2008-04-14 12:00 . 037D92B3A7853A183FCAB77FB1D13D6C . 438272 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll

[-] 2008-04-14 . BD8166A495B02308F364B36249475F22 . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
.
((((((((((((((((((((((((((((( SnapShot@2009-12-06_14.45.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-12-06 21:49 . 2009-12-06 21:49 16384 c:\windows\temp\Perflib_Perfdata_f94.dat
+ 2009-12-06 21:48 . 2009-12-06 21:48 16384 c:\windows\temp\Perflib_Perfdata_11c.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2009-08-16 955392]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-31 39408]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 4351216]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2009-12-01 289584]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BigDog302"="c:\windows\eagle2.EXE Vimicro USB PC Camera (ZC0302)" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-06-21 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-06-21 126976]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-14 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2009-08-29 124928]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Translate Client.lnk - c:\program files\Translate Client\translateclient.exe [2009-10-31 905216]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\TmNationsForever\\TmForever.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Nero\\Nero 9\\Nero StartSmart\\NeroStartSmart.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [25/11/2009 14:58 721904]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [08/11/2009 12:52 108289]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [31/10/2009 20:57 54752]
S2 gupdate1ca5d794faacca0;Service Google Update (gupdate1ca5d794faacca0);c:\program files\Google\Update\GoogleUpdate.exe [04/11/2009 18:04 133104]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
S3 ZSMC302;Vimicro USB PC Camera (ZC0302);c:\windows\system32\drivers\usbVM302.sys [02/11/2009 19:33 389492]
.
------- Examen supplémentaire -------
.
uStart Page = about:blank
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: Çàêà÷àòü ÂÑÅ ïðè ïîìîùè Download Master
IE: Çàêà÷àòü ïðè ïîìîùè Download Master
IE: Ïåðåäàòü íà óäàëåííóþ çàêà÷êó DM
IE: {{8DAE90AD-4583-4977-9DD4-4360F7A45C74}
FF - ProfilePath - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\2ze4u366.default\
FF - prefs.js: browser.startup.homepage - about:blank
FF - component: c:\program files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\components\SEPsearchhelperff.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
.
- - - - ORPHELINS SUPPRIMES - - - -

Notify-78890931705 - c:\windows\System32\eapphost32.dll

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-06 21:48
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys spsn.sys >>UNKNOWN [0x82395938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf8585f28
\Driver\ACPI -> ACPI.sys @ 0xf83decb8
\Driver\atapi -> atapi.sys @ 0xf8373b40
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a05a9
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a05a9
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: Intel(R) PRO/100 VM Network Connection -> SendCompleteHandler -> NDIS.sys @ 0xf827cbb0
PacketIndicateHandler -> NDIS.sys @ 0xf8289a21
SendHandler -> NDIS.sys @ 0xf826787b
user & kernel MBR OK

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\vsdatant]
"ImagePath"="a"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(3380)
c:\program files\Windows Media Player\wmpband.dll
c:\windows\system32\wpdshserviceobj.dll
c:\windows\system32\portabledevicetypes.dll
c:\windows\system32\portabledeviceapi.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\eagle2.EXE
c:\program files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Yahoo!\Messenger\ymsgr_tray.exe
.
**************************************************************************
.
Heure de fin: 2009-12-06 21:56 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-12-06 21:55
ComboFix2.txt 2009-12-06 14:49

Avant-CF: 20 688 224 256 octets libres
Après-CF: 20 675 416 064 octets libres

- - End Of File - - 9CC4195168CBA07FC4B2012B810524CC

ne te sauve pas comme cela
il reste pas mal de cochonneries sur ton PC
ceci a été intentionnellement rédigé pour CET utilisateur.
si vous n'êtes pas CET utilisateur, NE PAS appliquer ces directives : elles pourraient endommager votre système.
Rappel : une fois que ComboFix est lancé, il ne faut pas cliquer dans la fenêtre de ComboFix car cela pourrait entraîner un plantage du programme.
Il est recommandé de laisser l'outil analyser et nettoyer le PC sans utiliser quoi que ce soit d'autre...
Sélectionne le texte suivant (Ctrl+A):

KillAll::
Folder::
c:\program files\Fichiers communs\PSecurityUninstall 
File::
c:\windows\system32\glmf3232.dll
c:\windows\system32\fsusd32.dll
c:\windows\system32\filemgmt32.dll
c:\windows\system32\antiwpa.dll 
c:\windows\System32\eapphost32.dll    
c:\windows\system32\eapphost32.dll  
c:\windows\system32\iashlpr32.dll 
c:\windows\system32\htui32.dll  
c:\windows\system32\hnetmon32.dll   
c:\windows\system32\drmv2clt32.dll 
c:\windows\system32\FXCompChannel32.dll         
c:\windows\system32\FM20FRA32.dll        
c:\windows\system32\extmgr32.dll         
c:\windows\system32\dmintf32.dll         
c:\windows\system32\icm3232.dll       
c:\windows\system32\eappcfg32.dll         
c:\windows\system32\iasrecst32.dll       
c:\windows\system32\ialmgdev32.dll        
c:\windows\system32\hppapr0432.dll       
c:\windows\system32\dpvvox3232.dll        
c:\windows\system32\hash232.dll       
c:\windows\system32\gcdef32.dll        
c:\windows\system32\dot3dlg32.dll        
c:\windows\system32\FM2032.dll       
c:\windows\system32\faultrep32.dll       
c:\windows\system32\divx_xx1132.dll      
c:\windows\system32\EqnClass32.dll        
c:\windows\system32\dimsroam32.dll         
c:\windows\system32\eapp3hst32.dll       
c:\windows\system32\dfsshlex32.dll       
c:\windows\system32\dx7vb32.dll       
c:\windows\system32\iasnap32.dll         
c:\windows\system32\ialmdnt532.dll  
c:\windows\system32\E5.tmp       
c:\program files\Fichiers communs\PSecurityUninstall 

Copie le texte sélectionné (CTRL+C).
Ouvre le Bloc-notes (Démarrer/Tous les programmes/Accessoires/Bloc-notes).
Colle le texte copié dans ce Bloc-notes (CTRL+V).
Sauvegarde ce fichier sur ton Bureau sous le nom de CFScript.txt (CFScript)
http://apu.mabul.org/up/apu/2008/08/12/img-210914jjufm.gif
Comme l'image le montre, fait glisser CFScript.txt sur ComboFix.exe(ComboFix)
Une fenêtre à fond bleu va s'ouvrir: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
Laisse ComboFix travailler
Patiente le temps de l'analyse. Le Bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le nettoyage n'est pas terminé.
Un rapport va s'afficher: poste son contenu.
Si le fichier ne s'ouvre pas, tu le trouves ici, à la racine de ton Système, en principe : C:\ComboFix.txt (C:\ComboFix)
ceci a été intentionnellement rédigé pour CET utilisateur.
si vous n'êtes pas CET utilisateur, NE PAS appliquer ces directives : elles pourraient endommager votre système.

J'ai effectué ce que tu m'as demandé et le logiciel a disparu. Je te remercie beaucoup. Sincèrement merci!!
Voilà le rapport de combofix:

ComboFix 09-12-05.06 - User 06/12/2009 14:38.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.503.160 [GMT 0:00]
Lancé depuis: c:\documents and settings\User\Bureau\Bibitte.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\User\Application Data\02000000dccb76ed705C.manifest
c:\documents and settings\User\Application Data\02000000dccb76ed705O.manifest
c:\documents and settings\User\Application Data\02000000dccb76ed705P.manifest
c:\documents and settings\User\Application Data\02000000dccb76ed705S.manifest
c:\program files\PSecurity
c:\program files\PSecurity\psecurity.exe
c:\windows\system32\1253797462
c:\windows\system32\dfrgsnap32.dll
c:\windows\system32\DIGEST32.DLL
c:\windows\system32\DMSCRIPT32.DLL
c:\windows\system32\DOCPROP32.DLL
c:\windows\system32\DPLAY32.DLL
c:\windows\system32\DPNHPAST32.DLL
c:\windows\system32\DPVACM32.DLL
c:\windows\system32\DPVVOX32.DLL
c:\windows\system32\DSKQUOTA32.DLL
c:\windows\system32\DSOUND32.DLL
c:\windows\system32\DSOUND3D32.DLL
c:\windows\system32\duser32.dll
c:\windows\system32\dx8vb32.dll
c:\windows\system32\ersvc32.dll
c:\windows\system32\h323msp32.dll
c:\windows\system32\unrar.exe
c:\windows\system32\wiN32extension.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-11-06 au 2009-12-06 ))))))))))))))))))))))))))))))))))))
.

2009-12-06 13:54 . 2009-12-03 16:14 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-06 13:54 . 2009-12-03 16:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-06 13:54 . 2009-12-06 13:54 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-06 00:50 . 2009-12-06 00:50 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-12-05 15:40 . 2009-12-05 15:40 192000 ----a-w- c:\windows\system32\glmf3232.dll
2009-12-05 09:39 . 2009-12-05 09:39 192000 ----a-w- c:\windows\system32\fsusd32.dll
2009-12-05 09:33 . 2009-12-05 09:33 192000 ----a-w- c:\windows\system32\filemgmt32.dll
2009-12-05 01:15 . 2009-12-05 01:15 -------- d-----w- c:\documents and settings\User\Application Data\Malwarebytes
2009-12-05 01:15 . 2009-12-05 01:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-12-04 19:35 . 2009-12-04 20:18 -------- d-----w- c:\program files\Zumas Revenge
2009-12-04 19:09 . 2009-12-04 19:09 -------- d-----w- c:\program files\Fichiers communs\PSecurityUninstall
2009-12-04 16:18 . 2009-12-04 16:18 -------- d-----w- c:\windows\Sun
2009-12-01 22:01 . 2009-12-01 22:03 -------- d-sh--w- c:\windows\system32\SysWoW32
2009-12-01 21:58 . 2009-12-01 21:58 119808 ----a-w- c:\windows\system32\eapphost32.dll
2009-12-01 21:57 . 2009-12-01 21:57 119808 ----a-w- c:\windows\system32\iashlpr32.dll
2009-12-01 21:56 . 2009-12-01 21:56 119808 ----a-w- c:\windows\system32\htui32.dll
2009-12-01 21:55 . 2009-12-01 21:55 119808 ----a-w- c:\windows\system32\hnetmon32.dll
2009-12-01 21:55 . 2009-12-01 21:55 119808 ----a-w- c:\windows\system32\drmv2clt32.dll
2009-12-01 21:53 . 2009-12-01 21:53 119808 ----a-w- c:\windows\system32\FXCompChannel32.dll
2009-12-01 21:52 . 2009-12-01 21:52 119808 ----a-w- c:\windows\system32\FM20FRA32.dll
2009-12-01 21:51 . 2009-12-01 21:51 119808 ----a-w- c:\windows\system32\extmgr32.dll
2009-12-01 21:51 . 2009-12-01 21:51 119808 ----a-w- c:\windows\system32\dmintf32.dll
2009-12-01 21:49 . 2009-12-01 21:49 119808 ----a-w- c:\windows\system32\icm3232.dll
2009-12-01 21:49 . 2009-12-01 21:49 119808 ----a-w- c:\windows\system32\eappcfg32.dll
2009-12-01 21:48 . 2009-12-01 21:48 119808 ----a-w- c:\windows\system32\iasrecst32.dll
2009-12-01 21:47 . 2009-12-01 21:47 119808 ----a-w- c:\windows\system32\ialmgdev32.dll
2009-12-01 21:46 . 2009-12-01 21:46 119808 ----a-w- c:\windows\system32\hppapr0432.dll
2009-12-01 21:46 . 2009-12-01 21:46 119808 ----a-w- c:\windows\system32\dpvvox3232.dll
2009-12-01 21:45 . 2009-12-01 21:45 119808 ----a-w- c:\windows\system32\hash232.dll
2009-12-01 21:44 . 2009-12-01 21:44 119808 ----a-w- c:\windows\system32\gcdef32.dll
2009-12-01 21:44 . 2009-12-01 21:44 119808 ----a-w- c:\windows\system32\dot3dlg32.dll
2009-12-01 21:43 . 2009-12-01 21:43 119808 ----a-w- c:\windows\system32\FM2032.dll
2009-12-01 21:42 . 2009-12-01 21:42 119808 ----a-w- c:\windows\system32\faultrep32.dll
2009-12-01 21:42 . 2009-12-01 21:42 119808 ----a-w- c:\windows\system32\divx_xx1132.dll
2009-12-01 21:41 . 2009-12-01 21:41 119808 ----a-w- c:\windows\system32\EqnClass32.dll
2009-12-01 21:41 . 2009-12-01 21:41 119808 ----a-w- c:\windows\system32\dimsroam32.dll
2009-12-01 21:40 . 2009-12-01 21:40 119808 ----a-w- c:\windows\system32\eapp3hst32.dll
2009-12-01 21:40 . 2009-12-01 21:40 119808 ----a-w- c:\windows\system32\dfsshlex32.dll
2009-12-01 21:39 . 2009-12-01 21:39 119808 ----a-w- c:\windows\system32\dx7vb32.dll
2009-12-01 21:38 . 2009-12-01 21:38 119808 ----a-w- c:\windows\system32\iasnap32.dll
2009-12-01 21:37 . 2009-12-01 21:37 119808 ----a-w- c:\windows\system32\ialmdnt532.dll
2009-12-01 13:57 . 2009-12-01 13:57 -------- d-----w- c:\program files\uTorrent
2009-12-01 13:40 . 2009-12-06 03:02 -------- d-----w- c:\documents and settings\User\Application Data\uTorrent
2009-11-28 19:29 . 2009-11-28 22:20 -------- d-----w- C:\Downloads
2009-11-28 19:29 . 2007-12-18 13:56 1412608 ----a-w- c:\documents and settings\User\Application Data\Download Master\temp\skin.dll
2009-11-28 19:29 . 2009-11-28 19:39 -------- d-----w- c:\documents and settings\User\Application Data\Download Master
2009-11-25 15:01 . 2009-11-25 15:01 -------- d-----w- c:\program files\Alcohol Soft
2009-11-25 14:58 . 2009-11-25 14:58 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-11-23 19:56 . 2009-12-06 02:59 -------- d-----w- c:\documents and settings\User\Application Data\translateclient
2009-11-23 19:55 . 2009-11-23 19:55 -------- d-----w- c:\program files\Translate Client
2009-11-22 12:50 . 2009-11-22 12:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Zylom
2009-11-22 09:11 . 2009-11-22 09:17 -------- d-----w- c:\program files\TmNationsForever
2009-11-21 14:59 . 2009-11-21 14:59 -------- d-----w- c:\documents and settings\User\Application Data\DivX
2009-11-21 14:42 . 2009-11-21 14:42 -------- d-----w- c:\program files\Fichiers communs\DivX Shared
2009-11-21 14:42 . 2009-11-25 09:07 -------- d-----w- c:\program files\DivX
2009-11-20 19:48 . 2009-11-22 22:46 -------- d-----w- c:\documents and settings\User\Application Data\Nero
2009-11-20 19:43 . 2009-11-20 19:44 -------- d-----w- c:\program files\Nero
2009-11-20 19:43 . 2009-11-22 21:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
2009-11-20 19:43 . 2009-11-22 21:11 -------- d-----w- c:\program files\Fichiers communs\Nero
2009-11-16 08:01 . 2009-11-16 08:01 -------- d-----w- c:\documents and settings\Partage
2009-11-14 15:06 . 2009-12-05 19:13 14 ----a-w- c:\windows\popcinfot.dat
2009-11-14 11:37 . 2009-12-06 14:30 -------- d-----w- c:\documents and settings\User\Application Data\LimeWire
2009-11-14 11:35 . 2009-11-14 11:34 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-11-14 11:34 . 2009-11-14 11:34 -------- d-----w- c:\program files\Java
2009-11-14 11:34 . 2009-11-14 11:34 152576 ----a-w- c:\documents and settings\User\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2009-11-14 11:25 . 2009-11-14 11:25 -------- d-----w- c:\program files\LimeWire
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
2009-11-12 01:21 . 2009-11-14 15:25 -------- d-----w- c:\documents and settings\User\Local Settings\Application Data\Temp
2009-11-09 12:49 . 2009-11-09 12:49 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-11-09 12:48 . 2009-12-06 00:02 -------- d-----w- c:\documents and settings\User\Application Data\skypePM
2009-11-09 09:06 . 2009-11-09 09:06 -------- d-----w- c:\documents and settings\User\Local Settings\Application Data\Identities
2009-11-08 12:52 . 2009-03-30 10:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-11-08 12:52 . 2009-02-13 12:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-11-08 12:52 . 2009-02-13 12:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-11-08 12:52 . 2009-11-08 12:52 -------- d-----w- c:\program files\Avira
2009-11-08 12:52 . 2009-11-08 12:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-11-07 21:11 . 2009-11-07 21:17 -------- d-----w- c:\windows\system32\NtmsData
2009-11-07 10:11 . 2009-11-08 22:32 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-06 08:34 . 2009-11-02 10:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-12-06 00:29 . 2009-11-04 18:05 -------- d-----w- c:\documents and settings\User\Application Data\Skype
2009-12-05 19:13 . 2009-09-17 23:57 -------- d-----w- c:\program files\zuma deluxe
2009-12-03 23:13 . 2009-11-02 00:09 -------- d-----w- c:\documents and settings\All Users\Application Data\TmForever
2009-12-01 21:59 . 2009-12-01 21:58 738816 --sha-w- c:\windows\system32\E5.tmp
2009-11-28 18:59 . 2009-11-04 18:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-11-24 18:36 . 2009-11-04 18:02 -------- d-----r- c:\program files\Skype
2009-11-24 18:36 . 2009-10-31 16:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-11-24 18:36 . 2009-10-31 16:51 -------- d-----w- c:\program files\Yahoo!
2009-11-14 19:27 . 2008-04-14 12:00 72714 ----a-w- c:\windows\system32\perfc00C.dat
2009-11-14 19:27 . 2008-04-14 12:00 461736 ----a-w- c:\windows\system32\perfh00C.dat
2009-11-14 00:49 . 2009-11-21 14:44 9464 ------w- c:\windows\system32\drivers\cdralw2k.sys
2009-11-14 00:49 . 2009-11-21 14:44 9336 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2009-11-14 00:49 . 2009-11-21 14:44 43528 ------w- c:\windows\system32\drivers\PxHelp20.sys
2009-11-14 00:49 . 2009-11-21 14:44 129784 ------w- c:\windows\system32\pxafs.dll
2009-11-14 00:49 . 2009-11-21 14:44 120056 ------w- c:\windows\system32\pxcpyi64.exe
2009-11-14 00:49 . 2009-11-21 14:44 118520 ------w- c:\windows\system32\pxinsi64.exe
2009-11-07 09:28 . 2009-10-31 14:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-11-07 09:21 . 2009-10-31 14:03 -------- d-----w- c:\program files\Fichiers communs\Symantec Shared
2009-11-07 09:01 . 2009-10-31 16:43 64576 ----a-w- c:\documents and settings\User\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-11-07 01:03 . 2009-10-31 13:55 -------- d-----w- c:\program files\Microsoft Works
2009-11-05 09:02 . 2009-10-31 20:58 -------- d-----w- c:\program files\Microsoft Silverlight
2009-11-04 18:14 . 2009-10-31 16:40 -------- d-----w- c:\program files\Google
2009-11-04 18:02 . 2009-11-04 18:02 -------- d-----w- c:\program files\Fichiers communs\Skype
2009-11-03 08:46 . 2009-10-31 20:44 -------- d-----w- c:\program files\Microsoft
2009-11-02 08:56 . 2009-10-31 16:31 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-11-01 14:08 . 2009-11-01 13:42 -------- d-----w- c:\documents and settings\User\Application Data\Media Player Classic
2009-10-31 21:28 . 2009-10-31 21:28 0 ----a-w- c:\windows\nsreg.dat
2009-10-31 20:58 . 2009-10-31 20:58 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-10-31 20:56 . 2009-10-31 20:43 -------- d-----w- c:\program files\Windows Live
2009-10-31 20:47 . 2009-10-31 20:47 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-10-31 20:46 . 2009-10-31 20:46 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-10-31 20:43 . 2009-10-31 20:43 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-10-31 17:19 . 2009-10-31 17:19 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-10-31 16:59 . 2009-10-31 16:59 -------- d-----w- c:\program files\Lavalys
2009-10-31 16:58 . 2009-09-12 23:05 -------- d-----w- c:\program files\Downloads
2009-10-31 16:57 . 2008-07-21 11:34 -------- d-----w- c:\program files\VCop2
2009-10-31 16:55 . 2009-10-31 16:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-10-31 16:54 . 2009-10-31 16:54 -------- d-----w- c:\documents and settings\User\Application Data\Yahoo!
2009-10-31 16:45 . 2009-10-31 16:42 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-10-31 16:40 . 2009-10-31 16:40 -------- d-----w- c:\program files\SuperCopier2
2009-10-31 16:27 . 2009-10-31 16:27 -------- d-----w- c:\program files\CCleaner
2009-10-31 14:34 . 2009-10-31 13:42 86331 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-10-31 13:57 . 2009-10-31 13:57 -------- d-----w- c:\program files\Microsoft.NET
2009-10-31 13:41 . 2009-10-31 13:41 -------- d-----w- c:\program files\Services en ligne
2009-10-31 13:39 . 2009-10-31 13:39 21892 ----a-w- c:\windows\system32\emptyregdb.dat
2009-10-31 13:38 . 2009-10-31 13:38 -------- d-----w- c:\program files\Windows Media Connect 2
2009-09-11 14:18 . 2008-04-14 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys

[-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys

[-] 2008-04-14 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-14 . 16813155807C6881F4BFBF6657424659 . 25216 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys

[-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys

[-] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys

[-] 2008-04-14 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-07 . 8E036EEC565910417EA020CE0962AA24 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys

[-] 2008-04-14 . 06B54A7B1EF7CB16BFD0E208D343FA71 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll

[-] 2008-04-14 . 91E6024D6D4DCDECDB36C43ECF9BBECB . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe

[-] 2008-04-14 . BE0CB143FA427D93440DED18DB8C918B . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll

[-] 2008-04-14 . BAA0B6E647C1AD593E9BAE5CC31BCFFB . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll

[-] 2009-02-09 . F83B964469D230F445613C44DF9FE25D . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . 0203B1AAD358F206CB0A3C1F93CCE17A . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . 3D65EB82E1FA6DB15A33E024C9E03CAB . 399360 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\rpcss.dll

[-] 2009-02-09 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . C3FB1D70CB88722267949694BA51759E . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 62789101F9C2401ED598AA2CDE7450C0 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . 54CB50058851D95E56EC70D09F70857F . 109056 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB956572$\services.exe

[-] 2008-04-14 . 460E4CE148BD07218DA0B6A3D31885A9 . 57856 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe

[-] 2008-04-14 . DD73D6B9F6B4CB630CF35B438B540174 . 512000 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe

[-] 2008-04-14 . B4AA331468315B6A174C3F0D5B3BC135 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll

[-] 2008-04-14 . 7A6D0B71035E123FDDA2156A25578AD3 . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll

[-] 2008-07-07 20:28 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:28 . EC16AE9B37EACF871629227A3F3913FD . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:24 . 157F9C595FD0D10502497DC4C1348D17 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-04-14 12:00 . 9FD4A0615BF3E9388A46EDF8774C7294 . 246272 . . [2001.12.4414.701] . . c:\windows\$NtUninstallKB950974$\es.dll

[-] 2008-04-14 . 0469B73DB32E5520F342C5E163AA3CCA . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll

[-] 2009-03-21 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 98F08549604D090B6B2514AF845F329F . 1054720 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . C3AF0EEE26B59484E674673E3016AAB7 . 1056768 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . 3AC8886DFA5AB641417DF4D3B7F5512E . 1054720 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB959426$\kernel32.dll

[-] 2008-04-14 . 5C64008E661307C4A3C3C25D9086CDE7 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll

[-] 2008-04-14 . 982B2C204337C3B12211E1E1D9BA8C9C . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll

[-] 2009-10-21 . 0C52593238E9886E1646295C9210F745 . 3598336 . . [7.00.6000.16939] . . c:\windows\system32\mshtml.dll
[-] 2009-10-21 . 0C52593238E9886E1646295C9210F745 . 3598336 . . [7.00.6000.16939] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2009-10-21 . 1411E21288C951FA0011C4EE6DCB70AB . 3602432 . . [7.00.6000.21142] . . c:\windows\$hf_mig$\KB976749-IE7\SP3QFE\mshtml.dll
[-] 2009-08-29 . CDE840862EBE2DB23ED82686FC263708 . 3598336 . . [7.00.6000.16915] . . c:\windows\ie7updates\KB976749-IE7\mshtml.dll
[-] 2009-08-29 . 5929FA14CE47CC401E43AA7489BFA692 . 3600384 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtml.dll
[-] 2008-06-07 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . c:\windows\ie7updates\KB974455-IE7\mshtml.dll

[-] 2008-04-14 . 3891413139EAABFEFE9B0CA49B5CD395 . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll

[-] 2008-06-20 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 58AF8498C62E1E1DAB5AE59C6E08C180 . 247808 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . C759B3790D3BA760C52E218EF4886DAC . 247808 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-04-14 . 196CCC3FDD21665DCAA9F83FFC03B41A . 247808 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\mswsock.dll

[-] 2008-04-14 . 04821179C3171554C1BD1F9888A113E2 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll

[-] 2009-08-04 . 263FA3A73C588A26306D3B403A45F5A9 . 2191232 . . [5.1.2600.5857] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2009-08-04 . 263FA3A73C588A26306D3B403A45F5A9 . 2191232 . . [5.1.2600.5857] . . c:\windows\system32\ntoskrnl.exe
[-] 2009-08-04 . 263FA3A73C588A26306D3B403A45F5A9 . 2191232 . . [5.1.2600.5857] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2009-08-04 . 63864AF70CAC631077A6C1223617336B . 2191360 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . BEF458B8424553279E95E250D1E0CE7E . 2191232 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2008-04-14 . 099D639DA1EF6968D4E41795BB507E6B . 2191104 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB971486$\ntoskrnl.exe

[-] 2008-04-14 . 9F2C862E39BF8E8FC51C3F6A6BCEB415 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll

[-] 2008-04-14 . 973B36634C544948C663E8269AA1B3A3 . 187392 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll

[-] 2008-04-14 . 9A4E7ECBB5B7FB86F3B926AB039F4FEC . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll

[-] 2008-04-14 . E4BDF223CD75478BF44567B4D5C2634D . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe

[-] 2008-04-14 . 8E5231171AD6595FF002E848CC54FCD7 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll

[-] 2008-04-14 . E853F84D3CE2FAA2A802E33CF89AC023 . 579584 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll

[-] 2008-04-14 . E74DDB12188C2FF57A78624DBF7332FC . 26624 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe

[-] 2009-08-29 . 21AB2D2F2F48BD2D566777D0ABB36A45 . 832512 . . [7.00.6000.16915] . . c:\windows\system32\wininet.dll
[-] 2009-08-29 . 21AB2D2F2F48BD2D566777D0ABB36A45 . 832512 . . [7.00.6000.16915] . . c:\windows\system32\dllcache\wininet.dll
[-] 2009-08-29 . 7F40D3CD13090D03552B1FC6B28C94B5 . 840704 . . [7.00.6000.21115] . . c:\windows\$hf_mig$\KB974455-IE7\SP3QFE\wininet.dll
[-] 2008-06-07 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . c:\windows\ie7updates\KB974455-IE7\wininet.dll

[-] 2008-04-14 . FB836F9E62D82904C983AD21296A5D9C . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll

[-] 2008-04-14 . F2317622D29F9FF0F88AEECD5F60F0DD . 1037824 . . [6.00.2900.5512] . . c:\windows\explorer.exe

[-] 2008-04-14 . 6ED29124A1C83BD0CF6B26BD01CA6F6F . 171520 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll

[-] 2008-04-14 . 02DA31AB433A6C1110A736C85701DECA . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe

[-] 2008-04-14 . F92A87FDDA0C11C8604FBC2B864FA726 . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll

[-] 2008-04-14 . 4EC800BDF80521B0207BD2301DFC7D14 . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll

[-] 2008-04-14 . E17C85D5B5CF477638433B851A98499E . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll

[-] 2008-04-14 . 59DC5BB82E4C8E0B3EADCFDBC44BA6E4 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe

[-] 2008-04-14 . B9F20D71E5B6CE89A7A94B38351FDBDC . 135680 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll

[-] 2008-04-14 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll

[-] 2008-04-14 . 55F5C5C1BE1A78E285033E432BA01597 . 194560 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll

[-] 2008-04-14 . EA9E0DB8684CEF2FD3BADD671DF5A112 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll

[-] 2008-04-14 . 710BC85A8C22626EE094439E3EA0D38C . 297984 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll

[-] 2008-04-14 . F36C9F78FC902C8DCE4D3B576BB0435A . 176640 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll

[-] 2008-04-14 . E4ABC1212B70BB03D35E60681C447210 . 12032 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 07:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys

[-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys

[-] 2008-04-14 12:00 . CE21FE79AD3B913A79E0C742BED6BF85 . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll

[-] 2008-04-14 . E67A66A3781C1A483F0F8992664CBE0D . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll

[-] 2008-06-07 14:18 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll

[-] 2009-08-04 . FE0C9C9035E3FDC193255C646BAC2C3D . 2068224 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . 6472BC2A0D37D13D9D177CCC11F9726B . 2068096 . . [5.1.2600.5857] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2009-08-04 . 6472BC2A0D37D13D9D177CCC11F9726B . 2068096 . . [5.1.2600.5857] . . c:\windows\system32\ntkrnlpa.exe
[-] 2009-08-04 . 6472BC2A0D37D13D9D177CCC11F9726B . 2068096 . . [5.1.2600.5857] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2009-02-09 . ED5E20AE4AC5A63A4FF43FFE704A5153 . 2068224 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-06-07 . B71A8F101CEFAF82FC5EC16130A54A3F . 2067968 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe

[-] 2008-04-14 12:00 . 037D92B3A7853A183FCAB77FB1D13D6C . 438272 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll

[-] 2008-04-14 . BD8166A495B02308F364B36249475F22 . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2009-08-16 955392]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-31 39408]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 4351216]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 120\axcmd.exe" [2009-04-24 203928]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2009-12-01 289584]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BigDog302"="c:\windows\eagle2.EXE Vimicro USB PC Camera (ZC0302)" [X]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-06-21 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-06-21 126976]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-14 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2009-08-29 124928]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Translate Client.lnk - c:\program files\Translate Client\translateclient.exe [2009-10-31 905216]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)
"NoSMHelp"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\78890931705]
2009-12-01 21:58 119808 ----a-w- c:\windows\system32\eapphost32.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\TmNationsForever\\TmForever.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Nero\\Nero 9\\Nero StartSmart\\NeroStartSmart.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [08/11/2009 12:52 108289]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [31/10/2009 20:57 54752]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [25/11/2009 14:58 721904]
S2 gupdate1ca5d794faacca0;Service Google Update (gupdate1ca5d794faacca0);c:\program files\Google\Update\GoogleUpdate.exe [04/11/2009 18:04 133104]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 21:48 704864]
S3 ZSMC302;Vimicro USB PC Camera (ZC0302);c:\windows\system32\drivers\usbVM302.sys [02/11/2009 19:33 389492]
.
------- Examen supplémentaire -------
.
uStart Page = about:blank
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: Çàêà÷àòü ÂÑÅ ïðè ïîìîùè Download Master
IE: Çàêà÷àòü ïðè ïîìîùè Download Master
IE: Ïåðåäàòü íà óäàëåííóþ çàêà÷êó DM
IE: {{8DAE90AD-4583-4977-9DD4-4360F7A45C74}
FF - ProfilePath - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\2ze4u366.default\
FF - prefs.js: browser.startup.homepage - about:blank
FF - component: c:\program files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\components\SEPsearchhelperff.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{01F8EB55-0A57-40E1-AF81-406B063EB67a} - c:\windows\System32\dfrgsnap32.dll
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-PSecurity - c:\program files\PSecurity\psecurity.exe
AddRemove-{98a7346d-eebf-4275-b1a6-cbd6aaf7618d} - c:\program files\Fichiers communs\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER=8M01-A0C9-8W34-XC23-MT2U-8T2L-5XX3-9WXU
AddRemove-{98cf0dea-2dc3-40db-8919-69c55129ff49} - c:\program files\Fichiers communs\Nero\Nero ProductInstaller 4\SetupX.exe REMOVESERIALNUMBER=XM2C-50A9-HH4M-0ZM8-4X06-9P25-5A46-618P-AH19-6647
AddRemove-PSecurity - c:\program files\PSecurity\psecurity.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-06 14:45
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\vsdatant]
"ImagePath"="a"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(652)
c:\windows\System32\eapphost32.dll
c:\windows\system32\antiwpa.dll
.
Heure de fin: 2009-12-06 14:49
ComboFix-quarantined-files.txt 2009-12-06 14:49

Avant-CF: 20 615 749 632 octets libres
Après-CF: 20 611 313 664 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

- - End Of File - - 03498E29AE2CADA56F05C7090E571317

Encore merci et que Dieu te benisses qinsi que toute la communauté de COMMENTCAMARCHE.

Andy TO BILL