Gros virus clusters endommagés

Merci, je dirais à ma soeur de résoudre elle-même son problème d'update.
De mon côté, la dizaine de virus qui m'ont fait flipper sont désormais de l'histoire ancienne et grâce à toi,! Merci encore pour tout!

Il y a le SP2 pour Vista aussi.

Tu peux cocher résolu si tu veux.

A part l'écran qui reste noir quelques secondes avant l'affichage du fond d'écran, tout m'a l'air ok. Il y a déjà SP1 sur l'ordi, c'est ça que j'essaie d'updater. Je viens de le relancer, mais ça prend du temps! Merci encore pour tous tes conseils et ta patience! Je coche résolu ou j'attends l'histoire de la mise à jour windows?

Donc le PC fonctionne bien ?

Pour la mise à jour de Vista, tu peux commencer par le SP1 :
http://www.microsoft.com/downloads/fr-fr/details.aspx?FamilyID=b0c7136d-5ebb-413b-89c9-cb3d06d12674

Salut,

je me suis endormie hier :)

Sinon, Bit defender fonctionne de nouveau. Voici le dernier rapport :

QuickScan Beta 32-bit v0.9.9.21
-------------------------------
Scan date: Sun May 22 13:21:02 2011
Machine ID: CA169CF

No infection found.
-------------------

Processes
---------
<verified> hpwuSchd Application 516 C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
<verified> Alps Pointing-device Driver 1988 C:\Program Files\Apoint2K\Apoint.exe
<verified> Alps Pointing-device Driver for Windows 3940 C:\Program Files\Apoint2K\Apntex.exe
<verified> Firefox 4812 C:\Program Files\Mozilla Firefox\firefox.exe
<verified> HP Quick Launch Buttons 2044 C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
<verified> HP QuickPlay 2004 C:\Program Files\Hp\QuickPlay\QPService.exe
<verified> HP Wireless Assistant 588 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
<verified> HP Wireless Assistant 2144 C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
<verified> HpqToaster Module 1360 C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
<verified> Intel(R) Common User Interface 1968 C:\Windows\System32\hkcmd.exe
<verified> Intel(R) Common User Interface 1976 C:\Windows\System32\igfxpers.exe
<verified> Intel(R) Common User Interface 1192 C:\Windows\system32\igfxsrvc.exe
<verified> iTunes 1832 C:\Program Files\iTunes\iTunesHelper.exe
<verified> Java(TM) Platform SE 6 U2 924 C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
<verified> Microsoft Office OneNote 1428 C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
<verified> Microsoft® Windows® Operating System 2272 C:\Windows\ehome\ehmsas.exe
<verified> Microsoft® Windows® Operating System 1624 C:\Windows\ehome\ehtray.exe
<verified> Microsoft® Windows® Operating System 3832 C:\Windows\system32\wbem\unsecapp.exe
<verified> Microsoft® Windows® Operating System 3860 C:\Windows\system32\wuauclt.exe
<verified> OpenOffice.org 3.0 2204 C:\Program Files\OpenOffice.org 3\program\soffice.bin
<verified> OpenOffice.org 3.0 2104 C:\Program Files\OpenOffice.org 3\program\soffice.exe
<verified> RAID Event Monitor 1996 C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
<verified> Système d'exploitation Microsoft® Windo 612 C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Système d'exploitation Microsoft® Windo 1728 C:\Windows\Explorer.EXE
<verified> Système d'exploitation Microsoft® Windo 1692 C:\Windows\system32\Dwm.exe
<verified> Système d'exploitation Microsoft® Windo 268 C:\Windows\system32\taskeng.exe
<verified> Windows Defender 12 C:\Program Files\Windows Defender\MSASCui.exe
<verified> Windows Live Messenger 1592 C:\Program Files\Windows Live\Messenger\msnmsgr.exe

Network activity
----------------
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.229.104
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.229.99
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.146.106
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.146.106
Process firefox.exe (4812) connected on port 80 (HTTP) --> 194.112.114.159
Process firefox.exe (4812) connected on port 80 (HTTP) --> 79.140.93.170
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.146.165
Process firefox.exe (4812) connected on port 80 (HTTP) --> 81.52.160.138
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.227.148
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.147.156
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.227.149
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.146.165
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.146.102
Process firefox.exe (4812) connected on port 80 (HTTP) --> 74.125.79.100
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.147.156
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.147.138
Process firefox.exe (4812) connected on port 80 (HTTP) --> 209.85.147.139

Autoruns and critical files
---------------------------
<unsigned> Mozilla Firefox C:\Program Files\Mozilla Firefox
<unsigned> QuickTime C:\Program Files\QuickTime\QTTask.exe

<verified> hpwuSchd Application C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
<verified> Adobe Acrobat C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
<verified> Alps Pointing-device Driver C:\Program Files\Apoint2K\Apoint.exe
<verified> HP Quick Launch Buttons C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
<verified> HP QuickPlay C:\Program Files\Hp\QuickPlay\QPService.exe
<verified> HP Total Care Advisor C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
<verified> HP Wireless Assistant C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
<verified> Intel(R) Common User Interface C:\Windows\System32\hkcmd.exe
<verified> Intel(R) Common User Interface C:\Windows\System32\igfxdev.dll
<verified> Intel(R) Common User Interface C:\Windows\System32\igfxpers.exe
<verified> Intel(R) Common User Interface C:\Windows\system32\igfxtray.exe
<verified> iTunes C:\Program Files\iTunes\iTunesHelper.exe
<verified> Java(TM) Platform SE 6 U2 C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
<verified> Malwarebytes' Anti-Malware C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
<verified> Microsoft Office OneNote C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
<verified> Microsoft® Windows® Operating System C:\Windows\ehome\ehtray.exe
<verified> MobileMe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
<verified> quickstart.exe C:\Program Files\OpenOffice.org 3\program\quickstart.exe
<verified> RAID Event Monitor C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
<verified> StartMen Application C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe
<verified> Système d'exploitation Microsoft® Windo C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Système d'exploitation Microsoft® Windo C:\Windows\System32\browseui.dll
<verified> Système d'exploitation Microsoft® Windo c:\windows\system32\userinit.exe
<verified> Windows Defender C:\Program Files\Windows Defender\MSASCui.exe
<verified> Windows Live Messenger C:\Program Files\Windows Live\Messenger\msnmsgr.exe
<verified> Windows® Internet Explorer C:\Windows\system32\msfeedssync.exe
<verified> Windows® Internet Explorer C:\Windows\System32\webcheck.dll

Browser plugins
---------------
<unsigned> Epson Easy Photo Print (TBL) C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
<unsigned> PDFCreator Toolbar c:\program files\pdfcreator toolbar\v3.3.0.1\pdfcreator_toolbar.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
<unsigned> QuickTime Plug-in 7.6.9 C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll

<verified> 2007 Microsoft Office system C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
<verified> AcroIEHelper Library C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
<verified> Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll
<verified> Adobe Acrobat C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
<verified> Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
<verified> AOL Media Playback Control C:\Windows\Downloaded Program Files\ampAx3.0.84.2.dll
<verified> BitDefender QuickScan C:\Users\Dounia\AppData\Roaming\Mozilla\Firefox\Profiles\n19q4lq8.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
<verified> BitDefender QuickScan C:\Users\Dounia\AppData\Roaming\Mozilla\Firefox\Profiles\n19q4lq8.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
<verified> Bonjour C:\Program Files\Bonjour\mdnsNSP.dll
<verified> DivX Player Netscape Plugin C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
<verified> DivX Player Netscape Plugin C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
<verified> DivX Web Player C:\Program Files\DivX\DivX Web Player\npdivx32.dll
<verified> DivX Web Player C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll
<verified> Google Update C:\Program Files\Google\Update\1.3.21.53\npGoogleUpdate3.dll
<verified> Java(TM) Platform SE 6 U2 c:\program files\java\jre1.6.0_02\bin\ssv.dll
<verified> Kodak Photo CD Access Developer Toolkit C:\Windows\Downloaded Program Files\pcdlib32.dll
<verified> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfeps13n.dll
<verified> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpcd13n.dll
<verified> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpcx13n.dll
<verified> MetaStream 3 Plugin C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
<verified> Microsoft® Windows Live Login Helper c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
<verified> Microsoft® Windows Media Player Firefox C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\nlaapi.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll
<verified> Mozilla Default Plug-in C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
<verified> MSN Photo Upload Control C:\Windows\Downloaded Program Files\MsnPUpld.dll
<verified> MSN® Games by Zone.com C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll
<verified> npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
<verified> nppdf32.FRA C:\Program Files\Internet Explorer\plugins\nppdf32.FRA
<verified> nppdf32.FRA C:\Program Files\Mozilla Firefox\plugins\nppdf32.FRA
<verified> NPSWF32.dll C:\Windows\System32\Macromed\Flash\NPSWF32.dll
<verified> Outil MSN Téléchargement de photos C:\Windows\Downloaded Program Files\PURfr-fr.dll
<verified> PhotoBox uploader C:\Windows\Downloaded Program Files\ImageUploader4.ocx
<verified> Picasa C:\Program Files\Google\Picasa3\npPicasa3.dll
<verified> Silverlight Plug-In c:\Program Files\Microsoft Silverlight\4.0.60310.0\npctrl.dll
<verified> Système d'exploitation Microsoft® Windo C:\Windows\System32\mswsock.dll
<verified> Système d'exploitation Microsoft® Windo C:\Windows\System32\NapiNSP.dll
<verified> Système d'exploitation Microsoft® Windo C:\Windows\System32\pnrpnsp.dll
<verified> The OpenSSL Toolkit C:\Program Files\Mozilla Firefox\plugins\libdivx.dll
<verified> The OpenSSL Toolkit C:\Program Files\Mozilla Firefox\plugins\ssldivx.dll
<verified> unagiuninst.exe C:\Windows\Downloaded Program Files\unagiuninst.exe
<verified> UNO Messenger C:\Windows\Downloaded Program Files\GAME_UNO1.dll
<verified> Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
<verified> Windows® Internet Explorer C:\Windows\System32\ieframe.dll

Missing files
-------------
File not found: C:\Windows\system32\drivers\blbdrive.sys
referenced in: HKLM\System\ControlSet001\services\blbdrive\"ImagePath"

File not found: [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
referenced in: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\"HP Health Check Scheduler"

File not found: system32\DRIVERS\SymIM.sys
referenced in: HKLM\System\ControlSet001\services\SymIMMP\"ImagePath"

File not found: system32\DRIVERS\ipinip.sys
referenced in: HKLM\System\ControlSet001\services\IpInIp\"ImagePath"

File not found: system32\DRIVERS\nwlnkflt.sys
referenced in: HKLM\System\ControlSet001\services\NwlnkFlt\"ImagePath"

File not found: system32\DRIVERS\nwlnkfwd.sys
referenced in: HKLM\System\ControlSet001\services\NwlnkFwd\"ImagePath"

Scan
----
<unsigned> MD5: ea3329e06d7c794b788ceada90ab7000 C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
<unsigned> MD5: 0d26c438e2938a3e6bdd91173bc96ff0 c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
<unsigned> MD5: 8751001da5d5d9c9c8134ffab5e98f4c C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
<unsigned> MD5: 62ef850f1df945769b59fef763240457 c:\program files\pdfcreator toolbar\v3.3.0.1\pdfcreator_toolbar.dll
<unsigned> MD5: afdae59fe562a7cdb44f9d4abedac316 C:\Program Files\QuickTime\QTSystem\QTCF.dll
<unsigned> MD5: 1d856e6e7490447fcfaa46e09a2bf9c9 C:\Program Files\QuickTime\QTSystem\QuickTime.qts
<unsigned> MD5: 103976a97e25724e0a3ed50e48921cd2 C:\Program Files\QuickTime\QTSystem\QuickTime.Resources\QuickTime.dll
<unsigned> MD5: 0aee5668eb59912f32ff245bfa72465f C:\Program Files\QuickTime\QTTask.exe

No file uploaded.

Scan finished - communication took 0 sec
Total traffic - 0.00 MB sent, 0.11 KB recvd
Scanned 805 files and modules - 14 seconds

==============================================================================

En revanche, j'ai tenté deux fois de faire la mise à jour windows update, mais échec. Je pense que mon problème est résolu, qu'en penses-tu?

la mise à jour est en cours, et pour le reste, tout va bien?

Il faut le mettre à jour avec Windows Update.

Tu as réinstallé BitDefender pour voir si ça réglait le problème ?

Et ma soeur m'a dit qu'elle avait jamais rien changer donc c'est bien la version d'origine de Vista

C'est un Compaq, mais je connais pas le modèle, je peux trouver ce renseignement où?

Marque et modèle du PC ?

Destrio5, tu es encore là?

J'ai aussi une fenêtre qui s'ouvre régulièrement pour m'informer que "Alps-Pointng device Driver a cessé de fonctionner"

All processes killed
========== OTL ==========
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{51cb77cb-e216-11dd-a9cc-001b3894cfd2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51cb77cb-e216-11dd-a9cc-001b3894cfd2}\ not found.
File F:\auto.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{51cb77cb-e216-11dd-a9cc-001b3894cfd2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51cb77cb-e216-11dd-a9cc-001b3894cfd2}\ not found.
File C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\auto.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{55a18c3e-0d75-11dd-b200-001b38fb9530}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{55a18c3e-0d75-11dd-b200-001b38fb9530}\ not found.
File G:\RECYCLER\lasass.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{55a18c3e-0d75-11dd-b200-001b38fb9530}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{55a18c3e-0d75-11dd-b200-001b38fb9530}\ not found.
File G:\RECYCLER\lasass.exe not found.
Voici le rapport :

Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{835f44ca-e2e5-11dd-a80c-001b3894cfd2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{835f44ca-e2e5-11dd-a80c-001b3894cfd2}\ not found.
File auto.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{835f44ca-e2e5-11dd-a80c-001b3894cfd2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{835f44ca-e2e5-11dd-a80c-001b3894cfd2}\ not found.
File C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL auto.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{835f44ec-e2e5-11dd-a80c-001b3894cfd2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{835f44ec-e2e5-11dd-a80c-001b3894cfd2}\ not found.
File ve.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{835f44ec-e2e5-11dd-a80c-001b3894cfd2}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{835f44ec-e2e5-11dd-a80c-001b3894cfd2}\ not found.
File ve.exe not found.
File C:\ProgramData\~34397968 not found.
File C:\ProgramData\~34397968r not found.
File C:\ProgramData\34397968 not found.
File C:\Windows\System32\wsbl.dat not found.
File C:\Windows\System32\phar_unmip.dat not found.
File C:\Windows\System32\phar_histprot.dat not found.
File C:\Windows\System32\ph_white.dat not found.
File C:\Windows\System32\ph_summ.dat not found.
File C:\Windows\System32\ph_black.dat not found.
File C:\Windows\System32\pcwords2.dat not found.
File C:\Windows\System32\pcwords.dat not found.
File C:\Windows\System32\pc_webproxy.dat not found.
File C:\Windows\System32\pc_video.dat not found.
File C:\Windows\System32\pc_tabloids.dat not found.
File C:\Windows\System32\pc_socialnetworks.dat not found.
File C:\Windows\System32\pc_searchengines.dat not found.
File C:\Windows\System32\pc_regionaltlds.dat not found.
File C:\Windows\System32\pc_pornography.dat not found.
File C:\Windows\System32\pc_onlineshop.dat not found.
File C:\Windows\System32\pc_onlinepay.dat not found.
File C:\Windows\System32\pc_onlinedating.dat not found.
File C:\Windows\System32\pc_news.dat not found.
File C:\Windows\System32\pc_im.dat not found.
File C:\Windows\System32\pc_illegal.dat not found.
File C:\Windows\System32\pc_hate.dat not found.
File C:\Windows\System32\pc_games.dat not found.
File C:\Windows\System32\pc_gambling.dat not found.
File C:\Windows\System32\pc_drugs.dat not found.
File C:\Users\Dounia\AppData\Local\1040314544.dll not found.
File C:\Users\Dounia\AppData\Local\7OWr8MdX62 not found.
File C:\ProgramData\7OWr8MdX62 not found.
File C:\ProgramData\ezsidmv.dat not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Dounia
->Temp folder emptied: 791032658 bytes
->Temporary Internet Files folder emptied: 518368024 bytes
->Java cache emptied: 10166 bytes
->FireFox cache emptied: 29699653 bytes
->Google Chrome cache emptied: 355344778 bytes
->Apple Safari cache emptied: 20165632 bytes
->Flash cache emptied: 1758224 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 299697877 bytes
RecycleBin emptied: 6201047483 bytes

Total Files Cleaned = 7 836,00 mb

OTL by OldTimer - Version 3.2.22.3 log created on 05222011_001742

Files\Folders moved on Reboot...
C:\Users\Dounia\AppData\Local\Temp\ehmsas.txt moved successfully.

Registry entries deleted on Reboot...

Ok, c'est en cours. La premiere fois, Otl a planté. Sinon l'ordi fonctionne correctement, mais un écran noir apparaît au demarrage, juste avant l'apparition des icônes du bureau, et je n'arrive pas à mettre à jour bitdedender. Lorsque l'analyse a débuté, toutes les fenêtres et les icônes du bureau ont disparu, c'est normal?

Le PC fonctionne bien sinon ?

Je ne vois pas l'antivirus.

--> Double-clique sur OTL pour le lancer.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)
--> Sous l'onglet Personnalisation en bas de la fenêtre, copie-colle le texte suivant (entre les deux espaces) :

:OTL
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O33 - MountPoints2\{51cb77cb-e216-11dd-a9cc-001b3894cfd2}\Shell\Auto\command - "" = F:\auto.exe
O33 - MountPoints2\{51cb77cb-e216-11dd-a9cc-001b3894cfd2}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\auto.exe
O33 - MountPoints2\{55a18c3e-0d75-11dd-b200-001b38fb9530}\Shell\AutoRun\command - "" = G:\RECYCLER\lasass.exe
O33 - MountPoints2\{55a18c3e-0d75-11dd-b200-001b38fb9530}\Shell\open\command - "" = G:\RECYCLER\lasass.exe
O33 - MountPoints2\{835f44ca-e2e5-11dd-a80c-001b3894cfd2}\Shell\Auto\command - "" = auto.exe
O33 - MountPoints2\{835f44ca-e2e5-11dd-a80c-001b3894cfd2}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL auto.exe
O33 - MountPoints2\{835f44ec-e2e5-11dd-a80c-001b3894cfd2}\Shell\AutoRun\command - "" = ve.exe
O33 - MountPoints2\{835f44ec-e2e5-11dd-a80c-001b3894cfd2}\Shell\open\Command - "" = ve.exe
[2011/05/21 11:21:40 | 000,000,120 | -H-- | M] () -- C:\ProgramData\~34397968
[2011/05/21 11:21:36 | 000,000,144 | -H-- | M] () -- C:\ProgramData\~34397968r
[2011/05/21 11:18:17 | 000,000,392 | ---- | M] () -- C:\ProgramData\34397968
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\wsbl.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\phar_unmip.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\phar_histprot.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\ph_white.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\ph_summ.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\ph_black.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pcwords2.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pcwords.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_webproxy.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_video.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_tabloids.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_socialnetworks.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_searchengines.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_regionaltlds.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_pornography.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_onlineshop.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_onlinepay.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_onlinedating.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_news.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_im.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_illegal.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_hate.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_games.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_gambling.dat
[2010/03/20 19:16:31 | 000,000,000 | ---- | C] () -- C:\Windows\System32\pc_drugs.dat
[2010/03/20 09:04:11 | 000,205,312 | -HS- | C] () -- C:\Users\Dounia\AppData\Local\1040314544.dll
[2010/03/20 09:03:48 | 000,009,382 | R--- | C] () -- C:\Users\Dounia\AppData\Local\7OWr8MdX62
[2010/03/20 09:03:48 | 000,009,382 | R--- | C] () -- C:\ProgramData\7OWr8MdX62
[2009/11/08 20:05:45 | 000,000,048 | ---- | C] () -- C:\ProgramData\ezsidmv.dat

:commands
[emptytemp]

--> Puis clique sur le bouton Correction en haut de la fenêtre.
--> Laisse le programme travailler, redémarre une fois le fix terminé.
--> Poste le rapport qui s'affichera après redémarrage.

Trêve de plaisanteries! Voici le rapport :
http://www.cijoint.fr/cjlink.php?file=cj201105/cijApcHwCF.txt

Alors?

Destrio5, tu peux me répondre stp, je ne voudrais pas effacer un fichier important

Voici le rapport :

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Version de la base de données: 6636

Windows 6.0.6000
Internet Explorer 7.0.6000.17037

21/05/2011 23:09:31
mbam-log-2011-05-21 (23-09-16).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 160914
Temps écoulé: 9 minute(s), 29 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CLASSES_ROOT\.exe\(default) (Hijacked.exeFile) -> Bad: (secfile) Good: (exefile) -> No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\Users\Dounia\AppData\Local\ave.exe (Rogue.MultipleAV) -> No action taken.
c:\Users\Dounia\local settings\application data\ave.exe (Rogue.MultipleAV) -> No action taken.

Pas cool ça...

Vois si Malwarebytes' Anti-Malware trouve encore des infections.

tu sais pas ce qui s'est passé?

L'ordi a été éteint par mégarde et au moment de le rallumer : écran noir!!! Après des recherches sur l'iPhone (merci), enfin sur internet, mais via le téléphone car plus d'ordi, j'ai effectué une restauration, voilà pourquoi je ne réponds que maintenant. Tout fonctionne désormais, mais les logiciels ont disparus et donc je ne sais pas quelle est la situation de l'ordi. J'aimerais évidemment tout désinfecter si possible. Pour Vista, je ne sais pas, dès que j'ai la réponse je te tiens au courant.