Micayu04

Bonjour lance_yien, Décidément mon PC n'aime pas OTL, il a démarré en fond noir. J'ai donc redémarré en Dernier démarrage fonctionnel une nouvelle fois, mais je pense que ça ne pose pas de problème étant donné qu'on a refait une analyse après un tel redémarrage et que tout était ok comme tu viens de me l'écrire =) Je m'occupe d'installer les programmes que tu m'as conseillés. Encore un très grand merci pour t'être occupé de mon cas :super: Bonne journée =)

Désolé de ne pas avoir répondu avant, j'étais en week-end :-S Voici le rapport OTL : OTL logfile created on: 11/04/2011 20:13:48 - Run 2 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Alex\Desktop Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 75,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 82,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 232,88 Gb Total Space | 156,97 Gb Free Space | 67,40% Space Free | Partition Type: NTFS Drive E: | 232,88 Gb Total Space | 179,04 Gb Free Space | 76,88% Space Free | Partition Type: NTFS Computer Name: MICATWO | User Name: Alex | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011/04/09 15:16:37 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe PRC - [2011/01/17 17:37:42 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe PRC - [2011/01/17 17:37:42 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin PRC - [2011/01/13 10:47:34 | 003,396,624 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011/01/13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009/07/14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2004/02/25 16:43:56 | 000,294,912 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Video\AlbumDB2.exe PRC - [2004/02/25 16:39:48 | 000,176,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Video\FxSvr2.exe ========== Modules (SafeList) ========== MOD - [2011/04/09 15:16:37 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe MOD - [2011/01/13 10:47:35 | 000,189,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2010/08/21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - File not found [Auto | Running] -- Reg Error: Key error. -- (TrkWks) SRV - File not found [unknown | Running] -- Reg Error: Key error. -- (RpcSs) Appel de procédure distante (RPC) SRV - File not found [unknown | Running] -- Reg Error: Key error. -- (DcomLaunch) SRV - File not found [Auto | Running] -- Reg Error: Key error. -- (BITS) SRV - [2011/01/13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010/07/08 07:38:44 | 001,343,400 | ---- | M] (Microsoft Corporation) [unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010/06/25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental) SRV - [2009/12/17 20:00:28 | 000,243,056 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice) SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV - [2009/06/17 11:18:42 | 006,582,912 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe -- (wampmysqld) SRV - [2008/12/10 01:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe -- (wampapache) ========== Driver Services (SafeList) ========== DRV - [2011/01/13 10:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011/01/13 10:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011/01/13 10:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011/01/13 10:37:19 | 000,051,280 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2011/01/13 10:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010/06/25 19:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF) DRV - [2009/12/18 11:23:14 | 000,014,336 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2) DRV - [2009/09/29 08:11:22 | 000,012,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtport.sys -- (LgBttPort) DRV - [2009/09/29 08:11:20 | 000,012,928 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgvmodem.sys -- (LGVMODEM) DRV - [2009/09/29 08:11:20 | 000,010,496 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtbus.sys -- (lgbusenum) DRV - [2009/07/14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009/07/14 00:02:53 | 000,044,032 | ---- | M] (VIA Technologies, Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\fetnd6.sys -- (FETNDIS) DRV - [2009/06/10 23:19:48 | 009,853,248 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2008/11/11 13:42:00 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2008/11/11 13:41:00 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2008/11/11 13:41:00 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus) DRV - [2004/08/13 10:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN : Hotmail, Messenger, Bing, Actualité et Sport IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5F 7C 5C A7 E7 F1 CB 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost;*.local ========== FireFox ========== FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/25 23:52:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/03 17:50:37 | 000,000,000 | ---D | M] [2009/12/26 14:46:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Extensions [2011/04/03 20:54:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\u0fhzlu7.default\extensions [2011/04/03 18:58:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions [2010/04/18 15:35:41 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010/10/10 15:06:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2011/04/03 18:58:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011/02/02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011/03/06 10:15:43 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml [2011/03/06 10:15:43 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml [2011/03/06 10:15:43 | 000,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml [2011/03/06 10:15:43 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml [2011/03/06 10:15:43 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2011/04/09 21:04:47 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [EPSON Stylus DX4200 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKCU..\Run: [EPSON Stylus CX4200 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE (SEIKO EPSON CORPORATION) O4 - Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O24 - Desktop WallPaper: O24 - Desktop BackupWallPaper: O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2007/03/14 23:34:39 | 000,000,000 | ---- | M] () - E:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011/04/09 21:03:57 | 000,000,000 | ---D | C] -- C:\_OTL [2011/04/09 15:16:23 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe [2011/04/03 20:26:15 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\Virus03042011 [2011/04/03 20:10:02 | 000,000,000 | ---D | C] -- C:\Program Files\Easy MOV Converter [2011/04/03 19:56:33 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\WMTools Downloaded Files [2011/04/03 18:59:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2011/04/03 18:58:50 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011/04/03 18:58:50 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011/04/03 18:58:50 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2011/04/03 18:57:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap [2011/04/03 18:57:16 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap [2011/04/03 18:57:05 | 000,000,000 | ---D | C] -- C:\Program Files\TubeMaster++ [2011/04/03 17:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2011/04/03 17:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2011/04/03 14:34:51 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Malwarebytes [2011/04/03 14:34:47 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/04/03 14:34:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/04/03 14:34:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011/04/03 14:34:44 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/04/03 14:34:44 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011/04/02 09:17:47 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\gtk-2.0 [2011/04/02 09:17:40 | 000,000,000 | ---D | C] -- C:\Users\Alex\.thumbnails [2011/04/02 09:14:58 | 000,000,000 | ---D | C] -- C:\Users\Alex\Documents\gegl-0.0 [2011/04/02 09:14:58 | 000,000,000 | ---D | C] -- C:\Users\Alex\.gimp-2.6 [2011/04/02 09:14:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP [2011/04/02 09:13:47 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2011/03/21 22:18:17 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\OpenOffice.org [2011/03/21 20:34:53 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3 [2011/03/21 20:34:15 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3 [2011/03/13 17:17:58 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2011/03/13 17:17:56 | 000,000,000 | ---D | C] -- C:\Program Files\FileZilla FTP Client ========== Files - Modified Within 30 Days ========== [2011/04/11 20:16:47 | 000,694,766 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2011/04/11 20:16:47 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/04/11 20:16:47 | 000,127,478 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2011/04/11 20:16:47 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/04/11 20:00:47 | 000,009,728 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/04/11 20:00:47 | 000,009,728 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/04/11 19:53:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/04/11 19:53:19 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys [2011/04/09 21:04:47 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts [2011/04/09 15:20:36 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2011/04/09 15:16:37 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe [2011/04/03 20:10:10 | 000,000,066 | ---- | M] () -- C:\Windows\Easy MOV Converter.INI [2011/04/03 19:42:12 | 000,003,584 | ---- | M] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/04/02 09:17:47 | 000,000,861 | ---- | M] () -- C:\Users\Alex\.recently-used.xbel [2011/03/27 17:42:27 | 000,313,864 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/03/21 22:19:01 | 000,001,197 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ========== Files Created - No Company Name ========== [2011/04/09 15:20:36 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin [2011/04/03 20:10:05 | 000,000,066 | ---- | C] () -- C:\Windows\Easy MOV Converter.INI [2011/04/03 19:42:12 | 000,003,584 | ---- | C] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/04/03 17:50:37 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011/04/02 09:17:47 | 000,000,861 | ---- | C] () -- C:\Users\Alex\.recently-used.xbel [2011/03/21 22:19:01 | 000,001,197 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2010/06/25 19:03:12 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll [2010/04/30 19:10:37 | 000,081,920 | R--- | C] () -- C:\Windows\bwUnin-6.1.4.36-8876480L.exe [2010/03/21 12:23:32 | 000,000,110 | ---- | C] () -- C:\Windows\ULEAD32.INI [2010/01/19 19:56:52 | 000,000,099 | ---- | C] () -- C:\Windows\System32\PICSDK.ini [2010/01/19 19:56:50 | 000,089,430 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat [2010/01/19 19:56:50 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat [2010/01/19 19:56:50 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat [2010/01/19 19:56:50 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat [2010/01/19 19:56:50 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat [2010/01/19 19:56:50 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat [2010/01/19 19:56:50 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat [2010/01/19 19:56:50 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat [2010/01/19 19:56:50 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat [2010/01/19 19:56:50 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat [2010/01/19 19:56:50 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat [2010/01/19 19:56:50 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat [2010/01/19 19:56:49 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat [2010/01/19 19:56:49 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat [2010/01/19 19:56:49 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat [2010/01/19 19:56:49 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat [2010/01/19 19:53:54 | 000,000,027 | ---- | C] () -- C:\Windows\CDE DX4200EFGIPSD.ini [2009/12/26 14:51:25 | 000,021,680 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat [2009/12/21 15:21:20 | 000,000,382 | ---- | C] () -- C:\Windows\ODBC.INI [2009/07/14 10:39:49 | 000,694,766 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2009/07/14 10:39:49 | 000,344,522 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2009/07/14 10:39:49 | 000,127,478 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2009/07/14 10:39:49 | 000,038,160 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2009/07/14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009/07/14 06:33:53 | 000,313,864 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009/07/14 04:05:48 | 000,606,992 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009/07/14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009/07/14 04:05:48 | 000,103,370 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009/07/14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009/07/14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009/07/14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009/07/14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009/07/14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2004/08/13 10:56:20 | 000,005,810 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [1999/01/27 13:39:06 | 000,065,024 | ---- | C] () -- C:\Windows\System32\indounin.dll [1997/06/13 07:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\Iyvu9_32.dll < End of report >

J'ai eu le même souci que yoyo72 dans un autre topic, mon écran était tout noir après le "chargement de Windows". Heureusement, j'avais lu le sujet donc j'ai redémarré en "Dernière bonne configuration connue" Voici le dernier rapport OTL : All processes killed ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE5D279F-081B-4404-994D-C6B60AAEBA6D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE5D279F-081B-4404-994D-C6B60AAEBA6D}\ not found. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== C:\ProgramData\McAfee\MCLOGS\PartnerCustom\SSScheduler folder moved successfully. C:\ProgramData\McAfee\MCLOGS\PartnerCustom\SecurityScan_Release folder moved successfully. C:\ProgramData\McAfee\MCLOGS\PartnerCustom folder moved successfully. C:\ProgramData\McAfee\MCLOGS folder moved successfully. C:\ProgramData\McAfee folder moved successfully. C:\Windows\_delis32.ini moved successfully. C:\ProgramData\gEh31001eNnGh31001 folder moved successfully. C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1722889916-3020554630-2393689143-1000Core.job moved successfully. C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1722889916-3020554630-2393689143-1000UA.job moved successfully. File\Folder C:\*.sqm not found. ========== COMMANDS ========== [EMPTYTEMP] User: Alex ->Temp folder emptied: 112940877 bytes ->Temporary Internet Files folder emptied: 638748 bytes ->Java cache emptied: 5651065 bytes ->FireFox cache emptied: 109348880 bytes ->Google Chrome cache emptied: 9379778 bytes ->Flash cache emptied: 91971 bytes User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 551424 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 3470784 bytes RecycleBin emptied: 674367599 bytes Total Files Cleaned = 874,00 mb [EMPTYFLASH] User: Alex ->Flash cache emptied: 0 bytes User: All Users User: Default User: Default User User: Public Total Flash Files Cleaned = 0,00 mb C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.22.3 log created on 04092011_210357 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... Héhé ligne 17 : C:\ProgramData\gEh31001eNnGh31001 folder moved successfully. ! C'était là que mon virus s'était caché au départ ! Merci pour les réponses pour le proxy, en effet, j'utilise juste le serveur DHCP de la box mais pas de proxy. Et le dossier en gras, c'est tout ce qui concerne le MS Removal Tool justement, tous les programmes et rapports Roguekiller, rkill, mbam etc... que j'avais installés sur le bureau au départ (Le 03042011 est la date à laquelle il s'est manifesté). Par contre je suis étonné pour la version d'Adobe Arobat Reader, j'ai téléchargé la version X il y a 4 jours justement, et il m'informe qu'il n'y a aucune mise à jour disponible. Mais je la désinstallerai de nouveau pour être sûr =) Je pense que tous les problèmes sont résolus maintenant, j'anticipe pour la balise [Résolu] Un très grand merci à toi d'avoir pris du temps pour m'aider, me voilà rassuré sur l'état de "santé" de mon PC

Merci beaucoup lance_yien de prendre un peu de temps pour moi Et désolé pour le temps de réponse, j'ai transféré mes données dans mon DDE et c'était quelque peu... long ! Il faudrait que je songe à installer du USB 2.0. Voici le 1er rapport : OTL.txt : OTL logfile created on: 09/04/2011 15:19:12 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Alex\Desktop Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 72,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 80,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 232,88 Gb Total Space | 157,34 Gb Free Space | 67,56% Space Free | Partition Type: NTFS Drive E: | 953,73 Mb Total Space | 669,55 Mb Free Space | 70,20% Space Free | Partition Type: FAT Computer Name: MICATWO | User Name: Alex | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011/04/09 15:16:37 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe PRC - [2011/01/17 17:37:42 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe PRC - [2011/01/17 17:37:42 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin PRC - [2011/01/13 10:47:34 | 003,396,624 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2011/01/13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2009/10/31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009/07/14 03:14:46 | 000,115,200 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE PRC - [2009/07/14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2004/02/25 16:43:56 | 000,294,912 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Video\AlbumDB2.exe PRC - [2004/02/25 16:39:48 | 000,176,128 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Video\FxSvr2.exe ========== Modules (SafeList) ========== MOD - [2011/04/09 15:16:37 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe MOD - [2011/01/13 10:47:35 | 000,189,728 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll MOD - [2010/08/21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - File not found [Auto | Running] -- Reg Error: Key error. -- (TrkWks) SRV - File not found [unknown | Running] -- Reg Error: Key error. -- (RpcSs) Appel de procédure distante (RPC) SRV - File not found [unknown | Running] -- Reg Error: Key error. -- (DcomLaunch) SRV - File not found [Auto | Running] -- Reg Error: Key error. -- (BITS) SRV - [2011/01/13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010/07/08 07:38:44 | 001,343,400 | ---- | M] (Microsoft Corporation) [unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010/06/25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental) SRV - [2009/12/17 20:00:28 | 000,243,056 | ---- | M] (CybelSoft) [On_Demand | Stopped] -- C:\Program Files\ma-config.com\maconfservice.exe -- (maconfservice) SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV - [2009/06/17 11:18:42 | 006,582,912 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe -- (wampmysqld) SRV - [2008/12/10 01:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe -- (wampapache) ========== Driver Services (SafeList) ========== DRV - [2011/01/13 10:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011/01/13 10:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011/01/13 10:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011/01/13 10:37:19 | 000,051,280 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2011/01/13 10:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2010/06/25 19:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF) DRV - [2009/12/18 11:23:14 | 000,014,336 | ---- | M] (CybelSoft) [Kernel | On_Demand | Stopped] -- C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys -- (driverhardwarev2) DRV - [2009/09/29 08:11:22 | 000,012,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtport.sys -- (LgBttPort) DRV - [2009/09/29 08:11:20 | 000,012,928 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgvmodem.sys -- (LGVMODEM) DRV - [2009/09/29 08:11:20 | 000,010,496 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lgbtbus.sys -- (lgbusenum) DRV - [2009/07/14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009/07/14 00:02:53 | 000,044,032 | ---- | M] (VIA Technologies, Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\fetnd6.sys -- (FETNDIS) DRV - [2009/06/10 23:19:48 | 009,853,248 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2008/11/11 13:42:00 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem) DRV - [2008/11/11 13:41:00 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag) DRV - [2008/11/11 13:41:00 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus) DRV - [2004/08/13 10:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN : Hotmail, Messenger, Bing, Actualité et Sport IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5F 7C 5C A7 E7 F1 CB 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost;*.local ========== FireFox ========== FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/25 23:52:55 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/03 17:50:37 | 000,000,000 | ---D | M] [2009/12/26 14:46:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Extensions [2011/04/03 20:54:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Alex\AppData\Roaming\mozilla\Firefox\Profiles\u0fhzlu7.default\extensions [2011/04/03 18:58:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions [2010/04/18 15:35:41 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010/10/10 15:06:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2011/04/03 18:58:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011/02/02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011/03/06 10:15:43 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml [2011/03/06 10:15:43 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml [2011/03/06 10:15:43 | 000,000,757 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml [2011/03/06 10:15:43 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml [2011/03/06 10:15:43 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No CLSID value found. O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [EPSON Stylus DX4200 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) O4 - HKCU..\Run: [EPSON Stylus CX4200 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE (SEIKO EPSON CORPORATION) O4 - Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.240 212.27.40.241 O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O24 - Desktop WallPaper: O24 - Desktop BackupWallPaper: O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - File not found NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found Drivers32: msacm.enc - C:\Windows\System32\ITIG726.acm (Ingenient Technologies, Inc.) Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.iv31 - C:\Windows\System32\ir32_32.dll (Intel® Corporation) Drivers32: vidc.iv32 - C:\Windows\System32\ir32_32.dll (Intel® Corporation) Drivers32: vidc.iv41 - C:\Windows\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\Windows\System32\ir50_32.dll (Intel Corporation) Drivers32: vidc.yvu9 - C:\Windows\System32\Iyvu9_32.dll () PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin ========== Files/Folders - Created Within 30 Days ========== [2011/04/09 15:16:23 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe [2011/04/03 20:26:15 | 000,000,000 | ---D | C] -- C:\Users\Alex\Desktop\Virus03042011 [2011/04/03 20:10:02 | 000,000,000 | ---D | C] -- C:\Program Files\Easy MOV Converter [2011/04/03 19:56:33 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\WMTools Downloaded Files [2011/04/03 18:59:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2011/04/03 18:58:50 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe [2011/04/03 18:58:50 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe [2011/04/03 18:58:50 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe [2011/04/03 18:57:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap [2011/04/03 18:57:16 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap [2011/04/03 18:57:05 | 000,000,000 | ---D | C] -- C:\Program Files\TubeMaster++ [2011/04/03 17:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2011/04/03 17:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe [2011/04/03 17:49:22 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee [2011/04/03 14:34:51 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Malwarebytes [2011/04/03 14:34:47 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011/04/03 14:34:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/04/03 14:34:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011/04/03 14:34:44 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011/04/03 14:34:44 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011/04/03 11:53:41 | 000,000,000 | ---D | C] -- C:\ProgramData\gEh31001eNnGh31001 [2011/04/02 09:17:47 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\gtk-2.0 [2011/04/02 09:17:40 | 000,000,000 | ---D | C] -- C:\Users\Alex\.thumbnails [2011/04/02 09:14:58 | 000,000,000 | ---D | C] -- C:\Users\Alex\Documents\gegl-0.0 [2011/04/02 09:14:58 | 000,000,000 | ---D | C] -- C:\Users\Alex\.gimp-2.6 [2011/04/02 09:14:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP [2011/04/02 09:13:47 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP-2.0 [2011/03/21 22:18:17 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\OpenOffice.org [2011/03/21 20:34:53 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3 [2011/03/21 20:34:15 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3 [2011/03/13 17:17:58 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2011/03/13 17:17:56 | 000,000,000 | ---D | C] -- C:\Program Files\FileZilla FTP Client [3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011/04/09 15:20:36 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2011/04/09 15:20:16 | 000,694,766 | ---- | M] () -- C:\Windows\System32\perfh00C.dat [2011/04/09 15:20:16 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011/04/09 15:20:16 | 000,127,478 | ---- | M] () -- C:\Windows\System32\perfc00C.dat [2011/04/09 15:20:16 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011/04/09 15:16:37 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Alex\Desktop\OTL.exe [2011/04/09 14:48:01 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1722889916-3020554630-2393689143-1000UA.job [2011/04/09 11:51:41 | 000,009,728 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/04/09 11:51:41 | 000,009,728 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/04/09 08:47:27 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/04/09 08:47:21 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys [2011/04/06 07:48:05 | 000,001,020 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1722889916-3020554630-2393689143-1000Core.job [2011/04/03 20:10:10 | 000,000,066 | ---- | M] () -- C:\Windows\Easy MOV Converter.INI [2011/04/03 19:42:12 | 000,003,584 | ---- | M] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/04/02 09:17:47 | 000,000,861 | ---- | M] () -- C:\Users\Alex\.recently-used.xbel [2011/03/27 17:42:27 | 000,313,864 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011/03/21 22:19:01 | 000,001,197 | ---- | M] () -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2011/04/09 15:20:36 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin [2011/04/03 20:10:05 | 000,000,066 | ---- | C] () -- C:\Windows\Easy MOV Converter.INI [2011/04/03 19:42:12 | 000,003,584 | ---- | C] () -- C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/04/03 17:50:37 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011/04/02 09:17:47 | 000,000,861 | ---- | C] () -- C:\Users\Alex\.recently-used.xbel [2011/03/21 22:19:01 | 000,001,197 | ---- | C] () -- C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2010/06/25 19:03:12 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll [2010/04/30 19:11:11 | 000,000,792 | ---- | C] () -- C:\Windows\_delis32.ini [2010/04/30 19:10:37 | 000,081,920 | R--- | C] () -- C:\Windows\bwUnin-6.1.4.36-8876480L.exe [2010/03/21 12:23:32 | 000,000,110 | ---- | C] () -- C:\Windows\ULEAD32.INI [2010/01/19 19:56:52 | 000,000,099 | ---- | C] () -- C:\Windows\System32\PICSDK.ini [2010/01/19 19:56:50 | 000,089,430 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat [2010/01/19 19:56:50 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat [2010/01/19 19:56:50 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat [2010/01/19 19:56:50 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat [2010/01/19 19:56:50 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat [2010/01/19 19:56:50 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat [2010/01/19 19:56:50 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat [2010/01/19 19:56:50 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat [2010/01/19 19:56:50 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat [2010/01/19 19:56:50 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat [2010/01/19 19:56:50 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat [2010/01/19 19:56:50 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat [2010/01/19 19:56:49 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat [2010/01/19 19:56:49 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat [2010/01/19 19:56:49 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat [2010/01/19 19:56:49 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat [2010/01/19 19:53:54 | 000,000,027 | ---- | C] () -- C:\Windows\CDE DX4200EFGIPSD.ini [2009/12/26 14:51:25 | 000,021,680 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat [2009/12/21 15:21:20 | 000,000,382 | ---- | C] () -- C:\Windows\ODBC.INI [2009/07/14 10:39:49 | 000,694,766 | ---- | C] () -- C:\Windows\System32\perfh00C.dat [2009/07/14 10:39:49 | 000,344,522 | ---- | C] () -- C:\Windows\System32\perfi00C.dat [2009/07/14 10:39:49 | 000,127,478 | ---- | C] () -- C:\Windows\System32\perfc00C.dat [2009/07/14 10:39:49 | 000,038,160 | ---- | C] () -- C:\Windows\System32\perfd00C.dat [2009/07/14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009/07/14 06:33:53 | 000,313,864 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009/07/14 04:05:48 | 000,606,992 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009/07/14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009/07/14 04:05:48 | 000,103,370 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009/07/14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009/07/14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009/07/14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009/07/14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009/07/14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2004/08/13 10:56:20 | 000,005,810 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys [1999/01/27 13:39:06 | 000,065,024 | ---- | C] () -- C:\Windows\System32\indounin.dll [1997/06/13 07:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\Iyvu9_32.dll ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* > [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2009/12/12 06:40:45 | 000,000,209 | -H-- | M] () -- C:\Boot.BAK [2009/12/12 08:00:52 | 000,000,353 | RHS- | M] () -- C:\Boot.ini.saved [2006/03/24 14:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin [2009/07/14 03:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2009/12/26 14:35:10 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2009/06/10 23:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys [2010/04/30 22:02:14 | 000,000,000 | ---- | M] () -- C:\Debug.QC6 [2011/04/09 08:47:21 | 1610,014,720 | -HS- | M] () -- C:\hiberfil.sys [2010/04/30 22:04:33 | 000,113,910 | ---- | M] () -- C:\Installer.log [2009/12/12 07:01:35 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2010/04/30 22:02:11 | 000,000,183 | ---- | M] () -- C:\LogiSetup.log [2009/12/12 07:01:35 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2010/04/30 22:08:46 | 000,504,102 | ---- | M] () -- C:\MSIInstall.log [2006/03/24 14:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM [2006/03/24 14:00:00 | 000,251,712 | RHS- | M] () -- C:\ntldr [2011/04/09 08:47:25 | 2146,689,024 | -HS- | M] () -- C:\pagefile.sys [2011/04/09 15:20:36 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin [2011/04/03 14:32:24 | 000,000,361 | ---- | M] () -- C:\rkill.log [2010/08/01 15:16:56 | 000,000,000 | ---- | M] () -- C:\Tech_Vista.log < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2009/07/14 03:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\LocationApi.dll [3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ] < %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\system32\drivers\*.sys /90 > [2011/01/13 10:37:09 | 000,017,744 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys [2011/01/13 10:37:19 | 000,051,280 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys [2011/01/13 10:37:30 | 000,023,632 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys [2011/01/13 10:41:16 | 000,294,608 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys [2011/01/13 10:40:16 | 000,047,440 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-04-08 07:03:45 < End of report > Le forum combine mes deux messages en un seul :-S Et voici Extra.TXT : OTL Extras logfile created on: 09/04/2011 15:19:12 - Run 1 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Alex\Desktop Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 72,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 80,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 232,88 Gb Total Space | 157,34 Gb Free Space | 67,56% Space Free | Partition Type: NTFS Drive E: | 953,73 Mb Total Space | 669,55 Mb Free Space | 70,20% Space Free | Partition Type: FAT Computer Name: MICATWO | User Name: Alex | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{18754BA4-4F0C-4E6E-888B-9496AFA05F43}" = Ma-Config.com "{1A834332-A9EE-440C-9505-2D07F445F05A}" = MOBILedit! Support Libraries "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live "{20aa4150-b5f4-11de-8a39-0800200c9a66}_is1" = KompoZer 0.8b3 "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 24 "{281D28EC-1357-4778-B2D7-DEA56D70EF96}" = Logitech High Quality Video "{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime "{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant "{2C3CE8F0-F4AD-4D54-A520-975309C617E2}" = LG PC Suite III "{3E8DE1A6-B365-4FF6-B917-2892A34990E8}" = LG USB Modem Drivers "{466B21EE-2858-4845-B2B3-056FC544DAA3}" = Logitech QuickCam "{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live "{47DA7D2E-408C-4050-B75F-95F6D2E6A332}_is1" = MOBILedit!4 ver. 4.2 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support "{5ECB3A3C-980B-4D12-9724-25DCB07A1F47}" = iTunes "{66D475AE-F18B-43A0-8BAF-61AF4403E339}" = Webcam 1200 "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger "{7E0610A2-E336-40B3-B685-C4905E97EC9A}" = OpenOffice.org 3.3 "{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call "{8A253629-0511-4854-8B4E-46E57E66005C}" = Bonjour "{8AF3E926-ED59-11D4-A44B-0000E86D2305}" = Ulead GIF Animator 5 Evaluation "{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger "{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007 "{9028040C-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional avec FrontPage "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{993960EE-CA4D-443F-8F88-E24260DD5FD2}" = LG PC Suite "{9B88DD94-1AAE-41C4-BD95-2D8737D5E9E2}" = Watson "{9D10CB57-B085-44c3-B435-2D193BA153F0}" = Conseiller de mise à niveau vers Windows 7 "{9DE1BE03-AFE2-4CDB-BFEB-D06D736CD01A}" = Apple Mobile Device Support "{ABD7DBE3-E344-4BCA-B8AD-4360494DD1D9}" = LG MC USB U330 driver "{AC76BA86-7AD7-1036-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Français "{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}" = LG Bluetooth Drivers "{B90450DF-E781-46FD-B1F1-0C86DA40E443}" = PIF DESIGNER "{C0E18DC4-C74A-4889-AE3A-933471023787}" = LG PC Suite III "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update "{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live "{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial "{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F1062DF9-D2A1-4724-BBAF-B514FBB641BB}" = Ciel Comptes Personnels 8.0 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{FA02ACAC-9E14-4878-A257-92A22A647C2C}" = LG USB Modem Drivers "{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "avast5" = avast! Free Antivirus "EPSON Printer and Utilities" = EPSON Printer Software "EPSON Scanner" = EPSON Scan "ESDX4800_4200 Guide util." = ESDX4800_4200 Guide util. "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "Logitech Print Service" = Logitech Print Service "lvdrivers_11.90" = Coffret de pilotes Logitech QuickCam "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16) "Picasa 3" = Picasa 3 "scilab-5.2.2_is1" = scilab-5.2.2 "TubeMaster++" = TubeMaster++ 2.2 "VLC media player" = VLC media player 1.1.7 "WampServer 2_is1" = WampServer 2.0 "Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner "WinGimp-2.0_is1" = GIMP 2.6.11 "WinLiveSuite_Wave3" = Installation Windows Live "WinPcapInst" = WinPcap 4.1.2 ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Facebook Plug-In" = Facebook Plug-In "FileZilla Client" = FileZilla Client 3.3.5.1 "Google Chrome" = Google Chrome ========== Last 10 Event Log Errors ========== Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report >

Désolé d'"insister", mais je préfère revenir vers vous pour m'assurer qu'il ne reste pas de problème dû à MS Removal Tool

Je sais que je ne suis pas le seul, loin de là à la vue des topics qui fleurissent, mais si quelqu'un pouvait juste me confirmer que mon PC est "soigné", ce serait gentil =D Et j'avais une question aussi, faut-il remettre la connexion Internet comme avant ? C'est à dire avant d'avoir modifié en "Pas de Proxy" ? (Encore faut-il que je me souvienne ce qu'il y avait de coché ) ) Merci beaucoup =)

Petite nouveauté : J'ai été voir dans le dossier ProgramData, car c'est là qu'Avast avait vu l'intrusion du Malware. Et surprise, le dossier gEh31001eNnGh31001 contenant l'exe et un fichier d'1 Ko était encore présent ! J'ai fait une analyse rapide Malwarebytes et il a reconnu le .exe comme un Trojan, et il l'a supprimé. Après redémarrage, il ne reste que le fichier d'1 Ko, qui j'espère ne portera pas préjudice.

Bonjour à tous, J'ai été touché, comme pas mal de monde apparemment, par le Malware MS Removal Tool (C'est le premier de type Rogue qui arrive à s'installer sur mon PC :'( ) Je vais essayer d'être le plus précis possible : J'ai lancé RogueKiller.exe en Mode sans échec avec prise en charge réseau (Il ne voulait pas se lancer en mode normal, même en changeant le nom ou l'extension en .com !) J'ai activé l'option 2 - Suppression. Voir mon rapport ci-dessous. J'ai ensuite suivi le protocole de lance_yien qui est très bien expliqué au passage. >>> Réinitialiser le fichier Hosts : Je n'ai pas pu car cette fonctionnalité n'est pas disponible en Mode sans échec =( Est-ce grave ? >>> Réinitialiser les paramètres d'Internet Explorer : OK >>> Restaurer les paramètres Proxy : OK >>> Télécharger, sur le Bureau: * Malware Bytes Anti-Malware depuis ici. * Rkill (par Grinler) depuis un de ces liens: * Security Check (par screen317) depuis ici ou ici. > OK >>> Utiliser Rkill : OK >>> Utiliser Malwarebytes' Anti-Malware : OK - Voir le rapport ci-dessous >>> Utiliser SecurityCheck : OK - Voir le rapport ci-dessous Je suis encore en mode sans échec, je préfère confirmation auprès d'un expert avant de relancer le mode normal. De plus, j'ai ma clé USB branchée sur mon PC, y'a-t-il quelque chose à faire avant de l'enlever ? Je parle du point de vue risque de "transfert" du Malware dans ma clé ? Mon PC est-il de nouveau propre ou y'a-t-il encore des problèmes ? J'espère que mon message est posté de façon assez claire et compréhensible :s Merci d'avance pour l'aide que vous pourrez m'apporter A-Mica-lement ______________________________________________ Rapport RogueKiller (RKreport[1].txt) (MS Removal Tool s'est manifesté sous le nom de fichier gEh31001eNnGh31001.exe avant de s'installer et tout bloquer à une vitesse hallucinante) : RogueKiller V4.3.6 par Tigzy contact sur Forum Sciences / Forum Informatique - Sur la Toile (SLT) mail: tigzyRK<at>gmail<dot>com Remontees: [RogueKiller] Remontées (1/12) Systeme d'exploitation: Windows 7 (6.1.7600 ) 32 bits version Demarrage : Mode sans echec avec prise en charge reseau Utilisateur: Alex [Droits d'admin] Mode: Suppression -- Date : 03/04/2011 14:17:40 Processus malicieux: 0 Entrees de registre: 1 [APPDT/TMP/DESKTOP] HKCU\[...]\RunOnce : gEh31001eNnGh31001 (C:\ProgramData\gEh31001eNnGh31001\gEh31001eNnGh31001.exe) -> DELETED Fichier HOSTS: 127.0.0.1 localhost ::1 localhost Termine : << RKreport[1].txt >> RKreport[1].txt Rapport MalwareBytes (mbam-log-2011-04-03 (14-39-05).txt) : Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 6253 Windows 6.1.7600 (Safe Mode) Internet Explorer 8.0.7600.16385 03/04/2011 14:39:05 mbam-log-2011-04-03 (14-39-05).txt Type d'examen: Examen rapide Elément(s) analysé(s): 142267 Temps écoulé: 2 minute(s), 33 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) Rapport SecurityCheck (checkup.txt) : Results of screen317's Security Check version 0.99.10 Windows 7 (UAC is enabled) Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: Windows Security Center service is not running! This report may not be accurate! avast! Free Antivirus WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: Malwarebytes' Anti-Malware Java 6 Update 21 Out of date Java installed! Adobe Flash Player 10.1.102.64 Adobe Reader 9.3 - Français Out of date Adobe Reader installed! ```````````````````````````````` Process Check: objlist.exe by Laurent windows defender MpCmdRun.exe ``````````End of Log````````````