Mise à jour antivirus mcafee impossible

bonjour,

depuis quelques jours, je cherche à installer la mise à jour windows xp pack3, mais à chaque fois que j'essai la mise à jour plante. Depuis, impossible de mettre à jour mon antivirus mc Afee : que dois-je faire? y-a-t-il un lien entre la mise à jour de xp pack3 et ma mise à jour sécurité?

merci d'avance pour votre aide, j'attend avec impatience votre réponse. merci.

Bonjour,
merci pour ta réponse, je ne m'attendai pas à ce que mon sujet soit traité aussi rapidement...bon boulot et merci beaucoup!!!

oui, j'ai donc testé le désinstall, mais même le désinstall ne fonctionne pas.... mais je pense avoir peut-être trouvé le problème, spybot vient de détecté plusieurs trojans tel que win32.Rungbu.a, zlob.downloader, WhenU ... peut-être est-ce lié?

peut-tu me donner un coup de main pour résoudre le problème ou me conseillé un autre sujet similaire qui pourrai m'aider?

voici mon rapport hijack this pour plus de détail :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:08:29, on 16/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AhnRpta.exe
C:\Program Files\CyberLink\PowerCinema\PCMService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HP\KBD\KBD.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\NETGEAR\WN111\wn111.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\mspaint.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P26 "EPSON Stylus DX4800 Series" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [GEST] m’|\ü
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\issch.exe" -start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [NettoyeurDePC] C:\Program Files\NettoyeurDePC\GDC.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [kava] C:\WINDOWS\system32\kavo.exe
O4 - HKCU\..\Run: [kamsoft] C:\WINDOWS\system32\ckvo.exe
O4 - HKCU\..\Run: [vamsoft] C:\WINDOWS\system32\vamsoft.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: NETGEAR WN111 Smart Wizard.lnk = C:\Program Files\NETGEAR\WN111\wn111.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Ouvrir l'image dans &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~3\Office\1036\phdintl.dll/phdContext.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

--
End of file - 10072 bytes



merci pour ton aide...

Re,

voici le rapport combofix :

ComboFix 09-01-17.04 - Compaq_Propriétaire 2009-01-18 19:18:05.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1022.501 [GMT 1:00]
Lancé depuis: c:\documents and settings\Compaq_Propriétaire\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
c:\documents and settings\Compaq_Propriétaire\Local Settings\Application Data\osoaw.dat
c:\documents and settings\Compaq_Propriétaire\Local Settings\Application Data\osoaw.exe
c:\documents and settings\Compaq_Propriétaire\Local Settings\Application Data\osoaw_nav.dat
c:\documents and settings\Compaq_Propriétaire\Local Settings\Application Data\osoaw_navps.dat
c:\documents and settings\Compaq_Propriétaire\Local Settings\Application Data\uaqkekg_navfx.dat
C:\fn20.exe
C:\i6a0.bat
C:\iqe68o.bat
C:\nm3osq.bat
C:\nq0cq.cmd
C:\qoes.bat
c:\windows\expiorer.exe
c:\windows\system32\_000006_.tmp.dll
c:\windows\system32\_000144_.tmp.dll
c:\windows\system32\_000149_.tmp.dll
c:\windows\system32\_000150_.tmp.dll
c:\windows\system32\_000151_.tmp.dll
c:\windows\system32\_000152_.tmp.dll
c:\windows\system32\_000153_.tmp.dll
c:\windows\system32\_000157_.tmp.dll
c:\windows\system32\_000158_.tmp.dll
c:\windows\system32\_000159_.tmp.dll
c:\windows\system32\_000160_.tmp.dll
c:\windows\system32\_000162_.tmp.dll
c:\windows\system32\_000165_.tmp.dll
c:\windows\system32\_000167_.tmp.dll
c:\windows\system32\_000169_.tmp.dll
c:\windows\system32\_000174_.tmp.dll
c:\windows\system32\_000175_.tmp.dll
c:\windows\system32\_000178_.tmp.dll
c:\windows\system32\_000179_.tmp.dll
c:\windows\system32\_000181_.tmp.dll
c:\windows\system32\_000182_.tmp.dll
c:\windows\system32\_000183_.tmp.dll
c:\windows\system32\_000185_.tmp.dll
c:\windows\system32\_000186_.tmp.dll
c:\windows\system32\_000187_.tmp.dll
c:\windows\system32\_000188_.tmp.dll
c:\windows\system32\_000191_.tmp.dll
c:\windows\system32\_000192_.tmp.dll
c:\windows\system32\_000193_.tmp.dll
c:\windows\system32\_000194_.tmp.dll
c:\windows\system32\_000196_.tmp.dll
c:\windows\system32\_000197_.tmp.dll
c:\windows\system32\_000198_.tmp.dll
c:\windows\system32\_000203_.tmp.dll
c:\windows\system32\_000206_.tmp.dll
c:\windows\system32\_000207_.tmp.dll
c:\windows\system32\_000208_.tmp.dll
c:\windows\system32\_000209_.tmp.dll
c:\windows\system32\_000210_.tmp.dll
c:\windows\system32\_004305_.tmp.dll
c:\windows\system32\_004306_.tmp.dll
c:\windows\system32\_004307_.tmp.dll
c:\windows\system32\_004308_.tmp.dll
c:\windows\system32\_004315_.tmp.dll
c:\windows\system32\_004316_.tmp.dll
c:\windows\system32\_004317_.tmp.dll
c:\windows\system32\_004318_.tmp.dll
c:\windows\system32\_004319_.tmp.dll
c:\windows\system32\_004320_.tmp.dll
c:\windows\system32\_004321_.tmp.dll
c:\windows\system32\_004322_.tmp.dll
c:\windows\system32\_004323_.tmp.dll
c:\windows\system32\_004324_.tmp.dll
c:\windows\system32\_004325_.tmp.dll
c:\windows\system32\_004326_.tmp.dll
c:\windows\system32\_004327_.tmp.dll
c:\windows\system32\_004328_.tmp.dll
c:\windows\system32\_004329_.tmp.dll
c:\windows\system32\_004331_.tmp.dll
c:\windows\system32\_004332_.tmp.dll
c:\windows\system32\_004333_.tmp.dll
c:\windows\system32\_004334_.tmp.dll
c:\windows\system32\_004335_.tmp.dll
c:\windows\system32\_004336_.tmp.dll
c:\windows\system32\_004337_.tmp.dll
c:\windows\system32\_004339_.tmp.dll
c:\windows\system32\_004340_.tmp.dll
c:\windows\system32\_004341_.tmp.dll
c:\windows\system32\_004342_.tmp.dll
c:\windows\system32\_004343_.tmp.dll
c:\windows\system32\_004344_.tmp.dll
c:\windows\system32\_004345_.tmp.dll
c:\windows\system32\_004346_.tmp.dll
c:\windows\system32\_004347_.tmp.dll
c:\windows\system32\_004348_.tmp.dll
c:\windows\system32\_004349_.tmp.dll
c:\windows\system32\_004350_.tmp.dll
c:\windows\system32\_004351_.tmp.dll
c:\windows\system32\_004352_.tmp.dll
c:\windows\system32\_004353_.tmp.dll
c:\windows\system32\_004354_.tmp.dll
c:\windows\system32\_004355_.tmp.dll
c:\windows\system32\_004356_.tmp.dll
c:\windows\system32\_004357_.tmp.dll
c:\windows\system32\_004358_.tmp.dll
c:\windows\system32\_004359_.tmp.dll
c:\windows\system32\_004360_.tmp.dll
c:\windows\system32\_004361_.tmp.dll
c:\windows\system32\_004362_.tmp.dll
c:\windows\system32\_004363_.tmp.dll
c:\windows\system32\_004364_.tmp.dll
c:\windows\system32\_004365_.tmp.dll
c:\windows\system32\_004366_.tmp.dll
c:\windows\system32\_004367_.tmp.dll
c:\windows\system32\_004368_.tmp.dll
c:\windows\system32\_004369_.tmp.dll
c:\windows\system32\_004370_.tmp.dll
c:\windows\system32\_004371_.tmp.dll
c:\windows\system32\_004372_.tmp.dll
c:\windows\system32\_004373_.tmp.dll
c:\windows\system32\_004374_.tmp.dll
c:\windows\system32\_004375_.tmp.dll
c:\windows\system32\_004376_.tmp.dll
c:\windows\system32\_004377_.tmp.dll
c:\windows\system32\_004378_.tmp.dll
c:\windows\system32\_004379_.tmp.dll
c:\windows\system32\_004380_.tmp.dll
c:\windows\system32\_004381_.tmp.dll
c:\windows\system32\_004382_.tmp.dll
c:\windows\system32\_004383_.tmp.dll
c:\windows\system32\_004384_.tmp.dll
c:\windows\system32\_004385_.tmp.dll
c:\windows\system32\_004386_.tmp.dll
c:\windows\system32\_004387_.tmp.dll
c:\windows\system32\_004388_.tmp.dll
c:\windows\system32\_004389_.tmp.dll
c:\windows\system32\_004391_.tmp.dll
c:\windows\system32\_004392_.tmp.dll
c:\windows\system32\_004393_.tmp.dll
c:\windows\system32\_004394_.tmp.dll
c:\windows\system32\_004395_.tmp.dll
c:\windows\system32\_004396_.tmp.dll
c:\windows\system32\_004397_.tmp.dll
c:\windows\system32\_004398_.tmp.dll
c:\windows\system32\_004400_.tmp.dll
c:\windows\system32\_004401_.tmp.dll
c:\windows\system32\_004402_.tmp.dll
c:\windows\system32\_004403_.tmp.dll
c:\windows\system32\_004404_.tmp.dll
c:\windows\system32\_004405_.tmp.dll
c:\windows\system32\_004406_.tmp.dll
c:\windows\system32\_004408_.tmp.dll
c:\windows\system32\_004409_.tmp.dll
c:\windows\system32\_004410_.tmp.dll
c:\windows\system32\_004411_.tmp.dll
c:\windows\system32\_004412_.tmp.dll
c:\windows\system32\_004415_.tmp.dll
c:\windows\system32\_004416_.tmp.dll
c:\windows\system32\_004417_.tmp.dll
c:\windows\system32\_004418_.tmp.dll
c:\windows\system32\_004419_.tmp.dll
c:\windows\system32\_004420_.tmp.dll
c:\windows\system32\_004421_.tmp.dll
c:\windows\system32\_004423_.tmp.dll
c:\windows\system32\_004424_.tmp.dll
c:\windows\system32\_004425_.tmp.dll
c:\windows\system32\_004426_.tmp.dll
c:\windows\system32\_004427_.tmp.dll
c:\windows\system32\_004428_.tmp.dll
c:\windows\system32\_004429_.tmp.dll
c:\windows\system32\_004430_.tmp.dll
c:\windows\system32\_004431_.tmp.dll
c:\windows\system32\_004432_.tmp.dll
c:\windows\system32\_004433_.tmp.dll
c:\windows\system32\_004434_.tmp.dll
c:\windows\system32\_004435_.tmp.dll
c:\windows\system32\_004436_.tmp.dll
c:\windows\system32\_004437_.tmp.dll
c:\windows\system32\_004438_.tmp.dll
c:\windows\system32\_004440_.tmp.dll
c:\windows\system32\_004441_.tmp.dll
c:\windows\system32\_004442_.tmp.dll
c:\windows\system32\_004443_.tmp.dll
c:\windows\system32\_004445_.tmp.dll
c:\windows\system32\_004447_.tmp.dll
c:\windows\system32\_004448_.tmp.dll
c:\windows\system32\_004449_.tmp.dll
c:\windows\system32\_004450_.tmp.dll
c:\windows\system32\_004451_.tmp.dll
c:\windows\system32\_004452_.tmp.dll
c:\windows\system32\_004453_.tmp.dll
c:\windows\system32\_004455_.tmp.dll
c:\windows\system32\_004456_.tmp.dll
c:\windows\system32\_004457_.tmp.dll
c:\windows\system32\_004458_.tmp.dll
c:\windows\system32\_004459_.tmp.dll
c:\windows\system32\_004460_.tmp.dll
c:\windows\system32\_004461_.tmp.dll
c:\windows\system32\_004462_.tmp.dll
c:\windows\system32\_004464_.tmp.dll
c:\windows\system32\_004465_.tmp.dll
c:\windows\system32\_004468_.tmp.dll
c:\windows\system32\_004469_.tmp.dll
c:\windows\system32\_004473_.tmp.dll
c:\windows\system32\_004474_.tmp.dll
c:\windows\system32\_004476_.tmp.dll
c:\windows\system32\_004479_.tmp.dll
c:\windows\system32\_004481_.tmp.dll
c:\windows\system32\_004482_.tmp.dll
c:\windows\system32\_004483_.tmp.dll
c:\windows\system32\_004484_.tmp.dll
c:\windows\system32\_004487_.tmp.dll
c:\windows\system32\_004488_.tmp.dll
c:\windows\system32\_004489_.tmp.dll
c:\windows\system32\_004490_.tmp.dll
c:\windows\system32\_004491_.tmp.dll
c:\windows\system32\_004496_.tmp.dll
c:\windows\system32\_004498_.tmp.dll
c:\windows\system32\Bitkv0.dll
c:\windows\system32\ciuytr0.dll
c:\windows\system32\ckvo.exe
c:\windows\system32\ckvo0.dll
c:\windows\system32\ckvo1.dll
c:\windows\system32\dumphive.exe
c:\windows\system32\kavo.exe
c:\windows\system32\kavo0.dll
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\vamsoft.exe
c:\windows\system32\VCCLSID.exe
C:\x2tpc.cmd
C:\xcisvxl.com
C:\yb12j.cmd
D:\Autorun.inf
D:\fn20.exe
D:\i6a0.bat
D:\iqe68o.bat
D:\nm3osq.bat
D:\nq0cq.cmd
D:\qoes.bat
D:\x2tpc.cmd
D:\xcisvxl.com
D:\yb12j.cmd

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-12-18 au 2009-01-18 ))))))))))))))))))))))))))))))))))))
.

2009-01-18 17:36 . 2009-01-18 17:36 <REP> d-------- c:\windows\NV520888.TMP
2009-01-16 18:01 . 2009-01-17 11:53 95,744 -r-hs---- c:\windows\system32\nmdfgds0.dll
2009-01-16 17:22 . 2009-01-13 06:18 107,692 -r-hs---- C:\bd3q0qix.exe
2009-01-15 22:06 . 2009-01-15 22:06 95,744 -r-hs---- c:\windows\system32\nmdfgds2.dll
2009-01-15 20:31 . 2009-01-15 20:31 129,536 -r-hs---- c:\windows\system32\mkfght0.dll
2009-01-15 20:31 . 2009-01-15 20:31 105,804 -r-hs---- c:\windows\system32\rttrwq.exe
2009-01-15 18:55 . 2009-01-15 18:56 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\MAGIX
2009-01-14 18:55 . 2009-01-15 22:03 108,940 -r-hs---- C:\ve.exe
2009-01-14 18:54 . 2009-01-15 22:03 95,744 --------- c:\windows\system32\nmdfgds1.dll
2009-01-13 21:54 . 2009-01-17 11:53 110,003 -r-hs---- c:\windows\system32\olhrwef.exe
2009-01-13 21:53 . 2004-08-05 12:00 70,656 --a------ c:\windows\AhnRpta.exe
2009-01-13 21:18 . 2007-10-25 17:43 8,516,608 --a------ c:\windows\system32\SET8AC.tmp
2009-01-13 21:17 . 2008-08-14 14:44 2,138,112 --a------ c:\windows\system32\ntoskrnl.exe
2009-01-12 20:35 . 2009-01-12 20:35 <REP> d-------- c:\program files\Fichiers communs\MAGIX Shared
2009-01-12 20:35 . 2001-10-31 10:14 1,650,688 --a------ c:\windows\system32\mplva6.dll
2009-01-12 20:35 . 2001-10-31 10:14 1,581,056 --a------ c:\windows\system32\mplvw7.dll
2009-01-12 20:35 . 2001-10-31 10:14 1,552,384 --a------ c:\windows\system32\mplvm6.dll
2009-01-12 20:35 . 2001-10-31 10:14 1,122,304 --a------ c:\windows\system32\mplvpx.dll
2009-01-12 20:35 . 2001-11-19 11:33 106,496 --a------ c:\windows\system32\lmpgspl.ax
2009-01-12 20:35 . 2001-11-19 11:33 94,208 --a------ c:\windows\system32\lmpgvd.ax
2009-01-12 20:35 . 2001-10-31 10:14 77,824 --a------ c:\windows\system32\mplaw7.dll
2009-01-12 20:35 . 2001-10-31 10:14 77,824 --a------ c:\windows\system32\mplaa6.dll
2009-01-12 20:35 . 2001-10-31 10:14 65,536 --a------ c:\windows\system32\mplapx.dll
2009-01-12 20:35 . 2001-10-31 10:14 65,536 --a------ c:\windows\system32\mplam6.dll
2009-01-12 20:35 . 2001-11-19 11:33 46,592 --a------ c:\windows\system32\lmpgad.ax
2009-01-12 20:35 . 2001-09-17 13:20 19,968 --a------ c:\windows\system32\cpuinf32.dll
2009-01-12 20:26 . 2009-01-12 20:38 <REP> d-------- C:\MAGIX
2009-01-09 18:47 . 2009-01-09 18:47 <REP> d-------- c:\documents and settings\All Users\Application Data\espionServerData
2009-01-09 18:44 . 2009-01-09 18:44 <REP> d-------- c:\documents and settings\All Users\Application Data\FLEXnet
2009-01-09 18:43 . 2009-01-09 18:43 <REP> d-------- c:\program files\Fichiers communs\Macrovision Shared
2009-01-09 17:44 . 2009-01-13 17:26 133 --a------ c:\windows\VideodeLuxe.INI
2009-01-09 17:31 . 2009-01-09 17:31 <REP> d-------- c:\program files\magix
2009-01-09 17:28 . 2009-01-09 17:28 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\DAEMON Tools Pro
2009-01-09 17:28 . 2009-01-09 17:28 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\DAEMON Tools
2009-01-09 17:27 . 2009-01-09 17:27 <REP> d-------- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-01-09 17:23 . 2009-01-09 17:29 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\DAEMON Tools Lite
2009-01-09 15:05 . 2009-01-09 15:04 120,952 -r-hs---- C:\xn9uu8.exe
2009-01-06 11:58 . 2009-01-06 12:10 <REP> d-------- c:\program files\Spybot - Search & Destroy
2009-01-05 12:35 . 2009-01-12 15:51 90,112 -r-hs---- c:\windows\system32\ciuytr1.dll
2009-01-04 11:08 . 2004-08-05 12:00 2,986,496 --a------ c:\windows\system32\SET193A.tmp
2009-01-04 11:08 . 2004-08-05 12:00 1,689,088 --a------ c:\windows\system32\SET15A4.tmp
2009-01-04 11:08 . 2007-06-13 14:22 1,037,312 --a------ c:\windows\SET1458.tmp
2009-01-04 11:08 . 2004-08-05 12:00 351,232 --a------ c:\windows\system32\SET1908.tmp
2009-01-04 11:08 . 2004-08-05 12:00 81,408 --a------ c:\windows\system32\SET1923.tmp
2009-01-04 11:08 . 2004-08-05 12:00 75,776 --a------ c:\windows\system32\SET18BB.tmp
2009-01-04 11:08 . 2004-08-05 12:00 24,576 --a------ c:\windows\system32\SET1691.tmp
2009-01-04 11:08 . 2004-08-05 12:00 15,872 --a------ c:\windows\system32\SET18F7.tmp
2009-01-04 11:08 . 2004-08-05 12:00 6,656 --a------ c:\windows\system32\SET1930.tmp
2009-01-03 19:58 . 2009-01-03 19:58 <REP> d-------- c:\program files\DVD Decrypter
2009-01-02 19:31 . 2009-01-02 19:31 <REP> d-------- c:\program files\Corel
2008-12-28 19:53 . 2008-12-28 19:53 <REP> d-------- c:\windows\SxsCaPendDel
2008-12-25 21:57 . 2008-12-25 21:57 85,504 -r-hs---- c:\windows\system32\vbsdfe2.dll
2008-12-22 23:09 . 2008-12-27 09:27 85,504 -r-hs---- c:\windows\system32\vbsdfe1.dll
2008-12-22 23:08 . 2009-01-04 16:17 85,504 -r-hs---- c:\windows\system32\vbsdfe0.dll
2008-12-22 19:04 . 2008-12-22 19:49 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\La Bataille pour la Terre du Milieu ™ II
2008-12-22 18:53 . 2008-12-22 18:53 <REP> d-------- c:\program files\Electronic Arts
2008-12-22 18:28 . 2008-12-22 18:28 <REP> d-------- c:\program files\Valve
2008-12-22 16:23 . 2004-08-05 12:00 2,986,496 --a------ c:\windows\system32\SET1798.tmp
2008-12-22 16:23 . 2004-08-05 12:00 1,689,088 --a------ c:\windows\system32\SET14AB.tmp
2008-12-22 16:23 . 2004-08-05 12:00 351,232 --a------ c:\windows\system32\SET1765.tmp
2008-12-22 16:23 . 2004-08-05 12:00 81,408 --a------ c:\windows\system32\SET1780.tmp
2008-12-22 16:23 . 2004-08-05 12:00 75,776 --a------ c:\windows\system32\SET1718.tmp
2008-12-22 16:23 . 2004-08-05 12:00 24,576 --a------ c:\windows\system32\SET1547.tmp
2008-12-22 16:23 . 2004-08-05 12:00 15,872 --a------ c:\windows\system32\SET1754.tmp
2008-12-22 16:23 . 2004-08-05 12:00 6,656 --a------ c:\windows\system32\SET178D.tmp
2008-12-22 16:21 . 2007-10-25 17:43 8,516,608 --a------ c:\windows\system32\SET16E2.tmp
2008-12-22 14:21 . 2008-12-22 14:21 <REP> d-------- C:\OEMSettings

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-18 18:27 --------- d-----w c:\documents and settings\Compaq_Propriétaire\Application Data\uTorrent
2009-01-18 16:08 --------- d-----w c:\program files\Fichiers communs\Sonic Shared
2009-01-18 16:06 --------- d-----w c:\program files\Sonic
2009-01-17 13:45 --------- d-----w c:\program files\Eidos Interactive
2009-01-14 15:34 --------- d-----w c:\program files\HP
2009-01-14 15:34 --------- d-----w c:\program files\Hewlett-Packard
2009-01-09 17:43 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-01-09 16:23 717,296 ----a-w c:\windows\system32\drivers\sptd.sys
2009-01-09 10:16 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-01-08 23:01 --------- d-----w c:\documents and settings\Compaq_Propriétaire\Application Data\dvdcss
2008-12-22 13:21 --------- d--h--w c:\program files\InstallShield Installation Information
2008-12-16 19:28 --------- d-----w c:\documents and settings\All Users\Application Data\NVIDIA
2008-12-13 10:50 16,608 ----a-w c:\windows\gdrv.sys
2008-12-13 09:12 --------- d-----w c:\program files\Realtek
2008-12-13 09:07 315,392 ----a-w c:\windows\HideWin.exe
2008-12-13 09:06 --------- d-----w c:\program files\AMD
2008-12-13 09:06 --------- d-----w c:\documents and settings\Compaq_Propriétaire\Application Data\InstallShield
2008-12-11 11:57 333,184 ----a-w c:\windows\system32\drivers\srv.sys
2007-12-18 09:20 900 ----a-w c:\documents and settings\Compaq_Propriétaire\Application Data\wklnhst.dat
2008-12-26 19:04 67,688 ----a-w c:\program files\mozilla firefox\components\jar50.dll
2008-12-26 19:04 54,368 ----a-w c:\program files\mozilla firefox\components\jsd3250.dll
2008-12-26 19:04 34,944 ----a-w c:\program files\mozilla firefox\components\myspell.dll
2008-12-26 19:04 46,712 ----a-w c:\program files\mozilla firefox\components\spellchk.dll
2008-12-26 19:04 172,136 ----a-w c:\program files\mozilla firefox\components\xpinstal.dll
2006-08-30 17:28 22 -csha-w c:\windows\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-14 68856]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2008-12-22 270128]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 139264]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GEST"="m’|\ü" [X]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-19 7557120]
"PCMService"="c:\program files\CyberLink\PowerCinema\PCMService.exe" [2006-02-25 147456]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-01-02 180269]
"EPSON Stylus DX4800 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE" [2005-02-02 98304]
"ShStatEXE"="c:\program files\Network Associates\VirusScan\SHSTAT.EXE" [2003-09-29 81990]
"McAfeeUpdaterUI"="c:\program files\Network Associates\Common Framework\UpdaterUI.exe" [2003-09-10 135251]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 132496]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-04-19 86016]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"nwiz"="nwiz.exe" [2007-06-28 c:\windows\system32\nwiz.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-12-20 c:\windows\RTHDCPL.exe]

c:\documents and settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\
Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-01-02 27136]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 29696]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-01-21 65588]
NETGEAR WN111 Smart Wizard.lnk - c:\program files\NETGEAR\WN111\wn111.exe [2007-08-27 1343488]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{BB4C402F-882A-4526-8C08-51278EA437C1}"= "c:\windows\system32\afmain1.dll" [2007-06-13 78848]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3acm"= l3codecp.acm

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"=
"c:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Electronic Arts\\La Bataille pour la Terre du Milieu II\\game.dat"=

R4 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]
S3 naecd;naecd;\??\c:\docume~1\COMPAQ~1\LOCALS~1\Temp\naecd.sys --> c:\docume~1\COMPAQ~1\LOCALS~1\Temp\naecd.sys [?]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{143272c7-8f08-11dd-88e1-001e2a481f5d}]
\Shell\AutoRun\command - G:\fn20.exe
\Shell\explore\Command - G:\fn20.exe
\Shell\open\Command - G:\fn20.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c835a4a8-e91d-11db-8717-00161786273e}]
\Shell\AutoRun\command - K:\qoes.bat
\Shell\open\Command - K:\qoes.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dda74eac-a7ea-11dc-8853-00161786273e}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe killVBS.vbs
.
Contenu du dossier 'Tâches planifiées'

2009-01-07 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-09-19 16:36]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-WOOKIT - c:\progra~1\Wanadoo\Shell.exe
HKCU-Run-NettoyeurDePC - c:\program files\NettoyeurDePC\GDC.exe
HKCU-Run-vamsoft - c:\windows\system32\vamsoft.exe
HKLM-Run-ISUSPM Startup - c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe
HKLM-Run-ISUSScheduler - c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\issch.exe
HKLM-Run-PCDrProfiler - (no file)
Notify-dimsntfy - (no file)


.
------- Examen supplémentaire -------
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.fr/
uSearch Bar = hxxp://www.google.com/ie
mDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
IE: Ouvrir l'image dans &Microsoft PhotoDraw - c:\progra~1\MICROS~3\Office\1036\phdintl.dll/phdContext.htm
FF - ProfilePath - c:\documents and settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\cxodywzt.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - component: c:\program files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-18 19:27:06
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
c:\program files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
c:\program files\Network Associates\Common Framework\FrameworkService.exe
c:\program files\Network Associates\VirusScan\Mcshield.exe
c:\program files\Network Associates\VirusScan\VsTskMgr.exe
c:\progra~1\NETWOR~1\COMMON~1\naPrdMgr.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PSIService.exe
c:\program files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
c:\windows\AhnRpta.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\rundll32.exe
c:\program files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
.
**************************************************************************
.
Heure de fin: 2009-01-18 19:32:38 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-01-18 18:32:36

Avant-CF: 40 610 455 552 octets libres
Après-CF: 40,945,618,944 octets libres

Current=1 Default=1 Failed=0 LastKnownGood=8 Sets=,1,2,3,4,5,6,7,8
463 --- E O F --- 2009-01-18 16:50:50


merci pour ton aide très précieuse et à bientôt pour la suite...