IE et Mozilla très lents

Bonjour,

Depuis 4 jours, j'ai quelques soucis avec Internet Explorer et Fire Fox: Ils sont tous les deux très lents à la recherche et à la connxion aux sites.

J'tulise Windows XP, Avast, ma connexion internet Live Box est bonne (dixit Pygrenouille), de plus il y a un autre PC(même configuration) en ethernet et un portable en WI FI.

J'ai détecté un bagle:

Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA]
Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA]
Rootkit Bagle ! .. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]

Et j'ai commencé le nettoyage dans l'ordre:
-rooter.exe
-malwareremoval
-findykill
-ccleaner
-malwarebytes
-ccleaner
-combofix

Le fait est que je ne connais pas suffisament "la langue" des logs , que le problème persiste et que je ne sais plus trop que faire.

Je remercie par avance la personne qui pourrait m'aider à remettre un fonctionnement normal à ces applications.

Bonjour Angeldark,

Merci de prendre le temps de me répondre

Effectivement, je ne l'ai pas noté, mais j'ai eu l'idée de faire un passage de Elibaga dont voici le log:


Thu Feb 26 18:26:20 2009
EliBagle v12.26 (c)2009 S.G.H. / Satinfo S.L. (Actualizado el 25 de Febrero del 2009)
----------------------------------------------
Lista de Acciones (por Acción Directa):

Thu Feb 26 18:26:36 2009
EliBagle v12.26 (c)2009 S.G.H. / Satinfo S.L. (Actualizado el 25 de Febrero del 2009)
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando "C:\"

Nº Total de Directorios: 9985
Nº Total de Ficheros: 102051
Nº de Ficheros Analizados: 16867
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados: 0

Juste une précision: Message de Elibagla: impossible de scanner Adobe Acrobat, protégé par mot de passe.
Cela m'étonne beaucoup.

C'est parceque j'ai fait toutes ces manips que je viens sur le forum car la lenteur de IE et de Mozilla reste incompréhensible.
S'il faut reprendre tout depuis le début ou seulement afficher les logs (je n'ai pas voulu le faire en premier message pour ne pas encombrer le forum), alors pas de souci.
Encore merci

-------------------------------

Suppression Adobe Reader + repassage de Elibagle:

Sat Feb 28 16:01:08 2009
EliBagle v12.26 (c)2009 S.G.H. / Satinfo S.L. (Actualizado el 25 de Febrero del 2009)
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando "C:\"

Nº Total de Directorios: 9925
Nº Total de Ficheros: 101408
Nº de Ficheros Analizados: 16882
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados: 0

Re
voici le rapport ComboFix

ComboFix 09-02-25.02 - Utilisateur 2009-02-26 18:10:30.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.511.263 [GMT 1:00]
Lancé depuis: c:\documents and settings\Utilisateur\Bureau\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090225-1] *On-access scanning disabled* (Updated)
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-26 au 2009-02-26 ))))))))))))))))))))))))))))))))))))
.

2203-01-04 20:15 . 2203-01-04 20:15 3,120 --a--c--- c:\windows\MF_C421.lfa
2203-01-04 20:15 . 2203-01-04 20:15 3,120 --a--c--- c:\windows\MF_C420.lfa
2009-02-26 17:57 . 2009-02-26 17:57 <REP> d-------- C:\rsit
2009-02-26 15:05 . 2009-02-26 15:05 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-02-26 15:05 . 2009-02-26 15:05 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\Malwarebytes
2009-02-26 15:05 . 2009-02-26 15:05 <REP> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-02-26 15:05 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-26 15:05 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-02-26 14:36 . 2008-11-06 02:03 <REP> d-------- C:\SDFix
2009-02-26 14:09 . 2009-02-26 18:00 <REP> d-------- c:\program files\FindyKill
2009-02-26 13:57 . 2009-02-26 17:51 <REP> d-------- C:\Rooter$
2009-02-25 14:11 . 2009-01-19 15:35 15,688 --a------ c:\windows\system32\lsdelete.exe
2009-02-25 13:53 . 2009-02-25 13:53 <REP> d-------- c:\program files\Lavasoft
2009-02-25 13:53 . 2009-02-25 13:59 <REP> d-------- c:\documents and settings\All Users\Application Data\Lavasoft
2009-02-25 13:53 . 2009-02-25 13:53 <REP> d--h-c--- c:\documents and settings\All Users\Application Data\{2BAE6915-8510-4B9F-B498-02DA86258AA0}
2009-02-25 13:47 . 2009-02-25 13:48 <REP> d-------- c:\program files\ad aware
2009-02-25 13:33 . 2009-02-25 13:34 <REP> d-------- c:\program files\firetune
2009-02-18 10:32 . 2004-03-05 00:21 15,840 --a------ c:\windows\system32\Machnm1.exe
2009-02-17 21:48 . 2009-02-25 12:25 <REP> d-------- c:\program files\SETCHUP
2009-02-14 21:59 . 2009-02-14 21:59 <REP> d-------- c:\documents and settings\All Users\Application Data\HoverBee Studios
2009-02-14 15:40 . 2009-02-19 20:41 54,156 --ah----- c:\windows\QTFont.qfn
2009-02-14 15:40 . 2009-02-14 15:40 1,409 --a------ c:\windows\QTFont.for
2009-02-11 21:19 . 2009-02-11 21:19 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\Serif
2009-02-11 20:16 . 2009-02-11 22:37 <REP> d-------- c:\program files\Movieplus5
2009-02-10 22:54 . 2009-02-10 22:55 <REP> d-------- c:\program files\Mozilla
2009-02-08 21:37 . 2009-02-08 21:42 <REP> d-------- c:\documents and settings\All Users\Application Data\Nick Chase A Detective Story
2009-01-29 19:50 . 2009-01-29 19:50 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\Island
2009-01-29 18:11 . 2009-01-29 18:11 <REP> d-------- c:\documents and settings\Utilisateur\Application Data\Jetsetter

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-26 16:57 --------- d-----w c:\program files\Trend Micro
2009-02-26 16:19 --------- d-----w c:\program files\hijack
2009-02-26 13:33 --------- d-----w c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-25 19:21 --------- d-----w c:\documents and settings\Utilisateur\Application Data\mIRC
2009-02-25 19:20 --------- d-----w c:\program files\MIRC
2009-02-25 13:18 --------- d-----w c:\program files\Google
2009-02-25 11:55 --------- d-----w c:\program files\RegCleaner
2009-02-25 11:29 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-18 17:47 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-02-11 16:10 --------- d-----w c:\program files\SUPER
2009-01-30 11:54 --------- d-----w c:\program files\IKEA2
2009-01-30 11:43 --------- d-----w c:\program files\Fichiers communs\Wise Installation Wizard
2009-01-22 16:12 --------- d-----w c:\documents and settings\Utilisateur\Application Data\dvdcss
2009-01-22 15:36 --------- d-----w c:\documents and settings\All Users\Application Data\DVD Shrink
2009-01-22 11:31 --------- d-----w c:\program files\dvdshrink
2009-01-17 17:46 --------- d-----w c:\program files\nokia
2009-01-17 17:46 --------- d-----w c:\program files\Fichiers communs\PCSuite
2009-01-17 17:46 --------- d-----w c:\program files\Fichiers communs\Nokia
2009-01-17 17:43 --------- d-----w c:\program files\PC Connectivity Solution
2009-01-17 17:41 --------- d-----w c:\documents and settings\All Users\Application Data\Installations
2009-01-12 19:30 --------- d-----w c:\documents and settings\Utilisateur\Application Data\Zylom
2009-01-11 20:11 --------- d-----w c:\documents and settings\All Users\Application Data\SpecialBit
2009-01-06 15:20 --------- d-----w c:\documents and settings\Utilisateur\Application Data\TheScruffs
2009-01-04 09:41 --------- d-----w c:\documents and settings\Utilisateur\Application Data\Nokia
2008-12-20 22:47 826,368 ----a-w c:\windows\system32\wininet.dll
2008-12-08 20:09 410,984 ----a-w c:\windows\system32\deploytk.dll
2008-03-19 20:23 0 -c--a-w c:\program files\temp01
2007-08-27 15:28 16,429,768 ----a-w c:\program files\setupfre.exe
2006-10-01 12:02 2,199,797 -c--a-w c:\program files\pe.exe
2004-05-22 21:17 3,836,584 -c--a-w c:\program files\msorun.exe
2004-04-21 12:32 1,368 -c--a-w c:\program files\uninstall.ini
2004-03-09 22:00 1,306,512 -c--a-w c:\program files\resubmitted.translation_in_french.exe
2004-03-09 21:58 4,384,013 -c--a-w c:\program files\winamp502_full.exe
2004-03-09 20:33 5,473,872 -c--a-w c:\program files\msjavx86.exe
2004-03-09 19:21 393,723 -c--a-w c:\program files\veille.zip
2004-01-02 09:42 1,916,728 -c--a-w c:\program files\SRB2Src108.exe
2004-01-02 09:39 974,903 -c--a-w c:\program files\srb2win.exe
2004-01-01 22:08 73,728 -c--a-w c:\program files\r_opengl.dll
2004-01-01 00:23 3,203 -c--a-w c:\program files\config.cfg
2003-12-25 18:23 40,825,716 -c--a-w c:\program files\music.dta
2003-12-25 12:13 1,485,525 -c--a-w c:\program files\3drend.dll
2003-12-24 13:09 1,269,788 -c--a-w c:\program files\zim.dta
2003-12-18 12:56 322,380 -c--a-w c:\program files\knux.plr
2003-12-16 12:05 304,158 -c--a-w c:\program files\tails.plr
2003-08-05 07:02 937 -c--a-w c:\program files\CHANGES
2003-08-05 07:02 786 -c--a-w c:\program files\Welcome.html
2003-08-05 07:02 4,080 -c--a-w c:\program files\COPYRIGHT
2003-08-05 07:02 11,516 -c--a-w c:\program files\LICENSE
2003-08-05 07:02 10,289 -c--a-w c:\program files\README.txt
2003-06-08 08:49 343,908 -c--a-w c:\program files\sonic.plr
2003-04-18 09:20 20,507 -c--a-w c:\program files\uninstall.exe
2003-04-18 09:14 3,447 -c--a-w c:\program files\license.txt
2003-04-01 16:54 351,112 -c--a-w c:\program files\soar.dta
2003-04-01 16:53 363,104 -c--a-w c:\program files\drill.dta
2003-01-05 02:34 130,560 -c--a-w c:\program files\fmod.dll
2002-02-19 12:16 1,377,096 -c--a-w c:\program files\Mix-FX.exe
2005-07-13 12:42 104 -csh--r c:\windows\system32\3077CD2E25.sys
2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll
2005-09-28 21:53 15,026 -csha-w c:\windows\system32\KGyGaAvL.sys
2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll
2008-08-26 13:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008082620080827\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-12-03 1205760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\quicktime\qttask.exe" [2007-12-11 286720]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2003-10-06 5058560]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-08 136600]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-01-19 506712]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SRUUninstall"="c:\windows\system32\msiexec.exe" [2008-04-14 78848]

c:\documents and settings\Utilisateur\Menu D‚marrer\Programmes\D‚marrage\
Konfabulator.lnk - c:\program files\Pixoria\Konfabulator\Konfabulator.exe [2005-08-04 1282048]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-02-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.I420"= i420vfw.dll
"VIDC.SP53"= SP5X_32.DLL
"VIDC.SP54"= SP5X_32.DLL
"VIDC.SP55"= SP5X_32.DLL
"VIDC.SP56"= SP5X_32.DLL
"VIDC.SP57"= SP5X_32.DLL
"VIDC.SP58"= SP5X_32.DLL
"VIDC.SP59"= SP5X_32.DLL
"VIDC.MJPG"= Pvmjpg21.dll
"VIDC.PIM1"= pclepim1.dll
"VIDC.PIXL"= pclepixl.dll
"VIDC.NTN1"= NUVision.ax
"SENTINEL"= snti386.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus C42 Series]
--a------ 2002-02-19 04:03 74240 c:\windows\system32\spool\drivers\w32x86\3\E_S10IC2.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMS]
--a------ 2001-09-24 09:39 98304 c:\program files\Fichiers communs\Logitech\QCDriver\LVComS.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaFace Integration]
--a------ 2004-07-01 19:08 53248 c:\program files\Fellowes\MediaFACE 4.0\SetHook.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nokia.PCSync]
--a------ 2008-11-10 15:07 1253376 c:\program files\nokia\Nokia PC Suite 7\PcSync2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
--a------ 2008-12-03 12:47 1205760 c:\program files\nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCLEPCI]
--a------ 2004-02-03 15:13 49152 c:\progra~1\Pinnacle\PPE\PPE.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Real\\RealOne Player\\realplay.exe"=
"c:\\Program Files\\FTPexpert\\FTPxpert3.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\emule\\emule.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\WINDOWS\\ServicePackFiles\\i386\\iexplore.exe"=
"c:\\Program Files\\MIRC\\mirc.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [2004-03-08 75904]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-04-04 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-04-04 20560]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-19 921936]
R3 PID_0900_V;Logitech ClickSmart 310(PID_0900_V);c:\windows\system32\drivers\LV551AV.sys [2004-11-30 217271]
S3 NUVision;Pinnacle DVC 80 Video;c:\windows\system32\drivers\nuvvid2.sys [2005-08-09 155264]
S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\c:\windows\system32\ZDCndis5.SYS --> c:\windows\system32\ZDCndis5.SYS [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5d7b918e-1377-11dc-8b7e-000c767e37e3}]
\Shell\AutoRun\command - J:\setupSNK.exe
.
Contenu du dossier 'Tâches planifiées'

2009-02-26 c:\windows\Tasks\Ad-Aware Update (Daily).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-19 15:35]

2005-04-24 c:\windows\Tasks\Spybot - Search & Destroy - Scheduled Task.job
- c:\program files\spybot\Spybot - Search & Destroy\SpybotSD.exe []

2006-05-30 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2004-08-24 11:22]

2009-02-26 c:\windows\Tasks\User_Feed_Synchronization-{BFEC0407-9223-4672-BFF9-6671195903EB}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 11:58]
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = about:blank
TCP: {EDAAC1B5-6ACE-4E2F-841B-7C70C4A5BD23} = 80.10.246.2,80.10.246.129
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {226ACC34-3194-40E2-9AE8-834FCFE9E80D} - hxxp://games.bigfishgames.com/en_mysteryofsharkisla/online/MysteryOfSharkIslandWeb.1.0.0.8.cab
DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} - hxxp://82.230.29.119:8080//activex/AMC.cab
FF - ProfilePath - c:\documents and settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\vb93o26f.default\
FF - component: c:\program files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll
FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - plugin: c:\program files\Real\RealOne Player\Netscape6\nppl3260.dll
FF - plugin: c:\program files\Real\RealOne Player\Netscape6\nprjplug.dll
FF - plugin: c:\program files\Real\RealOne Player\Netscape6\nprpjplug.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-26 18:14:28
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-299502267-1454471165-839522115-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:c8,28,51,af,b0,29,a3,98,90,30,0a,a5,3e,
fb,80,5d,c8,28,51,af,b0,29,a3,98,31,a5,8c,5b,22,55,a4,61,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,9a,ff,f7,be,e6,
6c,b9,0a,71,3b,04,66,8b,46,0d,96,4c,5b,4e,76,0d,58,21,98,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:25,da,ec,7e,55,20,c9,26,d3,57,3f,20,ca,
d6,40,46,25,da,ec,7e,55,20,c9,26,cb,a4,f3,f1,9d,77,e3,91,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:3e,1e,9e,e0,57,5a,93,61,cc,7c,39,90,8f,
c9,2a,cc,3e,1e,9e,e0,57,5a,93,61,50,61,d2,e4,08,7d,cc,1f,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:cd,44,cd,b9,a6,33,6c,cd,10,13,00,25,d9,
37,4b,7d,cd,44,cd,b9,a6,33,6c,cd,33,ee,c1,7c,bc,7b,fa,a8,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:b0,18,ed,a7,3f,8d,37,a4,13,6d,5a,4b,fb,
49,69,d8,b0,18,ed,a7,3f,8d,37,a4,ac,13,40,a2,bf,f0,d8,50,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:31,77,e1,ba,b1,f8,68,02,70,bf,66,6f,4d,
6a,78,5a,31,77,e1,ba,b1,f8,68,02,21,b3,7b,c5,b0,e1,a7,67,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,7c,d9,5a,25,3b,
44,e4,84,83,6c,56,8b,a0,85,96,ab,28,a0,d2,06,96,ab,ff,1e,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:f6,0f,4e,58,98,5b,89,c9,86,e8,06,cd,06,
fd,f0,2b,51,fa,6e,91,28,9e,14,cc,7b,b2,22,9b,0f,1d,4b,69,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:3d,ce,ea,26,2d,45,aa,78,d0,03,27,2a,ff,
14,c8,86,b1,cd,45,5a,a8,c4,f8,b9,43,b7,c6,21,38,cc,a0,88,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:e3,0e,66,d5,eb,bc,2f,6b,cd,94,0d,2b,ed,
01,1f,0a,e3,0e,66,d5,eb,bc,2f,6b,17,e5,11,21,83,5f,0f,72,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:6c,43,2d,1e,aa,22,2f,9c,4e,40,90,f5,c5,
2b,71,56,fa,ea,66,7f,d4,3b,6b,70,f5,47,f7,bf,b2,e1,b4,ae,6c,43,2d,1e,aa,22,\
.
Heure de fin: 2009-02-26 18:16:40
ComboFix-quarantined-files.txt 2009-02-26 17:16:30
ComboFix2.txt 2009-02-26 15:26:13

Avant-CF: 49 698 021 376 octets libres
Après-CF: 49,683,181,568 octets libres

289 --- E O F --- 2009-02-25 13:01:49

Merci à toi d'avoir pris le temps de regarder. J'avais une infection et je pense avoir réussi à l'enlever par les outils précédents.
Ceci dit je ne comprends pas pour quoi j'ai un tel délai d'attente sur IE et FireFox.

Ok Merci beaucoup à toi