Débordement de la mémoire tampon - Explorateur Windows

Bonjour,
Depuis quelques temps, j'ai un problème avec MCaffee. Il me signale un débordement de la mémoire tampon. S'il y avait une ame charitable qui pourrait m'aider dans ce truc ...

Voila le message exact:
"Un débordement de la mémoire tampon a été détecté puis bloqué sur votre ordinateur. Processus : C:\windows\Explorer.EXE. Description du processus : Explorateur Windows" - API : Kernel32.GetProcAddress.
Ca se passe a chaque fois que j'ouvre dans l'explorateur windows un répertoire avec beaucoup de fichiers (répertoire de films par exemple).

J'ai peur d'un pb sur windows lui-même ...

Voila mon log Hijack (le log MBAM est à la suite) :

____________________________________________
Log Hijack :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:13:48, on 16/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\windows\eHome\ehRecvr.exe
C:\windows\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\windows\system32\nvsvc32.exe
C:\windows\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\windows\system32\SearchIndexer.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\windows\system32\rundll32.exe
C:\windows\system32\oodtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.search.yahoo.com/search?fr=mcafee&p=%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [OODefragTray] C:\windows\system32\oodtray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/re [...] oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{801A341A-87F9-4E6D-941B-42F151F070FD}: NameServer = 193.231.100.130,193.231.100.134
O17 - HKLM\System\CS1\Services\Tcpip\..\{801A341A-87F9-4E6D-941B-42F151F070FD}: NameServer = 193.231.100.130,193.231.100.134
O17 - HKLM\System\CS2\Services\Tcpip\..\{801A341A-87F9-4E6D-941B-42F151F070FD}: NameServer = 193.231.100.130,193.231.100.134
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Service Google Update (gupdate1c9fa7db9f135fe) (gupdate1c9fa7db9f135fe) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\windows\system32\oodag.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe

--
End of file - 13068 bytes
____________________________________________
Log MBAM :
Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2951
Windows 5.1.2600 Service Pack 3

16/10/2009 19:12:32
mbam-log-2009-10-16 (19-12-32).txt

Type de recherche: Examen rapide
Eléments examinés: 111959
Temps écoulé: 9 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
____________________

Merci d'avance !
Bassnj

Je n'y connais pas assez pour dire si c'est un virus ou autre chose. Tu as une idée?

Salut Angeldark,

Voici le log Catchme :
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-22 00:08:45
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG10.00.00.01WORKSTATION"="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"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:0000003d
"TracesSuccessful"=dword:0000002b
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D129125C-DBB4-6927-9E5A-DCAC1C28B688}]
"iajefhobfioifjepoi"=hex:6a,61,6d,6b,6d,6a,70,6d,66,6a,6b,70,6e,69,6b,63,6c,6b,61,65,00,..
"hapdgnegogoifaoc"=hex:6a,61,6d,6b,6d,6a,70,6d,66,6a,6b,70,6e,69,6b,63,6c,6b,61,65,00,..

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Merci pour ta réponse !

Bassnj

Salut Angeldark !

Voila le Log Combofix :


ComboFix 09-10-23.01 - Julien 24/10/2009 22:56.1.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2047.1359 [GMT 3:00]
Lancé depuis: c:\documents and settings\Julien\Mes documents\Téléchargements\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
* Un nouveau point de restauration a été créé
* Un antivirus résident est actif


AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\kb913800.exe
D:\resycled

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-24 au 2009-10-24 ))))))))))))))))))))))))))))))))))))
.

2009-10-18 12:52 . 2009-10-18 12:52 532 ----a-w- c:\windows\eReg.dat
2009-10-18 12:52 . 2009-10-18 12:52 -------- d-----w- c:\program files\Maxis
2009-10-18 12:36 . 2009-10-22 21:12 -------- d-----w- c:\documents and settings\Julien\Application Data\vlc
2009-10-18 12:34 . 2009-10-18 12:34 -------- d-----w- c:\program files\VideoLAN
2009-10-18 09:45 . 2004-08-10 13:00 99840 ----a-w- c:\windows\system32\dllcache\helphost.exe
2009-10-18 09:45 . 2004-08-10 13:00 35328 ----a-w- c:\windows\system32\dllcache\notiflag.exe
2009-10-18 09:45 . 2004-08-10 13:00 21504 ----a-w- c:\windows\system32\dllcache\brpinfo.dll
2009-10-18 09:40 . 2009-10-18 09:40 -------- d-----w- c:\documents and settings\Julien\Local Settings\Application Data\Help
2009-10-12 19:30 . 2009-09-10 11:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-12 19:29 . 2009-09-10 11:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-10-12 19:29 . 2009-10-12 19:30 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-10-11 18:31 . 2004-08-10 13:00 5632 ----a-w- c:\windows\system32\kbdusa.dll
2009-10-11 18:31 . 2004-08-10 13:00 5632 ----a-w- c:\windows\system32\dllcache\kbdusa.dll
2009-10-11 17:57 . 2009-10-11 18:05 -------- d-----w- c:\program files\DivX Subtitle Displayer
2009-10-05 20:42 . 2009-10-05 20:42 -------- d-----w- c:\program files\iPod
2009-10-05 20:42 . 2009-10-05 20:44 -------- d-----w- c:\program files\iTunes
2009-10-05 16:56 . 2009-08-06 16:23 215920 ----a-w- c:\windows\system32\muweb.dll
2009-10-04 18:09 . 2009-10-23 04:56 3888 ----a-w- c:\windows\system32\drivers\NTHANDLE.SYS
2009-10-04 18:08 . 2009-10-04 18:08 -------- d-----w- c:\program files\WhoLockMe
2009-10-04 13:35 . 2009-10-17 15:13 -------- d-----w- c:\windows\BDOSCAN8
2009-10-04 11:02 . 2009-10-04 11:03 -------- d-----w- c:\windows\system32\oodag
2009-10-04 06:36 . 2009-10-18 07:20 -------- d-----w- c:\documents and settings\Julien\Application Data\BSplayer PRO
2009-10-03 19:45 . 2009-10-03 19:45 -------- d-----w- c:\program files\ESET
2009-10-03 18:57 . 2009-10-03 18:57 -------- d-----w- c:\documents and settings\All Users\Application Data\CA
2009-09-28 20:30 . 2009-09-28 20:30 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-24 19:56 . 2009-03-23 18:26 -------- d-----w- c:\documents and settings\Julien\Application Data\Skype
2009-10-23 16:58 . 2009-02-15 11:59 -------- d-----w- c:\documents and settings\Julien\Application Data\Azureus
2009-10-23 04:57 . 2009-02-15 11:49 -------- d-----w- c:\program files\Vuze
2009-10-22 15:50 . 2009-02-13 15:08 -------- d-----w- c:\program files\McAfee
2009-10-18 09:08 . 2009-02-16 13:34 -------- d-----w- c:\program files\Google
2009-10-18 08:16 . 2009-02-13 12:33 -------- d-----w- c:\program files\Fichiers communs\aolshare
2009-10-18 08:16 . 2009-03-10 12:24 -------- d-----w- c:\program files\Spyware Doctor
2009-10-18 08:16 . 2009-05-26 10:50 -------- d-----w- c:\program files\Neat Image
2009-10-18 08:16 . 2009-02-15 11:28 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-10-18 08:16 . 2009-03-10 12:24 -------- d-----w- c:\program files\Fichiers communs\PC Tools
2009-10-18 08:16 . 2009-02-13 12:33 -------- d-----w- c:\program files\Fichiers communs\Adobe
2009-10-18 08:16 . 2009-02-13 12:33 -------- d-----w- c:\program files\AOL 9.0
2009-10-17 16:46 . 2009-02-13 12:59 89608 ----a-w- c:\documents and settings\Julien\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-15 18:52 . 2004-09-23 17:12 94724 ----a-w- c:\windows\system32\perfc00C.dat
2009-10-15 18:52 . 2004-09-23 17:12 536240 ----a-w- c:\windows\system32\perfh00C.dat
2009-10-15 04:45 . 2009-02-15 11:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-10-13 17:47 . 2009-09-07 17:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-12 16:48 . 2009-06-07 09:51 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-10-11 18:40 . 2009-02-15 15:08 -------- d-----w- c:\documents and settings\All Users\Application Data\AOL
2009-10-11 18:40 . 2009-02-13 12:33 -------- d-----w- c:\program files\Fichiers communs\AOL
2009-10-05 20:42 . 2009-03-10 16:15 -------- d-----w- c:\program files\Fichiers communs\Apple
2009-10-03 18:36 . 2009-02-16 14:47 -------- d-----w- c:\program files\Microsoft
2009-10-03 18:14 . 2009-02-15 11:32 -------- d-----w- c:\program files\Microsoft Works
2009-09-21 13:15 . 2009-03-10 11:54 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-09-17 13:19 . 2009-09-17 13:18 -------- d-----r- c:\program files\Skype
2009-09-17 13:18 . 2009-03-23 18:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-09-16 07:22 . 2009-02-13 15:09 79816 ----a-w- c:\windows\system32\drivers\mfeavfk.sys
2009-09-16 07:22 . 2009-02-13 15:09 40552 ----a-w- c:\windows\system32\drivers\mfesmfk.sys
2009-09-16 07:22 . 2009-02-13 15:09 35272 ----a-w- c:\windows\system32\drivers\mfebopk.sys
2009-09-16 07:22 . 2009-02-13 15:09 214664 ----a-w- c:\windows\system32\drivers\mfehidk.sys
2009-09-16 07:22 . 2009-02-13 15:09 34248 ----a-w- c:\windows\system32\drivers\mferkdk.sys
2009-09-12 10:45 . 2009-02-23 16:31 -------- d-----w- c:\documents and settings\Julien\Application Data\Apple Computer
2009-09-12 10:08 . 2009-09-07 17:42 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-09-11 14:18 . 2004-09-23 17:10 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-10 15:34 . 2009-09-10 15:32 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-09-10 15:28 . 2009-02-13 12:34 -------- d-----w- c:\program files\QuickTime
2009-09-09 13:29 . 2009-02-14 13:18 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-04 21:04 . 2004-09-23 17:10 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-09-03 16:12 . 2009-09-03 16:12 -------- d-----w- c:\documents and settings\All Users\Application Data\nView_Profiles
2009-09-01 12:08 . 2009-09-01 12:06 -------- d-----w- c:\documents and settings\Julien\Application Data\verbix2008
2009-09-01 12:06 . 2009-09-01 12:06 -------- d-----w- c:\program files\Fichiers communs\verbix
2009-09-01 12:06 . 2009-09-01 12:06 -------- d-----w- c:\program files\Verbix2008
2009-09-01 01:59 . 2009-09-01 01:59 7396 ----a-w- c:\windows\system32\drivers\pctcore.cat
2009-09-01 01:59 . 2009-03-10 12:24 206256 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2009-08-29 07:56 . 2004-09-23 17:11 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-28 16:42 . 2009-08-18 11:01 2065696 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-08-28 16:42 . 2009-03-10 16:16 40448 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-08-26 08:01 . 2004-09-23 17:12 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-23 09:43 . 2009-08-23 09:43 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-08-17 20:33 . 2009-08-17 20:33 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-08-06 16:24 . 2004-09-23 18:07 327896 ----a-w- c:\windows\system32\wucltui.dll
2009-08-06 16:24 . 2004-09-23 18:07 209632 ----a-w- c:\windows\system32\wuweb.dll
2009-08-06 16:24 . 2008-10-16 13:09 44768 ----a-w- c:\windows\system32\wups2.dll
2009-08-06 16:24 . 2004-09-23 18:07 35552 ----a-w- c:\windows\system32\wups.dll
2009-08-06 16:24 . 2004-09-23 18:07 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-08-06 16:24 . 2004-09-23 17:10 96480 ----a-w- c:\windows\system32\cdm.dll
2009-08-06 16:23 . 2004-09-23 18:07 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-08-06 16:23 . 2009-02-15 10:34 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-08-06 16:23 . 2004-09-23 18:07 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-08-05 09:00 . 2004-09-23 17:10 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 17:27 . 2004-09-23 17:11 2147328 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-08-04 17:27 . 2004-08-03 23:48 2025984 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-07-29 04:35 . 2004-09-23 17:11 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:35 . 2004-09-23 17:10 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-03-09 13:02 . 2009-03-09 13:02 19 -c--a-w- c:\program files\Answer.txt
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-19 68856]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2009-09-02 25623336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-05-12 774233]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-06-12 7577600]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-06-12 86016]
"HControl"="c:\windows\ATK0100\HControl.exe" [2006-02-23 106496]
"mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2009-09-17 645328]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-06-14 198160]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-04 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe" - c:\windows\system32\HdAShCut.exe [2005-01-07 61952]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-06-12 1519616]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2006-5-24 49152]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Bluetooth Manager.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Bluetooth Manager.lnk
backup=c:\windows\pss\Bluetooth Manager.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Windows Search.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Windows Search.lnk
backup=c:\windows\pss\Windows Search.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\AOL 9.0\\aol.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Fichiers communs\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Fichiers communs\\Adobe\\Adobe Version Cue CS4\\Server\\bin\\VersionCueCS4.exe"=
"c:\\Program Files\\SmartFTP Client\\SmartFTP.exe"=
"c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Fichiers communs\\McAfee\\MNA\\McNASvc.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4
"3703:TCP"= 3703:TCP:Adobe Version Cue CS4 Server
"3704:TCP"= 3704:TCP:Adobe Version Cue CS4 Server
"51000:TCP"= 51000:TCP:Adobe Version Cue CS4 Server
"51001:TCP"= 51001:TCP:Adobe Version Cue CS4 Server

R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [10/03/2009 15:24 206256]
R0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [10/03/2009 15:35 51488]
R0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [10/03/2009 15:35 39200]
R3 SynMini;USB2.0 VGA WebCam;c:\windows\system32\drivers\SynMini.sys [13/02/2009 15:09 1056512]
R3 SynScan;USB2.0 VGA WebCam Still Image;c:\windows\system32\drivers\SynScan.sys [13/02/2009 15:09 8064]
S2 gupdate1c9fa7db9f135fe;Service Google Update (gupdate1c9fa7db9f135fe);c:\program files\Google\Update\GoogleUpdate.exe [01/07/2009 21:56 133104]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [14/02/2009 18:11 210216]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files\Fichiers communs\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [15/08/2008 07:46 284016]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [16/04/2009 10:39 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [16/04/2009 10:39 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [16/04/2009 10:39 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [16/04/2009 10:39 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [16/04/2009 10:39 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [16/04/2009 10:39 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [16/04/2009 10:39 115752]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [10/03/2009 15:24 348752]
S3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [10/03/2009 15:35 33056]
S4 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi.sys [10/03/2009 15:24 159600]
S4 pctplsg;pctplsg;c:\windows\system32\drivers\pctplsg.sys [10/03/2009 15:24 64392]
S4 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\Fichiers communs\Microsoft Shared\Windows Live\WLIDSVC.EXE [30/03/2009 16:28 1533808]
.
Contenu du dossier 'Tâches planifiées'

2009-10-19 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2009-10-24 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-16 18:55]

2009-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-01 18:56]

2009-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-01 18:56]

2009-08-14 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2009-02-13 09:22]

2009-02-13 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2009-02-13 09:22]

2009-10-24 c:\windows\Tasks\User_Feed_Synchronization-{1DA80E48-6181-467F-B617-BFF3CE9F35BA}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]

2009-10-24 c:\windows\Tasks\User_Feed_Synchronization-{92529F82-5BB6-4FAB-841B-8E3A21C70D11}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://fr.search.yahoo.com/search?fr=mcafee&p=%s
IE: Ajouter la cible du lien à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Liens de téléchargement avec Mega Manager... - c:\program files\Megaupload\Mega Manager\mm_file.htm
TCP: {801A341A-87F9-4E6D-941B-42F151F070FD} = 193.231.100.130,193.231.100.134
FF - ProfilePath - c:\documents and settings\Julien\Application Data\Mozilla\Firefox\Profiles\f6mcs68n.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig?source=gama&hl=fr|http://mail.live.com/default.aspx?n=1361842699&wa=wsignin1.0|http://www.facebook.com/home.php|http://www.leblogauto.com/|http://www.viedemerde.fr/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIAWB1&q=
FF - component: c:\program files\McAfee\SiteAdvisor\components\McFFPlg.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1601.7122\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
FF - plugin: c:\program files\Virtools\3D Life Player\npvirtools.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-AdobeBridge - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-24 23:04
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-3434304807-3796807285-917218401-1005\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{D129125C-DBB4-6927-9E5A-DCAC1C28B688}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"iajefhobfioifjepoi"=hex:6a,61,6d,6b,6d,6a,70,6d,66,6a,6b,70,6e,69,6b,63,6c,6b,
61,65,00,00
"hapdgnegogoifaoc"=hex:6a,61,6d,6b,6d,6a,70,6d,66,6a,6b,70,6e,69,6b,63,6c,6b,
61,65,00,62

[HKEY_USERS\S-1-5-21-776561741-1336601894-682003330-500_Classes\Software\CLASSES\CLSID\{2FD032E7-6B77-3E73-3297-4E293924403D}*\InprocServer32]
"{2FD032E7-6B77-3E73-3297-4E293924403D}"=hex:e8,37,5c,46,39,90,8d,e9,ce,51,d2,
85,c8,6c,8c,10,2e,a2,2f,8e,76,66,c4,64,e8,37,5c,46,39,90,8d,e9,e8,37,5c,46,\

[HKEY_USERS\S-1-5-21-776561741-1336601894-682003330-500_Classes\Software\CLASSES\CLSID\{887995F5-210B-C7C1-D3C0-6E48F7E262A5}*\InprocServer32]
"{887995F5-210B-C7C1-D3C0-6E48F7E262A5}"=hex:a5,77,4a,32,bd,40,4d,21,2f,ce,0a,
b0,bf,3f,f4,a5,e6,c3,48,26,a4,a8,94,13,a5,77,4a,32,bd,40,4d,21,a5,77,4a,32,\

[HKEY_USERS\S-1-5-21-776561741-1336601894-682003330-500_Classes\Software\CLASSES\CLSID\{A4E78E35-53B9-1BE8-0563-9D02C4600965}*\InprocServer32]
"{A4E78E35-53B9-1BE8-0563-9D02C4600965}"=hex2,d5,56,c6,da,80,45,65,00,9e,4c,
30,b9,e7,5c,b0,8a,9a,98,56,5e,08,a3,20,d2,d5,56,c6,da,80,45,65,d2,d5,56,c6,\

[HKEY_USERS\S-1-5-21-776561741-1336601894-682003330-500_Classes\Software\CLASSES\CLSID\{BC925B88-AFE6-6C1C-0C9B-3E5AD5F39F0D}*\InprocServer32]
"{BC925B88-AFE6-6C1C-0C9B-3E5AD5F39F0D}"=hex:ca,83,fe,44,b6,a3,52,e1,02,4c,ff,
bb,5d,cc,17,8f,94,e4,5f,e9,6c,61,e3,56,ca,83,fe,44,b6,a3,52,e1,ca,83,fe,44,\

[HKEY_USERS\S-1-5-21-776561741-1336601894-682003330-500_Classes\Software\CLASSES\CLSID\{EC2652C6-F2AE-C906-7B38-0C1304D6C142}*\InprocServer32]
"{EC2652C6-F2AE-C906-7B38-0C1304D6C142}"=hex:3b,11,be,8a,fe,17,9c,22,48,1e,ca,
c3,b6,1a,aa,7f,b9,48,2f,d2,08,6e,86,43,3b,11,be,8a,fe,17,9c,22,3b,11,be,8a,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{D129125C-DBB4-6927-9E5A-DCAC1C28B688}\InProcServer32*]
"jaldijchmaolkdgbiain"=hex:6a,61,6d,6b,6d,6a,70,6d,66,6a,6b,70,6e,69,6b,63,6c,
6b,61,65,00,00
"ialdojahfjcbpbkoac"=hex:6a,61,6d,6b,6d,6a,70,6d,66,6a,6b,70,6e,69,6b,63,6c,6b,
61,65,00,62

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
Heure de fin: 2009-10-24 23:07
ComboFix-quarantined-files.txt 2009-10-24 20:07

Avant-CF: 8 277 782 528 octets libres
Après-CF: 8 268 718 080 octets libres

- - End Of File - - 606671B717F2E6FCD8CB5902AC0CB026


Merci !!!

Toujours pareil.
J'ai fait un check de mémoire RAM au cas où avec Memtest, mais tout est OK de ce point de vue.
Souvent, quand je veux déconnecter un disque dur Externe ou supprimer un fichier, Windows me dit qu'il est en utilisation, même si aucun programme ne l'utilise. J'ai trouvé le soft "who lock me" qui permet de voir qui utilise quel fichier ou répertoire, et je vois à chaque fois que c'est Explorer qui utilise le fichier en question.

Est-ce que ça peut t'aiguiller ver un pb ?

Merci encore !!!
Bassnj

Coté Hardware, j'ai un portable Packard Bell de 2ans et demi qui ne m'a jamais posé pb jusqu'à maintenant. J'ai rien fait dessus, à part mise a jour de la RAM (de 1Go à 2Go).

Pas de problème. Je vais faire ça.

Merci
++
Bassnj