bonjour

Des dysfonctionnements de msconfig et l'impossibilité de lancer en mode sans echec me laissent craindrent une infection que je ne réussi pas à cerner.

Pouvez vous m'aider S.V.P.

Sur un portable ACER, windows XP familial SP2:

L'activation du mode sans échec (par F8) se solde par un plantage sur erreur (écran bleu); le mode normal semble fonctionner normalement, sauf que, si on lance msconfig, il n'est plus possible d'en sortir; il faut arrêter l'application avec le gestionnaire des taches. Bien sûr, dans ce cas, les modifications faites ne sont pas prises en compte.

L'analyse des différents messages à ce sujet ne m'a pas permis de retrouver une situation normale. J'ai effectué les opérations suivantes:

nettoyage par CCleaner; analyse par Bitdefender et Kaspersky en ligne... Rien

Installation et analyses par Malwarebytes et spyware terminator. ce dernier trouve en premier scan "Trojan.Toosrrr.SRR (Objets restants Trojan)

Je joint le dernier rapport Spyware terminator et le rapport HijackThis.

Je vous remercie par avance pour votre aide.

****************************************************

Logfile of Spyware Terminator v2.2.3.444 (db:2.007.021.000)
Scan Time: 22/07/2008 11:45:58 length: 88 s
Platform: WXP (5.1.0.2600)
User: Admin
Boot Mode: Normal
Scan type: Fast_Spyware_Scan
Scanned Objects: 31928 (Critical:0)
Filter: No System items, No Safe items, No Invalid items

Running Processes
wltrysvc.exe : C:\WINDOWS\system32\wltrysvc.exe
bcmwltry.exe [Broadcom Corporation] : C:\WINDOWS\system32\bcmwltry.exe
LEXBCES.EXE [Lexmark International, Inc.] : C:\WINDOWS\system32\LEXBCES.EXE
LEXPPS.EXE [Lexmark International, Inc.] : C:\WINDOWS\system32\LEXPPS.EXE
xcommsvr.exe [BitDefender] : C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
livesrv.exe [BitDefender SRL] : C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
vsserv.exe [BitDefender S.R.L.] : C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
WLTRAY.exe [Broadcom Corporation] : C:\WINDOWS\system32\WLTRAY.exe
LaunchAp.exe : C:\Program Files\Launch Manager\LaunchAp.exe
PowerKey.exe : C:\Program Files\Launch Manager\PowerKey.exe
HotkeyApp.exe [Wistron] : C:\Program Files\Launch Manager\HotkeyApp.exe
OSDCtrl.exe : C:\Program Files\Launch Manager\OSDCtrl.exe
Wbutton.exe : C:\Program Files\Launch Manager\Wbutton.exe
PCMService.exe [CyberLink Corp.] : C:\Program Files\Arcade\PCMService.exe
apdproxy.exe [Adobe Systems Incorporated] : C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
OrderReminder.exe [Hewlett-Packard] : C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
bdagent.exe [BitDefender S.R.L.] : C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
pdfSaver3.exe [Tracker Software Products Ltd.] : C:\Program Files\utilitaires\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe
Monitor.exe [acer Inc.] : C:\Program Files\acer\eRecovery\Monitor.exe
rapimgr.exe [Microsoft Corporation] : C:\Program Files\Microsoft ActiveSync\rapimgr.exe

Internet Settings
R - HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar = http://www.google.com/ie
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
R - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain =
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName =

Toolbars
03 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - [Bitdefender] : C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll

StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, pdfSaver3 : [Tracker Software Products Ltd.] : C:\Program Files\utilitaires\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, preload : [Wistron] : C:\WINDOWS\RUNXMLPL.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Broadcom Wireless Manager UI : [Broadcom Corporation] : C:\WINDOWS\system32\WLTRAY.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, LaunchAp : : C:\Program Files\Launch Manager\LaunchAp.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PowerKey : : C:\Program Files\Launch Manager\PowerKey.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, LManager : [Wistron] : C:\Program Files\Launch Manager\HotkeyApp.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CtrlVol : [Wistron] : C:\Program Files\LAUNCH MANAGER\CTRLVOL.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, LMgrOSD : : C:\Program Files\Launch Manager\OSDCtrl.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Wbutton : : C:\Program Files\Launch Manager\Wbutton.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, PCMService : [CyberLink Corp.] : C:\Program Files\Arcade\PCMService.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, eRecoveryService : [acer Inc.] : C:\WINDOWS\system32\Check.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Adobe Photo Downloader : [Adobe Systems Incorporated] : C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, OrderReminder : [Hewlett-Packard] : C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, Adobe Reader Speed Launcher : [Adobe Systems Incorporated] : C:\Program Files\ADOBE\READER 8.0\READER\READER_SL.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BitDefender Antiphishing Helper : [BitDefender] : C:\Program Files\BITDEFENDER\BITDEFENDER 2008\IESHOW.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, BDAgent : [BitDefender S.R.L.] : C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
04 - Startup: %STARTUPALL%\AutoCAD Startup Accelerator.lnk [Autodesk, Inc] : C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe

Shell Extensions
- {2F603045-309F-11CF-9774-0020AFD0CFF6} - [Synaptics, Inc.] : C:\Program Files\Synaptics\SynTP\SynTPCpl.dll
WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} - : C:\Program Files\utilitaires\winrar\rarext.dll
Appareil mobile - {49BF5420-FA7F-11cf-8011-00A0C90A8F78} - [Microsoft Corporation] : C:\Program Files\Microsoft ActiveSync\Wcesview.dll
BDMenu Class - {D653647D-D607-4DF6-A5B8-48D2BA195F7B} - [BitDefender S.R.L] : C:\Program Files\BitDefender\BitDefender 2008\bdshelxt.dll
AcSignIcon - {36A21736-36C2-4C11-8ACB-D4136F2B57BD} - [Autodesk] : C:\WINDOWS\system32\AcSignIcon.dll
ACTHUMBNAIL - {AC1DB655-4F9A-4c39-8AD2-A65324A4C446} - [Autodesk] : C:\Program Files\Fichiers communs\Autodesk Shared\Thumbnail\AcThumbnail16.dll
ACDWFTHMBPRXY - {6DEA92E9-8682-4b6a-97DE-354772FE5727} - [Autodesk] : C:\Program Files\Fichiers communs\Autodesk Shared\Thumbnail\AcDwfThmbPrxy16.dll

Shell Extecute Hooks
Microsoft AntiMalware ShellExecuteHook - {{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}} - [Microsoft Corporation] : C:\Program Files\Windows Defender\MpShHook.dll

Services
23 - [Meetinghouse Data Communications] : C:\WINDOWS\system32\DRIVERS\AegisP.sys
23 - [Realtek Semiconductor Corp.] : C:\WINDOWS\system32\drivers\ALCXWDM.SYS
23 - [Broadcom Corporation] : C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
23 - [BitDefender SRL] : C:\WINDOWS\system32\DRIVERS\bdfndisf.sys
23 - [BitDefender S.R.L. Bucharest, ROMANIA] : C:\WINDOWS\system32\drivers\bdfsfltr.sys
23 - [BitDefender SRL] : C:\Program Files\Fichiers communs\BitDefender\BitDefender Firewall\bdftdif.sys
23 - [BitDefender S.R.L.] : C:\Program Files\BitDefender\BitDefender 2008\bdselfpr.sys
23 - [Schneider Automation] : C:\WINDOWS\system32\Drivers\DuntlwNT.sys
23 - [Aladdin Knowledge Systems] : C:\WINDOWS\system32\drivers\hardlock.sys
23 - [Aladdin Knowledge Systems] : C:\WINDOWS\system32\drivers\Haspnt.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
23 - : C:\Program Files\acer\eRecovery\int15.sys
23 - [Lexmark International, Inc.] : C:\WINDOWS\system32\LEXBCES.EXE
23 - [BitDefender SRL] : C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
23 - [National Semiconductor Corporation] : C:\WINDOWS\system32\DRIVERS\nscirda.sys
23 - [NewTech Infosystems, Inc.] : C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys
23 - [Avocent/OSA Technologies Inc.] : C:\WINDOWS\system32\drivers\osaio.sys
23 - [Windows (R) 2000 DDK provider] : C:\WINDOWS\system32\drivers\osanbm.sys
23 - : C:\Program Files\Launch Manager\POWERKEY.sys
23 - [Realtek Semiconductor Corporation] : C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
23 - [Synaptics, Inc.] : C:\WINDOWS\system32\DRIVERS\SynTP.sys
23 - [Texas Instruments] : C:\WINDOWS\system32\drivers\tifm21.sys
23 - [Promise Technology, Inc.] : C:\WINDOWS\system32\DRIVERS\ultra.sys
23 - [BitDefender S.R.L.] : C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
23 - [Conexant Systems, Inc.] : C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
23 - [BitDefender] : C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe

Winlogon Notify
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent, DLLName : [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.dll

Advanced Files Report
%SYSDIR%\Ati2evxx.dll [ATI Technologies Inc.] [ATI External Event Utility for NT, W2K and W9X] MD5=900FE173C6C92F26053DF6E9403EF3F1 SIZE=46080
%SYSDIR%\wltrysvc.exe MD5=9FBF2700968E8BDA9901201A34832143 SIZE=65536
%SYSDIR%\bcmwltry.exe [Broadcom Corporation] [Broadcom 802.11 Network Adapter Wireless Network Controller] MD5=7262F62C5C302420B9A427870FC666B9 SIZE=827499
%SYSDIR%\AegisE5.dll [Meetinghouse Data Communications] [AEGIS Client API] MD5=82519DCB6F4F0C346F393911CF892E16 SIZE=1396831
%SYSDIR%\wltrynt.dll [Broadcom Corporation] [Wireless Notification Provider] MD5=CA4C75DCCDE9DE8D737A3528DFD85FFA SIZE=81920
%SYSDIR%\LEXBCES.EXE [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=027D03D9D8AB95194A115A999E960AC0 SIZE=303104
%SYSDIR%\lexp2p32.dll [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=1C3A51A4847DF611D5C3AD16BBF8F6CB SIZE=201216
%SYSDIR%\lex2kusb.dll [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=B3548DF8DB695E8CF02EC379B2307883 SIZE=196096
%SYSDIR%\CNMLM7X.DLL [CANON INC.] [Canon IJ Printer Driver] MD5=60EA723C7AFBB3D8911E2F99EB800156 SIZE=161792
%SYSDIR%\ZLhp1018.DLL [Zenographics, Inc.] [HP LaserJet Series 1018/1020/2600] MD5=3AD786908F881329FA74C3AE64F6643C SIZE=102400
%SYSDIR%\ZLM.dll [Zenographics, Inc.] [Zenographics SuperPrint] MD5=65F8EA0D6858140BEDA30F42578EE37C SIZE=28672
%SYSDIR%\LEXLMPM.DLL [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=D4A932612C4E4A42A5227005D106C92C SIZE=192512
%SYSDIR%\LexBce.dll [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=00E2AE113DD2ED2F20A715710A255D3E SIZE=147456
%SYSDIR%\pxc25pm.dll [Tracker Software] [PDF-XChange Port Monitor] MD5=BB424A2D6E6B14BEC688B64E02DBE159 SIZE=20569
%SYSDIR%\pdfcmnnt.dll MD5=1574DD9D409F2DC45CF82C22B99164A4 SIZE=116224
%SYSDIR%\spool\PRTPROCS\W32X86\CNMPD7X.DLL [CANON INC.] [Canon IJ Printer Driver] MD5=0529116E0ACC384456710C53CBE4925B SIZE=22528
%SYSDIR%\spool\PRTPROCS\W32X86\IMFPrint.DLL [Zenographics, Inc.] [Zenographics IMFPrint] MD5=BBCE4DEB3501B71E7EB1D8AF3A35B975 SIZE=49152
%SYSDIR%\Imf32.dll [Zenographics, Inc.] [Zenographics SuperPrint] MD5=A0DF3F3AA3DC40FE160AAEFBB5187FD9 SIZE=28672
%SYSDIR%\ZTAG32.dll [Zenographics, Inc.] [Zenographics ZTag32] MD5=27B026CC7EE3B42745C3362603FBFC52 SIZE=24576
%SYSDIR%\ZSPOOL.dll [Zenographics, Inc.] [SuperPrint] MD5=FAE332DA4762C6779A3845810405924F SIZE=86016
%SYSDIR%\spool\PRTPROCS\W32X86\LXBKPP5C.dll [Inkjet Printer] MD5=C213C40D8E9F2D1AFFBD1262CD23E026 SIZE=78336
%SYSDIR%\LXBKpwr.dll [Lexmark International, Inc.] [Lexmark POR monitor] MD5=780682EE1AB47FA8A46A776800484527 SIZE=73728
%SYSDIR%\LEXPPS.EXE [Lexmark International, Inc.] [MarkVision for Windows (32 bit)] MD5=8D836E60877ED79C409712B9BE2DFC3B SIZE=174592
%COMMONFILES%\BitDefender\BitDefender Communicator\xcommsvr.exe [BitDefender] [BitDefender Communicator Server] MD5=979F6C6A2A1E31E7BCC6D5D527C98927 SIZE=86016
%COMMONFILES%\BitDefender\BitDefender Update Service\livesrv.exe [BitDefender SRL] [BitDefender 11] MD5=51D7BA9C5ACAE9B0A7874D2BC23F027E SIZE=1155072
%PROGRAMFILES%\BitDefender\BitDefender 2008\vsserv.exe [BitDefender S.R.L.] [BitDefender 11] MD5=AD16329951E6099270EA29DCD99A4FAB SIZE=1253376
%SYSDIR%\AcSignIcon.dll [Autodesk] [AcSignIcon Module] MD5=36F5F5A17FB30AC2BA269B22FF34B79F SIZE=136312
%COMMONFILES%\Autodesk Shared\AcSignCore16.dll [Autodesk] [AcSignCore Module] MD5=0F3376083A6F6AE88BC7B0C059540661 SIZE=222840
%SYSDIR%\SynTPFcs.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=8975E6A630D41CF3BE562B4EDC08F868 SIZE=69722
%PROGRAMFILES%\CyberLink\Shared Files\CLRCEngine.dll [CyberLink Corp.] [Cyberlink PowerCinema 3.0] MD5=66CD5F12357E06740951C478F34AB312 SIZE=49152
%COMMONFILES%\Adobe\Acrobat\ActiveX\PDFShell.FRA [Adobe Systems, Inc.] [Adobe PDF Shell Extension] MD5=17C964594AC92EE0B67D9EA08F8A8FD0 SIZE=311296
%SYSDIR%\SynCOM.dll [Synaptics, Inc.] [COM SDK] MD5=CA295ED9B90A3966A87CEE8ACE1C8C7D SIZE=77917
%SYSDIR%\SynTPAPI.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=321942B62DE4711281EEB1A06816704C SIZE=90202
%PROGRAMFILES%\ATI Technologies\ATI Control Panel\atipdsxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=D2864BD82262E45BE562D6321D7B88EC SIZE=258048
%PROGRAMFILES%\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.FRA [ATI Technologies, Inc.] [ATI Desktop Component] MD5=60DD10B3AF1CD7B526E7BD40BA8024C2 SIZE=159744
%PROGRAMFILES%\ATI Technologies\ATI Control Panel\atipdxxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=0F2950140940E8E009397B9DCA34C9AC SIZE=73728
%PROGRAMFILES%\Launch Manager\AlchemyXML.dll [Wistron Corporation] [AlchemyXML Dynamic Link Library] MD5=D3C4B5B8F23FE33CDEF9A9B4D518D815 SIZE=73728
%PROGRAMFILES%\Launch Manager\KBHOOK.dll [Wistron Corp.] [Keyboard Hook Dynamic Link Library] MD5=D9E85793102391CA70FC41E333B01DA9 SIZE=32768
%PROGRAMFILES%\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdboot.dll [Adobe Systems Incorporated] [Adobe Photoshop Album Starter Edition] MD5=5C0D4CEB06D41C375FD47C4492A099F2 SIZE=118784
%PROGRAMFILES%\BitDefender\BitDefender 2008\npcomm.dll [BitDefender SRL] [BitDefender v11] MD5=A718A74AF5D75649D1F3F3B5A72A7C64 SIZE=31232
%SYSDIR%\XCOMM.dll [BitDefender] [BitDefender Communicator] MD5=511E52F847EEE07B62D22182FF3C8AFD SIZE=77824
%PROGRAMFILES%\BitDefender\BitDefender 2008\bdguictl.dll [BitDefender S.R.L.] [BitDefender 11] MD5=10E9D9AF2A65EFAC1E16E7AFFAECCE44 SIZE=569344
%PROGRAMFILES%\BitDefender\BitDefender 2008\bdutils.dll [SOFTWIN S.R.L.] [BitDefender 11] MD5=1EEFC2F2C63962FD5A1CE0809D8DC656 SIZE=77824
%PROGRAMFILES%\BitDefender\BitDefender 2008\txmlx.dll [SOFTWIN S.R.L.] MD5=B03C3745E1EAC0EFF56154F337045471 SIZE=90112
%PROGRAMFILES%\BitDefender\BitDefender 2008\WSLib.dll [BitDefender S.R.L. http://www.bitdefender.com] [BitDefender Products] MD5=FAE094C34D75292E49AE76CC7FB3360D SIZE=573440
%PROGRAMFILES%\BitDefender\BitDefender 2008\NAG.dll [BITDEFENDER S.R.L.] [BitDefender 10] MD5=8B6E23730953F2D173A60C165BC683D8 SIZE=45056
%PROGRAMFILES%\BitDefender\BitDefender 2008\bdch.dll [BitDefender S.R.L.] [BitDefender 11] MD5=CF56905FD971C96D5A6C9DEC57E93094 SIZE=16384
%PROGRAMFILES%\BitDefender\BitDefender 2008\bdoe.dll [BitDefender S.R.L.] [Bitdefender 2008] MD5=DFDE227291A42A779652BD5A7F5BAB93 SIZE=147456
%PROGRAMFILES%\BitDefender\BitDefender 2008\popup.dll [BitDefender S.R.L.] [BitDefender 11] MD5=CE935429C6B07259AE9C6220C973BA30 SIZE=286720
%PROGRAMFILES%\BitDefender\BitDefender 2008\libexpatw.dll MD5=63783280C9D59FE4A7C0936E593C2F1C SIZE=196608
%PROGRAMFILES%\Microsoft ActiveSync\rapiproxystub.dll MD5=DE1D45D0C52AA33147B3C42E08F9FA4E SIZE=17704
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\dscrt30.dll [Tracker Software Products Ltd.] [Run-Time Library] MD5=B16829520C9533F5CED0ED632701C6E7 SIZE=86016
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\ixclib30.dll [Tracker Software Products] [Image-XChange] MD5=CAC1BE4ED1A337D8A8704E30203742AB SIZE=356352
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\xccdx30.dll [Tracker Software Products] [Tracker Software Products Codecs Library] MD5=FCA2C9933B6416AD9C5EDD8FCA3F73F3 SIZE=430080
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\PXCLIB30.DLL [Tracker Software Products] [Tracker Software Products PDF-XChange Library] MD5=902C24FBB25ECCAA072D1D257364650C SIZE=405504
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\fm30base.dll [Tracker Software Products Ltd.] [Image-XChange] MD5=47FF205758540CCB772C191D4604473A SIZE=139264
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\Fm30Tiff.dll [Tracker Software] [Image-XChange] MD5=EEF97ABD8B9F0075BCFEBDFEC94B92F5 SIZE=73728
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\fm30xmf.dll MD5=BACB07B4A08D25E6AF4971C6969E63CF SIZE=8192
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\xcloc30.dll [Tracker Software Products Ltd.] [XChange] MD5=A3D1F4DB67A498A6AE51E3CDE490C8CE SIZE=17408
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\xcpro30.dll [Tracker Software Products] [Tracker Software Products PDFxcPro Library] MD5=3E089D4225491854649149E8F7E29173 SIZE=122880
%PROGRAMFILES%\utilitaires\PDF-XChange 3 Pro\pdfSaver\xcpars30.dll [Tracker Software Products] [Tracker Software Products PDF Parser Library] MD5=433A24AF9DD89FD28EFF580F71D0A2C9 SIZE=98304
%PROGRAMFILES%\acer\eRecovery\Monitor.exe [acer Inc.] [eRecovery] MD5=4C24995185888CC680E8E9FB6AE97C11 SIZE=360448
%PROGRAMFILES%\acer\eRecovery\Cdrw32.dll [NewTech Infosystems, Inc.] [NTI CD-Writing SDK] MD5=98AB3F31572DF3BE83281B1919B87924 SIZE=192512
%PROGRAMFILES%\acer\eRecovery\CdrMmc32.dll [NewTech Infosystems, Inc.] [NTI CD-Writing SDK] MD5=413411AC9BDE294B5C559DB651BA7C46 SIZE=151552
%PROGRAMFILES%\acer\eRecovery\CdrwEx32.dll [NewTech Infosystems, Inc.] [NTI CD-Writing SDK Library] MD5=52E10FD0F943F4DD4458EE88CDB2708A SIZE=61440
%PROGRAMFILES%\acer\eRecovery\ImagFile.dll [NewTech Infosystems, Inc.] [NTI CD-Writing SDK Library] MD5=B814BA8792B86A68C7E3FEC698FEC489 SIZE=14848
%PROGRAMFILES%\acer\eRecovery\Data32.dll [NewTech Infosystems, Inc.] [NTI CD-Writing SDK Library] MD5=D231A818FE2F2B236F33A2D0FAA10BE1 SIZE=139264
%PROGRAMFILES%\acer\eRecovery\DataEx32.dll [NewTech Infosystems, Inc.] [NTI CD-Writing SDK Library] MD5=2648439B1E62E3DD9AB616485D1379BE SIZE=57344
%PROGRAMFILES%\acer\eRecovery\cximage.dll [Pizzolato Davide - www.xdp.it] [cximage] MD5=E0FA3277DF47782DA4F4F52C89915ED6 SIZE=786432
%PROGRAMFILES%\acer\eRecovery\extResource.dll [acer] [eTech] MD5=540A2B353EAEF4C7CAE96C2F08029404 SIZE=65536
%PROGRAMFILES%\acer\eRecovery\NtiAspi.dll [NewTech Infosystems, Inc.] [NTI CD-Writing SDK] MD5=8B578DBB81241EC35A34862ACD29CEA0 SIZE=49152
%PROGRAMFILES%\Microsoft ActiveSync\rapimgr.exe [Microsoft Corporation] [Microsoft ActiveSync] MD5=421729CED68440B48C9B15F97F29B239 SIZE=187176
%COMMONFILES%\Autodesk Shared\acstart16.exe [Autodesk, Inc] [AutoCAD] MD5=9CBDBAF045D9572E3297E030820A21C1 SIZE=10872
deskpan.dll
%PROGRAMFILES%\Synaptics\SynTP\SynTPCpl.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=34A198BBA90D9E83EF5AF7EA43BDCF4F SIZE=5947482
%PROGRAMFILES%\utilitaires\winrar\rarext.dll MD5=3B42317C8A22B82B04BF8C4E13B27CF0 SIZE=125440
%PROGRAMFILES%\Microsoft ActiveSync\Wcesview.dll [Microsoft Corporation] [Microsoft ActiveSync] MD5=A2664E2FA2CD7A3911C1B24FE4A809F9 SIZE=252712
%PROGRAMFILES%\BitDefender\BitDefender 2008\bdshelxt.dll [BitDefender S.R.L] [BDShellExt Module] MD5=F2B74F55DDF5155877C211F90C75B6D3 SIZE=155648
%COMMONFILES%\Autodesk Shared\Thumbnail\AcThumbnail16.dll [Autodesk] [AcThumbnail Module] MD5=986FD82B89FC59884FAA41E228F70649 SIZE=53880
%COMMONFILES%\Autodesk Shared\Thumbnail\AcDwfThmbPrxy16.dll [Autodesk] [AcThumbnail Module] MD5=D9D8AD99496EBCE9CA760ADAC0F6CBC5 SIZE=39032
%PROGRAMFILES%\Windows Defender\MpShHook.dll [Microsoft Corporation] [Windows Defender] MD5=F9D82B82F1B7C0B2D2606A987073F58C SIZE=83224
%SYSDIR%\DRIVERS\AegisP.sys [Meetinghouse Data Communications] [AEGIS Client 3.2.0.3] MD5=2C5C22990156A1063E19AD162191DC1D SIZE=17801
%SYSDIR%\drivers\ALCXWDM.SYS [Realtek Semiconductor Corp.] [Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab)] MD5=5DAE13401E4D3B8F132BF5867447D661 SIZE=2311680
%SYSDIR%\svchost.exe -k netsvcs
%SYSDIR%\DRIVERS\bcmwl5.sys [Broadcom Corporation] [Broadcom 802.11 Network Adapter wireless driver] MD5=38CA1443660D0F5F06887C6A2E692AEB SIZE=369024
%SYSDIR%\DRIVERS\bdfndisf.sys [BitDefender SRL] [BitDefender 11] MD5=3E2A2B4D7F4E1CBA53BC0762CF85C422 SIZE=86792
%SYSDIR%\drivers\bdfsfltr.sys [BitDefender S.R.L. Bucharest, ROMANIA] [BitDefender® AntiVirus] MD5=7118D3DDAE7D01FFE459A2E9788D8B08 SIZE=196368
%COMMONFILES%\BitDefender\BitDefender Firewall\bdftdif.sys [BitDefender SRL] [BitDefender 11] MD5=1E0CE61748A8A193CAE16415952DAA65 SIZE=156688
%PROGRAMFILES%\BitDefender\BitDefender 2008\bdselfpr.sys [BitDefender S.R.L.] [BitDefender] MD5=69A26CA6A374A63AFC716B2A86A089EF SIZE=8320
%SYSDIR%\svchost -k DcomLaunch
%SYSDIR%\svchost.exe -k NetworkService
%SYSDIR%\Drivers\DuntlwNT.sys [Schneider Automation] [Unitelway Protocol Driver] MD5=022F5A936DC823536123CB5FE0338E2A SIZE=54016
%SYSDIR%\drivers\hardlock.sys [Aladdin Knowledge Systems] [Hardlock Device Driver for Windows NT] MD5=57B831C0CD8E0DAC47E58A4085CA531A SIZE=416256
%SYSDIR%\drivers\Haspnt.sys [Aladdin Knowledge Systems] [Windows NT HASP Kernel Device Driver] MD5=784E06905391774D88D5D52ADB37F19E SIZE=47616
%SYSDIR%\DRIVERS\HSFHWATI.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=13D4B70BF2F9BC550E9079DA864D3EC1 SIZE=200192
%SYSDIR%\DRIVERS\HSF_DP.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=DFA8F86C0DBCA7DB948043AA3BE6793B SIZE=1038208
%SYSDIR%\svchost.exe -k HTTPFilter
%PROGRAMFILES%\acer\eRecovery\int15.sys MD5=4D8D5B1C895EA0F2A721B98A7CE198F1 SIZE=69632
%SYSDIR%\svchost.exe -k LocalService
%SYSDIR%\DRIVERS\nscirda.sys [National Semiconductor Corporation] [NSC Fast Infrared Driver.] MD5=6216798D29C3BA9D0D6F40BBBAB694A5 SIZE=28672
%SYSDIR%\DRIVERS\NTIDrvr.sys [NewTech Infosystems, Inc.] MD5=7F1C1F78D709C4A54CBB46EDE7E0B48D SIZE=6144
%SYSDIR%\drivers\osaio.sys [Avocent/OSA Technologies Inc.] [Windows (R) Server 2003 DDK driver] MD5=B270A30AE97524E7EDB5ECA7B2AFB846 SIZE=8704
%SYSDIR%\drivers\osanbm.sys [Windows (R) 2000 DDK provider] [OSA int15 Driver] MD5=3245BEE5176697FAF0744A2E1288DC77 SIZE=4010
%PROGRAMFILES%\Launch Manager\POWERKEY.sys MD5=582099B89753BDC29DB151E73C3FD4D9 SIZE=2343
%SYSDIR%\svchost -k rpcss
%SYSDIR%\DRIVERS\Rtlnicxp.sys [Realtek Semiconductor Corporation] [Realtek RTL8139/810x/8169/8110 all in one NDIS Driver] MD5=4A0AE7891FCF74ACC848B109294CB80F SIZE=70912
%SYSDIR%\svchost.exe -kbdx
%SYSDIR%\svchost.exe -k imgsvc
%SYSDIR%\DRIVERS\SynTP.sys [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=1A8E6B04907687A8EED75C8031B679FD SIZE=185824
%SYSDIR%\drivers\tifm21.sys [Texas Instruments] [Texas Instruments PCIxx21 PCIxx12 FlashMedia] MD5=467FF7FB078DCEC24C3F4DB602190E3D SIZE=146304
%SYSDIR%\DRIVERS\ultra.sys [Promise Technology, Inc.] [Gestionnaire de miniport ULTRA66 de Promise pour Windows NT] MD5=1B698A51CD528D8DA4FFAED66DFC51B9 SIZE=36736
%SYSDIR%\DRIVERS\HSF_CNXT.sys [Conexant Systems, Inc.] [SoftK56 Modem Driver] MD5=473EE64C368CE2EED110376C11960259 SIZE=703232
%SYSDIR%\wltrysvc.exe C:\WINDOWS\System32\bcmwltry.exe

End of Report

******************************

***********************************

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:27:45, on 22/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\utilitaires\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\test&.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch Manager\PowerKey.exe"
O4 - HKLM\..\Run: [LManager] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\utilitaires\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{17DB949F-1C5E-4DD3-A63D-9DAFAEDD2B7D}: NameServer = 192.168.23.15
O17 - HKLM\System\CCS\Services\Tcpip\..\{30863C16-F1C1-48C0-8226-5E8DCB7771F8}: NameServer = 192.168.23.15
O23 - Service: Notebook Manager Service (anbmService) - Unknown owner - C:\Acer\eManager\anbmServ.exe (file missing)
O23 - Service: Harmony - Rockwell Software Inc. - C:\PROGRA~1\ROCKWE~1\RSCommon\RSOBSERV.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: OpcEnum - Unknown owner - C:\WINDOWS\system32\OPCENUM.EXE
O23 - Service: RSLinx - Rockwell Software, Inc. - c:\PROGRA~1\TECHNI~1\ROCKWE~1\rslinks\fra\RSLINX.EXE
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe

--
End of file - 8285 bytes

Bonjour Catjulie, et bienvenue sur PCA Sécurité

... Pas d'infection visible dans ces deux rapports

-1- Publie le rapport de Malwarebytes

-2- Déconnecte toi du Web
Ferme toutes les applications : IE, Firefox, Outlook
Lance HijackThis pour un " do a system scan only "
Coche les lignes ci dessous :

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe => Microsoft®NT CTF Loader
O4 - HKCU\..\Run: [pdfSaver3] "C:\Program Files\utilitaires\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

Clique en bas sur " Fix checked "

-3- Fait ce scan en ligne : http://www.bitdefender.fr/
Pas d'installation, mais juste utiliser la fonction : scanner

Tuto en image : http://forum.pcastuces.com/bitdefender_online_scanner___tutoriel-f31s2.htm

Reviens dans ta réponse avec les deux rapports demandés / STP
A te lire, bonne réception

Ok, merci à toi d'avoir pris mon appel en compte.

voici les rapports Malwarebytes et Bitdefender en ligne. ... Comme tu peus le voir, des deux cotés, rien à signaler. Serait ce une corruption accidentelle du système? ou une sale bête très bien cachée ?

Il faut préciser sans doute que j'ai découvert le dysfonctionnement de sans échec et msconfig après avoir constaté de gros problèmes (plantage complet) lors de la tentative d'installation d'un logiciel technique, avec installation de drivers de communication spécifiques (Unitelway). Ce même logiciel ayant ensuite été installé sans aucun problème sur une autre machine XP.

Bonne réception

********** rapport Malwarebytes *********

Malwarebytes' Anti-Malware 1.22
Database version: 973
Windows 5.1.2600 Service Pack 2

08:48:14 23/07/2008
mbam-log-7-23-2008 (08-48-14).txt

Scan type: Full Scan (C:\|)
Objects scanned: 110872
Time elapsed: 40 minute(s), 17 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

********** Rapport Bitdefender **********

Bonjour Catjulie

Il faut préciser sans doute que j'ai découvert le dysfonctionnement de sans échec et msconfig après avoir constaté de gros problèmes (plantage complet) lors de la tentative d'installation d'un logiciel technique, avec installation de drivers de communication spécifiques (Unitelway). Ce même logiciel ayant ensuite été installé sans aucun problème sur une autre machine XP.

...Visiblement pas d'infection sur cette machine
Je pense à une incompatibilité matériel entre le drivers Unitelway, et la configuration de la machine !!
J'ai fais des recherches sur Google, et il y a pleins d'exemples de disfonctionnement ( en anglais )

... Là s'arrète mes compétances
Demande à la modération de PCA, de déplacer ton sujet dans :
- Les mains dans le cambouis, en cliquand sur le petit triangle jaune en haut de ton premier poste

Bonne continuation / Cordialement

une aide acer ici

Merci encore d'avoir consacré du temps à mon problème evasion60.

Je vais pousser plus loin ce doute de compatibilité.

Bonne contination à toi

Meilleures salutations.