Bonjour,
voici mon scan combofix , mon ordinateur est-il tout propre? merci


ComboFix 09-02-21.01 - HP_Administrateur 2009-02-23 15:43:03.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1022.605 [GMT -5:00]
Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)
FW: Online Armor Firewall *enabled*
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Exécution préalable -------
.
c:\windows\system32\drivers\npf.sys
c:\windows\system32\Packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\WanPacket.dll
c:\windows\system32\wpcap.dll

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NPF
-------\Service_NPF


((((((((((((((((((((((((((((( Fichiers créés du 2009-01-23 au 2009-02-23 ))))))))))))))))))))))))))))))))))))
.

2009-02-23 15:38 . 2009-02-23 15:38 <REP> d-------- c:\windows\LastGood
2009-02-23 15:02 . 2008-12-19 10:25 360,448 --a------ c:\windows\system32\drivers\krnl_akl.sys
2009-02-22 21:53 . 2009-02-22 21:53 34,760 --a------ c:\windows\system32\drivers\Partizan.sys
2009-02-22 21:53 . 2009-02-22 21:53 32,480 --a------ c:\windows\system32\Partizan.exe
2009-02-21 16:05 . 2009-02-21 16:05 579,584 --a------ c:\windows\system32\dllcache\user32.dll
2009-02-20 02:08 . 2009-02-20 02:08 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\OnlineArmor
2009-02-20 02:08 . 2009-02-20 02:29 <REP> d-------- c:\documents and settings\All Users\Application Data\OnlineArmor
2009-02-20 02:07 . 2009-02-19 07:55 190,664 --a------ c:\windows\system32\drivers\OADriver.sys
2009-02-20 02:07 . 2009-02-19 07:55 29,384 --a------ c:\windows\system32\drivers\OAmon.sys
2009-02-20 02:07 . 2009-02-19 08:34 28,872 --a------ c:\windows\system32\drivers\OAnet.sys
2009-02-12 00:17 . 2006-06-29 13:07 14,048 --------- c:\windows\system32\spmsg2.dll
2009-02-12 00:09 . 2009-02-12 00:17 <REP> d-------- c:\windows\system32\XPSViewer
2009-02-12 00:08 . 2009-02-12 00:08 <REP> d-------- c:\program files\Reference Assemblies
2009-02-12 00:08 . 2009-02-12 00:08 <REP> d-------- c:\program files\MSBuild
2009-02-12 00:07 . 2009-02-12 09:24 <REP> d-------- c:\windows\SxsCaPendDel
2009-02-12 00:07 . 2008-07-06 07:06 1,676,288 --------- c:\windows\system32\xpssvcs.dll
2009-02-12 00:07 . 2008-07-06 07:06 1,676,288 --------- c:\windows\system32\dllcache\xpssvcs.dll
2009-02-12 00:07 . 2008-07-06 05:50 597,504 --------- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-02-12 00:07 . 2008-07-06 07:06 575,488 --------- c:\windows\system32\xpsshhdr.dll
2009-02-12 00:07 . 2008-07-06 07:06 575,488 --------- c:\windows\system32\dllcache\xpsshhdr.dll
2009-02-12 00:07 . 2008-07-06 07:06 117,760 --------- c:\windows\system32\prntvpt.dll
2009-02-12 00:07 . 2008-07-06 07:06 89,088 --------- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-02-10 23:45 . 2009-02-19 18:25 <REP> d-------- c:\program files\Spyware Terminator
2009-02-10 23:45 . 2009-02-23 13:30 <REP> d-------- c:\documents and settings\HP_Administrateur\Application Data\Spyware Terminator
2009-02-10 23:45 . 2009-02-23 13:30 <REP> d-------- c:\documents and settings\All Users\Application Data\Spyware Terminator
2009-02-10 23:45 . 2009-02-10 23:45 142,592 --a------ c:\windows\system32\drivers\sp_rsdrv2.sys
2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\system32\sirenacm.dll
2009-02-03 23:04 . 2009-02-03 23:05 73,728 --a------ c:\windows\system32\javacpl.cpl
2009-02-01 11:52 . 2009-02-01 12:03 <REP> d-------- c:\windows\system32\NtmsData
2009-01-31 12:34 . 2009-01-31 12:34 <REP> d-------- c:\documents and settings\All Users\Application Data\ATI

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-23 18:31 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-02-23 18:31 --------- d-----w c:\program files\SpywareBlaster
2009-02-23 13:43 --------- d-----w c:\program files\Real
2009-02-23 13:43 --------- d-----w c:\program files\Fichiers communs\Real
2009-02-23 03:56 --------- d-----w c:\program files\Steam
2009-02-23 03:54 --------- d-----w c:\program files\Warcraft III
2009-02-22 21:41 --------- d-----w c:\program files\Trend Micro
2009-02-20 07:07 --------- d-----w c:\program files\Tall Emu
2009-02-17 04:45 --------- d-----w c:\documents and settings\All Users\Application Data\SystemExplorer
2009-02-14 16:01 --------- d-----w c:\program files\DivX
2009-02-14 16:00 499,712 ----a-w c:\windows\system32\msvcp71.dll
2009-02-14 16:00 348,160 ----a-w c:\windows\system32\msvcr71.dll
2009-02-12 20:24 --------- d-----w c:\documents and settings\HP_Administrateur\Application Data\LimeWire
2009-02-12 17:38 --------- d-----w c:\program files\PokerStars
2009-02-11 20:50 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-02-11 15:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 15:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-02-09 02:20 --------- d-----w c:\program files\System Explorer
2009-02-04 04:05 410,984 ----a-w c:\windows\system32\deploytk.dll
2009-02-04 04:04 --------- d-----w c:\program files\Java
2009-02-04 03:05 --------- d-----w c:\program files\ATI
2009-01-30 17:31 --------- d-----w c:\program files\ATI Technologies
2009-01-30 17:26 --------- d-----w c:\program files\LimeWire
2009-01-17 02:15 3,594,752 ------w c:\windows\system32\dllcache\mshtml.dll
2009-01-14 07:14 3,455,488 ----a-w c:\windows\system32\drivers\ati2mtag.sys
2009-01-14 07:14 3,455,488 ----a-w c:\windows\system32\dllcache\ati2mtag.sys
2009-01-14 05:46 11,591,680 ----a-w c:\windows\system32\atioglxx.dll
2009-01-14 04:53 286,720 ----a-w c:\windows\system32\atiok3x2.dll
2009-01-14 04:49 425,984 ----a-w c:\windows\system32\ATIDEMGX.dll
2009-01-14 04:47 323,584 ----a-w c:\windows\system32\ati2dvag.dll
2009-01-14 04:36 26,112 ----a-w c:\windows\system32\Ati2mdxx.exe
2009-01-14 04:36 196,608 ----a-w c:\windows\system32\atipdlxx.dll
2009-01-14 04:36 151,552 ----a-w c:\windows\system32\Oemdspif.dll
2009-01-14 04:35 43,520 ----a-w c:\windows\system32\ati2edxx.dll
2009-01-14 04:35 155,648 ----a-w c:\windows\system32\ati2evxx.dll
2009-01-14 04:34 598,016 ----a-w c:\windows\system32\ati2evxx.exe
2009-01-14 04:32 53,248 ----a-w c:\windows\system32\ATIDDC.DLL
2009-01-14 04:22 4,009,152 ----a-w c:\windows\system32\ati3duag.dll
2009-01-14 04:05 2,500,224 ----a-w c:\windows\system32\ativvaxx.dll
2009-01-14 03:50 48,640 ----a-w c:\windows\system32\amdpcom32.dll
2009-01-14 03:45 401,408 ----a-w c:\windows\system32\atikvmag.dll
2009-01-14 03:44 17,408 ----a-w c:\windows\system32\atitvo32.dll
2009-01-14 03:44 110,592 ----a-w c:\windows\system32\atiadlxx.dll
2009-01-14 03:43 53,248 ----a-w c:\windows\system32\drivers\ati2erec.dll
2009-01-14 03:37 577,536 ----a-w c:\windows\system32\ati2cqag.dll
2009-01-14 03:37 307,200 ----a-w c:\windows\system32\atiiiexx.dll
2009-01-14 02:36 45,056 ----a-w c:\windows\system32\amdcalrt.dll
2009-01-14 02:36 45,056 ----a-w c:\windows\system32\amdcalcl.dll
2009-01-14 02:34 3,227,648 ----a-w c:\windows\system32\Amdcaldd.dll
2009-01-14 02:05 593,920 ------w c:\windows\system32\ati2sgag.exe
2009-01-09 15:48 --------- d-----w c:\program files\Microsoft
2009-01-09 15:47 --------- d-----w c:\program files\Windows Live
2009-01-09 15:45 --------- d-----w c:\program files\Fichiers communs\Windows Live
2008-12-25 15:53 --------- d-----w c:\program files\CCleaner
2008-12-24 18:45 717,296 ----a-w c:\windows\system32\drivers\sptd.sys
2008-12-20 22:47 826,368 ----a-w c:\windows\system32\wininet.dll
2008-12-20 22:47 826,368 ------w c:\windows\system32\dllcache\wininet.dll
2008-12-20 22:47 671,232 ------w c:\windows\system32\dllcache\mstime.dll
2008-12-20 22:47 477,696 ------w c:\windows\system32\dllcache\mshtmled.dll
2008-12-20 22:47 44,544 ------w c:\windows\system32\dllcache\pngfilt.dll
2008-12-20 22:47 233,472 ------w c:\windows\system32\dllcache\webcheck.dll
2008-12-20 22:47 193,024 ------w c:\windows\system32\dllcache\msrating.dll
2008-12-20 22:47 105,984 ------w c:\windows\system32\dllcache\url.dll
2008-12-20 22:47 102,912 ------w c:\windows\system32\dllcache\occache.dll
2008-12-20 22:47 1,160,192 ------w c:\windows\system32\dllcache\urlmon.dll
2008-12-19 09:11 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-12-19 09:10 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
2008-12-19 05:25 634,024 ------w c:\windows\system32\dllcache\iexplore.exe
2008-12-19 05:23 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys
2008-12-11 00:33 86,016 ----a-w c:\windows\system32\dpl100.dll
2008-12-11 00:33 200,704 ----a-w c:\windows\system32\dtu100.dll
2008-12-09 02:28 593,920 ----a-w c:\windows\system32\dpuGUI11.dll
2008-12-09 02:28 57,344 ----a-w c:\windows\system32\dpv11.dll
2008-12-09 02:28 344,064 ----a-w c:\windows\system32\dpus11.dll
2008-12-09 02:28 294,912 ----a-w c:\windows\system32\dpu11.dll
2008-05-13 23:45 357,768 ----a-w c:\documents and settings\HP_Administrateur\SymXPep2.dll
2008-08-28 19:54 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008082820080829\index.dat
2008-08-28 19:54 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
"SystemExplorer"="c:\program files\System Explorer\SystemExplorer.exe" [2008-08-23 1833472]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-17 266497]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2008-06-10 1442888]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-03 148888]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2009-02-17 2233856]
"@OnlineArmor GUI"="c:\program files\Tall Emu\Online Armor\oaui.exe" [2009-02-19 2009800]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Exif Launcher 2.lnk - c:\program files\FinePixViewer\QuickDCF2.exe [2008-08-26 294912]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"88F0C6B1"=3 (0x3)
"3636B106"=3 (0x3)
"SharedAccess"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\Updates from HP\\9972322\\Program\\Updates from HP.exe"=
"c:\\WINDOWS\\system32\\ftp.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 krnl_akl;krnl_akl;c:\windows\system32\drivers\krnl_akl.sys [2009-02-23 360448]
R1 OADevice;OADriver;c:\windows\system32\drivers\OADriver.sys [2009-02-20 190664]
R1 OAmon;OAmon;c:\windows\system32\drivers\OAmon.sys [2009-02-20 29384]
R1 OAnet;OAnet;c:\windows\system32\drivers\OAnet.sys [2009-02-20 28872]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2009-02-10 142592]
R2 OAcat;Online Armor Helper Service;c:\program files\Tall Emu\Online Armor\oacat.exe [2009-02-20 495304]
S2 akl_svc;Anti-keylogger Service;c:\windows\system32\akl_svc.exe --> c:\windows\system32\akl_svc.exe [?]
S2 SvcOnlineArmor;Online Armor;c:\program files\Tall Emu\Online Armor\oasrv.exe [2009-02-20 3093192]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe --> c:\program files\NOS\bin\getPlus_HelperSvc.exe [?]
S3 MEMSWEEP2;MEMSWEEP2; [x]
S3 Partizan;Partizan;c:\windows\system32\drivers\Partizan.sys [2009-02-22 34760]
S3 rkhdrv40;Rootkit Unhooker Driver; [x]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{25ef40be-0f4c-11da-bf9b-806d6172696f}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
.
Contenu du dossier 'Tâches planifiées'

2008-12-06 c:\windows\Tasks\Microsoft_Hardware_Launch_IType_exe.job
- c:\program files\Microsoft IntelliType Pro\itype.exe [2008-06-10 12:56]
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://www.google.com
FF - ProfilePath - c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\3xh4w68v.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://go.microsoft.com/fwlink/?LinkId=69157
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-23 15:44:51
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040211900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(600)
c:\windows\system32\Ati2evxx.dll
.
Heure de fin: 2009-02-23 15:45:56
ComboFix-quarantined-files.txt 2009-02-23 20:45:54
ComboFix2.txt 2009-02-23 00:42:33

Avant-CF: 209,497,825,280 octets libres
Après-CF: 209,483,780,096 octets libres

241 --- E O F --- 2009-02-12 14:26:37

Configuration: Windows XP
Firefox 3.0.6