Bonjour,
Voici le rapport que je viens d'avoir après l'analyse de mon PC par le logiciel Combofix. Quelqu'un peut-il m'aider?
Merci. Le voici:
ComboFix 09-07-02.03 - IBM 03/07/2009 20:01.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.503.288 [GMT 1:00]
Lancé depuis: c:\documents and settings\IBM\Bureau\ComboFix.exe
AV: Norton AntiVirus *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton AntiVirus *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
c:\documents and settings\IBM\Mes documents\CLIP ART NAPO\Desktop_.ini
C:\e2.cmd
c:\windows\Installer\21a7dd.msi
c:\windows\system32\_000012_.tmp.dll
c:\windows\system32\bgotrtu0.dll
c:\windows\system32\bgotrtu1.dll
c:\windows\system32\bycool1
c:\windows\system32\bycool1\windo.exe
c:\windows\system32\kva8wr.exe
c:\windows\system32\nmdfgds0.dll
c:\windows\system32\olhrwef.exe
c:\windows\system32\uweyiwe0.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-06-03 au 2009-07-03 ))))))))))))))))))))))))))))))))))))
.

2009-07-03 17:05 . 2009-07-03 18:40 -------- d-----w- c:\windows\LastGood
2009-06-30 18:56 . 2009-06-30 18:56 -------- d-----w- c:\documents and settings\Home\Local Settings\Application Data\Conduit
2009-06-30 18:56 . 2009-06-30 18:56 -------- d-----w- c:\documents and settings\Home\Local Settings\Application Data\MyPlayCity
2009-06-12 22:20 . 2009-06-13 05:35 -------- d-----w- C:\Photo duvois

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-03 19:07 . 2009-04-02 10:02 -------- d-----w- c:\documents and settings\IBM\Application Data\Free Download Manager
2009-07-03 17:44 . 2009-04-02 10:01 -------- d-----w- c:\program files\Free Download Manager
2009-07-03 11:39 . 2000-12-31 23:16 10 -c--a-w- c:\windows\popcinfo.dat
2009-07-01 15:55 . 2009-04-17 07:28 -------- d-----w- c:\program files\Bible
2009-06-13 21:35 . 2001-01-01 00:47 -------- d-----w- c:\program files\Ephy
2009-06-13 21:19 . 2009-03-15 22:08 -------- d-----w- c:\program files\NetExpress
2009-05-15 16:00 . 2009-05-15 16:00 0 ---ha-w- c:\documents and settings\Home\hpothb07.dat
2009-05-15 15:45 . 2009-05-15 15:45 -------- d-----w- c:\documents and settings\Home\Application Data\Hewlett-Packard
2009-05-13 23:12 . 2009-03-26 20:27 -------- d-----w- c:\documents and settings\IBM\Application Data\Nokia Multimedia Player
2009-05-11 08:21 . 2009-04-25 22:38 99328 --sh--r- c:\windows\system32\uweyiwe1.dll
2009-04-25 15:55 . 2009-02-25 10:24 841112 ----a-w- c:\documents and settings\Home\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-22 21:47 . 2009-04-22 21:47 82380 -c--a-w- c:\windows\system32\drivers\AFS2K.SYS
2009-04-22 21:06 . 2009-04-22 21:06 126 -c--a-w- c:\documents and settings\IBM\Local Settings\Application Data\fusioncache.dat
2009-04-21 21:53 . 2000-12-31 23:11 841112 ----a-w- c:\documents and settings\IBM\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-06 21:26 . 2004-08-03 23:54 219648 ----a-w- c:\windows\system32\uxtheme.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}]
2009-05-12 13:01 2094104 ----a-w- c:\program files\MyPlayCity\tbMyPl.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-03 15360]
"Creative Detector"="c:\program files\Creative\MediaSource\Detector\CTDetect.exe" [2004-12-02 102400]
"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2005-09-12 1642543]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-08-04 1667584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-04-05 94208]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-04-05 77824]
"Persistence"="c:\windows\system32\igfxpers.exe" [2005-04-05 114688]
"ISUSPM Startup"="c:\program files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" [2005-08-11 249856]
"ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-08-11 81920]
"ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2008-10-17 51048]
"osCheck"="c:\program files\Norton AntiVirus\osCheck.exe" [2007-08-24 714608]
"PCSuiteTrayApplication"="c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 271360]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 57344]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-03-28 593920]
"Share-to-Web Namespace Daemon"="c:\program files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2002-04-17 69632]
"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2004-08-03 110592]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088]

c:\documents and settings\IBM\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 110592]
Webshots.lnk - c:\documents and settings\IBM\Bureau\Webshots\Launcher.exe [2002-1-1 45056]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Acrobat Assistant.lnk - c:\program files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe [2009-3-5 49254]
Adobe Gamma Loader.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 110592]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2007-8-3 394856]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=

R2 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Fichiers communs\Symantec Shared\CCSVCHST.EXE [24/08/2007 22:07 149352]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [10/03/2009 09:12 101936]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [29/05/2007 13:55 23888]
S3 td_cbus;CDMA-USB USB Device driver (WDM);c:\windows\system32\drivers\td_cbus.sys [11/03/2009 08:31 51040]
S3 td_cmdfl;CDMA-USB CDMA MODEM Filter;c:\windows\system32\drivers\td_cmdfl.sys [11/03/2009 08:31 6032]
S3 td_cmdm;CDMA-USB CDMA MODEM;c:\windows\system32\drivers\td_cmdm.sys [11/03/2009 08:31 82608]
S3 td_cserd;CDMA-USB Serial PORT;c:\windows\system32\drivers\td_cserd.sys [11/03/2009 08:31 64064]
.
Contenu du dossier 'Tâches planifiées'

2009-06-29 c:\windows\Tasks\Norton AntiVirus - Run Full System Scan - Administrateur.job
- c:\program files\Norton AntiVirus\Navw32.exe [2007-08-26 17:19]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-kvasoft - c:\windows\system32\kva8wr.exe
HKLM-Run-DRIVESYS1 - c:\windows\System32\bycool1\windo.exe


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1392740
IE: &Google Search - c:\program files\Google\googletoolbar.dll/cmsearch.html
IE: Backward &Links - c:\program files\Google\googletoolbar.dll/cmbacklinks.html
IE: Cac&hed Snapshot of Page - c:\program files\Google\googletoolbar.dll/cmcache.html
IE: Download all by Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Download by Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Download selected by Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Download web site by Free Download Manager - file://c:\program files\Free Download Manager\dlpage.htm
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Si&milar Pages - c:\program files\Google\googletoolbar.dll/cmsimilar.html
IE: Translate into English - c:\program files\Google\googletoolbar.dll/cmtrans.html
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-03 20:07
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2009-07-03 20:10
ComboFix-quarantined-files.txt 2009-07-03 19:09

Avant-CF: 3 933 462 528 octets libres
Après-CF: 15 292 919 808 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

145 --- E O F --- 2009-03-11 22:39

Configuration: Windows XP Internet Explorer 6.0