Deep scan pw stealer et generic [Résolu]

Ca fait 2 fois que je recommence et orange se déconnecte a chaque fois pendant que l'antivirus cherche à partir de 18 % QUE FAIRE !!!!

sALUT;

J'ai un soucis il me demande de redefinir combofix1 ?
eT ANTIVIR comme tu sait depuis les posts anciens on a jamais pu enlever complétement car il me l'indique dans combofix j'ai fait quand meme ok mais comment redéfinir combofix déjà ?

C'est bon ca a marcher c'est moi qui me rapellait plus comment le renommer quel c..

Voici le rapport excuse moi..

ComboFix 09-07-12.03 - Compaq_Propriétaire 13/07/2009 14:36.5.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.446.167 [GMT 2:00]
Running from: c:\documents and settings\Compaq_Propriétaire\Bureau\ComboFix1.exe
AV: Antivirus BitDefender *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Outdated) {00000000-0000-0000-0000-000000000000}
FW: Pare-feu BitDefender *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\97192026.ini
c:\documents and settings\Compaq_Propriétaire\Compaq_Propriétaire.exe
c:\windows\Installer\2e1fcc.msi

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NICSK32


((((((((((((((((((((((((( Files Created from 2009-06-13 to 2009-07-13 )))))))))))))))))))))))))))))))
.

2009-07-12 17:49 . 2009-07-12 17:50 -------- d-----w- C:\rsit
2009-07-12 10:53 . 2009-07-12 10:53 -------- d-----w- C:\GenProc
2009-07-08 17:56 . 2009-07-08 18:03 -------- d-----w- c:\documents and settings\All Users\Application Data\97192026
2009-07-07 11:45 . 2004-08-05 12:00 4224 ----a-w- c:\windows\system32\drivers\beep.sys
2009-07-07 11:45 . 2004-08-05 12:00 4224 ----a-w- c:\windows\system32\dllcache\beep.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-13 12:01 . 2007-08-18 10:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Zylom
2009-07-12 19:37 . 2009-01-27 13:36 81984 ----a-w- c:\windows\system32\bdod.bin
2009-07-12 17:50 . 2009-01-27 13:19 -------- d-----w- c:\program files\Trend Micro
2009-07-12 09:50 . 2009-01-19 13:12 -------- d-----w- c:\program files\Spyware Terminator
2009-07-11 11:46 . 2009-01-19 13:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Spyware Terminator
2009-07-09 09:00 . 2009-01-19 13:39 -------- d-----w- c:\documents and settings\MELANIE\Application Data\Spyware Terminator
2009-07-01 15:28 . 2009-01-13 20:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-01 15:27 . 2009-02-02 13:19 3561743 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-06-20 10:10 . 2007-03-24 10:10 -------- d-----w- c:\documents and settings\MELANIE\Application Data\Azureus
2009-06-17 09:27 . 2009-02-01 19:12 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-17 09:27 . 2009-02-01 19:12 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-14 15:58 . 2005-01-02 06:10 -------- d-----w- c:\program files\Easy Internet signup
2009-05-17 18:04 . 2004-11-23 21:26 469622 ----a-w- c:\windows\system32\perfh00C.dat
2009-05-17 18:04 . 2004-11-23 21:26 76136 ----a-w- c:\windows\system32\perfc00C.dat
2009-05-14 19:34 . 2007-07-28 07:25 47320 -c--a-w- c:\documents and settings\MELANIE\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-14 18:06 . 2009-05-14 17:47 -------- d-----w- c:\program files\Microsoft
2009-05-14 18:05 . 2007-12-03 16:07 -------- d-----w- c:\program files\Windows Live
2009-05-14 18:04 . 2009-05-14 18:04 -------- d-----w- c:\program files\Microsoft Sync Framework
2009-05-14 17:58 . 2009-05-14 17:58 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-05-14 17:47 . 2009-05-14 17:47 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-05-14 17:36 . 2009-05-14 17:36 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-05-07 15:33 . 2004-08-05 18:00 348672 ----a-w- c:\windows\system32\localspl.dll
2009-04-29 04:45 . 2004-08-05 18:00 827392 ----a-w- c:\windows\system32\wininet.dll
2009-04-29 04:45 . 2004-08-05 18:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-04-19 19:50 . 2004-08-05 18:00 1847296 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:53 . 2004-08-05 18:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2007-08-19 09:24 . 2007-08-19 09:24 774144 ----a-w- c:\program files\RngInterstitial.dll
2006-01-04 16:40 . 2005-12-16 14:17 278528 ----a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
2009-04-06 17:36 . 2008-10-30 16:34 49664 ----a-w- c:\program files\mozilla firefox\components\FFComm.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-02 136600]
"SystrayORAHSS"="c:\program files\Orange HSS\Systray\SystrayApp.exe" [2007-07-24 94208]
"ORAHSSSessionManager"="c:\program files\Orange HSS\SessionManager\SessionManager.exe" [2007-07-24 102400]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2009-01-19 1783808]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-04-06 778240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-04-06 69632]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Azureus\\Azureus.exe"=
"c:\\Program Files\\Orange HSS\\Connectivity\\ConnectivityManager.exe"=
"c:\\Program Files\\Sony Ericsson\\Sony Ericsson Media Manager\\MediaManager.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [19/01/2009 15:13 141312]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [06/10/2008 18:16 82696]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [14/05/2009 20:06 55152]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [18/09/2008 12:09 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [03/02/2009 18:03 104328]
R3 SG762_XP;SAGEM 802.11g XG762 1211B Driver;c:\windows\system32\drivers\WlanBZXP.sys [29/05/2008 16:11 450560]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Fichiers communs\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [17/07/2008 13:06 118784]
S3 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [06/02/2009 18:08 533360]
S3 SIS163u;SiS163 usb Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [20/06/2005 11:12 215040]
S3 ZDCndis5;ZDCndis5 Protocol Driver;\??\c:\windows\system32\ZDCndis5.SYS --> c:\windows\system32\ZDCndis5.SYS [?]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
.
Contents of the 'Scheduled Tasks' folder

2009-07-08 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 12:57]

2009-06-14 c:\windows\Tasks\Connexion facile à Internet.job
- c:\program files\Easy Internet signup\HPSdpApp.exe [2005-05-24 15:46]

2009-06-18 c:\windows\Tasks\HPCeeSchedule.job
- c:\progra~1\EASYIN~1\Ceement\HPCEE.exe [2005-06-13 16:41]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-Regedit32 - c:\windows\system32\regedit.exe


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.fr/
mWindow Title =
IE: &Traduire à partir de l'anglais - c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000
IE: Pages liées - c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
IE: Pages similaires - c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
IE: Recherche &Google - c:\program files\google\GoogleToolbar2.dll/cmsearch.html
IE: Version de la page actuelle disponible dans le cache Google - c:\program files\google\GoogleToolbar2.dll/cmcache.html
DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} - hxxp://powersoccer.jeu.fr/applet/PowerLoader.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
FF - ProfilePath - c:\documents and settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\afw2sf9v.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:fr:official
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus&tbid=60076&qkw=
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npgcplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-13 14:54
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1076)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2448)
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
c:\program files\BitDefender\BitDefender 2009\vsserv.exe
c:\windows\system32\brss01a.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\ati2evxx.exe
c:\windows\system32\wscntfy.exe
c:\program files\BitDefender\BitDefender 2009\seccenter.exe
.
**************************************************************************
.
Completion time: 2009-07-13 15:02 - machine was rebooted
ComboFix-quarantined-files.txt 2009-07-13 13:02

Pre-Run: 119 914 196 992 octets libres
Post-Run: 121 606 275 072 octets libres

184 --- E O F --- 2009-06-10 19:50

Ok tout a fait exact pour malwarebytes je fait l'analyse bidefender et le reste.

Salut.
Oui j'ai supprimer la sélection après l'analyse malwarebytes.

C'est bon j'ai plus rien ou sa peut revenir ?