Infection security tool

impossible de faire scan eset nod32 en ligne ni de hijack!!
disparition immédiate des fenetres d'execution!!

voici le rapport du combofix:

ComboFix 09-10-26.06 - valentin 28/10/2009 0:35.1.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1023.614 [GMT 1:00]
Lancé depuis: d:\documents and settings\valentin\Bureau\ComboFix.exe
AV: avast! antivirus 4.8.1356 [VPS 091027-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-1-5-21-2104364877-1078360658-3555181505-1003
c:\windows\system32\Memman.vxd
c:\windows\system32\skinboxer43.dll
d:\documents and settings\All Users\Application Data\73383832
d:\documents and settings\All Users\Application Data\73383832\73383832.exe

Une copie infectée de c:\windows\system32\drivers\atapi.sys a été trouvée et désinfectée
Copie restaurée à partir de - Kitty ate it :p
.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-27 au 2009-10-27 ))))))))))))))))))))))))))))))))))))
.

2009-10-27 23:03 . 2009-10-27 23:03 -------- d-----w- c:\program files\Trend Micro
2009-10-27 22:47 . 2009-10-27 22:53 -------- d-----w- C:\S&S
2009-10-27 22:01 . 2009-10-27 22:01 -------- d-----w- c:\program files\ESET
2009-10-27 20:54 . 2009-10-27 21:24 -------- d-----w- C:\GenProc
2009-10-19 21:40 . 2009-10-19 21:40 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2009-10-19 19:22 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-10-19 19:22 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-10-19 18:52 . 2009-10-27 22:59 -------- d-----w- d:\documents and settings\valentin\Tracing
2009-10-19 18:39 . 2009-10-19 18:39 -------- d-----w- c:\program files\Microsoft
2009-10-19 18:38 . 2009-10-19 18:38 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-10-19 18:38 . 2009-10-19 18:39 -------- d-----w- c:\program files\Windows Live
2009-10-19 18:30 . 2009-10-19 18:30 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-10-19 18:09 . 2009-09-15 10:54 52368 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-10-19 18:09 . 2009-09-15 10:54 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-10-19 18:09 . 2009-09-15 10:53 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-10-19 18:09 . 2009-09-15 10:56 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-10-19 18:09 . 2009-09-15 10:56 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-10-19 18:09 . 2009-09-15 10:55 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-10-19 18:09 . 2009-09-15 10:55 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-10-19 18:09 . 2009-09-15 10:53 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-10-19 18:09 . 2009-09-15 10:59 1279968 ----a-w- c:\windows\system32\aswBoot.exe
2009-10-19 18:09 . 2009-10-19 18:09 -------- d-----w- c:\program files\Alwil Software
2009-10-18 22:07 . 2009-10-18 22:07 -------- d-----w- d:\documents and settings\valentin\Application Data\MSNInstaller
2009-10-18 22:05 . 2009-10-18 22:05 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2009-10-18 21:58 . 2009-10-18 21:58 -------- d-----w- c:\windows\system32\fr
2009-10-18 21:58 . 2009-10-18 21:58 -------- d-----w- c:\windows\system32\bits
2009-10-18 21:58 . 2009-10-18 21:58 -------- d-----w- c:\windows\l2schemas
2009-10-18 21:53 . 2009-10-18 21:53 -------- d-----w- c:\windows\EHome
2009-10-18 12:51 . 2009-10-18 12:51 -------- d-sh--w- d:\documents and settings\valentin\IECompatCache
2009-10-18 12:48 . 2009-10-18 12:48 -------- d-sh--w- d:\documents and settings\valentin\PrivacIE
2009-10-18 12:47 . 2009-10-18 12:47 -------- d-sh--w- d:\documents and settings\valentin\IETldCache
2009-10-18 12:43 . 2009-08-29 07:56 12800 ------w- c:\windows\system32\dllcache\xpshims.dll
2009-10-18 12:43 . 2009-08-29 07:56 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll
2009-10-18 12:43 . 2009-08-29 07:56 594432 ------w- c:\windows\system32\dllcache\msfeeds.dll
2009-10-18 12:43 . 2009-08-29 07:56 1985536 ------w- c:\windows\system32\dllcache\iertutil.dll
2009-10-18 12:43 . 2009-08-29 07:56 246272 ------w- c:\windows\system32\dllcache\ieproxy.dll
2009-10-18 12:43 . 2009-08-29 07:56 11069440 ------w- c:\windows\system32\dllcache\ieframe.dll
2009-10-18 12:43 . 2009-10-18 12:43 -------- d-----w- c:\windows\ie8updates
2009-10-18 12:43 . 2009-08-07 08:48 100352 ------w- c:\windows\system32\dllcache\iecompat.dll
2009-10-18 12:42 . 2009-10-18 21:58 -------- d-----w- c:\windows\system32\fr-FR
2009-10-18 12:42 . 2009-10-18 12:43 -------- dc-h--w- c:\windows\ie8
2009-10-18 12:33 . 2004-08-03 20:29 73216 ------w- c:\windows\system32\drivers\atintuxx.sys
2009-10-17 18:15 . 2008-06-14 17:33 272768 ------w- c:\windows\system32\drivers\bthport.sys
2009-10-17 18:15 . 2008-06-14 17:33 272768 ------w- c:\windows\system32\dllcache\bthport.sys
2009-10-17 18:08 . 2009-06-21 21:47 153088 ------w- c:\windows\system32\dllcache\triedit.dll
2009-10-17 18:04 . 2008-05-08 14:02 203136 ------w- c:\windows\system32\dllcache\rmcast.sys
2009-10-17 18:04 . 2008-10-24 11:21 455296 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2009-10-17 18:04 . 2008-12-11 10:57 333952 ------w- c:\windows\system32\dllcache\srv.sys
2009-10-17 18:04 . 2008-05-01 14:36 331776 ------w- c:\windows\system32\dllcache\msadce.dll
2009-10-17 18:04 . 2009-07-10 13:27 1315328 ------w- c:\windows\system32\dllcache\msoe.dll
2009-10-17 18:03 . 2008-04-11 19:05 691712 ------w- c:\windows\system32\dllcache\inetcomm.dll
2009-10-17 18:00 . 2009-06-10 07:21 2066432 ------w- c:\windows\system32\dllcache\mstscax.dll
2009-10-17 18:00 . 2008-12-16 12:31 354304 ------w- c:\windows\system32\dllcache\winhttp.dll
2009-10-17 18:00 . 2008-10-15 16:35 337408 ------w- c:\windows\system32\dllcache\netapi32.dll
2009-10-17 17:59 . 2008-04-21 21:15 219136 ------w- c:\windows\system32\dllcache\wordpad.exe
2009-10-17 13:25 . 2009-10-17 13:25 -------- d-----w- c:\program files\SFR
2009-10-17 13:18 . 2009-10-17 13:18 -------- d-----w- c:\program files\D-Link
2009-10-17 13:10 . 2009-10-17 13:10 -------- d-----w- c:\windows\Downloaded Installations
2009-10-16 19:53 . 2009-10-16 19:53 -------- d-----w- c:\program files\Fichiers communs\Adobe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-27 23:24 . 2007-10-04 06:45 24 ----a-w- c:\windows\system32\DVCStateBkp-{00000002-00000000-00000000-00001102-00000002-80651102}.dat
2009-10-27 23:24 . 2007-10-04 06:45 24 ----a-w- c:\windows\system32\DVCState-{00000002-00000000-00000000-00001102-00000002-80651102}.dat
2009-10-25 11:27 . 2004-08-16 16:41 63854 ----a-w- c:\windows\system32\perfc00C.dat
2009-10-25 11:27 . 2004-08-16 16:41 445434 ----a-w- c:\windows\system32\perfh00C.dat
2009-10-19 18:40 . 2006-09-13 15:11 59456 ----a-w- d:\documents and settings\valentin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-17 13:10 . 2005-12-08 12:34 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-27 00:12 . 2006-10-12 20:24 -------- d-----w- c:\program files\MeuhMeuhTV
2009-09-11 14:18 . 2004-08-16 16:40 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:04 . 2004-08-16 16:40 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 07:56 . 2004-08-16 16:41 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-26 08:01 . 2004-08-16 16:41 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-05 09:00 . 2004-08-16 16:40 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 20:58 . 2004-08-16 16:40 2191232 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-08-04 17:28 . 2004-08-03 23:48 2068096 ----a-w- c:\windows\system32\ntkrnlpa.exe
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Jet Detection"="c:\program files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-11-28 28672]
"Vade Retro Outlook Express"="c:\progra~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 310272]
"SunJavaUpdateSched"="c:\program files\Java\jre1.5.0_02\bin\jusched.exe" [2005-03-04 36975]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PCMService"="c:\apps\Powercinema\PCMService.exe" [2005-05-11 127118]
"ACTIVBOARD"="c:\apps\ABoard\ABoard.exe" [2003-05-02 24576]
"SNPSTD2"="c:\windows\vsnpstd2.exe" [2004-08-30 286720]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2005-12-08 180269]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-09-15 81000]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-12-08 98304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

d:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 734872]
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%ProgramFiles%\\AOL 9.0\\aol.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\logo_ubi.exe"=
"%ProgramFiles%\\UBISOFT\\Splinter Cell Pandora Tomorrow\\pandora.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\APPS\\Inventime\\my.exe"=
"c:\\Program Files\\AOL 9.0\\waol.exe"=
"c:\\APPS\\skype\\phone\\Skype.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [19/10/2009 19:09 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [19/10/2009 19:09 20560]
R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [08/12/2005 13:34 799744]
S3 PLCMP532;PLCMP532 NDIS Protocol Driver;c:\windows\system32\Drivers\PLCMP532.sys --> c:\windows\system32\Drivers\PLCMP532.sys [?]
S3 PLCND532;PLCND532 NDIS Protocol Driver;c:\windows\system32\drivers\PLCND532.sys [28/11/2007 17:49 26656]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - mbr
.
Contenu du dossier 'Tâches planifiées'

2006-09-13 c:\windows\Tasks\Rappel d'enregistrement 2.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-16 02:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.sfr.fr/
mStart Page = hxxp://www.duxet.com/
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos-beta/OnlineScanner.cab
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-73383832 - d:\docume~1\ALLUSE~1\APPLIC~1\73383832\73383832.exe
AddRemove-Jeux sexy - c:\program files\Jeux sexy\Uninstal.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-28 00:41
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MysqlInventime]
"ImagePath"="c:\apps\INVENT~1\mysql\bin\mysqld-nt --defaults-file=c:\apps\Inventime\mysql\my.ini MysqlInventime"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(788)
c:\windows\system32\Ati2evxx.dll
.
Heure de fin: 2009-10-27 0:42
ComboFix-quarantined-files.txt 2009-10-27 23:42

Avant-CF: 5 385 441 280 octets libres
Après-CF: 5 383 168 000 octets libres

- - End Of File - - FE5D7A5C685EF6215725E20F8410996A