Rapports a interpreter

bonjour voila ce que j ai fait en mode sans echec.pouvez vous me dire si ca va..merci d avance
08/08/2007 a 17:58:05,09

*** Recherche des fichiers dans C:

*** Recherche des fichiers dans C:\Windows\

*** Recherche des fichiers dans C:\Windows\system32
"C:\Windows\Downloaded Program Files\CONFLICT.1" FOUND

*** Recherche des fichiers dans C:\Program Files
*** Fin du rapport !
et voila l autre
ComboFix 07-08-07.6 - "Administrateur" 2007-08-08 17:59:45.2 - NTFSx86 MINIMAL
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.70 [GMT 2:00]


((((((((((((((((((((((((( Files Created from 2007-07-08 to 2007-08-08 )))))))))))))))))))))))))))))))


2007-08-08 17:01 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
2007-08-07 18:29 <REP> d-------- C:\Program Files\RegCleaner
2007-08-07 15:48 <REP> d-------- C:\Program Files\Ashampoo
2007-08-06 01:13 <REP> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-08-03 15:57 <REP> d-------- C:\Program Files\jv16 PowerTools
2007-08-02 18:54 <REP> d-------- C:\Program Files\OpenOffice.org 2.2
2007-08-02 13:41 <REP> d-------- C:\Program Files\Futuremark
2007-07-30 18:28 <REP> d-------- C:\Program Files\iolo
2007-07-30 13:25 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Jetico Personal Firewall
2007-07-29 13:21 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-26 20:39 15,990,784 --a------ C:\DOCUME~1\ADMINI~1\ntuser.dat
2007-07-26 20:38 <REP> dr-h-c--- C:\MSOCache
2007-07-25 12:42 69,632 --a------ C:\WINDOWS\system32\JkDefragScreenSaver.scr
2007-07-25 12:42 167,936 --a------ C:\WINDOWS\system32\JkDefragScreenSaver.exe
2007-07-18 20:04 2,302 --a------ C:\WINDOWS\system32\tmp.reg
2007-07-18 19:02 <REP> d-------- C:\WINDOWS\system32\URTTemp
2007-07-16 01:48 <REP> d-------- C:\Program Files\CCleaner
2007-07-16 00:24 45 ---h----- C:\WINDOWS\dsez4668.dat
2007-07-15 18:08 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-07-15 16:46 <REP> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\ma-config.com
2007-07-15 15:25 <REP> d-------- C:\WINDOWS\system32\bfubackups
2007-07-15 12:00 <REP> d-------- C:\Program Files\Hijackthis Version Fran‡aise


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-08-08 16:53 --------- d-------- C:\Program Files\lx_cats
2007-08-07 15:23 --------- d-------- C:\Program Files\Trend Micro
2007-08-07 00:20 --------- d-------- C:\Program Files\Lavasoft
2007-08-06 20:55 --------- d-------- C:\Program Files\eMule
2007-08-05 23:18 16391 --a--c--- C:\Windows\mozver.dat
2007-08-04 16:35 --------- d-------- C:\Program Files\JkDefrag
2007-08-02 13:56 2932 --a------ C:\Windows\system32\d3d9caps.dat
2007-08-02 13:41 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-07-30 21:11 77858 --a------ C:\Windows\system32\perfc00C.dat
2007-07-30 21:11 472290 --a------ C:\Windows\system32\perfh00C.dat
2007-07-29 20:24 --------- d-------- C:\Program Files\CodeStuff
2007-07-27 01:36 --------- d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\MSN6
2007-07-24 12:59 --------- d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
2007-07-15 18:38 --------- d-------- C:\Program Files\CFWebAdvancedU
2007-07-14 14:58 --------- d-------- C:\Program Files\Executive Software
2007-07-04 14:55 --------- d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
2007-07-03 21:49 86094 --a--c--- C:\Windows\BPMNT.dll
2007-07-03 21:49 1163344 --a--c--- C:\Windows\vsapi32.dll
2007-07-01 21:35 71749 --a--c--- C:\Windows\hcextoutput.dll
2007-07-01 21:35 267845 --a--c--- C:\Windows\tsc.exe
2007-07-01 00:08 --------- d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\FaxCtr
2007-06-30 23:12 --------- d-------- C:\Program Files\AutoWebCam
2007-06-30 18:50 --------- d-------- C:\Program Files\Lexmark Fax Solutions
2007-06-30 18:38 --------- d-------- C:\Program Files\Lexmark 2400 Series
2007-06-30 18:37 --------- d-------- C:\Program Files\Lexmark Toolbar
2007-06-30 13:51 --------- d-------- C:\Program Files\Eusing Free Registry Cleaner
2007-06-30 00:14 --------- d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Uniblue
2007-06-29 23:35 --------- d-------- C:\Program Files\Windows NT
2007-06-29 23:35 --------- d-------- C:\Program Files\Movie Maker
2007-06-29 23:34 --------- d-------- C:\Program Files\Windows Media Connect 2
2007-06-27 19:37 --------- d-------- C:\Program Files\K-Lite Codec Pack
2007-06-23 20:29 359808 --a------ C:\Windows\system32\drivers\TCPIP.SYS.ORIGINAL
2007-05-29 20:09 41 ---h----- C:\Windows\dsez8066.dat
2007-05-16 17:13 86528 --a------ C:\Windows\system32\dllcache\directdb.dll
2007-05-16 17:13 85504 --a------ C:\Windows\system32\dllcache\wabimp.dll
2007-05-16 17:13 683520 --a------ C:\Windows\system32\inetcomm.dll
2007-05-16 17:13 683520 --a------ C:\Windows\system32\dllcache\inetcomm.dll
2007-05-16 17:13 510976 --a------ C:\Windows\system32\dllcache\wab32.dll
2007-05-16 17:13 1314816 --a------ C:\Windows\system32\dllcache\msoe.dll
2007-05-08 10:59 3583488 --a------ C:\Windows\system32\dllcache\mshtml.dll
2006-01-12 12:27 72344 --a--c--- C:\DOCUME~1\ADMINI~1\APPLIC~1\GDIPFONTCACHEV1.DAT
2005-12-25 23:42 278528 --a--c--- C:\Program Files\Fichiers communs\FDEUnInstaller.exe
2005-12-25 19:59 774144 --a------ C:\Program Files\RngInterstitial.dll
--------- C:\Program Files\Hijackthis Version Française
2007-04-09 09:40:46 5 --sha-w C:\Windows\system32\dedd9_g.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"FaxCenterServer"="C:\Program Files\Lexmark Fax Solutions\fm3032.exe" [2006-12-11 18:12]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"lxcrmon.exe"="C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" [2007-01-11 20:57]
"EzPrint"="C:\Program Files\Lexmark 2400 Series\ezprint.exe" [2006-12-11 18:11]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 11:25]
"LXCRCATS"="C:\Windows\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll" [2006-11-21 19:27]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2007-04-02 10:35]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\Windows\system32\ctfmon.exe" [2004-08-20 01:09]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DelRecentsDocuments"=0 (0x0)
"DelRun"=0 (0x0)
"DelFindFiles"=0 (0x0)
"DelFindComputer"=0 (0x0)
"NoSecCPL"=0 (0x0)
"NoPwdPage"=0 (0x0)
"NoProfilePage"=0 (0x0)
"NoDevMgrPage"=0 (0x0)
"NoConfigPage"=0 (0x0)
"NoFileSysPage"=0 (0x0)
"NoVirtMemPage"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"RestrictRun"=0 (0x0)
"NoClose"=0 (0x0)
"NoSetFolders"=0 (0x0)
"NoStartMenuSubFolders"=0 (0x0)
"NoSetTaskbar"=0 (0x0)
"NoOpenDriveCD"=0 (0x0)
"NoDirCopy"=0 (0x0)
"NoDirDel"=0 (0x0)
"NoDirMove"=0 (0x0)
"NoDirRen"=0 (0x0)
"NoFileMenu"=0 (0x0)
"NoPrinterTabs"=0 (0x0)
"NoDeletePrinter"=0 (0x0)
"NoAddPrinter"=0 (0x0)
"NoInstrumentation"=1 (0x1)
"DisallowRun"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\RestrictRun]
"4"=SCRNSAVE.EXE
"5"=SynTPLpr.exe
"6"=SynTPEnh.exe
"7"=srmclean.exe
"8"=cpqset.exe
"9"=rundll32.exe
"10"=MSASCui.exe
"11"=jusched.exe
"12"=SFAgent.exe
"13"=avgcc.exe
"14"=avgas.exe

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer\RestrictRun]
"1"=srvms32.exe
"2"=svcms32.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\fjotho]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k

R0 caboagp;ATI Cabo AGP Filter;C:\Windows\system32\DRIVERS\atisgkaf.sys
R1 Cdr4_xp;Cdr4_xp;C:\Windows\system32\drivers\Cdr4_xp.sys
S1 avgio;avgio;\??\C:\Program Files\AntiVir PersonalEdition Classic\avgio.sys
S1 avipbb;avipbb;C:\Windows\system32\DRIVERS\avipbb.sys
S1 ClntMgmt.sys;ClntMgmt.sys;C:\Windows\system32\Drivers\ClntMgmt.sys
S1 ssmdrv;ssmdrv;C:\Windows\system32\DRIVERS\ssmdrv.sys
S1 wceusbsh;Pilote d'hôte USB série pour Windows CE;C:\Windows\system32\DRIVERS\wceusbsh.sys
S2 NWCWorkstation;Service client pour NetWare;C:\Windows\System32\svchost.exe -k netsvcs
S3 AlcrFilt;Alcor Micro Corp;\??\C:\Windows\System32\Drivers\AlcrFilt.sys
S3 aliadwdm;Pilote WDM d'accélérateur audio ALi;C:\Windows\system32\drivers\ac97ali.sys
S3 ALiIRDA;Pilote de périphérique infrarouge ALi;C:\Windows\system32\DRIVERS\alifir.sys
S3 allegro;Pilote audio ESS Allegro (WDM);C:\Windows\system32\drivers\es198x.sys
S3 ASFWHide;ASFWHide;\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ASFWHide
S3 avgntflt;avgntflt;\??\C:\Program Files\AntiVir PersonalEdition Classic\avgntflt.sys
S3 DarkSpy;DarkSpy;\??\C:\Windows\system32\DarkSpyKernel.sys
S3 DCamUSBPremier;USB Video Camera;C:\Windows\system32\Drivers\mpixvid.sys
S3 F-Secure BlackLight Sensor;F-Secure BlackLight Sensor;C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\F-Secure\Anti-Virus\fsblsrv.exe
S3 fsbl;F-Secure BlackLight Engine Driver;\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsbldrv.sys
S3 ltmodem5;LT Modem Driver;C:\Windows\system32\DRIVERS\ltmdmnt.sys
S3 MSIRCOMM;Microsoft IR Communications Driver;C:\Windows\system32\DRIVERS\MSIRCOMM.sys
S3 netrcacm;RCA USB Digital Cable Modem Driver;C:\Windows\system32\DRIVERS\netrcacm.sys
S3 NWRDR;NetWare Rdr;C:\Windows\system32\DRIVERS\nwrdr.sys
S3 ROOTMODEM;Microsoft Legacy Modem Driver;C:\Windows\system32\Drivers\RootMdm.sys
S3 SIS163u;SiS163 usb Wireless LAN Adapter Driver;C:\Windows\system32\DRIVERS\sis163u.sys
S3 Stmatm;ATM/ADSL miniport;C:\Windows\system32\DRIVERS\stmatm.sys
S3 TaurusUsb;ADSL Modem USB Service;C:\Windows\system32\DRIVERS\torususb.sys
S3 USB_RNDIS;Point d'acces Inventel;C:\Windows\system32\DRIVERS\usb8023.sys
S3 USBCM;Scientific Atlanta USB Cable Modem Driver;C:\Windows\system32\DRIVERS\Sacm2K.sys
S3 usbscan;Pilote de scanneur USB;C:\Windows\system32\DRIVERS\usbscan.sys
S3 USBSTOR;Pilote de stockage de masse USB;C:\Windows\system32\DRIVERS\USBSTOR.SYS


Contents of the 'Scheduled Tasks' folder
2007-08-02 19:09:01 C:\Windows\Tasks\AppleSoftwareUpdate.job - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
2007-08-03 15:15:03 C:\Windows\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe

**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-08 18:01:52
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG08.00.00.01WORKSTATION"="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"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\MAC Access Control\Allowed MACs]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\MAC Access Control\Denied MACs]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\MAC Access Control\Launched Apps]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\MAC Access Control\Rejected MACs]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\Users\S-1-5-21-257621693-4282951562-813958858-500]
"UserFolderName"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\Users\S-1-5-21-257621693-4282951562-813958858-500\101]
"Name"="101"
"FriendlyName"="TODO"
"GlobalVolumeName"="\\?\Volume{ec2ce060-63b0-11d7-9219-806d6172696f}\"
"GlobalVolumePath"="\Documents and Settings\Administrateur\Mes documents\Ma musique"
"LocalDrive"="C:"
"LocalPath"="\Documents and Settings\Administrateur\Mes documents\Ma musique"
"ShareWithEveryone"="True"
"ShareWithApprovedDevices"="False"
"State"="False"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\Users\S-1-5-21-257621693-4282951562-813958858-500\101\Approved]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\Users\S-1-5-21-257621693-4282951562-813958858-500\102]
"Name"="102"
"FriendlyName"="TODO"
"GlobalVolumeName"="\\?\Volume{ec2ce060-63b0-11d7-9219-806d6172696f}\"
"GlobalVolumePath"="\Documents and Settings\Administrateur\Mes documents\Mes images"
"LocalDrive"="C:"
"LocalPath"="\Documents and Settings\Administrateur\Mes documents\Mes images"
"ShareWithEveryone"="True"
"ShareWithApprovedDevices"="False"
"State"="False"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\Users\S-1-5-21-257621693-4282951562-813958858-500\102\Approved]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\Users\S-1-5-21-257621693-4282951562-813958858-500\103]
"Name"="103"
"FriendlyName"="TODO"
"GlobalVolumeName"="\\?\Volume{ec2ce060-63b0-11d7-9219-806d6172696f}\"
"GlobalVolumePath"="\Documents and Settings\Administrateur\Mes documents\Mes vid\xe9os"
"LocalDrive"="C:"
"LocalPath"="\Documents and Settings\Administrateur\Mes documents\Mes vid\xe9os"
"ShareWithEveryone"="True"
"ShareWithApprovedDevices"="False"
"State"="False"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media Connect\Users\S-1-5-21-257621693-4282951562-813958858-500\103\Approved]

scanning hidden files ...

**************************************************************************

Completion time: 2007-08-08 18:03:42
C:\ComboFix-quarantined-files.txt ... 2007-08-08 18:02
C:\ComboFix2.txt ... 2007-08-08 17:32
C:\ComboFix3.txt ... 2007-07-29 13:29

--- E O F ---