Merci vrm bcp !!!

Comment faire pour me debarrasser de crux P2P car il nest plus dans la liste de ajouter / supprimmer. merci

Voici mon rapport de combofix

ComboFix 08-03-10.1 - Katy 2008-03-11 0:04:11.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.74 [GMT -4:00]
Endroit: C:\Documents and Settings\Katy\Local Settings\Temporary Internet Files\Content.IE5\7WJYHQ07\ComboFix[1].exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\dkxrstqwgx.dll
C:\WINDOWS\rs.txt

.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-11 to 2008-03-11 ))))))))))))))))))))))))))))))))))))
.

2008-03-10 23:10 . 2008-03-10 23:10 1,158 --a------ C:\WINDOWS\mozver.dat
2008-03-10 17:53 . 2008-03-10 17:53 <REP> d-------- C:\Program Files\Windows Live
2008-03-10 17:53 . 2008-03-10 17:54 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-03-10 16:15 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-03-10 16:15 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-03-10 16:15 . 2008-03-09 01:15 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
2008-03-10 16:15 . 2008-03-05 22:29 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-03-10 16:15 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-03-10 16:15 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-03-10 16:15 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-03-10 12:10 . 2008-03-10 12:10 <REP> d-------- C:\Program Files\CCleaner
2008-03-10 11:09 . 2008-03-10 11:12 <REP> d-------- C:\scanbit
2008-03-10 11:07 . 2008-03-10 11:08 <REP> d-------- C:\Program Files\Softwin
2008-03-10 10:11 . 2008-03-10 10:11 <REP> d-------- C:\VundoFix Backups
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-03-10 09:48 . 2007-10-12 12:36 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2008-03-10 09:48 . 2007-10-12 08:26 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-03-10 09:22 . 2008-03-10 10:51 3,254 --a------ C:\WINDOWS\system32\tmp.reg
2008-03-09 14:15 . 2008-03-09 14:15 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-03-09 14:14 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2008-03-09 14:14 . 2008-03-09 14:20 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-03-09 14:11 . 2008-03-10 10:33 <REP> d-------- C:\WINDOWS\system32\ZoneLabs
2008-03-09 14:09 . 2008-03-10 10:33 <REP> d-------- C:\WINDOWS\Internet Logs
2008-03-05 22:58 . 2008-03-05 22:58 85 --a------ C:\WINDOWS\wininit.ini
2008-03-05 15:26 . 2008-03-05 21:01 <REP> d-------- C:\Program Files\XoftSpySE
2008-03-05 13:31 . 2008-03-05 13:31 <REP> d-------- C:\Documents and Settings\Katy\site
2008-03-04 13:30 . 2008-03-04 11:32 94,208 --a------ C:\WINDOWS\fqspogw.exe
2008-02-25 23:37 . 2008-02-25 23:37 <REP> d-------- C:\Documents and Settings\Katy\Application Data\FrostWire
2008-02-25 11:31 . 2008-02-25 11:32 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2008-02-15 09:06 . 2008-02-15 09:06 <REP> d-------- C:\Documents and Settings\Katy\Application Data\Shareaza
2008-02-12 20:04 . 2008-02-13 04:12 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2008-02-12 17:26 . 2008-02-12 17:26 221 --a------ C:\WINDOWS\NCLogConfig.ini

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-10 21:53 --------- d-----w C:\Program Files\MSN Messenger
2008-03-10 17:39 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-10 17:38 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-09 17:05 --------- d-----w C:\Documents and Settings\Katy\Application Data\Army pile move
2008-02-25 12:56 --------- d-----w C:\Documents and Settings\Katy\Application Data\OpenOffice.org2
2008-02-19 23:41 --------- d-----w C:\Program Files\LimeWire
2008-02-13 08:12 --------- d-----w C:\Program Files\InstallShield Installation Information
2008-02-13 00:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Bell
2008-02-12 21:26 --------- d-----w C:\Documents and Settings\Katy\Application Data\HP
2008-02-12 01:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-02-07 00:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-02-06 23:50 --------- d-----w C:\Program Files\WinClamAVShield
2008-02-06 19:28 --------- d-----w C:\Documents and Settings\Katy\Application Data\Bell
2008-02-06 13:36 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-02-04 20:59 102,664 ----a-w C:\WINDOWS\system32\drivers\tmcomm.sys
2008-02-04 13:26 --------- d-----w C:\Program Files\Trend Micro
2008-01-21 16:35 --------- d-----w C:\Documents and Settings\Katy\Application Data\Uniblue
2008-01-18 17:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Memo save stupid creative
2008-01-16 13:46 --------- d-----w C:\Program Files\OpenOffice.org 2.3
2008-01-15 23:30 --------- d-----w C:\Documents and Settings\Katy\Application Data\Leadertech
2005-05-12 03:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
2007-10-12 16:48 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
2007-10-12 16:48 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
2007-10-12 16:48 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012007101220071013\index.dat
2007-10-12 16:48 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 13:09 15360]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-01-18 17:07 196608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 09:00 79224]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 12:22 7700480]
"nwiz"="nwiz.exe" [2006-10-22 12:22 1622016 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 12:22 86016]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52 221184]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-01-18 17:47 458752]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-01-18 17:37 217088]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"stupid creative poll axis"="C:\Documents and Settings\All Users\Application Data\Memo save stupid creative\window mail.exe" [2008-03-10 17:16 1466368]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoSimpleStartMenu"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 0 (0x0)
"LockTaskbar"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoResolveSearch"= 0 (0x0)
"NoSMMyPictures"= 0 (0x0)
"NoStartMenuMFUprogramsList"= 0 (0x0)
"NoUserNameInStartMenu"= 0 (0x0)
"NoStartMenuMorePrograms"= 0 (0x0)
"MaxRecentDocs"= 15 (0xf)
"NoInstrumentation"= 0 (0x0)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 0 (0x0)
"DisallowCpl"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=


*Newly Created Service* - PROCEXP100
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-11 00:06:31
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-11 0:07:38
ComboFix-quarantined-files.txt 2008-03-11 04:07:29
.
2008-03-06 00:42:51 --- E O F ---
et de plus hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:11:18, on 2008-03-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/defaultf.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Crux P2P\Plugins\RazaWebHook.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {EAF43BEC-A979-470B-8EC0-9225C11CB213} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [stupid creative poll axis] C:\Documents and Settings\All Users\Application Data\Memo save stupid creative\window mail.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} -
O16 - DPF: {B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD} -
O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} -
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O21 - SSODL: btrklfr - {5F6FC6FA-D264-42A7-92B7-C10F37ECFDD7} - (no file)
O21 - SSODL: apdqnxp - {F3576F22-BB76-401E-9D40-B0EBD7B9E25C} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
End of file - 6131 bytes


merci de me repondre tres apprecié

Voici les rapport

combofix

ComboFix 08-03-10.1 - Katy 2008-03-11 0:50:18.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.126 [GMT -4:00]
Endroit: C:\Documents and Settings\Katy\Bureau\ComboFix.exe
Command switches used :: C:\CFScript.txt
* Création d'un nouveau point de restauration

FILE ::
C:\WINDOWS\fqspogw.exe
C:\WINDOWS\system32\SpOrder.dll
C:\WINDOWS\wininit.ini
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data\Memo save stupid creative
C:\Documents and Settings\All Users\Application Data\Memo save stupid creative\window mail.exe
C:\WINDOWS\fqspogw.exe
C:\WINDOWS\system32\SpOrder.dll
C:\WINDOWS\wininit.ini

.
((((((((((((((((((((((((((((( Fichiers créés 2008-02-11 to 2008-03-11 ))))))))))))))))))))))))))))))))))))
.

2008-03-10 23:10 . 2008-03-10 23:10 1,158 --a------ C:\WINDOWS\mozver.dat
2008-03-10 17:53 . 2008-03-10 17:53 <REP> d-------- C:\Program Files\Windows Live
2008-03-10 17:53 . 2008-03-10 17:54 <REP> d-------- C:\Program Files\Messenger Plus! Live
2008-03-10 16:15 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2008-03-10 16:15 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2008-03-10 16:15 . 2008-03-09 01:15 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
2008-03-10 16:15 . 2008-03-05 22:29 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
2008-03-10 16:15 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
2008-03-10 16:15 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2008-03-10 16:15 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2008-03-10 12:10 . 2008-03-10 12:10 <REP> d-------- C:\Program Files\CCleaner
2008-03-10 11:09 . 2008-03-10 11:12 <REP> d-------- C:\scanbit
2008-03-10 11:07 . 2008-03-10 11:08 <REP> d-------- C:\Program Files\Softwin
2008-03-10 10:11 . 2008-03-10 10:11 <REP> d-------- C:\VundoFix Backups
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-03-10 09:48 . 2007-10-12 12:36 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2008-03-10 09:48 . 2007-10-12 08:26 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-03-10 09:48 . 2007-10-12 08:26 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-03-10 09:22 . 2008-03-10 10:51 3,254 --a------ C:\WINDOWS\system32\tmp.reg
2008-03-09 14:15 . 2008-03-09 14:15 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-03-09 14:14 . 2008-03-09 14:20 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-03-09 14:11 . 2008-03-10 10:33 <REP> d-------- C:\WINDOWS\system32\ZoneLabs
2008-03-09 14:09 . 2008-03-10 10:33 <REP> d-------- C:\WINDOWS\Internet Logs
2008-03-05 15:26 . 2008-03-05 21:01 <REP> d-------- C:\Program Files\XoftSpySE
2008-03-05 13:31 . 2008-03-05 13:31 <REP> d-------- C:\Documents and Settings\Katy\site
2008-02-25 23:37 . 2008-02-25 23:37 <REP> d-------- C:\Documents and Settings\Katy\Application Data\FrostWire
2008-02-25 11:31 . 2008-02-25 11:32 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2008-02-15 09:06 . 2008-02-15 09:06 <REP> d-------- C:\Documents and Settings\Katy\Application Data\Shareaza
2008-02-12 20:04 . 2008-02-13 04:12 <REP> d-------- C:\WINDOWS\SxsCaPendDel
2008-02-12 17:26 . 2008-02-12 17:26 221 --a------ C:\WINDOWS\NCLogConfig.ini

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-10 21:53 --------- d-----w C:\Program Files\MSN Messenger
2008-03-10 17:39 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-10 17:38 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-09 17:05 --------- d-----w C:\Documents and Settings\Katy\Application Data\Army pile move
2008-02-25 12:56 --------- d-----w C:\Documents and Settings\Katy\Application Data\OpenOffice.org2
2008-02-19 23:41 --------- d-----w C:\Program Files\LimeWire
2008-02-13 08:12 --------- d-----w C:\Program Files\InstallShield Installation Information
2008-02-13 00:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Bell
2008-02-12 21:26 --------- d-----w C:\Documents and Settings\Katy\Application Data\HP
2008-02-12 01:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-02-07 00:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-02-06 23:50 --------- d-----w C:\Program Files\WinClamAVShield
2008-02-06 19:28 --------- d-----w C:\Documents and Settings\Katy\Application Data\Bell
2008-02-06 13:36 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-02-04 20:59 102,664 ----a-w C:\WINDOWS\system32\drivers\tmcomm.sys
2008-02-04 13:26 --------- d-----w C:\Program Files\Trend Micro
2008-01-21 16:35 --------- d-----w C:\Documents and Settings\Katy\Application Data\Uniblue
2008-01-16 13:46 --------- d-----w C:\Program Files\OpenOffice.org 2.3
2008-01-15 23:30 --------- d-----w C:\Documents and Settings\Katy\Application Data\Leadertech
2005-05-12 03:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
2007-10-12 16:48 16,384 --sha-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
2007-10-12 16:48 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
2007-10-12 16:48 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012007101220071013\index.dat
2007-10-12 16:48 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 13:09 15360]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-01-18 17:07 196608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 09:00 79224]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 12:22 7700480]
"nwiz"="nwiz.exe" [2006-10-22 12:22 1622016 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 12:22 86016]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 11:52 221184]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-01-18 17:47 458752]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-01-18 17:37 217088]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoSimpleStartMenu"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 0 (0x0)
"LockTaskbar"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoResolveSearch"= 0 (0x0)
"NoSMMyPictures"= 0 (0x0)
"NoStartMenuMFUprogramsList"= 0 (0x0)
"NoUserNameInStartMenu"= 0 (0x0)
"NoStartMenuMorePrograms"= 0 (0x0)
"MaxRecentDocs"= 15 (0xf)
"NoInstrumentation"= 0 (0x0)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 0 (0x0)
"DisallowCpl"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=


*Newly Created Service* - PROCEXP100
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-11 00:52:21
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-03-11 0:53:14
ComboFix-quarantined-files.txt 2008-03-11 04:53:03
ComboFix2.txt 2008-03-11 04:07:39
.
2008-03-06 00:42:51 --- E O F ---

et hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:57:41, on 2008-03-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/defaultf.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {EAF43BEC-A979-470B-8EC0-9225C11CB213} - (no file)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE RÉSEAU')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
End of file - 5531 bytes


ouf vous etes magicien pour moi merci

Pour le comodo sa ne marche pas

voici le raport de antivir



AntiVir PersonalEdition Classic
Report file date: 11 mars 2008 01:46

Scanning for 1141684 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: P3-866

Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 18:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 17:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 20:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 17:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 19:27:15
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 05:27:13
ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 07/03/2008 05:27:13
ANTIVIR3.VDF : 7.0.3.13 65536 Bytes 10/03/2008 05:27:13
AVEWIN32.DLL : 7.6.0.73 3334656 Bytes 11/03/2008 05:27:14
AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 15:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 12:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 18:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 11/03/2008 05:27:14
AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 12:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 17:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 12:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 16:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 17:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 17:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 14:37:21

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: off
Scan memory......................: off
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high

Start of the scan: 11 mars 2008 01:46

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'HPZipm12.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'FxSvr2.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'hpwuSchd2.exe' - '1' Module(s) have been scanned
Scan process 'LogiTray.exe' - '1' Module(s) have been scanned
Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned
Scan process 'ashDisp.exe' - '1' Module(s) have been scanned
Scan process 'ashServ.exe' - '1' Module(s) have been scanned
Scan process 'aswUpdSv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
36 processes with 36 modules were scanned

Starting to scan the registry.
The registry was scanned ( '36' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Katy\.housecall6.6\Quarantine\mepezese.exe.bac_a037­32
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5437
[INFO] The file was moved to '48461d29.qua'!
C:\Documents and Settings\Katy\.housecall6.6\Quarantine\Uninstall.exe.bac_a03­732
[DETECTION] Is the Trojan horse TR/Obfusgen.A.5368
[INFO] The file was moved to '483f1d34.qua'!
C:\Documents and Settings\Katy\.housecall6.6\Quarantine\vyiwmhta.exe.bac_a037­32
[DETECTION] Is the Trojan horse TR/Inject.SP.1
[INFO] The file was moved to '483f1d43.qua'!
C:\Documents and Settings\Katy\Application Data\Army pile move\deleteballcloseplatform.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48421d34.qua'!
C:\Documents and Settings\Katy\Application Data\Army pile move\hoyzfwuk.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '484f1d41.qua'!
C:\Documents and Settings\Katy\Application Data\Army pile move\vccmngex.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48391d38.qua'!
C:\QooBox\Quarantine\C\Documents and Settings\All Users\Application Data\Memo save stupid creative\window mail.exe.vir
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48446634.qua'!
C:\QooBox\Quarantine\C\WINDOWS\dkxrstqwgx.dll.vir
[DETECTION] Is the Trojan horse TR/BHO.Agent.221184
[INFO] The file was moved to '484e663a.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P1\A0000019.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48066611.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P1\A0000027.dll
[DETECTION] Is the Trojan horse TR/Shell.Eviell
[INFO] The file was moved to '48066617.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P1\A0000046.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '4806661a.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P2\A0000357.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '4806662e.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P2\A0000438.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48066632.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P2\A0000503.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48066637.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P2\A0000561.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '4806663a.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P2\A0000695.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48066641.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P3\A0000712.dll
[DETECTION] Is the Trojan horse TR/BHO.Agent.221184
[INFO] The file was moved to '48066645.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P4\A0000763.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48066649.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P5\A0000798.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '4806664e.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P5\A0000799.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48066650.qua'!
C:\System Volume Information\_restore{5E43A2FB-46C1-402C-B801-9F17834F0701}\R­P5\A0000800.exe
[DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
[INFO] The file was moved to '48066653.qua'!


End of the scan: 11 mars 2008 07:23
Used time: 5:37:49 min

The scan has been done completely.

4432 Scanning directories
533310 Files were scanned
21 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
21 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
533289 Files not concerned
8767 Archives were scanned
2 Warnings
1 Notes

Raport malware

Malwarebytes' Anti-Malware 1.08
Version de la base de données: 479

Type de recherche: Examen complet (A:\|C:\|)
Eléments examinés: 78995
Temps écoulé: 27 minute(s), 59 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\enlfxgw.bvxm (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\enlfxgw.ToolBar.1 (Trojan.FakeAlert) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)


pourquoi on ne peux les mettre en quarantaine

merci encore de votre aide