Win32 cloaker [cryp]

telecharge malwarebytes' etc grace au guide http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam
fait un scan et poste le rapport

Salut
La tu vient de supprimer un mouchard qui affiche de la Pub.

ok mon petit sasuké.

si j'ai bien compris , faut que je recommence , mais en scan minutieux ?
et après le virus sera supprimé ?

undoFix V7.0.3

Scan started at 17:47:34 18/05/2008

Listing files found while scanning....

No infected files were found.


Beginning removal...

il n'a rien trouvé du tout , pourtant mon ordinateur ne fonctionne toujours pas normalement

suis http://sasi.xooit.fr/t48-Guide-d-utilisation-de-VundoFix.htm
et mais un raport
puis

A)-Désactive la restauration système.
Clic droit sur poste de travail > propriétés > onglet restauration système
Coche "désactiver la restauration système sur tous les lecteurs".
clic sur ok pour valider



B)- Télécharger l'outil Flash_Disinfector de sUBs:
http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe
Enregistrer Flash_Disinfector.exe sur le bureau.
Double-cliquer sur Flash_Disinfector.exe pour l'exécuter.

Quand le message : [Plug in yours flash drive & clic Ok to begin disinfection] apparaitra :
Connecter au pc, clé USB, DD externe, susceptibles d'avoir été infectés. ===> et les laisser branchés tout au long des analyses (attention: pas de double-clic dessus !! choisir "clic-droit" puis "Ouvrir") ==> les garder branchés lors des analyses ultérieures.

Puis cliquer sur Ok
Les icônes sur le bureau vont disparaitre jusqu'à l'apparition du message: [Done!!]
Appuyer ensuite sur OK, pour faire réapparaître le bureau.


C)- Terminer par cette analyse importante:
Télécharger ComboFix à partir d'un de ces liens :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
Et important, l'enregistrer sur le bureau.

Avant d'utiliser ComboFix :
==>Noter ce qu’il y a à faire avec ComboFix (imprimer).
==> Désactiver provisoirement (et seulement le temps de l'utilisation de ComboFix), la protection en temps réel de l'Antivirus et des Antispywares, (activés, ils pourraient gêner fortement la procédure de recherche et de nettoyage de l'outil).
==> Déconnecter le PC d'Internet et refermer les fenêtres de tous les programmes en cours
Une fois fait, double-cliquer sur l’icône Combofix.exe du bureau.
- Répondre "oui" au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
/!\ Pendant la durée de cette étape, ne pas se servir du pc et n'ouvrir aucun programme.
Patienter (même si l'on pense que le PC est arrêté) ; les temps « d'arrêt apparent » sont parfois de plusieurs minutes (il y a ± 40 étapes d’analyse)./!\
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, le laisser faire.
- Un rapport s'ouvrira ensuite dans le bloc-notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

==> Réactiver la protection en temps réel de l'Antivirus et des Antispywares, avant de reconnecter le PC à Internet.
==> Revenir sur le forum en reconnectant bien sûr le PC au Net, et copier/coller la totalité du contenu de C:\Combofix.txt dans le prochain message.


Prends ton temps
Bonne chance

merci , je vais suivre tout que que tu as dis , et dès que j'ai finit , je fait le copier coller , comme tu m'a demandé

ComboFix 08-05-15.3 - Utilisateur 1 2008-05-18 20:36:49.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.525 [GMT 2:00]
Endroit: C:\Documents and Settings\Utilisateur 1\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!/b/color
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Utilisateur 1\Application Data\MessengerSkinner
C:\Documents and Settings\Utilisateur 1\Application Data\MessengerSkinner\Userdata\languages_v2.xml
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA.cfg
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA0.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA1.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA2.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA3.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA4.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA5.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA6.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA7.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA8.che
C:\Documents and Settings\Utilisateur 1\Local Settings\Temporary Internet Files\MUZAoDA9.che
C:\Documents and Settings\Utilisateur 1\Menu Démarrer\Programmes\MessengerSkinner
C:\Documents and Settings\Utilisateur 1\Menu Démarrer\Programmes\MessengerSkinner\Conditions générales.lnk
C:\Documents and Settings\Utilisateur 1\Menu Démarrer\Programmes\MessengerSkinner\Confidentialité.lnk
C:\Documents and Settings\Utilisateur 1\Menu Démarrer\Programmes\MessengerSkinner\MessengerSkinner.lnk
C:\Documents and Settings\Utilisateur 1\Menu Démarrer\Programmes\MessengerSkinner\Website.lnk
C:\Documents and Settings\Utilisateur 1\new.txt
C:\WINDOWS\Downloaded Program Files\setup.inf
C:\WINDOWS\pack.epk
c:\WINDOWS\system32\isfldmvxsd.dat
C:\WINDOWS\system32\isfldmvxsd_nav.dat
C:\WINDOWS\system32\isfldmvxsd_navps.dat

.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-18 to 2008-05-18 ))))))))))))))))))))))))))))))))))))
.

2008-05-18 17:47 . 2008-05-18 17:47 <REP> d-------- C:\VundoFix Backups
2008-05-18 10:47 . 2008-05-18 10:47 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-18 10:47 . 2008-05-18 10:47 <REP> d-------- C:\Documents and Settings\Utilisateur 1\Application Data\Malwarebytes
2008-05-18 10:47 . 2008-05-18 10:47 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-18 10:47 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-18 10:47 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-18 10:33 . 2008-05-18 10:33 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Pinnacle
2008-05-18 10:31 . 2008-05-18 10:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-05-18 10:31 . 2008-05-18 10:31 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ATI
2008-05-17 21:16 . 2008-05-17 21:25 <REP> d-------- C:\Program Files\SafeSoft
2008-05-16 17:16 . 2008-05-16 17:16 <REP> d-------- C:\Program Files\MP3 Rocket
2008-05-16 17:16 . 2008-05-16 22:59 <REP> d-------- C:\Documents and Settings\Utilisateur 1\Application Data\MP3Rocket
2008-05-16 17:11 . 2008-05-16 17:13 <REP> d-------- C:\Program Files\Java
2008-05-16 17:11 . 2008-05-16 17:11 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-05-16 17:07 . 2008-05-16 22:38 <REP> d-------- C:\Program Files\LimeWire
2008-05-13 22:10 . 2008-05-14 11:24 <REP> d-------- C:\Program Files\Google
2008-05-12 19:59 . 2008-05-12 20:00 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2008-05-12 13:50 . 2008-05-12 13:50 <REP> d-------- C:\Documents and Settings\Utilisateur 1\Application Data\ATI
2008-05-12 13:47 . 2008-05-12 13:47 0 --a------ C:\WINDOWS\ativpsrm.bin
2008-05-12 13:46 . 2008-05-12 13:46 <REP> d-------- C:\Program Files\ATI
2008-05-12 12:51 . 2008-05-12 12:51 161 --a------ C:\WINDOWS\MyDrivers.ini
2008-05-12 12:48 . 2008-05-12 12:48 <REP> d-------- C:\WINDOWS\Options
2008-05-12 12:26 . 2008-05-12 12:27 <REP> d-------- C:\Documents and Settings\Utilisateur 1\Application Data\SystemRequirementsLab
2008-05-12 11:56 . 2008-05-12 11:56 1,160 --a------ C:\WINDOWS\mozver.dat
2008-05-12 11:50 . 2007-05-15 00:15 <REP> d--h----- C:\Documents and Settings\eMule_Secure\Voisinage réseau
2008-05-12 11:50 . 2007-05-15 00:15 <REP> d--h----- C:\Documents and Settings\eMule_Secure\Voisinage d'impression
2008-05-12 11:50 . 2007-05-14 23:25 <REP> d--h----- C:\Documents and Settings\eMule_Secure\Modèles
2008-05-12 11:50 . 2007-05-15 00:15 <REP> d-------- C:\Documents and Settings\eMule_Secure\Mes documents
2008-05-12 11:50 . 2007-05-15 00:15 <REP> dr------- C:\Documents and Settings\eMule_Secure\Menu Démarrer
2008-05-12 11:50 . 2007-05-15 00:15 <REP> d-------- C:\Documents and Settings\eMule_Secure\Favoris
2008-05-12 11:50 . 2007-05-15 00:15 <REP> d-------- C:\Documents and Settings\eMule_Secure\Bureau
2008-05-12 11:50 . 2008-05-12 11:50 <REP> d-------- C:\Documents and Settings\eMule_Secure
2008-05-12 11:50 . 2008-05-18 20:36 1,024 --ah----- C:\Documents and Settings\eMule_Secure\ntuser.dat.LOG
2008-05-12 11:47 . 2008-05-12 11:47 0 --a------ C:\WINDOWS\nsreg.dat
2008-05-12 11:43 . 2008-05-12 11:43 <REP> d-------- C:\Program Files\VideoLAN
2008-05-12 11:42 . 2008-05-12 11:42 <REP> d-------- C:\NVIDIA
2008-05-12 11:38 . 2008-05-12 11:38 <REP> d-------- C:\Program Files\SystemRequirementsLab
2008-05-11 17:11 . 2008-05-11 17:11 <REP> d-------- C:\Documents and Settings\Utilisateur 1\Application Data\Media Player Classic
2008-05-11 17:10 . 2008-05-11 17:10 <REP> d-------- C:\Program Files\K-Lite Codec Pack
2008-05-11 15:31 . 2008-05-11 15:31 10 --a------ C:\WINDOWS\WININIT.INI
2008-05-11 12:12 . 2008-05-11 12:12 360,064 --a------ C:\WINDOWS\system32\drivers\TCPIP.SYS.ORIGINAL
2008-05-10 20:41 . 2008-05-10 20:41 <REP> d-------- C:\Program Files\Real
2008-05-10 20:41 . 2008-05-10 20:41 <REP> d-------- C:\Program Files\Fichiers communs\xing shared
2008-05-10 20:41 . 2008-05-10 20:41 <REP> d-------- C:\Program Files\Fichiers communs\Real
2008-05-09 18:02 . 2008-05-09 18:02 <REP> d-------- C:\Program Files\PIXresizer
2008-04-21 13:38 . 2008-04-21 13:38 <REP> d-------- C:\Program Files\TomTom HOME 2
2008-04-21 13:38 . 2008-04-21 13:38 <REP> d-------- C:\Documents and Settings\Utilisateur 1\Application Data\TomTom
2008-04-21 13:37 . 2008-04-21 13:37 <REP> d-------- C:\Program Files\TomTom DesktopSuite

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-18 18:35 --------- d-----w C:\Program Files\Wanadoo
2008-05-18 11:54 --------- d-----w C:\Documents and Settings\Utilisateur 1\Application Data\OpenOffice.org2
2008-05-17 19:23 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zylom
2008-05-16 20:39 --------- d-----w C:\Documents and Settings\Utilisateur 1\Application Data\LimeWire
2008-05-12 11:45 --------- d-----w C:\Program Files\ATI Technologies
2008-05-12 11:44 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-12 11:44 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-05-12 11:37 --------- d-----w C:\Program Files\HardwareDetection
2008-05-12 10:44 1,402,128 ----a-w C:\WINDOWS\inf\mydrivers.exe
2008-05-12 10:03 8,315,488 ----a-w C:\WINDOWS\inf\everest-ultimate_everest_ultimate_4.50_build_1330_final_francais_12281.exe
2008-05-12 10:00 73,665,272 ----a-w C:\WINDOWS\inf\169.21_forceware_winxp_32bit_international_whql.exe
2008-05-12 09:51 --------- d-----w C:\Program Files\eMule
2008-05-11 10:13 360,064 ----a-w C:\WINDOWS\system32\drivers\TCPIP.SYS
2008-05-09 04:35 --------- d-----w C:\Documents and Settings\Utilisateur 1\Application Data\U3
2008-04-28 19:08 --------- d-----w C:\Program Files\Axis Communications
2008-04-28 19:07 --------- d-----w C:\Program Files\Windows Live
2008-04-27 18:13 --------- d-----w C:\Program Files\InterVideo Information Service
2008-03-31 21:25 682,496 ----a-w C:\WINDOWS\system32\divx.dll
2008-03-29 06:21 2,873,856 ----a-w C:\WINDOWS\system32\drivers\ati2mtag.sys
2008-03-29 05:19 9,801,728 ----a-w C:\WINDOWS\system32\atioglx2.dll
2008-03-29 04:40 167,936 ----a-w C:\WINDOWS\system32\atiok3x2.dll
2008-03-29 04:05 372,736 ----a-w C:\WINDOWS\system32\ATIDEMGX.dll
2008-03-29 04:04 299,008 ----a-w C:\WINDOWS\system32\ati2dvag.dll
2008-03-29 03:56 172,032 ----a-w C:\WINDOWS\system32\atipdlxx.dll
2008-03-29 03:55 43,520 ----a-w C:\WINDOWS\system32\ati2edxx.dll
2008-03-29 03:55 26,112 ----a-w C:\WINDOWS\system32\Ati2mdxx.exe
2008-03-29 03:55 126,976 ----a-w C:\WINDOWS\system32\ati2evxx.dll
2008-03-29 03:54 536,576 ----a-w C:\WINDOWS\system32\ati2evxx.exe
2008-03-29 03:52 53,248 ----a-w C:\WINDOWS\system32\ATIDDC.DLL
2008-03-29 03:43 3,176,480 ----a-w C:\WINDOWS\system32\ati3duag.dll
2008-03-29 03:39 307,200 ----a-w C:\WINDOWS\system32\atiiiexx.dll
2008-03-29 03:36 1,765,120 ----a-w C:\WINDOWS\system32\ativvaxx.dll
2008-03-29 03:24 46,080 ----a-w C:\WINDOWS\system32\amdpcom32.dll
2008-03-29 03:23 5,439,488 ----a-w C:\WINDOWS\system32\atioglxx.dll
2008-03-29 03:21 393,216 ----a-w C:\WINDOWS\system32\atikvmag.dll
2008-03-29 03:19 17,408 ----a-w C:\WINDOWS\system32\atitvo32.dll
2008-03-29 03:18 49,152 ----a-w C:\WINDOWS\system32\drivers\ati2erec.dll
2008-03-29 03:12 520,192 ----a-w C:\WINDOWS\system32\ati2cqag.dll
2008-03-28 19:05 593,920 ------w C:\WINDOWS\system32\ati2sgag.exe
2008-03-28 17:41 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll
2008-03-25 19:50 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-21 20:28 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2008-03-17 10:49 139,264 ----a-w C:\WINDOWS\system32\hpzjrd01.dll
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-01-18 16:14 46,983,136 ----a-w C:\WINDOWS\inf\PinnacleDistanTVClientSetup.exe
2007-01-07 13:26 2,720,768 ----a-w C:\WINDOWS\inf\PhotoFiltre.exe
2001-08-17 22:59 28,160 ----a-w C:\WINDOWS\inf\UnFREEz.exe
2007-06-07 18:33 5 -csha-w C:\WINDOWS\system32\dcdfdcca1_s.dll
.

------- Sigcheck -------

2006-04-20 14:18 360576 b2220c618b42a2212a59d91ebd6fc4b4 C:\WINDOWS\$hf_mig$\KB917953\SP2QFE\tcpip.sys
2007-10-30 18:53 360832 64798ecfa43d78c7178375fcdd16d8c8 C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys
2004-08-05 14:00 359040 9f4b36614a0fc234525ba224957de55c C:\WINDOWS\$NtUninstallKB917953$\tcpip.sys
2006-04-20 13:51 359808 1dbf125862891817f374f407626967f4 C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys
2008-05-11 12:13 360064 ed06c31200714e734118f9a47f5df5ce C:\WINDOWS\system32\dllcache\TCPIP.SYS
2008-05-11 12:13 360064 ed06c31200714e734118f9a47f5df5ce C:\WINDOWS\system32\drivers\TCPIP.SYS
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"WOOKIT"="C:\Program Files\Wanadoo\Shell.exe" [2004-08-23 14:50 122880]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
"Cld2000.exe"="C:\Program Files\Calendrier\Cld2000.exe" [ ]
"Power DVD Player"="C:\Program Files\Power DVD Player\PowerDVDPlayer.exe" [2007-09-06 09:28 391168]
"PMCRemote"="" []
"PMCLoader"="C:\Program Files\Pinnacle\TVCenter Pro\PMCLoader.exe" [2008-01-24 17:45 644368]
"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2008-02-18 12:58 206184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-16 11:11 68856]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-03 09:59 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224]
"SoundMan"="SOUNDMAN.EXE" [2005-05-17 18:48 77824 C:\WINDOWS\SOUNDMAN.EXE]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-02-12 21:05 339968]
"WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 14:49 20480]
"WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 16:55 32768]
"SNPSTD2"="C:\WINDOWS\vsnpstd2.exe" [2004-08-30 16:37 286720]
"SMSTray"="C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe" [2007-09-20 08:23 132624]
"ISUSPM"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" [ ]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-12 00:12 49152]
"TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-05-10 20:41 185896]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 12:17 61440]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

C:\Documents and Settings\Utilisateur 1\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 2.1.lnk - C:\Program Files\OpenOffice.org 2.1\program\quickstart.exe [2006-11-27 16:45:48 393216]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe [2007-12-03 17:39:26 599312]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{88485281-8b4b-4f8d-9ede-82e29a064277}"= C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL [2004-11-23 16:51 192512]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Program Files\\eMule\\emule.exe"=
"C:\\Program Files\\Internet Explorer\\iexplore.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\javaw.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
S3 asbp2poa;asbp2poa;C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\asbp2poa.sys []
S3 EverestDriver;Lavalys EVEREST Kernel Driver;C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 MEMSWEEP2;MEMSWEEP2;C:\WINDOWS\system32\117.tmp []
S3 mod7700;DiBcom DIB7700 based TV tuner device;C:\WINDOWS\system32\Drivers\mod7700.sys [2007-12-11 02:05]
S3 MODRC;DiBcom Infrared Receiver;C:\WINDOWS\system32\DRIVERS\modrc.sys [2007-10-19 15:32]
S3 PAC7311;VGA SoC PC-Camer@;C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS [2005-02-16 09:15]
S3 snpstd2;GE 98067 MiniCam Pro;C:\WINDOWS\system32\DRIVERS\snpstd2.sys [2004-12-16 18:14]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{32f8c368-0f97-11dd-8416-0013d38dcf42}]
\Shell\AutoRun\command - J:\InstallTomTomHOME.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{489227a2-04b2-11dc-80e9-0013d38dcf42}]
\Shell\AutoRun\command - K:\LaunchU3.exe -a

*Newly Created Service* - CATCHME
*Newly Created Service* - USNJSVC
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-05-18 18:00:00 C:\WINDOWS\Tasks\HPpromotions journeysoftware.job"
- C:\Program Files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-18 20:57:38
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...


C:\WINDOWS\system32\scrrnfr.dll 24626 bytes executable
C:\WINDOWS\system32\olecli32.dll 75264 bytes executable
C:\WINDOWS\system32\olecnv32.dll 37888 bytes executable
C:\WINDOWS\system32\oledlg.dll 124928 bytes executable
C:\WINDOWS\system32\oleprn.dll 110592 bytes executable
C:\WINDOWS\system32\olepro32.dll 83456 bytes executable
C:\WINDOWS\system32\olesvr.dll 24064 bytes
C:\WINDOWS\system32\olesvr32.dll 22016 bytes executable
C:\WINDOWS\system32\olethk32.dll 69120 bytes executable
C:\WINDOWS\system32\omnrnwhz.exe 282624 bytes executable
C:\WINDOWS\system32\oobe
C:\WINDOWS\system32\opengl32.dll 713728 bytes executable
C:\WINDOWS\system32\opknyupuu.exe 318464 bytes executable
C:\WINDOWS\system32\ormczqyi.exe 289792 bytes executable
C:\WINDOWS\system32\osk.exe 216576 bytes executable
C:\WINDOWS\system32\osuninst.dll 68096 bytes executable
C:\WINDOWS\system32\osuninst.exe 41984 bytes executable
C:\WINDOWS\system32\oushwrmo.exe 277504 bytes executable
C:\WINDOWS\system32\p2p.dll 116224 bytes executable
C:\WINDOWS\system32\p2pgasvc.dll 86016 bytes executable
C:\WINDOWS\system32\p2pgraph.dll 312320 bytes executable
C:\WINDOWS\system32\p2pnetsh.dll 88064 bytes executable
C:\WINDOWS\system32\p2psvc.dll 526848 bytes executable
C:\WINDOWS\system32\P7311USD.dll 10240 bytes executable
C:\WINDOWS\system32\packager.exe 59904 bytes executable
C:\WINDOWS\system32\panmap.dll 10240 bytes executable
C:\WINDOWS\system32\paqsp.dll 157696 bytes executable
C:\WINDOWS\system32\PAStiSvc.exe 53248 bytes executable
C:\WINDOWS\system32\msyuv.dll 17408 bytes executable
C:\WINDOWS\system32\MTTELECHIP.dll 40960 bytes executable
C:\WINDOWS\system32\mtxclu.dll 66560 bytes executable
C:\WINDOWS\system32\mtxdm.dll 20480 bytes executable
C:\WINDOWS\system32\mtxex.dll 4096 bytes executable
C:\WINDOWS\system32\mtxlegih.dll 25088 bytes executable
C:\WINDOWS\system32\mtxoci.dll 91136 bytes executable
C:\WINDOWS\system32\MTXSYNCICON.dll 57344 bytes executable
C:\WINDOWS\system32\mucltui.dll 271224 bytes executable
C:\WINDOWS\system32\mucltui.dll.mui 30072 bytes executable
C:\WINDOWS\system32\mui
C:\WINDOWS\system32\mulzfvx.exe 283136 bytes executable
C:\WINDOWS\system32\muweb.dll 207736 bytes executable
C:\WINDOWS\system32\muzaf1.dll 135168 bytes executable
C:\WINDOWS\system32\noise.nld 13256 bytes
C:\WINDOWS\system32\noise.sve 13730 bytes
C:\WINDOWS\system32\noise.tha 697 bytes
C:\WINDOWS\system32\normaliz.dll 23552 bytes executable
C:\WINDOWS\system32\normidna.nls 59342 bytes
C:\WINDOWS\system32\normnfc.nls 45794 bytes
C:\WINDOWS\system32\normnfd.nls 39284 bytes
C:\WINDOWS\system32\normnfkc.nls 66384 bytes
C:\WINDOWS\system32\normnfkd.nls 60294 bytes
C:\WINDOWS\system32\notepad.exe 156672 bytes executable
C:\WINDOWS\system32\npp
C:\WINDOWS\system32\perfwci.h 435 bytes
C:\WINDOWS\system32\perfwci.ini 2994 bytes
C:\WINDOWS\system32\peshfevumk.exe 272384 bytes executable
C:\WINDOWS\system32\pfrykecln.exe 295936 bytes executable
C:\WINDOWS\system32\pgqtnk.exe 305152 bytes executable
C:\WINDOWS\system32\photometadatahandler.dll 412160 bytes executable
C:\WINDOWS\system32\photowiz.dll 172032 bytes executable
C:\WINDOWS\system32\phubcyash.exe 276480 bytes executable
C:\WINDOWS\system32\pid.dll 35328 bytes executable
C:\WINDOWS\system32\pidgen.dll 24064 bytes executable
C:\WINDOWS\system32\pifmgr.dll 35328 bytes executable
C:\WINDOWS\system32\ping.exe 19456 bytes executable
C:\WINDOWS\system32\ping6.exe 34304 bytes executable
C:\WINDOWS\system32\PixtreeMP4FormatWriter.ax 397429 bytes executable
C:\WINDOWS\system32\pjlmon.dll 15360 bytes executable
C:\WINDOWS\system32\plnhlh.exe 282624 bytes executable
C:\WINDOWS\system32\plustab.dll 30720 bytes executable
C:\WINDOWS\system32\pmqvazo.exe 297472 bytes executable
C:\WINDOWS\system32\pmspl.dll 46592 bytes
C:\WINDOWS\system32\pncrt.dll 278528 bytes executable
C:\WINDOWS\system32\pndx5016.dll 6656 bytes
C:\WINDOWS\system32\pndx5032.dll 5632 bytes executable
C:\WINDOWS\system32\pngfilt.dll 44544 bytes executable
C:\WINDOWS\system32\pnrpnsp.dll 48640 bytes executable
C:\WINDOWS\system32\polstore.dll 106496 bytes executable
C:\WINDOWS\system32\PortableDeviceApi.dll 284160 bytes executable
C:\WINDOWS\system32\PortableDeviceClassExtension.dll 101888 bytes executable
C:\WINDOWS\system32\PortableDeviceTypes.dll 166912 bytes executable
C:\WINDOWS\system32\raschap.dll 69632 bytes executable
C:\WINDOWS\system32\rasctrnm.h 1818 bytes
C:\WINDOWS\system32\rasctrs.dll 12288 bytes executable
C:\WINDOWS\system32\rasctrs.ini 6212 bytes
C:\WINDOWS\system32\rasdial.exe 11776 bytes executable
C:\WINDOWS\system32\rasdlg.dll 1256960 bytes executable
C:\WINDOWS\system32\rasman.dll 61440 bytes executable
C:\WINDOWS\system32\rasmans.dll 181248 bytes executable
C:\WINDOWS\system32\rasmontr.dll 148480 bytes executable
C:\WINDOWS\system32\rasmxs.dll 22528 bytes executable
C:\WINDOWS\system32\rasphone.exe 57344 bytes executable
C:\WINDOWS\system32\rasppp.dll 206336 bytes executable
C:\WINDOWS\system32\rasrad.dll 23552 bytes executable
C:\WINDOWS\system32\rassapi.dll 16896 bytes executable
C:\WINDOWS\system32\rasser.dll 12800 bytes executable
C:\WINDOWS\system32\rastapi.dll 58880 bytes executable
C:\WINDOWS\system32\rastls.dll 113152 bytes executable
C:\WINDOWS\system32\rbxtuaui.exe 303616 bytes executable
C:\WINDOWS\system32\rcbdyctl.dll 103424 bytes executable
C:\WINDOWS\system32\rpcrt4.dll 582656 bytes executable
C:\WINDOWS\system32\rpcss.dll 397824 bytes executable
C:\WINDOWS\system32\rpdeeenta.exe 278016 bytes executable
C:\WINDOWS\system32\rplxlvtqk.exe 269824 bytes executable
C:\WINDOWS\system32\rsaci.rat 3271 bytes
C:\WINDOWS\system32\rsaenh.dll 152576 bytes executable
C:\WINDOWS\system32\rsh.exe 15872 bytes executable
C:\WINDOWS\system32\rshx32.dll 40960 bytes executable
C:\WINDOWS\system32\rsm.exe 53248 bytes executable
C:\WINDOWS\system32\rsmps.dll 18944 bytes executable
C:\WINDOWS\system32\rsmsink.exe 24576 bytes executable
C:\WINDOWS\system32\rsmui.exe 49664 bytes executable
C:\WINDOWS\system32\rsvp.exe 132608 bytes executable
C:\WINDOWS\system32\rsvp.ini 15937 bytes
C:\WINDOWS\system32\rsvpcnts.h 3178 bytes
C:\WINDOWS\system32\rsvpmsg.dll 29696 bytes executable
C:\WINDOWS\system32\rsvpperf.dll 9728 bytes executable
C:\WINDOWS\system32\rsvpsp.dll 90112 bytes executable
C:\WINDOWS\system32\sprio600.dll 70656 bytes executable
C:\WINDOWS\system32\sprio800.dll 72192 bytes executable
C:\WINDOWS\system32\spupdsvc.exe 23856 bytes executable
C:\WINDOWS\system32\spxcoins.dll 24661 bytes executable
C:\WINDOWS\system32\sqlsodbc.chm 49345 bytes
C:\WINDOWS\system32\sqlsrv32.dll 442368 bytes executable
C:\WINDOWS\system32\sqlsrv32.rll 98304 bytes executable
C:\WINDOWS\system32\sqlunirl.dll 180800 bytes executable
C:\WINDOWS\system32\sqlwid.dll 24603 bytes executable
C:\WINDOWS\system32\sqlwoa.dll 49179 bytes executable
C:\WINDOWS\system32\srclient.dll 67584 bytes executable
C:\WINDOWS\system32\srijotdmiu.exe 287744 bytes executable
C:\WINDOWS\system32\srrstr.dll 241664 bytes executable
C:\WINDOWS\system32\srsvc.dll 171008 bytes executable
C:\WINDOWS\system32\srvsvc.dll 96768 bytes executable
C:\WINDOWS\system32\ss3dfo.scr 708608 bytes executable
C:\WINDOWS\system32\ssbezier.scr 19968 bytes executable
C:\WINDOWS\system32\ssdpapi.dll 34816 bytes executable
C:\WINDOWS\system32\ssdpsrv.dll 71680 bytes executable
C:\WINDOWS\system32\ssflwbox.scr 393216 bytes executable
C:\WINDOWS\system32\ssmarque.scr 20992 bytes executable
C:\WINDOWS\system32\ssmypics.scr 47104 bytes executable
C:\WINDOWS\system32\ssmyst.scr 18944 bytes executable
C:\WINDOWS\system32\sspipes.scr 610304 bytes executable
C:\WINDOWS\system32\systray.exe 3072 bytes executable
C:\WINDOWS\system32\t2embed.dll 118272 bytes executable
C:\WINDOWS\system32\tabctl32.ocx 224016 bytes executable
C:\WINDOWS\system32\tapi.dll 19200 bytes
C:\WINDOWS\system32\tapi3.dll 860160 bytes executable
C:\WINDOWS\system32\tapi32.dll 181760 bytes executable
C:\WINDOWS\system32\tapiperf.dll 5632 bytes executable
C:\WINDOWS\system32\tapisrv.dll 249344 bytes executable
C:\WINDOWS\system32\tapiui.dll 87040 bytes executable
C:\WINDOWS\system32\taskman.exe 15872 bytes executable
C:\WINDOWS\system32\taskmgr.exe 189440 bytes executable
C:\WINDOWS\system32\tbfman.exe 315904 bytes executable
C:\WINDOWS\system32\tcmsetup.exe 13312 bytes executable
C:\WINDOWS\system32\tcpmib.dll 14848 bytes executable
C:\WINDOWS\system32\tcpmon.dll 46592 bytes executable
C:\WINDOWS\system32\tcpmon.ini 53478 bytes
C:\WINDOWS\system32\tcpmonui.dll 47104 bytes executable
C:\WINDOWS\system32\tzchange.exe 60416 bytes executable
C:\WINDOWS\system32\TZLog.log 386478 bytes
C:\WINDOWS\system32\UCS32P.DLL 327740 bytes executable
C:\WINDOWS\system32\udhisapi.dll 25600 bytes executable
C:\WINDOWS\system32\ufat.dll 82432 bytes executable
C:\WINDOWS\system32\ufnlzxfpdw.exe 316928 bytes executable
C:\WINDOWS\system32\ujeqtomzpt.exe 278016 bytes executable
C:\WINDOWS\system32\ujiywmeve.exe 291328 bytes executable
C:\WINDOWS\system32\ulib.dll 311808 bytes executable
C:\WINDOWS\system32\umandlg.dll 36864 bytes executable
C:\WINDOWS\system32\umdmxfrm.dll 13312 bytes executable
C:\WINDOWS\system32\umgeku.exe 306176 bytes executable
C:\WINDOWS\system32\umpnpmgr.dll 124928 bytes executable
C:\WINDOWS\system32\unicode.nls 89588 bytes
C:\WINDOWS\system32\unicows.dll 245408 bytes executable
C:\WINDOWS\system32\unimdm.tsp 207872 bytes executable
C:\WINDOWS\system32\unimdmat.dll 78848 bytes executable
C:\WINDOWS\system32\uninzb.exe 346624 bytes executable
C:\WINDOWS\system32\uniplat.dll 13824 bytes executable
C:\WINDOWS\system32\unlodctr.exe 4096 bytes executable
C:\WINDOWS\system32\unrar.dll 164352 bytes executable
C:\WINDOWS\system32\untfs.dll 316416 bytes executable
C:\WINDOWS\system32\unyyusfyj.exe 282112 bytes executable
C:\WINDOWS\system32\unzbelds.exe 286208 bytes executable
C:\WINDOWS\system32\upnp.dll 132608 bytes executable
C:\WINDOWS\system32\upnpcont.exe 16896 bytes executable
C:\WINDOWS\system32\upnphost.dll 185344 bytes executable
C:\WINDOWS\system32\upnpui.dll 240128 bytes executable
C:\WINDOWS\system32\ups.exe 18432 bytes executable
C:\WINDOWS\system32\uqblavi.exe 273920 bytes executable
C:\WINDOWS\system32\uqqdugnm.exe 276480 bytes executable
C:\WINDOWS\system32\w32topl.dll 22016 bytes executable
C:\WINDOWS\system32\w3ssl.dll 15872 bytes executable
C:\WINDOWS\system32\waeeog.exe 299520 bytes executable
C:\WINDOWS\system32\watchdog.sys 17664 bytes executable
C:\WINDOWS\system32\wavemsp.dll 208896 bytes executable
C:\WINDOWS\system32\wbcache.deu 65489 bytes
C:\WINDOWS\system32\wbcache.enu 65489 bytes
C:\WINDOWS\system32\wbcache.esn 65489 bytes
C:\WINDOWS\system32\wbcache.fra 65489 bytes
C:\WINDOWS\system32\wbcache.ita 65489 bytes
C:\WINDOWS\system32\wbcache.nld 65489 bytes
C:\WINDOWS\system32\wbcache.sve 65489 bytes
C:\WINDOWS\system32\wbdbase.deu 1309184 bytes
C:\WINDOWS\system32\wbdbase.enu 957440 bytes
C:\WINDOWS\system32\wbdbase.esn 750080 bytes
C:\WINDOWS\system32\wbdbase.fra 786944 bytes
C:\WINDOWS\system32\wbdbase.ita 867840 bytes
C:\WINDOWS\system32\wbdbase.nld 1095680 bytes
C:\WINDOWS\system32\wbdbase.sve 937984 bytes
C:\WINDOWS\system32\wbem
C:\WINDOWS\system32\wdfapi.dll 4096 bytes executable
C:\WINDOWS\system32\wdfmgr.exe 8704 bytes executable
C:\WINDOWS\system32\wdigest.dll 49152 bytes executable
C:\WINDOWS\system32\wdl.trm 4096 bytes
C:\WINDOWS\system32\wdmaud.drv 23552 bytes executable
C:\WINDOWS\system32\webcheck.dll 233472 bytes executable
C:\WINDOWS\system32\webclnt.dll 68096 bytes executable
C:\WINDOWS\system32\webfldrs.msi 1355776 bytes
C:\WINDOWS\system32\webhits.dll 40960 bytes executable
C:\WINDOWS\system32\webvw.dll 136192 bytes executable
C:\WINDOWS\system32\wextract.exe 66560 bytes executable
C:\WINDOWS\system32\wfivusdy.exe 283648 bytes executable
C:\WINDOWS\system32\wfokvpvjwz.exe 289280 bytes executable
C:\WINDOWS\system32\WgaLogon.dll 236928 bytes executable
C:\WINDOWS\system32\WgaTray.exe 337280 bytes executable
C:\WINDOWS\system32\wiaacmgr.exe 890880 bytes executable
C:\WINDOWS\system32\wiadefui.dll 465920 bytes executable
C:\WINDOWS\system32\wiadss.dll 124928 bytes executable
C:\WINDOWS\system32\wiardvxlm.exe 268288 bytes executable
C:\WINDOWS\system32\wiascr.dll 75776 bytes executable
C:\WINDOWS\system32\wiaservc.dll 334336 bytes executable
C:\WINDOWS\system32\wiasf.ax 40448 bytes executable
C:\WINDOWS\system32\wiashext.dll 774656 bytes executable
C:\WINDOWS\system32\wiavideo.dll 111104 bytes executable
C:\WINDOWS\system32\wiavusd.dll 145408 bytes executable
C:\WINDOWS\system32\wifeman.dll 9216 bytes
C:\WINDOWS\system32\win.com 18432 bytes executable
C:\WINDOWS\system32\win32k.sys 1845376 bytes executable
C:\WINDOWS\system32\win32spl.dll 102400 bytes executable
C:\WINDOWS\system32\win87em.dll 13312 bytes
C:\WINDOWS\system32\winbrand.dll 938496 bytes executable
C:\WINDOWS\system32\winchat.exe 35840 bytes executable
C:\WINDOWS\system32\WindowsCodecs.dll 716288 bytes executable
C:\WINDOWS\system32\WindowsCodecsExt.dll 352256 bytes executable
C:\WINDOWS\system32\WindowsLogon.manifest 488 bytes
C:\WINDOWS\system32\winfax.dll 9216 bytes executable
C:\WINDOWS\system32\WinFXDocObj.exe 206336 bytes executable
C:\WINDOWS\system32\usrv42a.dll 102457 bytes executable
C:\WINDOWS\system32\usrv80a.dll 49209 bytes executable
C:\WINDOWS\system32\usrvoica.dll 45116 bytes executable
C:\WINDOWS\system32\usrvpa.dll 49211 bytes executable
C:\WINDOWS\system32\utildll.dll 26112 bytes executable
C:\WINDOWS\system32\utilman.exe 50176 bytes executable
C:\WINDOWS\system32\uwdf.exe 8704 bytes executable
C:\WINDOWS\system32\uwhyhgksf.exe 329728 bytes executable
C:\WINDOWS\system32\uwwxeh.exe 292352 bytes executable
C:\WINDOWS\system32\uxtheme.dll 219648 bytes executable
C:\WINDOWS\system32\v7vga.rom 18832 bytes
C:\WINDOWS\system32\VB6STKIT.DLL 101888 bytes executable
C:\WINDOWS\system32\vbajet32.dll 30749 bytes executable
C:\WINDOWS\system32\vbisurf.ax 30720 bytes executable
C:\WINDOWS\system32\vbscript.dll 413696 bytes executable
C:\WINDOWS\system32\vbsfr.dll 24624 bytes executable
C:\WINDOWS\system32\vcdex.dll 7680 bytes executable
C:\WINDOWS\system32\vdmdbg.dll 26112 bytes executable
C:\WINDOWS\system32\vdmredir.dll 51712 bytes executable
C:\WINDOWS\system32\vepwlbnq.exe 299520 bytes executable
C:\WINDOWS\system32\ver.dll 9104 bytes
C:\WINDOWS\system32\verclsid.exe 28672 bytes executable
C:\WINDOWS\system32\winsrv.dll 294400 bytes executable
C:\WINDOWS\system32\winsta.dll 53760 bytes executable
C:\WINDOWS\system32\winstrm.dll 21504 bytes executable
C:\WINDOWS\system32\wintrust.dll 176640 bytes executable
C:\WINDOWS\system32\winver.exe 5632 bytes executable
C:\WINDOWS\system32\wisptis.exe 293376 bytes executable
C:\WINDOWS\system32\wkssvc.dll 132096 bytes executable
C:\WINDOWS\system32\wldap32.dll 172544 bytes executable
C:\WINDOWS\system32\wlnotify.dll 94208 bytes executable
C:\WINDOWS\system32\wmadmod.dll 757248 bytes executable
C:\WINDOWS\system32\WMADMOE.dll 1117696 bytes executable
C:\WINDOWS\system32\wmasf.dll 222720 bytes executable
C:\WINDOWS\system32\wmdmlog.dll 33792 bytes executable
C:\WINDOWS\system32\wmdmps.dll 37376 bytes executable
C:\WINDOWS\system32\wmdrmdev.dll 429056 bytes executable
C:\WINDOWS\system32\wmdrmnet.dll 348672 bytes executable
C:\WINDOWS\system32\wmdrmsdk.dll 535040 bytes executable
C:\WINDOWS\system32\wmerrFRA.dll 60928 bytes executable
C:\WINDOWS\system32\wmerror.dll 272384 bytes executable
C:\WINDOWS\system32\wmi.dll 5632 bytes executable
C:\WINDOWS\system32\wmidx.dll 157184 bytes executable
C:\WINDOWS\system32\wmimgmt.msc 63488 bytes
C:\WINDOWS\system32\ntsdexts.dll 36864 bytes executable
C:\WINDOWS\system32\ntshrui.dll 233984 bytes executable
C:\WINDOWS\system32\ntvdm.exe 420864 bytes executable
C:\WINDOWS\system32\ntvdmd.dll 13312 bytes executable
C:\WINDOWS\system32\nughbxckex.exe 304128 bytes executable
C:\WINDOWS\system32\nusrmgr.cpl 290816 bytes executable
C:\WINDOWS\system32\NVUNINST.EXE 356352 bytes executable
C:\WINDOWS\system32\nwc.cpl.manifest 749 bytes
C:\WINDOWS\system32\nwprovau.dll 145920 bytes executable
C:\WINDOWS\system32\nybobqtx.exe 294400 bytes executable
C:\WINDOWS\system32\oakley.dll 267776 bytes executcatchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\C:\WINDOWS\system32\117.tmp"
.
Temps d'accomplissement: 2008-05-18 20:59:07
ComboFix-quarantined-files.txt 2008-05-18 18:59:00

Pre-Run: 20,376,776,704 octets libres
Post-Run: 20,854,026,240 octets libres

545 --- E O F --- 2008-05-14 09:06:11

Et voila le rapport .
j'éspere que tu pourra m'aider

je met supprimer ou ?
désolé je suis pas très futé

mon ordinanteur n'arette pas de beuguer j'ai fais un scan avec mon antivirus avast qui m'indique que je suis infecté par win32 cloaker [cryp] comment le supprimmer slp