Infecté par Adware Maxifiles

Ah oui j'oubliais, par moment quand je navigue sur le net je n'ai pas les bonnes pages qui s'affichent..Mais j'ai toujours la meme fenetre qui s'ouvre à la place de la bonne qui est le site 'porno borne" qque chose comme ca ..

Merci de ta réponse :)

voici le 1er rapport :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-02-14 23:43:57
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 67 GB (46%) free of 146 GB
Total RAM: 1470 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:44, on 2009-02-14
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Secure System Restore] sysrestore.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} - https://www.msn.com/fr-fr/
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

voici le rapport combofix :


ComboFix 09-02-12.03 - Compaq_Propriétaire 2009-02-15 9:59:28.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1470.714 [GMT 1:00]
Lancé depuis: c:\documents and settings\Compaq_Propriétaire\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Compaq_Propriétaire\Bureau\CFscript.txt
AV: Norton 360 *On-access scanning enabled* (Updated)
FW: Norton 360 *enabled*
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Exécution préalable -------
.
c:\program files\QUAD Utilities
c:\windows\system32\tmp.reg

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_seneka


((((((((((((((((((((((((((((( Fichiers créés du 2009-01-15 au 2009-02-15 ))))))))))))))))))))))))))))))))))))
.

2100-02-24 14:15 . 2001-04-02 16:30 821 --a--c--- c:\windows\Lexmark_ICM.ini
2100-02-16 16:09 . 2001-02-16 15:37 62 --a--c--- c:\windows\system32\LXASUSCI.INI
2009-02-14 23:43 . 2009-02-14 23:44 <REP> d-------- C:\rsit
2009-02-14 15:20 . 2009-02-14 15:20 <REP> d-------- c:\program files\SUPERAntiSpyware
2009-02-14 15:20 . 2009-02-14 15:20 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\SUPERAntiSpyware.com
2009-02-14 15:20 . 2009-02-14 15:20 <REP> d-------- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-02-14 15:19 . 2009-02-14 15:19 <REP> d-------- c:\program files\Fichiers communs\Wise Installation Wizard
2009-02-13 18:58 . 2009-02-13 19:14 <REP> d-------- c:\program files\MSNFix
2009-02-12 18:21 . 2009-02-15 09:08 <REP> d-------- c:\program files\Spyware Doctor
2009-02-12 18:21 . 2009-02-12 18:26 81,288 --a------ c:\windows\system32\drivers\iksyssec.sys
2009-02-12 18:21 . 2009-02-12 18:26 66,952 --a------ c:\windows\system32\drivers\iksysflt.sys
2009-02-12 18:21 . 2009-02-12 18:26 40,840 --a------ c:\windows\system32\drivers\ikfilesec.sys
2009-02-12 18:21 . 2008-06-02 15:19 29,576 --a------ c:\windows\system32\drivers\kcom.sys
2009-02-09 20:32 . 2009-02-09 20:32 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2009-02-09 08:35 . 2009-02-09 08:35 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\Samsung
2009-02-09 01:46 . 2006-05-03 22:53 174,592 --a------ c:\windows\system32\framedyn.dll
2009-02-09 01:45 . 2009-02-09 01:46 <REP> d-------- c:\windows\system32\Samsung_USB_Drivers
2009-02-09 01:45 . 2005-08-30 01:49 94,000 --a------ c:\windows\system32\drivers\ssm_mdm.sys
2009-02-09 01:45 . 2005-08-30 01:47 58,320 --a------ c:\windows\system32\drivers\ssm_bus.sys
2009-02-09 01:45 . 2005-08-30 01:49 8,336 --a------ c:\windows\system32\drivers\ssm_mdfl.sys
2009-02-09 01:45 . 2005-08-30 01:49 6,176 --a------ c:\windows\system32\drivers\ssm_cmnt.sys
2009-02-09 01:45 . 2005-08-30 01:49 6,176 --a------ c:\windows\system32\drivers\ssm_cm.sys
2009-02-09 01:45 . 2005-08-30 01:47 5,840 --a------ c:\windows\system32\drivers\ssm_whnt.sys
2009-02-09 01:45 . 2005-08-30 01:47 5,840 --a------ c:\windows\system32\drivers\ssm_wh.sys
2009-02-09 01:45 . 2006-07-24 16:05 5,632 --a------ c:\windows\system32\drivers\StarOpen.sys
2009-02-09 01:44 . 2009-02-09 01:44 <REP> d-------- c:\program files\Samsung
2009-02-06 00:25 . 2009-02-06 00:26 <REP> d-------- c:\program files\iTunes
2009-02-06 00:25 . 2009-02-06 00:25 <REP> d-------- c:\program files\iPod
2009-02-06 00:25 . 2009-02-06 00:26 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-06 00:23 . 2009-02-06 00:24 <REP> d-------- c:\program files\QuickTime
2009-02-05 23:47 . 2009-02-05 23:47 <REP> d-------- c:\program files\Orange
2009-01-26 22:26 . 2009-01-26 22:42 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.Subdo.Java.Cache
2009-01-26 22:26 . 2009-01-26 22:42 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.Subdo.Java.Cache
2009-01-26 22:26 . 2009-01-26 22:26 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.jogl_ext
2009-01-26 22:26 . 2009-01-26 22:26 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.jogl_ext
2009-01-15 21:22 . 2009-02-15 00:07 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Tracing
2009-01-15 21:22 . 2009-02-15 00:07 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Tracing
2009-01-15 21:20 . 2009-01-15 21:20 <REP> d-------- c:\program files\Microsoft
2009-01-15 21:19 . 2009-01-15 21:19 <REP> d-------- c:\program files\Windows Live SkyDrive
2009-01-15 21:19 . 2009-01-15 21:19 <REP> d-------- c:\program files\Windows Live
2009-01-15 21:14 . 2009-01-15 21:14 <REP> d-------- c:\program files\Fichiers communs\Windows Live
2009-01-15 02:05 . 2009-01-15 02:33 <REP> d-------- c:\program files\Paint.NET
2009-01-15 01:42 . 2009-01-15 01:51 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\gtk-2.0
2009-01-15 01:41 . 2009-01-15 01:41 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.thumbnails
2009-01-15 01:41 . 2009-01-15 01:41 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.thumbnails
2009-01-15 01:40 . 2009-01-15 01:54 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gimp-2.6
2009-01-15 01:40 . 2009-01-15 01:54 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gimp-2.6
2009-01-15 01:40 . 2009-01-15 01:40 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gegl-0.0
2009-01-15 01:40 . 2009-01-15 01:40 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gegl-0.0

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-15 09:08 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-02-14 22:11 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
2009-02-14 16:37 --------- d-----w c:\program files\Navilog1
2009-02-14 14:13 --------- d-----w c:\program files\Fichiers communs\Symantec Shared
2009-02-13 18:06 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-12 13:04 --------- d-----w c:\program files\eMule
2009-02-12 04:24 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-02-11 09:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 09:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-02-09 19:52 --------- d-----w c:\documents and settings\All Users\Application Data\Symantec
2009-02-09 00:50 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-02-05 23:25 --------- d-----w c:\program files\Fichiers communs\Apple
2009-01-25 19:00 50,898 -c--a-w c:\documents and settings\Compaq_Propriétaire\Application Data\wklnhst.dat
2009-01-15 01:30 --------- d-----w c:\program files\SLD Codec Pack
2009-01-15 01:30 --------- d-----w c:\program files\PC-Doctor 5 for Windows
2009-01-15 01:30 --------- d-----w c:\program files\Microsoft Works
2009-01-15 01:30 --------- d-----w c:\program files\Mahjongg Towers
2009-01-15 01:30 --------- d-----w c:\program files\LimeWire
2009-01-15 01:30 --------- d-----w c:\program files\Easy Internet signup
2009-01-14 22:30 --------- d-----w c:\program files\Google
2009-01-14 22:03 --------- d-----w c:\program files\LexmarkX83
2009-01-06 07:21 806 -c--a-w c:\windows\system32\drivers\SYMEVENT.INF
2009-01-06 07:21 124,464 -c--a-w c:\windows\system32\drivers\SYMEVENT.SYS
2009-01-06 07:21 10,635 -c--a-w c:\windows\system32\drivers\SYMEVENT.CAT
2009-01-06 07:21 --------- d-----w c:\program files\Symantec
2009-01-01 00:35 --------- d-----w c:\program files\CCleaner
2008-12-29 21:50 --------- d-----w c:\program files\Sony
2008-12-10 21:21 357,768 -c--a-w c:\documents and settings\Compaq_Propriétaire\SymXPep2.dll
2008-12-10 21:21 357,768 -c--a-w c:\documents and settings\Compaq_Propriétaire\SymXPep2.dll
2007-04-02 20:14 14 -c--a-w c:\documents and settings\Compaq_Propriétaire\getfile.dat
2007-04-02 20:14 14 -c--a-w c:\documents and settings\Compaq_Propriétaire\getfile.dat
2006-12-22 02:49 22,845,992 -c--a-w c:\program files\AdbeRdr80_fr_FR.exe
2006-12-15 22:16 87,608 -c--a-w c:\documents and settings\Compaq_Propriétaire\Application Data\ezpinst.exe
2006-12-15 22:16 47,360 -c--a-w c:\documents and settings\Compaq_Propriétaire\Application Data\pcouffin.sys
2008-12-31 17:54 67,688 -c--a-w c:\program files\mozilla firefox\components\jar50.dll
2008-12-31 17:54 54,368 -c--a-w c:\program files\mozilla firefox\components\jsd3250.dll
2008-12-31 17:54 34,944 -c--a-w c:\program files\mozilla firefox\components\myspell.dll
2008-12-31 17:54 46,712 -c--a-w c:\program files\mozilla firefox\components\spellchk.dll
2008-12-31 17:54 172,136 -c--a-w c:\program files\mozilla firefox\components\xpinstal.dll
2005-05-13 16:12 217,073 -csha-r c:\windows\meta4.exe
2005-10-24 10:13 66,560 -csha-r c:\windows\MOTA113.exe
2005-10-13 20:27 422,400 -csha-r c:\windows\x2.64.exe
2006-05-01 12:32 22 -csha-w c:\windows\SMINST\HPCD.sys
2005-10-07 18:14 308,224 -csha-r c:\windows\system32\avisynth.dll
2005-07-14 11:31 27,648 -csha-r c:\windows\system32\AVSredirect.dll
2005-06-26 14:32 616,448 -csha-r c:\windows\system32\cygwin1.dll
2005-06-21 21:37 45,568 -csha-r c:\windows\system32\cygz.dll
2004-01-24 23:00 70,656 -csha-r c:\windows\system32\i420vfw.dll
2006-04-27 09:24 2,945,024 -csha-r c:\windows\system32\Smab.dll
2005-02-28 12:16 240,128 -csha-r c:\windows\system32\x.264.exe
2004-01-24 23:00 70,656 -csha-r c:\windows\system32\yv12vfw.dll
2008-08-29 20:07 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008082920080830\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-09 68856]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-01-15 1830128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112]
"ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-03-14 116328]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 61440]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2009-02-12 1168264]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= i420vfw.dll
"msacm.l3acm"= l3codecp.acm
"VIDC.X264"= x264vfw.dll
"VIDC.3iv2"= 3ivxVfWCodec.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\WINDOWS\\system32\\mcoinstall.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\WINDOWS\\system32\\ftp.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-01-15 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-02-12 356920]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2008-11-22 99376]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-09-02 191656]
S3 RSPSC;RSPSC;c:\windows\system32\drivers\rspsc.sys --> c:\windows\system32\drivers\rspsc.sys [?]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - COMHOST
*Deregistered* - mchInjDrv
.
Contenu du dossier 'Tâches planifiées'

2008-11-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2008-09-18 c:\windows\Tasks\EasyShare Registration Task.job
- c:\docume~1\ALLUSE~1\APPLIC~1\Kodak\EasyShareSetup\$REGIS~1\Registration_7.8.60.2.sxt _RegistrationOffer@16 []

2009-02-15 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-12 18:20]

2009-02-15 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-Secure System Restore - sysrestore.exe


.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\z8jljqpz.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npicdclient.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmidas.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
FF - plugin: c:\windows\system32\Rawflow\npicdclient.dll

---- PARAMETRES FIREFOX ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 1000000
FF - user.js: nglayout.initialpaint.delay - 600
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-15 10:06:03
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(684)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Fichiers communs\Symantec Shared\ccSvcHst.exe
c:\program files\Fichiers communs\Symantec Shared\CCPROXY.EXE
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\program files\Spyware Doctor\pctsSvc.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\Symantec\LiveUpdate\AUPDATE.EXE
c:\progra~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
.
**************************************************************************
.
Heure de fin: 2009-02-15 10:13:57 - La machine a redémarré [Compaq_Propriétaire]
ComboFix-quarantined-files.txt 2009-02-15 09:13:52
ComboFix2.txt 2008-11-13 20:23:23
ComboFix3.txt 2008-10-08 18:58:28
ComboFix4.txt 2008-09-18 09:18:39
ComboFix5.txt 2009-02-13 17:25:14

Avant-CF: 70,717,095,936 octets libres
Après-CF: 70,691,037,184 octets libres

279 --- E O F --- 2009-02-15 06:47:43

Grrr j'en peux plus ....heureusement que je n'ai pas d'enfants... Je veux aller sur le site de l'internaute via google et il m'ouvre une page rien à voir : SITE PORNO

http://best-tube-download.org/index-go.html?ID=11774&fb=aSlAXz5iW2g%2BbWcxRGJDaDBQUztpUGR6RG1bej5tJTFyYCUxJW1AWVEkYVk%2BYCUxPklAWSVtZ2AlKWcgR2glWT5gJTElKUQxRGp4O1JqQ19STi1oMEM%2FLzBWRCM4aEA2PllEWiVtO0IlSkQjOGhAWj5ZU2U4JzIvRG1baD5tLDFEbWlgPilpX0RtWz84aEBoPllTWzBJLFk%2BYCUxJWhEMURqJXE%2BSWFfaWhhcTAkeGpHJCVgR2hDLUdqJWAwSWRZJWhpWj4pZ18%2BSXVxRG1bPw%3D%3D

Ce virus ne veux vraiment pas partir, ca m'inquiète sérieusement ...

Spyware doctor me trouve toujours cette fameuse application qui est :

Type : Menace
Nom : Application.NirCmd..

Ainsi qu'un Trojan généric ....

Que faire??