Infecté,ne sait pas du toutcoment regler cela

Salut !
Ce que tu m'as demandé de faire de fonctionne pas hélas =(
Au moment de cliquer sur continue, le pc me dit : " C:\Program Files\..... n'est pas une application Win32 valide."

Voilà je te poste le rapport de combofix :



ComboFix 09-05-09.05 - Clément 21/05/2009 12:48.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.2047.1501 [GMT 2:00]
Lancé depuis: c:\documents and settings\Clément\Bureau\Killfix.exe
* Un nouveau point de restauration a été créé
.
- Mode FONCTIONNALITES REDUITES -
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Jcore
c:\program files\Jcore\Jcore2.dll
c:\program files\WWShow
c:\program files\WWShow\WWShow.dll
c:\windows\system32\drivers\down
c:\windows\system32\drivers\down\294406.exe
c:\windows\system32\drivers\down\389437.exe
c:\windows\system32\frmwrk32.exe
c:\windows\system32\mdelk.exe
c:\windows\system32\uniq.tll
c:\windows\system32\wintems.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-04-21 au 2009-05-21 ))))))))))))))))))))))))))))))))))))
.

2009-05-21 10:01 . 2009-05-21 10:01 120832 ----a-w c:\windows\system32\pykryp.dll
2009-05-21 10:01 . 2009-05-21 10:01 120832 ----a-w c:\windows\system32\bijefktd.dll
2009-05-20 21:30 . 2009-05-20 21:30 120832 ----a-w c:\windows\system32\jrzmgk.dll
2009-05-20 21:30 . 2009-05-20 21:30 120832 ----a-w c:\windows\system32\yyxumcfr.dll
2009-05-19 16:15 . 2009-05-19 16:15 120832 ----a-w c:\windows\system32\bzcahh.dll
2009-05-19 16:15 . 2009-05-19 16:15 120832 ----a-w c:\windows\system32\umvpbvgm.dll
2009-05-18 19:33 . 2009-05-19 16:51 -------- d-----w c:\program files\trend micro
2009-05-18 19:33 . 2009-05-18 19:33 -------- d-----w C:\rsit
2009-05-18 16:05 . 2009-05-18 16:05 -------- d-----w c:\documents and settings\All Users\Application Data\Fighters
2009-05-18 16:05 . 2009-05-18 16:09 -------- d-----w c:\program files\Fighters
2009-05-18 15:54 . 2009-05-18 15:54 120832 ----a-w c:\windows\system32\pvimrj.dll
2009-05-18 15:54 . 2009-05-18 15:54 120832 ----a-w c:\windows\system32\riccdgul.dll
2009-05-18 15:53 . 2009-05-21 10:54 3359 --sha-w c:\windows\system32\RXwGNqru.ini2
2009-05-18 15:53 . 2009-05-18 15:53 302592 ----a-w c:\windows\system32\urqNGwXR.dll
2009-05-18 15:44 . 2009-05-18 15:44 38400 ----a-w c:\windows\system32\qoMFVLdd.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-20 21:34 . 2007-02-14 18:40 1324 ----a-w c:\windows\system32\d3d9caps.dat
2009-05-19 17:38 . 2008-10-28 19:28 -------- d-----w c:\program files\Everest Poker
2009-05-19 16:52 . 2006-08-11 17:43 78148 ----a-w c:\windows\system32\perfc00C.dat
2009-05-19 16:52 . 2006-08-11 17:43 476284 ----a-w c:\windows\system32\perfh00C.dat
2009-05-18 15:50 . 2009-02-01 15:38 -------- d-----w c:\program files\eMule
2009-03-14 23:30 . 2008-03-15 14:43 413696 ----a-w c:\windows\system32\wrap_oal.dll
2009-03-14 23:30 . 2008-03-15 14:43 110592 ----a-w c:\windows\system32\OpenAL32.dll
2009-03-09 11:30 . 2007-04-04 09:34 22328 -c--a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-03-09 11:30 . 2007-04-03 17:55 107832 ----a-w c:\windows\system32\PnkBstrB.exe
2009-03-09 11:29 . 2007-04-03 17:55 66872 ----a-w c:\windows\system32\PnkBstrA.exe
2009-03-09 11:29 . 2008-03-14 17:19 2246144 ----a-w c:\windows\system32\pbsvc.exe
2008-10-26 00:55 . 2008-10-26 00:54 1504768 -csha-w c:\program files\ehthumbs.db
2006-12-29 13:30 . 2006-12-29 13:30 251 -c--a-w c:\program files\wt3d.ini
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{007CF38F-9052-442E-9460-9645538E06DE}]
2009-05-18 15:53 302592 ----a-w c:\windows\system32\urqNGwXR.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1f748058-4220-48a3-af38-73a9a75fd070}]
2009-05-21 10:01 120832 ----a-w c:\windows\system32\pykryp.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}]
2009-05-18 15:44 38400 ----a-w c:\windows\system32\qoMFVLdd.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"VampCenter"="c:\program files\VAMP\\vampcenter.exe" [2006-05-12 798720]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-01-07 3321856]
"AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 52\axcmd.exe" [2007-12-22 221056]
"ptidle"="c:\documents and settings\Clément\Application Data\ptidle\ptidle.exe" [2009-05-18 56832]
"DigiFast"="c:\documents and settings\Clément\Application Data\digifast\digifast.exe" [2009-05-18 225792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 45056]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"IMEKRMIG6.1"="c:\windows\ime\imkr6_1\IMEKRMIG.EXE" [2004-08-10 44032]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-10 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-01-03 13508608]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 132496]
"Acer Empowering Technology Monitor"="c:\windows\system32\SysMonitor.exe" [2006-04-18 49152]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2006-03-17 345088]
"eRecoveryService"="c:\acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 413696]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-02-25 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-02-25 454656]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-02-25 212992]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-23 487424]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-06-29 286720]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-01-03 86016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"SpywareCleaner"="c:\windows\system32\SpywareRemover.exe" [2008-11-26 297697]
"spywarefighterguard"="c:\program files\Fighters\spywarefighter\SpywarefighterUser.exe" [2008-11-18 180872]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-06-01 16208384]
"SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-01-03 1626112]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Cl‚ment\Menu D‚marrer\Programmes\D‚marrage\
TransBar.lnk - c:\windows\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe [2005-6-1 65536]
UberIcon.lnk - c:\windows\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe [2006-5-21 180224]
Y'z Shadow.lnk - c:\windows\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe [2006-5-21 155648]
Yahoo! Widget Engine.lnk - c:\program files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe [2006-5-23 1806336]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Acer Empowering Technology.lnk - c:\acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2006-12-26 45056]
Acer WLAN 11g USB Dongle.lnk - c:\program files\Acer WLAN 11g USB Dongle\ZDWlan.exe [2005-11-16 745472]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-1-31 169472]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{306dfae8-9654-4546-bc1c-e361933336f4}"= "c:\windows\system32\pykryp.dll" [2009-05-21 120832]
"{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}"= "c:\windows\system32\qoMFVLdd.dll" [2009-05-18 38400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qoMFVLdd]
2009-05-18 15:44 38400 ----a-w c:\windows\system32\qoMFVLdd.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau c:\windows\system32\urqNGwXR

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Internet Explorer\\iexplore.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\TmNationsForever\\TmForever.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Documents and Settings\\Clément\\Application Data\\m\\flec006.exe"=

R1 sK9Ou0s;sK9Ou0s;c:\documents and settings\Clément\Application Data\drivers\srosa2.sys [07/03/2009 15:24 7168]
R2 PTK License-FIGHTERS-297811811;PTK License-FIGHTERS-297811811;c:\program files\Fighters\LicenseService.exe [18/11/2008 11:01 283272]
R2 PTK Live Update-FIGHTERS-297811811;PTK Live Update-FIGHTERS-297811811;c:\program files\Fighters\UpdateService.exe [18/11/2008 11:01 307848]
R2 PTK Scanner-FIGHTERS-297811811;PTK Scanner-FIGHTERS-297811811;c:\program files\Fighters\ScannerService.exe [18/11/2008 11:01 311944]
R2 PTK SharedAccess-FIGHTERS-297811811;PTK SharedAccess-FIGHTERS-297811811;c:\program files\Fighters\ConfigService.exe [18/11/2008 11:01 139912]
R3 LVHybrid;LVHybrid service;c:\windows\system32\drivers\LVHybrid.sys [16/05/2006 12:04 892032]
R3 Vfscan;Vfscan;c:\windows\system32\drivers\vffilter.sys [18/11/2008 11:01 15496]
S3 Boonty Games;Boonty Games;c:\program files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [15/06/2007 23:18 69120]
S3 se57bus;Sony Ericsson Device 087 driver (WDM);c:\windows\system32\drivers\se57bus.sys [28/09/2007 20:17 61536]
S3 se57mdfl;Sony Ericsson Device 087 USB WMC Modem Filter;c:\windows\system32\drivers\se57mdfl.sys [28/09/2007 20:17 9360]
S3 se57mdm;Sony Ericsson Device 087 USB WMC Modem Driver;c:\windows\system32\drivers\se57mdm.sys [28/09/2007 20:17 97088]
S3 se57mgmt;Sony Ericsson Device 087 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\se57mgmt.sys [28/09/2007 20:17 88624]
S3 se57nd5;Sony Ericsson Device 087 USB Ethernet Emulation SEMC57 (NDIS);c:\windows\system32\drivers\se57nd5.sys [28/09/2007 20:18 18704]
S3 se57obex;Sony Ericsson Device 087 USB WMC OBEX Interface;c:\windows\system32\drivers\se57obex.sys [28/09/2007 20:17 86432]
S3 se57unic;Sony Ericsson Device 087 USB Ethernet Emulation SEMC57 (WDM);c:\windows\system32\drivers\se57unic.sys [28/09/2007 20:17 90800]

--- Autres Services/Pilotes en mémoire ---

*Deregistered* - TapiSrv
*Deregistered* - TermService
*Deregistered* - Themes
*Deregistered* - TrkWks
*Deregistered* - W32Time
*Deregistered* - WebClient
*Deregistered* - winmgmt
*Deregistered* - WMP54Gv4SVC
*Deregistered* - wuauserv
*Deregistered* - WudfSvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cd120f8c-d43a-11dd-8436-001921272806}]
\Shell\AutoRun\command - WDSetup.exe
.
Contenu du dossier 'Tâches planifiées'

2009-05-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 12:57]
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{4BACEE31-8CB3-449E-BA22-A6BA6FCCE9F1} - c:\windows\system32\safscdlg.dll
HKCU-Run-ecguoec - c:\documents and settings\clément\local settings\application data\ecguoec.exe
HKCU-RunOnce-Shockwave Updater - c:\windows\system32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET


.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Connection Wizard,ShellNext = iexplore
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-21 12:55
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...


c:\documents and settings\Clément\Application Data\m\shared\Docsmartz Professional : Convert Multiple PDF files to Word Documents 5.0.zip 982912 bytes hidden from API

Scan terminé avec succès
Fichiers cachés: 1

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(764)
c:\windows\system32\qoMFVLdd.dll

- - - - - - - > 'lsass.exe'(832)
c:\windows\system32\urqNGwXR.dll

- - - - - - - > 'explorer.exe'(3932)
c:\windows\system32\MSNCHATHOOK.DLL
c:\windows\system32\sysenv.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\MFC71U.DLL
c:\windows\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon.dll
c:\progra~1\WINDOW~1\wmpband.dll
c:\windows\system32\pykryp.dll
c:\windows\system32\msls31.dll
c:\windows\system32\urqNGwXR.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\acer\Empowering Technology\ePerformance\MemCheck.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\ehome\ehrecvr.exe
c:\windows\ehome\ehSched.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\program files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
c:\program files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe
c:\program files\Linksys Wireless-G PCI Wireless Network Monitor\WMP54Gv4.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\system32\dllhost.exe
c:\windows\ehome\ehmsas.exe
c:\windows\system32\rundll32.exe
c:\program files\Logitech\Video\FxSvr2.exe
c:\program files\Internet Explorer\iexplore.exe
c:\program files\Fighters\Spywarefighter\SpywarefighterTray.exe
c:\program files\Fichiers communs\Teleca Shared\Generic.exe
c:\program files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
.
**************************************************************************
.
Heure de fin: 2009-05-21 13:00 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-05-21 10:59

Avant-CF: 55 800 463 360 octets libres
Après-CF: 57 597 837 312 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect /usepmtimer

Current=3 Default=3 Failed=2 LastKnownGood=1 Sets=1,2,3,4
254 --- E O F --- 2009-03-02 02:00