Probleme avec system security

Bonjour,

je viens tout juste de me faire avoir par system security

j'ai lancé combofix

voici le fichier log qui en résulte:

ComboFix 09-07-14.08 - HP_Propriétaire 19/07/2009 13:04.1.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.1022.463 [GMT 2:00]
Running from: c:\documents and settings\HP_Propriétaire\Bureau\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\docume~1\HP_PRO~1\LOCALS~1\Temp\91933kou.dll
c:\documents and settings\All Users\Application Data\15740934
c:\documents and settings\All Users\Application Data\15740934\15740934 .exe
c:\documents and settings\All Users\Application Data\15740934\15740934 .exe
c:\documents and settings\All Users\Application Data\15740934\15740934
c:\documents and settings\All Users\Application Data\15740934\15740934.exe
c:\documents and settings\HP_Propriétaire\Local Settings\Temp\91933kou.dll
c:\windows\Installer\89dfa9a.msi
c:\windows\msa.exe
c:\windows\system32\6to4v32.dll
c:\windows\system32\certstore.dat
c:\windows\system32\comsa32.sys
c:\windows\system32\drivers\58cc77df.sys
c:\windows\system32\drivers\UACqgrmdcjsnruekjeyl.sys
c:\windows\system32\ghaf8jkdfd.dll
c:\windows\system32\msbey.exe
c:\windows\system32\mshlief.exe
c:\windows\system32\msihfuyb.exe
c:\windows\system32\msxml71.dll
c:\windows\system32\mszgkq.exe
c:\windows\system32\nY.exe
c:\windows\system32\sopidkc.exe
c:\windows\system32\UACadnivutvucctdmevp.dll
c:\windows\system32\UACahnitacrfcmchjehe.dll
c:\windows\system32\UACaotuhpfyntdxsxspe.dat
c:\windows\system32\uacinit.dll
c:\windows\system32\UACktpovpkrjbpmvtmsr.dll
c:\windows\system32\UAClydwyooqypdvwybct.db
c:\windows\system32\UACmjkbwwoovkevcnwxm.dll
c:\windows\system32\UACnrfvwetdjksnnqyno.dll
c:\windows\system32\uactmp.db
c:\windows\system32\wiawow32.sys
c:\windows\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job
c:\windows\Tasks\{783AF354-B514-42d6-970E-3E8BF0A5279C}.job
D:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2009-06-19 to 2009-07-19 )))))))))))))))))))))))))))))))
.

2009-07-19 01:20 . 2009-07-19 09:21 91 ----a-w- c:\windows\system32\geyekrxtpxrtiy.dat
2009-07-19 01:10 . 2009-07-19 01:10 135168 ----a-w- c:\windows\system32\mobsyn.exe
2009-07-19 01:10 . 2009-07-19 09:21 3982 ----a-w- c:\windows\system32\geyekrerfkorqy.dat
2009-07-19 01:10 . 2009-07-19 09:21 17920 ----a-w- c:\windows\system32\geyekrfwcyoarm.dll
2009-07-19 01:10 . 2009-07-19 01:10 41472 ----a-w- c:\windows\system32\geyekrqwthkvla.dll
2009-07-19 01:10 . 2009-07-19 01:10 67072 ----a-w- c:\windows\system32\drivers\geyekrndccwkrd.sys
2009-07-18 06:09 . 2009-06-30 08:06 353048 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgxch32.dll
2009-07-18 06:08 . 2009-06-30 08:06 2301208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avguiadv.dll
2009-07-05 08:32 . 2009-07-05 08:32 98304 ----a-w- c:\documents and settings\All Users\Application Data\NexonEU\NGM\nxgameeu.dll
2009-07-05 08:32 . 2009-07-05 08:32 81920 ----a-w- c:\documents and settings\All Users\Application Data\NexonEU\NGM\npNxGameeu.dll
2009-07-05 08:32 . 2009-07-05 08:32 331776 ----a-w- c:\documents and settings\All Users\Application Data\NexonEU\NGM\NGMResource.dll
2009-07-05 08:32 . 2009-07-05 08:32 258352 ----a-w- c:\documents and settings\All Users\Application Data\NexonEU\NGM\unicows.dll
2009-07-05 08:32 . 2009-07-05 08:32 532480 ----a-w- c:\documents and settings\All Users\Application Data\NexonEU\NGM\NGMDll.dll
2009-07-05 08:32 . 2009-07-05 08:45 -------- d-----w- c:\documents and settings\All Users\Application Data\NexonEU
2009-07-05 08:32 . 2009-07-05 08:32 155648 ----a-w- c:\documents and settings\All Users\Application Data\NexonEU\NGM\NGM.exe
2009-07-04 16:05 . 2009-07-04 16:05 -------- d-----w- C:\Nexon
2009-07-04 16:05 . 2009-07-04 16:05 421888 ----a-w- c:\windows\NEXON_EU_DownloaderUpdater.exe
2009-07-04 07:38 . 2009-06-30 08:06 327688 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgldx86.sys
2009-07-04 07:38 . 2009-07-04 07:36 2054424 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcorex.dll
2009-07-04 07:37 . 2009-06-30 08:06 906520 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgemc.exe
2009-07-04 07:37 . 2009-07-04 07:36 2167576 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgresf.dll
2009-07-04 07:37 . 2009-07-04 07:36 3403032 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgui.exe
2009-07-04 07:37 . 2009-06-30 08:06 1204504 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgabout.dll
2009-07-04 07:37 . 2009-06-30 08:06 337176 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avglogx.dll
2009-07-04 07:37 . 2009-06-30 08:06 829208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcfgx.dll
2009-07-04 07:37 . 2009-06-30 08:06 3298072 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\setup.exe
2009-07-04 07:26 . 2009-06-30 07:38 1085208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.exe
2009-07-04 07:26 . 2009-06-30 07:38 1454360 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-19 11:17 . 2006-07-03 23:12 -------- d-----w- c:\program files\Wanadoo
2009-07-19 11:16 . 2006-10-26 22:02 -------- d-----w- c:\program files\PestPatrol
2009-07-19 11:15 . 2006-08-08 13:34 -------- d-----w- c:\program files\Steam
2009-07-19 11:12 . 2007-01-16 17:23 12 -c--a-w- c:\windows\bthservsdp.dat
2009-07-19 10:45 . 2008-03-16 11:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-19 10:24 . 2008-07-20 17:56 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-07-19 01:26 . 2009-05-18 16:12 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-07-19 00:59 . 2009-07-19 00:59 1063650 ----a-w- c:\windows\system32\rn.tmp
2009-07-10 08:17 . 2005-01-01 20:50 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-08 13:53 . 2006-02-27 20:46 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-07-04 07:36 . 2008-07-20 17:56 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-06-30 08:06 . 2008-07-20 18:19 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-06-30 08:06 . 2008-07-20 17:56 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-01 13:57 . 2009-03-04 11:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-05-11 07:08 . 2008-07-20 17:56 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2008-11-17 17:37 . 2008-11-17 17:37 1352 -c--a-w- c:\program files\Cult3D Acrobat Plug-in.log
2008-01-28 18:17 . 2007-06-30 17:17 49152 -c--a-w- c:\program files\wssupdt.dll
2006-07-03 22:06 . 2006-07-03 22:06 278528 -c--a-w- c:\program files\Fichiers communs\FDEUnInstaller.exe
2009-06-24 21:18 . 2008-09-10 21:41 134648 ----a-w- c:\program files\mozilla firefox\components\brwsrcmp.dll
2005-12-01 19:45 . 2005-12-01 19:45 22 -csha-w- c:\windows\SMINST\HPCD.sys
.

------- Sigcheck -------

[7] 2005-01-28 00:12 662016 66A10B98F18FD804236AB2D90301DE04 c:\windows\$hf_mig$\KB867282\SP2QFE\wininet.dll
[7] 2006-05-10 05:26 667648 44FCC339191ADB8892520DFA473C455F c:\windows\$hf_mig$\KB916281\SP2QFE\wininet.dll
[7] 2006-10-23 15:34 668672 EFA0C2870CBA1747809A13E09F35BF82 c:\windows\$hf_mig$\KB925454\SP2QFE\wininet.dll
[7] 2004-08-05 18:00 660480 58FE94EF42E074F4CAD8BF02E70E6478 c:\windows\$NtUninstallKB867282$\wininet.dll
[-] 2005-01-28 00:14 1220608 3B116AFB018B27D31F006B7DD92D5744 c:\windows\$NtUninstallKB916281$\wininet.dll
[7] 2006-05-10 05:24 662528 343FABBF09312842816E92947AACF73A c:\windows\$NtUninstallKB925454$\wininet.dll
[7] 2006-05-10 05:24 662528 343FABBF09312842816E92947AACF73A c:\windows\SoftwareDistribution\Download\S-1-5-18\813393cacabba48c35f9d086fb3055ff\backup\sp2gdr\wininet.dll
[7] 2006-05-10 05:24 662528 343FABBF09312842816E92947AACF73A c:\windows\SoftwareDistribution\Download\S-1-5-18\813393cacabba48c35f9d086fb3055ff\backup\sp2qfe\wininet.dll
[-] 2006-10-23 15:18 697344 28AE55224C5BF23C9E47258415B2CCBC c:\windows\system32\wininet.dll
[-] 2006-10-23 15:18 697344 28AE55224C5BF23C9E47258415B2CCBC c:\windows\system32\dllcache\wininet.dll

[-] 2004-08-05 18:00 978432 9F3B76C8CF787449A47F05ABAB4E13E6 c:\windows\explorer.exe
[-] 2004-08-05 18:00 978432 9F3B76C8CF787449A47F05ABAB4E13E6 c:\windows\system32\dllcache\explorer.exe

.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WOOKIT"="c:\progra~1\Wanadoo\Shell.exe" [2004-08-23 122880]
"Steam"="c:\program files\Steam\Steam.exe" [2009-06-30 1217784]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-04-03 165784]
"msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2008-07-22 2772992]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-07-10 397312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PestPatrol Control Center"="c:\progra~1\PestPatrol\PPControl.exe" [2009-07-19 25600]
"PPMemCheck"="c:\progra~1\PestPatrol\PPMemCheck.exe" [2009-07-19 25600]
"CookiePatrol"="c:\progra~1\PestPatrol\CookiePatrol.exe" [2009-07-19 25600]
"WOOWATCH"="c:\progra~1\Wanadoo\Watch.exe" [2009-07-19 25600]
"WOOTASKBARICON"="c:\progra~1\Wanadoo\GestMaj.exe" [2004-10-14 32768]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2009-07-19 25600]
"KBD"="c:\hp\KBD\KBD.EXE" [2009-07-19 25600]
"Profiler"="c:\program files\Saitek\Software\ProfilerU.exe" [2009-07-19 25600]
"SaiMfd"="c:\program files\Saitek\Software\SaiMfd.exe" [2009-07-19 25600]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-15 13680640]
"Launch LGDCore"="c:\program files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 1122304]
"Launch LCDMon"="c:\program files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 497152]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-07-19 25600]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-15 86016]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2005-03-10 28160]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-01-15 1657376]
"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2004-08-05 110592]

c:\windows\system32\config\systemprofile\Menu D‚marrer\Programmes\D‚marrage\
AutoTBar.exe [2003-9-30 57344]

c:\windows\system32\config\systemprofile\Menu D‚marrer\Programmes\D‚marrage\
AutoTBar.exe [2003-9-30 57344]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2005-12-27 438272]

c:\windows\system32\config\systemprofile\Menu D‚marrer\Programmes\D‚marrage\
AutoTBar.exe [2003-9-30 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 1 (0x1)
"MemCheckBoxInRunDlg"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoWelcomeScreen"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-30 08:06 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\StubInstaller.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"f:\\jeux\\Program files\\Bin32\\Crysis.exe"=
"f:\\jeux\\Program files\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"f:\\jeux\\cod5fr\\cod5 installé\\CoDWaW.exe"=
"f:\\jeux\\cod5fr\\cod5 installé\\CoDWaWmp.exe"=
"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"f:\\jeux\\medal of honor airborn\\jeux installé\\UnrealEngine3\\Binaries\\MOHA.exe"=
"c:\\Program Files\\Steam\\SteamApps\\common\\red orchestra\\System\\RedOrchestra.exe"=
"c:\\Program Files\\Steam\\SteamApps\\common\\red orchestra\\System\\ROEd.exe"=
"c:\\Nexon\\NEXON_EU_Downloader\\NEXON_EU_Downloader_Engine.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\NexonEU\\NGM\\NGM.exe"=
"f:\jeux\combat arms\Combat Arms EU\CombatArms.exe"= f:\jeux\combat arms\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe
"f:\jeux\combat arms\Combat Arms EU\Engine.exe"= f:\jeux\combat arms\Combat Arms EU\Engine.exe:*Enabled:Engine.exe
"f:\\jeux\\combat arms\\Combat Arms EU\\NMService.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"16616:TCP"= 16616:TCP:BitComet 16616 TCP
"16616:UDP"= 16616:UDP:BitComet 16616 UDP

R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [20/07/2008 19:56 335752]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [20/07/2008 19:56 108552]
R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [20/07/2008 20:19 907032]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [20/07/2008 20:19 298776]
R2 CCNMMDRV;CCNMMDRV;c:\windows\system32\drivers\CCNMMDRV.SYS [02/02/2006 19:04 18944]
R3 NPUSB;NPUSB;c:\windows\system32\drivers\npusb.sys [02/04/2007 17:12 15360]
R3 SaiH80C0;SaiH80C0;c:\windows\system32\drivers\SaiH80C0.sys [20/09/2007 20:04 176384]
R3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [02/11/2005 12:53 215552]
S2 SolidWorks SolidNetWork License Manager;SolidWorks SolidNetWork License Manager;c:\documents and settings\HP_Propriétaire\Bureau\Crack\lmgrd.exe --> c:\documents and settings\HP_Propriétaire\Bureau\Crack\lmgrd.exe [?]
S3 cdrmkaun;cdrmkaun;\??\c:\docume~1\HP_PRO~1\LOCALS~1\Temp\cdrmkaun.sys --> c:\docume~1\HP_PRO~1\LOCALS~1\Temp\cdrmkaun.sys [?]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\drivers\s0016bus.sys [21/02/2009 16:08 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\drivers\s0016mdfl.sys [21/02/2009 16:08 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\drivers\s0016mdm.sys [21/02/2009 16:08 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0016mgmt.sys [21/02/2009 16:08 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS);c:\windows\system32\drivers\s0016nd5.sys [21/02/2009 16:08 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface;c:\windows\system32\drivers\s0016obex.sys [21/02/2009 16:08 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM);c:\windows\system32\drivers\s0016unic.sys [21/02/2009 16:08 115752]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\drivers\s0017bus.sys [21/02/2009 16:08 90536]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\drivers\s0017mdfl.sys [21/02/2009 16:08 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\drivers\s0017mdm.sys [21/02/2009 16:08 122152]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s0017mgmt.sys [21/02/2009 16:08 115496]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\drivers\s0017nd5.sys [21/02/2009 16:08 25768]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\drivers\s0017obex.sys [21/02/2009 16:08 111912]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\drivers\s0017unic.sys [21/02/2009 16:08 117672]
S3 SaiH075C;SaiH075C;c:\windows\system32\drivers\SaiH075C.sys [29/03/2007 18:48 176640]
S3 SaiH0763;SaiH0763;c:\windows\system32\drivers\SaiH0763.sys [23/09/2007 18:43 179968]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2009-07-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
- - - - ORPHANS REMOVED - - - -

BHO-{A36D2A01-00F3-42BD-F434-00BBC39C8953} - c:\windows\system32\ghaf8jkdfd.dll
HKLM-Run-net - c:\windows\system32\net.net
HKLM-Run-15740934 - c:\documents and settings\All Users\Application Data\15740934\15740934.exe
HKLM-Run-15740934 - c:\documents and settings\All Users\Application Data\15740934\15740934 .exe
HKLM-Run-NaturalPoint - (no file)
SharedTaskScheduler-{A36D2A01-00F3-42BD-F434-00BBC39C8953} - c:\windows\system32\ghaf8jkdfd.dll


.
------- Supplementary Scan -------
.
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q305&bd=pavilion&pf=desktop
uStart Page = hxxp://www.msn.fr/
uInternet Connection Wizard,ShellNext = iexplore
IE: Download all by Rapidown... - c:\program files\Rapidown\rapidownGetAll.htm
IE: Download by Rapidown... - c:\program files\Rapidown\rapidownGet.htm
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: { - c:\program files\Messenger\msmsgs.exe
IE: {{57E91B47-F40A-11D1-B792-444553540011} - c:\program files\Rapidown\rapidown.exe
TCP: {4C07BA28-5714-4D0B-95F6-28694EBEBFD3} = 192.168.1.1
TCP: {C451899A-5315-418B-9E81-B6CD9DAF22FD} = 192.168.2.1,195.238.2.21
FF - ProfilePath - c:\documents and settings\HP_Propriétaire\Application Data\Mozilla\Firefox\Profiles\twfuwpn2.default\
FF - prefs.js: browser.startup.homepage - google.fr
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx??mkt=fr-FR&FORM=MICWU0&q=
FF - prefs.js: network.proxy.type - 4
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\All Users\Application Data\NexonEU\NGM\npNxGameeu.dll
FF - plugin: c:\program files\Java\jre1.5.0\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0\bin\NPJPI150.dll
FF - plugin: c:\program files\Java\jre1.5.0\bin\NPOJI610.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npvirtools.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-19 13:14
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-671394573-3777958192-3594627352-1008\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:d1,92,cc,e1,53,81,43,36,bd,d6,ed,4e,a9,c5,49,39,5c,c1,52,4e,56,3c,22,
98,18,9d,ba,a5,b0,ef,ac,b8,40,f5,1f,1e,31,c3,60,59,e8,01,07,d4,33,d3,95,7b,\
"??"=hex:8a,0d,f1,ed,34,1c,db,26,e1,4b,ec,5b,46,4a,a1,67

[HKEY_USERS\S-1-5-21-671394573-3777958192-3594627352-1008\Software\SecuROM\License information*]
"datasecu"=hex:14,21,d8,9d,e5,d1,b5,03,a2,30,48,f7,e8,6c,40,9b,7b,5f,0d,fe,73,
2e,12,38,a6,d3,d3,63,c2,10,f5,51,76,d7,d3,55,1b,b0,79,c7,9f,31,16,e8,17,b6,\
"rkeysecu"=hex:43,94,27,4d,ee,bc,6f,76,b0,02,38,84,88,b9,9d,f9
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3992)
c:\program files\Logitech\SetPoint\GameHook.dll
c:\program files\Logitech\SetPoint\lgscroll.dll
c:\progra~1\WINDOW~1\wmpband.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\NETSHELL.dll
c:\windows\system32\credui.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\program files\AVG\AVG8\avgcsrvx.exe
c:\progra~1\Wanadoo\TaskBarIcon.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\rundll32.exe
c:\program files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe
c:\program files\Logitech\G-series Software\Applets\LCDClock.exe
c:\progra~1\Wanadoo\GestionnaireInternet.exe
c:\progra~1\Wanadoo\ComComp.exe
c:\progra~1\Wanadoo\Toaster.exe
c:\progra~1\Wanadoo\Inactivity.exe
c:\progra~1\Wanadoo\PollingModule.exe
c:\program files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
c:\program files\iPod\bin\iPodService.exe
c:\progra~1\PestPatrol\ppmemcheck .exe
c:\progra~1\PestPatrol\ppcontrol .exe
c:\progra~1\PestPatrol\cookiepatrol .exe
c:\progra~1\AVG\AVG8\avgtray .exe
c:\program files\Saitek\Software\profileru .exe
c:\program files\Saitek\Software\saimfd .exe
c:\program files\HP\HP Software Update\hpwuschd2 .exe
c:\progra~1\Wanadoo\watch .exe
c:\windows\system32\AlertModule\AlertModule.exe
.
**************************************************************************
.
Completion time: 2009-07-19 13:21 - machine was rebooted
ComboFix-quarantined-files.txt 2009-07-19 11:21

Pre-Run: 12 706 230 272 octets libres
Post-Run: 13 070 266 368 octets libres

339


si quelqu'un peut analyser ceci ce serait simpa car pour moi c'est du charabia

merci d'avance pour vos reponse

antoine