Total security Bit defender 2009

Bonjour,

J'ai effectué la manipulation conseillée a xem aillant le même problème!

voici le rapport que renvoi combofix!

Merci d'avance pour cette aide précieuse


ComboFix 09-08-22.06 - Utilisateur 24/08/2009 10:54.1.2 - NTFSx86 MINIMAL
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1781 [GMT 2:00]
Running from: c:\documents and settings\Utilisateur\Bureau\ComboFix.exe
Command switches used :: combofix.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\10559684
c:\documents and settings\All Users\Application Data\10559684\10559684
c:\documents and settings\All Users\Application Data\10559684\10559684.exe
c:\documents and settings\All Users\Application Data\10559684\pc10559684ins
c:\documents and settings\Utilisateur\Application Data\wiaserva.log
c:\windows\010112010146120114.xe
c:\windows\0101120101464949.xe
c:\windows\0101120101465651.xe
c:\windows\0101120101465653.xe
c:\windows\ld12.exe
c:\windows\prxid93ps.dat

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_SfX


((((((((((((((((((((((((( Files Created from 2009-07-24 to 2009-08-24 )))))))))))))))))))))))))))))))
.

2009-08-19 14:40 . 2009-08-19 14:40 38016 ----a-w- c:\windows\system32\drivers\DnsFilter.sys
2009-08-19 14:40 . 2009-08-19 14:40 -------- d-----w- c:\program files\DDnsFilter
2009-08-17 11:43 . 2009-05-25 08:27 415072 ----a-w- c:\windows\system32\Leadtools.Windows.Media.Effects.dll
2009-08-17 11:43 . 2009-05-25 08:27 95744 ----a-w- c:\windows\system32\ATL80.dll
2009-08-17 11:39 . 2009-08-17 11:40 21287096 ----a-w- c:\program files\monAlbumPhoto_Setupalt_3.5.exe
2009-08-15 01:03 . 2009-08-15 01:03 -------- d-----w- c:\windows\system32\XPSViewer
2009-08-15 01:03 . 2009-08-15 01:03 -------- d-----w- c:\program files\Reference Assemblies
2009-08-15 01:03 . 2009-08-15 01:03 -------- d-----w- C:\9abe18c48f594bce26dee6
2009-08-15 01:03 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-08-15 01:03 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-08-15 01:03 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-08-15 01:03 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2009-08-15 01:03 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-08-15 01:03 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-08-15 01:03 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-08-12 08:49 . 2009-07-10 13:27 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-23 08:05 . 2007-09-16 18:31 -------- d-----w- c:\program files\Wanadoo
2009-08-18 21:25 . 2008-09-15 08:34 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\Azureus
2009-08-18 07:52 . 2008-02-17 07:30 -------- d-----w- c:\documents and settings\Utilisateur\Application Data\LimeWire
2009-08-17 18:46 . 2007-09-13 15:34 69240 ----a-w- c:\documents and settings\Utilisateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-17 11:43 . 2008-08-17 09:51 -------- d-----w- c:\program files\monAlbumPhoto
2009-08-15 01:06 . 2006-03-02 12:00 81626 ----a-w- c:\windows\system32\perfc00C.dat
2009-08-15 01:06 . 2006-03-02 12:00 503656 ----a-w- c:\windows\system32\perfh00C.dat
2009-08-12 10:12 . 2007-09-15 09:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-08-05 09:00 . 2006-03-02 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-02 17:49 . 2008-08-15 14:11 -------- d-----w- c:\program files\Microsoft Silverlight
2009-07-17 19:03 . 2006-03-02 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 11:54 . 2007-09-16 19:52 -------- d-----w- c:\program files\Messenger Plus! Live
2009-07-12 10:21 . 2006-03-02 12:00 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-11 10:08 . 2009-03-28 10:04 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-07-09 07:37 . 2008-02-17 07:28 16473952 ----a-w- c:\program files\LimeWireWin.exe
2009-06-29 15:57 . 2006-03-02 12:00 827392 ----a-w- c:\windows\system32\wininet.dll
2009-06-29 15:57 . 2006-03-02 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-06-29 15:57 . 2006-03-02 12:00 17408 ------w- c:\windows\system32\corpol.dll
2009-06-21 08:25 . 2007-09-16 18:45 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-20 06:31 . 2009-06-20 06:31 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.0.23\SetupAdmin.exe
2009-06-16 14:40 . 2006-03-02 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:40 . 2006-03-02 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 15:18 . 2009-06-15 15:18 154906 ----a-w- c:\program files\Plane.jpg
2009-06-15 10:44 . 2006-03-02 12:00 78848 ----a-w- c:\windows\system32\telnet.exe
2009-06-12 11:45 . 2009-06-12 11:45 75877 ----a-w- c:\program files\confirmation.htm
2009-06-11 15:57 . 2009-06-10 16:34 25354165 ----a-w- c:\documents and settings\Utilisateur\Application Data\OpenCandy\SnagItWrapperfr.exe
2009-06-10 16:32 . 2009-06-10 16:32 9044029 ----a-w- c:\program files\videora-ipod-407-setup.exe
2009-06-10 14:14 . 2006-03-02 12:00 85504 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 11:37 . 2009-06-10 11:37 1878888 ----a-w- c:\program files\install_flash_player.exe
2009-06-10 07:21 . 2007-09-13 14:36 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:15 . 2006-03-02 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-05 11:39 . 2009-06-05 11:39 285184 ----a-w- c:\program files\iTunesOutlookAddIn.dll
2009-06-05 11:39 . 2009-06-05 11:39 265000 ----a-w- c:\program files\iTunesPhotoProcessor.exe
2009-06-05 11:39 . 2009-06-05 11:39 384808 ----a-w- c:\program files\iTunesAdmin.dll
2009-06-05 11:39 . 2009-06-05 11:39 292136 ----a-w- c:\program files\iTunesHelper.exe
2009-06-05 11:39 . 2009-06-05 11:39 124200 ----a-w- c:\program files\iTunesMiniPlayer.dll
2009-06-05 11:39 . 2009-06-05 11:39 14073640 ----a-w- c:\program files\iTunes.exe
2009-06-05 11:39 . 2009-06-05 11:39 111912 ----a-w- c:\program files\ITDetector.ocx
2009-06-05 11:39 . 2009-06-05 11:39 722160 ----a-w- c:\program files\CDDBControlApple.dll
2009-06-05 11:39 . 2009-06-05 11:39 643072 ----a-w- c:\program files\iPodUpdaterExt.dll
2009-06-05 11:39 . 2009-06-05 11:39 8356 ----a-w- c:\program files\Acknowledgements.rtf
2009-06-05 09:42 . 2009-03-13 21:02 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-06-05 09:42 . 2007-09-22 19:34 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-06-03 19:10 . 2006-03-02 12:00 1297408 ----a-w- c:\windows\system32\quartz.dll
2009-05-26 19:11 . 2009-05-26 19:09 9075917 ----a-w- c:\program files\Ray-Ban_Virtual_Mirror-1.6.4.exe
2009-04-26 08:20 . 2009-04-26 08:18 18129920 ----a-w- c:\program files\IKEA_Home_Planner.exe
2008-11-14 19:26 . 2008-06-29 19:34 6108728 ----a-w- c:\program files\picasaweb-current-setup.exe
2008-09-07 14:08 . 2008-09-07 12:29 9383880 ----a-w- c:\program files\PortraitProfessionalTrialSetup_fr.exe
2008-08-17 09:50 . 2008-08-17 09:44 41304032 ----a-w- c:\program files\monAlbumPhoto_Setup.exe
2008-03-21 14:11 . 2008-03-21 14:11 4688 ----a-w- c:\program files\satsukidecodersettings.ini
2008-03-21 14:11 . 2008-03-21 14:11 4010 ----a-w- c:\program files\mpc4.reg
2008-03-21 14:11 . 2008-03-21 14:11 3476 ----a-w- c:\program files\mpc7.reg
2008-03-21 14:11 . 2008-03-21 14:11 18156 ----a-w- c:\program files\mpc6.reg
2008-03-21 14:11 . 2008-03-21 14:11 16292 ----a-w- c:\program files\mpc5.reg
2008-03-21 14:11 . 2008-03-21 14:11 680 ----a-w- c:\program files\mpc2.reg
2008-03-21 14:11 . 2008-03-21 14:11 596 ----a-w- c:\program files\mpc1.reg
2008-03-21 14:11 . 2008-03-21 14:11 31570 ----a-w- c:\program files\ffdsvsetts.reg
2008-03-21 14:11 . 2008-03-21 14:11 3026 ----a-w- c:\program files\mpc3.reg
2008-03-21 14:11 . 2008-03-21 14:11 1658 ----a-w- c:\program files\ffdssetts.reg
2008-03-21 14:11 . 2008-03-21 14:11 1292 ----a-w- c:\program files\ffdsasetts.reg
2008-03-12 18:37 . 2008-03-12 18:18 19606745 ----a-w- c:\program files\Songs_DJMcFox_PlagueMixTwo.smzip
2008-03-12 18:24 . 2008-03-12 18:17 8917051 ----a-w- c:\program files\Songs_DJMcFox_PlagueMixThree.smzip
2008-03-12 18:10 . 2008-03-12 18:07 2963780 ----a-w- c:\program files\Songs_StepManiaShare_archwind2_Archwind2_ForsakenBlue.smzip
2008-03-12 18:03 . 2008-03-12 18:01 14229652 ----a-w- c:\program files\StepMania-CVS-20070218.exe
2008-02-21 07:35 . 2008-02-21 07:34 14480904 ----a-w- c:\program files\RealPlayer11GOLD_fr.exe
2008-01-05 11:56 . 2008-01-05 11:53 20403816 ----a-w- c:\program files\photo-plus_photo_plus_6.03_anglais_14675.exe
2007-09-22 20:13 . 2007-09-22 20:11 13411824 ----a-w- c:\program files\Google_Earth_BZXD.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2006-07-07 1052672]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"36X Raid Configurer"="c:\windows\system32\xRaidSetup.exe" [2007-03-21 1953792]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-05-10 8429568]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-05-10 81920]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-12 136600]
"EPSON Stylus Photo RX420 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE" [2004-04-09 98304]
"EPSON Stylus Photo RX420 Series (Copie 1)"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE" [2004-04-09 98304]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"LogitechCommunicationsManager"="c:\program files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [2008-08-14 565008]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-08-14 2407184]
"AppleSyncNotifier"="c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-05-13 177472]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-06-12 1948440]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunesHelper.exe" [2009-06-05 292136]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-03-21 16126464]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2007-05-10 1626112]
"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-14 110592]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Utilisateur\Menu D‚marrer\Programmes\D‚marrage\
ikowin32.exe [2008-4-14 24064]

c:\documents and settings\Utilisateur\Menu D‚marrer\Programmes\D‚marrage\
ikowin32.exe [2008-4-14 24064]

c:\documents and settings\Utilisateur\Menu D‚marrer\Programmes\D‚marrage\
ikowin32.exe [2008-4-14 24064]

c:\documents and settings\Utilisateur\Menu D‚marrer\Programmes\D‚marrage\
ikowin32.exe [2008-4-14 24064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-05-04 18:54 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^InterVideo WinCinema Manager.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\InterVideo WinCinema Manager.lnk
backup=c:\windows\pss\InterVideo WinCinema Manager.lnkCommon Startup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Games\\Rise of Nations\\rise.exe"=
"c:\\Program Files\\Vuze\\Azureus.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Microsoft Games\\Zoo Tycoon 2\\zt.exe"=
"c:\\Program Files\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8085:TCP"= 8085:TCP:ddnsfilter

R?2 ddnsfilter;ddnsfilter;c:\windows\sySTEM32\SvchoSt.ExE -k ddnsfilter [02/03/2006 14:00 14336]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [28/03/2009 12:04 335752]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [28/03/2009 12:04 108552]
R1 DnsFilter;DnsFilter;c:\windows\system32\drivers\DnsFilter.sys [19/08/2009 16:40 38016]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [28/03/2009 12:03 298776]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\atl01_xp.sys [13/09/2007 16:54 38656]

--- Other Services/Drivers In Memory ---

*Deregistered* - mchInjDrv

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
ddnsfilter REG_MULTI_SZ ddnsfilter
.
Contents of the 'Scheduled Tasks' folder

2009-08-08 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-10559684 - c:\documents and settings\All Users\Application Data\10559684\10559684.exe


.
------- Supplementary Scan -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: { - c:\program files\Messenger\msmsgs.exe
FF - ProfilePath - c:\documents and settings\Utilisateur\Application Data\Mozilla\Firefox\Profiles\b9z850mf.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa2.dll
FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: c:\program files\Mozilla Plugins\npitunes.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-24 11:07
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


c:\docume~1\UTILIS~1\LOCALS~1\Temp\RGI5.tmp 7136 bytes

scan completed successfully
hidden files: 1

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
"ImagePath"="\??\c:\docume~1\UTILIS~1\LOCALS~1\Temp\mc24.tmp"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(19076)
c:\program files\SuperCopier2\SC2Hook.dll
c:\windows\system32\eappprxy.dll
c:\program files\Fichiers communs\Ahead\Lib\NeroDigitalExt.dll
c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\program files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\windows\system32\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wdfmgr.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\rundll32.exe
c:\program files\Fichiers communs\logishrd\LQCVFX\COCIManager.exe
c:\program files\Fichiers communs\logishrd\LVCOMSER\LVComSer.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Completion time: 2009-08-24 11:12 - machine was rebooted
ComboFix-quarantined-files.txt 2009-08-24 09:12

Pre-Run: 45 906 518 016 octets libres
Post-Run: 48 581 279 744 octets libres

251 --- E O F --- 2009-08-23 19:54