Gros virus

tu veut qu'on t'aide en fessant quoi ?

lol en fessant quoi ces a nous de lui dire ce qu'il faut qu'il fasse

Voici un log combofix:

ComboFix 10-03-01.04 - Salim 02/03/2010 18:28:48.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1014.641 [GMT 1:00]
Lancé depuis: c:\documents and settings\Salim\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\docume~1\Salim\LOCALS~1\Temp\E_N4
c:\docume~1\Salim\LOCALS~1\Temp\E_N4\dp1.fne
c:\docume~1\Salim\LOCALS~1\Temp\E_N4\internet.fne
c:\windows\AegisP.inf
c:\windows\msa.exe
c:\windows\msb.exe
c:\windows\system32\825606
c:\windows\system32\sshnas21.dll
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
c:\windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

.
((((((((((((((((((((((((((((( Fichiers créés du 2010-02-02 au 2010-03-02 ))))))))))))))))))))))))))))))))))))
.

2010-03-02 12:39 . 2010-03-02 12:39 -------- d-----w- c:\program files\Fichiers communs\Borland Shared
2010-03-02 12:39 . 1999-01-20 04:01 210032 ----a-w- c:\windows\system32\DBCLIENT.DLL
2010-02-26 17:06 . 2010-02-26 17:06 -------- d-----w- c:\documents and settings\Salim\Application Data\Malwarebytes
2010-02-26 17:06 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-26 17:06 . 2010-02-26 17:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-26 17:06 . 2010-02-26 17:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-02-26 17:06 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-26 10:02 . 2010-03-02 17:17 -------- d--h--w- c:\windows\system32\8E0FE5
2010-02-26 10:02 . 2010-02-26 16:39 -------- d--h--w- c:\windows\system32\F7F2CF
2010-02-26 10:02 . 2010-02-26 10:17 -------- d--h--w- c:\windows\system32\703F4F

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-23 18:20 . 2009-06-17 23:59 -------- d-----w- c:\program files\Toox
2010-01-18 21:17 . 2009-06-18 02:47 -------- d-----w- c:\documents and settings\Salim\Application Data\Skype
2009-12-31 16:50 . 2008-04-13 10:15 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-23 17:08 . 2009-06-17 23:04 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-21 19:07 . 2008-04-13 17:33 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-21 09:11 . 2009-06-17 20:36 27200 ----a-w- c:\documents and settings\Salim\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-17 07:41 . 2009-06-17 19:39 347648 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:09 . 2008-04-13 17:33 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-09 17:40 . 2002-09-07 00:00 88522 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-09 17:40 . 2002-09-07 00:00 518200 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-09 10:09 . 2008-04-13 19:07 2068096 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-09 10:09 . 2008-04-13 17:08 2191232 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-04 18:22 . 2008-04-13 10:17 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.

• Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

c:\documents and settings\Salim\Menu D‚marrer\Programmes\D‚marrage\
Groom.lnk - c:\program files\Toox\Groom\Groom.exe [2009-5-28 1542616]

c:\documents and settings\Salim\Menu D‚marrer\Programmes\D‚marrage\
Groom.lnk - c:\program files\Toox\Groom\Groom.exe [2009-5-28 1542616]

c:\documents and settings\Salim\Menu D‚marrer\Programmes\D‚marrage\
Groom.lnk - c:\program files\Toox\Groom\Groom.exe [2009-5-28 1542616]

c:\documents and settings\Salim\Menu D‚marrer\Programmes\D‚marrage\
Groom.lnk - c:\program files\Toox\Groom\Groom.exe [2009-5-28 1542616]

c:\documents and settings\Salim\Menu D‚marrer\Programmes\D‚marrage\
Groom.lnk - c:\program files\Toox\Groom\Groom.exe [2009-5-28 1542616]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MaxRecentDocs"= 11 (0xb)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Documents and Settings\\Salim\\temp\\TeamViewer\\Version4\\TeamViewer.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\ACSPMonitor\\ASMonitor.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [23/12/2009 18:02 108289]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [17/06/2009 22:36 1684736]
.
Contenu du dossier 'Tâches planifiées'

2010-02-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-03-02 c:\windows\Tasks\User_Feed_Synchronization-{6D29AD96-B48E-479D-A161-55848C8D847A}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.aliceadsl.fr/
.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-02 18:31
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-1292428093-515967899-1177238915-1003\Software\SecuROM\License information*]
"datasecu"=hex:ce,3f,38,cf,99,9a,4f,26,2c,aa,c6,8a,61,f2,e7,99,91,ab,e9,ed,65,
7a,7c,bd,e0,c2,16,be,f3,fc,85,03,38,c8,69,fd,32,b3,30,25,07,3f,c3,fa,10,9a,\
"rkeysecu"=hex:29,23,be,84,e1,6c,d6,ae,52,90,49,f1,f1,bb,e9,eb
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(580)
c:\windows\system32\netprovcredman.dll
.
Heure de fin: 2010-03-02 18:33:06
ComboFix-quarantined-files.txt 2010-03-02 17:33

Avant-CF: 81 519 177 728 octets libres
Après-CF: 81 571 475 456 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

- - End Of File - - 4F6559C95E920DA215980355B9A48252