Je souffre

Bonjour,

voici mon rapport
je suis infecté par visualmedia.exe et recycler.exe à l'aide
############################## | UsbFix V6.099 |

User : Prof (Administrateurs) # COEUR
Update on 11/03/2010 by El Desaparecido , C_XX & Chimay8
Start at: 10:32:41 | 16/03/2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Pentium(R) 4 CPU 3.20GHz
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Disabled
AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 15,93 Go (7,72 Go free) # NTFS
D:\ -> Disque fixe local # 58,59 Go (55,31 Go free) [donnee] # NTFS
F:\ -> Disque amovible # 1,93 Go (1,93 Go free) # FAT32
I:\ -> Disque CD-ROM

################## | Elements infectieux |

C:\Documents and Settings\Prof\autorun.inf
C:\WINDOWS\System32\autorun.inf

################## | Registre |

[HKLM\SOFTWARE\Classes\CLSID\MADOWN]
[HKCR\CLSID\MADOWN]
[HKLM\SYSTEM\CurrentControlSet\Services\AVPsys]
[HKLM\SYSTEM\ControlSet001\Services\AVPsys]
[HKLM\SYSTEM\ControlSet003\Services\AVPsys]
[HKLM\software\microsoft\windows nt\currentversion\winlogon] "Taskman"

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{05f84d54-e5c4-11dc-bd03-00195b38c6a1}
Shell\AutoRun\command =E:\vfjc8mxm.exe
Shell\explore\Command =E:\vfjc8mxm.exe
Shell\open\Command =E:\vfjc8mxm.exe

HKCU\..\..\Explorer\MountPoints2\{06edd5b9-1d36-11df-807c-009027bb14a0}
Shell\AutoRun\command =E:\RECYCLER\k-1-3542-4232123213-7676767-8888886\MsGv.exe
Shell\open\command =E:\RECYCLER\k-1-3542-4232123213-7676767-8888886\MsGv.exe

HKCU\..\..\Explorer\MountPoints2\{0bc35952-229b-11df-8089-009027bb14a0}
Shell\AutoRun\command =folder.tmp/tmp.exe
Shell\explore\command =folder.tmp/tmp.exe
Shell\open\command =folder.tmp/tmp.exe

HKCU\..\..\Explorer\MountPoints2\{0ca28190-ea7b-11dc-bd0d-00195b38c6a1}
Shell\AutoRun\command =J:\8ng8w.com
Shell\explore\Command =J:\8ng8w.com
Shell\open\Command =J:\8ng8w.com

HKCU\..\..\Explorer\MountPoints2\{0d63e980-b1a7-11de-bfea-009027bb14a0}
Shell\AutoRun\command =ZABORAVI/nikada.exe
Shell\explore\command =ZABORAVI/nikada.exe
Shell\open\command =ZABORAVI/nikada.exe

HKCU\..\..\Explorer\MountPoints2\{17682695-e388-11dc-bcfd-00195b38c6a1}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe

HKCU\..\..\Explorer\MountPoints2\{299f31f3-5674-11de-bf42-009027bb14a0}
Shell\AutoRun\command =E:\memorybar.exe

HKCU\..\..\Explorer\MountPoints2\{34694a2c-8e19-11dd-be20-009027bb14a0}
Shell\AutoRun\command =E:\nfdmg.com
Shell\explore\Command =E:\nfdmg.com
Shell\open\Command =E:\nfdmg.com

HKCU\..\..\Explorer\MountPoints2\{36c11b44-3ae4-11dd-bd9b-00195b38c6a1}
Shell\AutoRun\command =J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
Shell\open\command =J:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe

HKCU\..\..\Explorer\MountPoints2\{3df408d9-e91c-11dc-bd07-00195b38c6a1}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe

HKCU\..\..\Explorer\MountPoints2\{4af2ee91-5c06-11de-bf4e-009027bb14a0}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL log.exe
Shell\Ouvrir\command =E:\log.exe

HKCU\..\..\Explorer\MountPoints2\{9eca6a72-5d52-11dd-bdd0-00192163db03}
Shell\Auto\command =auto.exe
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL auto.exe
Shell\Ouvrir\command =log.exe

HKCU\..\..\Explorer\MountPoints2\{abbd055a-346f-11dd-bd90-00195b38c6a1}
Shell\AutoRun\command =J:\LaunchU3.exe -a

HKCU\..\..\Explorer\MountPoints2\{abbd055b-346f-11dd-bd90-00195b38c6a1}
Shell\AutoRun\command =K:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe
Shell\open\command =K:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\spoolsv.exe

HKCU\..\..\Explorer\MountPoints2\{af1320dd-0534-11dd-bd3d-00195b38c6a1}
Shell\AutoRun\command =J:\q83iwmgf.bat
Shell\explore\Command =J:\q83iwmgf.bat
Shell\open\Command =J:\q83iwmgf.bat

HKCU\..\..\Explorer\MountPoints2\{bded4390-4999-11dd-bdbb-00195b38c6a1}
Shell\AutoRun\command =E:\RECYCLER\S-1-6-21-2438476501-1644491937-701003331-1213\WinMgmt.exe
Shell\open\command =E:\RECYCLER\S-1-6-21-2438476501-1644491937-701003331-1213\WinMgmt.exe

HKCU\..\..\Explorer\MountPoints2\{bf64acfc-5e31-11dd-bdd3-00192163db03}
Shell\AutoRun\command =J:\g2pfnid.com
Shell\explore\Command =J:\g2pfnid.com
Shell\open\Command =J:\g2pfnid.com

HKCU\..\..\Explorer\MountPoints2\{c10df426-ae00-11de-bfe5-009027bb14a0}
Shell\AutoRun\command =E:\folder.tmp/tmp.exe
Shell\explore\command =E:\folder.tmp/tmp.exe
Shell\open\command =E:\folder.tmp/tmp.exe

HKCU\..\..\Explorer\MountPoints2\{c1400634-ef31-11dc-bd17-00195b38c6a1}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL log.exe
Shell\Ouvrir\command =log.exe

HKCU\..\..\Explorer\MountPoints2\{cb6b734e-dac6-11dc-bce8-00047699115c}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe

HKCU\..\..\Explorer\MountPoints2\{eab50ba4-6233-11de-bf5b-009027bb14a0}
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL log.exe
Shell\Ouvrir\command =E:\log.exe

################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné !

################## | ! Fin du rapport # UsbFix V6.099 ! |