Trojan, malware... : impossible à supprimer

J'ai installé ZHPDiag, impossible de scanner. ça beug à 54%, jsuis obligée d'éteindre et de rallumer l'ordi à la main....

oui et merci d'ailleurs pcq jpense que Archet9 m'a oublié :(
j'ai pas réussi à faire le scan avec ZHP Diag, ça beug à chaque fois.
c'est bon si jvous envoie le rapport de ComboFix?

Non, fais-le pas tout de suite.

ComboFix 10-07-11.05 - Ophélie 12/07/2010 17:14:40.1.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium
Lancé depuis: c:\users\Ophélie\Downloads\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100712-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: avast! antivirus 4.8.1368 [VPS 100712-0] *disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\recycler\S-1-5-21-1723083796-6126229687-781161612-0338\recycle.exe

----- BITS: Il y a peut-être des sites infectés -----

hxxp://ads1.msads.net
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-06-12 au 2010-07-12 ))))))))))))))))))))))))))))))))))))
.

2010-07-12 15:25 . 2010-07-12 15:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-07-11 16:00 . 2010-07-11 16:00 -------- d-----w- c:\program files\ZHPDiag
2010-07-11 15:01 . 2010-07-11 15:52 -------- d-----w- c:\program files\Panda Security
2010-06-13 20:34 . 2010-04-12 15:29 411368 ----a-w- c:\windows\system32\deployJava1.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-12 08:48 . 2010-05-15 14:33 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2010-06-21 21:18 . 2006-03-11 08:50 700222 ----a-w- c:\windows\system32\perfh00C.dat
2010-06-21 21:18 . 2006-03-11 08:50 122020 ----a-w- c:\windows\system32\perfc00C.dat
2010-06-13 20:34 . 2009-08-08 22:11 -------- d-----w- c:\program files\Java
2010-06-12 01:49 . 2009-07-08 08:27 265046533 ----a-w- c:\windows\DUMP6ec8.tmp
2010-06-10 01:09 . 2006-03-11 01:16 -------- d-----w- c:\programdata\Microsoft Help
2010-06-05 20:44 . 2006-03-11 01:20 -------- d-----w- c:\program files\Picasa2
2010-06-05 18:50 . 2010-06-05 18:54 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-06-05 14:20 . 2010-06-05 14:20 501872 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtbDD08.tmp.exe
2010-06-04 19:23 . 2010-06-02 16:19 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-03 17:16 . 2006-03-11 01:05 -------- d-----w- c:\program files\Microsoft Works
2010-06-03 09:01 . 2006-11-02 12:37 -------- d-----w- c:\program files\MSBuild
2010-06-03 08:59 . 2010-06-03 08:59 -------- d-----w- c:\program files\Microsoft.NET
2010-06-03 08:48 . 2010-06-03 08:48 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-05-31 12:09 . 2010-05-31 12:08 -------- d-----w- c:\program files\iTunes
2010-05-31 12:08 . 2010-05-31 12:08 -------- d-----w- c:\program files\iPod
2010-05-31 12:08 . 2009-07-18 18:13 -------- d-----w- c:\program files\Common Files\Apple
2010-05-31 12:02 . 2010-05-31 12:02 -------- d-----w- c:\program files\Bonjour
2010-05-31 11:59 . 2010-05-31 11:59 73000 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.1.1.12\SetupAdmin.exe
2010-05-21 12:14 . 2009-10-03 08:55 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-16 18:28 . 2006-03-11 01:10 -------- d-----w- c:\program files\Google
2010-05-15 17:57 . 2010-05-15 14:33 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-05-15 16:48 . 2010-05-15 16:44 -------- d-----w- c:\programdata\Lavasoft
2010-05-15 16:48 . 2010-05-15 16:48 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-05-15 16:48 . 2010-05-15 17:45 15880 ----a-w- c:\windows\system32\lsdelete.exe
2010-05-15 16:45 . 2010-05-15 16:45 -------- dc-h--w- c:\programdata\{CCE9E666-4D7C-4946-A98B-CFDE0A0C1706}
2010-05-15 16:45 . 2010-05-15 16:44 -------- d-----w- c:\program files\Lavasoft
2010-05-15 16:45 . 2010-05-15 16:45 -------- dc-h--w- c:\programdata\{52AC600B-5800-407E-99FF-83CD0669760B}
2009-12-07 21:39 . 2009-12-07 21:39 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2009-08-29 20:05 . 2006-03-11 01:04 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2009-08-29 20:05 . 2006-03-11 01:04 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2009-08-29 20:05 . 2006-03-11 01:04 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2009-08-29 20:05 . 2006-03-11 01:04 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2009-08-29 20:05 . 2006-03-11 01:04 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
2006-03-11 09:02 . 2006-03-11 08:52 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 218032]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2006-03-11 1006264]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-23 857648]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-08-16 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-08-16 8478720]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-08-16 81920]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 232184]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-12-07 30192]
"MSPService"="c:\program files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe" [2007-06-12 102400]
"toolbar_eula_launcher"="c:\program files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 28672]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"lxdnmon.exe"="c:\program files\Lexmark 2600 Series\lxdnmon.exe" [2008-03-27 660136]
"lxdnamon"="c:\program files\Lexmark 2600 Series\lxdnamon.exe" [2008-03-27 16040]
"FaxCenterServer"="c:\program files\Lexmark Fax Solutions\fm3032.exe" [2008-03-27 320168]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 57344]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2010-03-16 47392]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-04-28 142120]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher]
2007-08-02 14:30 3096576 ----a-w- c:\program files\Nokia\Nokia Software Launcher\NSLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-03 135664]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-07-12 1352832]
R2 lxdnCATSCustConnectService;lxdnCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxdnserv.exe [2008-02-27 98984]
R3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2009-12-07 30192]
R3 Start BT in service;Start BT in service;c:\program files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [2007-04-26 52080]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-06-05 64288]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328]
S2 lxdn_device;lxdn_device;c:\windows\system32\lxdncoms.exe [2008-02-27 594600]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\DRIVERS\itecir.sys [2007-01-08 46592]

.
Contenu du dossier 'Tâches planifiées'

2010-07-12 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-02-05 20:12]

2010-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-03 19:22]

2010-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-03 19:22]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.de/
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
FF - ProfilePath - c:\users\Ophélie\AppData\Roaming\Mozilla\Firefox\Profiles\xa0o1ifu.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=8&key=IESTART
FF - component: c:\progra~1\MOZILL~1\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll
FF - component: c:\progra~1\MOZILL~1\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll
FF - component: c:\progra~1\MOZILL~1\extensions\talkback@mozilla.org\components\qfaservices.dll
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.allow_platform_file_picker", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.cookie.p3plevel", 1); // 0=low, 1=medium, 2=high, 3=custom
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.enablePad", false); // Allow client to do proxy autodiscovery
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.search.param.Google.1.default", "chrome://branding/content/searchconfig.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.search.param.Google.1.custom", "chrome://branding/content/searchconfig.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("signon.prefillForms", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.enabled", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.remoteLookups", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.provider.0.updateURL", "http://sb.google.com/safebrowsing/update?client={moz:client}&appver={moz:version}&");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.provider.0.lookupURL", "https://www.google.com/?gws_rd=ssl{moz:client}&appver={moz:version}&");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.provider.0.reportURL", "http://sb.google.com/safebrowsing/report?");
.
- - - - ORPHELINS SUPPRIMES - - - -

MSConfigStartUp-Halo2 - c:\users\OPHLIE~1\AppData\Local\Temp\sshnas21.dll



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-12 17:25
Windows 6.0.6000 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2010-07-12 17:30:56
ComboFix-quarantined-files.txt 2010-07-12 15:30

Avant-CF: 84 283 740 160 octets libres
Après-CF: 83 933 478 912 octets libres

- - End Of File - - 34D32C7170E162B21288A4E5370F67A8

Merci beaucoup pr le lien Chiquitine ! je l'ai ouvert et là, qu'est ce que je découvre! 14 000 chevaux de troie!!!!!!!! que bien sûr Avast ne VEUT PAS supprimer, ni mettre en quarantaine!! Obliger de supprimer le fichier téléchargé!
C'est bon, je crois que jvais aller chez un informaticien, tanpis pr le prix que ça me coûtera. Merci quand mm pour votre aide!