ComboFix

ok mais je peux les regarder après une analyse de combofix mais au bout de quelques jours elles disparaissent a nouveau

Pas de problème particulier a part que sur certains site ou je vais les photos ne s'affiche pas j'ai supprimé les cookies mets ca le fait touijours par contre si je fais une analyse avec combofix les photos reapparaissent

il y est le rapport a chaque fois mais a qui le fournir ?

copie-colle-le ici

ComboFix 10-07-11.07 - murielle 12/07/2010 19:13:48.10.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1583 [GMT 2:00]
Lancé depuis: c:\documents and settings\murielle\Mes documents\Téléchargement\ComboFix.exe
AV: Antivirus Personnel *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

((((((((((((((((((((((((((((( Fichiers créés du 2010-06-12 au 2010-07-12 ))))))))))))))))))))))))))))))))))))
.

2010-07-07 11:31 . 2010-07-07 11:46 -------- d-----w- c:\documents and settings\murielle\Local Settings\Application Data\Messenger_Plus_Live_France
2010-07-07 11:31 . 2010-07-07 11:41 -------- d-----w- c:\program files\Messenger_Plus_Live_France
2010-07-06 20:08 . 2010-07-06 20:08 747808 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-07-06 19:20 . 2010-07-06 19:20 -------- d-----w- c:\documents and settings\murielle\Local Settings\Application Data\IsolatedStorage
2010-07-06 19:05 . 2010-07-06 19:05 -------- d-----w- c:\documents and settings\murielle\Local Settings\Application Data\Micro_Application
2010-07-06 19:03 . 2010-07-06 19:05 -------- d-----w- c:\documents and settings\murielle\Local Settings\Application Data\Micro Application
2010-07-06 13:23 . 2010-07-06 13:25 -------- d-----w- c:\program files\Fichiers communs\Macromedia
2010-07-06 13:23 . 2010-07-06 13:24 -------- d-----w- c:\program files\Macromedia
2010-07-04 12:28 . 2010-07-07 16:42 -------- d-----w- c:\documents and settings\murielle\Application Data\PriceGong
2010-06-20 10:52 . 2010-04-21 10:06 52224 ----a-w- c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{59994074-c06d-4a75-9768-49e5a8c21264}\components\FFExternalAlert.dll
2010-06-20 10:52 . 2010-04-21 10:06 101376 ----a-w- c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{59994074-c06d-4a75-9768-49e5a8c21264}\components\RadioWMPCore.dll
2010-06-19 05:36 . 2010-06-19 05:36 -------- d-----w- c:\documents and settings\All Users\Application Data\PhotoMail
2010-06-19 05:36 . 2010-06-19 05:36 -------- d-----w- c:\program files\PhotoMail Maker

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-12 17:05 . 2010-02-27 20:26 -------- d-----w- c:\documents and settings\All Users\Application Data\Micro Application
2010-07-12 14:50 . 2010-02-28 19:23 1 ----a-w- c:\documents and settings\murielle\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-07-12 14:24 . 2010-02-27 20:28 802848 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2010-07-12 14:24 . 2010-02-27 20:28 3824 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2010-07-12 14:24 . 2010-02-27 20:28 35880 --sha-w- c:\windows\system32\drivers\fidbox.idx
2010-07-12 14:24 . 2010-02-27 20:28 4186144 --sha-w- c:\windows\system32\drivers\fidbox.dat
2010-07-12 11:15 . 2010-04-13 18:54 -------- d-----w- c:\documents and settings\murielle\Application Data\vlc
2010-07-12 11:15 . 2010-04-13 18:54 -------- d-----w- c:\documents and settings\murielle\Application Data\dvdcss
2010-07-11 17:30 . 2010-06-06 16:10 -------- d-----w- c:\program files\Burn4Free
2010-07-07 11:31 . 2010-02-28 08:53 -------- d-----w- c:\program files\Messenger Plus! Live
2010-07-06 19:04 . 2010-02-27 19:14 102048 ----a-w- c:\documents and settings\murielle\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-07-06 19:03 . 2010-02-27 20:26 -------- d-----w- c:\program files\Micro Application
2010-07-06 18:38 . 2010-02-28 14:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
2010-07-05 06:11 . 2010-03-28 16:22 -------- d-----w- c:\documents and settings\murielle\Application Data\Nosibay
2010-07-05 06:11 . 2010-03-28 16:22 -------- d-----w- c:\program files\Nosibay
2010-06-30 19:20 . 2010-04-03 12:38 -------- d-----w- c:\documents and settings\murielle\Application Data\KompoZer
2010-06-23 09:07 . 2006-03-02 12:00 80748 ----a-w- c:\windows\system32\perfc00C.dat
2010-06-23 09:07 . 2006-03-02 12:00 500900 ----a-w- c:\windows\system32\perfh00C.dat
2010-06-05 20:01 . 2010-06-05 20:01 73216 ----a-w- c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\components\ipc_fireftp.dll
2010-06-05 20:01 . 2010-06-05 20:01 172032 ----a-w- c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\puttygen.exe
2010-06-05 20:01 . 2010-06-05 20:01 307200 ----a-w- c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\psftp.exe
2010-05-30 13:51 . 2010-05-30 13:45 -------- d-----w- c:\program files\AskTBar
2010-05-24 07:23 . 2010-05-24 07:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Downloaded Installations
2010-05-22 16:38 . 2010-05-22 16:38 503808 ----a-w- c:\documents and settings\murielle\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-478a367a-n\msvcp71.dll
2010-05-22 16:38 . 2010-05-22 16:38 499712 ----a-w- c:\documents and settings\murielle\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-478a367a-n\jmc.dll
2010-05-22 16:38 . 2010-05-22 16:38 348160 ----a-w- c:\documents and settings\murielle\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-478a367a-n\msvcr71.dll
2010-05-22 16:38 . 2010-05-22 16:38 61440 ----a-w- c:\documents and settings\murielle\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-38484051-n\decora-sse.dll
2010-05-22 16:38 . 2010-05-22 16:38 12800 ----a-w- c:\documents and settings\murielle\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-38484051-n\decora-d3d.dll
2010-05-16 15:05 . 2010-05-16 15:05 -------- d-----w- c:\program files\Windows Media Connect 2
2010-05-06 10:33 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-05 07:25 . 2010-02-27 20:28 97549 ----a-w- c:\windows\system32\drivers\klick.dat
2010-05-05 07:25 . 2010-02-27 20:28 113933 ----a-w- c:\windows\system32\drivers\klin.dat
2010-05-02 08:08 . 2006-03-02 12:00 1851392 ----a-w- c:\windows\system32\win32k.sys
2010-04-20 05:30 . 2006-03-02 12:00 285696 ----a-w- c:\windows\system32\atmfd.dll
.

((((((((((((((((((((((((((((( SnapShot_2010-07-10_05.21.35 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-07-12 17:05 . 2010-07-12 17:05 16384 c:\windows\Temp\Perflib_Perfdata_2d8.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes1.dll" [2010-07-07 2734688]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{59994074-c06d-4a75-9768-49e5a8c21264}]
2010-07-07 11:41 2734688 ----a-w- c:\program files\Messenger_Plus_Live_France\tbMes1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes1.dll" [2010-07-07 2734688]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{59994074-C06D-4A75-9768-49E5A8C21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes1.dll" [2010-07-07 2734688]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2010-06-19 353736]
"Bubble Foot"="c:\program files\Nosibay\Bubble Foot\LBubble Foot.exe" [2009-09-03 423440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-05-01 843776]
"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-06-02 385024]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-11 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]
"AVP"="c:\program files\Micro Application\Antivirus Personnel 2010\avp.exe" [2009-07-07 208616]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-01-11 246504]
"SSBkgdUpdate"="c:\program files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 155648]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 69632]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\murielle\Menu D'marrer\Programmes\D'marrage\
Lanceur.lnk - c:\program files\Micro Application\LauncherMA.exe [2009-2-10 485376]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
Adobe Gamma Loader.lnk - c:\program files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2010-4-3 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\IncrediMail\\Bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\Bin\\ImApp.exe"=
"c:\\Program Files\\IncrediMail\\Bin\\ImpCnt.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Fichiers communs\\Adobe\\ARM\\1.0\\AdobeARM.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 19:29 32784]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [12/11/2009 11:28 1021256]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30/04/2008 19:06 24592]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14/10/2009 08:24 10064]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [26/01/2010 18:45 243056]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'

2010-07-12 c:\windows\Tasks\Recherche de problèmes automatique.job
- c:\program files\TuneUp Utilities 2010\TuneUpSystemStatusCheck.exe [2009-11-12 09:33]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://msn.fr/
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: Easy-WebPrint Ajouter à la liste d'impressions - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
FF - ProfilePath - c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\
FF - prefs.js: browser.search.selectedEngine - MyStart Search
FF - prefs.js: browser.startup.homepage - hxxp://mystart.incredimail.com/
FF - component: c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{59994074-c06d-4a75-9768-49e5a8c21264}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{59994074-c06d-4a75-9768-49e5a8c21264}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\murielle\Application Data\Mozilla\Firefox\Profiles\bk7z0di3.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\components\ipc_fireftp.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll

---- PARAMETRES FIREFOX ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
.
.
------- Associations de fichier -------
.
.txt=
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-12 19:16
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€-€|ÿÿÿÿÀ*€|ù*9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(1668)
c:\program files\ScanSoft\OmniPageSE4.0\OpHookSE4.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Heure de fin: 2010-07-12 19:17:28
ComboFix-quarantined-files.txt 2010-07-12 17:17
ComboFix2.txt 2010-07-10 05:22
ComboFix3.txt 2010-07-05 05:45
ComboFix4.txt 2010-06-30 06:45
ComboFix5.txt 2010-07-12 17:12

Avant-CF: 468 421 136 384 octets libres
Après-CF: 468 520 644 608 octets libres

- - End Of File - - A5A35145F2CE09377CD1A5A039F4322F

ok merci je vais essayer

:)

je n'y arrive pas à l'installer je reessaierais plus tard