Security suite sur le PC

je l'ai en icone dans ma barre de tache en bas a droite

En mode sans echec avec prise de reseau, internet ne fonctionne pas quand meme :(
Comment cela est ce possible?

(sourire)

ca serait tellement plus simple ainsi...
.

g google chrome et ca ne marche toujours pas :(
Ensuite pour faire Malware bytes, il faut que je sois en mode sans echec ou alors en mode normal c'est bon?

Ok je le fais et des que c'est fini, je te poste le rapport

ok

je reviendrais plus tard

@+

ComboFix 10-08-31.02 - Administrateur 01/09/2010 15:18:35.1.2 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1022.487 [GMT 2:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\LUDO.exe

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Administrateur\Local Settings\Application Data\isfmskqac
c:\documents and settings\Administrateur\Local Settings\Application Data\isfmskqac\tdassewshdw.exe
c:\documents and settings\Administrateur\Local Settings\Application Data\xidjtqhhj
c:\documents and settings\Administrateur\Local Settings\Application Data\xidjtqhhj\tasofklshdw.exe
C:\Thumbs.db
c:\windows\system32\msconfig.exe
c:\windows\system32\scrrnfr.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2010-08-01 au 2010-09-01 ))))))))))))))))))))))))))))))))))))
.

2010-09-01 12:50 . 2010-09-01 12:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-09-01 12:50 . 2008-06-10 17:02 34296 ----a-w- c:\windows\system32\drivers\mbamcatchme.sys
2010-09-01 12:50 . 2008-06-10 17:02 15864 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-09-01 12:25 . 2010-09-01 12:25 -------- d-----w- C:\rsit
2010-09-01 12:25 . 2010-09-01 12:25 -------- d-----w- c:\program files\trend micro
2010-09-01 12:07 . 2010-09-01 12:15 -------- d-----w- C:\Kill'em
2010-09-01 12:02 . 2010-09-01 12:04 -------- d-----w- c:\program files\Ad-Remover
2010-09-01 11:51 . 2010-09-01 12:00 -------- d-----w- c:\program files\ZHPDiag
2010-09-01 09:58 . 2010-09-01 12:24 -------- d-----w- c:\program files\List_Kill'em
2010-08-31 16:04 . 2010-09-01 13:06 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-08-31 13:39 . 2010-08-31 13:54 1063424 ----a-w- c:\documents and settings\Administrateur\Application Data\2C2ED22996C27429D04BDC8FB16F81D8\mediafix70700en02.exe
2010-08-31 13:39 . 2010-08-31 13:39 -------- d-----w- c:\documents and settings\Administrateur\Application Data\2C2ED22996C27429D04BDC8FB16F81D8
2010-08-30 15:08 . 2010-08-30 15:08 -------- d-----w- c:\program files\Winamax Poker
2010-08-30 11:59 . 2010-08-30 11:59 -------- d-----w- c:\documents and settings\Administrateur\Application Data\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
2010-08-30 11:59 . 2010-08-30 11:58 53632 ----a-w- c:\documents and settings\Administrateur\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-08-30 11:59 . 2010-08-30 11:59 -------- d-----w- c:\program files\Fichiers communs\Adobe AIR
2010-08-09 15:47 . 2010-08-09 15:47 61440 ----a-w- c:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-46ea97ae-n\decora-sse.dll
2010-08-09 15:47 . 2010-08-09 15:47 503808 ----a-w- c:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7df84be5-n\msvcp71.dll
2010-08-09 15:47 . 2010-08-09 15:47 499712 ----a-w- c:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7df84be5-n\jmc.dll
2010-08-09 15:47 . 2010-08-09 15:47 348160 ----a-w- c:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\4\7ec4bf04-7df84be5-n\msvcr71.dll
2010-08-09 15:47 . 2010-08-09 15:47 12800 ----a-w- c:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\42\4488892a-46ea97ae-n\decora-d3d.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-01 10:35 . 2008-04-14 16:00 79400 ----a-w- c:\windows\system32\perfc00C.dat
2010-09-01 10:35 . 2008-04-14 16:00 498366 ----a-w- c:\windows\system32\perfh00C.dat
2010-08-31 13:41 . 2009-04-07 15:39 -------- d-----w- c:\documents and settings\Administrateur\Application Data\uTorrent
2010-05-19 16:28 . 2010-05-13 15:55 4608 --sha-w- c:\program files\Thumbs.db
2009-03-30 15:49 . 2009-03-30 15:49 35106 ----a-w- c:\program files\nv4_disp.cat
2009-03-25 14:19 . 2009-03-25 14:19 41161496 ----a-w- c:\program files\PhysX_9.09.0203_SystemSoftware.exe
2010-05-17 15:04 . 2009-10-20 17:12 848 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

------- Sigcheck -------

[-] 2008-05-08 . AE0D48AF37F5A48156D4A6BAE07C9121 . 568320 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe

[-] 2008-05-08 . D449DF66B6335B443508A58B1E8DB996 . 647680 . . [5.82] . . c:\windows\system32\comctl32.dll

[-] 2008-05-08 . DB3AB42404D66860A4C4E9ED8530D0FD . 724480 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll

[-] 2007-10-29 . D84567752FB42D8DC55CFB85FE0EDECE . 1916416 . . [6.00.2900.2894] . . c:\windows\explorer.exe


[-] 2008-05-15 . A5780186A76EABA3E656E63B41862997 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll

[-] 2008-05-08 . 58DB2EE838D5B7BAD0F7F10A6C920390 . 40960 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe

c:\windows\System32\wscntfy.exe ... manque !!
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{280b5d37-4a76-467a-b3d6-942fca90acde}"= "c:\program files\Shareware.Pro-FR\tbSha1.dll" [2010-03-21 2349080]

[HKEY_CLASSES_ROOT\clsid\{280b5d37-4a76-467a-b3d6-942fca90acde}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{280b5d37-4a76-467a-b3d6-942fca90acde}]
2010-03-21 18:35 2349080 ----a-w- c:\program files\Shareware.Pro-FR\tbSha1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{280b5d37-4a76-467a-b3d6-942fca90acde}"= "c:\program files\Shareware.Pro-FR\tbSha1.dll" [2010-03-21 2349080]
"{D01B1F7D-9D7F-46C3-8DB9-5A55819E2A7F}"= "c:\program files\iGraal\Toolbar.dll" [2009-10-12 92872]

[HKEY_CLASSES_ROOT\clsid\{280b5d37-4a76-467a-b3d6-942fca90acde}]

[HKEY_CLASSES_ROOT\clsid\{d01b1f7d-9d7f-46c3-8db9-5a55819e2a7f}]
[HKEY_CLASSES_ROOT\Toolbar.iGraalToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{FD15C801-40BA-41E2-A8EE-1D3113BE5282}]
[HKEY_CLASSES_ROOT\Toolbar.iGraalToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{280B5D37-4A76-467A-B3D6-942FCA90ACDE}"= "c:\program files\Shareware.Pro-FR\tbSha1.dll" [2010-03-21 2349080]

[HKEY_CLASSES_ROOT\clsid\{280b5d37-4a76-467a-b3d6-942fca90acde}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-27 13684736]
"DiskeeperSystray"="c:\program files\Executive Software\Diskeeper\DkIcon.exe" [2004-12-21 180312]
"VX1000"="c:\windows\vVX1000.exe" [2007-04-10 709992]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2007-05-17 279912]
"RTHDCPL"="RTHDCPL.EXE" [2009-03-02 17530368]
"NeroFilterCheck"="c:\program files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"ORAHSSSessionManager"="c:\program files\Orange\SessionManager\SessionManager.exe" [2007-09-25 102400]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-06-29 286720]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2008-06-10 1183352]
"Corel File Shell Monitor"="c:\program files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe" [2008-08-08 16712]
"SystrayORAHSS"="c:\program files\Orange\Systray\SystrayApp.exe" [2007-09-25 94208]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2010-01-11 246504]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"nltide_3"="advpack.dll" [2010-01-05 124928]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
Lancement rapide d'Adobe Reader.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
NkbMonitor.exe.lnk - c:\program files\Nikon\PictureProject\NkbMonitor.exe [2010-2-14 118784]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)
"NoStrCmpLogical"= 0 (0x0)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKLM\~\startupfolder\C:^Documents and Settings^Administrateur^Menu Démarrer^Programmes^Démarrage^Notification de cadeaux MSN.lnk]
path=c:\documents and settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Notification de cadeaux MSN.lnk
backup=c:\windows\pss\Notification de cadeaux MSN.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Nikon Monitor.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Nikon Monitor.lnk
backup=c:\windows\pss\Nikon Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Philips GoGear Spark Gestionnaire de piphiques.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Philips GoGear Spark Gestionnaire de piphiques.lnk
backup=c:\windows\pss\Philips GoGear Spark Gestionnaire de piphiques.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"DisablePagingExecutive"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Orange\\Connectivity\\ConnectivityManager.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [07/02/2010 13:08 VALR 108289]
S2 gupdate1c9f5b68bd5a90;Service Google Update (gupdate1c9f5b68bd5a90);"c:\program files\Google\Update\GoogleUpdate.exe" /svc --> c:\program files\Google\Update\GoogleUpdate.exe [?]
S3 3xHybrid;3xHybrid service;c:\windows\system32\DRIVERS\3xHybrid.sys --> c:\windows\system32\DRIVERS\3xHybrid.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [04/04/2009 09:53 VALR 1684736]
S3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [17/06/2009 14:20 VALR 12648]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - HELPSVC

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
2010-01-05 09:56 124928 ----a-w- c:\windows\system32\advpack.dll
.
Contenu du dossier 'Tâches planifiées'

2010-08-28 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 11:42]

2010-09-01 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-10-10 17:27]

2010-07-23 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2007-01-17 12:47]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyServer = http=127.0.0.1:6522
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: {{32893F3D-2B10-4B09-BA6A-8F20E7D33925} - {32893F3D-2B10-4B09-BA6A-8F20E7D33925} - c:\program files\iGraal\Button.dll
Trusted Zone: orange.fr\www
.
.
------- Associations de fichier -------
.
regfile=regedit.exe "%1" %*
scrfile="%1" %*
.
- - - - ORPHELINS SUPPRIMES - - - -

URLSearchHooks-{EEE6C35D-6118-11DC-9C72-001320C79847} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
HKCU-Run-msnmsgr - ~c:\program files\Windows Live\Messenger\msnmsgr.exe
HKCU-Run-dotjpkqk - c:\documents and settings\Administrateur\Local Settings\Application Data\isfmskqac\tdassewshdw.exe
HKCU-Run-gsgsaeae - c:\documents and settings\Administrateur\Local Settings\Application Data\xidjtqhhj\tasofklshdw.exe
HKLM-Run-dotjpkqk - c:\documents and settings\Administrateur\Local Settings\Application Data\isfmskqac\tdassewshdw.exe
HKLM-Run-gsgsaeae - c:\documents and settings\Administrateur\Local Settings\Application Data\xidjtqhhj\tasofklshdw.exe
HKU-Default-Run-VisualTaskTip - \Program Files\VisualTaskTips\VisualTaskTips.exe
AddRemove-_{707EB912-C597-49D8-9460-46CC9AB03EBE} - c:\program files\Corel\Corel Painter Photo Essentials 4\MSILauncher {707EB912-C597-49D8-9460-46CC9AB03EBE}



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-01 15:22
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
msnmsgr = ~"c:\program files\Windows Live\Messenger\msnmsgr.exe" /background?

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(492)
c:\windows\system32\SETUPAPI.dll
c:\windows\system32\COMRes.dll
c:\windows\system32\cscui.dll

- - - - - - - > 'lsass.exe'(548)
c:\windows\system32\setupapi.dll

- - - - - - - > 'explorer.exe'(752)
c:\windows\system32\SHDOCVW.dll
c:\program files\RocketDock\RocketDock.dll
c:\windows\system32\COMRes.dll
c:\windows\System32\cscui.dll
c:\program files\Fichiers communs\Ahead\Lib\NeroSearchBar.dll
c:\program files\Fichiers communs\Ahead\Lib\MFC71U.DLL
c:\program files\Fichiers communs\Ahead\Lib\BCGCBPRO860un71.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\SETUPAPI.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\NETSHELL.dll
c:\windows\system32\credui.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Executive Software\Diskeeper\DkService.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft LifeCam\MSCamS32.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PSIService.exe
c:\program files\Fichiers communs\Protexis\License Service\PsiService_2.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\RTHDCPL.EXE
c:\program files\Orange\Launcher\Launcher.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
c:\program files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
c:\program files\Orange\Deskboard\deskboard.exe
c:\program files\Orange\connectivity\connectivitymanager.exe
c:\program files\Orange\connectivity\CoreCom\CoreCom.exe
c:\program files\Orange\connectivity\CoreCom\OraConfigRecover.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
.
**************************************************************************
.
Heure de fin: 2010-09-01 15:25:28 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-09-01 13:25

Avant-CF: 62 010 011 648 octets libres
Après-CF: 62 227 222 528 octets libres

- - End Of File - - 72C51B8F78C6F2710BD681CD1EC68347