Gros virus sur pc

bonjour
merci de m avoir repondu
alors il me met threats detected
hidden file
sevice: 1cf6efbe
suspicious object medium risk et skip a cote

ensuite
rootkit.win 32.zaccess.h
service/MRxSmb
malware object, high risk et cure a cote

et enfin
locked file
service safeboot
suspicious object medium risk et skip a cote

1cf6efbe => delete
service/MRxSmb => cure
locked file si c'est genre spd.sys tu mets skip

Poste le rapport de scan.

duration 1:15
processed 237 objects
found 3 threats
neutralized 5 threats
quarantined: 0
reboot computer

11:18:27.0718 2920 TDSS rootkit removing tool 2.6.4.0 Oct 3 2011 17:37:01
11:18:29.0718 2920 ============================================================
11:18:29.0718 2920 Current date / time: 2011/10/04 11:18:29.0718
11:18:29.0718 2920 SystemInfo:
11:18:29.0718 2920
11:18:29.0718 2920 OS Version: 5.1.2600 ServicePack: 2.0
11:18:29.0718 2920 Product type: Workstation
11:18:29.0718 2920 ComputerName: LILIE
11:18:29.0718 2920 UserName: Administrateur
11:18:29.0718 2920 Windows directory: C:\WINDOWS
11:18:29.0718 2920 System windows directory: C:\WINDOWS
11:18:29.0718 2920 Processor architecture: Intel x86
11:18:29.0718 2920 Number of processors: 2
11:18:29.0718 2920 Page size: 0x1000
11:18:29.0718 2920 Boot type: Normal boot
11:18:29.0718 2920 ============================================================
11:18:37.0625 2920 Initialize success
11:18:40.0812 1636 ============================================================
11:18:40.0812 1636 Scan started
11:18:40.0812 1636 Mode: Manual;
11:18:40.0812 1636 ============================================================
11:18:48.0062 1636 1cf6efbe (8f2bb1827cac01aee6a16e30a1260199) C:\WINDOWS\3203397148:3809022017.exe
11:18:48.0093 1636 Suspicious file (Hidden): C:\WINDOWS\3203397148:3809022017.exe. md5: 8f2bb1827cac01aee6a16e30a1260199
11:18:48.0093 1636 1cf6efbe ( HiddenFile.Multi.Generic ) - warning
11:18:48.0093 1636 1cf6efbe - detected HiddenFile.Multi.Generic (1)
11:18:48.0218 1636 Aavmker4 (95d1de2a6613494e853a9738d5d9acd4) C:\WINDOWS\system32\drivers\Aavmker4.sys
11:18:48.0218 1636 Aavmker4 - ok
11:18:48.0234 1636 Abiosdsk - ok
11:18:48.0250 1636 abp480n5 - ok
11:18:48.0312 1636 Accelerometer (558a0039f0ef634397e1f61055504478) C:\WINDOWS\system32\DRIVERS\Accelerometer.sys
11:18:48.0312 1636 Accelerometer - ok
11:18:48.0375 1636 ACPI (0bd94fbfc14ea3606cd6ca4c0255baa3) C:\WINDOWS\system32\DRIVERS\ACPI.sys
11:18:48.0375 1636 ACPI - ok
11:18:48.0437 1636 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
11:18:48.0453 1636 ACPIEC - ok
11:18:48.0515 1636 ADIHdAudAddService (be4beb3fde3edfad4ef2760722717b0f) C:\WINDOWS\system32\drivers\ADIHdAud.sys
11:18:48.0515 1636 ADIHdAudAddService - ok
11:18:48.0640 1636 adpu160m - ok
11:18:48.0671 1636 AEAudio (358063ab6c1c4173b735525cdfa65f94) C:\WINDOWS\system32\drivers\AEAudio.sys
11:18:48.0687 1636 AEAudio - ok
11:18:48.0750 1636 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
11:18:48.0750 1636 aec - ok
11:18:48.0812 1636 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
11:18:48.0812 1636 Afc - ok
11:18:48.0921 1636 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
11:18:48.0921 1636 AFD - ok
11:18:49.0031 1636 AgereSoftModem (90456051c422e09bc36e6340dd891f0c) C:\WINDOWS\system32\DRIVERS\AGRSM.sys
11:18:49.0062 1636 AgereSoftModem - ok
11:18:49.0171 1636 Aha154x - ok
11:18:49.0171 1636 aic78u2 - ok
11:18:49.0234 1636 aic78xx - ok

si ca peut t aider g fait ad remover aussi
====== RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 09:55:27 le 03/10/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 2 (X86)
Administrateur@LILIE ( )

============== RECHERCHE ==============


Dossier trouvé: C:\Poker\Titan Poker
Fichier trouvé: C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\Quick Launch\Titan Poker.lnk
Dossier trouvé: C:\Program Files\Ask.com

Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{49783ED4-258D-4f9f-BE11-137C18D3E543}

Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}


============== SCAN ADDITIONNEL ==============

**** Internet Explorer Version [7.0.5730.13] ****

HKCU_Main|SearchMigratedDefaultURL - hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
HKCU_Main|Search bar - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Start Page - hxxp://www.google.fr/
HKLM_Main|Default_Page_URL - hxxp://fr.yahoo.com
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.missim.org/
HKCU_SearchScopes\{0633EE93-1111-472f-A0FF-E1416B8B2EAA} - "Search" (hxxp://www.missim.org/google?q={searchTerms}&sa=Search&cx=partner-pub-3546861938...)
HKCU_SearchScopes\{13D1D66A-18D9-4946-8F0F-71DC543226A7} - "Orange" (hxxp://www.orange.fr/bin/frame.cgi?u=hxxp%3A//r.voila.fr/se%3Frdata%3D{searchTer...)
HKCU_SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=LMW2&o=16050&src=crm&q={searchTer...)
HKCU_Toolbar\ShellBrowser|{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} (x)
HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x)
HKLM_Toolbar|{A5899B52-3AF9-4F56-85FE-AD7B3BE8490F} (C:\Program Files\SYSTRAN\5.0\Personal\IEPlugIn.dll)
HKLM_ElevationPolicy\{44270ABA-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar1user.exe (x)
HKLM_ElevationPolicy\{8EBFFAE0-F0A4-4ee6-8524-2751906624C4} - C:\Program Files\Player Metaboli\GPlayer.exe (x)
HKLM_Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - "?" (?)
HKLM_Extensions\{49783ED4-258D-4f9f-BE11-137C18D3E543} - "Titan Poker" (C:\Poker\Titan Poker\casino.ico)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll)
BHO\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - "SSVHelper Class" (C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll)
BHO\{DF21F1DB-80C6-11D3-9483-B03D0EC10000} - "Credential Manager for HP ProtectTools" (C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 0 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 03/10/2011 09:55:44 (2665 Octet(s))

Fin à: 09:56:24, 03/10/2011

oui toujours le meme

ben je l es fait
mais en refaisant un tdsskiller
j ai de nouveau la meme chose

si je vais sur details
j ai infected MRxSmb Rootkit.Win32.ZAccess.e

et t'as mis cure pour celui la ?

Tu peux passer celui là aussi : https://www.malekal.com/zeroaccesssirefef-remover/

et poster le rapport.

je n arrive pas a le poster mais il me dit infected et plein de ligne rouge error