Virus gendarmerie (Urausy) et WebCake

salut je suis nouveau.. j'ai suivi ce tuto merci!!! si vous pouvez m'aider j'en serais ravi!!!

RogueKiller V8.6.6 [Aug 19 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://www.adlice.com/forum/
Website : https://www.adlice.com/roguekiller/
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows Vista (6.0.6000 ) 32 bits version
Started in : Normal mode
User : PC [Admin rights]
Mode : Scan -- Date : 08/24/2013 13:25:58
| ARK || FAK || MBR |

¤¤¤ Bad processes : 3 ¤¤¤
[SUSP PATH] cltmng.exe -- C:\Users\PC\AppData\Roaming\SearchProtect\bin\cltmng.exe [7] -> KILLED [TermProc]
[SUSP PATH] avgmfapx.exe -- C:\Users\PC\AppData\Local\Temp\7zSDD8F.tmp\avgmfapx.exe [-] -> KILLED [TermProc]
[SUSP PATH] avgmfapx.exe -- C:\ProgramData\MFAData\SelfUpd\avgmfapx.exe [7] -> KILLED [TermProc]

¤¤¤ Registry Entries : 9 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : SearchProtect (C:\Users\PC\AppData\Roaming\SearchProtect\bin\cltmng.exe [7]) -> FOUND
[RUN][SUSP PATH] HKCU\[...]\Run : WebCake Desktop ("C:\Users\PC\AppData\Roaming\Tepfel\WebCakeDesktop.exe" [7]) -> FOUND
[RUN][SUSP PATH] HKUS\S-1-5-21-3141850495-3855579833-2155079751-1000\[...]\Run : SearchProtect (C:\Users\PC\AppData\Roaming\SearchProtect\bin\cltmng.exe [7]) -> FOUND
[RUN][SUSP PATH] HKUS\S-1-5-21-3141850495-3855579833-2155079751-1000\[...]\Run : WebCake Desktop ("C:\Users\PC\AppData\Roaming\Tepfel\WebCakeDesktop.exe" [7]) -> FOUND
[SHELL][Rans.Gendarm] HKCU\[...]\Winlogon : shell (explorer.exe,C:\Users\PC\AppData\Roaming\skype.dat [x][-]) -> FOUND
[SHELL][Rans.Gendarm] HKUS\[...]\Winlogon : shell (explorer.exe,C:\Users\PC\AppData\Roaming\skype.dat [x][-]) -> FOUND
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (hxxp=127.0.0.1:5555) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Scheduled tasks : 0 ¤¤¤

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : Rans.Gendarm ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
::1 localhost


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD16 00AAJS-00PSA SCSI Disk Device +++++
--- User ---
[MBR] 5528c7245c717c22b6aa061466cdb052
[BSP] 1b2bf291027b8f0525b50bbac2d4c384 : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 74998 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 153597465 | Size: 77618 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Finished : << RKreport[0]_S_08242013_132558.txt >>