Virus ou malware sur windows 2000

salut jai un message d'erreur au demarge de win2000 suite a une multitude d'infection enrayer (sauf celle ci qui me resiste). cetais une banniere casino truc machin qqch du genre sur mon bureau, a partir du moment ou je l'ai desinstaller. j'ai essayer avast, spybot, zonealarm, ccleaner, j'en peu plus...

voila le log de hijackthis.
merci


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 23:03:35, on 2007-08-12
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\hidserv.exe
C:\PROGRA~1\AEIINT~1\AEIHAU~1\app\pppoeservice.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Costa\Desktop\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search

Bar = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start

Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

http://www.aei.ca/francais.shtml
R1 - HKCU\Software\Microsoft\Internet

Explorer\Main,Window Title = Microsoft Internet Explorer

fourni par AEI Internet inc.
R3 - URLSearchHook: (no name) -

{C440F1D9-1DC5-DCB3-9FB7-05BB9069553F} - wormexe.dll

(file missing)
O2 - BHO: (no name) -

{53707962-6F74-2D53-2644-206D7942484F} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class -

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio -

{8E718888-423F-11D2-876E-00A0C9082467} -

C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe

/logon
O4 - HKLM\..\Run: [NeroFilterCheck]

C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog

Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [Windows Services] spoolsvc.exe
O4 - HKLM\..\Run: [PasswdMon] StatusCheck.exe
O4 - HKLM\..\Run: [Trayz] br0ken.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program

Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program

Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [dmdyp.exe]

C:\WINNT\system32\dmdyp.exe
O4 - HKLM\..\Run: [avast!]

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunServices: [Windows Services] spoolsvc.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [Windows Services] spoolsvc.exe
O4 - HKCU\..\Run: [UnSpyPC] C:\Program

Files\UnSpyPC\UnSpyPC.exe
O4 - HKCU\..\Run: [xsetup] dePloy.exe
O4 - HKCU\..\Run: [Testimonials] SysEntry.exe
O4 - HKCU\..\Run: [control64] UserSp1.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN

Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\RunServices: [Windows Services] spoolsvc.exe
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User

'Default user')
O4 - HKUS\.DEFAULT\..\Run: [Windows Services] spoolsvc.exe

(User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop]

C:\Program Files\Internet Explorer\Connection

Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunServices: [Windows Services]

spoolsvc.exe (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel -

res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Research -

{92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related -

{c95fe080-8f5d-11d2-a20b-00aa003c157a} -

C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links -

{c95fe080-8f5d-11d2-a20b-00aa003c157a} -

C:\WINNT\web\related.htm
O10 - Unknown file in Winsock LSP:

c:\winnt\system32\nwprovau.dll
O14 - IERESET.INF:

START_PAGE_URL=http://www.aei.ca/francais.shtml
O16 - DPF: RaptisoftGameLoader -

http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O17 -

HKLM\System\CCS\Services\Tcpip\..\{19271DAF-9E84-413B-

B3C1-1F1B1284CA9C}: NameServer =

208.67.220.220,208.67.222.222
O17 -

HKLM\System\CCS\Services\Tcpip\..\{5C1A6AA9-93D3-4D68

-B47A-C30A75B1B257}: NameServer =

85.255.113.123,85.255.112.184
O17 -

HKLM\System\CS1\Services\Tcpip\..\{19271DAF-9E84-413B-

B3C1-1F1B1284CA9C}: NameServer =

85.255.116.44,85.255.112.215
O17 - HKLM\System\CS2\Services\Tcpip\Parameters:

NameServer = 208.67.220.220,208.67.222.222
O17 -

HKLM\System\CS2\Services\Tcpip\..\{19271DAF-9E84-413B-

B3C1-1F1B1284CA9C}: NameServer =

208.67.220.220,208.67.222.222
O17 - HKLM\System\CS3\Services\Tcpip\Parameters:

NameServer = 208.67.220.220,208.67.222.222
O17 -

HKLM\System\CS3\Services\Tcpip\..\{19271DAF-9E84-413B-

B3C1-1F1B1284CA9C}: NameServer =

208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters:

NameServer = 208.67.220.220,208.67.222.222
O22 - SharedTaskScheduler: Browseui preloader -

{438755C2-A8BA-11D1-B96B-00A0C90312E1} -

C:\WINNT\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache

daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} -

C:\WINNT\system32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) -

ALWIL Software - C:\Program Files\Alwil

Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program

Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software -

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software -

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Logical Disk Manager Administrative Service

(dmadmin) - VERITAS Software Corp. -

C:\WINNT\System32\dmadmin.exe
O23 - Service: Lexar SG20 (LxrSG20s) - Unknown owner -

C:\WINNT\SYSTEM32\LxrSG20s.exe
O23 - Service: Microsoft Host Service (MSHOST) - Unknown

owner - C:\WINNT\system\host.exe (file missing)
O23 - Service: Network Windows Service (MSWindows) -

Unknown owner - C:\WINNT\system32\urdvxc.exe (file

missing)
O23 - Service: Performance True Type Font (PerfFont) -

Unknown owner - C:\WINNT\system32\perfont.exe (file

missing)
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner -

C:\PROGRA~1\AEIINT~1\AEIHAU~1\app\pppoeservice.exe
O23 - Service: Win32Sr - Unknown owner -

C:\WINNT\win32ssr.exe (file missing)
O23 - Service: Windows NT Logon Application (WINLOGON32)

- Unknown owner - C:\WINNT\system\winlogon.exe

--
End of file - 7002 bytes