Virus trojan Dowloader.

slt philae merci de me repondre .excuses ma lenteur mais je ne suis pas tres doué
ci joint les deux rappots que tu demandes

ComboFix 07-09-21.2 - "da" 2007-09-24 15:56:06.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.78 [GMT 2:00]
.

((((((((((((((((((((((((( Files Created from 2007-08-24 to 2007-09-24 )))))))))))))))))))))))))))))))
.

2007-09-24 15:21 51,200 --a------ E:\WINDOWS\NirCmd.exe
2007-09-24 11:57 <REP> d-------- E:\Program Files\XoftSpySE
2007-09-24 11:33 <REP> d-------- E:\Program Files\SpywareBot
2007-09-22 19:28 <REP> d-------- E:\Program Files\a-squared Free
2007-09-22 15:28 <REP> d-------- E:\DOCUME~1\da\APPLIC~1\Lavasoft
2007-09-22 15:26 <REP> d-------- E:\Program Files\Lavasoft
2007-09-22 13:12 <REP> d-------- E:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
2007-09-22 11:15 <REP> dr------- E:\DOCUME~1\ADMINI~1\Menu D‚marrer
2007-09-22 11:15 <REP> d--h----- E:\DOCUME~1\ADMINI~1\Voisinage r‚seau
2007-09-22 11:15 <REP> d--h----- E:\DOCUME~1\ADMINI~1\Voisinage d'impression
2007-09-22 11:15 <REP> d--h----- E:\DOCUME~1\ADMINI~1\ModŠles
2007-09-22 11:15 <REP> d-------- E:\DOCUME~1\ADMINI~1\Mes documents
2007-09-22 11:15 <REP> d-------- E:\DOCUME~1\ADMINI~1\Favoris
2007-09-22 11:15 <REP> d-------- E:\DOCUME~1\ADMINI~1\Bureau
2007-09-19 21:04 <REP> d-------- E:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-09-19 19:19 <REP> d-------- E:\Program Files\Hijackthis Version Fran‡aise
2007-09-17 10:12 22 --a------ E:\WINDOWS\b138.exe.bin
2007-09-17 10:02 22 --a------ E:\WINDOWS\b143.exe.bin
2007-09-17 09:57 22 --a------ E:\WINDOWS\b147.exe.bin
2007-09-16 09:48 22 --a------ E:\WINDOWS\b122.exe.bin
2007-09-09 20:53 <REP> d-------- E:\Program Files\AviSynth 2.5
2007-09-08 16:21 <REP> d-------- E:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
2007-09-07 19:50 <REP> d-------- E:\DOCUME~1\da\APPLIC~1\Printer Info Cache
2007-09-07 19:49 <REP> d-------- E:\Program Files\Fichiers communs\HP
2007-09-02 13:52 57,344 --a------ E:\WINDOWS\system32\ASTSRV.EXE
2007-09-02 11:19 137,216 --a------ E:\WINDOWS\system32\dcmc0d0.dll
2007-09-02 11:18 <REP> d-------- E:\Program Files\Fichiers communs\Eloquent Technology
2007-09-02 11:17 <REP> d-------- E:\WINDOWS\speech
2007-09-02 11:16 9,216 --a------ E:\WINDOWS\system32\dcmkrnl.dll
2007-09-02 11:16 73,728 --a------ E:\WINDOWS\system32\dcmuser.dll
2007-09-02 11:16 57,344 --a------ E:\WINDOWS\system32\Zx7Uninstall.dll
2007-09-02 11:16 57,344 --a------ E:\WINDOWS\system32\BSUninstall.dll
2007-09-02 11:16 53,248 --a------ E:\WINDOWS\system32\bypass_jfwvid.dll
2007-09-02 11:16 49,152 --a------ E:\WINDOWS\system32\bypass_pca.dll
2007-09-02 11:16 49,152 --a------ E:\WINDOWS\system32\bypass_idd.dll
2007-09-02 11:16 49,152 --a------ E:\WINDOWS\system32\bypass_gwm.dll
2007-09-02 11:16 49,152 --a------ E:\WINDOWS\system32\bypass_dolntdrv.dll
2007-08-31 23:45 <REP> d-------- E:\DOCUME~1\da\APPLIC~1\AVSMedia
2007-08-31 23:39 524,288 --a------ E:\WINDOWS\system32\xvidcore.dll
2007-08-31 23:39 413,760 --a------ E:\WINDOWS\system32\mpg4c32.dll
2007-08-31 23:39 261,632 --a------ E:\WINDOWS\system32\mcdvd_32.dll
2007-08-31 23:39 139,264 --a------ E:\WINDOWS\system32\xvidvfw.dll
2007-08-25 16:57 <REP> d-------- E:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
2007-08-25 16:53 <REP> d-------- E:\Program Files\Fichiers communs\AVSMedia

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-24 10:17 --------- d--h----- E:\Program Files\InstallShield Installation Information
2007-09-23 00:18 --------- d-------- E:\Program Files\Shareaza
2007-09-22 22:41 --------- d-------- E:\Program Files\DivX
2007-09-10 11:24 --------- d-------- E:\Program Files\VirtualDub
2007-09-09 13:54 --------- d-------- E:\DOCUME~1\da\APPLIC~1\Image Zone Express
2007-09-07 19:49 --------- d-------- E:\Program Files\HP
2007-09-07 19:25 139264 --a------ E:\WINDOWS\system32\hpzjrd01.dll
2007-09-02 19:23 --------- d-------- E:\Program Files\Ahead
2007-09-02 13:41 --------- d-------- E:\Program Files\Fichiers communs\InstallShield
2007-08-21 02:26 81920 --a------ E:\WINDOWS\system32\dpl100.dll
2007-08-21 02:26 196608 --a------ E:\WINDOWS\system32\dtu100.dll
2007-08-18 18:03 13143084 --a------ E:\Program Files\NVE-3.1.0.25_fra.exe
2007-08-18 17:54 34658095 --a------ E:\Program Files\NVE3content.exe
2007-08-16 00:33 524288 --a------ E:\WINDOWS\system32\DivXsm.exe
2007-08-16 00:33 3596288 --a------ E:\WINDOWS\system32\qt-dx331.dll
2007-08-16 00:33 200704 --a------ E:\WINDOWS\system32\ssldivx.dll
2007-08-16 00:33 144704 --a------ E:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-08-16 00:33 1044480 --a------ E:\WINDOWS\system32\libdivx.dll
2007-08-16 00:31 593920 --a------ E:\WINDOWS\system32\dpuGUI11.dll
2007-08-16 00:31 57344 --a------ E:\WINDOWS\system32\dpv11.dll
2007-08-16 00:31 53248 --a------ E:\WINDOWS\system32\dpuGUI10.dll
2007-08-16 00:31 344064 --a------ E:\WINDOWS\system32\dpus11.dll
2007-08-16 00:31 294912 --a------ E:\WINDOWS\system32\dpu11.dll
2007-08-16 00:31 294912 --a------ E:\WINDOWS\system32\dpu10.dll
2007-08-16 00:30 823296 --a------ E:\WINDOWS\system32\divx_xx0c.dll
2007-08-16 00:30 823296 --a------ E:\WINDOWS\system32\divx_xx07.dll
2007-08-16 00:30 802816 --a------ E:\WINDOWS\system32\divx_xx11.dll
2007-08-16 00:30 740442 --a------ E:\WINDOWS\system32\DivX.dll
2007-08-16 00:30 12288 --a------ E:\WINDOWS\system32\DivXWMPExtType.dll
2007-08-15 17:45 --------- d-------- E:\Program Files\PhoTags Express
2007-08-15 12:30 --------- d-------- E:\Program Files\maCable
2007-08-14 13:52 7775670 --a------ E:\Program Files\NeroMIX13112b.exe
2007-08-14 12:33 --------- d-------- E:\Program Files\Mobile Action
2007-08-13 19:56 --------- d-------- E:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
2007-08-13 19:46 7638928 --a------ E:\Program Files\NMP-1.4.0.35b.exe
2007-08-13 19:05 35674728 --a------ E:\Program Files\Nero-6.6.1.15a.exe
2007-08-13 17:46 38456328 --a------ E:\Program Files\NVE-3.1.0.25.exe
2007-08-13 14:12 --------- d-------- E:\DOCUME~1\da\APPLIC~1\Ahead
2007-08-12 11:34 --------- d-------- E:\DOCUME~1\da\APPLIC~1\ArcSoft
2007-08-07 18:29 --------- d-------- E:\Program Files\MSXML 4.0
2007-08-07 18:29 --------- d-------- E:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-08-06 19:17 --------- d-------- E:\DOCUME~1\da\APPLIC~1\HP
2007-08-06 19:15 --------- d-------- E:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
2007-08-06 19:10 --------- d-------- E:\Program Files\Hewlett-Packard
2007-08-06 19:07 --------- d-------- E:\Program Files\Fichiers communs\Hewlett-Packard
2007-08-06 10:47 5170176 --a------ E:\Program Files\WindowsDefender.msi
2007-08-05 20:11 64648 --a------ E:\WINDOWS\BricoPackUninst.cmd
2007-08-05 20:11 6108 --a------ E:\WINDOWS\BricoPackFoldersDelete.cmd
2007-08-05 20:11 219648 --a------ E:\WINDOWS\system32\uxtheme.dll
2007-08-03 23:12 --------- d-------- E:\DOCUME~1\da\APPLIC~1\MobileAction
2007-07-30 19:19 92504 --a------ E:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ E:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 53080 --a------ E:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 43352 --a------ E:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ E:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 271224 --a------ E:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ E:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ E:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 --a------ E:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:18 33624 --a------ E:\WINDOWS\system32\wups.dll
2007-07-23 14:12 5580488 --a------ E:\Program Files\VVIEWER.EXE
2007-07-01 17:17 112925968 --a------ E:\Program Files\Office2003SP2-KB887616-FullFile-FRA.exe
2007-07-01 02:03 476832 --a------ E:\Program Files\sounds.exe
2007-06-29 19:47 18898288 --a------ E:\Program Files\Install_WLMessenger.exe
2007-06-26 08:09 1104896 --------- E:\WINDOWS\system32\msxml3.dll
2007-03-21 14:48 9192136 --a------ E:\Program Files\INSTALL_MSN_MESSENGER_NT.EXE
2007-02-05 23:01 33293524 --a------ E:\Program Files\USB550SH_V92.exe
2007-02-05 22:58 5568210 --a------ E:\Program Files\ModemSetup_Sharp_GX_New.exe
2007-02-02 00:24 4366779 --a------ E:\Program Files\Shareaza_2.2.3.0.exe
2007-02-01 22:34 14820448 --a------ E:\Program Files\DivXInstaller.exe
2007-01-28 15:42 22845992 --a------ E:\Program Files\AdbeRdr80_fr_FR.exe
2007-01-27 20:07 17869096 --a------ E:\Program Files\Install_Messenger.exe
2007-01-27 15:35 529048 --a------ E:\Program Files\eCarteBleue-LCL-CLEO.exe
2007-01-24 23:11 25839688 --a------ E:\Program Files\wmp11-windowsxp-x86-FR-FR.exe
--------- E:\Program Files\Hijackthis Version Française
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{041AD7D1-1F67-19C8-6554-4D71C571C4EF}]
E:\WINDOWS\system32\kfa.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{044BDC85-4B32-4B94-6554-4D71C5719EBA}]
E:\WINDOWS\system32\edre.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A304AEEA-1CD5-4844-A865-DB88F062C95F}]
E:\WINDOWS\system32\xxwwu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ccApp"="E:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" [2006-04-04 12:55]
"Symantec NetDriver Monitor"="E:\PROGRA~1\SYMNET~1\SNDMon.exe" [2007-01-27 12:11]
"eCarteBleue-CLEO"="E:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" [2006-02-07 11:07]
"Adobe Reader Speed Launcher"="E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"HP Software Update"="E:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="E:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09]
"Orakrfdd"="E:\Program Files\T?sks\w?wexec.exe" []
"Taca"="E:\WINDOWS\system32\ASKS~1\services.exe" []

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\gebcbyy]
gebcbyy.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Taca"="E:\WINDOWS\system32\ASKS~1\services.exe" -vt ndrv

R3 ess;Pilote audio ESS (WDM);E:\WINDOWS\system32\drivers\ess.sys
R3 ovt530;Webcam Deluxe;E:\WINDOWS\system32\Drivers\ov530vid.sys
S2 Ca533av;Icatch(IV) Video Camera Device;E:\WINDOWS\system32\Drivers\Ca533av.sys
S3 ma550shc;ma550shc;E:\WINDOWS\system32\Drivers\ma550shc.sys
S3 ma550shm;ma550shm;E:\WINDOWS\system32\Drivers\ma550shm.sys
S3 ma550shu;ma550shu;E:\WINDOWS\system32\Drivers\ma550shu.sys
S3 maz500m;maz500m;E:\WINDOWS\system32\Drivers\maz500m.sys
S3 maz500u;maz500u;E:\WINDOWS\system32\Drivers\maz500u.sys
S3 USBCamera;Icatch(IV) Still Camera Device;E:\WINDOWS\system32\Drivers\Bulk533.sys

.
Contents of the 'Scheduled Tasks' folder
"2007-09-21 20:56:35 E:\WINDOWS\Tasks\Norton AntiVirus - Analyser mon ordinateur - da.job"
- E:\PROGRA~1\NORTON~1\Navw32.exe
"2007-09-24 13:51:55 E:\WINDOWS\Tasks\Symantec NetDetect.job"
- E:\Program Files\Symantec\LiveUpdate\NDETECT.EXE
"2007-09-22 08:04:17 E:\WINDOWS\Tasks\WebReg psc 1500 series.job"
- E:\Program Files\HP\Digital Imaging\bin\hpqwrg.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-24 16:02:07
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************
.
Completion time: 2007-09-24 16:07:31
E:\ComboFix-quarantined-files.txt ... 2007-09-24 16:06
.
--- E O F ---





et encore..


Logfile of HijackThis v1.99.1
Scan saved at 16:10:57, on 24/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
e:\program files\a-squared free\a2service.exe
E:\WINDOWS\SYSTEM32\astsrv.exe
E:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\WINDOWS\system32\HPZipm12.exe
E:\Program Files\Norton AntiVirus\SAVScan.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
E:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe
E:\Program Files\HP\HP Software Update\HPWuSchd2.exe
E:\WINDOWS\explorer.exe
E:\Program Files\Messenger\msmsgs.exe
E:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {041AD7D1-1F67-19C8-6554-4D71C571C4EF} - E:\WINDOWS\system32\kfa.dll (file missing)
O2 - BHO: (no name) - {044BDC85-4B32-4B94-6554-4D71C5719EBA} - E:\WINDOWS\system32\edre.dll (file missing)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - E:\WINDOWS\system32\BhoECart.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A304AEEA-1CD5-4844-A865-DB88F062C95F} - E:\WINDOWS\system32\xxwwu.dll (file missing)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [eCarteBleue-CLEO] "E:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] E:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Orakrfdd] "E:\Program Files\T?sks\w?wexec.exe"
O4 - HKCU\..\Run: [Taca] "E:\WINDOWS\system32\ASKS~1\services.exe" -vt ndrv
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: Yahoo! Chess - http://download2.games.yahoo.com/games/clients/y/ct5_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download2.games.yahoo.com/games/clients/y/poti_x.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: gebcbyy - gebcbyy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - E:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - e:\program files\a-squared free\a2service.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - E:\WINDOWS\SYSTEM32\astsrv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - E:\Program Files\Windows Live\installer\WLSetupSvc.exe

Salut , j'ai lancer OTMoveit et dans la fenetre de droite voici ce qui y est inscrit.

File/Folder E:\Program Files\T?sks\w?wexec.exe not found.

Created on 09/29/2007 09:03:50


et je ne trouve pas le rapport a l'endroit indiqué, par contre plus de trace de virus tout marche nickel dois-je en rester la ?
ci-joint un rapport hijackthis.

Logfile of HijackThis v1.99.1
Scan saved at 09:12:19, on 29/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
E:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe
E:\WINDOWS\system32\ctfmon.exe
e:\program files\a-squared free\a2service.exe
E:\WINDOWS\SYSTEM32\astsrv.exe
E:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\WINDOWS\system32\HPZipm12.exe
E:\Program Files\Norton AntiVirus\SAVScan.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
E:\Program Files\internet explorer\iexplore.exe
E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
E:\Program Files\Messenger\msmsgs.exe
E:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1190740655&rver=4.5.2130.0&wp=MBI&wreply=http:%2F%2Fmail.live.com%2Fdefault.aspx&id=64855&lc=1033
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - E:\WINDOWS\system32\BhoECart.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "E:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] E:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [eCarteBleue-CLEO] "E:\Program Files\e-Carte Bleue\LCL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Adobe Gamma.lnk = E:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.0.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - E:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - e:\program files\a-squared free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - E:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - E:\WINDOWS\SYSTEM32\astsrv.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - E:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - E:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - E:\Program Files\Windows Live\installer\WLSetupSvc.exe

merci pour ton aide je ne manquerai pas de visiter les liens que tu m'indiques .