Virus win32.tiny - Page 3

bonsoir,

voici le rapport :

ComboFix 08-02-13.2 - ADELINE 2008-02-13 19:17:54.8 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.323 [GMT 1:00]
Endroit: C:\Documents and Settings\ADELINE\Bureau\virus\ComboFix.exe
Command switches used :: C:\Documents and Settings\ADELINE\Bureau\CFScript.txt
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE
C:\FOUND.010
C:\WINDOWS\system32\aynwc.exe
C:\WINDOWS\system32\opwmetea.exe
C:\WINDOWS\system32\pisqdash.exe
.

((((((((((((((((((((((((((((( Fichiers créés 2008-01-13 to 2008-02-13 ))))))))))))))))))))))))))))))))))))
.

2008-02-13 19:14 . 2008-02-13 19:15 <REP> d-------- C:\WINDOWS\LastGood
2008-02-06 21:34 . 2008-02-06 21:34 <REP> d-------- C:\_OTMoveIt
2008-02-03 20:10 . 2008-02-03 20:10 <REP> d--hs---- C:\FOUND.010
2008-02-01 06:48 . 2008-02-01 06:48 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-01-31 22:36 . 2008-01-31 22:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-01-31 22:36 . 2008-01-31 22:36 <REP> d-------- C:\Documents and Settings\ADELINE\Application Data\Grisoft
2008-01-31 22:36 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-01-31 22:24 . 2008-01-31 22:24 <REP> d-------- C:\Program Files\CCleaner
2008-01-31 21:59 . 2008-01-31 21:59 <REP> d-------- C:\WINDOWS\ERUNT
2008-01-23 20:58 . 2008-01-23 20:58 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-01-23 20:58 . 2008-01-23 20:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-21 18:55 . 2008-01-21 18:55 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-20 21:37 . 2008-01-20 21:37 <REP> d-------- C:\Program Files\Windows Live Safety Center
2008-01-20 21:04 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-01-20 21:04 . 2004-01-09 11:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-01-20 21:04 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-01-20 21:04 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-01-20 21:04 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-01-20 21:04 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-01-20 21:04 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-01-20 21:04 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-01-20 19:24 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\MUCLTUI.DLL
2008-01-20 19:24 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-01-20 19:24 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-01-19 21:58 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-01-19 21:57 . 2008-01-19 21:58 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-01-19 21:44 . 2008-01-19 21:44 <REP> d-------- C:\Program Files\Windows Live
2008-01-19 21:44 . 2008-01-19 21:44 <REP> d--hs---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-01-19 21:44 . 2008-01-19 21:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-01-15 21:20 . 2008-01-15 21:20 <REP> d-------- C:\divx

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 14:01 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
2007-11-27 10:33 20 ---h--w C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT
2007-11-27 10:06 20 ---h--w C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
2007-11-14 07:28 450,560 ------w C:\WINDOWS\system32\dllcache\jscript.dll
2007-01-23 19:55 17,144 ----a-w C:\Documents and Settings\ADELINE\Application Data\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-03-31 11:23 68856]
"updateMgr"="c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45 313472]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-09-13 13:31 22880040]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" [2003-10-10 11:22 376912]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46 1460560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HControl"="C:\WINDOWS\ATK0100\HControl.exe" [2006-02-22 23:40 106496]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-03-17 00:16 7561216]
"nwiz"="nwiz.exe" [2006-03-17 00:16 1519616 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-03-17 00:16 86016]
"RemoteControl"="C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 02:26 761945]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-28 11:55 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-12-28 11:56 602182]
"EOUApp"="C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe" [2005-12-28 12:00 569413]
"ATKMEDIA"="C:\Program Files\ASUS\ATK Media\DMEDIA.EXE" [2006-02-15 10:38 49152]
"Power_Gear"="C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe" [2006-03-06 17:13 86016]
"ASUS Live Update"="C:\Program Files\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 15:20 180224]
"ACMON"="C:\Program Files\ASUS\Splendid\ACMON.exe" [2005-12-07 10:22 17920]
"Wireless Console 2"="C:\Program Files\Wireless Console 2\wcourier.exe" [2005-10-17 17:09 987136]
"ABLKSR"="C:\WINDOWS\ABLKSR\ABLKSR.exe" [2006-01-02 21:14 61440]
"SMSERIAL"="sm56hlpr.exe" [2006-01-19 23:34 544768 C:\WINDOWS\sm56hlpr.exe]
"SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-30 00:14 155648]
"OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 13:19 69632]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-19 20:16 286720]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-02 18:36 267048]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"pisqdash"="C:\WINDOWS\system32\pisqdash.exe" [ ]
"opwmetea"="C:\WINDOWS\system32\opwmetea.exe" [ ]
"aynwc"="C:\WINDOWS\system32\aynwc.exe" [ ]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

C:\Documents and Settings\ADELINE\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2007-06-27 20:51:26 4571136]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2005-06-16 11:11:42 49152]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04 83360]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-01-17 18:54:17 124912]
NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2007-11-25 02:31:38 118784]

S3 ipswuio;ipswuio;C:\WINDOWS\system32\DRIVERS\ipswuio.sys [2006-01-24 10:45]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{12591255-1603-11dc-a306-0017310a365a}]
\Shell\AutoRun\command - F:\LaunchU3.exe -a

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-01-16 19:30:10 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-02-12 20:56:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-13 19:19:08
Windows 5.1.2600 Service Pack 2 FAT NTAPI

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-02-13 19:19:25
ComboFix5.txt 2008-02-02 12:24:06
ComboFix4.txt 2008-02-02 12:33:06
ComboFix-quarantined-files.txt 2008-02-13 18:19:22
ComboFix3.txt 2008-02-07 18:27:40
ComboFix2.txt 2008-02-08 20:30:22
.
2008-02-01 22:06:52 --- E O F ---

Salut

non, toujours pas ! :/

télécharge OTMoveIt (de Old_Timer) sur ton Bureau :
http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en gras ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.



C:\FOUND.010
C:\WINDOWS\system32\aynwc.exe
C:\WINDOWS\system32\opwmetea.exe
C:\WINDOWS\system32\pisqdash.exe

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre Results.
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Yes.

++

voila, c'est fait :

C:\FOUND.010 moved successfully.
File/Folder C:\WINDOWS\system32\aynwc.exe not found.
File/Folder C:\WINDOWS\system32\opwmetea.exe not found.
File/Folder C:\WINDOWS\system32\pisqdash.exe not found.

OTMoveIt2 v1.0.20 log created on 02132008_210115

il y a que ça

ok, poste un nouveau combo stp

++

ca donne :

ComboFix 08-02-13.2 - ADELINE 2008-02-13 21:08:57.9 - [color=red][b]FAT32[/b][/color]x86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.421 [GMT 1:00]
Endroit: C:\Documents and Settings\ADELINE\Bureau\virus\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

((((((((((((((((((((((((((((( Fichiers créés 2008-01-13 to 2008-02-13 ))))))))))))))))))))))))))))))))))))
.

2008-02-06 21:34 . 2008-02-06 21:34 <REP> d-------- C:\_OTMoveIt
2008-02-01 06:48 . 2008-02-01 06:48 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-01-31 22:36 . 2008-01-31 22:36 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-01-31 22:36 . 2008-01-31 22:36 <REP> d-------- C:\Documents and Settings\ADELINE\Application Data\Grisoft
2008-01-31 22:36 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-01-31 22:24 . 2008-01-31 22:24 <REP> d-------- C:\Program Files\CCleaner
2008-01-31 21:59 . 2008-01-31 21:59 <REP> d-------- C:\WINDOWS\ERUNT
2008-01-23 20:58 . 2008-01-23 20:58 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-01-23 20:58 . 2008-01-23 20:58 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-21 18:55 . 2008-01-21 18:55 <REP> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-20 21:37 . 2008-01-20 21:37 <REP> d-------- C:\Program Files\Windows Live Safety Center
2008-01-20 21:04 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-01-20 21:04 . 2004-01-09 11:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-01-20 21:04 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-01-20 21:04 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-01-20 21:04 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-01-20 21:04 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-01-20 21:04 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-01-20 21:04 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-01-20 19:24 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\MUCLTUI.DLL
2008-01-20 19:24 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-01-20 19:24 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-01-19 21:58 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-01-19 21:57 . 2008-01-19 21:58 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-01-19 21:44 . 2008-01-19 21:44 <REP> d-------- C:\Program Files\Windows Live
2008-01-19 21:44 . 2008-01-19 21:44 <REP> d--hs---- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-01-19 21:44 . 2008-01-19 21:44 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-01-15 21:20 . 2008-01-15 21:20 <REP> d-------- C:\divx

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 14:01 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
2007-11-27 10:33 20 ---h--w C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT
2007-11-27 10:06 20 ---h--w C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
2007-11-14 07:28 450,560 ------w C:\WINDOWS\system32\dllcache\jscript.dll
2007-01-23 19:55 17,144 ----a-w C:\Documents and Settings\ADELINE\Application Data\GDIPFONTCACHEV1.DAT
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-03-31 11:23 68856]
"updateMgr"="c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 16:45 313472]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-09-13 13:31 22880040]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" [2003-10-10 11:22 376912]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46 1460560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HControl"="C:\WINDOWS\ATK0100\HControl.exe" [2006-02-22 23:40 106496]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-03-17 00:16 7561216]
"nwiz"="nwiz.exe" [2006-03-17 00:16 1519616 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-03-17 00:16 86016]
"RemoteControl"="C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-10-21 02:26 761945]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-28 11:55 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-12-28 11:56 602182]
"EOUApp"="C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe" [2005-12-28 12:00 569413]
"ATKMEDIA"="C:\Program Files\ASUS\ATK Media\DMEDIA.EXE" [2006-02-15 10:38 49152]
"Power_Gear"="C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe" [2006-03-06 17:13 86016]
"ASUS Live Update"="C:\Program Files\ASUS\ASUS Live Update\ALU.exe" [2006-02-21 15:20 180224]
"ACMON"="C:\Program Files\ASUS\Splendid\ACMON.exe" [2005-12-07 10:22 17920]
"Wireless Console 2"="C:\Program Files\Wireless Console 2\wcourier.exe" [2005-10-17 17:09 987136]
"ABLKSR"="C:\WINDOWS\ABLKSR\ABLKSR.exe" [2006-01-02 21:14 61440]
"SMSERIAL"="sm56hlpr.exe" [2006-01-19 23:34 544768 C:\WINDOWS\sm56hlpr.exe]
"SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-30 00:14 155648]
"OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 13:19 69632]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-19 20:16 286720]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-02 18:36 267048]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"pisqdash"="C:\WINDOWS\system32\pisqdash.exe" [ ]
"opwmetea"="C:\WINDOWS\system32\opwmetea.exe" [ ]
"aynwc"="C:\WINDOWS\system32\aynwc.exe" [ ]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]

C:\Documents and Settings\ADELINE\Menu D‚marrer\Programmes\D‚marrage\
MSN Pictures Displayer.lnk - C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe [2007-06-27 20:51:26 4571136]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2005-06-16 11:11:42 49152]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04 83360]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
Outil de mise … jour Google.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-01-17 18:54:17 124912]
NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2007-11-25 02:31:38 118784]

S3 ipswuio;ipswuio;C:\WINDOWS\system32\DRIVERS\ipswuio.sys [2006-01-24 10:45]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{12591255-1603-11dc-a306-0017310a365a}]
\Shell\AutoRun\command - F:\LaunchU3.exe -a

*Newly Created Service* - ASLM75
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-01-16 19:30:10 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-02-13 18:56:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-13 21:10:26
Windows 5.1.2600 Service Pack 2 FAT NTAPI

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-02-13 21:10:58
ComboFix5.txt 2008-02-02 12:33:06
ComboFix-quarantined-files.txt 2008-02-13 20:10:56
ComboFix4.txt 2008-02-07 18:27:40
ComboFix3.txt 2008-02-08 20:30:22
ComboFix2.txt 2008-02-13 18:19:26
.
2008-02-01 22:06:52 --- E O F ---

ça ne fonctionne toujours pas ! :/

je vais me renseigner !

@+

Salut

c'est bon, erreur d'interprétation !

où en sont tes soucis ??

++

ecoute, ça a l'air d'aller, je n'envoie plus de virus via msn apparement!
merci pour ton aide!

si mes problemes sont réglés, est ce que je peux desinstaller tout ce que tu 'as fait installé?

oui, c'est bon, tu peux tout supprimer !

==> à lire : http://www.commentcamarche.net/faq/sujet 2432 securite proteger un ordinateur contre les malwares d internet

@+

ok, bah en tout cas, merci beaucoup pour ton aide!!!!!!!!!!!!

bonne soirée

;-))