Comment supprimer trojan.tool.nircmd.a

salut, non je n'ai pas eu le rapport de bitdefender
J'ai deja fait combofix
et voici le rapport hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16, on 2008-04-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\All Users\Application Data\szgrahqn\orsfcvkz.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Lexmark 5400 Series\lxctmon.exe
C:\Program Files\Lexmark 5400 Series\ezprint.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\DNA\btdna.exe
C:\Documents and Settings\Fabien & Typhanie\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\WINDOWS\system32\lxctcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Fabien & Typhanie\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\D-Link\D-Link DWA-111 Wireless G USB Adapter\wirelesscm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\scan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://gperso.com/index.php?rub=toons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: (no name) - {2DEAA77F-00F3-4A4D-9792-FFF2BE0AB2B3} - (no file)
O2 - BHO: (no name) - {532ED3E0-50A6-4446-A1A9-C868CF9D13E4} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [lxctmon.exe] "C:\Program Files\Lexmark 5400 Series\lxctmon.exe"
O4 - HKLM\..\Run: [Lexmark 5400 Series Fax Server] "C:\Program Files\Lexmark 5400 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 5400 Series\ezprint.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LXCTCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKLM\..\Policies\Explorer\Run: [HKI7tEvStV] C:\Documents and Settings\All Users\Application Data\szgrahqn\orsfcvkz.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\Fabien & Typhanie\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Wireless Connection Manager.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nickelodeon.fr/
O16 - DPF: {82CF9738-0BDA-4AAF-AB08-5AC5875FF3BB} (YMultiRecord Class) - http://leo.commest.com/leo_help/test/controls/yrecording.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {D71F9A27-723E-4B8B-B428-B725E47CBA3E} (Imikimi_activex_plugin Control) - http://imikimi.com/download/imikimi_plugin_0.5.1.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxct_device - - C:\WINDOWS\system32\lxctcoms.exe

Lol.. Supprime le ficher infecter

tu as lu la date de la demande...

voici le rapport combofix


ComboFix 08-04-20.5 - toto 2008-04-22 12:38:35.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.157 [GMT 2:00]
Endroit: C:\Documents and Settings\toto\Bureau\Combo2Fix.exe
Command switches used :: C:\Documents and Settings\toto\Bureau\WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
* Création d'un nouveau point de restauration
.

((((((((((((((((((((((((((((( Fichiers créés 2008-03-22 to 2008-04-22 ))))))))))))))))))))))))))))))))))))
.

2008-04-22 12:33 . 2008-04-22 12:33 <REP> d-------- C:\Combo--Fix
2008-04-21 18:46 . 2008-04-21 19:50 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-04-21 18:34 . 2008-04-21 18:34 <REP> d-------- C:\Program Files\CCleaner
2008-04-21 17:48 . 2008-04-22 11:52 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-04-21 17:48 . 2008-04-21 17:48 1,409 --a------ C:\WINDOWS\QTFont.for
2008-04-21 17:40 . 2008-04-21 17:40 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Thunderbird
2008-04-21 17:00 . 2008-04-21 17:00 <REP> d-------- C:\Program Files\Trend Micro
2008-04-21 11:56 . 2008-04-21 11:56 114,688 --a------ C:\WINDOWS\system32\nsnedwnk.exe
2008-04-20 22:16 . 2008-04-20 23:37 294 ---hs---- C:\WINDOWS\system32\jckkasrg.ini
2008-04-20 17:52 . 2008-03-01 22:59 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage réseau
2008-04-20 17:52 . 2008-03-01 22:59 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2008-04-20 17:52 . 2008-03-01 22:08 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2008-04-20 17:52 . 2008-03-01 22:59 <REP> d-------- C:\Documents and Settings\Administrateur\Mes documents
2008-04-20 17:52 . 2008-03-01 22:59 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2008-04-20 17:52 . 2008-03-01 22:59 <REP> d-------- C:\Documents and Settings\Administrateur\Favoris
2008-04-20 17:52 . 2008-04-21 17:46 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2008-04-20 17:52 . 2008-04-20 17:52 <REP> d-------- C:\Documents and Settings\Administrateur
2008-04-20 17:52 . 2008-04-21 18:28 1,024 --ah----- C:\Documents and Settings\Administrateur\NtUser.dat.LOG
2008-04-20 17:24 . 2008-04-20 23:38 436 --a------ C:\WINDOWS\wininit.ini
2008-04-20 13:36 . 2008-04-20 17:46 294 ---hs---- C:\WINDOWS\system32\ckxiymdo.ini
2008-04-20 11:16 . 2008-04-20 11:16 110,592 --a------ C:\WINDOWS\system32\jabmnila.exe
2008-04-19 13:37 . 2008-04-19 13:37 294 ---hs---- C:\WINDOWS\system32\unmnwlru.ini
2008-04-18 22:19 . 2008-04-18 22:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\szgrahqn
2008-04-18 22:19 . 2008-04-18 17:48 188,416 --a------ C:\WINDOWS\pmsoarbf.dll
2008-04-18 22:19 . 2008-04-18 17:48 155,648 --a------ C:\WINDOWS\qtvglped.dll
2008-04-18 22:19 . 2008-04-18 22:19 94,208 --a------ C:\WINDOWS\system32\afmpmtgn.exe
2008-04-18 22:19 . 2008-04-18 17:48 94,208 --a------ C:\WINDOWS\npqtsrak.exe
2008-04-18 22:19 . 2008-04-18 17:48 86,016 --a------ C:\WINDOWS\rtqmekwg.exe
2008-04-18 22:18 . 2008-04-18 22:18 <REP> d-------- C:\Program Files\Visual Zip Password Recovery Processor
2008-04-18 22:06 . 2008-04-18 22:06 <REP> d-------- C:\Program Files\Visual Zip Password Recovery
2008-04-18 11:36 . 2008-04-18 11:36 <REP> d-------- C:\Program Files\BitTorrent
2008-03-28 18:30 . 2008-03-28 18:30 <REP> d-------- C:\Program Files\Virtools
2008-03-27 16:14 . 2008-03-27 16:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
2008-03-27 16:13 . 2008-03-27 16:13 <REP> d-------- C:\Program Files\Fichiers communs\BOONTY Shared
2008-03-27 16:13 . 2008-03-27 16:13 <REP> d-------- C:\Documents and Settings\All Users\Application Data\BOONTY
2008-03-27 16:11 . 2008-03-27 16:13 <REP> d-------- C:\Program Files\BoontyGames
2008-03-27 16:11 . 2008-03-27 16:11 <REP> d-------- C:\Program Files\Boonty
2008-03-24 19:15 . 2008-03-24 19:15 <REP> d-------- C:\Program Files\3DGroove

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-22 10:32 --------- d-----w C:\Documents and Settings\toto\Application Data\DNA
2008-04-22 10:15 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-04-22 09:53 --------- d-----w C:\Documents and Settings\toto\Application Data\OpenOffice.org2
2008-04-18 20:27 --------- d-----w C:\Documents and Settings\toto\Application Data\BitTorrent
2008-04-17 07:17 --------- d-----w C:\Program Files\Java
2008-04-06 12:42 --------- d-----w C:\Program Files\Lx_cats
2008-04-03 15:33 --------- d-----w C:\Documents and Settings\toto\Application Data\Apple Computer
2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-18 10:30 --------- d-----w C:\Documents and Settings\toto\Application Data\M05
2008-03-14 18:10 --------- d-----w C:\Documents and Settings\toto\Application Data\ArcSoft
2008-03-07 12:26 --------- d-----w C:\Documents and Settings\toto\Application Data\Thunderbird
2008-03-06 11:10 --------- d-----w C:\Program Files\Imikimi
2008-03-05 10:22 --------- d-----w C:\Program Files\iTunes
2008-03-05 10:22 --------- d-----w C:\Program Files\iPod
2008-03-05 10:22 --------- d-----w C:\Program Files\Bonjour
2008-03-05 10:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-03-05 10:21 --------- d-----w C:\Program Files\QuickTime
2008-03-05 10:20 --------- d-----w C:\Program Files\Fichiers communs\Apple
2008-03-05 10:20 --------- d-----w C:\Program Files\Apple Software Update
2008-03-05 10:20 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
2008-03-04 20:36 --------- d-----w C:\Documents and Settings\toto\Application Data\Media Player Classic
2008-03-04 18:07 --------- d-----w C:\Program Files\DNA
2008-03-04 11:45 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-03-04 11:05 --------- d-----w C:\Program Files\Abbyy FineReader 6.0 Sprint
2008-03-04 11:04 --------- d-----w C:\Program Files\PDF Editeur 2
2008-03-04 11:03 73,216 ----a-w C:\WINDOWS\cadkasdeinst01f.exe
2008-03-02 14:34 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-02 14:17 --------- d-----w C:\Program Files\7-Zip
2008-03-02 09:38 --------- d-----w C:\Program Files\Windows Live
2008-03-02 09:31 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-03-02 09:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-01 22:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-01 22:28 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-03-01 22:27 --------- d-----w C:\Program Files\OpenOffice.org 2.3
2008-03-01 22:23 --------- d-----w C:\Program Files\Fichiers communs\Java
2008-03-01 21:45 --------- d-----w C:\Program Files\Alwil Software
2008-03-01 21:31 --------- d-----w C:\Documents and Settings\toto\Application Data\5400 Series
2008-03-01 21:27 21,419 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys
2008-03-01 21:27 --------- d-----w C:\Program Files\D-Link
2008-03-01 21:27 --------- d-----w C:\Documents and Settings\toto\Application Data\InstallShield
2008-03-01 21:25 --------- d-----w C:\Program Files\Lexmark Toolbar
2008-03-01 21:22 --------- d-----w C:\Program Files\Lexmark 5400 Series
2008-03-01 21:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\5400 Series
2008-03-01 21:17 --------- d-----w C:\Program Files\Fichiers communs\ArcSoft
2008-03-01 21:16 --------- d-----w C:\Program Files\Hercules
2008-03-01 21:11 --------- d-----w C:\Program Files\Fichiers communs\Nero
2008-03-01 21:11 --------- d-----w C:\Program Files\Ahead
2008-03-01 21:10 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2008-03-01 21:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ahead
2008-03-01 21:08 --------- d-----w C:\Program Files\InterVideo
2008-03-01 21:08 --------- d-----w C:\Program Files\Fichiers communs\InterVideo
2008-03-01 21:08 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-03-01 21:00 9,284 ----a-w C:\WINDOWS\system32\drivers\iaStor.PNF
2008-03-01 21:00 8,112 ----a-w C:\WINDOWS\system32\drivers\viamraid.PNF
2008-03-01 21:00 7,164 ----a-w C:\WINDOWS\system32\drivers\SiSRaid2.PNF
2008-03-01 21:00 63,240 ----a-w C:\WINDOWS\system32\drivers\Si3112r.PNF
2008-03-01 21:00 6,984 ----a-w C:\WINDOWS\system32\drivers\SiSRaid.PNF
2008-03-01 21:00 6,928 ----a-w C:\WINDOWS\system32\drivers\SiSRaid1.PNF
2008-03-01 21:00 20,528 ----a-w C:\WINDOWS\system32\drivers\INFCACHE.1
2008-03-01 21:00 12,432 ----a-w C:\WINDOWS\system32\drivers\adpu320.PNF
2008-03-01 21:00 12,204 ----a-w C:\WINDOWS\system32\drivers\nvraid.PNF
2008-03-01 21:00 10,228 ----a-w C:\WINDOWS\system32\drivers\iaAHCI.PNF
2008-03-01 20:20 --------- d-----w C:\Program Files\microsoft frontpage
2008-03-01 20:13 --------- d-----w C:\Program Files\Services en ligne
2008-03-01 20:10 --------- d-----w C:\Program Files\Windows Plus
2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:35 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
.

((((((((((((((((((((((((((((( snapshot@2008-04-21_17.52.37,79 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-04-21 16:47:14 45,056 ----a-w C:\WINDOWS\BDOSCAN8\avxdisk.dll
+ 2008-04-21 16:47:14 10,240 ----a-w C:\WINDOWS\BDOSCAN8\avxs.dll
+ 2008-04-21 16:47:15 27,136 ----a-w C:\WINDOWS\BDOSCAN8\avxt.dll
+ 2008-04-21 16:47:16 181,760 ----a-w C:\WINDOWS\BDOSCAN8\bdcore.dll
+ 2008-01-09 13:01:48 118,784 ----a-w C:\WINDOWS\BDOSCAN8\bdupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\WINDOWS\BDOSCAN8\ipsupd.dll
+ 2008-04-21 16:47:20 142,848 ----a-w C:\WINDOWS\BDOSCAN8\libfn.dll
+ 2008-04-21 16:47:15 86,016 ----a-w C:\WINDOWS\BDOSCAN8\librtvr.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
- 2008-04-21 15:47:46 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-04-22 09:52:35 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-01-09 13:01:48 118,784 ----a-w C:\WINDOWS\Downloaded Program Files\bdupd.dll
+ 2008-01-09 13:01:48 53,248 ----a-w C:\WINDOWS\Downloaded Program Files\ipsupd.dll
+ 2008-04-22 09:52:41 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_638.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2DEAA77F-00F3-4A4D-9792-FFF2BE0AB2B3}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{532ED3E0-50A6-4446-A1A9-C868CF9D13E4}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 21:00 15360]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
"MSMSGS"="C:\Program Files\Messenger\Msmsgs.exe" [2005-08-31 21:27 1658592]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" [2008-04-14 10:16 288576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-08-05 14:34 64512]
"Raccourci vers la page des propriétés de High Definition Audio"="HDAShCut.exe" [2005-01-07 18:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-02 20:15 77312 C:\WINDOWS\arpwrmsg.exe]
"RTHDCPL"="RTHDCPL.EXE" [2005-10-14 17:51 14864384 C:\WINDOWS\RTHDCPL.EXE]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-09-20 10:35 94208]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-09-20 10:32 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-09-20 10:36 114688]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 12:50 155648]
"lxctmon.exe"="C:\Program Files\Lexmark 5400 Series\lxctmon.exe" [2006-06-20 15:37 286720]
"Lexmark 5400 Series Fax Server"="C:\Program Files\Lexmark 5400 Series\fm3032.exe" [2006-07-11 01:30 294912]
"EzPrint"="C:\Program Files\Lexmark 5400 Series\ezprint.exe" [2006-06-07 05:05 98304]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 15:00 79224]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-02-01 00:13 385024]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 14:10 267048]
"LXCTCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll" [2006-06-07 14:09 106496]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 21:00 15360]

C:\Documents and Settings\toto\Menu D‚marrer\Programmes\D‚marrage\
OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe [2007-08-17 22:57:56 393216]
Outil de notification Live Search.lnk - C:\Documents and Settings\toto\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2008-04-11 10:59:47 152616]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Wireless Connection Manager.lnk - C:\Program Files\D-Link\D-Link DWA-111 Wireless G USB Adapter\wirelesscm.exe [2008-03-01 23:27:19 19357696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]
"HKI7tEvStV"= C:\Documents and Settings\All Users\Application Data\szgrahqn\orsfcvkz.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\lxctcoms.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Messenger\\Msmsgs.exe"=
"C:\\Program Files\\DNA\\btdna.exe"=
"C:\\Program Files\\BitTorrent\\bittorrent.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=

R1 HCW88AUD;Hauppauge WinTV 88x Audio Capture;C:\WINDOWS\system32\drivers\hcw88aud.sys [2005-07-27 08:42]
R3 HCW88BDA;Hauppauge WinTV 88x DVB Tuner/Demod;C:\WINDOWS\system32\drivers\hcw88bda.sys [2005-07-27 08:42]
R3 HCW88TSE;Hauppauge WinTV 88x MPEG/TS Capture;C:\WINDOWS\system32\drivers\hcw88tse.sys [2005-07-27 08:42]
R3 HCW88TUNE;Hauppauge WinTV 88x Tuner;C:\WINDOWS\system32\drivers\hcw88tun.sys [2005-07-27 08:42]
R3 hcw88vid;Hauppauge WinTV 88x Video;C:\WINDOWS\system32\drivers\hcw88vid.sys [2005-07-27 09:54]
R3 HCW88XBAR;Hauppauge WinTV 88x Crossbar;C:\WINDOWS\system32\drivers\HCW88BAR.sys [2005-07-27 08:42]
R3 ovt530;Webcam Deluxe;C:\WINDOWS\system32\Drivers\ov530vid.sys [2005-03-15 18:04]
R3 usbstor;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-10 21:00]
S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2008-03-27 16:13]
S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 23:58]

*Newly Created Service* - CATCHME
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-04-15 12:07:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-22 12:40:06
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-04-22 12:40:51
ComboFix-quarantined-files.txt 2008-04-22 10:40:42

Pre-Run: 8,477,360,128 octets libres
Post-Run: 8,456,843,264 octets libres

WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

227 --- E O F --- 2008-04-09 21:14:25

Je fais tes manip et je poste

Je sais pas s'il etait deja present c'est quand j'ai scanne apres bitdefender que j'en ai entendu parle

nouveau rapport hijacthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:56, on 2008-04-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Lexmark 5400 Series\lxctmon.exe
C:\Program Files\Lexmark 5400 Series\ezprint.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\WINDOWS\system32\lxctcoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\D-Link\D-Link DWA-111 Wireless G USB Adapter\wirelesscm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\scan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://gperso.com/index.php?rub=toons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: Lexmark Barre d'outils - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [lxctmon.exe] "C:\Program Files\Lexmark 5400 Series\lxctmon.exe"
O4 - HKLM\..\Run: [Lexmark 5400 Series Fax Server] "C:\Program Files\Lexmark 5400 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 5400 Series\ezprint.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LXCTCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCTtime.dll,_RunDLLEntry@16
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Startup: Outil de notification Live Search.lnk = C:\Documents and Settings\Fabien & Typhanie\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Wireless Connection Manager.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nickelodeon.fr/
O16 - DPF: {82CF9738-0BDA-4AAF-AB08-5AC5875FF3BB} (YMultiRecord Class) - http://leo.commest.com/leo_help/test/controls/yrecording.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/...
O16 - DPF: {D71F9A27-723E-4B8B-B428-B725E47CBA3E} (Imikimi_activex_plugin Control) - http://imikimi.com/download/imikimi_plugin_0.5.1.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxct_device - - C:\WINDOWS\system32\lxctcoms.exe

salut ton site il deconne,
il me sort aucun resultat et les fichiers que j'envoie reste a 0% d'analise

salut, c'est bon l'autre site fonctionne j'ai donc utilise moveit et voici le rapport je refait un scan bitdefender et je te poste kle rapport
C:\WINDOWS\system32\jabmnila.exe moved successfully.
C:\WINDOWS\rtqmekwg.exe moved successfully.
C:\WINDOWS\npqtsrak.exe moved successfully.
C:\WINDOWS\system32\afmpmtgn.exe moved successfully.
C:\WINDOWS\qtvglped.dll unregistered successfully.
C:\WINDOWS\qtvglped.dll moved successfully.
DllUnregisterServer procedure not found in C:\WINDOWS\pmsoarbf.dll
C:\WINDOWS\pmsoarbf.dll NOT unregistered.
C:\WINDOWS\pmsoarbf.dll moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04232008_221140

et voici le rapport bitdefender

C:\Documents and Settings\toto\Bureau\Combo2Fix.exe=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Detected with: Spyware.Tool.Nircmd.B

C:\Documents and Settings\toto\Bureau\Combo2Fix.exe=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Deleted

C:\Documents and Settings\toto\Bureau\Combo2Fix.exe=>(RAR Sfx o)
Update failed

C:\Documents and Settings\toto\Bureau\Copie de Combo2Fix.exe=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Detected with: Spyware.Tool.Nircmd.B

C:\Documents and Settings\toto\Bureau\Copie de Combo2Fix.exe=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Deleted

C:\Documents and Settings\toto\Bureau\Copie de Combo2Fix.exe=>(RAR Sfx o)
Update failed

C:\Documents and Settings\toto\Local Settings\Application Data\Mozilla\Firefox\Profiles\6dvnrfoe.default\Cache\C2152591d01=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Detected with: Spyware.Tool.Nircmd.B

C:\Documents and Settings\toto\Local Settings\Application Data\Mozilla\Firefox\Profiles\6dvnrfoe.default\Cache\C2152591d01=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Deleted

C:\Documents and Settings\toto\Local Settings\Application Data\Mozilla\Firefox\Profiles\6dvnrfoe.default\Cache\C2152591d01=>(RAR Sfx o)
Update failed

C:\QooBox\Quarantine\C\WINDOWS\system32\cbXQiHAt.dll.vir
Infected with: Trojan.Vundo.EHX

C:\QooBox\Quarantine\C\WINDOWS\system32\cbXQiHAt.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\kmbvxchx.dll.vir
Infected with: Trojan.Vundo.EHW

C:\QooBox\Quarantine\C\WINDOWS\system32\kmbvxchx.dll.vir
Deleted

C:\QooBox\Quarantine\catchme2008-04-21_174616,31.zip=>ddcYpppm.dll
Infected with: Trojan.Vundo.EIB

C:\QooBox\Quarantine\catchme2008-04-21_174616,31.zip=>ddcYpppm.dll
Deleted

C:\QooBox\Quarantine\catchme2008-04-21_174616,31.zip
Updated

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP102\A0013556.exe
Infected with: Trojan.Downloader.Zlob.ABTQ

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP102\A0013556.exe
Deleted

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP103\A0014688.dll
Infected with: Trojan.Vundo.EHV

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP103\A0014688.dll
Deleted

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP103\A0014689.dll
Infected with: Trojan.Vundo.EIB

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP103\A0014689.dll
Deleted

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP104\A0014852.dll
Infected with: Trojan.Vundo.EHX

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP104\A0014852.dll
Deleted

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP104\A0014853.dll
Infected with: Trojan.Vundo.EHW

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP104\A0014853.dll
Deleted

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP104\A0014919.exe=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Detected with: Spyware.Tool.Nircmd.B

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP104\A0014919.exe=>(RAR Sfx o)=>327882R2FWJFW\NirCmdC.cfexe
Deleted

C:\System Volume Information\_restore{A5EB6C73-C9DC-4BE3-819A-0F1B8E8DCAC4}\RP104\A0014919.exe=>(RAR Sfx o)
Update failed

salut je me permet encore de te soliciter afin de savoir quel logiciel gratuit je peux utiliser car apparament avast ne fait pas son travail completemnt.
Que me conseille tu d'utiliser afin d'etre tranquille??