Comment prévenir ce virus

Bonjour,
Je viens ici premièrement vous remercier pour vos soutiens techniques. Il y a quelques jours j'avais posé le problème d'un virus porno qui apparais sur les bureau de mes ordis. Par l'aide que quelqu'un sur ce site, je suis arrivé à l'enlever avec Combofix maintenant pratiquement chaque 6 jours, le virus reviens et je l'enlève encore pour la même méthodes, j'aimerais savoir s'il y a aucun moyen de prévenir ce virus. Je viens encore de l'enlever sur certains postes et donc je vous envoie le rapport

ComboFix 08-08-13.05 - User1 2008-08-19 7:39:18.4 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.211 [GMT 2:00]
Endroit: C:\Documents and Settings\User1\Bureau\ComboFix.exe
Command switches used :: C:\Documents and Settings\User1\Bureau\CFScript.txt
* Création d'un nouveau point de restauration
* Resident AV is active


[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]

FILE ::
C:\WINDOWS\system32\Win32.vbs
C:\WINDOWS\vsnp2uvc.exe
F:\3wcxx91.cmd
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\User1\Cookies.\user1@ad.yieldmanager[2].txt
C:\Documents and Settings\User1\Cookies.\user1@revsci[2].txt
C:\Documents and Settings\User1\Cookies.\user1@www.jobetudiant[1].txt
C:\WINDOWS\system32\Win32.vbs

.
((((((((((((((((((((((((((((( Fichiers créés 2008-07-19 to 2008-08-19 ))))))))))))))))))))))))))))))))))))
.

2008-08-18 11:33 . 2008-08-18 17:08 <REP> d-------- C:\Documents and Settings\User1\Application Data\IDM
2008-08-18 11:33 . 2008-08-19 07:41 <REP> d-------- C:\Documents and Settings\User1\Application Data\DMCache
2008-08-18 11:32 . 2008-08-18 13:49 <REP> d-------- C:\Program Files\Internet Download Manager
2008-08-16 11:14 . 2008-08-16 11:14 <REP> d-------- C:\WINDOWS\Sun
2008-08-15 20:09 . 2008-08-19 07:39 <REP> d-------- C:\QUARANTINE
2008-08-15 18:03 . 2008-08-15 18:03 <REP> d-------- C:\Program Files\Fichiers communs\Cisco Systems
2008-08-15 18:03 . 2008-08-15 18:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\McAfee
2008-08-15 18:03 . 2007-10-25 15:06 1,495,552 --a------ C:\WINDOWS\system32\epoPGPsdk.dll
2008-08-15 18:03 . 2007-10-16 20:50 171,272 --a------ C:\WINDOWS\system32\drivers\mfehidk.sys
2008-08-15 18:03 . 2007-10-16 20:50 72,680 --a------ C:\WINDOWS\system32\drivers\mfeavfk.sys
2008-08-15 18:03 . 2007-10-16 20:50 64,168 --a------ C:\WINDOWS\system32\drivers\mfeapfk.sys
2008-08-15 18:03 . 2007-10-16 20:50 51,944 --a------ C:\WINDOWS\system32\drivers\mfetdik.sys
2008-08-15 18:03 . 2007-10-16 20:50 33,960 --a------ C:\WINDOWS\system32\drivers\mfebopk.sys
2008-08-15 18:03 . 2007-10-25 15:06 280 --a------ C:\WINDOWS\system32\epoPGPsdk.dll.sig
2008-08-15 18:02 . 2008-08-15 18:03 <REP> d-------- C:\Program Files\McAfee
2008-08-15 18:02 . 2008-08-15 18:02 <REP> d-------- C:\Program Files\Fichiers communs\McAfee
2008-08-14 08:31 . 2008-05-01 16:31 331,776 -----c--- C:\WINDOWS\system32\dllcache\msadce.dll
2008-08-09 15:02 . 2008-08-09 15:02 <REP> d-------- C:\Program Files\Fichiers communs\Nero
2008-08-09 15:00 . 2008-08-09 15:00 <REP> d-------- C:\Program Files\Fichiers communs\Ahead
2008-08-09 15:00 . 2008-08-09 15:01 <REP> d-------- C:\Program Files\Ahead
2008-08-09 15:00 . 2004-07-26 17:16 1,568,768 --------- C:\WINDOWS\system32\ImagX7.dll
2008-08-09 15:00 . 2004-07-26 17:16 476,320 --------- C:\WINDOWS\system32\ImagXpr7.dll
2008-08-09 15:00 . 2004-07-26 17:16 471,040 --------- C:\WINDOWS\system32\ImagXRA7.dll
2008-08-09 15:00 . 2004-07-26 17:16 262,144 --------- C:\WINDOWS\system32\ImagXR7.dll
2008-08-09 15:00 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-08-09 15:00 . 2000-06-26 11:45 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2008-08-08 13:01 . 2008-08-18 09:49 <REP> d-------- C:\Documents and Settings\User1\Application Data\skypePM
2008-08-08 13:01 . 2008-08-08 13:01 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-08-08 10:01 . 2008-08-08 10:01 <REP> d-------- C:\WINDOWS\system32\THe Girls
2008-08-08 10:01 . 2008-07-26 08:39 679,936 ---hs---- C:\WINDOWS\system32\Ecran.exe
2008-08-08 10:01 . 1998-07-12 23:00 141,312 --a------ C:\WINDOWS\system32\MSCMCFR.DLL
2008-08-08 10:01 . 2008-04-10 16:08 119,568 --a------ C:\WINDOWS\system32\VB6FR.DLL
2008-08-08 08:50 . 2008-08-08 08:50 <REP> d-------- C:\Program Files\Alwil Software
2008-08-08 08:50 . 2003-03-18 22:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2008-08-08 08:50 . 2003-03-18 21:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2008-08-08 08:50 . 2003-02-21 05:42 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll
2008-08-06 15:33 . 2004-08-04 08:10 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2008-08-06 15:33 . 2004-08-04 08:10 11,136 --a--c--- C:\WINDOWS\system32\dllcache\slip.sys
2008-08-06 15:15 . 2004-08-20 01:10 91,648 --a------ C:\WINDOWS\system32\kswdmcap.ax
2008-08-06 15:15 . 2004-08-20 01:10 91,648 --a--c--- C:\WINDOWS\system32\dllcache\kswdmcap.ax
2008-08-06 15:15 . 2004-08-20 01:10 61,952 --a------ C:\WINDOWS\system32\kstvtune.ax
2008-08-06 15:15 . 2004-08-20 01:10 61,952 --a--c--- C:\WINDOWS\system32\dllcache\kstvtune.ax
2008-08-06 15:15 . 2004-08-04 08:07 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2008-08-06 15:15 . 2004-08-04 08:07 59,264 --a--c--- C:\WINDOWS\system32\dllcache\usbaudio.sys
2008-08-06 15:15 . 2004-08-20 01:09 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2008-08-06 15:15 . 2004-08-20 01:09 54,784 --a--c--- C:\WINDOWS\system32\dllcache\vfwwdm32.dll
2008-08-06 15:15 . 2004-08-20 01:10 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax
2008-08-06 15:15 . 2004-08-20 01:10 43,008 --a--c--- C:\WINDOWS\system32\dllcache\ksxbar.ax
2008-08-06 15:14 . 2008-08-06 15:14 <REP> d-------- C:\Program Files\Fichiers communs\SNP2UVC
2008-08-06 15:14 . 2007-07-05 07:44 9,607,552 --a------ C:\WINDOWS\system32\drivers\snp2uvc.sys
2008-08-06 15:14 . 2007-06-23 06:17 299,008 --a------ C:\WINDOWS\system32\vsnp2uvc.dll
2008-08-06 15:14 . 2007-07-05 08:28 176,128 --a------ C:\WINDOWS\system32\csnp2uvc.dll
2008-08-06 15:14 . 2007-05-26 09:37 167,936 --a------ C:\WINDOWS\system32\rsnp2uvc.dll
2008-08-06 15:14 . 2004-08-09 17:43 94,208 --a------ C:\WINDOWS\amcap.exe
2008-08-06 15:14 . 2007-05-10 06:16 28,160 --a------ C:\WINDOWS\system32\drivers\sncduvc.sys
2008-08-06 15:14 . 2006-05-20 02:39 15,497 --a------ C:\WINDOWS\snp2uvc.ini
2008-08-06 15:14 . 2006-05-20 02:53 13,022 --a------ C:\WINDOWS\snp2uvc.src
2008-08-06 15:13 . 2008-08-06 15:13 <REP> d-------- C:\Documents and Settings\User1\Application Data\InstallShield
2008-08-06 15:11 . 2008-08-06 15:11 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Yahoo!
2008-08-06 13:48 . 2008-08-06 13:48 <REP> d--h----- C:\Program Files\Zenographics
2008-08-06 13:48 . 2008-08-06 13:48 <REP> d-------- C:\Program Files\Hewlett-Packard
2008-08-06 13:48 . 2006-07-30 19:00 442,368 -ra------ C:\WINDOWS\system32\zshp1018.exe
2008-08-06 13:48 . 2006-07-30 19:00 143,360 -ra------ C:\WINDOWS\apptune1018.exe
2008-08-06 13:48 . 2006-07-30 19:00 129,092 -ra------ C:\WINDOWS\system32\hp1018.img
2008-08-06 13:48 . 2006-07-30 19:00 106,496 -ra------ C:\WINDOWS\system32\vshp1018.dll
2008-08-06 13:48 . 2006-07-30 19:00 102,400 -ra------ C:\WINDOWS\system32\zlhp1018.dll
2008-08-06 13:48 . 2006-07-30 19:00 86,016 -ra------ C:\WINDOWS\system32\ZSPOOL.DLL
2008-08-06 13:48 . 2006-07-30 19:00 28,672 -ra------ C:\WINDOWS\system32\zlm.dll
2008-08-06 13:48 . 2006-07-30 19:00 28,672 -ra------ C:\WINDOWS\system32\IMF32.DLL
2008-08-06 13:48 . 2006-07-30 19:00 24,576 -ra------ C:\WINDOWS\system32\ZTAG32.DLL
2008-08-06 13:48 . 2006-07-30 19:00 7,808 -ra------ C:\WINDOWS\system32\ZSHP1018.HLP
2008-08-06 13:30 . 2008-08-06 14:05 <REP> d-------- C:\Program Files\Yahoo!
2008-08-06 13:29 . 2005-03-08 06:43 51,120 -ra------ C:\WINDOWS\system32\drivers\HPZid412.sys
2008-08-06 13:29 . 2005-03-08 06:43 16,496 -ra------ C:\WINDOWS\system32\drivers\HPZipr12.sys
2008-08-06 13:28 . 2005-04-08 03:51 606,208 -ra------ C:\WINDOWS\system32\hpotscl.dll
2008-08-06 13:28 . 2005-04-08 03:51 278,528 -ra------ C:\WINDOWS\system32\hpgwiamd.dll
2008-08-06 13:28 . 2005-03-08 06:39 274,432 -ra------ C:\WINDOWS\system32\HPZc3212.dll
2008-08-06 13:28 . 2005-04-08 03:51 258,122 -ra------ C:\WINDOWS\system32\hpovst08.dll
2008-08-06 13:28 . 2005-03-08 06:43 21,744 -ra------ C:\WINDOWS\system32\drivers\HPZius12.sys
2008-08-06 13:28 . 2004-08-04 07:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-08-06 13:28 . 2004-08-04 07:58 15,104 --a--c--- C:\WINDOWS\system32\dllcache\usbscan.sys
2008-08-06 13:21 . 2008-08-06 13:21 32,768 --a------ C:\WINDOWS\system32\hpzjsn01.dll
2008-08-06 13:20 . 2008-08-06 13:21 <REP> d-------- C:\Program Files\HP
2008-08-06 13:20 . 2004-08-04 08:08 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2008-08-06 13:20 . 2004-08-04 08:08 31,616 --a--c--- C:\WINDOWS\system32\dllcache\usbccgp.sys
2008-08-06 13:20 . 2004-08-04 08:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-08-06 13:20 . 2004-08-04 08:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2008-08-06 13:18 . 2008-08-06 13:18 <REP> d-------- C:\Documents and Settings\User1\Application Data\HP
2008-08-05 21:09 . 2008-06-14 19:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-08-03 15:50 . 2008-08-11 11:57 <REP> d-------- C:\Documents and Settings\User1\Contacts
2008-08-02 23:18 . 2008-08-02 23:18 268 --ah----- C:\sqmdata00.sqm
2008-08-02 23:18 . 2008-08-02 23:18 244 --ah----- C:\sqmnoopt00.sqm
2008-08-02 23:00 . 2008-08-18 15:26 <REP> d-------- C:\Documents and Settings\User1\Application Data\Skype
2008-08-02 22:59 . 2008-08-02 22:59 <REP> d-------- C:\Program Files\Skype
2008-08-02 22:59 . 2008-08-02 23:00 <REP> d-------- C:\Program Files\Google
2008-08-02 22:59 . 2008-08-02 22:59 <REP> d-------- C:\Program Files\Fichiers communs\Skype
2008-08-02 22:59 . 2008-08-02 22:59 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Skype
2008-08-02 22:57 . 2008-08-06 15:14 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-08-02 22:57 . 2008-08-02 22:57 <REP> d-------- C:\Program Files\MSN Messenger
2008-08-02 22:52 . 2003-06-19 01:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2008-08-02 22:52 . 2008-08-02 22:52 385 --a------ C:\WINDOWS\ODBC.INI
2008-08-02 22:51 . 2008-08-02 22:51 <REP> d-------- C:\Program Files\Microsoft.NET
2008-08-02 22:50 . 2008-08-02 22:51 <REP> d-------- C:\WINDOWS\SHELLNEW
2008-08-02 22:49 . 2008-08-02 22:49 <REP> dr-h----- C:\MSOCache
2008-07-21 16:23 . 2008-07-09 16:34 206,256 --a------ C:\WINDOWS\system32\idmmbc.dll

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-09 05:58 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-08-07 20:07 --------- d-----w C:\Program Files\Java
2008-08-07 19:18 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-07 19:18 --------- d-----w C:\Program Files\CyberLink
2008-07-07 20:31 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-23 16:28 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-06-20 17:41 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.


---- C:\WINDOWS\system32\Ecran.exe ----
Company: HTML Document
File Description:
File Version: 1.00
Product Name: taskmgr
Copyright:
Original file name: Ecran.exe
MD5: 1ab39136c4e9adfdc59bcca96dd30c70

---- Directory of C:\WINDOWS\system32\THe Girls ----

2008-07-26 08:39 679936 ---hs---- C:\WINDOWS\system32\THe Girls\Ecran.exe
2008-04-10 16:08 119568 --a------ C:\WINDOWS\system32\THe Girls\VB6FR.DLL
1998-07-12 23:00 141312 --a------ C:\WINDOWS\system32\THe Girls\MSCMCFR.DLL


((((((((((((((((((((((((((((( snapshot@2008-08-13_ 8.32.24.04 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-04-23 04:16:39 124,928 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\advpack.dll
+ 2008-04-23 04:16:39 347,136 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtmsft.dll
+ 2008-04-23 04:16:39 214,528 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\dxtrans.dll
+ 2008-04-23 04:16:39 133,120 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\extmgr.dll
+ 2008-04-23 04:16:39 63,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\icardie.dll
+ 2008-04-22 07:41:08 70,656 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ie4uinit.exe
+ 2008-04-23 04:16:39 153,088 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakeng.dll
+ 2008-04-23 04:16:39 230,400 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieaksie.dll
+ 2008-04-20 05:07:51 161,792 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieakui.dll
+ 2008-04-23 04:16:39 383,488 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieapfltr.dll
+ 2008-04-23 04:16:39 384,512 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iedkcs32.dll
+ 2008-04-23 04:16:39 6,066,176 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieframe.dll
+ 2008-04-23 04:16:39 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iernonce.dll
+ 2008-04-23 04:16:39 267,776 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iertutil.dll
+ 2008-04-22 07:39:58 13,824 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\ieudinit.exe
+ 2008-04-22 07:41:30 625,664 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
+ 2008-04-23 04:16:40 27,648 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\jsproxy.dll
+ 2008-04-23 04:16:40 459,264 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeeds.dll
+ 2008-04-23 04:16:40 52,224 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msfeedsbs.dll
+ 2008-04-23 20:16:42 3,591,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtml.dll
+ 2008-04-23 04:16:40 478,208 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mshtmled.dll
+ 2008-04-23 04:16:40 193,024 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\msrating.dll
+ 2008-04-23 04:16:40 671,232 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\mstime.dll
+ 2008-04-23 04:16:40 102,912 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\occache.dll
+ 2008-04-23 04:16:40 44,544 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\pngfilt.dll
+ 2007-03-06 01:34:38 216,800 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe
+ 2007-03-06 01:35:48 394,976 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\updspapi.dll
+ 2008-04-23 04:16:40 105,984 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\url.dll
+ 2008-04-23 04:16:40 1,159,680 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\urlmon.dll
+ 2008-04-23 04:16:40 233,472 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\webcheck.dll
+ 2008-04-23 04:16:40 826,368 -c----w C:\WINDOWS\ie7updates\KB953838-IE7\wininet.dll
- 2008-04-23 04:16:39 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
+ 2008-06-23 16:28:17 124,928 ----a-w C:\WINDOWS\system32\advpack.dll
- 2008-04-23 04:16:39 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll
+ 2008-06-23 16:28:17 124,928 -c----w C:\WINDOWS\system32\dllcache\advpack.dll
- 2008-04-23 04:16:39 347,136 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
+ 2008-06-23 16:28:17 347,136 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
- 2008-04-23 04:16:39 214,528 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-06-23 16:28:17 214,528 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
+ 2008-07-07 20:31:48 253,952 -c----w C:\WINDOWS\system32\dllcache\es.dll
- 2008-04-23 04:16:39 133,120 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
+ 2008-06-23 16:28:17 133,120 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll
- 2008-04-23 04:16:39 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll
+ 2008-06-23 16:28:17 63,488 -c----w C:\WINDOWS\system32\dllcache\icardie.dll
- 2008-04-22 07:41:08 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe
+ 2008-06-23 09:21:30 70,656 -c----w C:\WINDOWS\system32\dllcache\ie4uinit.exe
- 2008-04-23 04:16:39 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll
+ 2008-06-23 16:28:18 153,088 -c----w C:\WINDOWS\system32\dllcache\ieakeng.dll
- 2008-04-23 04:16:39 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll
+ 2008-06-23 16:28:18 230,400 -c----w C:\WINDOWS\system32\dllcache\ieaksie.dll
- 2008-04-20 05:07:51 161,792 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll
+ 2008-06-21 05:23:54 161,792 -c--a-w C:\WINDOWS\system32\dllcache\ieakui.dll
- 2008-04-23 04:16:39 383,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dll
+ 2008-06-23 16:28:18 383,488 -c----w C:\WINDOWS\system32\dllcache\ieapfltr.dll
- 2008-04-23 04:16:39 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll
+ 2008-06-23 16:28:18 384,512 -c----w C:\WINDOWS\system32\dllcache\iedkcs32.dll
- 2008-04-23 04:16:39 6,066,176 -c----w C:\WINDOWS\system32\dllcache\ieframe.dll
+ 2008-06-23 16:28:19 6,066,176 -c----w C:\WINDOWS\system32\dllcache\ieframe.dll
- 2008-04-23 04:16:39 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll
+ 2008-06-23 16:28:19 44,544 -c----w C:\WINDOWS\system32\dllcache\iernonce.dll
- 2008-04-23 04:16:39 267,776 -c----w C:\WINDOWS\system32\dllcache\iertutil.dll
+ 2008-06-23 16:28:20 267,776 -c----w C:\WINDOWS\system32\dllcache\iertutil.dll
- 2008-04-22 07:39:58 13,824 -c----w C:\WINDOWS\system32\dllcache\ieudinit.exe
+ 2008-06-23 09:20:26 13,824 -c----w C:\WINDOWS\system32\dllcache\ieudinit.exe
- 2008-04-22 07:41:30 625,664 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe
+ 2008-06-23 09:21:49 625,664 -c----w C:\WINDOWS\system32\dllcache\iexplore.exe
- 2007-08-21 06:17:23 683,520 -c----w C:\WINDOWS\system32\dllcache\inetcomm.dll
+ 2008-04-11 18:51:06 683,520 -c----w C:\WINDOWS\system32\dllcache\inetcomm.dll
- 2008-04-23 04:16:40 27,648 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-06-23 16:28:20 27,648 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
+ 2008-06-24 16:23:56 74,240 -c----w C:\WINDOWS\system32\dllcache\mscms.dll
- 2008-04-23 04:16:40 459,264 -c----w C:\WINDOWS\system32\dllcache\msfeeds.dll
+ 2008-06-23 16:28:20 459,264 -c----w C:\WINDOWS\system32\dllcache\msfeeds.dll
- 2008-04-23 04:16:40 52,224 -c----w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
+ 2008-06-23 16:28:20 52,224 -c----w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
- 2008-04-23 20:16:42 3,591,680 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
+ 2008-06-24 08:28:24 3,592,192 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll
- 2008-04-23 04:16:40 478,208 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
+ 2008-06-23 16:28:22 477,696 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
- 2008-04-23 04:16:40 193,024 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
+ 2008-06-23 16:28:22 193,024 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll
- 2008-04-23 04:16:40 671,232 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
+ 2008-06-23 16:28:22 671,232 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll
- 2008-04-23 04:16:40 102,912 -c----w C:\WINDOWS\system32\dllcache\occache.dll
+ 2008-06-23 16:28:22 102,912 -c----w C:\WINDOWS\system32\dllcache\occache.dll
- 2008-04-23 04:16:40 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
+ 2008-06-23 16:28:22 44,544 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
- 2008-04-23 04:16:40 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll
+ 2008-06-23 16:28:22 105,984 -c----w C:\WINDOWS\system32\dllcache\url.dll
- 2008-04-23 04:16:40 1,159,680 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
+ 2008-06-23 16:28:23 1,159,680 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll
- 2008-04-23 04:16:40 233,472 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll
+ 2008-06-23 16:28:23 233,472 -c----w C:\WINDOWS\system32\dllcache\webcheck.dll
- 2008-04-23 04:16:40 826,368 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
+ 2008-06-23 16:28:23 826,368 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll
- 2008-04-23 04:16:39 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
+ 2008-06-23 16:28:17 347,136 ----a-w C:\WINDOWS\system32\dxtmsft.dll
- 2008-04-23 04:16:39 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
+ 2008-06-23 16:28:17 214,528 ----a-w C:\WINDOWS\system32\dxtrans.dll
- 2008-04-23 04:16:39 133,120 ----a-w C:\WINDOWS\system32\extmgr.dll
+ 2008-06-23 16:28:17 133,120 ----a-w C:\WINDOWS\system32\extmgr.dll
- 2008-04-23 04:16:39 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
+ 2008-06-23 16:28:17 63,488 ----a-w C:\WINDOWS\system32\icardie.dll
- 2008-04-22 07:41:08 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe
+ 2008-06-23 09:21:30 70,656 ----a-w C:\WINDOWS\system32\ie4uinit.exe
- 2008-04-23 04:16:39 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll
+ 2008-06-23 16:28:18 153,088 ----a-w C:\WINDOWS\system32\ieakeng.dll
- 2008-04-23 04:16:39 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll
+ 2008-06-23 16:28:18 230,400 ----a-w C:\WINDOWS\system32\ieaksie.dll
- 2008-04-20 05:07:51 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll
+ 2008-06-21 05:23:54 161,792 ----a-w C:\WINDOWS\system32\ieakui.dll
- 2008-04-23 04:16:39 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
+ 2008-06-23 16:28:18 383,488 ----a-w C:\WINDOWS\system32\ieapfltr.dll
- 2008-04-23 04:16:39 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll
+ 2008-06-23 16:28:18 384,512 ----a-w C:\WINDOWS\system32\iedkcs32.dll
- 2008-04-23 04:16:39 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
+ 2008-06-23 16:28:19 6,066,176 ----a-w C:\WINDOWS\system32\ieframe.dll
- 2008-04-23 04:16:39 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll
+ 2008-06-23 16:28:19 44,544 ----a-w C:\WINDOWS\system32\iernonce.dll
- 2008-04-23 04:16:39 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
+ 2008-06-23 16:28:20 267,776 ----a-w C:\WINDOWS\system32\iertutil.dll
- 2008-04-22 07:39:58 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
+ 2008-06-23 09:20:26 13,824 ----a-w C:\WINDOWS\system32\ieudinit.exe
- 2007-08-21 06:17:23 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
+ 2008-04-11 18:51:06 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
- 2008-04-23 04:16:40 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll
+ 2008-06-23 16:28:20 27,648 ----a-w C:\WINDOWS\system32\jsproxy.dll
- 2008-06-25 07:15:48 17,972,344 ----a-w C:\WINDOWS\system32\MRT.exe
+ 2008-08-05 18:11:01 15,888,504 ----a-w C:\WINDOWS\system32\MRT.exe
- 2008-04-23 04:16:40 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
+ 2008-06-23 16:28:20 459,264 ----a-w C:\WINDOWS\system32\msfeeds.dll
- 2008-04-23 04:16:40 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
+ 2008-06-23 16:28:20 52,224 ----a-w C:\WINDOWS\system32\msfeedsbs.dll
- 2008-04-23 20:16:42 3,591,680 ----a-w C:\WINDOWS\system32\mshtml.dll
+ 2008-06-24 08:28:24 3,592,192 ----a-w C:\WINDOWS\system32\mshtml.dll
- 2008-04-23 04:16:40 478,208 ----a-w C:\WINDOWS\system32\mshtmled.dll
+ 2008-06-23 16:28:22 477,696 ----a-w C:\WINDOWS\system32\mshtmled.dll
- 2008-04-23 04:16:40 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
+ 2008-06-23 16:28:22 193,024 ----a-w C:\WINDOWS\system32\msrating.dll
- 2008-04-23 04:16:40 671,232 ----a-w C:\WINDOWS\system32\mstime.dll
+ 2008-06-23 16:28:22 671,232 ----a-w C:\WINDOWS\system32\mstime.dll
- 2008-04-23 04:16:40 102,912 ----a-w C:\WINDOWS\system32\occache.dll
+ 2008-06-23 16:28:22 102,912 ----a-w C:\WINDOWS\system32\occache.dll
- 2008-04-23 04:16:40 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
+ 2008-06-23 16:28:22 44,544 ----a-w C:\WINDOWS\system32\pngfilt.dll
- 2007-11-13 11:31:11 60,416 ------w C:\WINDOWS\system32\tzchange.exe
+ 2008-07-14 11:09:18 62,976 ------w C:\WINDOWS\system32\tzchange.exe
- 2008-04-23 04:16:40 105,984 ----a-w C:\WINDOWS\system32\url.dll
+ 2008-06-23 16:28:22 105,984 ----a-w C:\WINDOWS\system32\url.dll
- 2008-04-23 04:16:40 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
+ 2008-06-23 16:28:23 1,159,680 ----a-w C:\WINDOWS\system32\urlmon.dll
- 2008-04-23 04:16:40 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
+ 2008-06-23 16:28:23 233,472 ----a-w C:\WINDOWS\system32\webcheck.dll
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 01:09 15360]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 12:55 5674352]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" [2007-08-30 17:43 4670704]
"Avg_AntiHost"="C:\WINDOWS\system32\THe Girls\Ecran.exe" [2008-07-26 08:39 679936]
"IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe" [2008-07-21 16:25 2610608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [2003-05-05 08:57 143360]
"DrvLsnr"="C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe" [2003-05-08 11:34 69632]
"IgfxTray"="C:\WINDOWS\System32\igfxtray.exe" [2005-06-21 16:48 155648]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2005-06-21 16:44 126976]
"RoxioEngineUtility"="C:\Program Files\Fichiers communs\Roxio Shared\System\EngUtil.exe" [2003-05-01 18:44 65536]
"RoxioDragToDisc"="C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe" [2003-06-27 00:21 868352]
"OrderReminder"="C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe" [2006-07-30 19:00 98304]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43 83608]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"FIXEDFON.FON"="C:\WINDOWS\system32\Win32.vbs" [BU]
"ShStatEXE"="C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2007-10-16 20:50 111952]
"McAfeeUpdaterUI"="C:\Program Files\McAfee\Common Framework\UdaterUI.exe" [2007-10-25 10:04 136512]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 01:09 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.DIV3"= DivXc32.dll
"vidc.DIV4"= DivXc32f.dll
"vidc.DIVF"= DivX412.dll
"vidc.XVID"= xvid.dll
"VIDC.HFYU"= huffyuv.dll
"msacm.divxa32"= DivXa32.acm
"msacm.lameacm"= LameACM.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"C:\\Program Files\\McAfee\\Common Framework\\FrameworkService.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3f3994e5-65d8-11dd-882b-000bcd660313}]
\Shell\AutoRun\command - wscript "The_Cars.vbs"
\Shell\explore\Command - wscript "The_Cars.vbs"
\Shell\open\Command - wscript "The_Cars.vbs"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3f3994f0-65d8-11dd-882b-000bcd660313}]
\Shell\AutoRun\command - wscript "The_Cars.vbs"
\Shell\explore\Command - wscript "The_Cars.vbs"
\Shell\open\Command - wscript "The_Cars.vbs"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c8618a2b-6519-11dd-8829-000bcd660313}]
\Shell\AutoRun\command - wscript "The_Cars.vbs"
\Shell\explore\Command - wscript "The_Cars.vbs"
\Shell\open\Command - wscript "The_Cars.vbs"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d1fce914-6512-11dd-8828-000bcd660313}]
\Shell\AutoRun\command - wscript "The_Cars.vbs"
\Shell\explore\Command - wscript "The_Cars.vbs"
\Shell\open\Command - wscript "The_Cars.vbs"
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-19 07:41:54
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-08-19 7:44:03
ComboFix-quarantined-files.txt 2008-08-19 05:43:39
ComboFix2.txt 2008-08-14 13:40:03
ComboFix3.txt 2008-08-13 07:10:46
ComboFix4.txt 2008-08-13 06:32:57

Pre-Run: 33,102,512,128 octets libres
Post-Run: 33,194,049,536 octets libres

394 --- E O F --- 2008-08-14 19:40:02

J'attends vos réponses à comment prévenir ce virus.
Merci