Infecté par Adware Maxifiles

Spyware doctor me trouve toujours cette fameuse application qui est :

Type : Menace
Nom : Application.NirCmd..

Ainsi qu'un Trojan généric ....

Que faire??

Grrr j'en peux plus ....heureusement que je n'ai pas d'enfants... Je veux aller sur le site de l'internaute via google et il m'ouvre une page rien à voir : SITE PORNO

http://best-tube-download.org/index-go.html?ID=11774&fb=aSlAXz5iW2g%2BbWcxRGJDaDBQUztpUGR6RG1bej5tJTFyYCUxJW1AWVEkYVk%2BYCUxPklAWSVtZ2AlKWcgR2glWT5gJTElKUQxRGp4O1JqQ19STi1oMEM%2FLzBWRCM4aEA2PllEWiVtO0IlSkQjOGhAWj5ZU2U4JzIvRG1baD5tLDFEbWlgPilpX0RtWz84aEBoPllTWzBJLFk%2BYCUxJWhEMURqJXE%2BSWFfaWhhcTAkeGpHJCVgR2hDLUdqJWAwSWRZJWhpWj4pZ18%2BSXVxRG1bPw%3D%3D

Ce virus ne veux vraiment pas partir, ca m'inquiète sérieusement ...

voici le rapport combofix :

ComboFix 09-02-12.03 - Compaq_Propriétaire 2009-02-15 9:59:28.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.1470.714 [GMT 1:00]
Lancé depuis: c:\documents and settings\Compaq_Propriétaire\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Compaq_Propriétaire\Bureau\CFscript.txt
AV: Norton 360 *On-access scanning enabled* (Updated)
FW: Norton 360 *enabled*
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Exécution préalable -------
.
c:\program files\QUAD Utilities
c:\windows\system32\tmp.reg

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_seneka

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-15 au 2009-02-15 ))))))))))))))))))))))))))))))))))))
.

2100-02-24 14:15 . 2001-04-02 16:30 821 --a--c--- c:\windows\Lexmark_ICM.ini
2100-02-16 16:09 . 2001-02-16 15:37 62 --a--c--- c:\windows\system32\LXASUSCI.INI
2009-02-14 23:43 . 2009-02-14 23:44 <REP> d-------- C:\rsit
2009-02-14 15:20 . 2009-02-14 15:20 <REP> d-------- c:\program files\SUPERAntiSpyware
2009-02-14 15:20 . 2009-02-14 15:20 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\SUPERAntiSpyware.com
2009-02-14 15:20 . 2009-02-14 15:20 <REP> d-------- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-02-14 15:19 . 2009-02-14 15:19 <REP> d-------- c:\program files\Fichiers communs\Wise Installation Wizard
2009-02-13 18:58 . 2009-02-13 19:14 <REP> d-------- c:\program files\MSNFix
2009-02-12 18:21 . 2009-02-15 09:08 <REP> d-------- c:\program files\Spyware Doctor
2009-02-12 18:21 . 2009-02-12 18:26 81,288 --a------ c:\windows\system32\drivers\iksyssec.sys
2009-02-12 18:21 . 2009-02-12 18:26 66,952 --a------ c:\windows\system32\drivers\iksysflt.sys
2009-02-12 18:21 . 2009-02-12 18:26 40,840 --a------ c:\windows\system32\drivers\ikfilesec.sys
2009-02-12 18:21 . 2008-06-02 15:19 29,576 --a------ c:\windows\system32\drivers\kcom.sys
2009-02-09 20:32 . 2009-02-09 20:32 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Malwarebytes
2009-02-09 08:35 . 2009-02-09 08:35 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\Samsung
2009-02-09 01:46 . 2006-05-03 22:53 174,592 --a------ c:\windows\system32\framedyn.dll
2009-02-09 01:45 . 2009-02-09 01:46 <REP> d-------- c:\windows\system32\Samsung_USB_Drivers
2009-02-09 01:45 . 2005-08-30 01:49 94,000 --a------ c:\windows\system32\drivers\ssm_mdm.sys
2009-02-09 01:45 . 2005-08-30 01:47 58,320 --a------ c:\windows\system32\drivers\ssm_bus.sys
2009-02-09 01:45 . 2005-08-30 01:49 8,336 --a------ c:\windows\system32\drivers\ssm_mdfl.sys
2009-02-09 01:45 . 2005-08-30 01:49 6,176 --a------ c:\windows\system32\drivers\ssm_cmnt.sys
2009-02-09 01:45 . 2005-08-30 01:49 6,176 --a------ c:\windows\system32\drivers\ssm_cm.sys
2009-02-09 01:45 . 2005-08-30 01:47 5,840 --a------ c:\windows\system32\drivers\ssm_whnt.sys
2009-02-09 01:45 . 2005-08-30 01:47 5,840 --a------ c:\windows\system32\drivers\ssm_wh.sys
2009-02-09 01:45 . 2006-07-24 16:05 5,632 --a------ c:\windows\system32\drivers\StarOpen.sys
2009-02-09 01:44 . 2009-02-09 01:44 <REP> d-------- c:\program files\Samsung
2009-02-06 00:25 . 2009-02-06 00:26 <REP> d-------- c:\program files\iTunes
2009-02-06 00:25 . 2009-02-06 00:25 <REP> d-------- c:\program files\iPod
2009-02-06 00:25 . 2009-02-06 00:26 <REP> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-02-06 00:23 . 2009-02-06 00:24 <REP> d-------- c:\program files\QuickTime
2009-02-05 23:47 . 2009-02-05 23:47 <REP> d-------- c:\program files\Orange
2009-01-26 22:26 . 2009-01-26 22:42 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.Subdo.Java.Cache
2009-01-26 22:26 . 2009-01-26 22:42 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.Subdo.Java.Cache
2009-01-26 22:26 . 2009-01-26 22:26 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.jogl_ext
2009-01-26 22:26 . 2009-01-26 22:26 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.jogl_ext
2009-01-15 21:22 . 2009-02-15 00:07 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Tracing
2009-01-15 21:22 . 2009-02-15 00:07 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Tracing
2009-01-15 21:20 . 2009-01-15 21:20 <REP> d-------- c:\program files\Microsoft
2009-01-15 21:19 . 2009-01-15 21:19 <REP> d-------- c:\program files\Windows Live SkyDrive
2009-01-15 21:19 . 2009-01-15 21:19 <REP> d-------- c:\program files\Windows Live
2009-01-15 21:14 . 2009-01-15 21:14 <REP> d-------- c:\program files\Fichiers communs\Windows Live
2009-01-15 02:05 . 2009-01-15 02:33 <REP> d-------- c:\program files\Paint.NET
2009-01-15 01:42 . 2009-01-15 01:51 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\Application Data\gtk-2.0
2009-01-15 01:41 . 2009-01-15 01:41 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.thumbnails
2009-01-15 01:41 . 2009-01-15 01:41 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.thumbnails
2009-01-15 01:40 . 2009-01-15 01:54 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gimp-2.6
2009-01-15 01:40 . 2009-01-15 01:54 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gimp-2.6
2009-01-15 01:40 . 2009-01-15 01:40 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gegl-0.0
2009-01-15 01:40 . 2009-01-15 01:40 <REP> d-------- c:\documents and settings\Compaq_Propriétaire\.gegl-0.0

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-15 09:08 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-02-14 22:11 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
2009-02-14 16:37 --------- d-----w c:\program files\Navilog1
2009-02-14 14:13 --------- d-----w c:\program files\Fichiers communs\Symantec Shared
2009-02-13 18:06 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-12 13:04 --------- d-----w c:\program files\eMule
2009-02-12 04:24 --------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-02-11 09:19 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 09:19 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-02-09 19:52 --------- d-----w c:\documents and settings\All Users\Application Data\Symantec
2009-02-09 00:50 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-02-05 23:25 --------- d-----w c:\program files\Fichiers communs\Apple
2009-01-25 19:00 50,898 -c--a-w c:\documents and settings\Compaq_Propriétaire\Application Data\wklnhst.dat
2009-01-15 01:30 --------- d-----w c:\program files\SLD Codec Pack
2009-01-15 01:30 --------- d-----w c:\program files\PC-Doctor 5 for Windows
2009-01-15 01:30 --------- d-----w c:\program files\Microsoft Works
2009-01-15 01:30 --------- d-----w c:\program files\Mahjongg Towers
2009-01-15 01:30 --------- d-----w c:\program files\LimeWire
2009-01-15 01:30 --------- d-----w c:\program files\Easy Internet signup
2009-01-14 22:30 --------- d-----w c:\program files\Google
2009-01-14 22:03 --------- d-----w c:\program files\LexmarkX83
2009-01-06 07:21 806 -c--a-w c:\windows\system32\drivers\SYMEVENT.INF
2009-01-06 07:21 124,464 -c--a-w c:\windows\system32\drivers\SYMEVENT.SYS
2009-01-06 07:21 10,635 -c--a-w c:\windows\system32\drivers\SYMEVENT.CAT
2009-01-06 07:21 --------- d-----w c:\program files\Symantec
2009-01-01 00:35 --------- d-----w c:\program files\CCleaner
2008-12-29 21:50 --------- d-----w c:\program files\Sony
2008-12-10 21:21 357,768 -c--a-w c:\documents and settings\Compaq_Propriétaire\SymXPep2.dll
2008-12-10 21:21 357,768 -c--a-w c:\documents and settings\Compaq_Propriétaire\SymXPep2.dll
2007-04-02 20:14 14 -c--a-w c:\documents and settings\Compaq_Propriétaire\getfile.dat
2007-04-02 20:14 14 -c--a-w c:\documents and settings\Compaq_Propriétaire\getfile.dat
2006-12-22 02:49 22,845,992 -c--a-w c:\program files\AdbeRdr80_fr_FR.exe
2006-12-15 22:16 87,608 -c--a-w c:\documents and settings\Compaq_Propriétaire\Application Data\ezpinst.exe
2006-12-15 22:16 47,360 -c--a-w c:\documents and settings\Compaq_Propriétaire\Application Data\pcouffin.sys
2008-12-31 17:54 67,688 -c--a-w c:\program files\mozilla firefox\components\jar50.dll
2008-12-31 17:54 54,368 -c--a-w c:\program files\mozilla firefox\components\jsd3250.dll
2008-12-31 17:54 34,944 -c--a-w c:\program files\mozilla firefox\components\myspell.dll
2008-12-31 17:54 46,712 -c--a-w c:\program files\mozilla firefox\components\spellchk.dll
2008-12-31 17:54 172,136 -c--a-w c:\program files\mozilla firefox\components\xpinstal.dll
2005-05-13 16:12 217,073 -csha-r c:\windows\meta4.exe
2005-10-24 10:13 66,560 -csha-r c:\windows\MOTA113.exe
2005-10-13 20:27 422,400 -csha-r c:\windows\x2.64.exe
2006-05-01 12:32 22 -csha-w c:\windows\SMINST\HPCD.sys
2005-10-07 18:14 308,224 -csha-r c:\windows\system32\avisynth.dll
2005-07-14 11:31 27,648 -csha-r c:\windows\system32\AVSredirect.dll
2005-06-26 14:32 616,448 -csha-r c:\windows\system32\cygwin1.dll
2005-06-21 21:37 45,568 -csha-r c:\windows\system32\cygz.dll
2004-01-24 23:00 70,656 -csha-r c:\windows\system32\i420vfw.dll
2006-04-27 09:24 2,945,024 -csha-r c:\windows\system32\Smab.dll
2005-02-28 12:16 240,128 -csha-r c:\windows\system32\x.264.exe
2004-01-24 23:00 70,656 -csha-r c:\windows\system32\yv12vfw.dll
2008-08-29 20:07 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008082920080830\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-09 68856]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-01-15 1830128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112]
"ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2007-03-14 116328]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 61440]
"ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2009-02-12 1168264]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.I420"= i420vfw.dll
"msacm.l3acm"= l3codecp.acm
"VIDC.X264"= x264vfw.dll
"VIDC.3iv2"= 3ivxVfWCodec.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\WINDOWS\\system32\\mcoinstall.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\WINDOWS\\system32\\ftp.exe"=
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-01-15 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [2009-02-12 356920]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2008-11-22 99376]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2008-09-02 191656]
S3 RSPSC;RSPSC;c:\windows\system32\drivers\rspsc.sys --> c:\windows\system32\drivers\rspsc.sys [?]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - COMHOST
*Deregistered* - mchInjDrv
.
Contenu du dossier 'Tâches planifiées'

2008-11-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2008-09-18 c:\windows\Tasks\EasyShare Registration Task.job
- c:\docume~1\ALLUSE~1\APPLIC~1\Kodak\EasyShareSetup\$REGIS~1\Registration_7.8.60.2.sxt _RegistrationOffer@16 []

2009-02-15 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-12 18:20]

2009-02-15 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-Secure System Restore - sysrestore.exe

.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Compaq_Propriétaire\Application Data\Mozilla\Firefox\Profiles\z8jljqpz.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npicdclient.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmidas.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
FF - plugin: c:\windows\system32\Rawflow\npicdclient.dll

---- PARAMETRES FIREFOX ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 1000000
FF - user.js: nglayout.initialpaint.delay - 600
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-15 10:06:03
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(684)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Fichiers communs\Symantec Shared\ccSvcHst.exe
c:\program files\Fichiers communs\Symantec Shared\CCPROXY.EXE
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Symantec\LiveUpdate\AluSchedulerSvc.exe
c:\program files\Spyware Doctor\pctsSvc.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\Symantec\LiveUpdate\AUPDATE.EXE
c:\progra~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
c:\program files\Symantec\LiveUpdate\LuCallbackProxy.exe
.
**************************************************************************
.
Heure de fin: 2009-02-15 10:13:57 - La machine a redémarré [Compaq_Propriétaire]
ComboFix-quarantined-files.txt 2009-02-15 09:13:52
ComboFix2.txt 2008-11-13 20:23:23
ComboFix3.txt 2008-10-08 18:58:28
ComboFix4.txt 2008-09-18 09:18:39
ComboFix5.txt 2009-02-13 17:25:14

Avant-CF: 70,717,095,936 octets libres
Après-CF: 70,691,037,184 octets libres

279 --- E O F --- 2009-02-15 06:47:43

Merci de ta réponse :)

voici le 1er rapport :

Logfile of random's system information tool 1.05 (written by random/random)
Run by Compaq_Propriétaire at 2009-02-14 23:43:57
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 67 GB (46%) free of 146 GB
Total RAM: 1470 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:44, on 2009-02-14
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Compaq_Propriétaire\Bureau\Compaq_Propriétaire.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Secure System Restore] sysrestore.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} - https://www.msn.com/fr-fr/
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

Ah oui j'oubliais, par moment quand je navigue sur le net je n'ai pas les bonnes pages qui s'affichent..Mais j'ai toujours la meme fenetre qui s'ouvre à la place de la bonne qui est le site 'porno borne" qque chose comme ca ..