Ligne o23 boonty?

merci pour ta réponse donc 1°/puis-je supprimer windows defender sans risque. 2°/ boonty je ne l'utilise plus depuis longtemps, j'avais essayé un jeu que j'ai supprimer depuis.

ok je vais le faire par contre je n'ai pas bit defender c'est juste un scan online car je crains d'avoir une sale bestiole

Bien je le fait de suite . Merci encore. Le scan antivir risque de durer un peu de temps donc @+

voila le rapport antivir

Avira AntiVir Personal
Report file date: mercredi 20 août 2008 11:22

Scanning for 1563576 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: ACER-7989E0343A

Version information:
BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 19/08/2008 13:30:26
AVSCAN.DLL : 8.1.4.0 40705 Bytes 19/08/2008 13:30:25
LUKE.DLL : 8.1.4.5 164097 Bytes 19/08/2008 13:30:33
LUKERES.DLL : 8.1.4.0 12033 Bytes 19/08/2008 13:30:33
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 16:34:45
ANTIVIR2.VDF : 7.0.6.10 2587136 Bytes 14/08/2008 04:06:21
ANTIVIR3.VDF : 7.0.6.38 175104 Bytes 19/08/2008 03:41:38
Engineversion : 8.1.1.23
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.68 315770 Bytes 19/08/2008 04:05:09
AESCN.DLL : 8.1.0.23 119156 Bytes 24/07/2008 16:35:42
AERDL.DLL : 8.1.0.20 418165 Bytes 24/07/2008 16:35:40
AEPACK.DLL : 8.1.2.1 364917 Bytes 24/07/2008 16:35:37
AEOFFICE.DLL : 8.1.0.22 192890 Bytes 19/08/2008 04:05:07
AEHEUR.DLL : 8.1.0.50 1388918 Bytes 19/08/2008 04:05:06
AEHELP.DLL : 8.1.0.15 115063 Bytes 24/07/2008 16:35:23
AEGEN.DLL : 8.1.0.36 315764 Bytes 19/08/2008 04:04:57
AEEMU.DLL : 8.1.0.7 430452 Bytes 01/08/2008 03:56:15
AECORE.DLL : 8.1.1.8 172406 Bytes 01/08/2008 03:56:13
AEBB.DLL : 8.1.0.1 53617 Bytes 24/07/2008 16:35:16
AVWINLL.DLL : 1.0.0.12 15105 Bytes 19/08/2008 13:30:26
AVPREF.DLL : 8.0.2.0 38657 Bytes 19/08/2008 13:30:25
AVREP.DLL : 8.0.0.2 98344 Bytes 01/08/2008 03:56:11
AVREG.DLL : 8.0.0.1 33537 Bytes 19/08/2008 13:30:25
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 19/08/2008 13:30:23
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 19/08/2008 13:30:35
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 19/08/2008 13:30:17
RCTEXT.DLL : 8.0.52.0 86273 Bytes 19/08/2008 13:30:17

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mercredi 20 août 2008 11:22

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'msiexec.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'lxcrcoms.exe' - '1' Module(s) have been scanned
Scan process 'mcrdsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'sp_rsser.exe' - '1' Module(s) have been scanned
Scan process 'WZQKPICK.EXE' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned
Scan process 'cpf.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'ehrecvr.exe' - '1' Module(s) have been scanned
Scan process 'SpywareTerminatorShield.Exe' - '1' Module(s) have been scanned
Scan process 'issch.exe' - '1' Module(s) have been scanned
Scan process 'ezprint.exe' - '1' Module(s) have been scanned
Scan process 'lxcrmon.exe' - '1' Module(s) have been scanned
Scan process 'qttask.exe' - '1' Module(s) have been scanned
Scan process 'WkUFind.exe' - '1' Module(s) have been scanned
Scan process 'cmdagent.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'daemon.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'MemCheck.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
48 processes with 48 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] System error [21]: Le périphérique n'est pas prêt.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '73' files ).

Starting the file scan:

Begin scan in 'C:\' <ACER>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\dtscsi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd6317.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <ACERDATA>

End of the scan: mercredi 20 août 2008 12:56
Used time: 1:33:56 Hour(s)

The scan has been done completely.

10677 Scanning directories
608759 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
5 Files cannot be scanned
608754 Files not concerned
11425 Archives were scanned
9 Warnings
0 Notes

En ce qui concerne les pb 1°/ le pointeur de la souris qui part comme une balle en haut de l'écran. 2°/ un son wave de temps a autre

voila le log malware
Malwarebytes' Anti-Malware 1.25
Version de la base de données: 1070
Windows 5.1.2600 Service Pack 3

14:16:10 20/08/2008
mbam-log-08-20-2008 (14-16-10).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 201073
Temps écoulé: 1 hour(s), 14 minute(s), 20 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

ps : j'ai posté plus tôt le rapport antivir, je dois m'absenter 1 ou 2 heures a mon retour je me reconnecte . Encore merci @+ Didier

en pare feu j'ai comodo , comment le rendre inactif?

j'ai chager combo fix l'icone esr sur le bureau quand je dble-clic dessus il y a une petite barre combofix qui démarre et apres un méssage de mon pare-feu qui me dit qu'il bloque

@didishnikovje refait un éssai avec IE7

@didishnikovvoila le log combofix :
ComboFix 08-08-19.02 - didi 2008-08-20 17:22:20.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.394 [GMT 2:00]
Endroit: C:\Documents and Settings\didi\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\didi\Application Data\inst.exe
C:\Documents and Settings\didi\Cookies\didi@live[1].txt
C:\Documents and Settings\didi\Cookies\didi@live[2].txt
C:\Documents and Settings\didi\Cookies\didi@live[3].txt
C:\Documents and Settings\didi\Cookies\didi@live[6].txt
C:\Documents and Settings\didi\Cookies\didi@live[8].txt
C:\Documents and Settings\didi\Cookies\didi@news.fr.msn[1].txt
C:\WINDOWS\system32\MSINET.oca

.
((((((((((((((((((((((((((((( Fichiers créés 2008-07-20 to 2008-08-20 ))))))))))))))))))))))))))))))))))))
.

2008-08-20 10:48 . 2008-08-20 11:02 <REP> d-------- C:\WINDOWS\BDOSCAN8
2008-08-20 09:34 . 2008-08-20 09:34 <REP> d-------- C:\Program Files\Trend Micro
2008-08-20 08:25 . 2008-08-20 08:22 102,664 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2008-08-20 08:22 . 2008-08-20 08:44 <REP> d-------- C:\Documents and Settings\didi\.housecall6.6
2008-08-19 14:39 . 2008-08-19 14:39 <REP> d-------- C:\Documents and Settings\didi\Application Data\Comodo
2008-08-19 14:39 . 2008-08-19 14:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Comodo
2008-08-19 14:36 . 2008-08-19 14:36 <REP> d-------- C:\Program Files\Comodo
2008-08-19 14:36 . 2008-07-12 06:35 221 --a------ C:\boot.ini.comodofirewall
2008-08-19 09:44 . 2008-08-20 09:14 3,002 --a------ C:\Documents and Settings\Orph.egd
2008-08-19 09:43 . 2008-08-20 09:15 <REP> d-------- C:\Toolbar SD
2008-08-19 07:41 . 2007-09-15 15:11 27,136 --a------ C:\WINDOWS\system32\PCWizard.cpl
2008-08-15 09:13 . 2008-08-20 16:39 <REP> d-------- C:\Program Files\WinClamAVShield
2008-08-15 09:07 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-15 06:35 . 2008-08-15 06:35 <REP> d-------- C:\Program Files\OpenOffice.org 2.4
2008-08-15 06:09 . 2008-04-11 21:05 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll
2008-08-15 06:08 . 2008-05-01 16:36 331,776 -----c--- C:\WINDOWS\system32\dllcache\msadce.dll
2008-08-06 05:19 . 2008-08-06 05:19 <REP> d-------- C:\Program Files\ma-config.com
2008-08-06 05:19 . 2008-08-06 05:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\ma-config.com
2008-07-31 11:00 . 2008-07-31 11:00 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-07-31 11:00 . 2008-07-31 11:00 1,409 --a------ C:\WINDOWS\QTFont.for
2008-07-27 08:51 . 2008-07-27 15:15 <REP> d-------- C:\Documents and Settings\didi\Application Data\Thunderbird
2008-07-25 12:12 . 2008-07-25 12:12 <REP> d-------- C:\Documents and Settings\didi\Application Data\Jetico Personal Firewall
2008-07-24 11:28 . 2008-07-24 11:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-07-24 11:27 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2008-07-24 11:27 . 2008-07-24 17:28 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-07-24 11:25 . 2008-07-24 17:57 <REP> d-------- C:\WINDOWS\Internet Logs
2008-07-24 08:38 . 2008-07-24 08:38 <REP> d-------- C:\Program Files\Avira
2008-07-24 08:38 . 2008-07-24 08:38 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-07-21 15:57 . 2008-08-18 12:34 <REP> d-------- C:\Program Files\Spyware Terminator
2008-07-21 15:57 . 2008-08-18 12:02 <REP> d-------- C:\Documents and Settings\didi\Application Data\Spyware Terminator
2008-07-21 15:57 . 2008-08-18 12:34 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2008-07-21 15:57 . 2008-07-21 15:57 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-07-21 14:08 . 2008-07-21 14:08 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Neuf

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-20 14:39 --------- d-----w C:\Program Files\lx_cats
2008-08-20 07:57 --------- d-----w C:\Program Files\Boonty
2008-08-19 13:44 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-08-18 04:14 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-08-17 13:01 17,144 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-08-15 04:54 --------- d-----w C:\Documents and Settings\didi\Application Data\OpenOffice.org2
2008-08-14 16:25 --------- d-----w C:\Program Files\OpenOffice.org 2.3
2008-08-14 16:17 --------- d-----w C:\Program Files\Java
2008-08-14 13:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-07-22 10:24 --------- d-----w C:\Program Files\nLite
2008-07-22 10:24 --------- d-----w C:\Program Files\Neuf
2008-07-22 04:19 --------- d-----w C:\Documents and Settings\didi\Application Data\LimeWire
2008-07-21 13:10 --------- d-----w C:\Program Files\Call of Duty
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
2008-07-18 20:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
2008-07-18 20:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
2008-07-18 18:39 587,264 ----a-w C:\WINDOWS\WLXPGSS.SCR
2008-07-18 15:53 --------- d-----w C:\Documents and Settings\didi\Application Data\AdobeUM
2008-07-14 04:52 --------- d-----w C:\Documents and Settings\didi\Application Data\Malwarebytes
2008-07-14 04:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-07-10 16:32 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-07-07 20:28 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-07-05 03:57 --------- d-----w C:\Program Files\Windows Live Toolbar
2008-07-03 13:29 --------- d-----w C:\Program Files\7-Zip
2008-06-29 07:23 --------- d-----w C:\Program Files\Microsoft Baseline Security Analyzer 2
2008-06-24 16:44 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-23 16:28 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-06-20 17:47 247,808 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 11:51 361,600 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 11:40 138,496 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 11:08 225,856 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-05-23 03:36 413,696 ----a-w C:\WINDOWS\system32\wrap_oal.dll
2008-05-23 03:36 110,592 ----a-w C:\WINDOWS\system32\OpenAL32.dll
2008-03-31 04:41 128 --sha-w C:\Program Files\desktop.ini
2008-03-12 08:27 126,136 ----a-w C:\Documents and Settings\didi\Application Data\GDIPFONTCACHEV1.DAT
2007-10-08 11:01 47,360 ----a-w C:\Documents and Settings\didi\Application Data\pcouffin.sys
2006-11-19 09:21 251 ----a-w C:\Program Files\wt3d.ini
2006-05-03 10:06 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll
2008-05-11 07:34 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008051120080512\index.dat
.

------- Sigcheck -------

2008-04-13 19:34 979968 3efe912dd25d2586e6a0341db0a66f69 C:\WINDOWS\explorer.exe
2007-06-13 15:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
2007-06-13 15:22 979456 80a5400514eb32d393654768c4017e46 C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
2004-08-10 22:00 1036288 4c33e5b9a6197b6ed215f6cfba0a2daa C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
2008-04-13 19:34 979968 3efe912dd25d2586e6a0341db0a66f69 C:\WINDOWS\ServicePackFiles\i386\explorer.exe
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-13 19:34 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2005-12-10 16:57 133016]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-07-12 00:19 7626752]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-07-12 00:19 86016]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"Microsoft Works Update Detection"="C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe" [2002-07-18 18:36 28672]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-23 07:31 155648]
"lxcrmon.exe"="C:\Program Files\Lexmark 2400 Series\lxcrmon.exe" [2006-03-06 19:48 286720]
"EzPrint"="C:\Program Files\Lexmark 2400 Series\ezprint.exe" [2006-02-07 07:10 98304]
"ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 19:15 221184]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-16 19:15 81920]
"LXCRCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll" [2006-02-24 13:54 65536]
"SpywareTerminator"="C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe" [2008-08-14 14:55 1783808]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-08-19 15:30 266497]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"COMODO Firewall Pro"="C:\Program Files\Comodo\Firewall\CPF.exe" [2008-08-19 14:43 1115728]
"nwiz"="nwiz.exe" [2006-07-12 00:19 1519616 C:\WINDOWS\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-13 19:34 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.exe.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2007-05-17 18:43:07 110592]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 04:44:06 29696]
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2007-02-02 20:24:38 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.yv12"= yv12vfw.dll
"msacm.l3fhg"= mp3fhg.acm
"msacm.divxa32"= divxa32.acm
"VIDC.X264"= x264vfw.dll
"VIDC.HFYU"= huffyuv.dll
"vidc.i263"= i263_32.drv

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Acer Empowering Technology.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acer Empowering Technology.lnk
backup=C:\WINDOWS\pss\Acer Empowering Technology.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Acer WLAN 11g USB Dongle.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Acer WLAN 11g USB Dongle.lnk
backup=C:\WINDOWS\pss\Acer WLAN 11g USB Dongle.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchApp]
Alaunch [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader]
--a------ 2006-03-17 16:00 345088 C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService]
--a------ 2006-06-01 15:40 413696 C:\Acer\Empowering Technology\eRecovery\eRAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMEKRMIG6.1]
--a------ 2004-08-10 22:00 44032 C:\WINDOWS\ime\imkr6_1\imekrmig.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]
--a------ 2004-08-10 22:00 208952 C:\WINDOWS\ime\imjp8_1\imjpmig.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002]
--a------ 2004-08-10 22:00 59392 C:\WINDOWS\system32\IME\PINTLGNT\IMSCINST.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]
--a------ 2004-08-10 22:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]
--a------ 2004-08-10 22:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2005-11-10 14:03 36975 C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
--a------ 2006-06-01 02:48 16208384 C:\WINDOWS\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\didier19\\half-life\\hl.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\didier19\\opposing force\\hl.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\didier19\\half-life blue shift\\hl.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\didier19\\team fortress classic\\hl.exe"=
"C:\\Program Files\\Hercules\\Hercules Blog Webcam\\Station2.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\didier19\\condition zero\\hl.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\didier19\\condition zero deleted scenes\\hl.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\didier19\\counter-strike\\hl.exe"=
"C:\\Program Files\\neuf Talk\\neuf Talk.exe"=
"C:\\Program Files\\Valve\\Steam\\SteamApps\\common\\trackmania nations forever\\TmForever.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Red Storm Entertainment\\Ghost Recon\\GhostRecon.exe"=

R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-07-21 15:57]
R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2006-12-03 09:35]
R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2006-12-03 09:35]
R3 APL531;Hercules Blog Webcam;C:\WINDOWS\system32\Drivers\BLvid.sys [2006-09-29 12:12]
R3 camfilt;camfilt;C:\WINDOWS\system32\Drivers\camfilt.sys [2006-10-03 16:06]
R3 Tetris;Tetris driver;C:\WINDOWS\system32\Drivers\Tetris.sys [2006-12-03 09:45]
S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys []
S3 Devx;Devx;C:\WINDOWS\system32\drivers\Devx.sys [2001-09-06 14:21]
S3 int15.sys;int15.sys;C:\Acer\Empowering Technology\eRecovery\int15.sys [2005-01-13 15:46]
S3 maconfservice;Ma-Config Service;C:\Program Files\ma-config.com\maconfservice.exe [2008-07-25 20:57]
S3 VtPr;VtPr;C:\WINDOWS\system32\drivers\VtPr.sys [2001-10-10 16:10]
S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS);C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 11:38]
S4 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe []

*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'

2008-08-20 C:\WINDOWS\Tasks\User_Feed_Synchronization-{F3B41D45-E4DE-4210-A520-196FC9B2FEC8}.job
- C:\WINDOWS\system32\msfeedssync.exe [2007-08-13 19:36]

2008-08-20 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20]
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\didi\Application Data\Mozilla\Firefox\Profiles\7v2p40zd.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.msn.fr/
FF -: plugin - c:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - C:\Program Files\ma-config.com\nphardwaredetection.dll
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-20 17:24:56
Windows 5.1.2600 Service Pack 3 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
LXCRCATS = rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-08-20 17:26:27
ComboFix-quarantined-files.txt 2008-08-20 15:26:21

Pre-Run: 22,534,356,992 octets libres
Post-Run: 22,734,774,272 octets libres

248 --- E O F --- 2008-08-15 04:48:50

on verra. D'abord un grand MERCI a toi pour le temp ,et l'aide que tu m'a appotrté

@didishnikovmaintenant j'enlève combofix ?

encore merci a toi et @+ j'espère sur le forum