problème avec un cheval de troie voici mes rapports...

Bonjour,

Voici mes rapports de différents logiciels, si quelqu'un aurait la gentillesse d'y jeter unn oiel merci d'avance.  

ComboFix 07-08-09.3 - "zaza" 2007-10-29 13:14:40.4 - FAT32x86
Microsoft Windows XP Professionnel 5.1.2600.0.1252.1.1036.18.48 [GMT 1:00]


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\.exe


((((((((((((((((((((((((( Files Created from 2007-09-28 to 2007-10-29 )))))))))))))))))))))))))))))))


2007-10-29 12:19 <REP> d--hs---- C:\FOUND.002
2007-10-28 19:51 <REP> d--hs---- C:\FOUND.001
2007-10-27 11:51 <REP> d--hs---- C:\FOUND.000
2007-10-27 10:54 <REP> d-------- C:\WINDOWS\LastGood
2007-10-24 18:01 <REP> d-------- C:\DOCUME~1\zaza\.homeplayer
2007-10-24 17:58 <REP> d-------- C:\Program Files\HomePlayer1.5.3.1
2007-10-23 20:37 95,608 --a------ C:\WINDOWS\system32\AVASTSS.scr
2007-10-23 20:37 94,416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2007-10-23 20:37 92,848 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2007-10-23 20:37 801,144 --a------ C:\WINDOWS\system32\aswBoot.exe
2007-10-23 20:37 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2007-10-23 20:37 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2007-10-23 20:37 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2007-10-23 20:28 24,344 --a------ C:\WINDOWS\system32\drivers\klim5.sys
2007-10-23 19:10 148,480 -r-hs---- C:\WINDOWS\system32\dllcache\frehost.exe
2007-10-23 18:17 17,801 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
2007-10-23 18:14 94,208 --a------ C:\WINDOWS\system32\DNIN50.dll
2007-10-23 18:14 651,264 --a------ C:\WINDOWS\system32\libeay32.dll
2007-10-23 18:14 362,944 --a------ C:\WINDOWS\system32\drivers\WPN111.sys
2007-10-23 18:14 25,216 --a------ C:\WINDOWS\system32\drivers\usbehci.sys
2007-10-23 18:14 192,512 -ra------ C:\WINDOWS\system32\AegisI5.exe
2007-10-23 18:14 19,328 --a------ C:\WINDOWS\system32\drivers\usbuhci.sys
2007-10-23 18:14 18,944 --a------ C:\WINDOWS\system32\dllcache\usbuhci.sys
2007-10-23 18:14 17,149 --a------ C:\WINDOWS\system32\DNINDIS5.sys
2007-10-23 18:14 149,392 --a------ C:\WINDOWS\system32\drivers\ar5523.bin
2007-10-23 18:14 147,456 --a------ C:\WINDOWS\system32\ssleay32.dll
2007-10-23 18:14 138,752 --a------ C:\WINDOWS\system32\drivers\usbport.sys
2007-10-23 18:14 <REP> d-------- C:\Program Files\NETGEAR
2007-10-20 19:34 <REP> d--hs---- C:\WINDOWS\ftpcache
2007-10-20 19:34 <REP> d-------- C:\Program Files\Free
2007-10-05 12:00 51,200 --a------ C:\WINDOWS\nircmd.exe


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-10-26 14:11 146944 --ahs---- C:\Program Files\Thumbs.db
2007-10-23 19:01 48616 --a------ C:\WINDOWS\system32\perfc00C.dat
2007-10-23 19:01 367658 --a------ C:\WINDOWS\system32\perfh00C.dat
2007-09-03 09:42 --------- d-------- C:\Program Files\RamBoost XP
2007-09-02 15:25 --------- d-------- C:\Program Files\Azureus
2007-08-22 15:50 1165 --a------ C:\WINDOWS\mozver.dat
2007-08-20 23:50 3290 --a------ C:\WINDOWS\system32\gnc.exe
2007-08-20 12:27 0 --a------ C:\WINDOWS\nsreg.dat
2007-08-06 12:33 69689 --a------ C:\WINDOWS\UNZIP.DLL
2007-08-06 12:33 507904 --a------ C:\WINDOWS\TMUPDATE.DLL
2007-08-06 12:33 286720 --a------ C:\WINDOWS\PATCH.EXE
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2001-09-28 11:00:00 94,864 --sh--w C:\WINDOWS\twain.dll
2001-09-28 11:00:00 46,592 --sh--w C:\WINDOWS\twain_32.dll
2001-09-28 11:00:00 569,344 --sh--w C:\WINDOWS\system32\oleaut32.dll
2001-09-28 11:00:00 322,560 --sh--w C:\WINDOWS\system32\msvcrt.dll
2001-09-28 11:00:00 401,462 --sh--w C:\WINDOWS\system32\msvcp60.dll
2001-09-28 11:00:00 10,240 --sh--w C:\WINDOWS\system32\regsvr32.exe
2001-09-28 11:00:00 995,383 --sh--w C:\WINDOWS\system32\mfc42.dll
2001-09-28 11:00:00 50,688 --sh--w C:\WINDOWS\system32\msvcirt.dll
2001-09-28 11:00:00 106,496 --sh--w C:\WINDOWS\system32\olepro32.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Share-to-Web Namespace Daemon"="C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2001-07-03 09:11]
"nwiz"="nwiz.exe" [2003-05-02 08:19 C:\WINDOWS\system32\nwiz.exe]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2003-05-02 08:19]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe" [2005-10-27 18:44]

C:\Documents and Settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 20:05:56]
HPAiODevice(hp psc 700 series) - 1.lnk - C:\Program Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe [2002-04-24 01:28:32]
BTTray.lnk - C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe [2006-05-12 13:33:22]
NETGEAR WPN111 Smart Wizard.lnk - C:\Program Files\NETGEAR\WPN111\wpn111.exe [2007-10-23 18:14:32]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"=0 (0x0)

R0 Imagedrv;Imagedrv;C:\WINDOWS\System32\DRIVERS\imagedrv.sys
R0 RecAgent;RecAgent;C:\WINDOWS\System32\DRIVERS\RecAgent.sys
R2 BTSLBCSP;Bluetooth Port Client Driver;\??\C:\WINDOWS\System32\drivers\btslbcsp.sys
R2 Microsoft Agent;Microsoft Agent;"C:\WINDOWS\System32\dllcache\frehost.exe"
R3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;\??\C:\WINDOWS\System32\DNINDIS5.SYS
R3 Mtlmnt5;Mtlmnt5;C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys
R3 Slntamr;Smart Link 56K Modem Driver;C:\WINDOWS\System32\DRIVERS\slntamr.sys
R3 SlWdmSup;SlWdmSup;C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys
R3 WPN111;Wireless USB 2.0 Adapter with RangeMax Service;C:\WINDOWS\System32\DRIVERS\WPN111.sys
S3 alcan5wn;SpeedTouch USB ADSL PPP Networking Driver (NDISWAN);C:\WINDOWS\System32\DRIVERS\alcan5wn.sys
S3 autorun;autorun;\??\c:\huadio.tmp
S3 fsbl-standalone;F-Secure BlackLight Beta Engine Driver;\??\C:\DOCUME~1\zaza\LOCALS~1\Temp\F-Secure\BlackLight\fsbldrv.sys
S3 Mtlstrm;Mtlstrm;C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys
S3 NtMtlFax;NtMtlFax;C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys
S3 NVENET;NVIDIA nForce MCP Networking Controller Driver;C:\WINDOWS\System32\DRIVERS\NVENET.sys
S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\System32\DRIVERS\LV532AV.SYS
S3 SlNtHal;SlNtHal;C:\WINDOWS\System32\DRIVERS\Slnthal.sys
S3 USB_RNDIS;ADI Remote NDIS Network Device Driver;C:\WINDOWS\System32\DRIVERS\usb8023.sys
S4 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe"


**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-29 13:16:10
Windows 5.1.2600 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-10-29 13:16:29
C:\ComboFix-quarantined-files.txt ... 2007-10-29 13:16

--- E O F ---



Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:27:09, on 30/10/2007
Platform: Windows XP (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\System32\dllcache\frehost.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\NETGEAR\WPN111\wpn111.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\cmd.exe
C:\WINDOWS\system32\ftp.exe
C:\Documents and Settings\zaza\Bureau\Raccourcis\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: HPAiODevice(hp psc 700 series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp psc 700 series\Bin\hpobrt07.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: NETGEAR WPN111 Smart Wizard.lnk = ?
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://melusyne68.spaces.live.com//PhotoUpload/MsnPUpld...
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst....
O17 - HKLM\System\CCS\Services\Tcpip\..\{4B25DA3F-1E60-4F39-ADE9-5ED97CCEAB1A}: NameServer = 86.64.145.140,84.103.237.140
O17 - HKLM\System\CCS\Services\Tcpip\..\{8360A048-F4C1-49CC-A1BA-F9251D46850B}: NameServer = 86.64.145.141,84.103.237.141
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\imapi.exe
O23 - Service: Microsoft Agent - Unknown owner - C:\WINDOWS\System32\dllcache\frehost.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: DDE réseau (NetDDE) - Unknown owner - C:\WINDOWS\system32\netdde.exe
O23 - Service: DSDM DDE réseau (NetDDEdsdm) - Unknown owner - C:\WINDOWS\system32\netdde.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Prise en charge des cartes à puces (SCardDrv) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINDOWS\System32\tlntsvr.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe

--
End of file - 7920 bytes