Je n'arrive pas a tirer de l'experience des dépannages précédents pour ce même virus. Après de nombreuse heures d'essai je me lance dans une demande à l'aide.
 
Voici mon scan hijackthis :
 
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:34:38, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
 
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: (no name) - {C6A262A2-41EF-46AB-8B61-0AA032FDFD77} - C:\WINDOWS\system32\bthc.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [KillAFile] C:\Documents and Settings\Mélanie\Bureau\KillAFile.exe /r
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.canalplay.com
O15 - Trusted Zone: *.canalplusactive.com
O15 - Trusted Zone: *.canalplay.com (HKLM)
O15 - Trusted Zone: *.canalplusactive.com (HKLM)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://eu-housecall.trendmicro-eur [...] hcImpl.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service CANALPLAY - Canal+ Active - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
 
--
End of file - 7084 bytes
 
 
 
 
 
 
 et voici mon scan combofix :  
 
ComboFix 07-12-09.1 - Mélanie 2007-12-11  4:41:37.2 - NTFSx86
Running from: C:\Documents and Settings\Mélanie\Local Settings\Temporary Internet Files\Content.IE5\6MQOBHOW\ComboFix[1].exe
.
 
(((((((((((((((((((((((((((((   Fichiers créés 2007-11-11 to 2007-12-11  ))))))))))))))))))))))))))))))))))))
.
 
2007-12-11 04:18 . 2007-12-11 04:18 <REP> d-------- C:\WINDOWS\system32\regdacl
2007-12-11 04:18 . 2007-12-11 04:18 90,112 --a------ C:\WINDOWS\system32\regdacl.exe
2007-12-11 04:18 . 2007-12-11 04:18 53,248 --a------ C:\WINDOWS\system32\process.exe
2007-12-11 04:18 . 2007-12-11 04:18 16,384 --a------ C:\WINDOWS\system32\restart.exe
2007-12-11 04:18 . 2007-12-11 04:18 4,096 --a------ C:\WINDOWS\system32\reboot.exe
2007-12-11 03:55 . 2005-03-17 11:52 <REP> d-------- C:\Documents and Settings\Administrateur\WINDOWS
2007-12-11 03:55 . 2005-07-18 15:27 <REP> d-------- C:\Documents and Settings\Administrateur\Voisinage réseau
2007-12-11 03:55 . 2005-03-17 09:13 <REP> d--h----- C:\Documents and Settings\Administrateur\Voisinage d'impression
2007-12-11 03:55 . 2005-03-17 08:17 <REP> d--h----- C:\Documents and Settings\Administrateur\Modèles
2007-12-11 03:55 . 2005-03-30 08:17 <REP> dr------- C:\Documents and Settings\Administrateur\Mes documents
2007-12-11 03:55 . 2005-03-17 09:13 <REP> dr------- C:\Documents and Settings\Administrateur\Menu Démarrer
2007-12-11 03:55 . 2005-03-30 08:17 <REP> dr------- C:\Documents and Settings\Administrateur\Favoris
2007-12-11 03:55 . 2005-03-30 08:37 <REP> d-------- C:\Documents and Settings\Administrateur\Bureau
2007-12-11 03:55 . 2005-03-17 12:54 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\toshiba
2007-12-11 03:55 . 2005-03-18 09:50 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Symantec
2007-12-11 03:55 . 2005-03-18 08:52 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Sonic
2007-12-11 03:55 . 2005-03-18 08:11 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\AdobeUM
2007-12-11 03:33 . 2007-12-11 03:41 82,061 --a------ C:\WINDOWS\system32\drivers\klick.dat
2007-12-11 03:33 . 2007-12-11 03:41 81,549 --a------ C:\WINDOWS\system32\drivers\klin.dat
2007-12-11 03:32 . 2007-12-11 03:32 <REP> d-------- C:\Program Files\Kaspersky Lab
2007-12-11 03:32 . 2007-12-11 04:22 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-12-11 03:32 . 2007-12-11 04:46 680,992 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-12-11 03:32 . 2007-12-11 04:46 6,688 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-12-11 03:32 . 2007-12-11 04:21 5,372 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2007-12-11 03:32 . 2007-12-11 04:21 1,460 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2007-12-11 03:31 . 2007-12-11 03:31 <REP> d-------- C:\kav
2007-12-11 01:41 . 2007-12-11 01:41 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab
2007-12-11 01:36 . 2007-12-11 01:36 <REP> d-------- C:\VundoFix Backups
2007-12-10 23:59 . 2004-08-05 12:00 1,227,264 --a------ C:\WINDOWS\system32\dx8vb.dll
2007-12-10 23:59 . 2004-08-05 12:00 1,227,264 --a--c--- C:\WINDOWS\system32\dllcache\dx8vb.dll
2007-12-10 23:59 . 2004-08-05 12:00 619,008 --a------ C:\WINDOWS\system32\dx7vb.dll
2007-12-10 23:59 . 2004-08-05 12:00 619,008 --a--c--- C:\WINDOWS\system32\dllcache\dx7vb.dll
2007-12-10 23:51 . 2007-12-10 23:51 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-12-10 23:47 . 2007-12-10 23:47 <REP> d-------- C:\Program Files\Trend Micro
2007-12-10 22:38 .  19,456  C:\WINDOWS\system32\drivers\brxdommj.dat
2007-12-10 22:34 . 2004-08-05 12:00 84,992 --a------ C:\WINDOWS\system32\bthc.dll
2007-12-06 14:32 . 2007-12-11 01:42 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-06 14:32 . 2007-12-06 14:32 1,409 --a------ C:\WINDOWS\QTFont.for
2007-11-27 19:06 . 2007-11-27 19:06 <REP> d-------- C:\Program Files\uTorrent
2007-11-27 19:06 . 2007-12-11 04:41 <REP> d-------- C:\Documents and Settings\Mélanie\Application Data\uTorrent
 
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-11 02:17 --------- d-----w C:\Program Files\Space Hack
2007-12-11 02:16 --------- d-----w C:\Program Files\Buka
2007-11-27 12:15 --------- d-----w C:\Program Files\BitTorrent
2007-11-26 21:23 --------- d-----w C:\Documents and Settings\Mélanie\Application Data\dvdcss
2007-11-21 18:55 --------- d-----w C:\Program Files\Dofus
2007-11-08 21:43 --------- d-----w C:\Program Files\Wanadoo
2007-11-08 21:43 --------- d-----w C:\Program Files\SAGEM
2007-11-08 21:42 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-10-13 11:59 --------- d-----w C:\Program Files\Securitoo
2007-10-12 17:14 --------- d-----w C:\Program Files\Inventel
.
 
(((((((((((((((((((((((((((((   snapshot@2007-12-10_23.34.07,06   )))))))))))))))))))))))))))))))))))))))))
.
- 2005-07-18 14:26:09 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2007-12-11 02:36:23 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2005-07-18 14:26:09 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2007-12-11 02:36:23 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
- 2005-07-18 14:26:09 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2007-12-11 02:36:23 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2007-04-28 15:51:02 110,360 ----a-w C:\WINDOWS\system32\drivers\kl1.sys
+ 2007-06-27 16:31:58 186,640 ----a-w C:\WINDOWS\system32\drivers\klif.sys
+ 2007-04-04 13:58:26 24,344 ----a-w C:\WINDOWS\system32\drivers\klim5.sys
+ 2007-06-28 11:50:52 22,457 ----a-w C:\WINDOWS\system32\drivers\klop.dat
+ 2005-05-16 18:34:48 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2006-03-20 12:17:24 65,536 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2006-03-20 12:17:20 798,720 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
+ 2007-06-28 11:51:48 206,088 ----a-w C:\WINDOWS\system32\klogon.dll
+ 2007-12-11 03:18:45 4,175 ----a-w C:\WINDOWS\system32\regdacl\doc\SMWNCV.cmd
.
(((((((((((((((((((((((((((((((((   Point de chargement Reg   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
 
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C6A262A2-41EF-46AB-8B61-0AA032FDFD77}]
2004-08-05 12:00 84992 --a------ C:\WINDOWS\system32\bthc.dll
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 12:00]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2007-11-27 19:06]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2003-10-30 16:46]
"LtMoh"="C:\Program Files\ltmoh\Ltmoh.exe" [2003-09-05 17:16]
"AGRSMMSG"="AGRSMMSG.exe" [2004-10-28 14:37 C:\WINDOWS\agrsmmsg.exe]
"CeEKEY"="C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe" [2005-01-21 21:48]
"TPNF"="C:\Program Files\TOSHIBA\TouchPad\TPTray.exe" [2004-11-29 21:06]
"TOSHIBA Accessibility"="C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe" [2004-12-07 21:24]
"HWSetup"="C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe" [2004-12-23 18:07]
"SVPWUTIL"="C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe" [2005-02-25 15:59]
"Zooming"="ZoomingHook.exe" [2004-07-14 16:07 C:\WINDOWS\system32\ZoomingHook.exe]
"TCtryIOHook"="TCtrlIOHook.exe" [2005-02-16 14:43 C:\WINDOWS\system32\TCtrlIOHook.exe]
"TPSMain"="TPSMain.exe" [2005-01-21 10:28 C:\WINDOWS\system32\TPSMain.exe]
"Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2004-11-12 17:57]
"TFncKy"="TFncKy.exe" []
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-09-08 11:33]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [2007-06-28 12:51]
"KillAFile"="C:\Documents and Settings\Mélanie\Bureau\KillAFile.exe" []
 
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 12:00]
 
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2007-07-20 12:08:05]
DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2005-07-25 12:42:43]
 
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 0 (0x0)
 
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSimpleStartMenu"= 0 (0x0)
"NoTrayItemsDisplay"= 0 (0x0)
"NoRecentDocsHistory"= 0 (0x0)
 
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
 
R0 eecigyrx;eecigyrx;C:\WINDOWS\system32\drivers\brxdommj.dat
R1 SerTVOutCtlr;TOSHIBA Controls Driver -EPIOMngr;C:\WINDOWS\system32\drivers\EPIOMngr.sys
R1 SrvcEKIOMngr;SrvcEKIOMngr;C:\WINDOWS\system32\Drivers\EKIoMngr.sys
R1 SrvcSSIOMngr;SrvcSSIOMngr;C:\WINDOWS\system32\Drivers\SSIoMngr.sys
R1 TPwSav;Common Driver;C:\WINDOWS\system32\Drivers\TPwSav.sys
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys
R3 odysseyIM3;Odyssey Network Services Miniport;C:\WINDOWS\system32\DRIVERS\odysseyIM3.sys
S1 StickyMesger;StickyMesger;\??\C:\Program Files\TOSHIBA\Accessibility\StickyMesger.sys
S3 RTLWUSB;NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver;C:\WINDOWS\system32\DRIVERS\wg111v2.sys
S3 Service CANALPLAY;Service CANALPLAY;"C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe"
S3 SjyPkt;SjyPkt;\??\C:\WINDOWS\System32\Drivers\SjyPkt.sys
S3 TNET1130;IEEE 802.11g Wireless Cardbus/PCI Adapter;C:\WINDOWS\system32\DRIVERS\tnet1130.sys
 
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\LaunchU3.exe -a
 
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{91de78d3-8ec5-11dc-8e55-0012f061ae42}]
\Shell\AutoRun\command - E:\LaunchU3.exe -a
 
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2007-12-11 03:43:02 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Program Files\Symantec\LiveUpdate\NDetect.exe
.
--------------------- DLLs Loaded Under Running Processes ---------------------  
 
PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156]
-> C:\DOCUME~1\MLANIE~1\LOCALS~1\Temp\cwhtehkj.dll
.
**************************************************************************
 
catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-11 04:46:53
Windows 5.1.2600 Service Pack 2 NTFS
 
scanning hidden processes ...
 
scanning hidden autostart entries ...
 
scanning hidden files ...
 
scan completed successfully  
hidden files: 0  
 
**************************************************************************
.
Completion time: 2007-12-11  4:48:06
C:\ComboFix2.txt ... 2007-12-10 23:34
.
 --- E O F ---
 
 
Merci d'avance pour aider un type qui a planté l'ordi de sa chérie !
 
 
Aurelien

je parcours le forum et je m'apercois qu'on est 5 ou 6 à être dans le même cas...