dll introuvable suite a un virus

bonjour,
j'ai eu un problème de virus en fait des que je parcourais mon disque j'avais des messages d'erreurs critical error et ça me redirigeais vers un site web ...
j'ai suivi toute la procédure décrite dans ce topic :
http://www.infos-du-net.com/forum/ [...] esoin-aide

Maintenant ce soucis de message critique n'est plus mais j'en ai un autre ...
Quand je démarre et que mon bureau se lance j'ai un message qui me dit qu'il a un problème avec la dll :
c:\windows\system32\mIJAtTmk.dll
Je ne trouve rien sur google donc je me retourne vers vous ...

Merci d'avance

Voici le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:15:23, on 21/07/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft IntelliPoint\IPoint.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Windows\system32\conime.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {2BE2A74A-E09A-4E7F-84BA-3B1C19AF4792} - C:\Windows\system32\mlJCTMfe.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: qndsfmao - {D8FFA8AE-BBE8-4D3F-A249-64B2D03EEB25} - C:\Windows\qndsfmao.dll (file missing)
O3 - Toolbar: qndsfmao - {3FCAEB7D-F8AE-4A67-AE6C-57EE1416BB6D} - C:\Windows\qndsfmao.dll (file missing)
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\mlJAtTmK.dll,#1
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O21 - SSODL: kvxqmtre - {80079911-9621-4D08-A6C7-B4EC514BA9F8} - C:\Windows\kvxqmtre.dll (file missing)
O21 - SSODL: evgratsm - {9C5BEE5A-3DC8-4829-B345-E8A831EFBF35} - C:\Windows\evgratsm.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

--
End of file - 3605 bytes

j'ai executer le prog et il m'a dit qu'il redemarrer donc j'ai laissé faire mais au demarrage j'ai maintenant deux probleme de dll dont le module specifié est introuvable :
mIJAtTmk et gdwdyloy.dll

voici le rapport :
ComboFix 08-07-20.A0 - Anthony 2008-07-21 21:02:44.1 - NTFSx86
Microsoft® Windows Vista™ Édition Intégrale 6.0.6001.1.1252.1.1036.18.1248 [GMT 2:00]
Endroit: C:\Users\Anthony\Downloads\ComboFix.exe
* Création d'un nouveau point de restauration
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\PCHealthCenter
C:\Program Files\PCHealthCenter\0.exe
C:\Program Files\PCHealthCenter\0.gif
C:\Program Files\PCHealthCenter\1.exe
C:\Program Files\PCHealthCenter\1.gif
C:\Program Files\PCHealthCenter\2.exe
C:\Program Files\PCHealthCenter\2.gif
C:\Program Files\PCHealthCenter\3.exe
C:\Program Files\PCHealthCenter\3.gif
C:\Program Files\PCHealthCenter\5.exe
C:\Program Files\PCHealthCenter\sc.html
C:\Program Files\PCHealthCenter\sex1.ico
C:\Program Files\PCHealthCenter\sex2.ico
C:\Users\Christophe\Desktop\Vista Antivirus 2008.lnk
C:\Windows\elxw.exe
C:\Windows\erms.exe
C:\Windows\Sys6E67.exe
C:\Windows\Sys6EC4.exe
C:\Windows\Sys6EF3.exe
C:\Windows\System32\afmxofao.ini
C:\Windows\System32\efMTCJlm.ini
C:\Windows\System32\efMTCJlm.ini2
C:\Windows\system32\gdwdyloy.dll
C:\Windows\system32\kamqhc.dll
C:\Windows\system32\lnlnxaeg.dll
C:\Windows\system32\mcrh.tmp
C:\Windows\system32\mlJCTMfe.dll
C:\Windows\system32\oafoxmfa.dll
C:\Windows\system32\qivnrdkj.dll
C:\Windows\System32\yolydwdg.ini
C:\Windows\system32\yzjbgz.dll

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-21 to 2008-07-21 ))))))))))))))))))))))))))))))))))))
.

2008-07-21 21:01 . 2008-07-21 21:02 <REP> d-------- C:\327882R2FWJFW
2008-07-21 13:14 . 2008-07-21 13:14 <REP> d-------- C:\Program Files\Trend Micro
2008-07-21 10:32 . 2008-07-21 10:32 <REP> d-------- C:\Program Files\Microsoft IntelliPoint
2008-07-21 09:31 . 2008-07-20 14:37 <REP> d-------- C:\SDFix
2008-07-21 09:25 . 2008-07-21 09:25 691 --a------ C:\Users\Anthony\AppData\Roaming\GetValue.vbs
2008-07-21 09:25 . 2008-07-21 09:25 35 --a------ C:\Users\Anthony\AppData\Roaming\SetValue.bat
2008-07-21 08:39 . 2008-07-21 08:39 89 --a------ C:\Windows\wininit.ini
2008-07-21 08:30 . 2008-07-21 08:35 <REP> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-07-21 08:30 . 2008-07-21 08:35 <REP> d-------- C:\ProgramData\Spybot - Search & Destroy
2008-07-21 08:30 . 2008-07-21 08:30 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
2008-07-20 18:42 . 2008-07-20 10:05 98,304 --a------ C:\Windows\agpqlrfm.exe
2008-07-20 18:40 . 2008-07-20 18:40 17,920 --a------ C:\Windows\System32\toolbarsch.dll
2008-07-20 08:34 . 2008-07-20 08:34 <REP> d-------- C:\Windows\PCHEALTH
2008-07-20 08:21 . 2008-07-20 08:21 <REP> d-------- C:\Program Files\MSXML 4.0
2008-07-20 08:12 . 2008-07-20 08:12 <REP> d-------- C:\PerfLogs
2008-07-19 19:56 . 2008-01-19 09:33 8,139,264 --a------ C:\Windows\System32\ssBranded.scr
2008-07-19 19:55 . 2008-01-19 09:34 6,103,040 --a------ C:\Windows\System32\chtbrkr.dll
2008-07-19 19:54 . 2008-01-19 08:06 8,147,456 --a------ C:\Windows\System32\wmploc.DLL
2008-07-19 19:53 . 2008-01-19 09:36 704,512 --a------ C:\Windows\System32\SmiEngine.dll
2008-07-19 19:53 . 2008-01-19 09:36 357,888 --a------ C:\Windows\System32\wbemcomn.dll
2008-07-19 19:53 . 2008-01-19 09:34 305,152 --a------ C:\Windows\System32\msdelta.dll
2008-07-19 19:53 . 2008-01-19 09:34 258,560 --a------ C:\Windows\System32\dpx.dll
2008-07-19 19:53 . 2008-01-19 09:34 246,784 --a------ C:\Windows\System32\drvstore.dll
2008-07-19 19:53 . 2008-01-19 09:36 218,624 --a------ C:\Windows\System32\wdscore.dll
2008-07-19 19:53 . 2008-01-19 09:36 139,264 --a------ C:\Windows\System32\SmiInstaller.dll
2008-07-19 19:53 . 2008-01-19 09:33 130,560 --a------ C:\Windows\System32\PkgMgr.exe
2008-07-19 19:53 . 2008-01-19 09:35 35,328 --a------ C:\Windows\System32\mspatcha.dll
2008-07-19 19:44 . 2006-12-18 03:04 9,216 --a------ C:\unscrambler.exe
2008-07-19 19:33 . 2008-07-19 19:33 <REP> d-------- C:\Users\Anthony\AppData\Roaming\Nero
2008-07-19 19:30 . 2008-07-19 19:30 <REP> d-------- C:\Users\All Users\Nero
2008-07-19 19:30 . 2008-07-19 19:30 <REP> d-------- C:\ProgramData\Nero
2008-07-19 19:30 . 2008-07-19 19:30 <REP> d-------- C:\Program Files\Nero
2008-07-19 19:30 . 2008-07-19 19:31 <REP> d-------- C:\Program Files\Common Files\Nero
2008-07-18 20:57 . 2008-07-18 20:57 107,888 --a------ C:\Windows\System32\CmdLineExt.dll
2008-07-18 20:54 . 2008-07-18 20:54 <REP> d-------- C:\Users\All Users\Media Center Programs
2008-07-18 20:54 . 2008-07-18 20:54 <REP> d-------- C:\ProgramData\Media Center Programs
2008-07-18 20:54 . 2008-07-18 20:54 <REP> d-------- C:\Program Files\Common Files\BioWare
2008-07-18 20:39 . 2008-07-18 20:56 <REP> d-------- C:\Program Files\Mass Effect
2008-07-18 20:38 . 2008-07-18 20:38 <REP> d-------- C:\Program Files\DAEMON Tools Toolbar
2008-07-18 20:38 . 2008-07-18 20:38 <REP> d-------- C:\Program Files\DAEMON Tools Lite
2008-07-18 20:34 . 2008-07-18 20:34 <REP> d-------- C:\Users\Anthony\AppData\Roaming\Media Player Classic
2008-07-18 20:34 . 2008-07-18 20:34 <REP> d-------- C:\Program Files\ffdshow
2008-07-18 20:34 . 2008-06-28 12:57 6,602,240 --a------ C:\mplayerc.exe
2008-07-18 20:34 . 2008-06-22 20:33 60,273 --a------ C:\Windows\System32\pthreadGC2.dll
2008-07-18 20:34 . 2008-06-22 20:33 7,680 --a------ C:\Windows\System32\ff_vfw.dll
2008-07-18 20:34 . 2008-06-22 20:33 547 --a------ C:\Windows\System32\ff_vfw.dll.manifest
2008-07-18 18:40 . 2008-07-18 18:40 717,296 --a------ C:\Windows\System32\drivers\sptd.sys
2008-07-18 18:39 . 2008-07-18 18:39 <REP> d-------- C:\Users\Anthony\AppData\Roaming\DAEMON Tools
2008-07-17 21:02 . 2008-07-17 21:02 <REP> d-------- C:\Users\Anthony\AppData\Roaming\vlc
2008-07-17 20:59 . 2008-07-17 20:59 <REP> d--h----- C:\Users\All Users\CanonBJ
2008-07-17 20:59 . 2008-07-17 20:59 <REP> d--h----- C:\ProgramData\CanonBJ
2008-07-17 20:58 . 2007-05-21 22:00 215,040 --a------ C:\Windows\System32\CNMLM94.DLL
2008-07-17 20:56 . 2008-07-13 10:08 42,318,606 --a------ C:\dvdtech.amc
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Videos
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Searches
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Saved Games
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Pictures
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Music
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Links
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Downloads
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Documents
2008-07-17 14:19 . 2008-07-17 14:19 <REP> dr------- C:\Users\Christophe\Contacts
2008-07-17 14:19 . 2006-11-02 14:35 <REP> d-------- C:\Users\Christophe\AppData\Roaming\Media Center Programs
2008-07-17 14:19 . 2008-07-17 14:19 <REP> d--h----- C:\Users\Christophe\AppData
2008-07-17 14:19 . 2008-07-17 14:19 <REP> d-------- C:\Users\Christophe
2008-07-16 21:59 . 2008-07-16 21:59 988,216 --a------ C:\Windows\System32\winload.exe
2008-07-16 21:59 . 2008-07-16 21:59 927,288 --a------ C:\Windows\System32\winresume.exe
2008-07-16 21:59 . 2008-07-16 21:59 615,992 --a------ C:\Windows\System32\ci.dll
2008-07-16 21:59 . 2008-07-16 21:59 378,368 --a------ C:\Windows\System32\srcore.dll
2008-07-16 21:59 . 2008-07-16 21:59 318,464 --a------ C:\Windows\System32\rstrui.exe
2008-07-16 21:59 . 2008-07-16 21:59 46,592 --a------ C:\Windows\System32\setbcdlocale.dll
2008-07-16 21:59 . 2008-07-16 21:59 40,960 --a------ C:\Windows\System32\srclient.dll
2008-07-16 21:59 . 2008-07-16 21:59 19,000 --a------ C:\Windows\System32\kd1394.dll
2008-07-16 21:59 . 2008-07-16 21:59 14,848 --a------ C:\Windows\System32\srdelayed.exe
2008-07-16 21:59 . 2008-07-16 21:59 6,656 --a------ C:\Windows\System32\kbd106n.dll
2008-07-16 21:51 . 2008-07-16 21:51 <REP> d-------- C:\Program Files\Microsoft Silverlight
2008-07-16 21:48 . 2008-07-20 08:19 <REP> d-------- C:\Users\All Users\NVIDIA
2008-07-16 21:48 . 2008-07-20 08:19 <REP> d-------- C:\ProgramData\NVIDIA
2008-07-16 21:20 . 2008-07-21 13:55 <REP> d-------- C:\Users\Anthony\AppData\Roaming\GrabIt
2008-07-16 21:04 . 2008-07-20 08:33 <REP> d-------- C:\Users\All Users\WLInstaller
2008-07-16 21:04 . 2008-07-20 08:33 <REP> d-------- C:\ProgramData\WLInstaller
2008-07-16 21:04 . 2008-07-20 08:34 <REP> d-------- C:\Program Files\Windows Live
2008-07-16 21:04 . 2008-07-16 21:32 <REP> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-07-16 21:04 . 2008-07-16 21:04 1,820 --a------ C:\Windows\System32\rasctrnm.h
2008-07-16 21:03 . 2008-07-16 20:08 <REP> d-------- C:\Windows\Panther
2008-07-16 21:03 . 2008-07-20 08:18 <REP> d--hs---- C:\Boot
2008-07-16 21:03 . 2008-01-19 09:45 333,203 -rahs---- C:\bootmgr
2008-07-16 21:03 . 2008-07-16 21:03 8,192 -ra-s---- C:\BOOTSECT.BAK
2008-07-16 20:55 . 2008-01-19 09:34 15,872 --a------ C:\Windows\System32\hcrstco.dll
2008-07-16 20:55 . 2006-11-02 11:46 8,704 --a------ C:\Windows\System32\hccoin.dll
2008-07-16 20:51 . 2008-07-16 20:51 2,032,128 --a------ C:\Windows\System32\win32k.sys
2008-07-16 20:51 . 2008-07-16 20:51 295,936 --a------ C:\Windows\System32\gdi32.dll
2008-07-16 20:48 . 2008-07-16 20:48 678,408 --a------ C:\Windows\System32\gpprefcl.dll
2008-07-16 20:48 . 2008-07-16 20:48 113,664 --a------ C:\Windows\System32\drivers\rmcast.sys
2008-07-16 20:48 . 2008-07-16 20:48 14,848 --a------ C:\Windows\System32\wshrm.dll
2008-07-16 20:48 . 2007-11-17 23:22 3,636 --a------ C:\Windows\System32\drivers\nvphy.bin
2008-07-16 20:47 . 2008-07-16 20:47 4,240,384 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-07-16 20:47 . 2008-07-16 20:47 1,695,744 --a------ C:\Windows\System32\gameux.dll
2008-07-16 20:43 . 2008-07-16 20:43 1,383,424 --a------ C:\Windows\System32\mshtml.tlb
2008-07-16 20:43 . 2008-07-16 20:43 826,880 --a------ C:\Windows\System32\wininet.dll
2008-07-16 20:37 . 2008-04-17 02:36 171,136 -rahs---- C:\grldr
2008-07-16 20:36 . 2008-07-16 20:36 <REP> d-------- C:\Program Files\Alwil Software
2008-07-16 20:25 . 2008-07-16 20:25 <REP> d-------- C:\Program Files\VideoLAN
2008-07-16 20:24 . 2008-07-16 20:24 <REP> d-------- C:\Users\Anthony\AppData\Roaming\Thunderbird
2008-07-16 20:24 . 2008-07-16 20:24 <REP> d-------- C:\Program Files\Mozilla Thunderbird
2008-07-16 20:24 . 2008-07-16 20:24 0 --a------ C:\Windows\nsreg.dat
2008-07-16 20:23 . 2008-07-16 20:23 <REP> d-------- C:\Users\All Users\Apple Computer
2008-07-16 20:23 . 2008-07-16 20:23 <REP> d-------- C:\ProgramData\Apple Computer
2008-07-16 20:23 . 2008-07-16 20:23 <REP> d-------- C:\Program Files\QuickTime
2008-07-16 20:22 . 2008-07-16 20:22 <REP> d-------- C:\Windows\System32\Macromed
2008-07-16 20:22 . 2008-07-21 10:34 <REP> d--hs---- C:\Windows\Installer
2008-07-16 20:22 . 2008-07-16 20:22 <REP> d-------- C:\Users\All Users\Apple
2008-07-16 20:22 . 2008-07-16 20:22 <REP> d-------- C:\ProgramData\Apple
2008-07-16 20:22 . 2008-07-16 20:22 <REP> d-------- C:\Program Files\QuickPar
2008-07-16 20:22 . 2008-07-16 20:22 <REP> d-------- C:\Program Files\Apple Software Update
2008-07-16 20:21 . 2008-07-16 20:21 <REP> d-------- C:\Program Files\priyatna.org
2008-07-16 20:21 . 2008-07-16 20:21 <REP> d-------- C:\Program Files\GrabIt
2008-07-16 20:21 . 2008-07-16 20:21 <REP> d-------- C:\Program Files\Ant Movie Catalog
2008-07-16 20:13 . 2008-07-16 20:13 <REP> dr------- C:\Users\Anthony\Videos
2008-07-16 20:13 . 2008-07-16 20:13 <REP> dr------- C:\Users\Anthony\Searches
2008-07-16 20:13 . 2008-07-16 20:13 <REP> dr------- C:\Users\Anthony\Saved Games
2008-07-16 20:13 . 2008-07-16 20:13 <REP> dr------- C:\Users\Anthony\Pictures
2008-07-16 20:13 . 2008-07-16 20:13 <REP> dr------- C:\Users\Anthony\Music
2008-07-16 20:13 . 2008-07-16 20:13 <REP> dr------- C:\Users\Anthony\Links
2008-07-16 20:13 . 2008-07-21 21:01 <REP> dr------- C:\Users\Anthony\Downloads

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-20 06:18 174 --sha-w C:\Program Files\desktop.ini
2008-07-20 06:13 --------- d-----w C:\Program Files\Windows Sidebar
2008-07-20 06:13 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-07-20 06:13 --------- d-----w C:\Program Files\Windows Mail
2008-07-20 06:13 --------- d-----w C:\Program Files\Windows Journal
2008-07-20 06:13 --------- d-----w C:\Program Files\Windows Defender
2008-07-20 06:13 --------- d-----w C:\Program Files\Windows Collaboration
2008-07-20 06:13 --------- d-----w C:\Program Files\Windows Calendar
2008-07-16 18:47 540,672 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-07-16 18:47 458,752 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-07-16 18:47 2,560 ----a-w C:\Windows\AppPatch\AcRes.dll
2008-07-16 18:47 2,153,984 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-07-16 18:47 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-07-16 18:11 --------- d-sh--w C:\ProgramData\Modèles
2008-07-16 18:11 --------- d-sh--w C:\ProgramData\Menu Démarrer
2008-07-16 18:11 --------- d-sh--w C:\ProgramData\Favoris
2008-07-16 18:11 --------- d-sh--w C:\ProgramData\Bureau
2008-07-16 18:11 --------- d-sh--w C:\Program Files\Fichiers communs
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{32099AAC-C132-4136-9E9A-4E364A424E17}"= "C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll" [2008-07-08 17:59 683464]

[HKEY_CLASSES_ROOT\clsid\{32099aac-c132-4136-9e9a-4e364a424e17}]
[HKEY_CLASSES_ROOT\DTToolbar.ToolBandObj.1]
[HKEY_CLASSES_ROOT\TypeLib\{3E288F79-03E4-4983-A48E-0D879B51FF19}]
[HKEY_CLASSES_ROOT\DTToolbar.ToolBandObj]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{32099AAC-C132-4136-9E9A-4E364A424E17}"= "C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll" [2008-07-08 17:59 683464]

[HKEY_CLASSES_ROOT\clsid\{32099aac-c132-4136-9e9a-4e364a424e17}]
[HKEY_CLASSES_ROOT\DTToolbar.ToolBandObj.1]
[HKEY_CLASSES_ROOT\TypeLib\{3E288F79-03E4-4983-A48E-0D879B51FF19}]
[HKEY_CLASSES_ROOT\DTToolbar.ToolBandObj]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-19 09:33 1233920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-12 05:28 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-12 05:28 8497696]
"IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\ipoint.exe" [2007-08-31 12:01 1037736]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2007-09-20 15:35 202024 C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-07-04 17:01 486856 C:\Program Files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a------ 2007-09-20 09:51 1836328 C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 15:57 153136 C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
--a------ 2007-09-12 05:28 81920 C:\Windows\System32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-05-27 10:50 413696 C:\Program Files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs---- 2008-07-07 09:42 2156368 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
--a------ 2008-01-19 09:38 1008184 C:\Program Files\Windows Defender\MSASCui.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{557ED3C6-3E19-4174-8254-DBB7428C3B52}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R1 aswSP;avast! Self Protection;C:\Windows\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\Windows\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2008-05-16 01:18]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-07-07 09:42]
R3 RecFltr;Reclusa Keyboard;C:\Windows\system32\Drivers\RecFltr.sys [2007-01-18 09:21]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{87f940e3-54f8-11dd-96bc-001a92490c90}]
\shell\AutoRun\command - G:\autorun.exe -auto
.
- - - - ORPHANS REMOVED - - - -

Toolbar-{D8FFA8AE-BBE8-4D3F-A249-64B2D03EEB25} - C:\Windows\qndsfmao.dll
Toolbar-{3FCAEB7D-F8AE-4A67-AE6C-57EE1416BB6D} - C:\Windows\qndsfmao.dll
HKLM-Run-MSServer - C:\Windows\system32\mlJAtTmK.dll
HKLM-Run-3a8d7a44 - C:\Windows\system32\gdwdyloy.dll
ShellExecuteHooks-{3AA6678D-1CE0-499E-B9F6-8444DEE39D88} - C:\Windows\system32\mlJAtTmK.dll
SSODL-kvxqmtre-{80079911-9621-4D08-A6C7-B4EC514BA9F8} - C:\Windows\kvxqmtre.dll
SSODL-evgratsm-{9C5BEE5A-3DC8-4829-B345-E8A831EFBF35} - C:\Windows\evgratsm.dll
MSConfigStartUp-3a8d7a44 - C:\Windows\system32\oafoxmfa.dll
MSConfigStartUp-Antivirus - C:\Program Files\VAV\vav.exe
MSConfigStartUp-MSServer - C:\Windows\system32\mlJCVpNG.dll
MSConfigStartUp-Sys6E67 - C:\Windows\Sys6E67.exe
MSConfigStartUp-Sys6EC4 - C:\Windows\Sys6EC4.exe
MSConfigStartUp-Sys6EF3 - C:\Windows\Sys6EF3.exe


**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-21 21:11:57
Windows 6.0.6001 Service Pack 1 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...


C:\Windows\TEMP\_avast4_\unp117738013.tmp 1310720 bytes executable

Scan termin‚ avec succŠs
Les fichiers cach‚s: 1

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Windows\System32\audiodg.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\System32\conime.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Windows\System32\dllhost.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-07-21 21:14:18 - machine was rebooted
ComboFix-quarantined-files.txt 2008-07-21 19:14:13

Pre-Run: 152,636,534,784 octets libres
Post-Run: 152,300,572,672 octets libres

287 --- E O F --- 2008-07-21 06:19:17

voici le rapport

SmitFraudFix v2.330

Scan done at 8:07:01,42, 22/07/2008
Run from C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Anthony


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Anthony\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Anthony\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: NVIDIA nForce Networking Controller
DNS Server Search Order: 212.27.54.252
DNS Server Search Order: 212.27.53.252

HKLM\SYSTEM\CCS\Services\Tcpip\..\{A7F9F11A-C7E9-4E29-B731-425F7395F6BC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\..\{A7F9F11A-C7E9-4E29-B731-425F7395F6BC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\..\{A7F9F11A-C7E9-4E29-B731-425F7395F6BC}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End