HJT Log - PC infecté par Vundo

Salut tout le monde,
Je travaille sur un ordinateur portable infecté mal pour une femme et ont obtenu le plus de ce nettoyage, mais il ya encore environ 5 ou si les cas de vundo encore être constaté que je ne peut pas se débarrasser. J'utilise Spybot, Malwarebytes, et SUPERAntiSpyware (Oui, tous sont à jour). Voici le log HJT

Le système est XP Home.
Merci pour l'aide

Logfile de Trend Micro HijackThis v2.0.2
Scan sauvé à 6:14:36 AM, le 1.22.2009
Plate-forme: Windows XP SP2 (WinNT 5.01. 2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ Explorer.EXE
C: \ WINDOWS \ System32 \ wltrysvc.exe
C: \ WINDOWS \ System32 \ bcmwltry.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ PROGRA ~ 1 \ Common ~ 1 \ AOL \ ACS \ AOLacsd. exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ Program Files \ Dell \ NICCONFIGSVC \ NICCONFIGSVC.exe
C: \ WINDOWS \ system32 \ HPZipm12.exe
C: \ Program Files \ Dell Support Center \ bin \ sprtsvc.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe
C: \ WINDOWS \ system32 \ hkcmd.exe
C: \ WINDOWS \ system32 \ igfxpers.exe
C: \ Program Files \ Java \ j2re1.4. 2_03 \ bin \ jusched.exe
C: \ WINDOWS \ stsystra.exe
C: \ WINDOWS \ system32 \ WLTRAY.exe
C: \ Program Files \ Dell \ QuickSet \ quickset.exe
C: \ WINDOWS \ system32 \ igfxsrvc.exe
C: \ Program Files \ CyberLink \ PowerDVD \ DVDLauncher.exe
C: \ Program Files \ Musicmatch \ Musicmatch Jukebox \ mm_tray.exe
C: \ Program Files \ Musicmatch \ Musicmatch Jukebox \ mmtask.exe
C: \ WINDOWS \ system32 \ dla \ tfswctrl.exe
C: \ Program Files \ Dell \ Media Experience \ DMXLauncher.exe
C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2. exe
C: \ WINDOWS \ system32 \ NvCCpl.exe
C: \ Program Files \ eFax Messenger 4.3 \ J2GDllCmd.exe
C: \ DOCUME ~ 1 \ Admini ~ 1 \ LOCALS ~ 1 \ Temp \ 200912162810_mcinfo.exe
C: \ Program Files \ NetWaiting \ netWaiting.exe
C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
E: \ HijackThis. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = https://ex.susd.org/exchweb/bin/auth/ow ... /&reason=0
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.dell4me.com/myway
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = *. local
O2 - BHO: (no name) - (4D25F921-B9FE-4682-BF72-8AB8210D6D75) - (no file)
O2 - BHO: (no name) - (65f11ab3-966d-40cc-a4c3-31c0f304d798) - C: \ WINDOWS \ system32 \ weyozose.dll (file missing)
O4 - HKLM \ .. \ Run: [SynTPEnh] C: \ Program Files \ Synaptics \ SynTP \ SynTPEnh.exe
O4 - HKLM \ .. \ Run: [igfxtray] C: \ WINDOWS \ system32 \ igfxtray.exe
O4 - HKLM \ .. \ Run: [igfxhkcmd] C: \ WINDOWS \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [igfxpers] C: \ WINDOWS \ system32 \ igfxpers.exe
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] C: \ Program Files \ Java \ j2re1.4.2_03 \ bin \ jusched.exe
O4 - HKLM \ .. \ Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM \ .. \ Run: [Dell Wireless Manager UI] C: \ WINDOWS \ system32 \ WLTRAY
O4 - HKLM \ .. \ Run: [Dell QuickSet] C: \ Program Files \ Dell \ QuickSet \ quickset.exe
O4 - HKLM \ .. \ Run: [DVDLauncher] "C: \ Program Files \ CyberLink \ PowerDVD \ DVDLauncher.exe"
O4 - HKLM \ .. \ Run: [MMTray] C: \ Program Files \ Musicmatch \ Musicmatch Jukebox \ mm_tray.exe
O4 - HKLM \ .. \ Run: [mmtask] C: \ Program Files \ Musicmatch \ Musicmatch Jukebox \ mmtask.exe
O4 - HKLM \ .. \ Run: [dla] C: \ WINDOWS \ system32 \ dla \ tfswctrl.exe
O4 - HKLM \ .. \ Run: [DMXLauncher] C: \ Program Files \ Dell \ Media Experience \ DMXLauncher.exe
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ HP \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [NvCCpl] C: \ WINDOWS \ system32 \ NvCCpl.exe
O4 - HKLM \ .. \ Run: [eFax 4.3] "C: \ Program Files \ eFax Messenger 4.3 \ J2GDllCmd.exe" / R
O4 - HKLM \ .. \ Run: [dscactivate] "C: \ Program Files \ Dell Support Center \ gs_agent \ custom \ dsca.exe"
O4 - HKLM \ .. \ Run: [msci] C: \ DOCUME ~ 1 \ Admini ~ 1 \ LOCALS ~ 1 \ Temp \ 200912162810_mcinfo.exe / insfin
O4 - HKLM \ .. \ Run: [larepemijo] Rundll32.exe "C: \ WINDOWS \ system32 \ vetobibu.dll", s
O4 - HKCU \ .. \ Run: [ModemOnHold] C: \ Program Files \ NetWaiting \ netWaiting.exe
O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [larepemijo] Rundll32.exe "C: \ WINDOWS \ system32 \ vetobibu.dll", s (User LOCAL SERVICE)
O4 - HKUS \ S-1-5-20 \ .. \ Run: [larepemijo] Rundll32.exe "C: \ WINDOWS \ system32 \ vetobibu.dll", s (User service réseau)
O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office10 \ Osa.exe
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 4 \ Office10 \ EXCEL. EXE/3000
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ j2re1.4.2_03 \ bin \ npjpi142_03.dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ j2re1.4.2_03 \ bin \ npjpi142_03.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 4 \ OFFICE11 \ REFIEBAR.DLL
O9 - Extra button: Real. com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C: \ WINDOWS \ system32 \ Shdocvw.dll
O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O18 - Filter hijack: text / html - (13823a1c-399d-4e10-8381-f8f4bf790784) - C: \ WINDOWS \ system32 \ mst122.dll
O20 - AppInit_DLLs: fsoggc. dll, C: \ WINDOWS \ system32 \ gadapobo.dll
O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc - C: \ PROGRA ~ 1 \ Common ~ 1 \ AOL \ ACS \ AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder. exe
O23 - Service: DSBrokerService - Unknown owner - C: \ Program Files \ DellSupport \ brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Fichiers communs \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: NICCONFIGSVC - Dell Inc - C: \ Program Files \ Dell \ NICCONFIGSVC \ NICCONFIGSVC. exe
O23 - Service: pml Driver HPZ12 - HP - C: \ WINDOWS \ system32 \ HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc - C: \ Program Files \ Dell Support Center \ bin \ sprtsvc.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C: \ WINDOWS \ System32 \ wltrysvc.exe

--
Fin de la file - 6764 bytes

O2 - BHO: (no name) - (4D25F921-B9FE-4682-BF72-8AB8210D6D75) - (no file)

O2 - BHO: (no name) - (65f11ab3-966d-40cc-a4c3-31c0f304d798) - C: \ WINDOWS \ system32 \ weyozose.dll (file missing)

O4 - HKLM \ .. \ Run: [larepemijo] Rundll32.exe "C: \ WINDOWS \ system32 \ vetobibu.dll", s

O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ j2re1.4.2_03 \ bin \ npjpi142_03. dll

O18 - Filter hijack: text / html - (13823a1c-399d-4e10-8381-f8f4bf790784) - C: \ WINDOWS \ system32 \ mst122.dll

O20 - AppInit_DLLs: fsoggc.dll, C: \ WINDOWS \ system32 \ gadapobo.dll