Hello,

thanks for all your answers.

Well, i dont have any P2P installed or IRC.
I just install my system recently and i don’t use it. I just put avast first and it find this trojan on the msconfg.exe file. (that’s the real name, no error in it)

I rename and move it. So the the msconfg.exe in c:/windows/system32 folder seem to be clean but the renamed file in the avast/moved folder is still infected.
Avast detect it but don’t clean it.

I have the last database installed.

This the hijackthis-log report for my computer :
(I don’t really know to use hijackthis in fact)

Logfile of HijackThis v1.98.0
Scan saved at 08:40:58, on 05/08/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
C:\WINDOWS\System32\wuamgrd.exe
C:\WINDOWS\System32\ati2vid.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\hijackthis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat Reader\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
O4 - HKLM..\Run: [spoolsv.exe] wuamgrd.exe
O4 - HKLM..\Run: [ATI VIDEO REGKEY] ati2vid.exe
O4 - HKLM..\RunServices: [Windows Service Pack2] svchhost.exe
O4 - HKLM..\RunServices: [spoolsv.exe] wuamgrd.exe
O4 - HKLM..\RunServices: [ATI VIDEO REGKEY] ati2vid.exe
O4 - HKCU..\Run: [MSMSGS] “C:\Program Files\Messenger\MSMSGS.EXE” /background
O4 - HKCU..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU..\Run: [ATI VIDEO REGKEY] ati2vid.exe
O4 - HKCU..\Run: [spoolsv.exe] wuamgrd.exe

Thank you for great help
Yerom