Infection par backdoor ?

Tout semble être revenu à la normale. Est-ce maintenant que je dois dire merci ? Voila le log :

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2797
Windows 6.0.6002 Service Pack 2

14/09/2009 23:54:13
mbam-log-2009-09-14 (23-54-13).txt

Type de recherche: Examen rapide
Eléments examinés: 87639
Temps écoulé: 5 minute(s), 33 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 8

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Windows\System32\kbiwkmlqrdhsfa.dll (Rootkit.TDSS) -> Delete on reboot.
C:\Windows\System32\kbiwkmmqrclgmq.dll (Rootkit.TDSS) -> Delete on reboot.
C:\Windows\System32\drivers\kbiwkmewvoybsi.sys (Rootkit.TDSS) -> Delete on reboot.
C:\Windows\System32\drivers\kbiwkmpqpewyjk.sys (Rootkit.TDSS) -> Delete on reboot.
C:\Windows\System32\kbiwkmdfbauqlw.dat (Rootkit.TDSS) -> Delete on reboot.
C:\Windows\System32\kbiwkmirpespcx.dll (Rootkit.TDSS) -> Delete on reboot.
C:\Windows\System32\kbiwkmpyejtcdr.dat (Rootkit.TDSS) -> Delete on reboot.
C:\Windows\System32\kbiwkmwibfvcqp.dll (Rootkit.TDSS) -> Delete on reboot.

Voila mon nouveau rapport après une nouvelle série de 10 000 clics !! Faut vraiment virer cette saloperie !!
Merci de m'aider

ComboFix 09-09-14.02 - Fred 14/09/2009 23:08.2.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.2162 [GMT 2:00]
Lancé depuis: c:\users\Fred\Desktop\ComboFix.exe
Commutateurs utilisés :: c:\users\Fred\Desktop\CFScript.txt
AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
AV: Trend Micro Internet Security *On-access scanning disabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
SP: McAfee VirusScan *disabled* (Updated) {C78B3C70-4777-4742-BB91-9D615CC575E6}
SP: Trend Micro Internet Security *disabled* (Updated) {003DD9A8-02A6-43CF-81BA-5D403CAD001E}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\windows\DCEBoot.exe"
.

Overlay interrompu ... Veuillez exécuter ComboFix une nouvelle fois
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\DAEMON Tools Toolbar
c:\windows\DCEBoot.exe
c:\windows\system32\drivers\kbiwkmewvoybsi.sys
c:\windows\system32\drivers\kbiwkmpqpewyjk.sys

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_AeLookupSvcAESTFilters
-------\Service_kbiwkmbmqgwbti
-------\Service_kbiwkmxrxsppbt

((((((((((((((((((((((((((((( Fichiers créés du 2009-08-14 au 2009-09-14 ))))))))))))))))))))))))))))))))))))
.

2009-09-14 21:25 . 2009-09-14 21:25 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-09-14 21:25 . 2009-09-14 21:25 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-02 19:56 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-02 19:56 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-08-29 23:36 . 2009-08-29 23:36 -------- d-----w- c:\users\Fred\AppData\Roaming\FileMaker
2009-08-29 10:19 . 2009-06-22 10:09 2048 ----a-w- c:\windows\system32\tzres.dll
2009-08-26 22:08 . 2009-08-26 22:08 -------- d-----w- c:\program files\Canal+

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-14 21:26 . 2008-06-13 22:56 12 ----a-w- c:\windows\bthservsdp.dat
2009-09-13 22:53 . 2009-04-21 15:09 -------- d-----w- c:\users\Fred\AppData\Roaming\uTorrent
2009-09-13 22:52 . 2008-06-27 17:33 -------- d-----w- c:\users\Fred\AppData\Roaming\vlc
2009-09-13 22:35 . 2008-11-07 20:25 -------- d-----w- c:\users\Fred\AppData\Roaming\dvdcss
2009-09-12 17:14 . 2008-07-02 20:46 -------- d-----w- c:\program files\eMule
2009-09-12 12:58 . 2006-11-02 15:48 672322 ----a-w- c:\windows\system32\perfh00C.dat
2009-09-12 12:58 . 2006-11-02 15:48 124434 ----a-w- c:\windows\system32\perfc00C.dat
2009-09-09 19:06 . 2008-09-11 15:49 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-09 17:21 . 2008-07-04 20:48 -------- d-----w- c:\users\Fred\AppData\Roaming\FileZilla
2009-09-09 15:43 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-06 19:54 . 2009-07-29 20:41 -------- d-----w- c:\program files\Glary Utilities
2009-09-05 21:47 . 2008-07-05 21:30 -------- d-----w- c:\program files\Mp3tag
2009-09-05 15:45 . 2009-01-08 12:44 -------- d-----w- c:\users\Fred\AppData\Roaming\gtk-2.0
2009-09-02 20:59 . 2008-11-01 22:07 -------- d-----w- c:\program files\FileZilla FTP Client
2009-09-01 23:17 . 2008-10-28 16:16 -------- d-----w- c:\program files\Pingus
2009-08-26 22:09 . 2009-03-05 22:09 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-08-18 19:43 . 2009-07-18 12:00 -------- d-----w- c:\program files\Free Music Zilla
2009-08-14 16:27 . 2009-09-09 15:41 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-08-14 15:53 . 2009-09-09 15:41 17920 ----a-w- c:\windows\system32\netevent.dll
2009-08-14 13:49 . 2009-09-09 15:41 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-08-14 13:49 . 2009-09-09 15:41 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-08-14 13:49 . 2009-09-09 15:41 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-08-14 13:49 . 2009-09-09 15:41 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-08-14 13:49 . 2009-09-09 15:41 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-08-14 13:49 . 2009-09-09 15:41 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-08-14 13:49 . 2009-09-09 15:41 10240 ----a-w- c:\windows\system32\finger.exe
2009-08-14 13:48 . 2009-09-09 15:41 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-08-14 13:48 . 2009-09-09 15:41 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-08-10 12:49 . 2008-06-29 12:17 -------- d-----w- c:\program files\Diablo II
2009-08-03 20:59 . 2009-07-16 22:34 -------- d-----w- c:\program files\Mindscape
2009-07-31 22:07 . 2008-06-29 14:50 -------- d-----w- c:\users\Fred\AppData\Roaming\XnView
2009-07-31 20:21 . 2008-07-10 20:39 -------- d-----w- c:\program files\CDBurnerXP
2009-07-29 23:46 . 2008-06-29 14:49 -------- d-----w- c:\program files\XnView
2009-07-29 22:02 . 2009-07-29 21:53 -------- d-----w- c:\users\Fred\AppData\Roaming\DAEMON Tools Lite
2009-07-29 22:02 . 2008-07-10 21:04 -------- d-----w- c:\users\Fred\AppData\Roaming\DAEMON Tools
2009-07-29 22:00 . 2008-07-10 21:09 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-07-29 21:53 . 2009-07-29 21:53 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-07-29 20:54 . 2008-06-28 16:15 -------- d-----w- c:\program files\EasyPHP1-8
2009-07-29 20:49 . 2009-07-29 20:47 -------- d-----w- c:\users\Fred\AppData\Roaming\GlarySoft
2009-07-29 19:59 . 2009-07-29 19:59 -------- d-----w- c:\users\Fred\AppData\Roaming\TuneUp Software
2009-07-29 19:37 . 2008-07-05 15:13 -------- d-----w- c:\users\Fred\AppData\Roaming\Skype
2009-07-29 19:32 . 2009-07-29 19:32 -------- d-----w- c:\program files\Common Files\Skype
2009-07-29 19:32 . 2008-07-05 15:12 -------- d-----r- c:\program files\Skype
2009-07-29 19:31 . 2008-11-01 18:04 -------- d-----w- c:\documents and settings\ReleaseEngineer.MACROVISION\Application Data\skypePM
2009-07-28 10:23 . 2009-07-28 10:23 -------- d-----w- c:\program files\PicLensIE
2009-07-28 10:21 . 2009-07-28 10:21 2119680 ----a-w- c:\users\Fred\AppData\Local\cooliris-win-ie-release-1.11.2.27471.en-US.msi
2009-07-24 08:42 . 2008-06-13 23:07 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-21 21:52 . 2009-07-29 17:28 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-07-29 17:28 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-07-29 17:28 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-07-29 17:28 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-18 23:33 . 2009-07-18 11:49 -------- d-----w- c:\program files\NOS
2009-07-18 23:23 . 2009-07-18 23:23 -------- d-----w- c:\program files\SiSoftware
2009-07-18 12:00 . 2009-07-18 12:00 -------- d-----w- c:\users\Fred\AppData\Roaming\FMZilla
2009-07-17 13:54 . 2009-08-15 08:41 71680 ----a-w- c:\windows\system32\atl.dll
2009-07-15 12:40 . 2009-08-15 08:40 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-07-15 12:39 . 2009-08-15 08:40 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-15 12:39 . 2009-08-15 08:40 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-07-15 12:39 . 2009-08-15 08:40 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-07-11 19:01 . 2009-09-09 15:41 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-07-11 19:01 . 2009-09-09 15:41 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-07-11 19:01 . 2009-09-09 15:41 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-07-11 19:01 . 2009-09-09 15:41 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-07-11 17:03 . 2009-09-09 15:41 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-07-10 07:13 . 2009-07-08 14:36 5 ----a-w- c:\windows\sbacknt.bin
2009-07-08 14:36 . 2009-07-08 14:36 152904 ----a-w- c:\windows\system32\vghd.scr
2003-07-12 17:45 . 2009-07-29 23:19 274432 ----a-w- c:\program files\ClonyXXL.exe
2003-03-21 11:45 . 2008-07-05 22:30 250544 ----a-w- c:\program files\Common Files\keyhelp.ocx
2008-06-13 23:13 . 2008-06-13 23:13 74 --sh--r- c:\windows\CT4CET.bin
2008-06-29 13:37 . 2008-06-29 13:37 0 --sh--w- c:\windows\S0684C7BB.tmp
2006-05-03 10:06 . 2009-04-18 22:35 163328 --sh--r- c:\windows\System32\flvDX.dll
2007-02-21 11:47 . 2009-04-18 22:35 31232 --sh--r- c:\windows\System32\msfDX.dll
2008-03-16 13:30 . 2009-04-18 22:35 216064 --sh--r- c:\windows\System32\nbDX.dll
2008-06-14 06:43 . 2008-06-14 06:31 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot@2009-09-14_20.27.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-06-13 23:06 . 2009-09-14 21:29 53720 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-06-25 14:29 . 2009-09-14 21:29 14174 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-389032179-406327077-2009890558-1000_UserData.bin
+ 2008-06-25 14:25 . 2009-09-14 21:27 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-06-25 14:25 . 2009-09-14 20:25 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-06-25 14:25 . 2009-09-14 21:27 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-06-25 14:25 . 2009-09-14 20:25 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-06-25 14:25 . 2009-09-14 20:25 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-06-25 14:25 . 2009-09-14 21:27 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-04-30 23:09 . 2009-09-14 20:25 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-04-30 23:09 . 2009-09-14 21:00 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-09-14 21:27 . 2009-09-14 21:27 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-09-14 20:25 . 2009-09-14 20:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2009-09-14 21:27 . 2009-09-14 21:27 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-09-14 20:25 . 2009-09-14 20:25 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2006-11-02 13:05 . 2009-09-14 21:29 122634 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"OE"="c:\program files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe" [2008-03-07 492808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-09-24 159744]
"OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-12-03 36864]
"UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2008-07-29 1398024]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-06-09 13543968]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2008-06-09 96800]
"dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-06-13 23:24 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ c:\windows\DCEBoot.exe\0autocheck autochk *

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
backup=c:\windows\pss\BTTray.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Digital Line Detect.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
backup=c:\windows\pss\Digital Line Detect.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
backup=c:\windows\pss\Logitech SetPoint.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickSet.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\QuickSet.lnk
backup=c:\windows\pss\QuickSet.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^Fred^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GigaTribe.lnk]
path=c:\users\Fred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GigaTribe.lnk
backup=c:\windows\pss\GigaTribe.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"SigmatelSysTrayApp"=%ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):38,3e,c2,b5,59,e1,c9,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-389032179-406327077-2009890558-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{7AE42A76-D463-4104-B0A5-109033E96B5E}"= c:\program files\Dell\MediaDirect\MediaDirect.exe:Dell MediaDirect
"{6E6D3E31-D64B-43EC-AF28-7F8867FF9F35}"= c:\program files\Dell\MediaDirect\PCMService.exe:CyberLink PowerCinema Resident Program
"{C269694F-5713-4D27-B6C2-1B3A117710EE}"= c:\program files\Dell\MediaDirect\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine
"{5F156217-5CB0-43A0-863D-8226CC953DD9}"= c:\program files\Dell\MediaDirect\Kernel\DMS\CLMSService.exe:CyberLink Media Server
"{53AAD680-BC05-4AF5-B532-B3D3CA74C242}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{E4F9DDEA-E1A4-4F68-B4DD-7D888D7C1701}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{CBA59B29-23FB-4E22-828D-099CEE8E1D9F}"= UDP:g:\liberkey\Apps\uTorrent\App\uTorrent\utorrent.exe:µTorrent (TCP-In)
"{58D8EFA8-35F5-4723-A6D0-0688F16A6492}"= TCP:g:\liberkey\Apps\uTorrent\App\uTorrent\utorrent.exe:µTorrent (UDP-In)
"{57633013-FE35-4698-85B7-6BB9DDE362D2}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp
"{F5C7BF10-A3D7-4D81-8085-02D4503DBCA2}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp
"{96F921FB-1148-4C25-87DB-168B4D5CA4AB}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{FAECC3B1-20CD-45A0-B431-FBB4E722F9B4}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
"TCP Query User{9126D559-667B-4EA0-B45E-EC7D9C7781E2}c:\\program files\\free music zilla\\fmzilla.exe"= UDP:c:\program files\free music zilla\fmzilla.exe:FMZilla Module
"UDP Query User{A18B7E72-D93C-4D17-B2A1-0525006DFA37}c:\\program files\\free music zilla\\fmzilla.exe"= TCP:c:\program files\free music zilla\fmzilla.exe:FMZilla Module

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Program Files\\Free Music Zilla\\FMZilla.exe"= c:\program files\Free Music Zilla\FMZilla.exe:*:Enabled:FMZilla

R1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\System32\drivers\tmlwf.sys [07/03/2008 09:17 141840]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [19/07/2009 01:30 73728]
R2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [28/04/2009 17:33 188416]
R2 tmevtmgr;tmevtmgr;c:\windows\System32\drivers\tmevtmgr.sys [07/03/2008 09:17 52624]
R2 tmpreflt;tmpreflt;c:\windows\System32\drivers\tmpreflt.sys [15/07/2009 21:58 36368]
R2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\System32\drivers\tmwfp.sys [07/03/2008 09:17 234512]
R3 OEM02Dev;Creative Camera OEM002 Driver;c:\windows\System32\drivers\OEM02Dev.sys [14/06/2008 08:48 235648]
R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;c:\windows\System32\drivers\OEM02Vfx.sys [14/06/2008 08:48 7424]
R3 TmPfw;Trend Micro Personal Firewall;c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe [25/06/2008 23:52 488768]
R3 tmproxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [25/06/2008 23:52 648456]
S2 gupdate1c98709e678c660;Google Update Service (gupdate1c98709e678c660);c:\program files\Google\Update\GoogleUpdate.exe [04/02/2009 22:48 133104]
S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\System32\drivers\s115bus.sys [19/05/2009 23:57 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\System32\drivers\s115mdfl.sys [19/05/2009 23:57 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\System32\drivers\s115mdm.sys [19/05/2009 23:57 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s115mgmt.sys [19/05/2009 23:58 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\System32\drivers\s115obex.sys [19/05/2009 23:58 98568]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\RpcAgentSrv.exe [19/07/2009 01:23 98488]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-09-14 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-07-29 14:09]

2009-09-14 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-06-13 20:44]

2009-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 20:48]

2009-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 20:48]

2009-09-14 c:\windows\Tasks\SyncBack Sauvegarde Promethest.job
- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2008-06-29 10:00]

2009-09-14 c:\windows\Tasks\User_Feed_Synchronization-{FD5DF11A-81C9-490E-A2E9-050AF093AAB9}.job
- c:\windows\system32\msfeedssync.exe [2009-07-29 20:13]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
IE: &Télécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddLink.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Envoyer au périphérique &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Envoyer l'&image au périphérique Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Save Flash - c:\program files\UnH Solutions\Flash Saving Plugin\FlashSButton.dll/210
IE: Tout t&élécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddList.html
DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8971.cab
FF - ProfilePath -
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-14 23:28
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés:

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(1404)
c:\windows\system32\btncopy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\System32\nvvsvc.exe
c:\windows\System32\audiodg.exe
c:\windows\System32\wlanext.exe
c:\windows\System32\rundll32.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\Trend Micro\Internet Security\SfCtlCom.exe
c:\program files\Dell Support Center\bin\sprtsvc.exe
c:\windows\System32\stacsv.exe
c:\windows\System32\drivers\XAudio.exe
c:\program files\Trend Micro\BM\TMBMSRV.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\System32\rundll32.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\windows\System32\wbem\unsecapp.exe
c:\program files\DellTPad\ApMsgFwd.exe
c:\program files\DellTPad\hidfind.exe
c:\program files\DellTPad\ApntEx.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Heure de fin: 2009-09-14 23:38 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-09-14 21:38
ComboFix2.txt 2009-09-14 20:35

Avant-CF: 95 447 154 688 octets libres
Après-CF: 95 425 204 224 octets libres

Current=1 Default=1 Failed=0 LastKnownGood=6 Sets=1,2,3,4,5,6
305 --- E O F --- 2009-09-09 15:46

Rebonsoir

voila les résultats de mon dernier scan avec combofix. Dis-moi que c'est fini !!!

ComboFix 09-09-14.02 - Fred 15/09/2009 0:16.3.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.1934 [GMT 2:00]
Lancé depuis: c:\users\Fred\Desktop\ComboFix.exe
AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
AV: Trend Micro Internet Security *On-access scanning disabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
SP: McAfee VirusScan *disabled* (Updated) {C78B3C70-4777-4742-BB91-9D615CC575E6}
SP: Trend Micro Internet Security *disabled* (Updated) {003DD9A8-02A6-43CF-81BA-5D403CAD001E}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_kbiwkmbmqgwbti
-------\Legacy_kbiwkmxrxsppbt
-------\Service_kbiwkmbmqgwbti
-------\Service_kbiwkmxrxsppbt

((((((((((((((((((((((((((((( Fichiers créés du 2009-08-14 au 2009-09-14 ))))))))))))))))))))))))))))))))))))
.

2009-09-14 22:21 . 2009-09-14 22:23 -------- d-----w- c:\users\Fred\AppData\Local\temp
2009-09-14 22:21 . 2009-09-14 22:21 -------- d-----w- c:\users\Public\AppData\Local\temp
2009-09-14 22:21 . 2009-09-14 22:21 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-14 21:46 . 2009-09-14 21:46 -------- d-----w- c:\users\Fred\AppData\Roaming\Malwarebytes
2009-09-14 21:46 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-14 21:46 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-14 21:46 . 2009-09-14 21:46 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-14 21:30 . 2009-09-14 21:30 10752 ----a-w- c:\windows\DCEBoot.exe
2009-09-02 19:56 . 2009-08-29 00:27 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-02 19:56 . 2009-08-29 00:14 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-08-29 23:36 . 2009-08-29 23:36 -------- d-----w- c:\users\Fred\AppData\Roaming\FileMaker
2009-08-29 10:19 . 2009-06-22 10:09 2048 ----a-w- c:\windows\system32\tzres.dll
2009-08-26 22:08 . 2009-08-26 22:08 -------- d-----w- c:\program files\Canal+

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-14 22:21 . 2008-06-13 22:56 12 ----a-w- c:\windows\bthservsdp.dat
2009-09-13 22:53 . 2009-04-21 15:09 -------- d-----w- c:\users\Fred\AppData\Roaming\uTorrent
2009-09-13 22:52 . 2008-06-27 17:33 -------- d-----w- c:\users\Fred\AppData\Roaming\vlc
2009-09-13 22:35 . 2008-11-07 20:25 -------- d-----w- c:\users\Fred\AppData\Roaming\dvdcss
2009-09-12 17:14 . 2008-07-02 20:46 -------- d-----w- c:\program files\eMule
2009-09-12 12:58 . 2006-11-02 15:48 672322 ----a-w- c:\windows\system32\perfh00C.dat
2009-09-12 12:58 . 2006-11-02 15:48 124434 ----a-w- c:\windows\system32\perfc00C.dat
2009-09-09 19:06 . 2008-09-11 15:49 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-09 17:21 . 2008-07-04 20:48 -------- d-----w- c:\users\Fred\AppData\Roaming\FileZilla
2009-09-09 15:43 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-06 19:54 . 2009-07-29 20:41 -------- d-----w- c:\program files\Glary Utilities
2009-09-05 21:47 . 2008-07-05 21:30 -------- d-----w- c:\program files\Mp3tag
2009-09-05 15:45 . 2009-01-08 12:44 -------- d-----w- c:\users\Fred\AppData\Roaming\gtk-2.0
2009-09-02 20:59 . 2008-11-01 22:07 -------- d-----w- c:\program files\FileZilla FTP Client
2009-09-01 23:17 . 2008-10-28 16:16 -------- d-----w- c:\program files\Pingus
2009-08-26 22:09 . 2009-03-05 22:09 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-08-18 19:43 . 2009-07-18 12:00 -------- d-----w- c:\program files\Free Music Zilla
2009-08-14 16:27 . 2009-09-09 15:41 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-08-14 15:53 . 2009-09-09 15:41 17920 ----a-w- c:\windows\system32\netevent.dll
2009-08-14 13:49 . 2009-09-09 15:41 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-08-14 13:49 . 2009-09-09 15:41 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-08-14 13:49 . 2009-09-09 15:41 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-08-14 13:49 . 2009-09-09 15:41 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-08-14 13:49 . 2009-09-09 15:41 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-08-14 13:49 . 2009-09-09 15:41 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-08-14 13:49 . 2009-09-09 15:41 10240 ----a-w- c:\windows\system32\finger.exe
2009-08-14 13:48 . 2009-09-09 15:41 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-08-14 13:48 . 2009-09-09 15:41 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-08-10 12:49 . 2008-06-29 12:17 -------- d-----w- c:\program files\Diablo II
2009-08-03 20:59 . 2009-07-16 22:34 -------- d-----w- c:\program files\Mindscape
2009-07-31 22:07 . 2008-06-29 14:50 -------- d-----w- c:\users\Fred\AppData\Roaming\XnView
2009-07-31 20:21 . 2008-07-10 20:39 -------- d-----w- c:\program files\CDBurnerXP
2009-07-29 23:46 . 2008-06-29 14:49 -------- d-----w- c:\program files\XnView
2009-07-29 22:02 . 2009-07-29 21:53 -------- d-----w- c:\users\Fred\AppData\Roaming\DAEMON Tools Lite
2009-07-29 22:02 . 2008-07-10 21:04 -------- d-----w- c:\users\Fred\AppData\Roaming\DAEMON Tools
2009-07-29 22:00 . 2008-07-10 21:09 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-07-29 21:53 . 2009-07-29 21:53 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-07-29 20:54 . 2008-06-28 16:15 -------- d-----w- c:\program files\EasyPHP1-8
2009-07-29 20:49 . 2009-07-29 20:47 -------- d-----w- c:\users\Fred\AppData\Roaming\GlarySoft
2009-07-29 19:59 . 2009-07-29 19:59 -------- d-----w- c:\users\Fred\AppData\Roaming\TuneUp Software
2009-07-29 19:37 . 2008-07-05 15:13 -------- d-----w- c:\users\Fred\AppData\Roaming\Skype
2009-07-29 19:32 . 2009-07-29 19:32 -------- d-----w- c:\program files\Common Files\Skype
2009-07-29 19:32 . 2008-07-05 15:12 -------- d-----r- c:\program files\Skype
2009-07-29 19:31 . 2008-11-01 18:04 -------- d-----w- c:\documents and settings\ReleaseEngineer.MACROVISION\Application Data\skypePM
2009-07-28 10:23 . 2009-07-28 10:23 -------- d-----w- c:\program files\PicLensIE
2009-07-28 10:21 . 2009-07-28 10:21 2119680 ----a-w- c:\users\Fred\AppData\Local\cooliris-win-ie-release-1.11.2.27471.en-US.msi
2009-07-24 08:42 . 2008-06-13 23:07 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-21 21:52 . 2009-07-29 17:28 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-07-29 17:28 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-07-29 17:28 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-07-29 17:28 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-18 23:33 . 2009-07-18 11:49 -------- d-----w- c:\program files\NOS
2009-07-18 23:23 . 2009-07-18 23:23 -------- d-----w- c:\program files\SiSoftware
2009-07-18 12:00 . 2009-07-18 12:00 -------- d-----w- c:\users\Fred\AppData\Roaming\FMZilla
2009-07-17 13:54 . 2009-08-15 08:41 71680 ----a-w- c:\windows\system32\atl.dll
2009-07-15 12:40 . 2009-08-15 08:40 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-07-15 12:39 . 2009-08-15 08:40 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-15 12:39 . 2009-08-15 08:40 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-07-15 12:39 . 2009-08-15 08:40 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-07-11 19:01 . 2009-09-09 15:41 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-07-11 19:01 . 2009-09-09 15:41 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-07-11 19:01 . 2009-09-09 15:41 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-07-11 19:01 . 2009-09-09 15:41 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-07-11 17:03 . 2009-09-09 15:41 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-07-10 07:13 . 2009-07-08 14:36 5 ----a-w- c:\windows\sbacknt.bin
2009-07-08 14:36 . 2009-07-08 14:36 152904 ----a-w- c:\windows\system32\vghd.scr
2003-07-12 17:45 . 2009-07-29 23:19 274432 ----a-w- c:\program files\ClonyXXL.exe
2003-03-21 11:45 . 2008-07-05 22:30 250544 ----a-w- c:\program files\Common Files\keyhelp.ocx
2008-06-13 23:13 . 2008-06-13 23:13 74 --sh--r- c:\windows\CT4CET.bin
2008-06-29 13:37 . 2008-06-29 13:37 0 --sh--w- c:\windows\S0684C7BB.tmp
2006-05-03 10:06 . 2009-04-18 22:35 163328 --sh--r- c:\windows\System32\flvDX.dll
2007-02-21 11:47 . 2009-04-18 22:35 31232 --sh--r- c:\windows\System32\msfDX.dll
2008-03-16 13:30 . 2009-04-18 22:35 216064 --sh--r- c:\windows\System32\nbDX.dll
2008-06-14 06:43 . 2008-06-14 06:31 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((( SnapShot@2009-09-14_20.27.22 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-06-13 23:06 . 2009-09-14 21:58 53720 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-06-25 14:29 . 2009-09-14 22:24 14198 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-389032179-406327077-2009890558-1000_UserData.bin
+ 2008-06-25 14:25 . 2009-09-14 22:22 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-06-25 14:25 . 2009-09-14 20:25 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-06-25 14:25 . 2009-09-14 22:22 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-06-25 14:25 . 2009-09-14 20:25 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-06-25 14:25 . 2009-09-14 22:22 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-06-25 14:25 . 2009-09-14 20:25 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-04-30 23:09 . 2009-09-14 21:56 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-04-30 23:09 . 2009-09-14 20:25 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2006-11-02 13:05 . 2009-09-14 22:24 122850 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2009-04-30 11:54 . 2009-09-14 21:27 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-04-30 11:54 . 2009-09-14 16:24 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"OE"="c:\program files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe" [2008-03-07 492808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-09-24 159744]
"OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-12-03 36864]
"UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2008-07-29 1398024]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-06-09 13543968]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2008-06-09 96800]
"dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-06-13 23:24 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
backup=c:\windows\pss\BTTray.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Digital Line Detect.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
backup=c:\windows\pss\Digital Line Detect.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk
backup=c:\windows\pss\Logitech SetPoint.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickSet.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\QuickSet.lnk
backup=c:\windows\pss\QuickSet.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^Fred^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GigaTribe.lnk]
path=c:\users\Fred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GigaTribe.lnk
backup=c:\windows\pss\GigaTribe.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"SigmatelSysTrayApp"=%ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):38,3e,c2,b5,59,e1,c9,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-389032179-406327077-2009890558-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{7AE42A76-D463-4104-B0A5-109033E96B5E}"= c:\program files\Dell\MediaDirect\MediaDirect.exe:Dell MediaDirect
"{6E6D3E31-D64B-43EC-AF28-7F8867FF9F35}"= c:\program files\Dell\MediaDirect\PCMService.exe:CyberLink PowerCinema Resident Program
"{C269694F-5713-4D27-B6C2-1B3A117710EE}"= c:\program files\Dell\MediaDirect\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine
"{5F156217-5CB0-43A0-863D-8226CC953DD9}"= c:\program files\Dell\MediaDirect\Kernel\DMS\CLMSService.exe:CyberLink Media Server
"{53AAD680-BC05-4AF5-B532-B3D3CA74C242}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{E4F9DDEA-E1A4-4F68-B4DD-7D888D7C1701}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{CBA59B29-23FB-4E22-828D-099CEE8E1D9F}"= UDP:g:\liberkey\Apps\uTorrent\App\uTorrent\utorrent.exe:µTorrent (TCP-In)
"{58D8EFA8-35F5-4723-A6D0-0688F16A6492}"= TCP:g:\liberkey\Apps\uTorrent\App\uTorrent\utorrent.exe:µTorrent (UDP-In)
"{57633013-FE35-4698-85B7-6BB9DDE362D2}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp
"{F5C7BF10-A3D7-4D81-8085-02D4503DBCA2}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp
"{96F921FB-1148-4C25-87DB-168B4D5CA4AB}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
"{FAECC3B1-20CD-45A0-B431-FBB4E722F9B4}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
"TCP Query User{9126D559-667B-4EA0-B45E-EC7D9C7781E2}c:\\program files\\free music zilla\\fmzilla.exe"= UDP:c:\program files\free music zilla\fmzilla.exe:FMZilla Module
"UDP Query User{A18B7E72-D93C-4D17-B2A1-0525006DFA37}c:\\program files\\free music zilla\\fmzilla.exe"= TCP:c:\program files\free music zilla\fmzilla.exe:FMZilla Module

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Program Files\\Free Music Zilla\\FMZilla.exe"= c:\program files\Free Music Zilla\FMZilla.exe:*:Enabled:FMZilla

R1 tmlwf;Trend Micro NDIS 6.0 Filter Driver;c:\windows\System32\drivers\tmlwf.sys [07/03/2008 09:17 141840]
R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [19/07/2009 01:30 73728]
R2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [28/04/2009 17:33 188416]
R2 tmevtmgr;tmevtmgr;c:\windows\System32\drivers\tmevtmgr.sys [07/03/2008 09:17 52624]
R2 tmpreflt;tmpreflt;c:\windows\System32\drivers\tmpreflt.sys [15/07/2009 21:58 36368]
R2 tmwfp;Trend Micro WFP Callout Driver;c:\windows\System32\drivers\tmwfp.sys [07/03/2008 09:17 234512]
R3 OEM02Dev;Creative Camera OEM002 Driver;c:\windows\System32\drivers\OEM02Dev.sys [14/06/2008 08:48 235648]
R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;c:\windows\System32\drivers\OEM02Vfx.sys [14/06/2008 08:48 7424]
R3 TmPfw;Trend Micro Personal Firewall;c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe [25/06/2008 23:52 488768]
R3 tmproxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [25/06/2008 23:52 648456]
S2 gupdate1c98709e678c660;Google Update Service (gupdate1c98709e678c660);c:\program files\Google\Update\GoogleUpdate.exe [04/02/2009 22:48 133104]
S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\System32\drivers\s115bus.sys [19/05/2009 23:57 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\System32\drivers\s115mdfl.sys [19/05/2009 23:57 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\System32\drivers\s115mdm.sys [19/05/2009 23:57 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s115mgmt.sys [19/05/2009 23:58 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\System32\drivers\s115obex.sys [19/05/2009 23:58 98568]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\RpcAgentSrv.exe [19/07/2009 01:23 98488]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenu du dossier 'Tâches planifiées'

2009-09-14 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-07-29 14:09]

2009-09-14 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-06-13 20:44]

2009-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 20:48]

2009-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-04 20:48]

2009-09-14 c:\windows\Tasks\SyncBack Sauvegarde Promethest.job
- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2008-06-29 10:00]

2009-09-14 c:\windows\Tasks\User_Feed_Synchronization-{FD5DF11A-81C9-490E-A2E9-050AF093AAB9}.job
- c:\windows\system32\msfeedssync.exe [2009-07-29 20:13]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
IE: &Télécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddLink.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Envoyer au périphérique &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Envoyer l'&image au périphérique Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Save Flash - c:\program files\UnH Solutions\Flash Saving Plugin\FlashSButton.dll/210
IE: Tout t&élécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddList.html
DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} - hxxp://webtv.guidetv.orange.fr/resources/OCS_8971.cab
FF - ProfilePath -
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-15 00:22
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{18D6E519-4C27-E4AD-074C5D1F171B40FB}\{8D7A772B-93EE-6905-4C751BA1B544AFC9}\{7029C73E-0020-BA9C-F3FADF03D99AF0E6}*]
"VUXE53PKQTHGMR1ZS3QLS6JJWD1"=hex:01,00,01,00,00,00,00,00,bc,35,81,a3,a5,3a,34,
9a,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:2e,e8,e1,00,eb,16,2b,de,05,82,60,87,5c,
85,d0,a2,2e,e8,e1,00,eb,16,2b,de,5a,7b,f0,dd,10,4e,db,5c,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,44,45,ee,fa,da,
a9,63,88,46,47,15,b0,92,4b,c7,ef,93,27,9d,8b,82,c9,36,e0,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:25,da,ec,7e,55,20,c9,26,7b,fe,28,16,9c,
17,15,e2,7a,45,05,fd,91,e8,6f,31,25,ef,c5,5f,b6,3e,1a,f5,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:86,8c,21,01,be,91,eb,e7,68,57,e5,3b,6c,
b6,48,e6,6b,65,49,6a,7e,99,74,f7,4a,f3,84,62,a7,4c,ef,13,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:f5,1d,4d,73,a8,13,5c,05,dd,b2,e7,1d,d5,
f5,e3,c4,e9,02,6c,fa,fb,1d,47,57,a8,e4,bf,fe,da,45,04,00,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{90C9B227-00E9-ED2B-D8335C00663422E2}\{BA143829-6513-6AB3-17B76E63BBBF825B}\{B7811D8F-B091-6828-D848878685722533}*]
"VUXE53PKQTHGMR1ZS3QLS6JJWD1"=hex:01,00,01,00,00,00,00,00,bc,35,81,a3,a5,3a,34,
9a,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:df,20,58,62,78,6b,cf,c8,6f,c0,63,25,a4,
5b,47,c2,50,93,e5,ab,ec,6a,4e,ab,5b,92,07,70,ae,77,e6,d0,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,6c,46,12,ea,c7,
a4,7e,51,97,20,4e,9a,c7,f1,35,ee,b9,c4,45,e9,b3,82,34,6f,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:83,6c,56,8b,a0,85,96,ab,13,3d,63,59,ea,
22,de,59,aa,52,c6,00,84,3c,26,64,f5,8b,30,89,a8,50,19,13,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFFD277A-DF70-B410-AC1E2F7ACB2EF6E1}\{F03E0E06-1B3D-CEE3-10573FC9D15505B4}\{82A99E38-2615-AE8D-106A193CCF03E65A}*]
"VUXE53PKQTHGMR1ZS3QLS6JJWD1"=hex:01,00,01,00,00,00,00,00,bc,35,81,a3,a5,3a,34,
9a,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,1e,ff,fc,88,e2,
d4,12,c0,b2,46,9a,e2,1b,fe,1b,94,3e,cf,e8,18,09,2c,ef,1b,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:3d,ce,ea,26,2d,45,aa,78,a7,96,67,9d,ae,
f0,a8,35,37,a4,aa,c3,a6,15,56,0a,0e,2e,6d,28,90,d3,f0,33,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:e3,0e,66,d5,eb,bc,2f,6b,63,e7,16,1c,c7,
d9,73,f3,f8,31,0f,a9,5f,a0,ec,fb,60,c8,bb,e6,e2,dc,d5,a5,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\Windows\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:6c,43,2d,1e,aa,22,2f,9c,08,a4,09,6d,95,
52,8d,a3,05,73,21,dd,54,d8,4a,c5,7f,c7,9c,d4,03,93,ad,f7,6c,43,2d,1e,aa,22,\

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(3356)
c:\windows\system32\btncopy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\System32\nvvsvc.exe
c:\windows\System32\audiodg.exe
c:\windows\System32\wlanext.exe
c:\windows\System32\rundll32.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\Trend Micro\Internet Security\SfCtlCom.exe
c:\program files\Dell Support Center\bin\sprtsvc.exe
c:\windows\System32\stacsv.exe
c:\windows\System32\drivers\XAudio.exe
c:\program files\Trend Micro\BM\TMBMSRV.exe
c:\windows\System32\rundll32.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\System32\wbem\unsecapp.exe
c:\program files\DellTPad\ApMsgFwd.exe
c:\program files\DellTPad\hidfind.exe
c:\program files\DellTPad\ApntEx.exe
.
**************************************************************************
.
Heure de fin: 2009-09-14 0:30 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-09-14 22:29
ComboFix2.txt 2009-09-14 21:38
ComboFix3.txt 2009-09-14 20:35

Avant-CF: 95 229 165 568 octets libres
Après-CF: 94 976 122 880 octets libres

391 --- E O F --- 2009-09-09 15:46

Bonsoir

je viens de supprimer tous les fichiers en quarantaine de MBAM.

Le pc tourne normalement c à d lentement avec vista !

Merci énormément pour ton aide

Je n'ai pas installé HijackThis

Voila le dernier rapport. Dois-je supprimer combofix à la main où faut-il le faire proprement ?
Encore merci pour tout

[ Rapport ToolsCleaner version 2.3.10 (par A.Rothstein & dj QUIOU) ]

--> Recherche:

C:\ComboFix.exe: trouvé !

---------------------------------
--> Suppression:

C:\ComboFix.exe: ERREUR DE SUPPRESSION !!