Virus

je peux acceder a mon antivcirus mtn, y a t il d'autre manipulation a effectuer ?

en analysant le fichier virustotal me dit 0 bytes size received

ComboFix 10-07-15.03 - Géricom 16/07/2010 17:54:17.7.1 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.1007.656 [GMT 2:00]
Lancé depuis: F:\ComboFix.exe
Commutateurs utilisés :: F:\CFscript.txt
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
FW: ZoneAlarm Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

FILE ::
"c:\docume~1\GRICOM~1\LOCALS~1\Temp\mdxgthkn.sys"
"c:\documents and settings\Géricom\Local Settings\Application Data\inyxqhkkj"
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MDXGTHKN
-------\Service_mdxgthkn


((((((((((((((((((((((((((((( Fichiers créés du 2010-06-16 au 2010-07-16 ))))))))))))))))))))))))))))))))))))
.

2010-07-14 03:20 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2010-07-04 05:30 . 2010-07-04 05:30 -------- d-----w- c:\program files\Fichiers communs\xing shared
2010-06-17 14:13 . 2010-06-17 14:13 -------- d-----w- c:\program files\PKR

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-14 04:57 . 2007-06-19 12:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-07-04 05:32 . 2010-07-04 05:32 118784 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimwmp.dll
2010-07-04 05:32 . 2010-07-04 05:32 118784 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimswf.dll
2010-07-04 05:32 . 2010-07-04 05:32 118784 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimrp.dll
2010-07-04 05:32 . 2010-07-04 05:32 118784 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimqt.dll
2010-07-04 05:32 . 2010-07-04 05:32 118784 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Components\nprpffbrowserrecordext.dll
2010-07-04 05:32 . 2010-07-04 05:32 300616 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Common\rpmainbrowserrecordplugin.dll
2010-07-04 05:32 . 2010-07-04 05:32 118784 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll
2010-07-04 05:32 . 2010-07-04 05:32 329312 ----a-w- c:\documents and settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
2010-07-04 05:32 . 2007-10-04 14:28 -------- d-----w- c:\program files\Fichiers communs\Real
2010-07-04 05:31 . 2007-10-04 14:28 -------- d-----w- c:\program files\Real
2010-07-04 05:29 . 2007-06-14 17:16 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-07-04 05:29 . 2007-06-14 17:16 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-06-24 02:59 . 2004-08-05 12:00 80946 ----a-w- c:\windows\system32\perfc00C.dat
2010-06-24 02:59 . 2004-08-05 12:00 501138 ----a-w- c:\windows\system32\perfh00C.dat
2010-06-14 14:31 . 2007-06-06 10:28 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-02 13:15 . 2010-06-02 13:14 -------- d-----w- c:\program files\SecondLifeViewer2
2010-06-02 04:22 . 2007-11-20 14:18 23259371 ----a-w- c:\windows\Internet Logs\tvDebug.zip
2010-05-27 16:13 . 2009-05-14 09:34 -------- d-----w- c:\program files\BetClic Poker
2010-05-27 14:04 . 2010-05-27 14:04 -------- d-----w- c:\program files\LittleFighter2
2010-05-21 02:26 . 2010-03-06 13:11 -------- d-----w- c:\program files\Google
2010-05-16 05:41 . 2010-05-16 05:44 1557504 ----a-w- c:\windows\Internet Logs\xDB66.tmp
2010-05-16 05:41 . 2010-05-16 05:44 25088 ----a-w- c:\windows\Internet Logs\xDB65.tmp
2010-05-11 07:40 . 2010-05-11 07:43 1554432 ----a-w- c:\windows\Internet Logs\xDB64.tmp
2010-05-11 07:40 . 2010-05-11 07:43 872960 ----a-w- c:\windows\Internet Logs\xDB63.tmp
2010-05-06 10:33 . 2004-08-05 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 08:08 . 2004-08-05 12:00 1851392 ----a-w- c:\windows\system32\win32k.sys
2010-04-20 05:30 . 2004-08-05 12:00 285696 ----a-w- c:\windows\system32\atmfd.dll
2008-11-18 12:21 . 2008-11-18 12:21 1287872 ----a-w- c:\program files\WoW-2.3.0.7561-frFR-downloader.exe
2010-02-16 11:22 . 2008-08-11 20:45 100995104 --sha-w- c:\windows\system32\drivers\fidbox.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{b30ed45f-a0f8-1afb-0d87-d6a72424bd61}]
2010-03-30 20:41 1122304 ----a-w- c:\windows\system32\i_O6G3-H-w.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\progra~1\WI1F86~1\MESSEN~1\msnmsgr.exe" [2009-07-26 3883856]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2009-04-23 691656]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2004-10-08 155648]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2004-10-08 126976]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2004-05-07 98304]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-07 536576]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-12-13 919016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-06-05 292136]
"SunJavaUpdateSched"="c:\program files\Java\jre1.5.0_17\bin\jusched.exe" [2008-11-10 75264]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2010-07-04 202256]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Conference\\Conference.dll"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11/07/2009 18:17 721904]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [29/08/2009 17:17 108289]
R3 CONAN;CONAN;c:\windows\system32\drivers\o2mmb.sys [06/06/2007 14:09 191092]
R3 MbxStby;MbxStby;c:\windows\system32\drivers\MbxStby.sys [06/06/2007 14:09 6100]
S0 FVDSCSI;FVDSCSI;c:\windows\system32\DRIVERS\fvdscsi.sys --> c:\windows\system32\DRIVERS\fvdscsi.sys [?]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [06/03/2010 15:11 135664]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [29/05/2009 17:13 234864]
.
Contenu du dossier 'Tâches planifiées'

2010-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-06 13:11]

2010-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-06 13:11]

2010-07-16 c:\windows\Tasks\User_Feed_Synchronization-{4E1502AE-2B16-4283-ADA8-3B19C5BADB21}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5643
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Trusted Zone: tradedoubler.com\www
DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} - hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.71.0.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.zebulon.fr/scan8/oscan8.cab
DPF: {93344865-74BD-4873-BE65-56539D41A65C} - hxxp://www.earn2life.com/plugin/Earn2Life.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-16 18:02
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll prosync1.sys atapi.sys splr.sys >>UNKNOWN [0x86B8E938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf75d8f28
\Driver\ACPI -> ACPI.sys @ 0xf7411cb8
\Driver\atapi -> prosync1.sys @ 0xf7a7e651
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0615
ParseProcedure -> ntoskrnl.exe @ 0x8056c3ac
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0615
ParseProcedure -> ntoskrnl.exe @ 0x8056c3ac
NDIS: Intel(R) PRO/Wireless 2200BG Network Connection -> SendCompleteHandler -> NDIS.sys @ 0xf72b7bb0
PacketIndicateHandler -> NDIS.sys @ 0xf72c4a21
SendHandler -> NDIS.sys @ 0xf72a287b
user & kernel MBR OK

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'explorer.exe'(464)
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\wscntfy.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\ZoneLabs\vsmon.exe
c:\program files\Java\jre1.5.0_17\bin\jucheck.exe
.
**************************************************************************
.
Heure de fin: 2010-07-16 18:09:39 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-07-16 16:09
ComboFix2.txt 2010-07-16 15:43
ComboFix3.txt 2010-07-16 15:01
ComboFix4.txt 2010-07-16 14:29
ComboFix5.txt 2010-07-16 15:53

Avant-CF: 30 130 225 152 octets libres
Après-CF: 30 119 231 488 octets libres

- - End Of File - - 0BE5DEF481649D4A6B74714A761C1417