Suis-je infecté ?

ComboFix 11-07-07.06 - CTC 08/07/2011  16:24:29.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium   6.1.7601.1.1252.33.1036.18.4095.2519 [GMT 2:00]
Lancé depuis: c:\users\CTC\Downloads\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
FW: Kaspersky Internet Security *Disabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
SP: Kaspersky Internet Security *Disabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Un nouveau point de restauration a été créé
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Thumbs.db
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2011-06-08 au 2011-07-08  ))))))))))))))))))))))))))))))))))))
.
.
2011-07-08 13:37 . 2011-07-08 13:37	512	----a-w-	C:\PhysicalDisk0_MBR.bin
2011-07-08 13:32 . 2011-07-08 13:41	--------	d-----w-	c:\program files (x86)\ZHPDiag
2011-07-07 18:57 . 2011-07-08 06:57	--------	d-----w-	c:\users\CTC\AppData\Local\{C352D79A-F71F-42BC-A842-824420A08D80}
2011-07-07 06:56 . 2011-07-07 06:57	--------	d-----w-	c:\users\CTC\AppData\Local\{C61BCB80-92D8-47EF-B9F7-1D9D88818B77}
2011-07-06 06:55 . 2011-07-06 06:55	--------	d-----w-	c:\users\CTC\AppData\Local\{8B49CC3B-1125-4004-9F5A-04B3D8DDAB9F}
2011-07-05 21:47 . 2011-06-07 17:10	8873296	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{5D3740A5-F19F-42A8-8DEC-756867B02EC5}\mpengine.dll
2011-07-04 12:04 . 2011-07-05 12:04	--------	d-----w-	c:\users\CTC\AppData\Local\{DC74B023-08E5-47B5-B4B5-C456D33980CC}
2011-07-02 14:07 . 2011-07-02 14:07	--------	d-----w-	c:\users\CTC\AppData\Local\{9D7E91A6-6595-43BA-BF75-F423E5315588}
2011-07-01 12:15 . 2011-07-01 12:15	2106216	----a-w-	c:\program files (x86)\Mozilla Firefox\D3DCompiler_43.dll
2011-07-01 12:15 . 2011-07-01 12:15	1998168	----a-w-	c:\program files (x86)\Mozilla Firefox\d3dx9_43.dll
2011-07-01 06:45 . 2011-07-01 06:45	--------	d-----w-	c:\users\CTC\AppData\Local\{E188C283-7A94-4BF1-BF9B-1AFDB4F3A8C9}
2011-06-30 18:44 . 2011-06-30 18:44	--------	d-----w-	c:\users\CTC\AppData\Local\{9ABA0C86-14E1-4756-BD32-DDFB7C747E49}
2011-06-30 06:44 . 2011-06-30 06:44	--------	d-----w-	c:\users\CTC\AppData\Local\{2476E125-C6C3-4FB3-854C-B338AA89CE60}
2011-06-29 09:56 . 2011-06-29 09:56	--------	d-----w-	c:\users\CTC\AppData\Local\{DF6C1D29-5F83-4133-8F2E-F4299AE5A7B0}
2011-06-28 09:55 . 2011-06-28 21:55	--------	d-----w-	c:\users\CTC\AppData\Local\{82E2DF78-2A69-4320-902A-AAE4C21FAE17}
2011-06-26 09:54 . 2011-06-27 21:55	--------	d-----w-	c:\users\CTC\AppData\Local\{BBAF2099-A774-4907-8CB1-20688A13A465}
2011-06-23 22:08 . 2011-06-23 22:09	--------	d-----w-	c:\users\CTC\AppData\Local\{641CC558-8CA4-43DC-A9AE-216E7BF4C1D9}
2011-06-23 06:43 . 2011-06-23 06:44	--------	d-----w-	c:\users\CTC\AppData\Local\{10353530-5FA8-4062-95CE-F182FAFE077C}
2011-06-22 10:31 . 2011-06-22 10:31	--------	d-----w-	c:\programdata\Badoo
2011-06-22 06:53 . 2011-06-22 06:53	--------	d-----w-	c:\users\CTC\AppData\Local\{F85E5D08-12D2-45E0-8F55-3C85822F9071}
2011-06-21 18:53 . 2011-06-21 18:53	--------	d-----w-	c:\users\CTC\AppData\Local\{348E57BB-D637-41EE-BAC3-CDBEDD500A10}
2011-06-21 06:52 . 2011-06-21 06:53	--------	d-----w-	c:\users\CTC\AppData\Local\{73FE3A15-6E3F-4042-B633-99AFF939B4B3}
2011-06-20 06:45 . 2011-06-20 06:45	--------	d-----w-	c:\users\CTC\AppData\Local\{AC51C3A3-993E-4097-B09F-3F76627A797A}
2011-06-19 10:27 . 2011-06-19 10:28	--------	d-----w-	c:\users\CTC\AppData\Local\{B47D635F-EE05-469A-A472-BCB36F0B18AB}
2011-06-18 22:27 . 2011-06-18 22:27	--------	d-----w-	c:\users\CTC\AppData\Local\{B517A42B-02B6-4E37-9F0B-AAD2B7E3D4AD}
2011-06-18 10:27 . 2011-06-18 10:27	--------	d-----w-	c:\users\CTC\AppData\Local\{48EF08F6-4616-4268-A04F-54DAD25F873D}
2011-06-18 10:06 . 2011-06-18 10:06	--------	d-----w-	c:\users\CTC\AppData\Local\{FC128B37-5A07-42A0-9C45-FDBF96F7CD2B}
2011-06-17 18:59 . 2011-06-17 18:59	--------	d-----w-	c:\users\CTC\AppData\Local\{210C0F99-CE2B-41A8-8000-22691D7FCED2}
2011-06-17 06:59 . 2011-06-17 06:59	--------	d-----w-	c:\users\CTC\AppData\Local\{142C8704-79CE-4899-AD1C-0C873AF3DD45}
2011-06-16 15:55 . 2011-06-16 15:55	--------	d-----w-	c:\users\CTC\AppData\Local\CyberLink
2011-06-16 15:55 . 2011-06-16 15:55	--------	d-----w-	c:\users\CTC\AppData\Local\PowerCinema
2011-06-16 08:14 . 2011-04-25 05:33	1923968	----a-w-	c:\windows\system32\drivers\tcpip.sys
2011-06-16 08:14 . 2011-04-25 02:34	499200	----a-w-	c:\windows\system32\drivers\afd.sys
2011-06-16 08:14 . 2011-04-27 02:40	158208	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2011-06-16 08:14 . 2011-04-27 02:39	289280	----a-w-	c:\windows\system32\drivers\mrxsmb10.sys
2011-06-16 08:14 . 2011-04-27 02:39	128000	----a-w-	c:\windows\system32\drivers\mrxsmb20.sys
2011-06-16 08:09 . 2011-05-28 03:06	3135488	----a-w-	c:\windows\system32\win32k.sys
2011-06-16 08:09 . 2011-04-29 03:06	467456	----a-w-	c:\windows\system32\drivers\srv.sys
2011-06-16 08:09 . 2011-04-29 03:05	410112	----a-w-	c:\windows\system32\drivers\srv2.sys
2011-06-16 08:09 . 2011-04-29 03:05	168448	----a-w-	c:\windows\system32\drivers\srvnet.sys
2011-06-16 08:09 . 2011-02-25 06:22	861696	----a-w-	c:\windows\system32\oleaut32.dll
2011-06-16 08:09 . 2011-02-25 05:34	571904	----a-w-	c:\windows\SysWow64\oleaut32.dll
2011-06-16 08:09 . 2011-05-03 05:29	976896	----a-w-	c:\windows\system32\inetcomm.dll
2011-06-16 08:09 . 2011-05-03 04:30	741376	----a-w-	c:\windows\SysWow64\inetcomm.dll
2011-06-16 06:57 . 2011-06-16 18:58	--------	d-----w-	c:\users\CTC\AppData\Local\{12A4CD47-5151-47A6-9450-E532D096A8C9}
2011-06-15 06:43 . 2011-06-15 18:43	--------	d-----w-	c:\users\CTC\AppData\Local\{FC95AD9C-6300-450A-9B04-4368425ABD08}
2011-06-14 06:50 . 2011-06-14 06:51	--------	d-----w-	c:\users\CTC\AppData\Local\{AF379914-4103-4C6F-BCB9-049EB1C8ECF7}
2011-06-13 10:44 . 2011-06-13 10:44	--------	d-----w-	c:\users\CTC\AppData\Local\{7E92D9B5-A95B-485F-B36F-1167ADBF6D2E}
2011-06-12 21:30 . 2011-06-12 21:30	--------	d-----w-	c:\users\CTC\AppData\Local\Microsoft Games
2011-06-12 17:13 . 2011-06-12 17:13	--------	d-----w-	c:\users\CTC\AppData\Local\Apple Computer
2011-06-10 06:56 . 2011-06-12 06:57	--------	d-----w-	c:\users\CTC\AppData\Local\{758E5CC9-47F2-4B4D-8947-CA4B567433EC}
2011-06-09 18:56 . 2011-06-09 18:56	--------	d-----w-	c:\users\CTC\AppData\Local\{DFE4752D-71CE-4CFE-AEF5-4602295444F6}
2011-06-09 06:55 . 2011-06-09 06:55	--------	d-----w-	c:\users\CTC\AppData\Local\{654E8E96-22F9-47AF-B28D-35BA62401D70}
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-29 07:08 . 2011-05-16 12:11	404640	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-18 11:01 . 2011-05-13 22:01	4820	----a-w-	C:\Sauvegarde_Batappli.zip
2011-05-24 17:14 . 2011-05-02 08:34	270720	------w-	c:\windows\system32\MpSigStub.exe
2011-05-16 08:00 . 2009-07-14 02:36	175616	----a-w-	c:\windows\system32\msclmd.dll
2011-05-16 08:00 . 2009-07-14 02:36	152576	----a-w-	c:\windows\SysWow64\msclmd.dll
2011-05-03 13:47 . 2011-05-03 13:47	91648	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2011-05-03 13:47 . 2011-05-03 13:47	89088	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2011-05-03 13:47 . 2011-05-03 13:47	86528	----a-w-	c:\windows\SysWow64\iesysprep.dll
2011-05-03 13:47 . 2011-05-03 13:47	85504	----a-w-	c:\windows\system32\iesetup.dll
2011-05-03 13:47 . 2011-05-03 13:47	76800	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2011-05-03 13:47 . 2011-05-03 13:47	76800	----a-w-	c:\windows\system32\tdc.ocx
2011-05-03 13:47 . 2011-05-03 13:47	74752	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-05-03 13:47 . 2011-05-03 13:47	74752	----a-w-	c:\windows\SysWow64\iesetup.dll
2011-05-03 13:47 . 2011-05-03 13:47	63488	----a-w-	c:\windows\SysWow64\tdc.ocx
2011-05-03 13:47 . 2011-05-03 13:47	603648	----a-w-	c:\windows\system32\vbscript.dll
2011-05-03 13:47 . 2011-05-03 13:47	49664	----a-w-	c:\windows\system32\imgutil.dll
2011-05-03 13:47 . 2011-05-03 13:47	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2011-05-03 13:47 . 2011-05-03 13:47	48640	----a-w-	c:\windows\system32\mshtmler.dll
2011-05-03 13:47 . 2011-05-03 13:47	448512	----a-w-	c:\windows\system32\html.iec
2011-05-03 13:47 . 2011-05-03 13:47	420864	----a-w-	c:\windows\SysWow64\vbscript.dll
2011-05-03 13:47 . 2011-05-03 13:47	367104	----a-w-	c:\windows\SysWow64\html.iec
2011-05-03 13:47 . 2011-05-03 13:47	35840	----a-w-	c:\windows\SysWow64\imgutil.dll
2011-05-03 13:47 . 2011-05-03 13:47	30720	----a-w-	c:\windows\system32\licmgr10.dll
2011-05-03 13:47 . 2011-05-03 13:47	23552	----a-w-	c:\windows\SysWow64\licmgr10.dll
2011-05-03 13:47 . 2011-05-03 13:47	222208	----a-w-	c:\windows\system32\msls31.dll
2011-05-03 13:47 . 2011-05-03 13:47	173056	----a-w-	c:\windows\system32\ieUnatt.exe
2011-05-03 13:47 . 2011-05-03 13:47	165888	----a-w-	c:\windows\system32\iexpress.exe
2011-05-03 13:47 . 2011-05-03 13:47	161792	----a-w-	c:\windows\SysWow64\msls31.dll
2011-05-03 13:47 . 2011-05-03 13:47	160256	----a-w-	c:\windows\system32\wextract.exe
2011-05-03 13:47 . 2011-05-03 13:47	152064	----a-w-	c:\windows\SysWow64\wextract.exe
2011-05-03 13:47 . 2011-05-03 13:47	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2011-05-03 13:47 . 2011-05-03 13:47	1492992	----a-w-	c:\windows\system32\inetcpl.cpl
2011-05-03 13:47 . 2011-05-03 13:47	142848	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2011-05-03 13:47 . 2011-05-03 13:47	1427456	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2011-05-03 13:47 . 2011-05-03 13:47	1389056	----a-w-	c:\windows\system32\wininet.dll
2011-05-03 13:47 . 2011-05-03 13:47	135168	----a-w-	c:\windows\system32\IEAdvpack.dll
2011-05-03 13:47 . 2011-05-03 13:47	12288	----a-w-	c:\windows\system32\mshta.exe
2011-05-03 13:47 . 2011-05-03 13:47	11776	----a-w-	c:\windows\SysWow64\mshta.exe
2011-05-03 13:47 . 2011-05-03 13:47	114176	----a-w-	c:\windows\system32\admparse.dll
2011-05-03 13:47 . 2011-05-03 13:47	1126912	----a-w-	c:\windows\SysWow64\wininet.dll
2011-05-03 13:47 . 2011-05-03 13:47	111616	----a-w-	c:\windows\system32\iesysprep.dll
2011-05-03 13:47 . 2011-05-03 13:47	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2011-05-03 13:47 . 2011-05-03 13:47	101888	----a-w-	c:\windows\SysWow64\admparse.dll
2011-05-03 08:21 . 2011-05-03 08:22	74272	----a-w-	c:\windows\system32\RtNicProp64.dll
2011-05-03 08:21 . 2011-05-03 08:22	412776	----a-w-	c:\windows\system32\drivers\Rt64win7.sys
2011-05-03 08:21 . 2011-03-11 17:50	107552	----a-w-	c:\windows\system32\RTNUninst64.dll
2011-05-02 16:16 . 2011-05-02 16:16	86576	----a-w-	c:\users\CTC\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2011-05-02 16:16 . 2011-05-02 16:16	392728	----a-w-	c:\users\CTC\AppData\Roaming\Microsoft\Services Windows Live\Services Windows Live.dll
2011-05-02 16:16 . 2011-05-02 16:16	135680	----a-w-	c:\users\CTC\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
2011-05-02 16:16 . 2011-05-02 16:16	132672	----a-w-	c:\users\CTC\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2011-05-02 08:10 . 2010-06-24 19:33	18328	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-04-22 22:15 . 2011-05-25 06:44	27520	----a-w-	c:\windows\system32\drivers\Diskdump.sys
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Badoo Desktop"="c:\programdata\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe" [2011-06-07 1017344]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2010-09-28 664600]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2010-08-30 61112]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]
"BrMfcWnd"="c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe" [2009-05-26 1159168]
"ControlCenter3"="c:\program files (x86)\Brother\ControlCenter3\brctrcen.exe" [2008-12-24 114688]
"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" [2010-11-02 365336]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
.
c:\users\CTC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Notification de cadeaux MSN.lnk - c:\users\CTC\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [2011-5-2 135680]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Snapfish PictureMover.lnk - c:\program files (x86)\PictureMover\Bin\PictureMover.exe [2010-9-28 1040952]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\sbhook.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files\ma-config.com\Drivers\driverhardwarev2x64.sys [2010-08-30 15872]
R3 lvpepf64;Volume Adapter;c:\windows\system32\DRIVERS\lv302a64.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys [x]
R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\x64\maconfservice.exe [2011-04-12 420864]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [x]
S2 aksdf;aksdf;c:\windows\system32\drivers\aksdf.sys [x]
S2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe [x]
S2 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [2010-08-06 681528]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-08-06 291896]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-08-21 92216]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe [2010-09-28 1119768]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-04-07 378472]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\DRIVERS\LVUSBS64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
Contenu du dossier 'Tâches planifiées'
.
2011-07-06 c:\windows\Tasks\HPCeeScheduleForCTC.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 06:15]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2010-09-15 611896]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\x64\sbhook64.dll
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Ajouter à l'Anti-bannière - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm
TCP: Interfaces\{A92AE52C-33C9-4F1D-B8FD-F039E050A2FE}: NameServer = 192.168.1.1
FF - ProfilePath - c:\users\CTC\AppData\Roaming\Mozilla\Firefox\Profiles\h9r71ivi.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.orange.fr/portail
.
- - - - ORPHELINS SUPPRIMES - - - -
.
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
AddRemove-{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8} - c:\program files (x86)\InstallShield Installation Information\{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\SysWOW64\ezSharedSvcHost.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files (x86)\Brother\ControlCenter3\brccMCtl.exe
c:\program files (x86)\Brother\Brmfcmon\BrMfcmon.exe
c:\program files (x86)\Mozilla Firefox\firefox.exe
.
**************************************************************************
.
Heure de fin: 2011-07-08  16:33:55 - La machine a redémarré
ComboFix-quarantined-files.txt  2011-07-08 14:33
.
Avant-CF: 937 535 954 944 octets libres
Après-CF: 937 429 995 520 octets libres
.
- - End Of File - - CF425EFAC1B07B452BA206FCFE0F02EE