Trojan win32/comisproc

bonjour,

depuis quelques jours mon anti-virus (microsoft security essentials) a détécté un trojan win32/comisproc, il le supprime mais il revient à chaque fois.
j'ai visité ce forum et j'ai vu qu'une personne avait le même probleme alors j'ai suivi la procedure indiqué avec combofix et voici le rapport :

ComboFix 11-08-17.03 - blairon josé 18/08/2011 11:47:39.2.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.2046.1100 [GMT 2:00]
Lancé depuis: c:\users\blairon josÚ\Desktop\JOSE.exe
AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-07-18 au 2011-08-18 ))))))))))))))))))))))))))))))))))))
.
.
2011-08-18 09:57 . 2011-08-18 09:57 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-18 09:41 . 2011-08-18 09:41 28752 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ABE6383F-C589-4806-9F03-11782D32EF1B}\MpKsl13561c32.sys
2011-08-18 08:52 . 2011-08-12 02:44 7152464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ABE6383F-C589-4806-9F03-11782D32EF1B}\mpengine.dll
2011-08-18 08:37 . 2011-08-18 08:37 -------- d-----w- c:\users\blairon josé\AppData\Local\{26FF0575-24E1-4853-A0D7-46E144D700EB}
2011-08-18 08:37 . 2011-08-18 08:37 -------- d-----w- c:\users\blairon josé\AppData\Local\{E0083E4E-1B74-4C82-A9C2-DB05EDDF0FB1}
2011-08-18 08:15 . 2011-08-18 08:43 -------- d-----w- C:\ComboFix
2011-08-18 07:34 . 2011-08-18 07:34 -------- d-----w- c:\users\blairon josé\AppData\Local\{B4919D4E-E092-4705-8E98-B3B47934C4A2}
2011-08-18 07:34 . 2011-08-18 07:34 -------- d-----w- c:\users\blairon josé\AppData\Local\{A9285D02-3FE6-4AD0-9F34-569CAEA163D1}
2011-08-17 06:58 . 2011-08-17 06:59 -------- d-----w- c:\users\blairon josé\AppData\Local\{773E0856-DB5F-4089-939C-0C2D9329FBD4}
2011-08-17 06:58 . 2011-08-17 06:58 -------- d-----w- c:\users\blairon josé\AppData\Local\{B0E79532-7328-4552-9FFD-0026C2ABAFA0}
2011-08-16 17:08 . 2011-08-16 17:08 -------- d-----w- c:\users\blairon josé\AppData\Local\{B6EBDD8F-C048-4D8B-B333-96960C3BFEA3}
2011-08-16 17:08 . 2011-08-16 17:08 -------- d-----w- c:\users\blairon josé\AppData\Local\{7BCEAAD8-503A-423B-B1B8-E9D4037DF4E3}
2011-08-16 06:48 . 2011-08-16 06:49 -------- d-----w- c:\users\blairon josé\AppData\Local\{C5CF7F24-0EAC-48CB-8FE2-4DDE16F04A89}
2011-08-16 06:48 . 2011-08-16 06:48 -------- d-----w- c:\users\blairon josé\AppData\Local\{10E11D1C-DFA9-4D15-9877-657E89DEA4F6}
2011-08-15 07:59 . 2011-08-15 07:59 -------- d-----w- c:\users\blairon josé\AppData\Local\{BD2422CD-4110-45E3-B2D8-F3E54381252F}
2011-08-15 07:59 . 2011-08-15 07:59 -------- d-----w- c:\users\blairon josé\AppData\Local\{0D1FA837-01F7-471F-B437-828D71C15168}
2011-08-13 22:22 . 2011-08-13 22:22 -------- d-----w- c:\users\blairon josé\AppData\Local\{A2AC2E42-61B1-42B3-9C73-1732034506BA}
2011-08-13 22:21 . 2011-08-13 22:21 -------- d-----w- c:\users\blairon josé\AppData\Local\{EB154730-7324-4141-B351-8797DF643AFF}
2011-08-13 07:27 . 2011-08-13 07:27 -------- d-----w- c:\users\blairon josé\AppData\Local\{EF21F0C0-260B-4477-9822-1FA89900FDF2}
2011-08-13 07:27 . 2011-08-13 07:27 -------- d-----w- c:\users\blairon josé\AppData\Local\{49D3F96F-B6AE-4C24-8043-7A33C2EB7660}
2011-08-12 07:10 . 2011-08-12 07:10 -------- d-----w- c:\users\blairon josé\AppData\Local\{41C14CC2-A6BD-4DC2-A471-5341ADF2618A}
2011-08-12 07:09 . 2011-08-12 07:10 -------- d-----w- c:\users\blairon josé\AppData\Local\{7FC54491-22D6-4A5D-BB75-DB9D1ADF3CBB}
2011-08-12 01:34 . 2011-08-12 01:34 -------- d-----w- c:\users\blairon josé\AppData\Local\{B3DCCCC6-281C-42B0-8D5B-8FCF79732043}
2011-08-12 01:34 . 2011-08-12 01:34 -------- d-----w- c:\users\blairon josé\AppData\Local\{C5939C35-6253-4AD2-B482-0297313C1E09}
2011-08-11 22:46 . 2011-02-04 14:58 439632 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{4F5965BF-9211-4B1B-A801-5E8D6EE9C499}\gapaengine.dll
2011-08-11 07:08 . 2011-08-11 07:08 -------- d-----w- c:\users\blairon josé\AppData\Local\{4BAF7A56-8822-4FA0-887C-15BE85EC0A92}
2011-08-11 07:08 . 2011-08-11 07:08 -------- d-----w- c:\users\blairon josé\AppData\Local\{9CB58345-CC2D-493A-964B-8B19447D10B2}
2011-08-11 02:37 . 2011-07-06 15:31 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-08-11 02:37 . 2011-06-20 08:54 3602832 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-08-11 02:37 . 2011-06-20 08:54 3550096 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-08-11 02:37 . 2011-06-17 20:13 913296 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-08-11 02:37 . 2011-06-17 13:31 31232 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2011-08-11 02:37 . 2011-06-17 16:03 375808 ----a-w- c:\windows\system32\winsrv.dll
2011-08-11 02:37 . 2011-06-06 10:59 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-08-10 07:23 . 2011-07-13 03:39 6881616 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Updates\mpengine.dll
2011-08-10 07:18 . 2011-08-10 07:18 -------- d-----w- c:\users\blairon josé\AppData\Local\{79DD976D-5258-40F3-81A1-36EA251F58A9}
2011-08-10 07:18 . 2011-08-10 07:18 -------- d-----w- c:\users\blairon josé\AppData\Local\{DE24DFF2-0985-4A46-93C8-6EB728F9C20F}
2011-08-09 10:38 . 2011-08-09 10:38 -------- d-----w- c:\users\blairon josé\AppData\Local\{067E815F-9679-453E-962D-514557104BE9}
2011-08-09 10:38 . 2011-08-09 10:38 -------- d-----w- c:\users\blairon josé\AppData\Local\{A2F93860-54A0-424B-9AC8-CBAA5299F0D9}
2011-08-09 07:09 . 2011-08-09 07:09 -------- d-----w- c:\users\blairon josé\AppData\Local\{63157B7C-184F-4D79-9FA6-77CCB7AB19A7}
2011-08-09 07:09 . 2011-08-09 07:09 -------- d-----w- c:\users\blairon josé\AppData\Local\{7873F7B7-B4C4-4106-90FF-3B7E757D638B}
2011-08-08 07:07 . 2011-08-08 07:07 -------- d-----w- c:\users\blairon josé\AppData\Local\{1B370EE0-8617-4951-B717-F831A47FB284}
2011-08-08 07:07 . 2011-08-08 07:07 -------- d-----w- c:\users\blairon josé\AppData\Local\{973E235C-9761-49F0-BC03-6D891D15EDDE}
2011-08-07 09:02 . 2011-08-07 09:02 -------- d-----w- c:\programdata\TomTom
2011-08-07 09:01 . 2011-08-07 09:01 -------- d-----w- c:\users\blairon josé\AppData\Roaming\Mozilla
2011-08-07 09:01 . 2011-08-07 09:01 -------- d-----w- c:\users\blairon josé\AppData\Roaming\TomTom
2011-08-07 09:01 . 2011-08-07 09:01 -------- d-----w- c:\users\blairon josé\AppData\Local\TomTom
2011-08-07 09:01 . 2011-08-07 09:01 -------- d-----w- c:\program files\TomTom International B.V
2011-08-07 09:01 . 2011-08-07 09:01 -------- d-----w- c:\program files\TomTom HOME 2
2011-08-07 08:28 . 2011-08-07 08:28 -------- d-----w- c:\users\blairon josé\AppData\Local\{F9177C62-09BB-41C2-9492-587E29800C83}
2011-08-07 08:28 . 2011-08-07 08:28 -------- d-----w- c:\users\blairon josé\AppData\Local\{1C9126C1-2445-4C1E-8186-3DB47837781D}
2011-08-06 06:49 . 2011-08-06 06:49 -------- d-----w- c:\users\blairon josé\AppData\Local\{2D76F9FA-1710-4616-AC99-5DE020539C38}
2011-08-06 06:49 . 2011-08-06 06:49 -------- d-----w- c:\users\blairon josé\AppData\Local\{D726DFEA-2C6A-4D12-9BED-02599FE922D7}
2011-08-05 06:50 . 2011-08-05 06:51 -------- d-----w- c:\users\blairon josé\AppData\Local\{C35C67B3-5C50-45E6-B0C2-0F5FF954028A}
2011-08-04 07:49 . 2011-08-04 07:49 -------- d-----w- c:\program files\Common Files\Java
2011-08-04 06:19 . 2011-08-04 06:19 -------- d-----w- c:\users\blairon josé\AppData\Local\{0EF98FFD-2C9E-4AFC-8BC7-E35600036AD2}
2011-08-03 05:51 . 2011-08-03 05:51 -------- d-----w- c:\users\blairon josé\AppData\Local\{E46B45DB-E0D8-4E5D-9670-D40C46404A8E}
2011-08-02 06:47 . 2011-08-02 06:47 -------- d-----w- c:\users\blairon josé\AppData\Local\{13D23B2F-9802-4C5B-B02C-034BB1013BB8}
2011-08-01 07:01 . 2011-08-01 07:01 -------- d-----w- c:\users\blairon josé\AppData\Local\{972782C1-E600-4D54-A572-9C50D6EADCDB}
2011-07-31 00:30 . 2011-07-31 00:30 -------- d-----w- c:\users\blairon josé\AppData\Local\{624C387C-119E-4A30-9161-6DF296AF8EBA}
2011-07-29 07:06 . 2011-07-29 07:06 -------- d-----w- c:\users\blairon josé\AppData\Local\{D8AEB994-3723-4175-83BF-CF9EE1C9440D}
2011-07-28 06:38 . 2011-07-28 06:38 -------- d-----w- c:\users\blairon josé\AppData\Local\{DEE77465-DC88-4DF6-9AE0-5BAF9B94B3EC}
2011-07-27 07:01 . 2011-07-27 07:01 -------- d-----w- c:\users\blairon josé\AppData\Local\{911C33C8-57D6-4FC2-AD24-642D691C5B56}
2011-07-26 10:12 . 2011-07-26 10:12 -------- d-----w- c:\users\blairon josé\AppData\Local\{387CF5F7-E869-4AA6-BCF9-0A3696CE07E1}
2011-07-25 10:19 . 2011-07-25 10:20 -------- d-----w- c:\users\blairon josé\AppData\Local\{EA3FCF63-AF9A-4981-9624-EDA03C445A87}
2011-07-23 11:43 . 2011-07-24 10:39 -------- d-----w- c:\users\blairon josé\AppData\Local\{D7D79159-B6AC-4D66-8176-D749E23F1545}
2011-07-22 10:30 . 2011-07-22 10:31 -------- d-----w- c:\users\blairon josé\AppData\Local\{A478D33F-AABB-49E8-9742-718F8E2539DB}
2011-07-21 10:16 . 2011-07-21 10:16 -------- d-----w- c:\users\blairon josé\AppData\Local\{F9A35B25-1B72-45BF-A4C9-A701D6934547}
2011-07-20 06:40 . 2011-07-20 06:40 -------- d-----w- c:\users\blairon josé\AppData\Local\{453086B5-E90B-437C-8BF7-F0A1DEBF61D6}
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-12 02:44 . 2010-05-13 21:21 7152464 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-06-15 07:18 . 2011-05-23 08:07 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-02 13:34 . 2011-07-13 18:22 2043392 ----a-w- c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live\tbMes2.dll" [2010-10-18 3908192]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France\tbMess.dll" [2010-11-13 3913000]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2011-02-01 141616]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{59994074-c06d-4a75-9768-49e5a8c21264}]
2010-11-13 20:58 3913000 ----a-w- c:\program files\Messenger_Plus_Live_France\tbMess.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9b339f6e-ddcd-401b-8764-230adbd01761}]
2010-10-18 10:26 3908192 ----a-w- c:\program files\Messenger_Plus_Live\tbMes2.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}]
2010-08-19 12:24 135840 ----a-w- c:\program files\Fluendo\Moovida\spointer\extensions\moovida_air_ie.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2011-02-01 13:58 1499440 ----a-r- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live\tbMes2.dll" [2010-10-18 3908192]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France\tbMess.dll" [2010-11-13 3913000]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-02-01 1499440]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{9B339F6E-DDCD-401B-8764-230ADBD01761}"= "c:\program files\Messenger_Plus_Live\tbMes2.dll" [2010-10-18 3908192]
"{59994074-C06D-4A75-9768-49E5A8C21264}"= "c:\program files\Messenger_Plus_Live_France\tbMess.dll" [2010-11-13 3913000]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-02-01 1499440]
.
[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]
.
[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"KiesTrayAgent"="c:\program files\Samsung\Kies\/\KiesTrayAgent.exe" [2010-10-27 3365176]
"MultiScreen"="c:\program files\MultiScreen\MultiScreen.exe" [2009-08-11 303104]
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2011-04-22 247728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KBD"="c:\hp\KBD\KbdStub.EXE" [2006-12-08 65536]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatchTray12.exe" [2009-07-24 240112]
"CPMonitor"="c:\program files\Roxio 2010\5.0\CPMonitor.exe" [2009-07-21 84464]
"Desktop Disc Tool"="c:\program files\Roxio 2010\Roxio Burn\RoxioBurnLauncher.exe" [2009-06-22 494064]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"pctuto"="c:\program files\PCTuto\pctuto.exe" [2011-04-14 982656]
"BabylonToolbar"="c:\program files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" [2010-11-07 286720]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2011-03-13 114992]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"PCDrProfiler"="c:\program files\PC-Doctor 5 for Windows\RunProfiler.exe" [2006-10-09 53248]
"autoupdater"="c:\users\blairon josé\AppData\Roaming\PCtuto\UpdatePCTuto\autoupdater.exe" [2011-04-14 663168]
.
c:\users\blairon jos'\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
GammaTray.lnk - c:\program files\MagicTune Premium\GammaTray.exe [2011-5-26 36864]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-1-2 210520]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-4-5 494920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
R1 MpKsl68d91f9d;MpKsl68d91f9d;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AC785E52-4AD9-4BE5-AA01-149EAF26162C}\MpKsl68d91f9d.sys [x]
R1 MpKsl8f7cacc2;MpKsl8f7cacc2;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3F19FBAF-A5E9-430D-828D-1FCFAECCB5A5}\MpKsl8f7cacc2.sys [x]
R1 MpKslba99dd25;MpKslba99dd25;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{3F19FBAF-A5E9-430D-828D-1FCFAECCB5A5}\MpKslba99dd25.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files\Common Files\Roxio Shared\12.0\SharedCOM\RoxWatch12.exe [2009-07-24 219632]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-10-25 18120]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2010-06-05 13224]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 65024]
R3 NisSrv;Inspection réseau Microsoft;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 208944]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB32.sys [2006-11-06 1119616]
R3 RoxMediaDB12;RoxMediaDB12;c:\program files\Common Files\Roxio Shared\12.0\SharedCOM\RoxMediaDB12.exe [2009-07-24 1116656]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-04-10 691696]
S0 SahdIa32;HDD Filter Driver;c:\windows\System32\Drivers\SahdIa32.sys [2009-06-01 21488]
S0 SaibIa32;Volume Filter Driver;c:\windows\System32\Drivers\SaibIa32.sys [2009-06-01 15856]
S1 MpKsl13561c32;MpKsl13561c32;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{ABE6383F-C589-4806-9F03-11782D32EF1B}\MpKsl13561c32.sys [2011-08-18 28752]
S1 SaibVd32;Virtual Disk Driver;c:\windows\system32\Drivers\SaibVd32.sys [2009-06-01 25584]
S2 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269;Roxio SAIB Service;c:\program files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe [2009-06-02 457200]
S2 FIXIO Service;FIXIO Service;c:\program files\FIXIO PC Utilities\FIXIO PC Cleaner\FIXIO Service.exe [2010-09-22 191600]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-12-22 217088]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2011-04-22 92592]
S3 3xHybrid;ASUSTek SAA713x PCI Card;c:\windows\system32\DRIVERS\3xHybrid.sys [2006-09-19 2807936]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2010-06-05 27632]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - MPKSL13561C32
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contenu du dossier 'Tâches planifiées'
.
2011-05-05 c:\windows\Tasks\Roxio PhotoShow Updater.job
- c:\program files\Roxio\PhotoShow\auto_updater_shim.exe [2009-06-24 02:21]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.searchcanvas.com/?ot=6
mStart Page = hxxp://www.searchcanvas.com/?ot=6
IE: &Envoyer à OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
IE: Télécharger en Utilisant &BitSpirit - c:\program files\BitSpirit\bsurl.htm
TCP: Interfaces\{277B084C-4402-4ED7-9C82-79627D90CB48}: NameServer = 80.118.192.111,80.118.196.41
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-18 11:57
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2011-08-18 12:00:47
ComboFix-quarantined-files.txt 2011-08-18 10:00
ComboFix2.txt 2011-08-18 08:43
.
Avant-CF: 26 080 026 624 octets libres
Après-CF: 26 050 764 800 octets libres
.
- - End Of File - - 82FBEDD88346C24FBCAE3C96D262AA88


pouvez-vous m'aider ?,

merci d'avance.