Bonjour,
problème de lag graphique et de ping ,mon pc rame sur tous les jeux .test
3dmark lamentable 1940pts
config carte mere p5ld2 assus 4go ram alim 530w bequiet p4 4630 3ghtz carte grap gtx 260
merci si vous pouvez me déchiffrer le texte .byebye
ComboFix 09-10-24.01 - Propriétaire 25/10/2009 9:41.1.2 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.33.1036.18.3199.2752 [GMT 1:00]
Lancé depuis: f:\ram booster\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\patch.exe
c:\windows\system32\Data
c:\windows\system32\Ijl11.dll
Une copie infectée de c:\windows\system32\drivers\atapi.sys a été trouvée et désinfectée
Copie restaurée à partir de - Kitty ate it :^)
.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-25 au 2009-10-25 ))))))))))))))))))))))))))))))))))))
.
2009-10-24 20:00 . 2004-06-22 13:44 5632 ----a-w- c:\windows\system32\drivers\Entech64.sys
2009-10-24 20:00 . 2001-11-19 17:05 3972 ----a-w- c:\windows\system32\drivers\PciBus.sys
2009-10-24 20:00 . 2009-10-24 20:00 -------- d-----w- c:\windows\system32\Futuremark
2009-10-24 19:59 . 2009-10-24 19:59 -------- d-----w- c:\program files\Futuremark
2009-10-23 13:07 . 2004-06-14 12:56 427864 ----a-w- c:\windows\system32\XceedZip.dll
2009-10-23 13:07 . 2009-10-23 13:07 -------- d-----w- c:\program files\Driver-Soft
2009-10-23 12:35 . 2009-10-23 12:35 -------- d-----w- c:\program files\Double Driver
2009-10-09 14:02 . 2009-10-09 14:04 -------- d-----w- c:\documents and settings\All Users\Application Data\WinZip
2009-09-27 16:19 . 2009-09-27 16:19 3674112 ----a-w- c:\windows\system32\nvwssr.dll
2009-09-27 14:12 . 2009-09-27 14:12 888832 ----a-w- c:\windows\system32\nvapi.dll
2009-09-27 14:12 . 2009-09-27 14:12 2194024 ----a-w- c:\windows\system32\nvcuvid.dll
2009-09-27 14:12 . 2009-09-27 14:12 2007040 ----a-w- c:\windows\system32\nvcuda.dll
2009-09-27 14:12 . 2009-09-27 14:12 1714792 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-09-27 14:12 . 2009-09-27 14:12 170600 ----a-w- c:\windows\system32\nvcodins.dll
2009-09-27 14:12 . 2009-09-27 14:12 170600 ----a-w- c:\windows\system32\nvcod.dll
2009-09-27 14:12 . 2009-09-27 14:12 1604482 ----a-w- c:\windows\system32\nvdata.bin
2009-09-27 14:12 . 2009-09-27 14:12 10756096 ----a-w- c:\windows\system32\nvoglnt.dll
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-25 09:17 . 2009-10-25 09:15 5524 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2009-10-25 09:17 . 2004-08-21 14:16 94286 ----a-w- c:\windows\system32\perfc00C.dat
2009-10-25 09:17 . 2004-08-21 14:16 535596 ----a-w- c:\windows\system32\perfh00C.dat
2009-10-25 09:15 . 2007-07-15 08:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-10-24 22:00 . 2009-09-02 14:12 -------- d-----w- c:\program files\PokerStars
2009-10-24 20:01 . 2009-06-07 07:10 86016 ----a-w- c:\windows\system32\OpenAL32.dll
2009-10-24 19:59 . 2005-11-26 09:24 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-10-24 17:24 . 2006-07-14 12:11 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-10-18 17:00 . 2009-09-19 17:10 -------- d-----w- c:\program files\NVIDIA Corporation
2009-10-17 21:09 . 2009-09-18 18:19 704272 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-10-17 10:09 . 2007-05-27 20:57 -------- d-----w- c:\program files\Azureus
2009-10-16 21:23 . 2008-06-14 18:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-10-16 12:27 . 2009-07-30 17:05 108059 ----a-w- c:\windows\system32\drivers\klin.dat
2009-10-16 12:26 . 2009-07-30 17:05 95259 ----a-w- c:\windows\system32\drivers\klick.dat
2009-09-27 16:19 . 2009-09-27 16:19 3166208 ----a-w- c:\windows\system32\nvwss.dll
2009-09-27 14:12 . 2009-06-10 10:33 7655872 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2009-09-27 14:12 . 2009-06-10 10:33 5900416 ----a-w- c:\windows\system32\nv4_disp.dll
2009-09-19 18:45 . 2009-09-19 18:45 -------- d-----w- c:\program files\AGEIA Technologies
2009-09-19 18:45 . 2009-09-19 18:45 -------- d-----w- c:\program files\Fichiers communs\Wise Installation Wizard
2009-09-19 17:10 . 2009-09-19 17:10 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2009-09-19 16:43 . 2009-09-19 16:39 7912 ----a-w- c:\windows\system32\d3d9caps.dat
2009-09-19 10:26 . 2009-09-19 10:26 -------- d-----w- c:\program files\Lavalys
2009-09-18 13:52 . 2005-11-27 20:10 -------- d-----w- c:\program files\MSN Messenger
2009-09-18 13:51 . 2009-09-18 13:51 -------- d-----w- c:\program files\Microsoft
2009-09-18 13:51 . 2008-09-19 20:22 -------- d-----w- c:\program files\Windows Live
2009-09-18 13:50 . 2009-09-18 13:50 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-09-18 13:47 . 2009-09-18 13:47 -------- d-----w- c:\program files\Fichiers communs\Windows Live
2009-09-18 11:05 . 2009-09-18 11:05 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2009-09-12 21:12 . 2009-09-12 21:12 -------- d-----w- c:\program files\VDOWNLOADER
2009-09-11 19:21 . 2009-09-11 19:20 -------- d-----w- c:\program files\Ask.com
2009-09-11 14:12 . 2004-08-04 00:54 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-10 17:04 . 2009-05-02 07:14 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-04 20:46 . 2004-08-04 00:54 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 07:56 . 2004-08-04 00:54 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-26 08:15 . 2004-08-04 00:54 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-14 11:36 . 2009-08-14 11:36 70936 ----a-w- c:\windows\system32\PhysXLoader.dll
2009-08-07 17:51 . 2009-08-07 17:51 15308424 ----a-w- c:\windows\system32\xlive.dll
2009-08-07 17:51 . 2009-08-07 17:51 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-08-05 09:06 . 2004-08-04 00:54 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 17:52 . 2009-08-04 17:52 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-08-04 17:16 . 2004-08-04 00:48 2144768 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-08-04 17:16 . 2004-08-04 00:49 2022912 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-07-30 17:11 . 2009-07-30 17:11 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
1995-09-20 15:16 . 2006-03-18 14:25 456976 ----a-w- c:\program files\Fichiers communs\dao3032.dll
2006-03-07 18:19 . 2006-03-07 18:19 8192 --sha-w- c:\windows\o2cLicStore.bin
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-05-19 11:37 1144712 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-05-19 1144712]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-05-19 1144712]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-01 39408]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2008-09-12 69632]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Creative Fatal1ty 1010 Mouse"="c:\program files\Creative\Fatal1ty 1010 Mouse\CTPoint.exe" [2006-01-04 221184]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"BigDogPath"="c:\windows\VM_STI.EXE" [2004-06-09 40960]
"Diamondback"="c:\program files\Razer\Diamondback\razerhid.exe" [2007-02-14 147456]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2009-09-23 1657448]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-09-27 13918208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-09-27 86016]
"avp"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" [2009-07-03 303376]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-10-16 16855552]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Windows Desktop Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2007-2-5 118784]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"c:\\Valve\\Steam\\SteamApps\\camchris\\condition zero\\hl.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\counter-strike\\hl.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\counter-strike source\\hl2.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\half-life deathmatch source\\hl2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\half-life 2 deathmatch\\hl2.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\valve\\Steam\\Steam.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\deathmatch classic\\hl.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\team fortress 2\\hl2.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\day of defeat source\\hl2.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\source sdk base\\hl2.exe"=
"c:\\Program Files\\Azureus\\Azureus.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=
"c:\\Program Files\\OrangeHSS\\Connectivity\\ConnectivityManager.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\trackmania nations forever\\TmForever.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\trackmania nations forever\\TmForeverLauncher.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\left 4 dead demo\\left4dead.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\peggle extreme\\PeggleExtreme.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\zuma deluxe\\Zuma.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\bejeweled 2 deluxe\\WinBej2.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\chuzzle deluxe\\Chuzzle.exe"=
"c:\\valve\\Steam\\SteamApps\\camchris\\condition zero deleted scenes\\hl.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\insaniquarium deluxe\\InsaniquariumDeluxe.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\penumbra overture\\redist\\Penumbra.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\penumbra black plague\\redist\\Penumbra.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\red faction\\RedFaction.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\red faction\\RF.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\red faction guerrilla\\rfg_launcher.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\left 4 dead\\left4dead.exe"=
"c:\\valve\\Steam\\SteamApps\\common\\killingfloor\\System\\KillingFloor.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"2799:UDP"= 2799:UDP:*:Disabled:Altova License Metering Port (UDP)
"2799:TCP"= 2799:TCP:*:Disabled:Altova License Metering Port (TCP)
"6881:TCP"= 6881:TCP:azureus
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [15/12/2008 19:41 33808]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [13/05/2009 16:46 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [16/05/2009 19:59 19472]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [29/04/2009 17:55 233472]
S3 CtUsbMs;Creative HID USB Filter Driver;c:\windows\system32\drivers\CtUsbMs.sys [01/09/2006 10:20 14720]
S3 FsUsbExDisk;FsUsbExDisk;\??\c:\windows\system32\FsUsbExDisk.SYS --> c:\windows\system32\FsUsbExDisk.SYS [?]
S3 kbeepm;kbeepm;\??\c:\docume~1\PROPRI~1\LOCALS~1\Temp\kbeepm.sys --> c:\docume~1\PROPRI~1\LOCALS~1\Temp\kbeepm.sys [?]
S3 PciCon;PciCon;\??\e:\pcicon.sys --> e:\PciCon.sys [?]
S4 msvsmon80;Visual Studio 2005 Remote Debugger;c:\program files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [23/09/2005 06:01 2799808]
--- Autres Services/Pilotes en mémoire ---
*NewlyCreated* - FSUSBEXDISK
.
Contenu du dossier 'Tâches planifiées'
2009-07-19 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
2009-10-24 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2009-05-19 11:37]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.orange.fr/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Ajouter à l'Anti-bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: mappy.com
Trusted Zone: orange.fr
Trusted Zone: voila.fr\rw.search.ke
Trusted Zone: weborama.fr\orange
Handler: msell2 - {9367D24B-8506-471A-915A-CFBB4BCEB631} - c:\program files\Fichiers communs\Microsoft Shared\Reference Titles\MSELL2.dll
FF - ProfilePath - c:\documents and settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\2m1svl0q.default\
FF - prefs.js: browser.search.selectedEngine - Live Search
FF - prefs.js: browser.startup.homepage - hxxp://www.msn.fr/
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIMWA2&q=
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -
HKLM-Run-NPSStartup - (no file)
AddRemove-Kellogg's Arctique - G:\Uninstal.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2009-10-25 10:14
Windows 5.1.2600 Service Pack 2 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_USERS\S-1-5-21-746137067-1715567821-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:a8,7a,39,90,6a,06,af,48,00,31,76,59,05,46,6a,18,d6,dd,6a,8d,26,24,b9,
c2,7f,e6,34,7c,39,a6,25,5f,ed,45,85,2e,25,92,58,ca,cd,41,a1,ac,b9,45,61,48,\
"??"=hex:03,19,76,33,70,8c,2e,19,d1,71,a8,71,bc,15,cf,05
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\ð•€|ÿÿÿÿ.•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'explorer.exe'(2304)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll
c:\windows\system32\ConnAPI.DLL
c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_fre.nlr
c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\progra~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\HPZipm12.exe
c:\windows\system32\SearchIndexer.exe
c:\combofix\CF21087.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\Razer\Diamondback\razerofa.exe
c:\combofix\PEV.cfxxe
.
**************************************************************************
.
Heure de fin: 2009-10-25 10:30 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-10-25 09:30
Avant-CF: 21 666 070 528 octets libres
Après-CF: 22 008 238 080 octets libres
- - End Of File - - 03C7AAAAA1203E7A04CA4149CFF8C719
Afficher la suite