Cheval de troie détecté par AntiVir

sandrine99 -  
Narco!4 Messages postés 2446 Statut Contributeur -
Bonjour,
Je pense avoir été infectée par la clé usb d'un ami, depuis que je l'ai utilisée, Antivir détecte un cheval de troie appelé TR/Buzus.cpoy, localisé dans C:\Users\...\Local\Temp\*à chaque fois un fichier .exe différent*.
Je reçois des alertes par deux ou trois, quand mon ordi se reconnecte à internet ou sort de veille. Apparemment le supprimer ou le mettre en quarantaine n'empêche pas qu'il revienne à chaque fois, c'est pénible !
Je ne m'y connais pas trop, mais j'ai utilisé CleanUp... Ca n'arrange rien jusqu'ici.
Merci pour votre aide !
Configuration: Windows Vista
Firefox 3.5.5

5 réponses

  1. Narco!4 Messages postés 2446 Statut Contributeur 467
     
    Bonjour,

    télécharge GenProc http://www.genproc.com/GenProc.exe

    double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre
    1
  2. sandrine99
     
    Merci Narco, je suppose que tu veux ce rapport? Voilà ce qui s'est affiché à la fin du GenProc :

    Rapport GenProc 2.652 [1] - ven. 27/11/2009 à 18:41:40
    @ Windows VISTA Service Pack 1 - Acer, inc. - Mode normal
    @ Mozilla Firefox 3.5.5 (fr) [Navigateur par défaut]

    # Etape 1/ Télécharge :

    - CCleaner https://www.ccleaner.com/ccleaner/download (FileHippo). Ce logiciel va permettre de supprimer tous les fichiers temporaires. Lance-le et clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. Ferme le programme.

    - Toolbar-S&D http://eric71.geekstogo.com/tools/ToolBarSD.exe (Eric_71) sur ton Bureau.

    Redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/ ; Choisis ta session courante *** Sandrine *** (pour retrouver le rapport, clique sur le raccourci "Rapport GenProc[1]" sur ton bureau).

    # Etape 2/

    Lance Toolbar-S&D situé sur le Bureau. Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.

    # Etape 3/

    Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.

    # Etape 4/

    Redémarre normalement et poste, dans la même réponse :

    - Le contenu du rapport TB.txt situé dans C:\ ;
    - Un nouveau rapport ZHPDiag http://www.premiumorange.com/zeb-help-process/zhpdiag.html ;
    - Un nouveau rapport GenProc ;

    Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.

    ~~ Arguments de la procédure ~~

    # Détections [1] GenProc 2.652 ven. 27/11/2009 à 18:41:50
    Toolbar:le ven. 27/11/2009 à 18:42:39 "C:\Program Files\AskBarDis"

    ----------------------------------------------------------------------
    Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
    ----------------------------------------------------------------------

    ~~ Fin à 18:43:01 ~~
    0
  3. Narco!4 Messages postés 2446 Statut Contributeur 467
     
    suit ces manip
    0
    1. sandrine99
       
      -----------\\ ToolBar S&D 1.2.9 XP/Vista

      Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
      X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz )
      BIOS : ZY2 v0.3636 3F36
      USER : Sandrine ( Administrator )
      BOOT : Fail-safe boot
      C:\ (Local Disk) - NTFS - Total:226 Go (Free:106 Go)
      D:\ (Local Disk) - NTFS - Total:465 Go (Free:465 Go)
      E:\ (Local Disk) - NTFS - Total:226 Go (Free:226 Go)
      F:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
      Option : [2] ( ven. 27/11/2009|19:00 )

      [ UAC => 1 ]

      -----------\\ SUPPRESSION

      Supprime! - C:\Program Files\AskBarDis\bar
      Supprime! - C:\Program Files\AskBarDis\unins000.dat
      Supprime! - C:\Program Files\AskBarDis\unins000.exe
      Supprime! - C:\Program Files\AskBarDis

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g"
      "Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g"
      "Local Page"="C:\\Windows\\system32\\blank.htm"
      "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
      "Url"="http://go.microsoft.com/fwlink/?LinkId=75720"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Start Page"="https://www.msn.com/fr-fr/"
      "Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g"
      "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
      "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"


      --------------------\\ Recherche d'autres infections


      Aucune autre infection trouvée !

      [ UAC => 1 ]


      1 - "C:\ToolBar SD\TB_1.txt" - ven. 27/11/2009|19:01 - Option : [2]

      -----------\\ Fin du rapport a 19:01:18,19

      Rapport de ZHPDiag v1.24.33 par Nicolas Coolman
      Run by Sandrine at 27/11/2009 19:14:11
      Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
      Platform : Windows Vista (TM) Home Premium (6.0.6001) Service Pack 1
      MSIE: Internet Explorer v7.0.6001.18000
      MFIE: Mozilla Firefox (3.5.5)

      Boot mode: Normal (Normal boot)
      Total RAM: 3035 MB (63% free)
      System drive C: has 103 GB (45%) free of 226 GB

      ---\\ Processus lancés
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
      C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
      C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
      C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
      C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
      C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
      C:\Windows\PLFSetI.exe
      C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
      C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
      C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
      C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Acer\WR_PopUp\ProductReg.exe
      C:\Program Files\Electronic Arts\EADM\Core.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe

      ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
      F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
      F2 - REG:system.ini: Shell=explorer.exe

      ---\\ Pages de démarrage d'Internet Explorer (R0)
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/

      ---\\ Pages de recherche d'Internet Explorer (R1)
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

      ---\\ Browser Helper Objects de navigateur (O2)
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
      O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

      ---\\ Internet Explorer Toolbars (O3)
      O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll

      ---\\ Applications démarrées automatiquement par le registre (O4)
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
      O4 - HKLM\..\Run: [eAudio] C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
      O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
      O4 - HKLM\..\Run: [BkupTray] C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
      O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
      O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
      O4 - HKLM\..\Run: [ArcadeDeluxeAgent] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
      O4 - HKLM\..\Run: [CLMLServer] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
      O4 - HKLM\..\Run: [PlayMovie] C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
      O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
      O4 - HKCU\..\Run: [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe
      O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [Google Update] C:\Users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe" /c
      O4 - Global Startup: OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

      ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

      ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
      O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201
      O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll,103
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO

      ---\\ Protocole additionnel et piratage de protocole (O18)
      O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
      O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
      O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
      O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
      O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
      O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
      O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
      O18 - Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Windows\system32\mshtml.dll
      O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
      O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
      O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

      ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

      ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll

      ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
      O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

      ---\\ Tâches planifiées en automatique (O39)
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000Core.job
      O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000UA.job

      ---\\ Composants installés (ActiveSetup Installed Components) (O40)
      O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
      O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
      O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
      O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
      O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\wmpdxm.dll
      O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\system32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\system32\themeui.dll
      O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
      O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
      O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
      O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
      O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
      O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
      O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
      O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
      O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
      O40 - ASIC: Address Book 7 - {7790769C-0471-11d2-AF11-00C04FA35D02} - (not file)
      O40 - ASIC: .NET Framework - {7C028AF8-F614-47B3-82DA-BA94E41B1089} - (not file)
      O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
      O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
      O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
      O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
      O40 - ASIC: .NET Framework - {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - (not file)
      O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
      O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\system32\Macromed\Flash\Flash9f.ocx
      O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
      O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)

      ---\\ Logiciels installés (O42)
      O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1)
      O42 - Logiciel: Acer Arcade Deluxe
      O42 - Logiciel: Acer Crystal Eye Webcam 2.0.8
      O42 - Logiciel: Acer Empowering Technology
      O42 - Logiciel: Acer GameZone Console 2.0.1.1
      O42 - Logiciel: Acer GridVista
      O42 - Logiciel: Acer Mobility Center Plug-In
      O42 - Logiciel: Acer Product Registration
      O42 - Logiciel: Acer ScreenSaver
      O42 - Logiciel: Acer eAudio Management
      O42 - Logiciel: Acer eDataSecurity Management
      O42 - Logiciel: Acer ePower Management
      O42 - Logiciel: Acer eRecovery Management
      O42 - Logiciel: Acer eSettings Management
      O42 - Logiciel: Adobe Flash Player 10 Plugin
      O42 - Logiciel: Adobe Flash Player ActiveX
      O42 - Logiciel: Adobe Reader 9 - Français
      O42 - Logiciel: Agatha Christie Death on the Nile
      O42 - Logiciel: Agere Systems HDA Modem
      O42 - Logiciel: Alice Greenfingers
      O42 - Logiciel: Ask Toolbar
      O42 - Logiciel: Assistant de connexion Windows Live
      O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
      O42 - Logiciel: Azada
      O42 - Logiciel: Backspin Billiards
      O42 - Logiciel: Big Kahuna Reef
      O42 - Logiciel: Bricks of Egypt
      O42 - Logiciel: Broadcom Gigabit Integrated Controller
      O42 - Logiciel: CCleaner
      O42 - Logiciel: Caesar 3
      O42 - Logiciel: Cake Mania
      O42 - Logiciel: Chicken Invaders 3
      O42 - Logiciel: Choice Guard
      O42 - Logiciel: CleanUp!
      O42 - Logiciel: CyberLink PowerDirector
      O42 - Logiciel: Diner Dash Flo on the Go
      O42 - Logiciel: EA Download Manager
      O42 - Logiciel: FrostWire 4.18.1
      O42 - Logiciel: GIMP 2.6.7
      O42 - Logiciel: Galerie de photos Windows Live
      O42 - Logiciel: Google Desktop
      O42 - Logiciel: Google Talk Plugin
      O42 - Logiciel: Google Toolbar for Internet Explorer
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
      O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
      O42 - Logiciel: ILWIS 3.2 Academic
      O42 - Logiciel: Installation Windows Live
      O42 - Logiciel: Intel® Matrix Storage Manager
      O42 - Logiciel: JMicron JMB38X Flash Media Controller
      O42 - Logiciel: Java(TM) 6 Update 16
      O42 - Logiciel: Jewel Quest Solitaire
      O42 - Logiciel: Junk Mail filter update
      O42 - Logiciel: Kick N Rush
      O42 - Logiciel: Launch Manager
      O42 - Logiciel: Les Sims™ 3
      O42 - Logiciel: MSVCRT
      O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
      O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
      O42 - Logiciel: Mahjong Escape Ancient China
      O42 - Logiciel: Mahjongg Artifacts
      O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
      O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
      O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
      O42 - Logiciel: Microsoft Office Home and Student 2007
      O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007
      O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
      O42 - Logiciel: Microsoft Office Proof (Arabic) 2007
      O42 - Logiciel: Microsoft Office Proof (Dutch) 2007
      O42 - Logiciel: Microsoft Office Proof (English) 2007
      O42 - Logiciel: Microsoft Office Proof (French) 2007
      O42 - Logiciel: Microsoft Office Proof (German) 2007
      O42 - Logiciel: Microsoft Office Proof (Spanish) 2007
      O42 - Logiciel: Microsoft Office Proofing (French) 2007
      O42 - Logiciel: Microsoft Office Shared MUI (French) 2007
      O42 - Logiciel: Microsoft Office Suite Activation Assistant
      O42 - Logiciel: Microsoft Office Word MUI (French) 2007
      O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
      O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
      O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
      O42 - Logiciel: Microsoft WSE 3.0 Runtime
      O42 - Logiciel: Microsoft Works
      O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
      O42 - Logiciel: Mozilla Firefox (3.5.5)
      O42 - Logiciel: Mystery Case Files - Huntsville
      O42 - Logiciel: Mystery Solitaire - Secret Island
      O42 - Logiciel: NTI Backup Now 5
      O42 - Logiciel: NTI Media Maker 8
      O42 - Logiciel: NVIDIA Drivers
      O42 - Logiciel: OpenOffice.org 3.1
      O42 - Logiciel: Orion
      O42 - Logiciel: Outil de téléchargement Windows Live
      O42 - Logiciel: PhotoNow!
      O42 - Logiciel: Realtek High Definition Audio Driver
      O42 - Logiciel: Synaptics Pointing Device Driver
      O42 - Logiciel: Turbo Pizza
      O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
      O42 - Logiciel: Update for Office 2007 (KB946691)
      O42 - Logiciel: Utilitaires Sierra
      O42 - Logiciel: VLC media player 1.0.2
      O42 - Logiciel: WinRAR archiver
      O42 - Logiciel: Winbond CIR Device Drivers
      O42 - Logiciel: Windows Live Call
      O42 - Logiciel: Windows Live Communications Platform
      O42 - Logiciel: Windows Live Mail
      O42 - Logiciel: Windows Live Messenger
      O42 - Logiciel: Windows Live Sync
      O42 - Logiciel: Windows Live Writer
      O42 - Logiciel: Zuma Deluxe
      O42 - Logiciel: eSobi v2

      ---\\ Contenu des dossiers Fichiers Communs (O43)
      O43 - CFD:Common File Directory ----D- C:\Program Files\Acer
      O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Arcade Deluxe
      O43 - CFD:Common File Directory ----D- C:\Program Files\Acer GameZone
      O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Inc
      O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Incorporated
      O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
      O43 - CFD:Common File Directory ----D- C:\Program Files\Avira
      O43 - CFD:Common File Directory ----D- C:\Program Files\Big Kahuna Reef
      O43 - CFD:Common File Directory ----D- C:\Program Files\Broadcom
      O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
      O43 - CFD:Common File Directory ----D- C:\Program Files\CleanUp!
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
      O43 - CFD:Common File Directory ----D- C:\Program Files\Convesoft
      O43 - CFD:Common File Directory ----D- C:\Program Files\Cyberlink
      O43 - CFD:Common File Directory ----D- C:\Program Files\Electronic Arts
      O43 - CFD:Common File Directory ----D- C:\Program Files\eSobi
      O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
      O43 - CFD:Common File Directory ----D- C:\Program Files\FrostWire
      O43 - CFD:Common File Directory ----D- C:\Program Files\GIMP-2.0
      O43 - CFD:Common File Directory ----D- C:\Program Files\Google
      O43 - CFD:Common File Directory ----D- C:\Program Files\ILWIS 3.2 Academic
      O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
      O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
      O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
      O43 - CFD:Common File Directory ----D- C:\Program Files\Java
      O43 - CFD:Common File Directory ----D- C:\Program Files\JRE
      O43 - CFD:Common File Directory ----D- C:\Program Files\Launch Manager
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office Suite Activation Assistant
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft WSE
      O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
      O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
      O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
      O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
      O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
      O43 - CFD:Common File Directory ----D- C:\Program Files\NewTech Infosystems
      O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3
      O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
      O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
      O43 - CFD:Common File Directory ----D- C:\Program Files\Sierra On-Line
      O43 - CFD:Common File Directory ----D- C:\Program Files\Synaptics
      O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
      O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
      O43 - CFD:Common File Directory ----D- C:\Program Files\Winbond Electronics Corporation
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Calendar
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Collaboration
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Journal
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Gallery
      O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
      O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\muvee Technologies
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Oberon Media
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
      O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live

      ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
      O44 - LFC:Last File Created 1/11/2009 - 11:33:41 ---A- C:\Windows\System32\deploytk.dll
      O44 - LFC:Last File Created 1/11/2009 - 11:33:42 ---A- C:\Windows\System32\java.exe
      O44 - LFC:Last File Created 1/11/2009 - 11:33:42 ---A- C:\Windows\System32\javaw.exe
      O44 - LFC:Last File Created 1/11/2009 - 11:33:42 ---A- C:\Windows\System32\javaws.exe
      O44 - LFC:Last File Created 12/11/2009 - 13:52:51 ---A- C:\Windows\System32\FNTCACHE.DAT
      O44 - LFC:Last File Created 27/11/2009 - 19:01:18 ---A- C:\TB.txt
      O44 - LFC:Last File Created 27/11/2009 - 19:05:33 ---A- C:\Windows\ntbtlog.txt
      O44 - LFC:Last File Created 27/11/2009 - 19:06:29 -S-A- C:\Windows\bootstat.dat
      O44 - LFC:Last File Created 27/11/2009 - 19:06:45 ---A- C:\Windows\System32\agent.log
      O44 - LFC:Last File Created 27/11/2009 - 19:07:00 ---A- C:\Windows\System32\LogConfigTemp.xml
      O44 - LFC:Last File Created 27/11/2009 - 19:10:07 ---A- C:\Windows\WindowsUpdate.log
      O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\PerfStringBackup.INI
      O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfc009.dat
      O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfc00C.dat
      O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfh009.dat
      O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfh00C.dat
      O44 - LFC:Last File Created 29/10/2009 - 10:41:23 ---A- C:\Windows\System32\tzres.dll
      O44 - LFC:Last File Created 7/11/2009 - 15:52:21 RSHA- C:\IO.SYS
      O44 - LFC:Last File Created 7/11/2009 - 15:52:21 RSHA- C:\MSDOS.SYS
      O44 - LFC:Last File Created 7/11/2009 - 16:05:06 ---A- C:\Windows\SIERRA.INI
      O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\tmpcpyis.bat
      O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\tmpdelis.bat
      O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\wininit.ini
      O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\winstart.bat

      ---\\ MountPoints2 Shell Key (MPSK) (O51)
      O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\auto_run.exe
      O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\explore\command - H:\auto_run.exe
      O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\open\command - H:\auto_run.exe
      O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\AutoPlaY\command - H:\auto_run.exe

      ---\\ Trojan Driver Search Data (TDSD) (O52)
      O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"
      O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"
      O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"
      O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"
      O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"
      O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"
      O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"
      O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"
      O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"
      O52 - TDSD:HKLM\...\Drivers32\"VIDC.UYVY"="msyuv.dll"
      O52 - TDSD:HKLM\...\Drivers32\"VIDC.YUY2"="msyuv.dll"
      O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVYU"="msyuv.dll"
      O52 - TDSD:HKLM\...\Drivers32\"VIDC.IYUV"="iyuv_32.dll"
      O52 - TDSD:HKLM\...\Drivers32\"vidc.i420"="iyuv_32.dll"
      O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVU9"="tsbyuv.dll"
      O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm"
      O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"
      O52 - TDSD:HKLM\...\Drivers32\"MSVideo8"="VfWWDM32.dll"
      O52 - TDSD:HKLM\...\Drivers32\"wave1"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"midi1"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"mixer1"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"aux1"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll"
      O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv"
      O52 - TDSD:HKLM\...\Drivers32\"vidc.VP60"="C:\Windows\system32\vp6vfw.dll"
      O52 - TDSD:HKLM\...\Drivers32\"vidc.VP61"="C:\Windows\system32\vp6vfw.dll"
      O52 - TDSD:HKLM\...\drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec"
      O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio"
      O52 - TDSD:HKLM\...\drivers.desc\"vfwwdm32.dll"="WDM Video For Windows Capture Driver (Win32)"
      O52 - TDSD:HKLM\...\drivers.desc\"sirenacm.dll"="Messenger Audio Codec"
      O52 - TDSD:HKLM\...\drivers.desc\"vp6vfw.dll"="EA VP6 Codec"

      ---\\ Microsoft Windows Policies System (MWPS) (O55)
      O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
      O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
      O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
      O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
      O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
      O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
      O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
      O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
      O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0

      ---\\ Liste des Drivers Système (SDL) (O58)
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\1394bus.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\acpi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adp94xx.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpahci.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpu160m.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpu320.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\afd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AGP440.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AGRSM.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\aliide.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AMDAGP.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdide.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdk7.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdk8.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\arc.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\arcsas.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\asyncmac.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\atapi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ataport.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\avgntflt.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\avipbb.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\b57cdx.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\b57nd60x.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\battc.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bdasup.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\beep.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\blbdrive.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bowser.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrFiltLo.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrFiltUp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bridge.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrSerId.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrSerWdm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrUsbMdm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrUsbSer.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bthmodem.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cdfs.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cdrom.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\circlass.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Classpnp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\CmBatt.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cmdide.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\compbatt.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crashdmp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crcdisk.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crusoe.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dfsc.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\disk.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Diskdump.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\djsvs.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\DKbFltr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\drmk.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\drmkaud.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Dumpata.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxapi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxg.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxgkrnl.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\E1G60I32.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ecache.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\elxstor.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\errdev.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\exfat.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fastfat.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fdc.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fileinfo.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\filetrace.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\flpydisk.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fltMgr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fs_rec.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\FWPKCLNT.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\GAGP30KX.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hdaudbus.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HdAudio.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidbth.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidclass.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidir.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidparse.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidusb.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HpCISSs.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\http.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i2omgmt.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i2omp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i8042prt.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iaStor.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iaStorV.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iirsp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\int15.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\int15_64.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\intelide.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\intelppm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ipfltdrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\IPMIDrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ipnat.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\irda.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\irenum.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\isapnp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iteatapi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iteraid.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\jmcr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\kbdclass.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\kbdhid.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ks.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ksecdd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lltdio.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_fc.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_sas.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_scsi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\luafv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mcd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\megasas.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\MegaSR.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\modem.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\monitor.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mouclass.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mouhid.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mountmgr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mpio.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mpsdrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Mraid35x.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxdav.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb10.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb20.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msahci.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msdsm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msfs.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msisadrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msiscsi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mskssrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mspclock.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mspqm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msrpc.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mssmbios.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mstee.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mup.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndis.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndistapi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndisuio.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndiswan.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndproxy.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netbios.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netbt.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netio.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NETw5v32.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nfrd960.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\npfs.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nsiproxy.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ntfs.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NTIDrvr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ntrigdigi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\null.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvlddmkm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvraid.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvstor.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NV_AGP.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nwifi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ohci1394.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pacer.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\parport.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\partmgr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\parvdm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pci.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pciide.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pciidex.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pcmcia.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PEAuth.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\portcls.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\processr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\psdfilter.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PSDNServ.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PSDVdisk.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ql2300.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ql40xx.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\qwavedrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rasacd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rasl2tp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\raspppoe.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\raspptp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rassstp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdbss.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RDPCDD.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdpdr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RDPENCDD.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdpwd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rmcast.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RNDISMP.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rootmdm.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rspndr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RTKVHDA.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sbp2port.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\scsiport.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sdbus.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\secdrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\serenum.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\serial.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sermouse.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffdisk.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffp_mmc.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffp_sd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sfloppy.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\SISAGP.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sisraid2.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sisraid4.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\smb.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\smclib.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\spldr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\spsys.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srv2.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srvnet.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ssmdrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Storport.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\stream.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\swenum.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\symc8xx.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sym_hi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sym_u3.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\SynTP.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tape.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tcpip.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tcpipreg.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdpipe.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdtcp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdx.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\termdd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tssecsrv.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\TUNMP.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tunnel.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\TVicPort.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\UAGP35.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\UBHelper.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\udfs.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ULIAGPKX.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\uliahci.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ulsata.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ulsata2.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\umbus.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\umpass.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usb8023.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBCAMD.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBCAMD2.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbccgp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbcir.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbehci.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbhub.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbohci.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbport.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbprint.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBSTOR.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbuhci.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbvideo.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vga.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vgapnp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\VIAAGP.SYS
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\viac7.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\viaide.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\videoprt.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volmgr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volmgrx.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volsnap.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vsmraid.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wacompen.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wanarp.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\watchdog.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Wdf01000.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WdfLdr.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\winbondcir.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wmiacpi.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wmilib.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ws2ifsl.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WUDFPf.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WUDFRd.sys
      O58 - SDL:System Drivers List - C:\Windows\system32\drivers\zntport.sys

      ---\\ Liste des outils de nettoyage (LATC) (O63)
      O63 - Logiciel: GenProc
      O63 - Logiciel: Toolbar SD


      End of the scan: 701 lines


      J'ai laissé GenProc tourner 20 minutes, je n'ai toujours pas de rapport, je fais quoi?
      Merci!
      0
    2. sandrine99
       
      J'ai oublié de préciser, mes alertes continuent depuis le redémarrage...
      0
  4. Narco!4 Messages postés 2446 Statut Contributeur 467
     
    [*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
    [*] Double clique combofix.exe et suis les instructions.
    [*] Installe la console de récupération si proposé et continue.
    [*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt
    0
    1. sandrine99
       
      ComboFix 09-11-26.02 - Sandrine 27/11/2009 19:49.1.2 - x86
      Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.32.1036.18.3036.1811 [GMT 1:00]
      Lancé depuis: c:\users\Sandrine\Downloads\ComboFix.exe
      SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      c:\recycler\S-1-5-21-4402441603-5179222514-316502776-7385
      c:\recycler\S-1-5-21-4402441603-5179222514-316502776-7385\Desktop.ini
      c:\recycler\S-1-5-21-4402441603-5179222514-316502776-7385\ww32.exe
      c:\recycler\S-1-5-21-9240272074-5233535251-016798910-4563
      c:\windows\Suyin.reg

      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2009-10-27 au 2009-11-27 ))))))))))))))))))))))))))))))))))))
      .

      2009-11-27 19:00 . 2009-11-27 19:00 -------- d-----w- c:\users\Default\AppData\Local\temp
      2009-11-27 17:59 . 2009-11-27 18:01 -------- d-----w- C:\ToolBar SD
      2009-11-27 17:52 . 2009-11-27 17:52 -------- d-----w- c:\program files\CCleaner
      2009-11-27 17:41 . 2009-11-27 18:15 4096 d-----w- C:\GenProc
      2009-11-25 23:39 . 2009-10-29 09:41 2048 ----a-w- c:\windows\system32\tzres.dll
      2009-11-25 12:52 . 2009-08-10 11:01 1399296 ----a-w- c:\windows\system32\msxml6.dll
      2009-11-25 12:52 . 2009-08-10 11:00 1257472 ----a-w- c:\windows\system32\msxml3.dll
      2009-11-19 20:30 . 2009-11-19 20:30 4096 d-----w- c:\program files\CleanUp!
      2009-11-18 20:36 . 2009-11-18 20:36 -------- d-----w- c:\users\Sandrine\AppData\Local\CyberLink
      2009-11-18 20:35 . 2009-11-18 20:36 -------- d-----w- c:\users\Sandrine\AppData\Local\SoftDMA
      2009-11-18 20:35 . 2009-11-18 20:35 -------- d-----w- c:\users\Sandrine\AppData\Local\Acer Arcade Deluxe
      2009-11-18 20:35 . 2009-11-18 20:35 -------- d-----w- c:\users\Sandrine\AppData\Roaming\CyberLink
      2009-11-13 22:47 . 2009-11-13 22:47 -------- d-----w- C:\found.000
      2009-11-11 12:39 . 2009-08-14 13:53 2035712 ----a-w- c:\windows\system32\win32k.sys
      2009-11-11 12:39 . 2009-08-10 13:05 351232 ----a-w- c:\windows\system32\WSDApi.dll
      2009-11-10 23:28 . 2009-11-10 23:28 247280 ----a-w- c:\users\Sandrine\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
      2009-11-09 18:57 . 2009-11-09 18:57 -------- d-----w- c:\windows\Sun
      2009-11-07 15:12 . 2009-11-07 15:12 26 ----a-w- c:\windows\winstart.bat
      2009-11-07 15:12 . 2009-11-07 15:12 144 ----a-w- c:\windows\tmpcpyis.bat
      2009-11-07 15:12 . 2009-11-07 15:12 122 ----a-w- c:\windows\tmpdelis.bat
      2009-11-07 15:04 . 1998-06-10 12:07 1053184 ----a-w- c:\windows\system32\SierraNW.dll
      2009-11-07 15:04 . 1998-06-10 12:05 231936 ----a-w- c:\windows\system32\SNWValid.dll
      2009-11-07 15:04 . 2009-11-07 15:04 -------- d-----w- c:\windows\solcache
      2009-11-07 15:03 . 2009-11-07 15:05 -------- d-----w- C:\SIERRA
      2009-11-07 15:03 . 2009-11-07 15:04 4096 d-----w- c:\program files\Sierra On-Line
      2009-11-07 15:02 . 1998-01-23 11:20 305664 ----a-w- c:\windows\IsUn040c.exe
      2009-11-06 16:24 . 2009-11-06 16:24 0 ----a-w- c:\users\Sandrine\AppData\Roaming\FrostWire\.NetworkShare\Incomplete\T-4506256-LimeWireWin4.16.6.exe
      2009-11-06 16:13 . 2009-11-25 22:11 -------- d-----w- c:\users\Sandrine\AppData\Roaming\FrostWire
      2009-11-06 16:12 . 2009-11-06 16:13 24576 d-----w- c:\program files\FrostWire
      2009-11-05 09:31 . 2009-11-05 09:31 -------- d-----w- c:\users\Sandrine\Option
      2009-11-04 10:51 . 2009-08-07 02:24 44768 ----a-w- c:\windows\system32\wups2.dll
      2009-11-04 10:51 . 2009-08-07 02:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
      2009-11-04 10:51 . 2009-08-07 02:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll
      2009-11-04 10:51 . 2009-08-07 01:45 2421760 ----a-w- c:\windows\system32\wucltux.dll
      2009-11-04 10:51 . 2009-08-07 02:24 35552 ----a-w- c:\windows\system32\wups.dll
      2009-11-04 10:51 . 2009-08-07 02:23 575704 ----a-w- c:\windows\system32\wuapi.dll
      2009-11-04 10:51 . 2009-08-07 01:44 87552 ----a-w- c:\windows\system32\wudriver.dll
      2009-11-04 10:51 . 2009-08-06 18:23 171608 ----a-w- c:\windows\system32\wuwebv.dll
      2009-11-04 10:51 . 2009-08-06 17:44 33792 ----a-w- c:\windows\system32\wuapp.exe
      2009-11-01 10:39 . 2009-11-25 15:44 1 ----a-w- c:\users\Sandrine\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
      2009-11-01 10:39 . 2009-11-01 10:39 -------- d-----w- c:\users\Sandrine\AppData\Roaming\OpenOffice.org
      2009-11-01 10:35 . 2009-11-01 10:35 -------- d-----w- c:\program files\JRE
      2009-11-01 10:34 . 2009-11-01 10:35 4096 d-----w- c:\program files\OpenOffice.org 3
      2009-11-01 10:33 . 2009-11-01 10:33 411368 ----a-w- c:\windows\system32\deploytk.dll
      2009-11-01 10:33 . 2009-11-01 10:33 -------- d-----w- c:\program files\Java
      2009-10-28 21:08 . 2009-09-10 15:21 310784 ----a-w- c:\windows\system32\unregmp2.exe
      2009-10-28 21:08 . 2009-09-10 15:21 8147456 ----a-w- c:\windows\system32\wmploc.DLL

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2009-11-27 18:13 . 2008-01-21 08:40 669566 ----a-w- c:\windows\system32\perfh00C.dat
      2009-11-27 18:13 . 2008-01-21 08:40 123556 ----a-w- c:\windows\system32\perfc00C.dat
      2009-11-27 18:06 . 2009-10-19 14:46 32156 ----a-w- c:\programdata\nvModes.dat
      2009-11-26 18:59 . 2009-10-19 13:54 680 ----a-w- c:\users\Sandrine\AppData\Local\d3d9caps.dat
      2009-11-25 23:38 . 2009-10-19 16:43 4096 d-----w- c:\users\Sandrine\AppData\Roaming\vlc
      2009-11-19 15:05 . 2009-10-26 14:36 -------- d-----w- c:\users\Sandrine\AppData\Roaming\gtk-2.0
      2009-11-12 12:51 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail
      2009-11-08 22:54 . 2009-10-19 20:21 4096 d-----w- c:\users\Sandrine\AppData\Roaming\dvdcss
      2009-11-08 12:24 . 2009-10-19 14:45 -------- d-----w- c:\programdata\NVIDIA
      2009-11-01 10:50 . 2009-10-19 13:56 75456 ----a-w- c:\users\Sandrine\AppData\Local\GDIPFONTCACHEV1.DAT
      2009-10-26 15:16 . 2009-01-10 15:20 8192 d--h--w- c:\program files\InstallShield Installation Information
      2009-10-24 08:53 . 2009-10-24 08:53 -------- d-----w- c:\program files\GIMP-2.0
      2009-10-23 08:57 . 2009-10-20 15:17 -------- d-----w- c:\program files\Electronic Arts
      2009-10-20 15:44 . 2009-10-20 15:44 -------- d-----w- c:\programdata\Electronic Arts
      2009-10-20 15:36 . 2009-10-20 15:36 10134 ----a-r- c:\users\Sandrine\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
      2009-10-20 15:36 . 2009-10-20 15:36 -------- d-----w- c:\program files\Microsoft WSE
      2009-10-19 18:15 . 2009-10-19 17:38 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
      2009-10-19 18:14 . 2009-10-19 18:14 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
      2009-10-19 17:38 . 2009-10-19 17:38 -------- d-----w- c:\programdata\Avira
      2009-10-19 17:38 . 2009-10-19 17:38 -------- d-----w- c:\program files\Avira
      2009-10-19 17:13 . 2009-01-10 15:45 4096 d-----w- c:\program files\Google
      2009-10-19 17:13 . 2009-01-10 15:33 4096 d-----w- c:\programdata\McAfee
      2009-10-19 16:48 . 2009-10-19 16:48 0 ----a-w- c:\windows\nsreg.dat
      2009-10-19 16:42 . 2009-10-19 16:42 -------- d-----w- c:\program files\VideoLAN
      2009-10-19 16:19 . 2009-10-19 16:19 -------- d-----w- c:\programdata\WindowsSearch
      2009-10-19 14:37 . 2009-10-19 14:37 -------- d-----w- c:\program files\Acer Incorporated
      2009-10-19 14:36 . 2009-01-10 16:30 -------- d-----w- c:\program files\Cyberlink
      2009-10-19 14:29 . 2009-10-19 14:25 4096 d-----w- c:\program files\Acer Arcade Deluxe
      2009-10-19 14:27 . 2009-10-19 14:27 -------- d-----w- c:\programdata\CyberLink
      2009-10-19 14:22 . 2009-10-19 14:22 -------- d-----w- c:\program files\Acer Inc
      2009-10-19 14:19 . 2009-10-19 14:19 4096 d-----w- c:\program files\Launch Manager
      2009-10-19 14:16 . 2009-01-10 15:17 -------- d-----w- c:\program files\Intel
      2009-10-19 14:15 . 2009-10-19 14:15 -------- d-----w- c:\users\Sandrine\AppData\Roaming\InstallShield
      2009-10-19 13:55 . 2009-01-10 15:32 -------- d-----w- c:\program files\Acer
      2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\program files\Fichiers communs
      2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Modèles
      2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Menu Démarrer
      2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Favoris
      2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Bureau
      2009-09-14 09:44 . 2009-10-19 16:22 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
      2009-09-10 17:30 . 2009-10-19 16:25 213504 ----a-w- c:\windows\system32\msv1_0.dll
      2009-09-04 12:24 . 2009-10-19 16:22 61440 ----a-w- c:\windows\system32\msasn1.dll
      2009-08-31 13:55 . 2009-10-19 16:28 293376 ----a-w- c:\windows\system32\psisdecd.dll
      2009-08-31 13:55 . 2009-10-19 16:28 428544 ----a-w- c:\windows\system32\EncDec.dll
      .

      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
      @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
      [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
      2008-03-04 22:38 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-11-17 135168]
      "EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-09-03 3342336]
      "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-19 68856]
      "Google Update"="c:\users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-11-24 135664]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
      "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
      "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-01-10 24064]
      "eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
      "eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-03-07 544768]
      "ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-04-23 397312]
      "BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-06 34040]
      "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
      "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-20 182808]
      "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-28 13601312]
      "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-28 92704]
      "LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-07-02 821768]
      "PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
      "ArcadeDeluxeAgent"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2008-05-12 147456]
      "CLMLServer"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe" [2008-05-12 167936]
      "PlayMovie"="c:\program files\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2008-05-12 167936]
      "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
      "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-01 149280]
      "RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-04-28 6111232]

      c:\users\Sandrine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
      OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-8-18 384000]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "EnableUIADesktopToggle"= 0 (0x0)

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
      "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
      "aux"=wdmaud.drv

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
      @=""

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
      @="Service"

      R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl [19/10/2009 15:27 61424]
      R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [19/10/2009 18:38 108289]
      R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [3/03/2008 13:11 16384]
      R2 CLHNService;CLHNService;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [19/10/2009 15:29 81504]
      R2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [10/01/2009 16:32 24576]
      R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [6/04/2008 22:42 50424]
      R2 NTIPPKernel;NTIPPKernel;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [19/10/2009 15:29 122368]
      R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [28/03/2008 4:44 210432]
      R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [10/01/2009 23:23 81296]
      R3 NETw5v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits ;c:\windows\System32\drivers\NETw5v32.sys [10/01/2009 23:23 3658752]
      R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [28/03/2007 7:51 43008]
      S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [4/04/2008 3:03 131072]
      S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [10/01/2009 16:45 24064]
      .
      Contenu du dossier 'Tâches planifiées'

      2009-11-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000Core.job
      - c:\users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-24 22:51]

      2009-11-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000UA.job
      - c:\users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-24 22:51]
      .
      .
      ------- Examen supplémentaire -------
      .
      uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g
      mWindow Title =
      IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
      FF - ProfilePath - c:\users\Sandrine\AppData\Roaming\Mozilla\Firefox\Profiles\8ra80007.default\
      FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
      FF - plugin: c:\users\Sandrine\AppData\Local\Google\Update\1.2.183.13\npGoogleOneClick8.dll
      FF - plugin: c:\users\Sandrine\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
      FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

      ---- PARAMETRES FIREFOX ----
      c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
      .
      - - - - ORPHELINS SUPPRIMES - - - -

      WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - (no file)
      HKLM-Run-eRecoveryService - (no file)
      AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe
      AddRemove-GridVista - c:\windows\GVUni.exe GridV.UNI
      AddRemove-HijackThis - c:\genproc\Outil\HijackThis.exe
      AddRemove-LManager - c:\windows\UnInst32.exe QtZgAcer.UNI
      AddRemove-NVIDIA Drivers - c:\windows\system32\NVUNINST.EXE UninstallGUI
      AddRemove-Utilitaires Sierra - c:\program files\Sierra On-Line\sutil32.exe uninstall



      **************************************************************************

      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2009-11-27 20:03
      Windows 6.0.6001 Service Pack 1 NTFS

      Recherche de processus cachés ...

      Recherche d'éléments en démarrage automatique cachés ...

      Recherche de fichiers cachés ...

      Scan terminé avec succès
      Fichiers cachés: 0

      **************************************************************************

      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
      "ImagePath"="\??\c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl"
      .
      --------------------- CLES DE REGISTRE BLOQUEES ---------------------

      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000
      .
      --------------------- DLLs chargées dans les processus actifs ---------------------

      - - - - - - - > 'Explorer.exe'(3768)
      c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
      c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
      .
      ------------------------ Autres processus actifs ------------------------
      .
      c:\windows\system32\nvvsvc.exe
      c:\windows\system32\rundll32.exe
      c:\windows\system32\agrsmsvc.exe
      c:\program files\Avira\AntiVir Desktop\avguard.exe
      c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
      c:\program files\Common Files\LightScribe\LSSrvc.exe
      c:\acer\Mobility Center\MobilityService.exe
      c:\program files\Cyberlink\Shared files\RichVideo.exe
      c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
      c:\windows\system32\wbem\unsecapp.exe
      c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
      c:\windows\servicing\TrustedInstaller.exe
      .
      **************************************************************************
      .
      Heure de fin: 2009-11-27 20:08 - La machine a redémarré
      ComboFix-quarantined-files.txt 2009-11-27 19:08

      Avant-CF: 110.934.077.440 octets libres
      Après-CF: 110.776.827.904 octets libres

      - - End Of File - - 200EEBE1000B1F9B0C99FBB3F168D281
      0
      1. sandrine99 > sandrine99
         
        A priori Combokix semble avoir réglé mes problèmes.... :)
        Si les alertes recommencent je reviens, en attendant je peux mettre ce post en résolu.
        Merci Narco !
        0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Narco!4 Messages postés 2446 Statut Contributeur 467
     
    - Un nouveau rapport GenProc ;
    0