Mon ordi est très lent (Hijackthis log)

delmike Messages postés 6 Statut Membre -  
delmike Messages postés 6 Statut Membre -
Bonjour,

J'ai un problème depuis quelques temps... mon ordinateur est TRÈS TRÈS TRÈS lent.

J'ai un P4 3.0ghz, avec 2 go de ram. j'ai installé Win7 dernièrement. Tout a bien été pendant quelques semaines, mais après... TRÈS TRÈS TRÈS LENT.

j'ai scanné avec Avast 5, Spybot, Malwarebytes, ils trouvent rien.

Au début j'avais installé Ad-Aware, mais je suis incapable de le lancer. (Fenêtre de chargement qui apparrait, mais rien ne se passe.)

même ma connection internet est ralentie. (J'ai vidéotron TGV 50 (50 mbps) mais elle ne roule qu'a 5 mbps.)

J'ai fait un scan Hijackthis, mais je suis incapable de supprimer les processus que je soupsonne être louche.

je demande votre aide.

Voici mon scan Hjt:

Mike

Configuration: Windows 7 / Internet Explorer 8.0


--
Mike The Geek
As Seen on TruckstopQuebec

5 réponses

  1. delmike Messages postés 6 Statut Membre
     
    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 11:18:38, on 2010-08-08
    Platform: Windows 7 (WinNT 6.00.3504)
    MSIE: Internet Explorer v8.00 (8.00.7600.16385)
    Boot mode: Safe mode with network support

    Running processes:
    C:\Windows\Explorer.EXE
    C:\Windows\system32\ctfmon.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    0
  2. delmike Messages postés 6 Statut Membre
     
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
    O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
    O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKLM\..\Run: [PrnStatusMX] C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
    O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
    O9 - Extra button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
    O9 - Extra 'Tools' menuitem: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://www.ma-config.com/plugins/MaConfig_4_1_0_3.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    0
  3. delmike Messages postés 6 Statut Membre
     
    O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
    O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
    O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
    O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe
    O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe
    O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe
    O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com\maconfservice.exe
    O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
    O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
    O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: NIHardwareService - Native Instruments GmbH - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
    O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: PS3 Media Server - Unknown owner - C:\Program Files\PS3 Media Server\win32\service\wrapper.exe
    O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
    O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe
    O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (StiSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
    O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
    O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe
    O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
    O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
    O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

    End of file - 20662 bytes

    Comme vous pouvez voir, il y a une tonne de services svchost.exe que je ne peux supprimer...

    merci de votre aide

    Mike
    0
  4. delmike Messages postés 6 Statut Membre
     
    Voici le Log ComboFix que je viens de générer:

    ComboFix 10-08-08.01 - Mike 2010-08-08 16:49:16.1.1 - x86
    Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.2.1036.18.1536.859 [GMT -4:00]
    Lancé depuis: c:\users\Mike\Downloads\ComboFix.exe
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Service_osppsvc

    ((((((((((((((((((((((((((((( Fichiers créés du 2010-07-08 au 2010-08-08 ))))))))))))))))))))))))))))))))))))
    .

    2010-08-08 21:12 . 2010-08-08 21:12 -------- d-----w- c:\users\Default\AppData\Local\temp
    2010-08-08 16:30 . 2010-08-08 18:18 -------- d-----w- c:\programdata\Spybot - Search & Destroy
    2010-08-08 16:30 . 2010-08-08 16:37 -------- d-----w- c:\program files\Spybot - Search & Destroy
    2010-08-08 14:51 . 2010-08-08 14:51 -------- d-----w- c:\program files\Trend Micro
    2010-08-08 01:03 . 2010-08-08 01:03 -------- d-----w- c:\program files\VirtualDJ
    2010-08-05 02:14 . 2010-08-05 02:14 -------- d-----w- c:\programdata\CyberLink
    2010-08-05 02:13 . 2010-08-05 02:13 -------- d-----w- c:\program files\Common Files\CyberLink
    2010-08-05 02:07 . 2010-08-05 02:13 -------- d-----w- c:\program files\CyberLink
    2010-08-05 02:07 . 2010-08-05 02:06 29480 ----a-w- c:\windows\system32\msxml3a.dll
    2010-08-05 01:51 . 2010-08-05 01:51 -------- d-----w- c:\program files\DVD Region+CSS Free
    2010-08-05 01:16 . 2010-08-05 01:41 -------- d-----w- c:\programdata\SlySoft
    2010-08-05 01:13 . 2010-08-05 01:13 -------- d-----w- c:\program files\SlySoft
    2010-08-04 01:09 . 2010-08-04 01:10 -------- d-----w- c:\program files\QuickTime
    2010-08-04 01:09 . 2010-08-04 01:09 -------- d-----w- c:\programdata\Apple Computer
    2010-08-04 01:06 . 2010-08-04 01:06 -------- d-----w- c:\program files\Common Files\Apple
    2010-08-04 01:06 . 2010-08-04 01:06 -------- d-----w- c:\users\Mike\AppData\Local\Apple
    2010-08-04 01:06 . 2010-08-04 01:06 -------- d-----w- c:\program files\Apple Software Update
    2010-08-04 01:06 . 2010-08-04 01:06 -------- d-----w- c:\programdata\Apple
    2010-07-25 19:12 . 2010-07-25 19:12 -------- d-----w- c:\users\Mike\AppData\Roaming\WildTangent
    2010-07-25 19:08 . 2010-07-25 19:14 -------- d-----w- c:\programdata\WildTangent
    2010-07-25 19:08 . 2010-07-25 19:12 -------- d-----w- c:\program files\WildGames
    2010-07-25 01:24 . 2010-07-25 01:24 -------- d-----w- c:\program files\AviSynth 2.5
    2010-07-25 00:55 . 2010-07-25 00:55 -------- d-----w- c:\program files\Java
    2010-07-24 21:02 . 2010-07-24 21:08 -------- d-----w- c:\users\Mike\AppData\Roaming\PreSonus
    2010-07-24 21:02 . 2009-03-19 20:32 23400 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
    2010-07-24 21:02 . 2008-04-17 16:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
    2010-07-24 21:02 . 2010-07-24 21:02 -------- d-----w- c:\programdata\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
    2010-07-24 21:00 . 2010-07-24 21:00 -------- d-----w- c:\program files\PreSonus
    2010-07-24 00:58 . 2010-07-24 00:58 -------- d-----w- c:\users\Mike\AppData\Local\cache
    2010-07-24 00:57 . 2010-07-24 01:06 -------- d-----w- c:\users\Mike\AppData\Local\FullTiltPoker
    2010-07-24 00:56 . 2010-07-25 18:59 -------- d-----w- c:\program files\Full Tilt Poker
    2010-07-22 00:03 . 2010-07-22 00:03 -------- d-----w- c:\program files\Chronotron Inc
    2010-07-22 00:01 . 2009-09-04 21:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
    2010-07-22 00:01 . 2006-09-28 20:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
    2010-07-22 00:00 . 2010-07-22 00:00 -------- d-----w- c:\program files\Winamp Detect
    2010-07-21 23:59 . 2010-07-21 23:59 -------- d-----w- c:\program files\Common Files\PX Storage Engine
    2010-07-21 23:59 . 2010-07-30 00:24 -------- d-----w- c:\users\Mike\AppData\Roaming\Winamp
    2010-07-21 23:59 . 2010-07-22 00:03 -------- d-----w- c:\program files\Winamp
    2010-07-20 02:20 . 2010-07-20 02:20 -------- d-----w- c:\users\Mike\AppData\Local\Mozilla
    2010-07-13 03:53 . 2009-12-08 11:32 292864 ----a-w- c:\windows\system32\apphelp.dll
    2010-07-11 21:55 . 2010-07-13 23:52 -------- d-----w- c:\programdata\VirtualizedApplications
    2010-07-11 19:49 . 2010-07-11 19:49 -------- d-----r- C:\MSOCache
    2010-07-11 19:43 . 2010-07-11 19:43 -------- d-----w- c:\users\Mike\AppData\Local\SoftGrid Client
    2010-07-11 19:42 . 2010-08-08 13:51 -------- d-----w- c:\users\Mike\AppData\Roaming\SoftGrid Client
    2010-07-11 19:34 . 2010-07-14 07:01 -------- d-----w- c:\program files\Microsoft Application Virtualization Client
    2010-07-11 19:33 . 2010-07-11 19:43 -------- d-----w- c:\users\Mike\AppData\Roaming\TP
    2010-07-11 18:46 . 2010-07-11 18:46 -------- d-----w- c:\program files\Microsoft Analysis Services
    2010-07-11 18:39 . 2010-07-11 18:39 -------- d-----w- c:\program files\Windows Installer Clean Up
    2010-07-11 18:38 . 2010-07-11 18:38 -------- d-----w- c:\program files\MSECACHE
    2010-07-11 14:30 . 2010-07-11 14:30 0 ----a-w- c:\windows\nsreg.dat
    2010-07-11 14:30 . 2010-07-11 14:30 -------- d-----w- c:\users\Mike\AppData\Roaming\Netscape
    2010-07-11 14:30 . 2010-07-11 14:30 -------- d-----w- c:\users\Mike\AppData\Local\Netscape
    2010-07-11 14:29 . 2010-07-11 14:29 -------- d-----w- c:\program files\Netscape
    2010-07-11 13:36 . 2010-07-11 13:36 -------- d-----w- c:\users\Mike\AppData\Local\Xom_Games
    2010-07-11 13:29 . 2010-07-11 13:30 -------- d-----w- c:\program files\XCom Media Server
    2010-07-11 13:12 . 2010-07-11 13:12 -------- d-----w- c:\program files\YouTube Downloader
    2010-07-11 05:56 . 2007-12-24 17:47 7680 ----a-w- c:\windows\system32\ff_vfw.dll
    2010-07-11 05:56 . 2007-11-29 16:52 60273 ----a-w- c:\windows\system32\pthreadGC2.dll
    2010-07-11 05:56 . 2010-07-11 05:56 -------- d-----w- c:\program files\ffdshow
    2010-07-11 05:55 . 2010-07-11 05:56 -------- d-----w- c:\program files\TVersity Codec Pack
    2010-07-11 05:53 . 2010-07-11 05:53 -------- d-----w- c:\users\Mike\AppData\Local\TVersity
    2010-07-11 04:09 . 2010-07-25 01:07 -------- d-----w- c:\users\Mike\.dvdcss
    2010-07-11 03:35 . 2010-07-11 04:03 -------- d-----w- c:\windows\system32\config\systemprofile\.dvdcss
    2010-07-11 03:10 . 2007-08-29 20:06 57344 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\ZIMFPRNT.DLL
    2010-07-11 03:10 . 2010-07-11 03:10 -------- d-----w- c:\program files\Hewlett-Packard
    2010-07-11 03:09 . 2007-08-29 20:06 53248 ----a-w- c:\windows\system32\ZTAG.DLL
    2010-07-11 03:09 . 2007-08-29 20:06 106496 ----a-w- c:\windows\system32\ZSPOOL.DLL
    2010-07-11 03:09 . 2007-08-29 20:06 61440 ----a-w- c:\windows\system32\ZIMF.DLL
    2010-07-11 03:09 . 2007-08-29 20:06 237568 ----a-w- c:\windows\system32\HPIPMXRes.dll
    2010-07-11 03:09 . 2007-08-29 20:06 114688 ----a-w- c:\windows\system32\HPMCoSetup.dll
    2010-07-11 03:09 . 2007-08-29 20:06 512000 ----a-w- c:\windows\system32\HPIPMX.dll
    2010-07-11 03:09 . 2008-02-11 19:26 57344 ----a-w- c:\windows\system32\CP1215EWS.dll
    2010-07-11 03:09 . 2007-08-29 20:06 163840 ----a-w- c:\windows\system32\CP1215LI.DLL
    2010-07-11 03:09 . 2007-08-29 20:06 143360 ----a-w- c:\windows\system32\CP1215LM.DLL
    2010-07-11 03:09 . 2010-07-11 03:09 -------- d-----w- c:\program files\HP
    2010-07-11 03:00 . 2010-07-11 03:00 -------- d-----w- c:\users\Mike\AppData\Local\ElevatedDiagnostics
    2010-07-11 02:08 . 2010-07-25 00:56 410976 ----a-w- c:\windows\system32\deploytk.dll
    2010-07-11 02:03 . 2010-07-11 02:09 -------- d-----w- c:\program files\PS3 Media Server
    2010-07-10 22:11 . 2010-08-07 22:08 -------- d-----w- c:\users\Mike\AppData\Roaming\vlc
    2010-07-10 22:09 . 2010-07-10 22:09 -------- d-----w- c:\program files\VideoLAN
    2010-07-10 19:38 . 2010-07-09 17:18 20328 ----a-w- c:\windows\system32\drivers\cpuz134_x32.sys
    2010-07-10 19:38 . 2010-07-10 19:38 -------- d-----w- c:\program files\CPUID
    2010-07-10 17:35 . 2010-07-10 17:35 -------- d-----w- c:\program files\Common Files\Digidesign
    2010-07-10 16:57 . 2010-07-10 16:57 -------- d-----w- c:\users\Mike\AppData\Local\Diagnostics
    2010-07-10 16:33 . 2010-07-10 17:40 -------- dc-h--w- c:\programdata\{D69A48BF-7653-4AA8-94BC-5847522A4573}
    2010-07-10 14:31 . 2010-07-10 14:31 -------- dc-h--w- c:\programdata\{20EFD19B-675C-417B-A498-B0161D72FF88}
    2010-07-10 14:22 . 2010-07-10 14:22 -------- d-----w- c:\programdata\Native Instruments
    2010-07-10 14:21 . 2010-07-10 14:21 -------- dc-h--w- c:\programdata\{D7CFB71A-972A-44FF-AE44-8780EB53ABB2}
    2010-07-10 14:21 . 2010-07-10 17:35 -------- d-----w- c:\program files\Native Instruments
    2010-07-10 14:21 . 2010-07-10 17:35 -------- d-----w- c:\program files\Common Files\Native Instruments
    2010-07-10 14:12 . 2010-07-10 14:12 -------- d-----w- c:\program files\M-Audio
    2010-07-10 01:05 . 2010-07-10 01:05 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
    2010-07-09 22:22 . 2010-07-09 22:22 -------- d-----w- c:\program files\ma-config.com
    2010-07-09 22:22 . 2010-07-09 22:22 -------- d-----w- c:\programdata\ma-config.com

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-08-08 14:51 . 2010-08-08 14:51 388096 ----a-r- c:\users\Mike\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
    2010-08-08 13:52 . 2010-07-05 01:19 58792 ----a-w- c:\users\Mike\AppData\Local\GDIPFONTCACHEV1.DAT
    2010-08-05 02:13 . 2010-07-05 00:16 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-08-05 02:06 . 2010-04-29 09:47 505128 ----a-w- c:\windows\system32\msvcp71.dll
    2010-08-05 02:06 . 2010-04-29 09:47 353576 ----a-w- c:\windows\system32\msvcr71.dll
    2010-08-05 02:06 . 2010-08-05 02:07 53319 ----a-w- c:\programdata\Temp\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\PostBuild.exe
    2010-08-05 01:24 . 2010-07-05 02:47 -------- d-----w- c:\program files\Elaborate Bytes
    2010-08-05 01:20 . 2010-07-05 02:09 -------- d-----w- c:\users\Mike\AppData\Roaming\uTorrent
    2010-08-04 02:43 . 2009-07-19 13:13 699582 ----a-w- c:\windows\system32\perfh00C.dat
    2010-08-04 02:43 . 2009-07-19 13:13 129744 ----a-w- c:\windows\system32\perfc00C.dat
    2010-07-29 01:19 . 2010-07-29 01:19 2288360 ----a-w- c:\programdata\WildTangent\Game Console - WildGames\Downloads\fr\Installers\SetupGamesClient.exe
    2010-07-14 07:05 . 2010-07-05 02:54 -------- d-----w- c:\programdata\Microsoft Help
    2010-07-11 18:39 . 2010-07-11 18:39 3584 ----a-r- c:\users\Mike\AppData\Roaming\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
    2010-07-09 19:15 . 2010-07-09 19:15 -------- d-----w- c:\users\Mike\AppData\Roaming\Windows Live Writer
    2010-07-09 18:52 . 2009-07-13 23:40 409088 ----a-w- c:\windows\system32\systemcpl.dll
    2010-07-09 18:52 . 2009-07-13 23:36 13824 ----a-w- c:\windows\system32\slwga.dll
    2010-07-09 18:52 . 2009-07-13 23:24 811520 ----a-w- c:\windows\system32\user32.dll
    2010-07-07 10:45 . 2010-07-07 10:45 -------- d-----w- c:\program files\Common Files\Adobe
    2010-07-07 01:02 . 2010-07-07 00:41 -------- d-----w- c:\programdata\Lavasoft
    2010-07-07 00:50 . 2010-07-07 00:50 -------- d-----w- c:\program files\CCleaner
    2010-07-07 00:42 . 2010-07-07 00:42 -------- dc-h--w- c:\programdata\{90FF8911-FC06-4E49-8959-C3CF1CA226BB}
    2010-07-07 00:41 . 2010-07-07 00:41 -------- d-----w- c:\program files\Lavasoft
    2010-07-07 00:18 . 2010-07-07 00:18 -------- d-----w- c:\users\Mike\AppData\Roaming\Malwarebytes
    2010-07-07 00:17 . 2010-07-07 00:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-07-07 00:17 . 2010-07-07 00:17 -------- d-----w- c:\programdata\Malwarebytes
    2010-07-06 23:49 . 2010-07-06 23:49 -------- d-----w- c:\program files\WinPcap
    2010-07-06 22:29 . 2010-07-05 01:35 -------- d-----w- c:\program files\Microsoft Silverlight
    2010-07-06 22:18 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
    2010-07-05 02:28 . 2010-07-05 02:28 -------- d-----w- c:\program files\Firebird
    2010-07-05 02:27 . 2010-07-05 02:27 -------- d-----w- c:\program files\SpacialAudio
    2010-07-05 02:10 . 2010-07-05 02:10 -------- d-----w- c:\program files\uTorrent
    2010-07-05 01:38 . 2010-07-05 01:38 -------- d-----w- c:\programdata\Messenger Plus!
    2010-07-05 01:38 . 2010-07-05 01:38 -------- d-----w- c:\program files\Messenger Plus! Live
    2010-07-05 01:34 . 2010-07-05 01:31 -------- d-----w- c:\program files\Windows Live
    2010-07-05 01:33 . 2010-07-05 01:33 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
    2010-07-05 01:32 . 2010-07-05 01:32 -------- d-----w- c:\program files\Microsoft
    2010-07-05 01:32 . 2010-07-05 01:32 -------- d-----w- c:\program files\Windows Live SkyDrive
    2010-07-05 01:25 . 2010-07-05 01:25 -------- d-----w- c:\program files\Common Files\Windows Live
    2010-06-28 20:37 . 2010-07-05 00:27 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2010-06-28 20:37 . 2010-07-05 00:27 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2010-06-28 20:33 . 2010-07-05 00:27 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2010-06-28 20:32 . 2010-07-05 00:27 50256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2010-06-28 20:32 . 2010-07-05 00:27 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2010-06-25 17:07 . 2010-06-25 17:07 96784 ----a-w- c:\windows\system32\Packet.dll
    2010-06-25 17:07 . 2010-06-25 17:07 281104 ----a-w- c:\windows\system32\wpcap.dll
    2010-06-25 17:07 . 2010-06-25 17:07 35088 ----a-w- c:\windows\system32\drivers\npf.sys
    2010-06-25 17:03 . 2010-06-25 17:03 53299 ----a-w- c:\windows\system32\pthreadVC.dll
    2010-06-21 17:52 . 2010-07-07 00:42 2978768 -c--a-w- c:\programdata\{90FF8911-FC06-4E49-8959-C3CF1CA226BB}\Ad-AwareInstall.exe
    2010-06-21 17:44 . 2010-07-07 01:02 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
    2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\32085\AdobeARM.exe
    2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\32085\AdobeExtractFiles.dll
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\32085\ReaderUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\9.3\ARM\32085\AcrobatUpdater.exe
    2010-05-27 07:24 . 2010-07-05 20:54 34304 ----a-w- c:\windows\system32\atmlib.dll
    2010-05-27 03:49 . 2010-07-05 20:54 293888 ----a-w- c:\windows\system32\atmfd.dll
    2010-05-21 18:14 . 2010-07-05 00:31 221568 ------w- c:\windows\system32\MpSigStub.exe
    2010-05-21 05:18 . 2010-07-05 20:55 977920 ----a-w- c:\windows\system32\wininet.dll
    2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
    2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
    .
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. delmike Messages postés 6 Statut Membre
     
    ------- Sigcheck -------

    [-] 2010-07-09 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7264.0] . . c:\windows\System32\user32.dll

    [-] 2009-07-14 . 1D800607A1FCEC1D8F735D7AE72A91E5 . 453632 . . [6.1.7264.0] . . c:\windows\System32\dsound.dll
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-17 3872080]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-06-28 2837864]
    "VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
    "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]
    "PrnStatusMX"="c:\program files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe" [2007-08-29 1077248]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-07-25 136600]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-18 421888]
    "RemoteControl10"="c:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-03 87336]
    "BDRegion"="c:\program files\Cyberlink\Shared files\brs.exe" [2010-03-13 75048]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{93994DE8-8239-4655-B1D1-5F4E91300429}"= "c:\program files\DVD Region+CSS Free\DVDShell.dll" [2004-10-09 49152]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "mixer"=wdmaud.drv

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
    @="Service"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
    2009-12-11 19:57 948672 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    2009-12-22 05:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\M-Audio Taskbar Icon]
    2009-09-02 18:29 643592 ----a-w- c:\windows\System32\M-AudioTaskBarIcon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
    2009-07-14 01:14 1173504 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
    2009-04-14 11:43 604704 ----a-w- c:\windows\SOUNDMAN.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
    2010-07-12 16:32 74752 ----a-w- c:\program files\Winamp\winampa.exe

    R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-07-10 1352832]
    R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2010-06-10 253808]
    R3 PS3 Media Server;PS3 Media Server;c:\program files\PS3 Media Server\win32\service\wrapper.exe [2008-08-17 217088]
    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-07-06 1343400]
    S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-06-21 64288]
    S1 aswSP;aswSP; [x]
    S2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/08/04 22:13];c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-03-13 16:58 87536]
    S2 aswFsBlk;aswFsBlk; [x]
    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
    S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
    S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
    S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-07-22 81920]
    S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [2010-02-26 3623424]
    S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2010-06-25 35088]
    S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-24 483688]
    S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-07-22 2736128]
    S3 MAUSBMOBILEPRE;Service for M-Audio MobilePre;c:\windows\system32\DRIVERS\MAudioMobilePre.sys [2009-09-02 158344]
    S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-24 550760]
    S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-24 195944]
    S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-24 21864]
    S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-24 19304]
    S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-24 209768]

    .
    Contenu du dossier 'Tâches planifiées'

    2010-07-19 c:\windows\Tasks\Ad-Aware Update (Weekly).job
    - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-06-21 01:05]
    .
    .
    ------- Examen supplémentaire -------
    .
    uStart Page = hxxp://www.google.ca/
    FF - ProfilePath - c:\users\Mike\AppData\Roaming\Mozilla\Firefox\Profiles\9zykjez7.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.ca/
    FF - prefs.js: network.proxy.type - 0
    FF - plugin: c:\progra~1\MIF5BA~1\Office14\NPSPWRAP.DLL
    FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npwachk.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

    ---- PARAMETRES FIREFOX ----
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
    c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
    .
    - - - - ORPHELINS SUPPRIMES - - - -

    Notify-WgaLogon - (no file)

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
    "ImagePath"="\??\c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl"
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------

    [HKEY_USERS\S-1-5-21-3761681209-3739777183-3482969827-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{1BFE381B-F197-459B-AFC0-032D88B6CCDF}*]
    "haliddacmaffkhnd"=hex:69,61,6d,6d,63,66,6c,64,6c,64,70,63,68,6e,6d,67,61,65,
    00,00
    "iablbbikhklbilhepp"=hex:63,61,63,6e,62,67,00,00
    "ianjjmghhdhbgdohjg"=hex:69,61,64,6e,6e,66,63,6e,69,63,70,64,6c,62,70,6e,64,66,
    00,00

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\program files\Alwil Software\Avast5\AvastSvc.exe
    c:\windows\system32\taskhost.exe
    c:\windows\system32\WUDFHost.exe
    c:\windows\system32\conhost.exe
    c:\program files\Alwil Software\Avast5\setup\avast.setup
    c:\program files\Windows Media Player\wmpnetwk.exe
    .
    **************************************************************************
    .
    Heure de fin: 2010-08-08 17:26:02 - La machine a redémarré
    ComboFix-quarantined-files.txt 2010-08-08 21:25

    Avant-CF: 19 602 558 976 octets libres
    Après-CF: 19 322 421 248 octets libres

    - - End Of File - - AF0B0CB05107C3B7C15DE30D26072C93
    0