Processus RealUpgrade Launcher

Bonjour,

J'avais justement pensé à çà, le fait que ça joue avec le Real player, cependant, lorsqu'ils apparaissent, ce n'est pas forcément à l'ouverture du programme ou lorsque je m'en suis servi dans la journée... Néanmoins, je les supprime un à un même si ça prend un peu de temps, parce que le coup du logiciel de gen-hackman (et même si c'était super sympa d'avoir répondu et en donnant de détails) ça m'a fait un peu peur quand même... Une autre idée peut être ???

Merci pour ta réponse en tous les cas...

salut gen-hackman,

Ben moi j'ai "osé" suivre ton processus... très facile par ailleurs car tu l'as super bien expliqué. Par contre, je ne comprends rien au rapport !!! (faut dire que je ne suis pas très experte).Donc je te joins ce super document pour que tu me dise ce que tu en penses...

C'est un peu long mais bon... si tu y comprends quelque chose je t'écouterai !!! car je suis un tantinet dans la panade... pas grave grave mais très agaçant !

Merci d'avance !!!!!!


ComboFix 11-07-12.09 - ygjuyu y 13/07/2011 0:29.1.4 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3959.1856 [GMT 2:00]
Lancé depuis: c:\users\ygjuyu y\Desktop\Colette.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Amazon.ico
c:\programdata\BeRuby.ico
c:\programdata\MercadoLivre.ico
c:\programdata\QuickStores.ico
C:\Thumbs.db
c:\users\ygjuyu y\AppData\Roaming\EurekaLog
c:\users\ygjuyu y\AppData\Roaming\EurekaLog\EurekaLog.ini
c:\users\ygjuyu y\AppData\Roaming\OfferBox
c:\users\ygjuyu y\AppData\Roaming\OfferBox\config.xml
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-06-12 au 2011-07-12 ))))))))))))))))))))))))))))))))))))
.
.
2011-07-12 22:33 . 2011-07-12 22:33 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-12 19:40 . 2011-07-12 19:40 7450888 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\86ed1f2e1cc40cb08\bingbarsetup.exe
2011-07-12 19:39 . 2011-07-12 19:39 15712 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\6e3fed4e1cc40cb01\MeshBetaRemover.exe
2011-07-12 16:19 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{38A63520-FD92-4F8B-975D-4CB1C9A5CC5D}\mpengine.dll
2011-07-07 18:32 . 2011-07-07 18:32 -------- d-----w- c:\programdata\boost_interprocess
2011-07-07 18:31 . 2011-07-07 18:31 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\Bandoo
2011-07-05 11:36 . 2011-07-05 11:36 -------- d-----w- c:\programdata\Trymedia
2011-07-05 11:32 . 2011-07-10 13:52 -------- d-----w- C:\Zylom Games
2011-07-05 11:32 . 2011-07-10 13:52 -------- d-----w- c:\program files (x86)\RealArcade
2011-07-05 11:25 . 2011-07-05 11:25 -------- d-----w- c:\windows\Lhsp
2011-07-05 11:25 . 2011-07-05 11:25 -------- d-----w- c:\program files (x86)\Power Translator 12
2011-07-05 10:42 . 2011-07-05 10:42 -------- d-----w- c:\users\ygjuyu y\AppData\Local\Ilivid Player
2011-07-05 10:42 . 2011-07-05 10:42 -------- d-----w- c:\programdata\Bandoo
2011-07-05 10:42 . 2011-07-05 10:42 -------- d-----w- c:\program files (x86)\Bandoo
2011-07-05 10:42 . 2011-05-25 14:55 1524112 ----a-w- c:\windows\SysWow64\bandoolmx.dll
2011-07-05 10:42 . 2011-07-05 10:42 -------- dc-h--w- c:\programdata\{C1D18E30-468F-478F-8837-B6CBA25F6547}
2011-07-05 10:42 . 2011-07-05 10:42 -------- d-----w- c:\program files (x86)\iLivid
2011-07-05 10:41 . 2011-07-05 10:41 -------- d-----w- c:\program files (x86)\Windows iLivid Toolbar
2011-07-05 10:41 . 2011-07-05 10:41 -------- d-----w- c:\users\ygjuyu y\AppData\Local\PackageAware
2011-07-03 17:56 . 2011-07-03 17:56 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\HPAppData
2011-07-03 15:48 . 2011-07-03 15:48 -------- d-----w- c:\programdata\TechSmith
2011-07-03 15:48 . 2011-07-03 15:48 -------- d-----w- c:\program files (x86)\TechSmith
2011-07-03 15:45 . 2011-07-03 15:45 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2011-07-03 14:05 . 2011-07-03 14:13 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\Slickscreen
2011-07-03 14:04 . 2011-07-03 14:04 -------- d-----w- c:\users\ygjuyu y\AppData\Local\Apps
2011-07-03 14:04 . 2011-07-03 16:14 -------- d-----w- c:\users\ygjuyu y\AppData\Local\Deployment
2011-07-03 14:00 . 2011-07-09 11:03 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\Mikogo
2011-07-01 17:37 . 2011-07-01 17:38 -------- d-----w- c:\program files (x86)\BookSmart
2011-07-01 11:46 . 2011-07-01 11:46 -------- d-----w- c:\windows\PCHEALTH
2011-07-01 11:44 . 2011-07-01 11:44 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2011-07-01 11:44 . 2011-07-01 11:44 -------- d-----w- c:\users\ygjuyu y\AppData\Local\Microsoft Help
2011-07-01 11:44 . 2011-07-01 19:56 -------- d-----w- c:\programdata\Microsoft Help
2011-07-01 11:43 . 2011-07-01 11:43 -------- d-----r- C:\MSOCache
2011-06-29 09:48 . 2011-06-29 09:48 -------- d-----w- C:\PFiles
2011-06-25 18:25 . 2011-06-25 18:25 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\AVS4YOU
2011-06-25 18:16 . 2011-06-25 18:16 -------- d-----w- c:\programdata\AVS4YOU
2011-06-25 18:15 . 2002-01-05 13:48 974848 ----a-w- c:\windows\SysWow64\mfc70.dll
2011-06-25 18:14 . 2011-06-25 18:15 -------- d-----w- c:\program files (x86)\Common Files\AVSMedia
2011-06-25 18:14 . 2011-06-25 18:15 -------- d-----w- c:\program files (x86)\AVS4YOU
2011-06-25 18:14 . 2009-03-02 13:02 24576 ----a-w- c:\windows\SysWow64\msxml3a.dll
2011-06-25 17:58 . 2011-06-25 17:58 700945 ----a-w- c:\windows\unins003.exe
2011-06-25 17:57 . 2011-06-25 17:57 700945 ----a-w- c:\windows\unins002.exe
2011-06-25 17:57 . 2011-06-25 17:57 700945 ----a-w- c:\windows\unins001.exe
2011-06-25 17:51 . 2011-06-25 17:51 700945 ----a-w- c:\windows\unins000.exe
2011-06-25 17:42 . 2011-06-25 17:42 -------- d-----w- c:\users\ygjuyu y\AppData\Local\MicroVision Applications
2011-06-25 17:32 . 2011-06-25 17:32 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\Droppix
2011-06-25 17:32 . 2011-06-25 17:32 -------- d-----w- c:\program files (x86)\Common Files\Droppix
2011-06-25 17:32 . 2011-06-25 17:32 -------- d-----w- c:\program files (x86)\Droppix
2011-06-25 17:32 . 2005-11-09 07:00 487424 --s-a-w- c:\windows\SysWow64\msvcp70.dll
2011-06-25 17:32 . 2005-11-09 07:00 344064 ----a-r- c:\windows\SysWow64\msvcr70.dll
2011-06-25 17:31 . 2011-06-25 17:32 -------- d-----w- c:\programdata\Droppix
2011-06-25 17:16 . 2011-06-25 17:16 -------- d-----w- c:\program files (x86)\SureThing
2011-06-25 17:16 . 2011-06-25 17:16 -------- d-----w- c:\windows\MVUNINST
2011-06-25 17:16 . 2011-06-25 17:16 -------- d-----w- c:\program files (x86)\Common Files\SureThing Shared
2011-06-24 20:57 . 2011-06-24 20:57 -------- d-----w- c:\users\ygjuyu y\AppData\Local\HP MediaSmart Video
2011-06-21 18:03 . 2011-06-14 19:49 -------- d-----w- c:\users\ygjuyu y\js
2011-06-21 13:56 . 2011-06-21 13:56 -------- d-----w- c:\program files (x86)\WinPcap
2011-06-20 19:03 . 2011-07-12 14:50 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-06-20 18:27 . 2011-06-20 18:27 -------- d-----w- c:\program files (x86)\completebartb
2011-06-20 18:27 . 2011-06-20 18:27 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\ComplitlyEngine
2011-06-20 18:27 . 2011-06-20 18:27 -------- d-----w- c:\program files (x86)\ComplitlyEngine
2011-06-20 18:27 . 2011-06-21 17:41 -------- d-----w- c:\program files (x86)\TubeMaster++
2011-06-20 17:52 . 2011-06-20 17:52 -------- d-----w- c:\program files (x86)\Common Files\xing shared
2011-06-18 13:49 . 2011-06-18 13:49 -------- d-----w- c:\users\ygjuyu y\AppData\Local\Cooliris
2011-06-18 13:08 . 2011-06-18 13:08 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\Ambient Design
2011-06-18 12:51 . 2011-06-18 12:51 -------- d-----w- c:\program files (x86)\Ambient Design
2011-06-16 21:40 . 2011-06-16 21:40 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\NASA
2011-06-16 21:39 . 2011-06-16 21:39 -------- d-----w- c:\users\ygjuyu y\AppData\Local\Microsoft_Research
2011-06-16 21:29 . 2011-06-16 21:29 -------- d-----w- c:\users\ygjuyu y\AppData\Roaming\Stellarium
2011-06-16 21:28 . 2011-06-20 15:33 -------- d-----w- c:\program files (x86)\Pvm
2011-06-16 21:27 . 2011-06-16 21:27 -------- d-----w- c:\program files (x86)\Celestia
2011-06-16 21:22 . 2011-06-16 21:22 -------- d-----w- c:\program files (x86)\Microsoft Research
2011-06-16 21:21 . 2011-06-16 21:21 -------- d-----w- c:\program files (x86)\NASA
2011-06-16 21:21 . 2011-06-16 21:21 -------- d-----w- c:\program files (x86)\Stellarium
2011-06-16 18:13 . 2011-06-16 20:52 -------- d-----w- c:\programdata\BVRP Software
2011-06-16 14:30 . 2011-06-16 14:30 -------- d-----w- c:\program files\Microsoft Research
2011-06-16 12:51 . 2010-09-22 22:36 48488 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2011-06-16 11:05 . 2011-04-29 05:55 1110528 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2011-06-16 11:05 . 2011-04-27 02:40 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-06-16 11:05 . 2011-04-27 02:39 289280 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-06-16 11:05 . 2011-04-27 02:39 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-06-16 11:05 . 2011-04-29 04:57 759296 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2011-06-16 11:05 . 2011-04-25 05:33 1923968 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-16 11:05 . 2011-04-25 02:34 499200 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-16 11:05 . 2011-05-28 03:06 3135488 ----a-w- c:\windows\system32\win32k.sys
2011-06-15 11:42 . 2011-05-10 12:04 127832 ----a-w- c:\windows\system32\drivers\aswFW.sys
2011-06-15 11:41 . 2011-05-10 12:03 253784 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2011-06-15 11:41 . 2011-07-04 11:43 253888 ----a-w- c:\windows\system32\aswBoot.exe
2011-06-15 11:40 . 2011-07-12 16:01 -------- d-----w- c:\programdata\AVAST Software
2011-06-15 11:40 . 2011-06-15 11:40 -------- d-----w- c:\program files\AVAST Software
2011-06-14 18:08 . 2011-06-14 18:08 -------- d-----w- c:\users\ygjuyu y\AppData\Local\Netlog
2011-06-14 18:08 . 2011-06-14 18:08 -------- d-----w- c:\program files (x86)\Netlog Uploader
2011-06-14 11:54 . 2011-06-14 11:54 -------- d-----w- c:\users\ygjuyu y\AppData\Local\assembly
2011-06-13 21:18 . 2011-06-13 21:18 -------- d-----w- c:\program files (x86)\tamasoftware
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-22 15:38 . 2011-06-01 20:15 404640 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-06-20 17:51 . 2010-11-26 03:20 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll
2011-06-20 17:51 . 2010-11-26 03:20 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2011-06-03 16:53 . 2011-05-17 15:40 2306328 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2011-06-03 16:53 . 2011-05-17 15:40 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2011-05-25 18:19 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-05-25 18:19 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-05-24 20:33 . 2011-05-24 20:33 2306328 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2011-05-24 20:33 . 2011-05-24 20:33 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2011-05-24 17:14 . 2011-05-21 12:42 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-21 14:57 . 2011-05-21 14:57 47328 ----a-r- c:\users\ygjuyu y\AppData\Roaming\Microsoft\Installer\{D416E000-D999-470A-BCAC-98E717CC1AFC}\ARPPRODUCTICON.exe
2011-05-21 14:57 . 2011-05-21 14:57 334048 ----a-r- c:\users\ygjuyu y\AppData\Roaming\Microsoft\Installer\{D416E000-D999-470A-BCAC-98E717CC1AFC}\NewShortcut2_439CCEF89767436AB00754ACFDCFF417.exe
2011-05-21 11:50 . 2011-05-21 11:50 86576 ----a-w- c:\users\ygjuyu y\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Galerie de Photos Windows Live.exe
2011-05-21 11:50 . 2011-05-21 11:50 392728 ----a-w- c:\users\ygjuyu y\AppData\Roaming\Microsoft\Services Windows Live\Services Windows Live.dll
2011-05-21 11:50 . 2011-05-21 11:50 132672 ----a-w- c:\users\ygjuyu y\AppData\Roaming\Microsoft\Services Windows Live\Raccourci Windows Live Messenger.exe
2011-05-19 18:57 . 2011-05-19 18:57 159080 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10138.bin
2011-05-17 15:40 . 2011-05-17 15:40 639296 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-05-17 14:06 . 2010-06-24 18:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-04-22 22:15 . 2011-05-25 15:53 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-13 22:40 . 2011-04-13 22:40 4284416 ----a-w- c:\windows\SysWow64\GPhotos.scr
2011-03-23 11:03 . 2011-05-19 17:23 108424 ----a-w- c:\program files (x86)\Common Files\APNStub.exe
2011-03-23 10:26 . 2011-05-19 17:23 3325832 ----a-w- c:\program files (x86)\Common Files\APNToolbarInstaller.exe
2010-01-26 08:11 . 2011-05-17 20:29 444283 ----a-w- c:\program files (x86)\Common Files\WinPcapNmap.exe
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2011-05-17 1490312]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{64c54209-175c-454d-9291-ac46d4d952cf}]
2011-03-30 15:47 86696 ----a-w- c:\program files (x86)\completebartb\completebarDx.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D27FC31C-6E3D-4305-8D53-ACDAEFA5F862}]
2011-04-05 10:51 139768 ----a-w- c:\users\ygjuyu y\AppData\Roaming\ComplitlyEngine\ComplitlyEngine.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-05-17 11:29 1490312 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{fe618700-e0ee-441e-8b1d-18ce226bb193}]
2011-03-30 15:48 262312 ----a-w- c:\program files (x86)\completebartb\auxi\completebarAu.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2011-05-17 1490312]
"{64c54209-175c-454d-9291-ac46d4d952cf}"= "c:\program files (x86)\completebartb\completebarDx.dll" [2011-03-30 86696]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{64c54209-175c-454d-9291-ac46d4d952cf}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PopUpStopperFreeEdition"="c:\program files (x86)\Panicware\Pop-Up Stopper Free Edition\PSFree.exe" [2005-03-17 536576]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Google Desktop Search"="c:\program files (x86)\Google\Google Desktop Search\GoogleDesktop.exe" [2011-05-21 30192]
"eBayToolbar"="c:\program files (x86)\eBay\eBay Toolbar2\eBayTBDaemon.exe" [2009-03-19 632048]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2011-05-17 395144]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2011-06-20 273544]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\users\ygjuyu y\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\IEBHO.dll c:\progra~2\Google\GOOGLE~2\GoogleDesktopNetwork3.dll c:\progra~2\Bandoo\BndHook.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-17 136176]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]
R3 B-Service;B-Service;c:\users\ygjuyu y\AppData\Roaming\Mikogo\B-Service.exe [2011-07-09 185640]
R3 Droppix Service;Droppix Service;c:\program files (x86)\Common Files\Droppix\DxService.exe [2009-03-12 221184]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [2011-05-21 30192]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-17 136176]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S2 HPAuto;HP Auto;c:\program files\Hewlett-Packard\HP Auto\HPAuto.exe [2010-08-06 681528]
S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-08-06 291896]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-08-21 92216]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe [2010-09-28 1119768]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2011-03-04 10:29 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'
.
2011-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-17 17:35]
.
2011-07-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-17 17:35]
.
2011-07-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1454716234-3034976548-2492162761-1001Core.job
- c:\users\ygjuyu y\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-17 14:32]
.
2011-07-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1454716234-3034976548-2492162761-1001UA.job
- c:\users\ygjuyu y\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-17 14:32]
.
2011-07-12 c:\windows\Tasks\HPCeeScheduleForygjuyu y.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
2011-06-01 20:44 1793432 ----a-w- c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D27FC31C-6E3D-4305-8D53-ACDAEFA5F862}]
2011-04-05 10:51 167416 ----a-w- c:\users\ygjuyu y\AppData\Roaming\ComplitlyEngine\64\ComplitlyEngine64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2010-09-15 611896]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\progra~2\WI3C8A~1\Datamngr\x64\datamngr.dll c:\progra~2\WI3C8A~1\Datamngr\x64\IEBHO.dll
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.chrome.google.com/
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://www.wuuta.com/
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Envoyer à OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Free YouTube Download - c:\users\ygjuyu y\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\users\ygjuyu y\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Recherche sur eBay - c:\program files (x86)\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
Trusted Zone: google.com\www.chrome
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-10 - (no file)
Toolbar-10 - (no file)
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-4shared Desktop - c:\users\ygjuyu y\Desktop\4shared Desktop\uninstall.exe
AddRemove-WildTangentGameProvider-hp-genres - c:\program files (x86)\HP Games\Game Explorer Categories - genres\Uninstall.exe
AddRemove-WildTangentGDF-hp-clubpenguin - c:\program files (x86)\HP Games\Web Link - Club Penguin\Uninstall.exe
AddRemove-WildTangentGDF-hp-darkorbit - c:\program files (x86)\HP Games\Web Link - Dark Orbit\Uninstall.exe
AddRemove-WildTangentGDF-hp-seafight - c:\program files (x86)\HP Games\Web Link - Seafight\Uninstall.exe
AddRemove-WildTangentGDF-hp-shaiya - c:\program files (x86)\HP Games\Web Link - Shaiya\Uninstall.exe
AddRemove-WildTangentGDF-hp-worldofwarcraft - c:\program files (x86)\HP Games\Web Link - World of Warcraft\Uninstall.exe
AddRemove-{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8} - c:\program files (x86)\InstallShield Installation Information\{B1A4A13D-4665-4ED3-9DFE-F845725FBBD8}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10t_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10t_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10t.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\SysWOW64\ezSharedSvcHost.exe
c:\program files (x86)\Power Translator 12\LogoMedia TranslateDotNet Server.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\progra~2\Bandoo\Bandoo.exe
c:\program files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.bin
c:\program files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
c:\program files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
.
**************************************************************************
.
Heure de fin: 2011-07-13 00:39:16 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-07-12 22:39
.
Avant-CF: 909 048 987 648 octets libres
Après-CF: 909 973 233 664 octets libres
.
- - End Of File - - 37441D362DFDC42E27360CBF13FF7300

Heuuuu.... en attendant, je viens de vérifier et je n'ai plus de problème !!!!!
COOL, MERCI !!!!!!!!!!