Problème explorer.exe / APPCRASH
Résolu/Fermé
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
-
3 oct. 2010 à 18:02
Spawn - 14 juin 2012 à 10:39
Spawn - 14 juin 2012 à 10:39
A voir également:
- Appcrash explorer.exe
- Explorer.exe - Télécharger - Divers Utilitaires
- Pourquoi explorer.exe plante? ✓ - Forum Windows 8 / 8.1
- Explorer.exe erreur d'application ✓ - Forum Windows 10
- "Pourquoi explorer.exe plante?" ✓ - Forum Windows
- Explorer.exe - Forum Windows
124 réponses
Jean-François Pillou
Messages postés
18878
Date d'inscription
lundi 15 février 1999
Statut
Webmaster
Dernière intervention
16 février 2023
63 274
7 oct. 2010 à 12:01
7 oct. 2010 à 12:01
Le problème ressemble étrangement à celui-ci, qui a trouvé solution :
https://forums.commentcamarche.net/forum/affich-3112279-appcrash-sous-vista#31
https://forums.commentcamarche.net/forum/affich-3112279-appcrash-sous-vista#31
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 12:05
7 oct. 2010 à 12:05
Oui je l'ai vu mais le problème c'est que je ne peux pas accéder à démarrer / panneau de configuration .... !!! la fenêtre me bloque tout accès...
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 12:53
7 oct. 2010 à 12:53
tu a Daemon Tools sur l'ordi ?
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 12:54
7 oct. 2010 à 12:54
Oui
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 12:58
7 oct. 2010 à 12:58
Cette alerte peut être due à un logiciel d'émulation de CD (apparemment, il y a Daemon Tools sur l'ordi). Utilise Defogger pour les désactiver temporairement :
* Télécharge Defogger (de jpshortstuff) sur ton Bureau
* Lance le
* Une fenêtre apparait : clique sur "Disable"
* Fais redémarrer l'ordinateur si l'outil te le demande
* Quand nous aurons terminé de régler tes problèmes, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"
et relance List_Kill'em
* Télécharge Defogger (de jpshortstuff) sur ton Bureau
* Lance le
* Une fenêtre apparait : clique sur "Disable"
* Fais redémarrer l'ordinateur si l'outil te le demande
* Quand nous aurons terminé de régler tes problèmes, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"
et relance List_Kill'em
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 13:13
7 oct. 2010 à 13:13
J'ai bien lancé Defogger et rallumer le pc mais toujours cette fenêtre qui apparait et me bloque tout accès... :(
Je fais la dernière étape?
* Quand nous aurons terminé de régler tes problèmes, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"
et relance List_Kill'em
Je fais la dernière étape?
* Quand nous aurons terminé de régler tes problèmes, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"
et relance List_Kill'em
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 13:15
7 oct. 2010 à 13:15
relance List_Kill'em
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 13:40
7 oct. 2010 à 13:40
¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.1.0.9 ¤¤¤¤¤¤¤¤¤¤
User : Asus (Administrateurs)
Update on 04/10/2010 by g3n-h@ckm@n ::::: 21.00
Start at: 13:18:02 | 07/10/2010
Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Windows Firewall Status : Disabled
AV : AVG Anti-Virus Free 8.0 [ Enabled | Updated ]
C:\ -> Disque fixe local | 149,04 Go (63,85 Go free) [VistaOS] | NTFS
D:\ -> Disque fixe local | 139,28 Go (139,18 Go free) [DATA] | NTFS
E:\ -> Disque CD-ROM
¤¤¤¤¤¤¤¤¤¤ Files/folders :
Quarantined & Deleted !! : C:\Users\Asus\AppData\Local\GDIPFONTCACHEV1.DAT
¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤
127.0.0.1 localhost
¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤
Deleted : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}
¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
Local Page = C:\WINDOWS\system32\blank.htm
Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.google.com/?gws_rd=ssl
Local Page = C:\WINDOWS\system32\blank.htm
Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
cval = 1 ()
UacDisableNotify = 0 (0x0)
InternetSettingsDisableNotify = 0 (0x0)
AutoUpdateDisableNotify = 0 (0x0)
FirewallDisableNotify = 0 (0x0)
FirstRunDisabled = 1 ()
AntiVirusDisableNotify = 0 (0x0)
UpdatesDisableNotify = 0 (0x0)
AntiVirusOverride = 0 (0x0)
FirewallOverride = 0 (0x0)
¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤
Ndisuio : Start = 3
EapHost : Start = 2
Wlansvc : Start = 2
SharedAccess : Start = 2
windefend : Start = 2
wuauserv : Start = 2
wscsvc : Start = 2
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Disk Cleaned
anti-ver blaster : OK
Prefetch cleaned
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
FEATURE_BROWSER_EMULATION | svchost :
====================================
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net
device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys
kernel: MBR read successfully
user & kernel MBR OK
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
User : Asus (Administrateurs)
Update on 04/10/2010 by g3n-h@ckm@n ::::: 21.00
Start at: 13:18:02 | 07/10/2010
Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Windows Firewall Status : Disabled
AV : AVG Anti-Virus Free 8.0 [ Enabled | Updated ]
C:\ -> Disque fixe local | 149,04 Go (63,85 Go free) [VistaOS] | NTFS
D:\ -> Disque fixe local | 139,28 Go (139,18 Go free) [DATA] | NTFS
E:\ -> Disque CD-ROM
¤¤¤¤¤¤¤¤¤¤ Files/folders :
Quarantined & Deleted !! : C:\Users\Asus\AppData\Local\GDIPFONTCACHEV1.DAT
¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤
127.0.0.1 localhost
¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤
Deleted : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}
¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
Local Page = C:\WINDOWS\system32\blank.htm
Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.google.com/?gws_rd=ssl
Local Page = C:\WINDOWS\system32\blank.htm
Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
cval = 1 ()
UacDisableNotify = 0 (0x0)
InternetSettingsDisableNotify = 0 (0x0)
AutoUpdateDisableNotify = 0 (0x0)
FirewallDisableNotify = 0 (0x0)
FirstRunDisabled = 1 ()
AntiVirusDisableNotify = 0 (0x0)
UpdatesDisableNotify = 0 (0x0)
AntiVirusOverride = 0 (0x0)
FirewallOverride = 0 (0x0)
¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤
Ndisuio : Start = 3
EapHost : Start = 2
Wlansvc : Start = 2
SharedAccess : Start = 2
windefend : Start = 2
wuauserv : Start = 2
wscsvc : Start = 2
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Disk Cleaned
anti-ver blaster : OK
Prefetch cleaned
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
FEATURE_BROWSER_EMULATION | svchost :
====================================
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net
device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys
kernel: MBR read successfully
user & kernel MBR OK
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 13:44
7 oct. 2010 à 13:44
ok c'est bon
Télécharge UsbFix de C_XX & Chiquitine29
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir
* Double clic sur "UsbFix.exe" présent sur ton bureau ( clic droit "exécuter en tant qu'administrateur" pour Vista & 7 )
* Choisis l'option F pour français et tape sur [entrée] .
* Choisis l'option 1 ( Recherche ) et tape sur [entrée] .
* Laisse travailler l'outil.
* Ensuite poste le rapport UsbFix.txt qui apparaitra.
* Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Télécharge UsbFix de C_XX & Chiquitine29
http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir
* Double clic sur "UsbFix.exe" présent sur ton bureau ( clic droit "exécuter en tant qu'administrateur" pour Vista & 7 )
* Choisis l'option F pour français et tape sur [entrée] .
* Choisis l'option 1 ( Recherche ) et tape sur [entrée] .
* Laisse travailler l'outil.
* Ensuite poste le rapport UsbFix.txt qui apparaitra.
* Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 14:00
7 oct. 2010 à 14:00
############################## | UsbFix 7.028 | [Recherche]
Utilisateur: Asus (Administrateur) # PC-DE-ASUS [ASUSTeK Computer Inc. M51Va]
Mis à jour le 07/10/10 par El Desaparecido / C_XX
Lancé à 13:58:38 | 07/10/2010
Site Web: http://www.teamxscript.org
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Pare-feu Windows: Désactivé /!\
Antivirus: AVG Anti-Virus Free 8.0 [Enabled | Updated]
RAM -> 3070 Mo
C:\ (%systemdrive%) -> Disque fixe # 149 Go (64 Go libre(s) - 43%) [VistaOS] # NTFS
D:\ -> Disque fixe # 139 Go (139 Go libre(s) - 100%) [DATA] # NTFS
E:\ -> CD-ROM
################## | Éléments infectieux |
Présent! C:\tmp
################## | Registre |
Présent! HKCU\Software\MailBlocker
Présent! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
################## | Mountpoints2 |
HKCU\.\.\.\.\Explorer\MountPoints2\{762839a6-ab5b-11dd-b2f5-002215ec1454}
Shell\AutoRun\Command = SWREG.EXE
HKCU\.\.\.\.\Explorer\MountPoints2\{884d4358-043e-11df-80d5-002215ec1454}
Shell\AutoRun\Command = G:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{9f4f0c73-909d-11de-9917-002215ec1454}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL MaiL BoxEs.ExE
################## | Vaccin |
(!) Cet ordinateur n'est pas vacciné!
################## | E.O.F |
Utilisateur: Asus (Administrateur) # PC-DE-ASUS [ASUSTeK Computer Inc. M51Va]
Mis à jour le 07/10/10 par El Desaparecido / C_XX
Lancé à 13:58:38 | 07/10/2010
Site Web: http://www.teamxscript.org
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Pare-feu Windows: Désactivé /!\
Antivirus: AVG Anti-Virus Free 8.0 [Enabled | Updated]
RAM -> 3070 Mo
C:\ (%systemdrive%) -> Disque fixe # 149 Go (64 Go libre(s) - 43%) [VistaOS] # NTFS
D:\ -> Disque fixe # 139 Go (139 Go libre(s) - 100%) [DATA] # NTFS
E:\ -> CD-ROM
################## | Éléments infectieux |
Présent! C:\tmp
################## | Registre |
Présent! HKCU\Software\MailBlocker
Présent! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
################## | Mountpoints2 |
HKCU\.\.\.\.\Explorer\MountPoints2\{762839a6-ab5b-11dd-b2f5-002215ec1454}
Shell\AutoRun\Command = SWREG.EXE
HKCU\.\.\.\.\Explorer\MountPoints2\{884d4358-043e-11df-80d5-002215ec1454}
Shell\AutoRun\Command = G:\LaunchU3.exe -a
HKCU\.\.\.\.\Explorer\MountPoints2\{9f4f0c73-909d-11de-9917-002215ec1454}
Shell\AutoRun\Command = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL MaiL BoxEs.ExE
################## | Vaccin |
(!) Cet ordinateur n'est pas vacciné!
################## | E.O.F |
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 14:03
7 oct. 2010 à 14:03
Suppression
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe......) susceptibles d'avoir été infectés sans les ouvrir
(1) Double clic sur le raccourci UsbFix présent sur ton bureau
(2) Choisi l option 2 ( Suppression )
Ton bureau disparaitra et le pc redémarrera .
Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau .
Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Branche tes sources de données externes à ton PC, (clé USB, disque dur externe......) susceptibles d'avoir été infectés sans les ouvrir
(1) Double clic sur le raccourci UsbFix présent sur ton bureau
(2) Choisi l option 2 ( Suppression )
Ton bureau disparaitra et le pc redémarrera .
Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau .
Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 14:08
7 oct. 2010 à 14:08
Le pc n'a pas redémarrer automatiquement le scan est fini et j'ai directement eux le rapport:
############################## | UsbFix 7.028 | [Suppression]
Utilisateur: Asus (Administrateur) # PC-DE-ASUS [ASUSTeK Computer Inc. M51Va]
Mis à jour le 07/10/10 par El Desaparecido / C_XX
Lancé à 14:05:11 | 07/10/2010
Site Web: http://www.teamxscript.org
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Pare-feu Windows: Désactivé /!\
Antivirus: AVG Anti-Virus Free 8.0 [Enabled | Updated]
RAM -> 3070 Mo
C:\ (%systemdrive%) -> Disque fixe # 149 Go (64 Go libre(s) - 43%) [VistaOS] # NTFS
D:\ -> Disque fixe # 139 Go (139 Go libre(s) - 100%) [DATA] # NTFS
E:\ -> CD-ROM
################## | Éléments infectieux |
Supprimé! C:\tmp
################## | Registre |
Supprimé! HKCU\Software\MailBlocker
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
################## | Mountpoints2 |
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{762839a6-ab5b-11dd-b2f5-002215ec1454}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{884d4358-043e-11df-80d5-002215ec1454}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{9f4f0c73-909d-11de-9917-002215ec1454}
################## | Listing |
[07/10/2010 - 12:47:54 | HD ] C:\$AVG8.VAULT$
[15/11/2008 - 19:36:44 | SHD ] C:\$RECYCLE.BIN
[23/03/2009 - 18:23:49 | A | 3271] C:\Ad-Report-Clean-23.03.2009.log
[23/03/2009 - 14:16:59 | A | 3371] C:\Ad-Report-Scan-23.03.2009.log
[30/11/2008 - 13:01:45 | D ] C:\Advanced Email Extractor Pro & Crack
[17/11/2009 - 15:37:35 | HD ] C:\ASUS.SYS
[07/10/2010 - 13:38:42 | A | 4] C:\autoexec.bat
[02/11/2009 - 12:33:25 | SHD ] C:\Boot
[11/04/2009 - 08:36:36 | RASH | 333257] C:\bootmgr
[16/04/2008 - 13:27:17 | RAS | 8192] C:\BOOTSECT.BAK
[29/04/2009 - 10:29:50 | D ] C:\C-Fix
[04/04/2007 - 21:01:54 | A | 19] C:\CA21.txt
[16/05/2009 - 09:36:57 | A | 17254] C:\ComboFix.txt
[04/10/2010 - 09:28:09 | SHD ] C:\Config.Msi
[18/09/2006 - 23:43:37 | A | 10] C:\config.sys
[26/06/2010 - 09:08:12 | D ] C:\de3f570606811aced4b7b0b8e4e1c3
[07/09/2008 - 12:09:53 | A | 20615] C:\devlist.txt
[02/11/2006 - 15:02:03 | SHD ] C:\Documents and Settings
[28/01/2009 - 21:08:47 | D ] C:\FBPUpdate
[07/09/2008 - 12:09:52 | A | 9] C:\Finish.log
[07/10/2010 - 13:08:47 | ASH | 3220295680] C:\hiberfil.sys
[29/11/2008 - 04:27:10 | A | 221] C:\INSTALL.LOG
[28/01/2009 - 23:58:40 | D ] C:\Intel
[23/03/2009 - 14:13:11 | RASH | 0] C:\IO.SYS
[07/10/2010 - 11:06:05 | D ] C:\Kill'em
[07/10/2010 - 13:18:02 | A | 30] C:\List'em.txt
[04/07/2008 - 08:51:19 | RAH | 1048576] C:\M51V.BIN
[22/07/2008 - 15:12:40 | A | 14] C:\M51VA_M51VR_VISTA.20
[23/03/2009 - 14:13:11 | RASH | 0] C:\MSDOS.SYS
[19/11/2008 - 02:08:18 | RHD ] C:\MSOCache
[08/08/2008 - 09:22:19 | A | 30] C:\NERO.LOG
[04/07/2008 - 06:35:34 | A | 21] C:\NIS2008.TXT
[16/03/2007 - 01:18:45 | A | 25] C:\OFFICE2007_A.TXT
[07/10/2010 - 13:08:46 | ASH | 3534073856] C:\pagefile.sys
[06/09/2008 - 23:07:00 | A | 105] C:\Pass.txt
[24/07/2008 - 11:05:52 | A | 2386] C:\Patch.LOG
[21/01/2008 - 04:32:31 | D ] C:\PerfLogs
[07/10/2010 - 11:05:07 | RD ] C:\Program Files
[07/10/2010 - 11:06:13 | HD ] C:\ProgramData
[16/05/2009 - 09:36:59 | D ] C:\Qoobox
[26/04/2009 - 21:40:40 | A | 2883] C:\rapport.txt
[29/04/2008 - 16:30:15 | A | 20] C:\READER_A.TXT
[22/07/2008 - 15:12:40 | A | 14] C:\RECOVERY.DAT
[17/03/2009 - 14:50:39 | D ] C:\RECYCLER
[07/09/2008 - 11:41:35 | A | 426] C:\RHDSetup.log
[24/04/2009 - 22:17:35 | D ] C:\rsit
[17/11/2009 - 15:39:13 | A | 153] C:\setup.log
[26/02/2010 - 21:46:41 | A | 3932184] C:\snp2uvc-001.raw
[16/05/2006 - 02:22:24 | A | 5] C:\store.log
[07/09/2008 - 10:57:59 | A | 166] C:\SumHidd.txt
[07/09/2008 - 10:57:05 | A | 98] C:\SumOS.txt
[07/10/2010 - 09:55:15 | SHD ] C:\System Volume Information
[29/03/2009 - 12:42:29 | A | 1235] C:\TCleaner.txt
[19/01/2009 - 01:34:20 | D ] C:\Temp
[07/10/2010 - 14:05:58 | D ] C:\UsbFix
[07/10/2010 - 14:05:19 | A | 4157] C:\UsbFix.txt
[01/11/2009 - 23:37:23 | RD ] C:\Users
[01/08/2008 - 00:40:18 | A | 21] C:\V552.txt
[07/09/2008 - 11:50:54 | A | 166] C:\wconsole.log
[07/10/2010 - 11:07:10 | D ] C:\Windows
[26/07/2010 - 20:34:23 | HD ] D:\$AVG8.VAULT$
[25/04/2009 - 15:35:18 | SHD ] D:\$RECYCLE.BIN
[07/09/2008 - 10:17:22 | SHD ] D:\System Volume Information
################## | Vaccin |
C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
################## | Upload |
Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-ASUS.zip
https://www.ionos.fr/?affiliate_id=77097
Merci de votre contribution.
################## | E.O.F |
############################## | UsbFix 7.028 | [Suppression]
Utilisateur: Asus (Administrateur) # PC-DE-ASUS [ASUSTeK Computer Inc. M51Va]
Mis à jour le 07/10/10 par El Desaparecido / C_XX
Lancé à 14:05:11 | 07/10/2010
Site Web: http://www.teamxscript.org
Contact: FindyKill.Contact@gmail.com
CPU: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Pare-feu Windows: Désactivé /!\
Antivirus: AVG Anti-Virus Free 8.0 [Enabled | Updated]
RAM -> 3070 Mo
C:\ (%systemdrive%) -> Disque fixe # 149 Go (64 Go libre(s) - 43%) [VistaOS] # NTFS
D:\ -> Disque fixe # 139 Go (139 Go libre(s) - 100%) [DATA] # NTFS
E:\ -> CD-ROM
################## | Éléments infectieux |
Supprimé! C:\tmp
################## | Registre |
Supprimé! HKCU\Software\MailBlocker
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
################## | Mountpoints2 |
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{762839a6-ab5b-11dd-b2f5-002215ec1454}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{884d4358-043e-11df-80d5-002215ec1454}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{9f4f0c73-909d-11de-9917-002215ec1454}
################## | Listing |
[07/10/2010 - 12:47:54 | HD ] C:\$AVG8.VAULT$
[15/11/2008 - 19:36:44 | SHD ] C:\$RECYCLE.BIN
[23/03/2009 - 18:23:49 | A | 3271] C:\Ad-Report-Clean-23.03.2009.log
[23/03/2009 - 14:16:59 | A | 3371] C:\Ad-Report-Scan-23.03.2009.log
[30/11/2008 - 13:01:45 | D ] C:\Advanced Email Extractor Pro & Crack
[17/11/2009 - 15:37:35 | HD ] C:\ASUS.SYS
[07/10/2010 - 13:38:42 | A | 4] C:\autoexec.bat
[02/11/2009 - 12:33:25 | SHD ] C:\Boot
[11/04/2009 - 08:36:36 | RASH | 333257] C:\bootmgr
[16/04/2008 - 13:27:17 | RAS | 8192] C:\BOOTSECT.BAK
[29/04/2009 - 10:29:50 | D ] C:\C-Fix
[04/04/2007 - 21:01:54 | A | 19] C:\CA21.txt
[16/05/2009 - 09:36:57 | A | 17254] C:\ComboFix.txt
[04/10/2010 - 09:28:09 | SHD ] C:\Config.Msi
[18/09/2006 - 23:43:37 | A | 10] C:\config.sys
[26/06/2010 - 09:08:12 | D ] C:\de3f570606811aced4b7b0b8e4e1c3
[07/09/2008 - 12:09:53 | A | 20615] C:\devlist.txt
[02/11/2006 - 15:02:03 | SHD ] C:\Documents and Settings
[28/01/2009 - 21:08:47 | D ] C:\FBPUpdate
[07/09/2008 - 12:09:52 | A | 9] C:\Finish.log
[07/10/2010 - 13:08:47 | ASH | 3220295680] C:\hiberfil.sys
[29/11/2008 - 04:27:10 | A | 221] C:\INSTALL.LOG
[28/01/2009 - 23:58:40 | D ] C:\Intel
[23/03/2009 - 14:13:11 | RASH | 0] C:\IO.SYS
[07/10/2010 - 11:06:05 | D ] C:\Kill'em
[07/10/2010 - 13:18:02 | A | 30] C:\List'em.txt
[04/07/2008 - 08:51:19 | RAH | 1048576] C:\M51V.BIN
[22/07/2008 - 15:12:40 | A | 14] C:\M51VA_M51VR_VISTA.20
[23/03/2009 - 14:13:11 | RASH | 0] C:\MSDOS.SYS
[19/11/2008 - 02:08:18 | RHD ] C:\MSOCache
[08/08/2008 - 09:22:19 | A | 30] C:\NERO.LOG
[04/07/2008 - 06:35:34 | A | 21] C:\NIS2008.TXT
[16/03/2007 - 01:18:45 | A | 25] C:\OFFICE2007_A.TXT
[07/10/2010 - 13:08:46 | ASH | 3534073856] C:\pagefile.sys
[06/09/2008 - 23:07:00 | A | 105] C:\Pass.txt
[24/07/2008 - 11:05:52 | A | 2386] C:\Patch.LOG
[21/01/2008 - 04:32:31 | D ] C:\PerfLogs
[07/10/2010 - 11:05:07 | RD ] C:\Program Files
[07/10/2010 - 11:06:13 | HD ] C:\ProgramData
[16/05/2009 - 09:36:59 | D ] C:\Qoobox
[26/04/2009 - 21:40:40 | A | 2883] C:\rapport.txt
[29/04/2008 - 16:30:15 | A | 20] C:\READER_A.TXT
[22/07/2008 - 15:12:40 | A | 14] C:\RECOVERY.DAT
[17/03/2009 - 14:50:39 | D ] C:\RECYCLER
[07/09/2008 - 11:41:35 | A | 426] C:\RHDSetup.log
[24/04/2009 - 22:17:35 | D ] C:\rsit
[17/11/2009 - 15:39:13 | A | 153] C:\setup.log
[26/02/2010 - 21:46:41 | A | 3932184] C:\snp2uvc-001.raw
[16/05/2006 - 02:22:24 | A | 5] C:\store.log
[07/09/2008 - 10:57:59 | A | 166] C:\SumHidd.txt
[07/09/2008 - 10:57:05 | A | 98] C:\SumOS.txt
[07/10/2010 - 09:55:15 | SHD ] C:\System Volume Information
[29/03/2009 - 12:42:29 | A | 1235] C:\TCleaner.txt
[19/01/2009 - 01:34:20 | D ] C:\Temp
[07/10/2010 - 14:05:58 | D ] C:\UsbFix
[07/10/2010 - 14:05:19 | A | 4157] C:\UsbFix.txt
[01/11/2009 - 23:37:23 | RD ] C:\Users
[01/08/2008 - 00:40:18 | A | 21] C:\V552.txt
[07/09/2008 - 11:50:54 | A | 166] C:\wconsole.log
[07/10/2010 - 11:07:10 | D ] C:\Windows
[26/07/2010 - 20:34:23 | HD ] D:\$AVG8.VAULT$
[25/04/2009 - 15:35:18 | SHD ] D:\$RECYCLE.BIN
[07/09/2008 - 10:17:22 | SHD ] D:\System Volume Information
################## | Vaccin |
C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
################## | Upload |
Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-ASUS.zip
https://www.ionos.fr/?affiliate_id=77097
Merci de votre contribution.
################## | E.O.F |
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 14:11
7 oct. 2010 à 14:11
toujours aussi inaccessible
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 14:16
7 oct. 2010 à 14:16
Oui, toujours... Je ne peux toujours pas accéder a mes dossiers.. la fenetre est toujours là ... :(
Utilisateur anonyme
7 oct. 2010 à 14:37
7 oct. 2010 à 14:37
salut une question
t'a-t-il l'accès à l'invité de commande ?
t'a-t-il l'accès à l'invité de commande ?
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 14:52
7 oct. 2010 à 14:52
c'est quoi l'invité de commande ? :s
Utilisateur anonyme
Modifié par gen-hackman le 7/10/2010 à 15:01
Modifié par gen-hackman le 7/10/2010 à 15:01
retélécharge combofix change son nom à l'enregistrement sur le bureau et reessaie de le lancer avec le clic droit "executer en tant qu'administrateur"
¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤
¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 16:06
7 oct. 2010 à 16:06
ComboFix 10-10-06.02 - Asus 07/10/2010 15:15:43.4.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1674 [GMT 2:00]
Lancé depuis: c:\users\Asus\Desktop\CCM.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\Config.ini
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-09-07 au 2010-10-07 ))))))))))))))))))))))))))))))))))))
.
2010-10-07 13:36 . 2010-10-07 13:48 -------- d-----w- c:\users\Asus\AppData\Local\temp
2010-10-07 13:36 . 2010-10-07 13:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-07 13:36 . 2010-10-07 13:36 -------- d-----w- c:\users\ADMINI~1\AppData\Local\temp
2010-10-07 12:16 . 2010-10-07 12:16 107248 ----a-w- c:\users\Asus\AppData\Local\GDIPFONTCACHEV1.DAT
2010-10-07 12:14 . 2010-10-07 12:14 -------- d-----w- C:\tmp
2010-10-07 12:06 . 2010-10-07 12:06 100444 ----a-w- C:\UsbFix_Upload_Me_PC-DE-ASUS.zip
2010-10-07 11:57 . 2010-10-07 12:06 -------- d-----w- C:\UsbFix
2010-10-07 09:06 . 2010-10-07 09:06 -------- d-----w- C:\Kill'em
2010-10-07 09:05 . 2010-10-07 11:38 -------- d-----w- c:\program files\List_Kill'em
2010-09-29 07:43 . 2010-06-22 13:30 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\users\Asus\AppData\Roaming\Uniblue
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\program files\Uniblue
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----w- c:\program files\Common Files\Skype
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----r- c:\program files\Skype
2010-09-21 22:57 . 2010-09-21 22:57 -------- d-----w- c:\users\Asus\AppData\Local\Deployment
2010-09-21 22:37 . 2010-09-21 22:37 -------- d-----w- c:\users\Asus\AppData\Local\Teknowebworks_LLC
2010-09-21 22:36 . 2010-09-21 22:36 -------- d-----w- c:\users\Asus\AppData\Roaming\Teknowebworks LLC
2010-09-21 22:35 . 2010-09-21 22:35 -------- d-----w- c:\program files\Teknowebwork LLC
2010-09-21 22:16 . 2010-09-21 22:26 -------- d-----w- c:\program files\Twitter Buzz - Auto Tweets
2010-09-21 21:48 . 2010-09-21 21:50 -------- d-----w- c:\users\Asus\AppData\Local\PaceSys_Software
2010-09-21 21:46 . 2010-09-21 21:46 -------- d-----w- c:\program files\PaceSys Software
2010-09-15 12:17 . 2010-09-15 12:17 -------- d-----w- c:\users\Asus\AppData\Local\My_Friends_Manager
2010-09-15 07:45 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2010-09-15 07:45 . 2010-08-17 14:11 128000 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-15 07:45 . 2010-04-05 17:02 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2010-09-15 07:44 . 2010-05-27 20:08 739328 ----a-w- c:\windows\system32\inetcomm.dll
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_B0C15ABBD5FDC1E0FAF02E.exe
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_61C6CC6D65CA7A13A15A55.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_88EEBC336434BCF94655DE.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_32C9F5A15AEDA20EFAD277.exe
2010-09-13 14:22 . 2010-09-13 14:22 -------- d-----w- c:\program files\Tweet Adder 2010
2010-09-09 17:22 . 2010-09-23 10:57 -------- d-----w- c:\program files\TaggedBlasterPro
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\users\Asus\AppData\Roaming\iLike
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\program files\iLike
2010-09-08 08:03 . 2010-09-08 08:03 -------- d-----w- c:\program files\Home
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 13:48 . 2010-05-09 14:01 -------- d-----w- c:\users\Asus\AppData\Roaming\Skype
2010-10-07 12:19 . 2008-04-16 11:16 738500 ----a-w- c:\windows\system32\perfh00C.dat
2010-10-07 12:19 . 2008-04-16 11:16 154184 ----a-w- c:\windows\system32\perfc00C.dat
2010-10-06 22:02 . 2009-11-17 13:43 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-10-05 09:35 . 2008-11-17 18:25 -------- d-----w- c:\users\Asus\AppData\Roaming\skypePM
2010-09-29 17:02 . 2010-05-30 15:38 -------- d-----w- c:\users\Asus\AppData\Roaming\vlc
2010-09-29 08:58 . 2008-09-07 09:51 -------- d-----w- c:\program files\ASUS
2010-09-27 19:27 . 2008-11-17 18:20 -------- d-----w- c:\programdata\Skype
2010-09-23 10:34 . 2010-07-23 17:14 -------- d-----w- c:\program files\MFB-MyspaceFriendBomber
2010-09-21 22:35 . 2008-09-07 08:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-21 22:30 . 2009-05-01 17:00 -------- d-----w- c:\program files\Friend Click
2010-09-19 20:34 . 2008-11-23 11:03 -------- d-----w- c:\users\Asus\AppData\Roaming\Azureus
2010-09-15 20:53 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-09-15 13:29 . 2010-08-31 21:29 -------- d-----w- c:\program files\FbookEmailGrabber
2010-09-15 12:18 . 2010-06-23 21:31 -------- d-----w- c:\program files\My Friends Manager
2010-09-14 10:28 . 2010-07-21 21:49 -------- d-----w- c:\program files\FBP - Facebook Blaster Pro
2010-09-10 10:23 . 2009-12-16 09:13 -------- d-----w- c:\program files\FFB - Facebook Friend Bomber
2010-09-08 15:56 . 2009-03-29 20:08 -------- d-----w- c:\program files\iTunes
2010-09-07 11:10 . 2009-11-11 20:13 -------- d-----w- c:\program files\FacebookFriendAdderElite
2010-09-07 07:58 . 2010-09-07 07:56 -------- d-----w- c:\program files\Linked Software
2010-09-07 07:45 . 2010-09-07 07:31 -------- d-----w- c:\program files\TwitterBlasterPro
2010-09-06 18:14 . 2010-09-06 18:09 -------- d-----w- c:\program files\Foxit Software
2010-09-06 18:03 . 2010-09-06 17:41 -------- d-----w- c:\program files\Google
2010-09-06 17:41 . 2010-09-06 17:41 -------- d-----w- c:\programdata\Google Updater
2010-09-05 16:02 . 2008-11-13 08:06 -------- d-----w- c:\program files\Common Files\Apple
2010-09-05 16:01 . 2006-11-02 10:25 86016 ----a-w- c:\windows\Inf\infstor.dat
2010-09-05 16:01 . 2006-11-02 10:25 51200 ----a-w- c:\windows\Inf\infpub.dat
2010-09-05 16:01 . 2006-11-02 10:25 143360 ----a-w- c:\windows\Inf\infstrng.dat
2010-09-05 15:58 . 2008-09-07 09:56 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-04 22:26 . 2009-08-25 22:22 -------- d-----w- c:\users\Asus\AppData\Roaming\Research In Motion
2010-09-04 22:26 . 2009-08-25 22:20 -------- d-----w- c:\program files\Research In Motion
2010-09-04 22:26 . 2009-06-13 23:22 -------- d-----w- c:\program files\Common Files\Research In Motion
2010-09-04 08:13 . 2010-09-04 08:13 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-09-03 16:27 . 2010-09-02 09:02 -------- d-----w- c:\program files\LimeWire
2010-08-30 12:06 . 2008-12-25 21:25 -------- d-----w- c:\users\Asus\AppData\Roaming\dvdcss
2010-08-29 18:31 . 2009-03-19 20:05 -------- d-----w- c:\program files\Sony
2010-08-29 14:00 . 2009-03-19 20:11 -------- d-----w- c:\users\Asus\AppData\Roaming\Sony
2010-08-29 13:15 . 2010-08-29 13:15 -------- d-----w- c:\program files\VASST
2010-08-29 13:06 . 2010-08-29 13:06 -------- d-----w- c:\program files\Sonic Foundry
2010-08-29 13:00 . 2010-08-29 12:54 -------- d-----w- c:\program files\NewBlue
2010-08-29 12:54 . 2010-08-29 12:54 279172 ----a-w- c:\programdata\eSellerate\eWebClient.dll
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\programdata\eSellerate
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\program files\Common Files\eSellerate
2010-08-29 12:53 . 2010-08-29 12:49 -------- d-----w- c:\program files\Magic Bullet Editors 2.0 Vegas
2010-08-29 12:36 . 2010-08-29 12:36 -------- d-----w- c:\program files\Vstplugins
2010-08-29 12:36 . 2009-03-19 20:08 -------- d-----w- c:\programdata\Sony
2010-08-29 12:35 . 2009-03-19 19:51 -------- d-----w- c:\program files\Sony Setup
2010-08-25 08:26 . 2008-10-27 11:07 -------- d-----w- c:\program files\CCleaner
2010-08-19 11:56 . 2008-11-23 11:03 -------- d-----w- c:\program files\Azureus
2010-08-19 11:18 . 2010-08-19 11:18 310208 ----a-w- c:\users\Asus\AppData\Roaming\Azureus\plugins\mlab\ShaperProbeC.exe
2010-08-19 08:07 . 2009-04-01 18:22 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-19 08:07 . 2010-07-10 06:11 53632 ----a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-07-10 06:15 . 2010-04-16 06:53 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-10 06:11 . 2010-07-10 06:11 53632 ----a-w- c:\users\Asus\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-06-13 09:56 . 2008-09-30 08:44 99432 ----a-w- c:\program files\Common Files\Engines.lnl
2009-03-29 10:14 . 2009-03-29 10:14 740261 ----a-w- c:\program files\wot-20090325-fx.xpi
2009-03-29 10:13 . 2009-03-29 10:13 309310 ----a-w- c:\program files\adblock_plus-1.0.1-fx+sm+tb.xpi
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"Audio Kontrol 1"="c:\program files\Native Instruments\Audio Kontrol 1\Audio Kontrol 1.exe" [2006-09-18 6336512]
"filehippo.com"="c:\program files\filehippo.com\UpdateChecker.exe" [2010-04-29 248832]
"VPbubble"="c:\program files\Nosibay\VPbubble\launcher.exe" [2009-09-30 239120]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-06 39408]
"iLike"="c:\program files\iLike\1.2.18\ilikesidebar.exe" [2008-09-10 63024]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"RegistryBooster"="c:\program files\Uniblue\RegistryBooster\launcher.exe" [2010-09-15 67448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2008-09-07 47672]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-07-09 2048352]
"BboxUpdate"="c:\program files\BboxUpdate\eStantAutoRunV.exe" [2008-04-14 6144]
"NMB"="c:\users\Asus\Documents\Nicolas\Nouveau Dossier\mxsound.exe" [2008-01-10 661504]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\APSHook.dll c:\windows\System32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2008-09-07 09:55 3054136 ----a-w- c:\windows\AsScrPro.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2008-02-01 13:29 61440 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2008-01-23 22:34 7766016 ----a-w- c:\program files\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS]
2003-12-22 12:11 17920 ----a-r- c:\progra~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H2O]
2005-10-31 22:00 307200 ----a-w- c:\program files\Syncrosoft\POS\H2O\cledx.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2008-01-12 05:40 98304 ----a-w- c:\program files\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-03-11 11:52 342312 ----a-w- c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
2008-06-09 17:16 2363392 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
2007-08-02 19:52 778240 ----a-w- c:\program files\P4P\P4P.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-04 23:54 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-04-01 08:31 6025216 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-01-21 19:17 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 09:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-07 01:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
2008-01-21 02:23 215552 ----a-w- c:\windows\WindowsMobile\wmdSync.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-21 02:25 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 136176]
R3 ak1avs;ak1avs;c:\windows\system32\Drivers\ak1avs.sys [2006-09-13 25088]
R3 ak1usb;ak1usb;c:\windows\system32\Drivers\ak1usb.sys [2006-09-13 84992]
R3 ASUSProcObsrv;ASUS Process Creation/Termination Observer;e:\i386\AsProcOb.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;c:\windows\system32\DRIVERS\usb8023.sys [2009-04-11 15872]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-10 691696]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2009-08-23 335240]
S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2009-05-03 108552]
S2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-08-23 297752]
S2 eStantLaunchService;BboxUpdate;c:\program files\BboxUpdate\eSRunService.exe [2008-04-29 20480]
S3 CLEDX;Team H2O CLEDX service;c:\windows\system32\DRIVERS\cledx.sys [2005-05-09 33792]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2009-05-28 4233728]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'
2010-10-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-09-06 17:41]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RegistryBooster.job
- c:\program files\Uniblue\RegistryBooster\rbmonitor.exe [2010-09-28 11:18]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2ar2pe8h.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.fr
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1970.7372\npCIDetect14.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
------- Associations de fichier -------
.
.txt=
.
- - - - ORPHELINS SUPPRIMES - - - -
Toolbar-Locked - (no file)
HKCU-Run-TwitterSubmitter - c:\program files\Twitter Buzz - Auto Tweets\TwitterBuzz-AutoTweets.exe
SSODL-Blur-{fedae504-5959-45e4-9c8c-8f352334a990} - c:\program files\Common Files\Blur\Blur.dll
AddRemove-Native Instruments - Audio Kontrol 1 Driver - c:\program files\Native Instruments\Audio Kontrol 1 Driver\uninst.exe Software\Native Instruments\Audio Kontrol 1 Driver\Setup
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'Explorer.exe'(6000)
c:\windows\system32\APSHook.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll
c:\program files\real\realplayer\converter\RCAPlugins\rjrmapln.dll
c:\program files\real\realplayer\converter\plugins\rndtdriver.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\progra~1\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\ATK Hotkey\Hcontrol.exe
c:\program files\ATK Hotkey\MsgTranAgt.exe
c:\windows\system32\conime.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\AVG\AVG8\avgtray.exe
c:\program files\BboxUpdate\BTLiveUpdate.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Uniblue\RegistryBooster\registrybooster.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Nosibay\VPbubble\VPbubble.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\windows\system32\WerFault.exe
c:\windows\system32\WerFault.exe
.
**************************************************************************
.
Heure de fin: 2010-10-07 15:54:30 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-10-07 13:54
ComboFix2.txt 2009-05-16 07:36
Avant-CF: 68 324 438 016 octets libres
Après-CF: 68 203 876 352 octets libres
- - End Of File - - 7C90A0B58967BFE8559A3B03256837A1
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1674 [GMT 2:00]
Lancé depuis: c:\users\Asus\Desktop\CCM.exe
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\Config.ini
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-09-07 au 2010-10-07 ))))))))))))))))))))))))))))))))))))
.
2010-10-07 13:36 . 2010-10-07 13:48 -------- d-----w- c:\users\Asus\AppData\Local\temp
2010-10-07 13:36 . 2010-10-07 13:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-07 13:36 . 2010-10-07 13:36 -------- d-----w- c:\users\ADMINI~1\AppData\Local\temp
2010-10-07 12:16 . 2010-10-07 12:16 107248 ----a-w- c:\users\Asus\AppData\Local\GDIPFONTCACHEV1.DAT
2010-10-07 12:14 . 2010-10-07 12:14 -------- d-----w- C:\tmp
2010-10-07 12:06 . 2010-10-07 12:06 100444 ----a-w- C:\UsbFix_Upload_Me_PC-DE-ASUS.zip
2010-10-07 11:57 . 2010-10-07 12:06 -------- d-----w- C:\UsbFix
2010-10-07 09:06 . 2010-10-07 09:06 -------- d-----w- C:\Kill'em
2010-10-07 09:05 . 2010-10-07 11:38 -------- d-----w- c:\program files\List_Kill'em
2010-09-29 07:43 . 2010-06-22 13:30 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\users\Asus\AppData\Roaming\Uniblue
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\program files\Uniblue
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----w- c:\program files\Common Files\Skype
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----r- c:\program files\Skype
2010-09-21 22:57 . 2010-09-21 22:57 -------- d-----w- c:\users\Asus\AppData\Local\Deployment
2010-09-21 22:37 . 2010-09-21 22:37 -------- d-----w- c:\users\Asus\AppData\Local\Teknowebworks_LLC
2010-09-21 22:36 . 2010-09-21 22:36 -------- d-----w- c:\users\Asus\AppData\Roaming\Teknowebworks LLC
2010-09-21 22:35 . 2010-09-21 22:35 -------- d-----w- c:\program files\Teknowebwork LLC
2010-09-21 22:16 . 2010-09-21 22:26 -------- d-----w- c:\program files\Twitter Buzz - Auto Tweets
2010-09-21 21:48 . 2010-09-21 21:50 -------- d-----w- c:\users\Asus\AppData\Local\PaceSys_Software
2010-09-21 21:46 . 2010-09-21 21:46 -------- d-----w- c:\program files\PaceSys Software
2010-09-15 12:17 . 2010-09-15 12:17 -------- d-----w- c:\users\Asus\AppData\Local\My_Friends_Manager
2010-09-15 07:45 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2010-09-15 07:45 . 2010-08-17 14:11 128000 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-15 07:45 . 2010-04-05 17:02 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2010-09-15 07:44 . 2010-05-27 20:08 739328 ----a-w- c:\windows\system32\inetcomm.dll
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_B0C15ABBD5FDC1E0FAF02E.exe
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_61C6CC6D65CA7A13A15A55.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_88EEBC336434BCF94655DE.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_32C9F5A15AEDA20EFAD277.exe
2010-09-13 14:22 . 2010-09-13 14:22 -------- d-----w- c:\program files\Tweet Adder 2010
2010-09-09 17:22 . 2010-09-23 10:57 -------- d-----w- c:\program files\TaggedBlasterPro
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\users\Asus\AppData\Roaming\iLike
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\program files\iLike
2010-09-08 08:03 . 2010-09-08 08:03 -------- d-----w- c:\program files\Home
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 13:48 . 2010-05-09 14:01 -------- d-----w- c:\users\Asus\AppData\Roaming\Skype
2010-10-07 12:19 . 2008-04-16 11:16 738500 ----a-w- c:\windows\system32\perfh00C.dat
2010-10-07 12:19 . 2008-04-16 11:16 154184 ----a-w- c:\windows\system32\perfc00C.dat
2010-10-06 22:02 . 2009-11-17 13:43 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-10-05 09:35 . 2008-11-17 18:25 -------- d-----w- c:\users\Asus\AppData\Roaming\skypePM
2010-09-29 17:02 . 2010-05-30 15:38 -------- d-----w- c:\users\Asus\AppData\Roaming\vlc
2010-09-29 08:58 . 2008-09-07 09:51 -------- d-----w- c:\program files\ASUS
2010-09-27 19:27 . 2008-11-17 18:20 -------- d-----w- c:\programdata\Skype
2010-09-23 10:34 . 2010-07-23 17:14 -------- d-----w- c:\program files\MFB-MyspaceFriendBomber
2010-09-21 22:35 . 2008-09-07 08:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-21 22:30 . 2009-05-01 17:00 -------- d-----w- c:\program files\Friend Click
2010-09-19 20:34 . 2008-11-23 11:03 -------- d-----w- c:\users\Asus\AppData\Roaming\Azureus
2010-09-15 20:53 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-09-15 13:29 . 2010-08-31 21:29 -------- d-----w- c:\program files\FbookEmailGrabber
2010-09-15 12:18 . 2010-06-23 21:31 -------- d-----w- c:\program files\My Friends Manager
2010-09-14 10:28 . 2010-07-21 21:49 -------- d-----w- c:\program files\FBP - Facebook Blaster Pro
2010-09-10 10:23 . 2009-12-16 09:13 -------- d-----w- c:\program files\FFB - Facebook Friend Bomber
2010-09-08 15:56 . 2009-03-29 20:08 -------- d-----w- c:\program files\iTunes
2010-09-07 11:10 . 2009-11-11 20:13 -------- d-----w- c:\program files\FacebookFriendAdderElite
2010-09-07 07:58 . 2010-09-07 07:56 -------- d-----w- c:\program files\Linked Software
2010-09-07 07:45 . 2010-09-07 07:31 -------- d-----w- c:\program files\TwitterBlasterPro
2010-09-06 18:14 . 2010-09-06 18:09 -------- d-----w- c:\program files\Foxit Software
2010-09-06 18:03 . 2010-09-06 17:41 -------- d-----w- c:\program files\Google
2010-09-06 17:41 . 2010-09-06 17:41 -------- d-----w- c:\programdata\Google Updater
2010-09-05 16:02 . 2008-11-13 08:06 -------- d-----w- c:\program files\Common Files\Apple
2010-09-05 16:01 . 2006-11-02 10:25 86016 ----a-w- c:\windows\Inf\infstor.dat
2010-09-05 16:01 . 2006-11-02 10:25 51200 ----a-w- c:\windows\Inf\infpub.dat
2010-09-05 16:01 . 2006-11-02 10:25 143360 ----a-w- c:\windows\Inf\infstrng.dat
2010-09-05 15:58 . 2008-09-07 09:56 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-04 22:26 . 2009-08-25 22:22 -------- d-----w- c:\users\Asus\AppData\Roaming\Research In Motion
2010-09-04 22:26 . 2009-08-25 22:20 -------- d-----w- c:\program files\Research In Motion
2010-09-04 22:26 . 2009-06-13 23:22 -------- d-----w- c:\program files\Common Files\Research In Motion
2010-09-04 08:13 . 2010-09-04 08:13 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-09-03 16:27 . 2010-09-02 09:02 -------- d-----w- c:\program files\LimeWire
2010-08-30 12:06 . 2008-12-25 21:25 -------- d-----w- c:\users\Asus\AppData\Roaming\dvdcss
2010-08-29 18:31 . 2009-03-19 20:05 -------- d-----w- c:\program files\Sony
2010-08-29 14:00 . 2009-03-19 20:11 -------- d-----w- c:\users\Asus\AppData\Roaming\Sony
2010-08-29 13:15 . 2010-08-29 13:15 -------- d-----w- c:\program files\VASST
2010-08-29 13:06 . 2010-08-29 13:06 -------- d-----w- c:\program files\Sonic Foundry
2010-08-29 13:00 . 2010-08-29 12:54 -------- d-----w- c:\program files\NewBlue
2010-08-29 12:54 . 2010-08-29 12:54 279172 ----a-w- c:\programdata\eSellerate\eWebClient.dll
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\programdata\eSellerate
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\program files\Common Files\eSellerate
2010-08-29 12:53 . 2010-08-29 12:49 -------- d-----w- c:\program files\Magic Bullet Editors 2.0 Vegas
2010-08-29 12:36 . 2010-08-29 12:36 -------- d-----w- c:\program files\Vstplugins
2010-08-29 12:36 . 2009-03-19 20:08 -------- d-----w- c:\programdata\Sony
2010-08-29 12:35 . 2009-03-19 19:51 -------- d-----w- c:\program files\Sony Setup
2010-08-25 08:26 . 2008-10-27 11:07 -------- d-----w- c:\program files\CCleaner
2010-08-19 11:56 . 2008-11-23 11:03 -------- d-----w- c:\program files\Azureus
2010-08-19 11:18 . 2010-08-19 11:18 310208 ----a-w- c:\users\Asus\AppData\Roaming\Azureus\plugins\mlab\ShaperProbeC.exe
2010-08-19 08:07 . 2009-04-01 18:22 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-19 08:07 . 2010-07-10 06:11 53632 ----a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-07-10 06:15 . 2010-04-16 06:53 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-10 06:11 . 2010-07-10 06:11 53632 ----a-w- c:\users\Asus\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-06-13 09:56 . 2008-09-30 08:44 99432 ----a-w- c:\program files\Common Files\Engines.lnl
2009-03-29 10:14 . 2009-03-29 10:14 740261 ----a-w- c:\program files\wot-20090325-fx.xpi
2009-03-29 10:13 . 2009-03-29 10:13 309310 ----a-w- c:\program files\adblock_plus-1.0.1-fx+sm+tb.xpi
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"Audio Kontrol 1"="c:\program files\Native Instruments\Audio Kontrol 1\Audio Kontrol 1.exe" [2006-09-18 6336512]
"filehippo.com"="c:\program files\filehippo.com\UpdateChecker.exe" [2010-04-29 248832]
"VPbubble"="c:\program files\Nosibay\VPbubble\launcher.exe" [2009-09-30 239120]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-06 39408]
"iLike"="c:\program files\iLike\1.2.18\ilikesidebar.exe" [2008-09-10 63024]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"RegistryBooster"="c:\program files\Uniblue\RegistryBooster\launcher.exe" [2010-09-15 67448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2008-09-07 47672]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-07-09 2048352]
"BboxUpdate"="c:\program files\BboxUpdate\eStantAutoRunV.exe" [2008-04-14 6144]
"NMB"="c:\users\Asus\Documents\Nicolas\Nouveau Dossier\mxsound.exe" [2008-01-10 661504]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\APSHook.dll c:\windows\System32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2008-09-07 09:55 3054136 ----a-w- c:\windows\AsScrPro.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2008-02-01 13:29 61440 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2008-01-23 22:34 7766016 ----a-w- c:\program files\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS]
2003-12-22 12:11 17920 ----a-r- c:\progra~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H2O]
2005-10-31 22:00 307200 ----a-w- c:\program files\Syncrosoft\POS\H2O\cledx.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2008-01-12 05:40 98304 ----a-w- c:\program files\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-03-11 11:52 342312 ----a-w- c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
2008-06-09 17:16 2363392 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
2007-08-02 19:52 778240 ----a-w- c:\program files\P4P\P4P.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-04 23:54 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-04-01 08:31 6025216 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-01-21 19:17 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 09:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-07 01:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
2008-01-21 02:23 215552 ----a-w- c:\windows\WindowsMobile\wmdSync.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-21 02:25 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 136176]
R3 ak1avs;ak1avs;c:\windows\system32\Drivers\ak1avs.sys [2006-09-13 25088]
R3 ak1usb;ak1usb;c:\windows\system32\Drivers\ak1usb.sys [2006-09-13 84992]
R3 ASUSProcObsrv;ASUS Process Creation/Termination Observer;e:\i386\AsProcOb.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;c:\windows\system32\DRIVERS\usb8023.sys [2009-04-11 15872]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-10 691696]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2009-08-23 335240]
S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2009-05-03 108552]
S2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-08-23 297752]
S2 eStantLaunchService;BboxUpdate;c:\program files\BboxUpdate\eSRunService.exe [2008-04-29 20480]
S3 CLEDX;Team H2O CLEDX service;c:\windows\system32\DRIVERS\cledx.sys [2005-05-09 33792]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2009-05-28 4233728]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'
2010-10-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-09-06 17:41]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RegistryBooster.job
- c:\program files\Uniblue\RegistryBooster\rbmonitor.exe [2010-09-28 11:18]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2ar2pe8h.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.fr
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1970.7372\npCIDetect14.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
------- Associations de fichier -------
.
.txt=
.
- - - - ORPHELINS SUPPRIMES - - - -
Toolbar-Locked - (no file)
HKCU-Run-TwitterSubmitter - c:\program files\Twitter Buzz - Auto Tweets\TwitterBuzz-AutoTweets.exe
SSODL-Blur-{fedae504-5959-45e4-9c8c-8f352334a990} - c:\program files\Common Files\Blur\Blur.dll
AddRemove-Native Instruments - Audio Kontrol 1 Driver - c:\program files\Native Instruments\Audio Kontrol 1 Driver\uninst.exe Software\Native Instruments\Audio Kontrol 1 Driver\Setup
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'Explorer.exe'(6000)
c:\windows\system32\APSHook.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll
c:\program files\real\realplayer\converter\RCAPlugins\rjrmapln.dll
c:\program files\real\realplayer\converter\plugins\rndtdriver.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\progra~1\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\ATK Hotkey\Hcontrol.exe
c:\program files\ATK Hotkey\MsgTranAgt.exe
c:\windows\system32\conime.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\AVG\AVG8\avgtray.exe
c:\program files\BboxUpdate\BTLiveUpdate.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Uniblue\RegistryBooster\registrybooster.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Nosibay\VPbubble\VPbubble.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\windows\system32\WerFault.exe
c:\windows\system32\WerFault.exe
.
**************************************************************************
.
Heure de fin: 2010-10-07 15:54:30 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-10-07 13:54
ComboFix2.txt 2009-05-16 07:36
Avant-CF: 68 324 438 016 octets libres
Après-CF: 68 203 876 352 octets libres
- - End Of File - - 7C90A0B58967BFE8559A3B03256837A1
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 16:50
7 oct. 2010 à 16:50
ComboFix 10-10-06.02 - Asus 07/10/2010 16:31:47.5.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1495 [GMT 2:00]
Lancé depuis: c:\users\Asus\Desktop\CCM.exe
Commutateurs utilisés :: c:\users\Asus\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
FILE ::
"C:\tmp"
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\programdata\regid.1986-12.com.adobe
c:\programdata\regid.1986-12.com.adobe\regid.1986-12.com.adobe_Photoshop-CS5-Win-GM.swidtag
C:\tmp
c:\tmp\debug.txt
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-09-07 au 2010-10-07 ))))))))))))))))))))))))))))))))))))
.
2010-10-07 14:40 . 2010-10-07 14:40 -------- d-----w- C:\tmp
2010-10-07 14:37 . 2010-10-07 14:41 -------- d-----w- c:\users\Asus\AppData\Local\temp
2010-10-07 14:37 . 2010-10-07 14:37 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-10-07 14:37 . 2010-10-07 14:37 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-07 14:37 . 2010-10-07 14:37 -------- d-----w- c:\users\ADMINI~1\AppData\Local\temp
2010-10-07 13:05 . 2010-10-07 13:54 -------- d-----w- C:\CCM
2010-10-07 12:16 . 2010-10-07 12:16 107248 ----a-w- c:\users\Asus\AppData\Local\GDIPFONTCACHEV1.DAT
2010-10-07 12:06 . 2010-10-07 12:06 100444 ----a-w- C:\UsbFix_Upload_Me_PC-DE-ASUS.zip
2010-10-07 11:57 . 2010-10-07 12:06 -------- d-----w- C:\UsbFix
2010-10-07 09:06 . 2010-10-07 09:06 -------- d-----w- C:\Kill'em
2010-10-07 09:05 . 2010-10-07 11:38 -------- d-----w- c:\program files\List_Kill'em
2010-09-29 07:43 . 2010-06-22 13:30 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\users\Asus\AppData\Roaming\Uniblue
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\program files\Uniblue
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----w- c:\program files\Common Files\Skype
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----r- c:\program files\Skype
2010-09-21 22:57 . 2010-09-21 22:57 -------- d-----w- c:\users\Asus\AppData\Local\Deployment
2010-09-21 22:37 . 2010-09-21 22:37 -------- d-----w- c:\users\Asus\AppData\Local\Teknowebworks_LLC
2010-09-21 22:36 . 2010-09-21 22:36 -------- d-----w- c:\users\Asus\AppData\Roaming\Teknowebworks LLC
2010-09-21 22:35 . 2010-09-21 22:35 -------- d-----w- c:\program files\Teknowebwork LLC
2010-09-21 22:16 . 2010-09-21 22:26 -------- d-----w- c:\program files\Twitter Buzz - Auto Tweets
2010-09-21 21:48 . 2010-09-21 21:50 -------- d-----w- c:\users\Asus\AppData\Local\PaceSys_Software
2010-09-21 21:46 . 2010-09-21 21:46 -------- d-----w- c:\program files\PaceSys Software
2010-09-15 12:17 . 2010-09-15 12:17 -------- d-----w- c:\users\Asus\AppData\Local\My_Friends_Manager
2010-09-15 07:45 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2010-09-15 07:45 . 2010-08-17 14:11 128000 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-15 07:45 . 2010-04-05 17:02 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2010-09-15 07:44 . 2010-05-27 20:08 739328 ----a-w- c:\windows\system32\inetcomm.dll
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_B0C15ABBD5FDC1E0FAF02E.exe
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_61C6CC6D65CA7A13A15A55.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_88EEBC336434BCF94655DE.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_32C9F5A15AEDA20EFAD277.exe
2010-09-13 14:22 . 2010-09-13 14:22 -------- d-----w- c:\program files\Tweet Adder 2010
2010-09-09 17:22 . 2010-09-23 10:57 -------- d-----w- c:\program files\TaggedBlasterPro
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\users\Asus\AppData\Roaming\iLike
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\program files\iLike
2010-09-08 08:03 . 2010-09-08 08:03 -------- d-----w- c:\program files\Home
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 14:39 . 2009-11-17 13:43 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-10-07 13:54 . 2008-04-16 11:16 738500 ----a-w- c:\windows\system32\perfh00C.dat
2010-10-07 13:54 . 2008-04-16 11:16 154184 ----a-w- c:\windows\system32\perfc00C.dat
2010-10-07 13:48 . 2010-05-09 14:01 -------- d-----w- c:\users\Asus\AppData\Roaming\Skype
2010-10-05 09:35 . 2008-11-17 18:25 -------- d-----w- c:\users\Asus\AppData\Roaming\skypePM
2010-09-29 17:02 . 2010-05-30 15:38 -------- d-----w- c:\users\Asus\AppData\Roaming\vlc
2010-09-29 08:58 . 2008-09-07 09:51 -------- d-----w- c:\program files\ASUS
2010-09-27 19:27 . 2008-11-17 18:20 -------- d-----w- c:\programdata\Skype
2010-09-23 10:34 . 2010-07-23 17:14 -------- d-----w- c:\program files\MFB-MyspaceFriendBomber
2010-09-21 22:35 . 2008-09-07 08:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-21 22:30 . 2009-05-01 17:00 -------- d-----w- c:\program files\Friend Click
2010-09-19 20:34 . 2008-11-23 11:03 -------- d-----w- c:\users\Asus\AppData\Roaming\Azureus
2010-09-15 20:53 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-09-15 13:29 . 2010-08-31 21:29 -------- d-----w- c:\program files\FbookEmailGrabber
2010-09-15 12:18 . 2010-06-23 21:31 -------- d-----w- c:\program files\My Friends Manager
2010-09-14 10:28 . 2010-07-21 21:49 -------- d-----w- c:\program files\FBP - Facebook Blaster Pro
2010-09-10 10:23 . 2009-12-16 09:13 -------- d-----w- c:\program files\FFB - Facebook Friend Bomber
2010-09-08 15:56 . 2009-03-29 20:08 -------- d-----w- c:\program files\iTunes
2010-09-07 11:10 . 2009-11-11 20:13 -------- d-----w- c:\program files\FacebookFriendAdderElite
2010-09-07 07:58 . 2010-09-07 07:56 -------- d-----w- c:\program files\Linked Software
2010-09-07 07:45 . 2010-09-07 07:31 -------- d-----w- c:\program files\TwitterBlasterPro
2010-09-06 18:14 . 2010-09-06 18:09 -------- d-----w- c:\program files\Foxit Software
2010-09-06 18:03 . 2010-09-06 17:41 -------- d-----w- c:\program files\Google
2010-09-06 17:41 . 2010-09-06 17:41 -------- d-----w- c:\programdata\Google Updater
2010-09-05 16:02 . 2008-11-13 08:06 -------- d-----w- c:\program files\Common Files\Apple
2010-09-05 16:01 . 2006-11-02 10:25 86016 ----a-w- c:\windows\Inf\infstor.dat
2010-09-05 16:01 . 2006-11-02 10:25 51200 ----a-w- c:\windows\Inf\infpub.dat
2010-09-05 16:01 . 2006-11-02 10:25 143360 ----a-w- c:\windows\Inf\infstrng.dat
2010-09-05 15:58 . 2008-09-07 09:56 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-04 22:26 . 2009-08-25 22:22 -------- d-----w- c:\users\Asus\AppData\Roaming\Research In Motion
2010-09-04 22:26 . 2009-08-25 22:20 -------- d-----w- c:\program files\Research In Motion
2010-09-04 22:26 . 2009-06-13 23:22 -------- d-----w- c:\program files\Common Files\Research In Motion
2010-09-03 16:27 . 2010-09-02 09:02 -------- d-----w- c:\program files\LimeWire
2010-08-30 12:06 . 2008-12-25 21:25 -------- d-----w- c:\users\Asus\AppData\Roaming\dvdcss
2010-08-29 18:31 . 2009-03-19 20:05 -------- d-----w- c:\program files\Sony
2010-08-29 14:00 . 2009-03-19 20:11 -------- d-----w- c:\users\Asus\AppData\Roaming\Sony
2010-08-29 13:15 . 2010-08-29 13:15 -------- d-----w- c:\program files\VASST
2010-08-29 13:06 . 2010-08-29 13:06 -------- d-----w- c:\program files\Sonic Foundry
2010-08-29 13:00 . 2010-08-29 12:54 -------- d-----w- c:\program files\NewBlue
2010-08-29 12:54 . 2010-08-29 12:54 279172 ----a-w- c:\programdata\eSellerate\eWebClient.dll
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\programdata\eSellerate
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\program files\Common Files\eSellerate
2010-08-29 12:53 . 2010-08-29 12:49 -------- d-----w- c:\program files\Magic Bullet Editors 2.0 Vegas
2010-08-29 12:36 . 2010-08-29 12:36 -------- d-----w- c:\program files\Vstplugins
2010-08-29 12:36 . 2009-03-19 20:08 -------- d-----w- c:\programdata\Sony
2010-08-29 12:35 . 2009-03-19 19:51 -------- d-----w- c:\program files\Sony Setup
2010-08-25 08:26 . 2008-10-27 11:07 -------- d-----w- c:\program files\CCleaner
2010-08-19 11:56 . 2008-11-23 11:03 -------- d-----w- c:\program files\Azureus
2010-08-19 11:18 . 2010-08-19 11:18 310208 ----a-w- c:\users\Asus\AppData\Roaming\Azureus\plugins\mlab\ShaperProbeC.exe
2010-08-19 08:07 . 2009-04-01 18:22 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-19 08:07 . 2010-07-10 06:11 53632 ----a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-07-10 06:15 . 2010-04-16 06:53 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-10 06:11 . 2010-07-10 06:11 53632 ----a-w- c:\users\Asus\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-06-13 09:56 . 2008-09-30 08:44 99432 ----a-w- c:\program files\Common Files\Engines.lnl
2009-03-29 10:14 . 2009-03-29 10:14 740261 ----a-w- c:\program files\wot-20090325-fx.xpi
2009-03-29 10:13 . 2009-03-29 10:13 309310 ----a-w- c:\program files\adblock_plus-1.0.1-fx+sm+tb.xpi
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"Audio Kontrol 1"="c:\program files\Native Instruments\Audio Kontrol 1\Audio Kontrol 1.exe" [2006-09-18 6336512]
"filehippo.com"="c:\program files\filehippo.com\UpdateChecker.exe" [2010-04-29 248832]
"VPbubble"="c:\program files\Nosibay\VPbubble\launcher.exe" [2009-09-30 239120]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-06 39408]
"iLike"="c:\program files\iLike\1.2.18\ilikesidebar.exe" [2008-09-10 63024]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"RegistryBooster"="c:\program files\Uniblue\RegistryBooster\launcher.exe" [2010-09-15 67448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2008-09-07 47672]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-07-09 2048352]
"BboxUpdate"="c:\program files\BboxUpdate\eStantAutoRunV.exe" [2008-04-14 6144]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2008-09-07 09:55 3054136 ----a-w- c:\windows\AsScrPro.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2008-02-01 13:29 61440 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2008-01-23 22:34 7766016 ----a-w- c:\program files\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS]
2003-12-22 12:11 17920 ----a-r- c:\progra~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H2O]
2005-10-31 22:00 307200 ----a-w- c:\program files\Syncrosoft\POS\H2O\cledx.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2008-01-12 05:40 98304 ----a-w- c:\program files\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-03-11 11:52 342312 ----a-w- c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
2008-06-09 17:16 2363392 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
2007-08-02 19:52 778240 ----a-w- c:\program files\P4P\P4P.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-04 23:54 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-04-01 08:31 6025216 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-01-21 19:17 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 09:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-07 01:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
2008-01-21 02:23 215552 ----a-w- c:\windows\WindowsMobile\wmdSync.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-21 02:25 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 136176]
R3 ak1avs;ak1avs;c:\windows\system32\Drivers\ak1avs.sys [2006-09-13 25088]
R3 ak1usb;ak1usb;c:\windows\system32\Drivers\ak1usb.sys [2006-09-13 84992]
R3 ASUSProcObsrv;ASUS Process Creation/Termination Observer;e:\i386\AsProcOb.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;c:\windows\system32\DRIVERS\usb8023.sys [2009-04-11 15872]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-10 691696]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2009-08-23 335240]
S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2009-05-03 108552]
S2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-08-23 297752]
S2 eStantLaunchService;BboxUpdate;c:\program files\BboxUpdate\eSRunService.exe [2008-04-29 20480]
S3 CLEDX;Team H2O CLEDX service;c:\windows\system32\DRIVERS\cledx.sys [2005-05-09 33792]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2009-05-28 4233728]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'
2010-10-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-09-06 17:41]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RegistryBooster.job
- c:\program files\Uniblue\RegistryBooster\rbmonitor.exe [2010-09-28 11:18]
.
.
------- Examen supplémentaire -------
.
FF - ProfilePath - c:\users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2ar2pe8h.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.fr
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1970.7372\npCIDetect14.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'Explorer.exe'(3232)
c:\windows\system32\APSHook.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll
c:\program files\real\realplayer\converter\RCAPlugins\rjrmapln.dll
c:\program files\real\realplayer\converter\plugins\rndtdriver.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\progra~1\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\ATK Hotkey\Hcontrol.exe
c:\program files\ATK Hotkey\MsgTranAgt.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\ATK Hotkey\ATKOSD.exe
c:\program files\ATK Hotkey\KBFiltr.exe
c:\program files\ATK Hotkey\WDC.exe
c:\windows\system32\conime.exe
c:\program files\AVG\AVG8\avgtray.exe
c:\program files\BboxUpdate\BTLiveUpdate.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Uniblue\RegistryBooster\registrybooster.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Nosibay\VPbubble\VPbubble.exe
c:\windows\system32\WerFault.exe
c:\windows\system32\WerFault.exe
.
**************************************************************************
.
Heure de fin: 2010-10-07 16:48:41 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-10-07 14:48
ComboFix2.txt 2010-10-07 13:54
ComboFix3.txt 2009-05-16 07:36
Avant-CF: 68 216 651 776 octets libres
Après-CF: 68 079 341 568 octets libres
- - End Of File - - ACF313DF3DDB8108D48A21DDEDE8B912
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1495 [GMT 2:00]
Lancé depuis: c:\users\Asus\Desktop\CCM.exe
Commutateurs utilisés :: c:\users\Asus\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
FILE ::
"C:\tmp"
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\programdata\regid.1986-12.com.adobe
c:\programdata\regid.1986-12.com.adobe\regid.1986-12.com.adobe_Photoshop-CS5-Win-GM.swidtag
C:\tmp
c:\tmp\debug.txt
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-09-07 au 2010-10-07 ))))))))))))))))))))))))))))))))))))
.
2010-10-07 14:40 . 2010-10-07 14:40 -------- d-----w- C:\tmp
2010-10-07 14:37 . 2010-10-07 14:41 -------- d-----w- c:\users\Asus\AppData\Local\temp
2010-10-07 14:37 . 2010-10-07 14:37 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-10-07 14:37 . 2010-10-07 14:37 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-07 14:37 . 2010-10-07 14:37 -------- d-----w- c:\users\ADMINI~1\AppData\Local\temp
2010-10-07 13:05 . 2010-10-07 13:54 -------- d-----w- C:\CCM
2010-10-07 12:16 . 2010-10-07 12:16 107248 ----a-w- c:\users\Asus\AppData\Local\GDIPFONTCACHEV1.DAT
2010-10-07 12:06 . 2010-10-07 12:06 100444 ----a-w- C:\UsbFix_Upload_Me_PC-DE-ASUS.zip
2010-10-07 11:57 . 2010-10-07 12:06 -------- d-----w- C:\UsbFix
2010-10-07 09:06 . 2010-10-07 09:06 -------- d-----w- C:\Kill'em
2010-10-07 09:05 . 2010-10-07 11:38 -------- d-----w- c:\program files\List_Kill'em
2010-09-29 07:43 . 2010-06-22 13:30 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\users\Asus\AppData\Roaming\Uniblue
2010-09-28 13:04 . 2010-09-28 13:04 -------- d-----w- c:\program files\Uniblue
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----w- c:\program files\Common Files\Skype
2010-09-27 19:27 . 2010-09-27 19:27 -------- d-----r- c:\program files\Skype
2010-09-21 22:57 . 2010-09-21 22:57 -------- d-----w- c:\users\Asus\AppData\Local\Deployment
2010-09-21 22:37 . 2010-09-21 22:37 -------- d-----w- c:\users\Asus\AppData\Local\Teknowebworks_LLC
2010-09-21 22:36 . 2010-09-21 22:36 -------- d-----w- c:\users\Asus\AppData\Roaming\Teknowebworks LLC
2010-09-21 22:35 . 2010-09-21 22:35 -------- d-----w- c:\program files\Teknowebwork LLC
2010-09-21 22:16 . 2010-09-21 22:26 -------- d-----w- c:\program files\Twitter Buzz - Auto Tweets
2010-09-21 21:48 . 2010-09-21 21:50 -------- d-----w- c:\users\Asus\AppData\Local\PaceSys_Software
2010-09-21 21:46 . 2010-09-21 21:46 -------- d-----w- c:\program files\PaceSys Software
2010-09-15 12:17 . 2010-09-15 12:17 -------- d-----w- c:\users\Asus\AppData\Local\My_Friends_Manager
2010-09-15 07:45 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2010-09-15 07:45 . 2010-08-17 14:11 128000 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-15 07:45 . 2010-04-05 17:02 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL
2010-09-15 07:44 . 2010-05-27 20:08 739328 ----a-w- c:\windows\system32\inetcomm.dll
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_B0C15ABBD5FDC1E0FAF02E.exe
2010-09-14 15:17 . 2010-09-22 10:41 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{D92AD491-3492-41A9-9519-30246440E6B8}\_61C6CC6D65CA7A13A15A55.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_88EEBC336434BCF94655DE.exe
2010-09-13 15:05 . 2010-09-13 15:05 5694 ----a-r- c:\users\Asus\AppData\Roaming\Microsoft\Installer\{569B6714-23DB-4EA8-A5C6-7FFE45EC5ADF}\_32C9F5A15AEDA20EFAD277.exe
2010-09-13 14:22 . 2010-09-13 14:22 -------- d-----w- c:\program files\Tweet Adder 2010
2010-09-09 17:22 . 2010-09-23 10:57 -------- d-----w- c:\program files\TaggedBlasterPro
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\users\Asus\AppData\Roaming\iLike
2010-09-08 15:56 . 2010-09-08 15:56 -------- d-----w- c:\program files\iLike
2010-09-08 08:03 . 2010-09-08 08:03 -------- d-----w- c:\program files\Home
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-07 14:39 . 2009-11-17 13:43 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-10-07 13:54 . 2008-04-16 11:16 738500 ----a-w- c:\windows\system32\perfh00C.dat
2010-10-07 13:54 . 2008-04-16 11:16 154184 ----a-w- c:\windows\system32\perfc00C.dat
2010-10-07 13:48 . 2010-05-09 14:01 -------- d-----w- c:\users\Asus\AppData\Roaming\Skype
2010-10-05 09:35 . 2008-11-17 18:25 -------- d-----w- c:\users\Asus\AppData\Roaming\skypePM
2010-09-29 17:02 . 2010-05-30 15:38 -------- d-----w- c:\users\Asus\AppData\Roaming\vlc
2010-09-29 08:58 . 2008-09-07 09:51 -------- d-----w- c:\program files\ASUS
2010-09-27 19:27 . 2008-11-17 18:20 -------- d-----w- c:\programdata\Skype
2010-09-23 10:34 . 2010-07-23 17:14 -------- d-----w- c:\program files\MFB-MyspaceFriendBomber
2010-09-21 22:35 . 2008-09-07 08:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-21 22:30 . 2009-05-01 17:00 -------- d-----w- c:\program files\Friend Click
2010-09-19 20:34 . 2008-11-23 11:03 -------- d-----w- c:\users\Asus\AppData\Roaming\Azureus
2010-09-15 20:53 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-09-15 13:29 . 2010-08-31 21:29 -------- d-----w- c:\program files\FbookEmailGrabber
2010-09-15 12:18 . 2010-06-23 21:31 -------- d-----w- c:\program files\My Friends Manager
2010-09-14 10:28 . 2010-07-21 21:49 -------- d-----w- c:\program files\FBP - Facebook Blaster Pro
2010-09-10 10:23 . 2009-12-16 09:13 -------- d-----w- c:\program files\FFB - Facebook Friend Bomber
2010-09-08 15:56 . 2009-03-29 20:08 -------- d-----w- c:\program files\iTunes
2010-09-07 11:10 . 2009-11-11 20:13 -------- d-----w- c:\program files\FacebookFriendAdderElite
2010-09-07 07:58 . 2010-09-07 07:56 -------- d-----w- c:\program files\Linked Software
2010-09-07 07:45 . 2010-09-07 07:31 -------- d-----w- c:\program files\TwitterBlasterPro
2010-09-06 18:14 . 2010-09-06 18:09 -------- d-----w- c:\program files\Foxit Software
2010-09-06 18:03 . 2010-09-06 17:41 -------- d-----w- c:\program files\Google
2010-09-06 17:41 . 2010-09-06 17:41 -------- d-----w- c:\programdata\Google Updater
2010-09-05 16:02 . 2008-11-13 08:06 -------- d-----w- c:\program files\Common Files\Apple
2010-09-05 16:01 . 2006-11-02 10:25 86016 ----a-w- c:\windows\Inf\infstor.dat
2010-09-05 16:01 . 2006-11-02 10:25 51200 ----a-w- c:\windows\Inf\infpub.dat
2010-09-05 16:01 . 2006-11-02 10:25 143360 ----a-w- c:\windows\Inf\infstrng.dat
2010-09-05 15:58 . 2008-09-07 09:56 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-04 22:26 . 2009-08-25 22:22 -------- d-----w- c:\users\Asus\AppData\Roaming\Research In Motion
2010-09-04 22:26 . 2009-08-25 22:20 -------- d-----w- c:\program files\Research In Motion
2010-09-04 22:26 . 2009-06-13 23:22 -------- d-----w- c:\program files\Common Files\Research In Motion
2010-09-03 16:27 . 2010-09-02 09:02 -------- d-----w- c:\program files\LimeWire
2010-08-30 12:06 . 2008-12-25 21:25 -------- d-----w- c:\users\Asus\AppData\Roaming\dvdcss
2010-08-29 18:31 . 2009-03-19 20:05 -------- d-----w- c:\program files\Sony
2010-08-29 14:00 . 2009-03-19 20:11 -------- d-----w- c:\users\Asus\AppData\Roaming\Sony
2010-08-29 13:15 . 2010-08-29 13:15 -------- d-----w- c:\program files\VASST
2010-08-29 13:06 . 2010-08-29 13:06 -------- d-----w- c:\program files\Sonic Foundry
2010-08-29 13:00 . 2010-08-29 12:54 -------- d-----w- c:\program files\NewBlue
2010-08-29 12:54 . 2010-08-29 12:54 279172 ----a-w- c:\programdata\eSellerate\eWebClient.dll
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\programdata\eSellerate
2010-08-29 12:54 . 2010-08-29 12:54 -------- d-----w- c:\program files\Common Files\eSellerate
2010-08-29 12:53 . 2010-08-29 12:49 -------- d-----w- c:\program files\Magic Bullet Editors 2.0 Vegas
2010-08-29 12:36 . 2010-08-29 12:36 -------- d-----w- c:\program files\Vstplugins
2010-08-29 12:36 . 2009-03-19 20:08 -------- d-----w- c:\programdata\Sony
2010-08-29 12:35 . 2009-03-19 19:51 -------- d-----w- c:\program files\Sony Setup
2010-08-25 08:26 . 2008-10-27 11:07 -------- d-----w- c:\program files\CCleaner
2010-08-19 11:56 . 2008-11-23 11:03 -------- d-----w- c:\program files\Azureus
2010-08-19 11:18 . 2010-08-19 11:18 310208 ----a-w- c:\users\Asus\AppData\Roaming\Azureus\plugins\mlab\ShaperProbeC.exe
2010-08-19 08:07 . 2009-04-01 18:22 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-19 08:07 . 2010-07-10 06:11 53632 ----a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-07-10 06:15 . 2010-04-16 06:53 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-10 06:11 . 2010-07-10 06:11 53632 ----a-w- c:\users\Asus\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-06-13 09:56 . 2008-09-30 08:44 99432 ----a-w- c:\program files\Common Files\Engines.lnl
2009-03-29 10:14 . 2009-03-29 10:14 740261 ----a-w- c:\program files\wot-20090325-fx.xpi
2009-03-29 10:13 . 2009-03-29 10:13 309310 ----a-w- c:\program files\adblock_plus-1.0.1-fx+sm+tb.xpi
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"Audio Kontrol 1"="c:\program files\Native Instruments\Audio Kontrol 1\Audio Kontrol 1.exe" [2006-09-18 6336512]
"filehippo.com"="c:\program files\filehippo.com\UpdateChecker.exe" [2010-04-29 248832]
"VPbubble"="c:\program files\Nosibay\VPbubble\launcher.exe" [2009-09-30 239120]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-09-06 39408]
"iLike"="c:\program files\iLike\1.2.18\ilikesidebar.exe" [2008-09-10 63024]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-09-02 13351304]
"RegistryBooster"="c:\program files\Uniblue\RegistryBooster\launcher.exe" [2010-09-15 67448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2008-09-07 47672]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-07-09 2048352]
"BboxUpdate"="c:\program files\BboxUpdate\eStantAutoRunV.exe" [2008-04-14 6144]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
2008-09-07 09:55 3054136 ----a-w- c:\windows\AsScrPro.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2008-02-01 13:29 61440 ----a-w- c:\program files\ASUS\ATK Media\DMedia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
2008-01-23 22:34 7766016 ----a-w- c:\program files\ATKOSD2\ATKOSD2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS]
2003-12-22 12:11 17920 ----a-r- c:\progra~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H2O]
2005-10-31 22:00 307200 ----a-w- c:\program files\Syncrosoft\POS\H2O\cledx.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
2008-01-12 05:40 98304 ----a-w- c:\program files\ATK Hotkey\HControlUser.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-03-11 11:52 342312 ----a-w- c:\program files\iTunes\iTunesHelper.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]
2008-06-09 17:16 2363392 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone]
2007-08-02 19:52 778240 ----a-w- c:\program files\P4P\P4P.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-04 23:54 417792 ----a-w- c:\program files\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
2008-04-01 08:31 6025216 ----a-w- c:\windows\RtHDVCpl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2008-01-21 19:17 61440 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 09:44 248552 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2007-12-07 01:12 1029416 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile-based device management]
2008-01-21 02:23 215552 ----a-w- c:\windows\WindowsMobile\wmdSync.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-21 02:25 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 136176]
R3 ak1avs;ak1avs;c:\windows\system32\Drivers\ak1avs.sys [2006-09-13 25088]
R3 ak1usb;ak1usb;c:\windows\system32\Drivers\ak1usb.sys [2006-09-13 84992]
R3 ASUSProcObsrv;ASUS Process Creation/Termination Observer;e:\i386\AsProcOb.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 USB_RNDIS_51;Broadcom USB Remote NDIS Device Driver;c:\windows\system32\DRIVERS\usb8023.sys [2009-04-11 15872]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-10 691696]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2009-08-23 335240]
S1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2009-05-03 108552]
S2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-08-23 297752]
S2 eStantLaunchService;BboxUpdate;c:\program files\BboxUpdate\eSRunService.exe [2008-04-29 20480]
S3 CLEDX;Team H2O CLEDX service;c:\windows\system32\DRIVERS\cledx.sys [2005-05-09 33792]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2009-05-28 4233728]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'
2010-10-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-09-06 17:41]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-06 17:43]
2010-10-07 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-530301876-850086729-3164714014-1000.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2010-06-03 01:02]
2010-10-07 c:\windows\Tasks\RegistryBooster.job
- c:\program files\Uniblue\RegistryBooster\rbmonitor.exe [2010-09-28 11:18]
.
.
------- Examen supplémentaire -------
.
FF - ProfilePath - c:\users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\2ar2pe8h.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.fastbrowsersearch.com/results/results.aspx?s=DEF&v=19&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://google.fr
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1970.7372\npCIDetect14.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- PARAMETRES FIREFOX ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'Explorer.exe'(3232)
c:\windows\system32\APSHook.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll
c:\program files\real\realplayer\converter\RCAPlugins\rjrmapln.dll
c:\program files\real\realplayer\converter\plugins\rndtdriver.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\progra~1\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\program files\ATK Hotkey\Hcontrol.exe
c:\program files\ATK Hotkey\MsgTranAgt.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\ATK Hotkey\ATKOSD.exe
c:\program files\ATK Hotkey\KBFiltr.exe
c:\program files\ATK Hotkey\WDC.exe
c:\windows\system32\conime.exe
c:\program files\AVG\AVG8\avgtray.exe
c:\program files\BboxUpdate\BTLiveUpdate.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Uniblue\RegistryBooster\registrybooster.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Nosibay\VPbubble\VPbubble.exe
c:\windows\system32\WerFault.exe
c:\windows\system32\WerFault.exe
.
**************************************************************************
.
Heure de fin: 2010-10-07 16:48:41 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-10-07 14:48
ComboFix2.txt 2010-10-07 13:54
ComboFix3.txt 2009-05-16 07:36
Avant-CF: 68 216 651 776 octets libres
Après-CF: 68 079 341 568 octets libres
- - End Of File - - ACF313DF3DDB8108D48A21DDEDE8B912
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 16:57
7 oct. 2010 à 16:57
sa plante toujours ?
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 17:00
7 oct. 2010 à 17:00
Yes toujours la fenetre EXPLORATEUR WINDOWS A CESSE DE FONCTIONNER ...
APPCRASH
EXPLORER.EXE
:(
APPCRASH
EXPLORER.EXE
:(
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 17:10
7 oct. 2010 à 17:10
OK en attendant gen
ton plantage vient du fait que ta installer skype et la en est coincer pour le désinstaller pour voir si sa pouvait arranger nos affaire
alors en va essayer comme sa
lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , fait parcourir la tu fera poste de travail puis tu fait C et la tu rentre dans programme file puis le dossier skype et cherche le fichier uninstall et tu valide et tu fait ok
ton plantage vient du fait que ta installer skype et la en est coincer pour le désinstaller pour voir si sa pouvait arranger nos affaire
alors en va essayer comme sa
lance le gestionnaire des tâches en cliquant sur Ctrl + Alt + Suppr , puis Onglet Fichier , Nouvelle tâche , fait parcourir la tu fera poste de travail puis tu fait C et la tu rentre dans programme file puis le dossier skype et cherche le fichier uninstall et tu valide et tu fait ok
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 18:34
7 oct. 2010 à 18:34
C'est fait mais il y a rien de changer... :(
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 18:44
7 oct. 2010 à 18:44
sa ta désinstaller skype ?
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 18:53
7 oct. 2010 à 18:53
Ah attend non ca ne la pas désinstaller ... je ne trouve pas le fichier uninstall...
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 19:00
7 oct. 2010 à 19:00
ou desinstaller
Amir86
Messages postés
249
Date d'inscription
dimanche 17 février 2008
Statut
Membre
Dernière intervention
18 mars 2012
5
7 oct. 2010 à 19:13
7 oct. 2010 à 19:13
il n'y a aucun des deux...
benurrr
Messages postés
9643
Date d'inscription
samedi 24 mai 2008
Statut
Contributeur sécurité
Dernière intervention
11 janvier 2012
107
7 oct. 2010 à 19:47
7 oct. 2010 à 19:47
tu va télécharger Ccleaner http://dl.commentcamarche.net/www.commentcamarche.net/download/files/ccsetup227_slim.exe
après l'installation tu va dans outil et après désinstallation de programme cherche skype et vire le
https://www.malekal.com/tutoriel-ccleaner/
après l'installation tu va dans outil et après désinstallation de programme cherche skype et vire le
https://www.malekal.com/tutoriel-ccleaner/
