Rapport Hijackthis |CPU 100%

Merci sauf que ça me met : impossible d'executer un fichier depuis le fichier temporaire. Abandon de l'opération.

Il est sur le bureau.

non, désolé

http://www.cijoint.fr/cj201010/cijU3fHiuS.png

oui

Okay je fais ça

Désolé, sa refais pareil

Ouf, cela fait du bien de voir le cpu redescendre... J'étais obligé de le démarrer en mode sans échec car ça ne marchait pas. Bref, voici le log :

ComboFix 10-10-19.04 - gabriel 20/10/2010 16:10:51.3.1 - x86 MINIMAL
Lancé depuis: c:\users\gabriel\Desktop\Gabriel.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\programdata\xp
c:\programdata\xp\EBLib.dll
c:\programdata\xp\TPwSav.sys
c:\windows\system32\spool\prtprocs\w32x86\CNMPP9W.DLL

----- BITS: Il y a peut-être des sites infectés -----

hxxp://wlxindex
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-09-20 au 2010-10-20 ))))))))))))))))))))))))))))))))))))
.

2010-10-20 14:16 . 2010-10-20 14:16 -------- d-----w- c:\users\gabriel\AppData\Local\temp
2010-10-20 14:16 . 2010-10-20 14:16 -------- d-----w- c:\users\Sandra\AppData\Local\temp
2010-10-20 14:16 . 2010-10-20 14:16 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-10-20 14:16 . 2010-10-20 14:16 -------- d-----w- c:\users\Invité\AppData\Local\temp
2010-10-20 14:16 . 2010-10-20 14:16 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-10-20 14:07 . 2010-10-20 14:07 -------- d-----r- C:\32788R22FWJFW
2010-10-20 13:54 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{0EAA5758-85EB-464D-BC3E-A9CB34ADE35F}\mpengine.dll
2010-10-20 11:31 . 2010-08-21 05:11 738816 ----a-w- c:\windows\system32\wmpmde.dll
2010-10-20 11:31 . 2010-07-29 06:02 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-10-20 11:31 . 2010-07-29 06:02 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-10-20 11:30 . 2010-06-26 03:24 2048 ----a-w- c:\windows\system32\msxml3r.dll
2010-10-20 11:30 . 2010-06-26 03:24 1236480 ----a-w- c:\windows\system32\msxml3.dll
2010-10-20 11:30 . 2010-08-26 05:37 109056 ----a-w- c:\windows\system32\t2embed.dll
2010-10-19 19:16 . 2010-10-19 19:16 -------- d-----w- c:\windows\system32\SPReview
2010-10-19 19:13 . 2010-06-04 07:51 254464 ----a-w- c:\windows\system32\dhcpcore.dll
2010-10-19 19:12 . 2010-06-04 07:53 31744 ----a-w- c:\windows\system32\wdiasqmmodule.dll
2010-10-18 19:30 . 2010-10-20 11:19 -------- d-----w- c:\users\gabriel\AppData\Roaming\BatteryBar
2010-10-18 19:29 . 2010-10-18 19:30 -------- d-----w- c:\program files\BatteryBar
2010-10-17 15:27 . 2010-10-08 13:57 143184 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2010-10-17 15:27 . 2010-10-08 13:57 41936 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2010-10-16 10:28 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2010-10-16 10:00 . 2010-10-16 10:00 -------- d-----w- c:\program files\COMODO
2010-10-15 13:57 . 2010-10-15 13:57 -------- d-----w- c:\program files\tamasoftware
2010-10-15 13:33 . 2010-10-15 13:49 -------- d-----w- c:\program files\Microsoft Security Essentials
2010-10-13 13:12 . 2010-10-13 13:12 -------- d-----w- c:\program files\Bodom-Child - RaBBi
2010-10-12 13:13 . 2010-09-09 22:52 6084944 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E18489C-BC19-47E6-9AF1-EAA0D807CD03}\mpengine.dll
2010-10-08 14:26 . 2010-10-08 14:27 -------- d-----w- C:\Mes Sites Web
2010-10-08 14:25 . 2010-10-08 14:25 -------- d-----w- c:\program files\WinHTTrack
2010-10-08 13:57 . 2010-10-08 13:57 31888 ----a-w- c:\windows\system32\drivers\VBoxUSB.sys
2010-10-08 13:57 . 2010-10-08 13:57 111568 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2010-10-08 13:57 . 2010-10-08 13:57 100560 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2010-10-08 13:57 . 2010-10-08 13:57 133648 ----a-w- c:\windows\system32\VBoxNetFltNotify.dll
2010-10-06 14:50 . 1997-04-30 22:00 57856 ----a-w- c:\windows\system32\DrvFacts.ocx
2010-10-06 14:47 . 1998-07-12 22:00 15872 ----a-w- c:\windows\system32\WINSKFR.DLL
2010-10-06 14:47 . 2006-04-16 21:06 225280 ----a-w- c:\windows\system32\OfficeMenu2003.ocx
2010-10-06 14:47 . 1998-07-12 22:00 6656 ----a-w- c:\windows\system32\STDFTFR.DLL
2010-10-06 14:47 . 1998-07-12 22:00 141312 ----a-w- c:\windows\system32\MSCMCFR.DLL
2010-10-06 11:48 . 2010-10-06 11:48 -------- d-----w- c:\program files\iPod
2010-10-06 11:42 . 2010-10-06 11:42 -------- d-----w- c:\program files\Bonjour
2010-10-03 15:53 . 2010-10-03 15:53 -------- d-----w- c:\program files\Common Files\Atlence
2010-10-02 18:50 . 2010-10-06 14:50 -------- d-----w- c:\program files\ZNsoft Corporation
2010-10-02 18:50 . 2006-04-16 21:06 225280 ----a-w- c:\windows\system32\ZNsoftMenu2003.ocx
2010-10-02 18:50 . 2004-10-06 11:24 471040 ----a-w- c:\windows\system32\FraPlus1.ocx
2010-10-02 18:50 . 2004-10-06 11:08 606208 ----a-w- c:\windows\system32\BtnPlus1.ocx
2010-10-02 18:50 . 2000-10-01 21:00 119568 ----a-w- c:\windows\system32\VB6FR.DLL
2010-10-02 08:37 . 2010-10-02 08:37 -------- d-----w- c:\windows\system32\wbem\en-US
2010-10-02 08:33 . 2010-09-01 07:30 94208 ----a-w- c:\program files\Internet Explorer\fr\iediag.resources.dll
2010-10-02 08:28 . 2010-10-02 08:28 -------- d-----w- c:\program files\Feedback Tool
2010-10-01 15:17 . 2010-10-02 11:27 -------- d-----w- C:\Fraps
2010-09-30 15:44 . 2010-10-02 06:49 -------- d-----w- c:\program files\Argente Utilities
2010-09-26 17:38 . 2010-09-26 17:38 -------- d-----w- c:\users\gabriel\AppData\Local\GermaniXSoft
2010-09-25 11:49 . 2010-09-25 12:04 -------- d-----w- c:\users\gabriel\AppData\Roaming\MagicBall4
2010-09-25 11:49 . 2010-09-25 11:51 -------- d-----w- c:\users\gabriel\AppData\Roaming\DreamDale
2010-09-22 17:14 . 2010-09-22 17:14 -------- d-----w- c:\program files\EASEUS
2010-09-22 16:44 . 2007-01-30 00:16 61440 ----a-w- c:\windows\system\w98eject.exe
2010-09-22 16:44 . 2010-09-22 16:44 -------- d-----w- c:\windows\system\IOSUBSYS
2010-09-22 16:44 . 2010-09-22 16:44 -------- d-----w- c:\program files\SigmaTel
2010-09-22 16:43 . 2002-12-05 12:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2010-09-22 16:43 . 2002-12-05 12:12 692224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2010-09-22 16:43 . 2002-12-02 13:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2010-09-22 16:43 . 2002-12-02 11:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2010-09-22 16:43 . 2002-12-02 11:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2010-09-22 16:43 . 2010-09-22 16:43 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2010-09-22 16:43 . 2010-09-22 16:43 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2010-09-22 14:14 . 2010-09-22 14:14 -------- d-----w- c:\users\gabriel\AppData\Roaming\.minecraft

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]
@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"
[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]
2010-06-04 07:53 442368 ----a-w- c:\windows\System32\ntshrui.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"ccleaner"="c:\program files\CCleaner\ccleaner.exe" [2010-08-26 1779512]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-08-10 4217720]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]
"ShowBatteryBar"="c:\program files\BatteryBar\ShowBatteryBar.exe" [2009-05-28 90624]
"Google Update"="c:\users\gabriel\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-03-28 136176]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-09-04 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-02 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-02 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-02 151064]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2009-08-05 738616]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-07-28 7625248]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-07-20 1545512]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-03 284696]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-06-29 202256]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-10-16 2500552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"TOSHIBA Online Product Information"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2009-08-12 6203296]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\g:\0autocheck autochk /r \??\G:\0autocheck autochk *

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX210 Series]
2008-11-06 00:00 199680 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATIFDE.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-09-24 00:10 421160 ----a-w- d:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2010-03-30 09:16 1820040 ----a-w- d:\program files\LogMeIn Hamachi\hamachi-2-ui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-09-08 09:17 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\gabriel\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"Skype"="c:\program files\Skype\Phone\Skype.exe" /nosplash /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"SmartFaceVWatcher"=%ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe

R0 spldr;Security Processor Loader Driver; [x]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-10-16 236088]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-10-16 30112]
R1 DfsC;DFS Namespace Client Driver;c:\windows\system32\Drivers\dfsc.sys [2010-06-04 78336]
R1 discache;System Attribute Cache;c:\windows\system32\drivers\discache.sys [2009-07-13 32256]
R1 nsiproxy;NSI proxy service driver.;c:\windows\system32\drivers\nsiproxy.sys [2009-07-13 16896]
R1 RDPENCDD;RDP Encoder Mirror Driver;c:\windows\system32\drivers\rdpencdd.sys [2009-07-14 6656]
R1 RDPREFMP;Reflector Display Driver used to gain access to graphics data;c:\windows\system32\drivers\rdprefmp.sys [2009-07-14 7168]
R1 tdx;Pilote de prise en charge TDI héritée NetIO;c:\windows\system32\DRIVERS\tdx.sys [2010-06-04 74240]
R1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2010-10-08 143184]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2010-10-08 41936]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
R1 Wanarpv6;Pilote ARP IPv6 d'accès à distance;c:\windows\system32\DRIVERS\wanarp.sys [2010-06-04 63488]
R1 WfpLwf;WFP Lightweight Filter;c:\windows\system32\DRIVERS\wfplwf.sys [2009-07-13 9728]
R2 AudioEndpointBuilder;Générateur de points de terminaison du service Audio Windows;c:\windows\System32\svchost.exe [2009-07-14 20992]
R2 BFE;Moteur de filtrage de base;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe [2009-08-10 185712]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 ConfigFree Service;ConfigFree Service;c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
R2 DPS;Service de stratégie de diagnostic;c:\windows\System32\svchost.exe [2009-07-14 20992]
R2 gpsvc;Client de stratégie de groupe;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-28 135664]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-03 13336]
R2 IKEEXT;Modules de génération de clés IKE et AuthIP;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 iphlpsvc;Assistance IP;c:\windows\System32\svchost.exe [2009-07-14 20992]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;c:\windows\system32\DRIVERS\lltdio.sys [2009-07-13 48128]
R2 luafv;Virtualisation de fichier UAC;c:\windows\system32\drivers\luafv.sys [2009-07-13 86528]
R2 MMCSS;Planificateur de classes multimédias;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 MpsSvc;Pare-feu Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 NlaSvc;Connaissance des emplacements réseau;c:\windows\System32\svchost.exe [2009-07-14 20992]
R2 nsi;Service Interface du magasin réseau;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 PEAUTH;PEAUTH;c:\windows\system32\drivers\peauth.sys [2009-07-14 586752]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 sppsvc;Protection logicielle;c:\windows\system32\sppsvc.exe [2010-06-04 3179520]
R2 SysMain;Superfetch;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 tcpipreg;TCP/IP Registry Compatibility;c:\windows\system32\drivers\tcpipreg.sys [2010-06-04 35328]
R2 TeamViewer5;TeamViewer 5;d:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-21 1957672]
R2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files\Toshiba TEMPRO\TemproSvc.exe [2010-05-11 124368]
R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe [2009-08-27 185712]
R2 UxSms;Gestionnaire de sessions du Gestionnaire de fenêtrage;c:\windows\System32\svchost.exe [2009-07-14 20992]
R2 Wlansvc;Service de configuration automatique WLAN;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 wlcrasvc;Windows Live Devices remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-07-31 49504]
R3 1394ohci;Contrôleur d'hôte compatible OHCI 1394;c:\windows\system32\drivers\1394ohci.sys [2010-06-04 164352]
R3 AcpiPmi;Jauge d'alimentation ACPI;c:\windows\system32\drivers\acpipmi.sys [2010-06-04 10240]
R3 adp94xx;adp94xx;c:\windows\system32\DRIVERS\adp94xx.sys [2009-07-14 422976]
R3 adpahci;adpahci;c:\windows\system32\DRIVERS\adpahci.sys [2009-07-14 297552]
R3 amdsata;amdsata;c:\windows\system32\drivers\amdsata.sys [2010-06-04 80264]
R3 amdsbs;amdsbs;c:\windows\system32\DRIVERS\amdsbs.sys [2009-07-14 159312]
R3 AppID;Pilote AppID;c:\windows\system32\drivers\appid.sys [2009-07-13 50176]
R3 AppIDSvc;Identité de l'application;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 Appinfo;Informations d'application;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 arcsas;arcsas;c:\windows\system32\DRIVERS\arcsas.sys [2009-07-14 86608]
R3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\System32\DRIVERS\ASPI32.sys [2002-07-17 84832]
R3 b06bdrv;Broadcom NetXtreme II VBD;c:\windows\system32\DRIVERS\bxvbdx.sys [2009-07-13 430080]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
R3 BDESVC;Service de chiffrement de lecteur BitLocker;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 bowser;Pilote de prise en charge du navigateur;c:\windows\system32\DRIVERS\bowser.sys [2009-07-13 69632]
R3 BrFiltLo;Pilote de filtre inférieur de stockage de masse Brother USB;c:\windows\system32\DRIVERS\BrFiltLo.sys [2009-07-13 13568]
R3 BrFiltUp;Pilote de filtre supérieur de stockage de masse Brother USB;c:\windows\system32\DRIVERS\BrFiltUp.sys [2009-07-13 5248]
R3 Brserid;Pilote d'interface de port série Brother MFC (WDM);c:\windows\System32\Drivers\Brserid.sys [2009-07-14 272128]
R3 BrSerWdm;Pilote série WDM Brother;c:\windows\System32\Drivers\BrSerWdm.sys [2009-07-13 62336]
R3 BrUsbMdm;Brother MFC USB modem télécopieur uniquement;c:\windows\System32\Drivers\BrUsbMdm.sys [2009-07-13 12160]
R3 CertPropSvc;Propagation du certificat;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 circlass;Périphériques IR grand public;c:\windows\system32\DRIVERS\circlass.sys [2009-07-13 37888]
R3 defragsvc;Défragmenteur de disque;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 DXGKrnl;LDDM Graphics Subsystem;c:\windows\System32\drivers\dxgkrnl.sys [2010-06-04 728448]
R3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;c:\windows\system32\DRIVERS\evbdx.sys [2009-07-13 3100160]
R3 elxstor;elxstor;c:\windows\system32\DRIVERS\elxstor.sys [2009-07-14 453712]
R3 fdPHost;Hôte du fournisseur de découverte de fonctions;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 FDResPub;Publication des ressources de découverte de fonctions;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 Filetrace;Filetrace;c:\windows\system32\drivers\filetrace.sys [2009-07-13 28160]
R3 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 FsDepends;File System Dependency Minifilter;c:\windows\system32\drivers\FsDepends.sys [2009-07-14 46160]
R3 hcw85cir;Hauppauge Consumer Infrared Receiver;c:\windows\system32\drivers\hcw85cir.sys [2009-07-13 26624]
R3 HomeGroupListener;Écouteur HomeGroup;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 HomeGroupProvider;Fournisseur HomeGroup;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 HpSAMD;HpSAMD;c:\windows\system32\DRIVERS\HpSAMD.sys [2009-07-14 67152]
R3 iaStorV;Contrôleur RAID Intel Windows 7;c:\windows\system32\drivers\iaStorV.sys [2010-06-04 332168]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-07-10 122880]
R3 IPBusEnum;Énumérateur de bus IP PnP-X;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 IPMIDRV;IPMIDRV;c:\windows\system32\drivers\IPMIDrv.sys [2010-06-04 65536]
R3 iScsiPrt;Pilote iScsiPort;c:\windows\system32\drivers\msiscsi.sys [2010-06-04 232840]
R3 KtmRm;Service KtmRm pour Distributed Transaction Coordinator;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 lltdsvc;Mappage de découverte de topologie de la couche de liaison;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 LSI_FC;LSI_FC;c:\windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 95824]
R3 LSI_SAS;LSI_SAS;c:\windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 89168]
R3 LSI_SAS2;LSI_SAS2;c:\windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 54864]
R3 LSI_SCSI;LSI_SCSI;c:\windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 96848]
R3 MailScan;MailScan; [x]
R3 megasas;megasas;c:\windows\system32\DRIVERS\megasas.sys [2009-07-14 30800]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2009-10-29 30603640]
R3 monitor;Service Pilote de fonction de classe Moniteur Microsoft;c:\windows\system32\DRIVERS\monitor.sys [2009-07-13 23552]
R3 mpio;Pilote de bus à chemins d'accès multiples Microsoft;c:\windows\system32\drivers\mpio.sys [2010-06-04 130440]
R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 mpsdrv;Pilote d'autorisation du Pare-feu Windows;c:\windows\system32\drivers\mpsdrv.sys [2009-07-13 60416]
R3 mrxsmb10;Mini-redirecteur SMB 1.x;c:\windows\system32\DRIVERS\mrxsmb10.sys [2010-06-04 222208]
R3 mrxsmb20;Mini-redirecteur SMB 2.0;c:\windows\system32\DRIVERS\mrxsmb20.sys [2010-06-04 95744]
R3 msdsm;Module spécifique de périphériques à chemins d'accès multiples Microsoft;c:\windows\system32\drivers\msdsm.sys [2010-06-04 116104]
R3 mshidkmdf;Pass-through HID to KMDF Filter Driver;c:\windows\System32\drivers\mshidkmdf.sys [2009-07-13 4096]
R3 MSiSCSI;Service Initiateur iSCSI de Microsoft;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 MsRPC;MsRPC; [x]
R3 MTConfig;Microsoft Input Configuration Driver;c:\windows\system32\DRIVERS\MTConfig.sys [2009-07-13 12288]
R3 NativeWifiP;NativeWiFi Filter;c:\windows\system32\DRIVERS\nwifi.sys [2009-07-13 267264]
R3 NdisCap;NDIS Capture LightWeight Filter;c:\windows\system32\DRIVERS\ndiscap.sys [2009-07-13 27136]
R3 netprofm;Service Liste des réseaux;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 nfrd960;nfrd960;c:\windows\system32\DRIVERS\nfrd960.sys [2009-07-14 44624]
R3 nvstor;nvstor;c:\windows\system32\drivers\nvstor.sys [2010-06-04 143752]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-09-26 4639136]
R3 PcaSvc;Service de l'Assistant Compatibilité des programmes;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [2009-06-22 24064]
R3 pla;Journaux & alertes de performance;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 PMUSB2G;PassMark® Software USB 2.0 Loopback plug;c:\windows\system32\Drivers\PMUSB.sys [2004-11-25 18944]
R3 PNRPAutoReg;Service de publication des noms d'ordinateurs PNRP;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 Pronaut_WBD;Pronaut WaveBridge Device (WDM);c:\windows\system32\drivers\pnwbd.sys [2006-03-05 13440]
R3 ql2300;ql2300;c:\windows\system32\DRIVERS\ql2300.sys [2009-07-14 1383488]
R3 ql40xx;ql40xx;c:\windows\system32\DRIVERS\ql40xx.sys [2009-07-14 106064]
R3 RasAgileVpn;WAN Miniport (IKEv2);c:\windows\system32\DRIVERS\AgileVpn.sys [2009-07-13 49152]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver;c:\windows\system32\DRIVERS\rdpbus.sys [2009-07-14 18944]
R3 RDPDISPM;RDPDISPM;c:\windows\system32\DRIVERS\rdpdispm.sys [2010-06-04 18528]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-07-30 171520]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-06-23 275048]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys [2010-03-31 379904]
R3 RtsUIR;Realtek IR Driver; [x]
R3 scfilter;Pilote de filtre de classe PnP de carte à puce;c:\windows\system32\DRIVERS\scfilter.sys [2010-06-04 26624]
R3 SCPolicySvc;Stratégie de retrait de la carte à puce;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 SDRSVC;Sauvegarde Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 SensrSvc;Brillance adaptative;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 SessionEnv;Configuration des services Bureau à distance;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 sffp_mmc;Pilote de protocole de stockage SFF pour MMC;c:\windows\system32\drivers\sffp_mmc.sys [2009-07-13 12288]
R3 SiSRaid4;SiSRaid4;c:\windows\system32\DRIVERS\sisraid4.sys [2009-07-14 77888]
R3 Smb;Protocoles TCP/IP et TCP/IPv6 orienté messages (session SMB);c:\windows\system32\DRIVERS\smb.sys [2009-07-13 71168]
R3 sppuinotify;Service de notification SPP;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 srv2;Pilote de serveur SMB 2.xxx;c:\windows\system32\DRIVERS\srv2.sys [2010-06-04 307200]
R3 srvnet;srvnet;c:\windows\system32\DRIVERS\srvnet.sys [2010-06-04 113664]
R3 stexstor;stexstor;c:\windows\system32\DRIVERS\stexstor.sys [2009-07-14 21072]
R3 TabletInputService;Service Panneau de saisie Tablet PC;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 TBS;Services de base de module de plateforme sécurisée;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys [2010-03-11 25088]
R3 THREADORDER;Serveur de priorités des threads;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 TMachInfo;TMachInfo;c:\program files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2009-08-17 51512]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2009-08-03 111960]
R3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [2009-08-06 685424]
R3 TrustedInstaller;Programme d'installation pour les modules Windows;c:\windows\servicing\TrustedInstaller.exe [2010-06-04 204800]
R3 tssecsrv;Remote Desktop Services Security Filter Driver;c:\windows\system32\DRIVERS\tssecsrv.sys [2010-06-04 31232]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-06-04 50048]
R3 tunnel;Pilote de carte miniport Microsoft Tunnel;c:\windows\system32\DRIVERS\tunnel.sys [2010-06-04 108544]
R3 UI0Detect;Détection de services interactifs;c:\windows\system32\UI0Detect.exe [2009-07-14 35840]
R3 uliagpkx;Filtre de bus AGP Uli;c:\windows\system32\drivers\uliagpkx.sys [2009-07-14 57424]
R3 usbcir;Récepteur infrarouge eHome (USBCIR);c:\windows\system32\drivers\usbcir.sys [2009-07-13 86016]
R3 VaultSvc;Gestionnaire d'informations d'identification;c:\windows\system32\lsass.exe [2009-07-14 22528]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2010-10-08 100560]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2010-10-08 111568]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [2010-10-08 31888]
R3 vhdmp;vhdmp;c:\windows\system32\drivers\vhdmp.sys [2010-06-04 159616]
R3 ViaC7;Pilote de processeur VIA C7;c:\windows\system32\DRIVERS\viac7.sys [2009-07-13 52736]
R3 vsmraid;vsmraid;c:\windows\system32\DRIVERS\vsmraid.sys [2009-07-14 141904]
R3 vwifibus;Pilote de bus WiFi virtuel;c:\windows\system32\DRIVERS\vwifibus.sys [2009-07-13 19968]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
R3 WacomPen;Pilote de tablette Wacom à stylet série;c:\windows\system32\DRIVERS\wacompen.sys [2009-07-13 21632]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-28 1343400]
R3 wbengine;Service de moteur de sauvegarde en mode bloc;c:\windows\system32\wbengine.exe [2009-07-14 1202688]
R3 WbioSrvc;Service de biométrie Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 wcncsvc;Windows Connect Now - Registre de configuration;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WcsPlugInService;Système de couleurs Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 Wd;Wd;c:\windows\system32\DRIVERS\wd.sys [2009-07-14 19024]
R3 WdiServiceHost;Service hôte WDIServiceHost;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WdiSystemHost;Hôte système de diagnostics;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 Wecsvc;Collecteur d'événements de Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 wercplsupport;Prise en charge de l'application Rapports et solutions aux problèmes du Panneau de configuration;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WerSvc;Service de rapport d'erreurs Windows;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WIMMount;WIMMount;c:\windows\system32\drivers\wimmount.sys [2009-07-14 19008]
R3 WinDefend;Windows Defender;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WinRM;Gestion à distance de Windows (Gestion WSM);c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WPCSvc;Parental Controls;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 WPDBusEnum;Service Énumérateur d'appareil mobile;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 WwanSvc;Service de configuration automatique WWAN;c:\windows\system32\svchost.exe [2009-07-14 20992]
R4 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;d:\program files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R4 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2010-05-11 271728]
R4 Mcx2Svc;Service Media Center Extender;c:\windows\system32\svchost.exe [2009-07-14 20992]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-03-29 691696]
S0 amdxata;amdxata;c:\windows\system32\drivers\amdxata.sys [2010-06-04 22408]
S0 CLFS;Journal commun (CLFS);c:\windows\System32\CLFS.sys [2009-07-14 249408]
S0 CNG;CNG;c:\windows\System32\Drivers\cng.sys [2009-07-14 369568]
S0 FileInfo;File Information FS MiniFilter;c:\windows\system32\drivers\fileinfo.sys [2009-07-14 58448]
S0 fvevol;Pilote de filtre de Chiffrement de lecteur Bitlocker;c:\windows\System32\DRIVERS\fvevol.sys [2010-06-04 194808]
S0 hwpolicy;Hardware Policy Driver;c:\windows\System32\drivers\hwpolicy.sys [2010-06-04 14216]
S0 KSecPkg;KSecPkg;c:\windows\System32\Drivers\ksecpkg.sys [2009-07-14 133200]
S0 msahci;msahci;c:\windows\system32\drivers\msahci.sys [2010-06-04 28040]
S0 msisadrv;msisadrv;c:\windows\system32\drivers\msisadrv.sys [2009-07-14 13888]
S0 pcw;Performance Counters for Windows Driver;c:\windows\System32\drivers\pcw.sys [2009-07-14 43088]
S0 rdyboost;ReadyBoost;c:\windows\System32\drivers\rdyboost.sys [2010-06-04 173448]
S0 vdrvroot;Pilote d'énumérateur de lecteur virtuel Microsoft;c:\windows\system32\drivers\vdrvroot.sys [2009-07-14 32832]
S0 volmgr;Pilote du Gestionnaire de volume;c:\windows\system32\drivers\volmgr.sys [2010-06-04 53128]
S0 volmgrx;Gestionnaire de volumes dynamiques;c:\windows\System32\drivers\volmgrx.sys [2009-07-14 297040]
S1 blbdrive;blbdrive;c:\windows\system32\DRIVERS\blbdrive.sys [2009-07-13 35328]
S2 Power;Alimentation;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 ProfSvc;Service de profil utilisateur;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 RpcEptMapper;Mappeur de point de terminaison RPC;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys [2009-06-19 12920]
S3 CompositeBus;Pilote de l'énumérateur de bus composite;c:\windows\system32\DRIVERS\CompositeBus.sys [2009-07-13 31232]
S3 KeyIso;Isolation de clé CNG;c:\windows\system32\lsass.exe [2009-07-14 22528]
S3 umbus;Pilote d'énumérateur UMBus;c:\windows\system32\drivers\umbus.sys [2010-06-04 39936]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
RPCSS REG_MULTI_SZ RpcEptMapper RpcSs
defragsvc REG_MULTI_SZ defragsvc
WerSvcGroup REG_MULTI_SZ wersvc
LocalServiceNoNetwork REG_MULTI_SZ DPS PLA BFE mpssvc WwanSvc
swprv REG_MULTI_SZ swprv
LocalServicePeerNet REG_MULTI_SZ PNRPSvc p2pimsvc p2psvc PnrpAutoReg
NetworkServiceAndNoImpersonation REG_MULTI_SZ KtmRm
regsvc REG_MULTI_SZ RemoteRegistry
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc
DcomLaunch REG_MULTI_SZ Power PlugPlay DcomLaunch
NetworkServiceNetworkRestricted REG_MULTI_SZ PolicyAgent
sdrsvc REG_MULTI_SZ sdrsvc
WbioSvcGroup REG_MULTI_SZ WbioSrvc
wcssvc REG_MULTI_SZ WcsPlugInService
AxInstSVGroup REG_MULTI_SZ AxInstSV
secsvcs REG_MULTI_SZ WinDefend

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
AeLookupSvc
CertPropSvc
SCPolicySvc
lanmanserver
gpsvc
IKEEXT
AudioSrv
FastUserSwitchingCompatibility
Nla
NWCWorkstation
SRService
Wmi
WmdmPmSp
TermService
wuauserv
BITS
ShellHWDetection
LogonHours
PCAudit
helpsvc
uploadmgr
iphlpsvc
seclogon
AppInfo
msiscsi
MMCSS
wercplsupport
EapHost
ProfSvc
schedule
hkmsvc
SessionEnv
winmgmt
browser
Themes
BDESVC

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalSystemNetworkRestricted
homegrouplistener


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
WdiServiceHost
sppuinotify

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetworkService
lanmanworkstation

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted
BthHFSrv
homegroupprovider

.
Contenu du dossier 'Tâches planifiées'

2010-10-20 c:\windows\Tasks\FIXIOPCCleaner.job
- c:\program files\FIXIO PC Utilities\FIXIO PC Cleaner\FIXIO PC Cleaner.exe [2010-06-30 22:07]

2010-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-28 17:24]

2010-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-28 17:24]

2010-10-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3369345975-770697619-2869376061-1000Core.job
- c:\users\gabriel\AppData\Local\Google\Update\GoogleUpdate.exe [2010-03-31 17:35]

2010-10-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3369345975-770697619-2869376061-1000UA.job
- c:\users\gabriel\AppData\Local\Google\Update\GoogleUpdate.exe [2010-03-31 17:35]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.commentcamarche.net
uInternet Settings,ProxyOverride = <local>;*.local
uInternet Settings,ProxyServer = http=127.0.0.1:6092
IE: &Envoyer à OneNote - /105
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2D06158FAC79A790.dll/cmsidewiki.html
IE: Rechercher avec &Google - c:\programdata\TuneUp Software\TuneUp Utilities\Web\gsearch.htm
IE: Traduire la page avec Google - c:\programdata\TuneUp Software\TuneUp Utilities\Web\gtranslate.htm
IE: Visualiser l'ancienne version sur &archives.org - c:\programdata\TuneUp Software\TuneUp Utilities\Web\tuarch.htm
IE: {{0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\Windows Live\Companion\companioncore.dll
TCP: {6F752076-28F2-46FB-9931-6601226978D0} = 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
FF - ProfilePath - c:\users\gabriel\AppData\Roaming\Mozilla\Firefox\Profiles\jhdhd9yz.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/
FF - component: c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\components\FFGlobalExtension.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\progra~1\MICROS~2\Office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\MICROS~2\Office14\NPSPWRAP.DLL
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPMFireLauncher.dll
FF - plugin: c:\program files\Opera\program\plugins\nppl3260.dll
FF - plugin: c:\program files\Opera\program\plugins\nprjplug.dll
FF - plugin: c:\program files\Opera\program\plugins\nprpjplug.dll
FF - plugin: c:\program files\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - plugin: c:\programdata\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: d:\program files\iTunes\Mozilla Plugins\npitunes.dll
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-RunOnce-<NO NAME> - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
SafeBoot-sacsvr
SafeBoot-vmms
MSConfigStartUp-mcagent_exe - c:\program files\McAfee.com\Agent\mcagent.exe


.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-3369345975-770697619-2869376061-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"

[HKEY_USERS\S-1-5-21-3369345975-770697619-2869376061-1000\Software\SecuROM\License information*]
"datasecu"=hex:e0,4d,00,11,ad,23,d7,c6,c7,d3,e1,b2,17,28,9c,0f,c9,bc,5f,c7,aa,
f8,d4,11,3b,23,6f,d0,87,1f,7e,13,fc,56,7f,47,1b,41,5e,ee,46,8c,db,73,99,8b,\
"rkeysecu"=hex:a8,3b,2d,c8,54,89,92,f1,13,dc,21,e3,9b,68,56,fd

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2010-10-20 16:19:23
ComboFix-quarantined-files.txt 2010-10-20 14:19
ComboFix2.txt 2010-09-05 09:52
ComboFix3.txt 2010-09-05 09:09

Avant-CF: 71 070 445 568 octets libres
Après-CF: 70 761 361 408 octets libres

- - End Of File - - B375726AC106A5E6EA27EE37C4B19E49

Alors, le rapport ne c'est pas affiché... Et à C:/Combofix [renommé] il y a que : ComboFix 10-10-19.04 - gabriel 20/10/2010 21:09:23.4.1 - x86 MINIMAL
Lancé depuis: C:\Users\gabriel\Desktop\Gabriel.exe
Commutateurs utilisés :: C:\Users\gabriel\Desktop\CFScript.txt
.

((((((((((((((((((((((((((((( Fichiers créés du 2010-09-20 au 2010-10-20 ))))))))))))))))))))))))))))))))))))

Bref, le pc va déjà mieux, et sur ce, je vous dis à demain !

Oui re-bonjour, j'ai réussi à lancer ton prog en sans échec en tant qu'administrateur, mais il y a eu plein de ligne : Le client n'a pas le droit néssaissaire... etc. Mais à la fin, il m'a dit : Le bloc notes n'as pas trouvé le fichier [je sais plus]. Voulez-vous créer un nouveau fichier ? J'ai regardé dans le dossier racine, mais il ya rien... Je refais un scan ?

Ouais c'est bon ! (trois fois scan - désinstallation, réinsallation) bref : rapport :http://www.cijoint.fr/cj201010/cijibL7zyJ.txt et more http://www.cijoint.fr/cj201010/cijOql7jdy.txt

Merci de répondre !

en attend , je me remet en boot normal

Voici le rapport :¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.1.1.0 ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Files/folders :

Quarantined & Deleted !! : C:\sqmnoopt00.sqm
Quarantined & Deleted !! : C:\sqmnoopt01.sqm
Quarantined & Deleted !! : C:\sqmnoopt02.sqm
Quarantined & Deleted !! : C:\sqmnoopt03.sqm

Quarantined & Deleted !! : C:\Windows\System32\drivers\etc\hosts.msn
Quarantined & Deleted !! : C:\Users\gabriel\DXSETUP.exe
Quarantined & Deleted !! : C:\Users\gabriel\AppData\Local\GDIPFONTCACHEV1.DAT
Quarantined & Deleted !! : C:\Users\gabriel\AppData\Local\UrlManager.exe
Quarantined & Deleted !! : C:\Users\gabriel\downloads\setup.exe

¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤

127.0.0.1 localhost

¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤

Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives
Deleted : "HKCU\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search"
Deleted : HKCR\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCR\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d}
Deleted : HKCU\SOFTWARE\AppDataLow\software\MyWebSearch
Deleted : HKCU\SOFTWARE\OTGV1DNWQQ
Deleted : HKCU\Software\XBV6RD5SZF
Deleted : HKLM\SYSTEM\CurrentControlSet\Services\mpnwmon
Deleted : HKLM\SYSTEM\ControlSet002\Services\mpnwmon

¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
Local Page = C:\WINDOWS\system32\blank.htm
Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page = https://www.google.com/?gws_rd=ssl
Local Page = C:\WINDOWS\system32\blank.htm
Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
cval = 0 (0x0)
AntiVirusDisableNotify = 0 (0x0)
FirewallDisableNotify = 0 (0x0)
UpdatesDisableNotify = 0 (0x0)
FirstRunDisabled = 1 ()
AntiVirusOverride = 0 (0x0)
FirewallOverride = 0 (0x0)

¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

Ndisuio : Start = 3
EapHost : Start = 2
Wlansvc : Start = 2
SharedAccess : Start = 2
windefend : Start = 3
wuauserv : Start = 2
wscsvc : Start = 2

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Disk Cleaned
anti-ver blaster : OK
Prefetch cleaned
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

FEATURE_BROWSER_EMULATION | svchost :
====================================


Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys halmacpi.dll USBPORT.SYS usbehci.sys Wdf01000.sys RTL8187B.sys ndis.sys vwififlt.sys nwifi.sys ACPI.sys usbhub.sys win32k.sys
kernel: MBR read successfully
user & kernel MBR OK




¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Que veut-tu dire par "Dans la moitié gauche" ?

la moitié gauche....coupe en deux , ben....ce qui est à gauche ^^

Donc je coche juste "tous" sur Services ? Parce-que moi j'ai coché Services et Pilotes

trouve le centre de la fenêtre , ensuite , du centre au bord gauche de la fenêtre tu as 6 possibilités de mettre sur "tous" , et bien tu peux tous les mettre .....

Ah ok je coche tous ;) je refais une analyse =p

Ps : je ne suis pas là pendant une semaine donc je vous dis à bientôt ;)

c'est bon !

... ET après, je fais quoi ?

Bonjour, après 3h28min39sec, je clique sur afficher les résultats, mais à la suspression, il me dit erreur.. blabla.. et d'un coup, il ce quitte. J'ai donc attendu TOUT CE TEMPS pour RIEN ????? Enfin, normalement ca va, vu la destination du fichier, c'est apparemment une quarentaine d'argente utilies (ou autre je sais plus) Bref, j'ai fait une capture :http://www.cijoint.fr/cj201010/cijImMbust.png !!!!

Non, le CPU de mon pc redescend enfin ! (ouf !) Sinon, pourquoi de beugage sur MBAM ?

Pour l'instant, 1er rapport après 1sec lol :

Rapport DelFix v6.0 - 02/11/2010 à 08:34,55
Mis à jour le 22/10/10 à 13h30 par Xplode
Système d'exploitation : Windows 7 Home Premium (32 bits) [version 6.1.7601] Service Pack 1, v.178
Navigateur : Google Chrome [Navigateur par défaut]
Processeur : Intel(R) Celeron(R) CPU 900 @ 2.20GHz
Mémoire vive totale : 2,86 Go
Nom d'utilisateur : gabriel - GABRIEL-TOSH (Administrateur)
Exécuté depuis : C:\Users\gabriel\Desktop\DelFix.exe


~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\Qoobox
Supprimé : C:\_OTL
Supprimé : C:\ToolBar SD
Supprimé : C:\Kill'em
Supprimé : C:\Program Files\List_Kill'em
Supprimé : C:\Program Files\trend micro
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\List_Kill'em

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\List'em.txt
Supprimé : C:\Windows\grep.exe
Supprimé : C:\Windows\PEV.exe
Supprimé : C:\Windows\NIRCMD.exe
Supprimé : C:\Windows\MBR.exe
Supprimé : C:\Windows\sed.exe
Supprimé : C:\Windows\SWREG.exe
Supprimé : C:\Windows\SWSC.exe
Supprimé : C:\Windows\SWXCACLS.exe
Supprimé : C:\Windows\zip.exe
Supprimé : C:\Users\gabriel\Desktop\OTL.exe
Supprimé : C:\Users\gabriel\Desktop\OTL.Txt
Supprimé : C:\Users\gabriel\Desktop\List_Killem_Install.exe
Supprimé : C:\Users\gabriel\Desktop\Extras.Txt
Supprimé : C:\Users\gabriel\Desktop\Kill'em.txt
Supprimé : C:\Users\gabriel\Desktop\More.txt
Supprimé : C:\Users\gabriel\Downloads\ToolsCleaner2.exe
Supprimé : C:\Users\gabriel\Downloads\Defogger.exe
Supprimé : C:\Users\gabriel\Downloads\defogger_disable.log

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKLM\Software\swearware
Clé Supprimée : HKLM\Software\OldTimer Tools
Clé Supprimée : HKLM\Software\TrendMicro
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E88BA4E8-6B36-4D39-9499-C10B439819E1}_is1

########## EOF - "C:\DelFixSuppr.txt" - [1935 octets] ##########

après défrag, javara :

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Tue Nov 02 16:01:29 2010

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.

Merci beaucoup alors, je récapitule : Me voici avec : Comodo Firewall (pare-feu uniquement) et Microsoft Security Essentials. J'ai supprimé Spybot car vous me l'avez conseillé. Alors, je redémarre le pc pour clore le tout, et je met en résolu =) !

ok :)

parfait ;) je vous remercie !