Problème Gomeo puis autres...

salut

▶ Télécharge TDSSKiller

▶ Lance le ( Utilisateurs de vista/Seven -> Clic droit puis " Exécuter en tant que........... " )

L'outil va télécharger automatiquement la dernière version de TDSSKiller puis lancera une analyse.

Patiente pendant le scan. A la fin de l'analyse, appuies sur une touche. Un rapport va s'ouvrir.

▶ Copie/Colle son contenu dans ta prochaine réponse.

Note : Le rapport se trouve également sous C:\tdsskiller.txt.

Salut,

Voilà le rapport:

2010/12/10 10:25:31.0734 TDSS rootkit removing tool 2.4.11.0 Dec 8 2010 14:46:40
2010/12/10 10:25:31.0734 ================================================================================
2010/12/10 10:25:31.0734 SystemInfo:
2010/12/10 10:25:31.0734
2010/12/10 10:25:31.0734 OS Version: 6.1.7600 ServicePack: 0.0
2010/12/10 10:25:31.0734 Product type: Workstation
2010/12/10 10:25:31.0734 ComputerName: N-PC
2010/12/10 10:25:31.0735 UserName: n
2010/12/10 10:25:31.0735 Windows directory: E:\Windows
2010/12/10 10:25:31.0735 System windows directory: E:\Windows
2010/12/10 10:25:31.0735 Processor architecture: Intel x86
2010/12/10 10:25:31.0735 Number of processors: 2
2010/12/10 10:25:31.0735 Page size: 0x1000
2010/12/10 10:25:31.0735 Boot type: Normal boot
2010/12/10 10:25:31.0735 ================================================================================
2010/12/10 10:25:44.0992 Initialize success
2010/12/10 10:25:53.0411 ================================================================================
2010/12/10 10:25:53.0411 Scan started
2010/12/10 10:25:53.0411 Mode: Manual;
2010/12/10 10:25:53.0411 ================================================================================
2010/12/10 10:25:53.0572 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) E:\Windows\system32\DRIVERS\1394ohci.sys
2010/12/10 10:25:53.0591 ACPI (f0e07d144c8685b8774bc32fc8da4df0) E:\Windows\system32\DRIVERS\ACPI.sys
2010/12/10 10:25:53.0606 AcpiPmi (98d81ca942d19f7d9153b095162ac013) E:\Windows\system32\DRIVERS\acpipmi.sys
2010/12/10 10:25:53.0622 adfs (6d7f09cd92a9fef3a8efce66231fdd79) E:\Windows\system32\drivers\adfs.sys
2010/12/10 10:25:53.0645 adp94xx (21e785ebd7dc90a06391141aac7892fb) E:\Windows\system32\DRIVERS\adp94xx.sys
2010/12/10 10:25:53.0664 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) E:\Windows\system32\DRIVERS\adpahci.sys
2010/12/10 10:25:53.0680 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) E:\Windows\system32\DRIVERS\adpu320.sys
2010/12/10 10:25:53.0703 AFD (ddc040fdb01ef1712a6b13e52afb104c) E:\Windows\system32\drivers\afd.sys
2010/12/10 10:25:53.0718 agp440 (507812c3054c21cef746b6ee3d04dd6e) E:\Windows\system32\DRIVERS\agp440.sys
2010/12/10 10:25:53.0732 aic78xx (8b30250d573a8f6b4bd23195160d8707) E:\Windows\system32\DRIVERS\djsvs.sys
2010/12/10 10:25:53.0748 aliide (0d40bcf52ea90fc7df2aeab6503dea44) E:\Windows\system32\DRIVERS\aliide.sys
2010/12/10 10:25:53.0762 amdagp (3c6600a0696e90a463771c7422e23ab5) E:\Windows\system32\DRIVERS\amdagp.sys
2010/12/10 10:25:53.0775 amdide (cd5914170297126b6266860198d1d4f0) E:\Windows\system32\DRIVERS\amdide.sys
2010/12/10 10:25:53.0789 AmdK8 (00dda200d71bac534bf56a9db5dfd666) E:\Windows\system32\DRIVERS\amdk8.sys
2010/12/10 10:25:53.0803 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) E:\Windows\system32\DRIVERS\amdppm.sys
2010/12/10 10:25:53.0818 amdsata (2101a86c25c154f8314b24ef49d7fbc2) E:\Windows\system32\DRIVERS\amdsata.sys
2010/12/10 10:25:53.0832 amdsbs (ea43af0c423ff267355f74e7a53bdaba) E:\Windows\system32\DRIVERS\amdsbs.sys
2010/12/10 10:25:53.0845 amdxata (b81c2b5616f6420a9941ea093a92b150) E:\Windows\system32\DRIVERS\amdxata.sys
2010/12/10 10:25:53.0860 AppID (feb834c02ce1e84b6a38f953ca067706) E:\Windows\system32\drivers\appid.sys
2010/12/10 10:25:53.0883 arc (2932004f49677bd84dbc72edb754ffb3) E:\Windows\system32\DRIVERS\arc.sys
2010/12/10 10:25:53.0897 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) E:\Windows\system32\DRIVERS\arcsas.sys
2010/12/10 10:25:53.0911 aswFsBlk (a0d86b8ac93ef95620420c7a24ac5344) E:\Windows\system32\drivers\aswFsBlk.sys
2010/12/10 10:25:53.0925 aswMonFlt (bd9119468c32b7ecd1e0544d3f286a73) E:\Windows\system32\drivers\aswMonFlt.sys
2010/12/10 10:25:53.0939 aswRdr (69823954bbd461a73d69774928c9737e) E:\Windows\system32\drivers\aswRdr.sys
2010/12/10 10:25:53.0954 aswSP (7ecc2776638b04553f9a85bd684c3abf) E:\Windows\system32\drivers\aswSP.sys
2010/12/10 10:25:53.0967 aswTdi (095ed820a926aa8189180b305e1bcfc9) E:\Windows\system32\drivers\aswTdi.sys
2010/12/10 10:25:53.0980 AsyncMac (add2ade1c2b285ab8378d2daaf991481) E:\Windows\system32\DRIVERS\asyncmac.sys
2010/12/10 10:25:53.0994 atapi (338c86357871c167a96ab976519bf59e) E:\Windows\system32\DRIVERS\atapi.sys
2010/12/10 10:25:54.0009 AtcL001 (3d8880a2cf21dcc057c8d9a194c41f10) E:\Windows\system32\DRIVERS\l160x86.sys
2010/12/10 10:25:54.0045 b06bdrv (1a231abec60fd316ec54c66715543cec) E:\Windows\system32\DRIVERS\bxvbdx.sys
2010/12/10 10:25:54.0064 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) E:\Windows\system32\DRIVERS\b57nd60x.sys
2010/12/10 10:25:54.0084 Beep (505506526a9d467307b3c393dedaf858) E:\Windows\system32\drivers\Beep.sys
2010/12/10 10:25:54.0104 blbdrive (2287078ed48fcfc477b05b20cf38f36f) E:\Windows\system32\DRIVERS\blbdrive.sys
2010/12/10 10:25:54.0118 bowser (fcafaef6798d7b51ff029f99a9898961) E:\Windows\system32\DRIVERS\bowser.sys
2010/12/10 10:25:54.0132 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) E:\Windows\system32\DRIVERS\BrFiltLo.sys
2010/12/10 10:25:54.0145 BrFiltUp (56801ad62213a41f6497f96dee83755a) E:\Windows\system32\DRIVERS\BrFiltUp.sys
2010/12/10 10:25:54.0165 Brserid (845b8ce732e67f3b4133164868c666ea) E:\Windows\System32\Drivers\Brserid.sys
2010/12/10 10:25:54.0180 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) E:\Windows\System32\Drivers\BrSerWdm.sys
2010/12/10 10:25:54.0194 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) E:\Windows\System32\Drivers\BrUsbMdm.sys
2010/12/10 10:25:54.0208 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) E:\Windows\System32\Drivers\BrUsbSer.sys
2010/12/10 10:25:54.0222 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) E:\Windows\system32\DRIVERS\bthmodem.sys
2010/12/10 10:25:54.0243 cdfs (77ea11b065e0a8ab902d78145ca51e10) E:\Windows\system32\DRIVERS\cdfs.sys
2010/12/10 10:25:54.0262 cdrom (ba6e70aa0e6091bc39de29477d866a77) E:\Windows\system32\DRIVERS\cdrom.sys
2010/12/10 10:25:54.0278 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) E:\Windows\system32\DRIVERS\circlass.sys
2010/12/10 10:25:54.0293 CLFS (635181e0e9bbf16871bf5380d71db02d) E:\Windows\system32\CLFS.sys
2010/12/10 10:25:54.0313 CmBatt (dea805815e587dad1dd2c502220b5616) E:\Windows\system32\DRIVERS\CmBatt.sys
2010/12/10 10:25:54.0326 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) E:\Windows\system32\DRIVERS\cmdide.sys
2010/12/10 10:25:54.0336 CNG (1b675691ed940766149c93e8f4488d68) E:\Windows\system32\Drivers\cng.sys
2010/12/10 10:25:54.0358 Compbatt (a6023d3823c37043986713f118a89bee) E:\Windows\system32\DRIVERS\compbatt.sys
2010/12/10 10:25:54.0373 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) E:\Windows\system32\DRIVERS\CompositeBus.sys
2010/12/10 10:25:54.0390 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) E:\Windows\system32\DRIVERS\crcdisk.sys
2010/12/10 10:25:54.0414 CSC (27c9490bdd0ae48911ab8cf1932591ed) E:\Windows\system32\drivers\csc.sys
2010/12/10 10:25:54.0443 DfsC (8e09e52ee2e3ceb199ef3dd99cf9e3fb) E:\Windows\system32\Drivers\dfsc.sys
2010/12/10 10:25:54.0460 discache (1a050b0274bfb3890703d490f330c0da) E:\Windows\system32\drivers\discache.sys
2010/12/10 10:25:54.0474 Disk (565003f326f99802e68ca78f2a68e9ff) E:\Windows\system32\DRIVERS\disk.sys
2010/12/10 10:25:54.0498 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) E:\Windows\system32\drivers\drmkaud.sys
2010/12/10 10:25:54.0519 DXGKrnl (8b6c3464d7fac176500061dbfff42ad4) E:\Windows\System32\drivers\dxgkrnl.sys
2010/12/10 10:25:54.0570 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) E:\Windows\system32\DRIVERS\evbdx.sys
2010/12/10 10:25:54.0620 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) E:\Windows\system32\DRIVERS\elxstor.sys
2010/12/10 10:25:54.0636 ErrDev (8fc3208352dd3912c94367a206ab3f11) E:\Windows\system32\DRIVERS\errdev.sys
2010/12/10 10:25:54.0661 exfat (2dc9108d74081149cc8b651d3a26207f) E:\Windows\system32\drivers\exfat.sys
2010/12/10 10:25:54.0676 fastfat (7e0ab74553476622fb6ae36f73d97d35) E:\Windows\system32\drivers\fastfat.sys
2010/12/10 10:25:54.0693 fdc (e817a017f82df2a1f8cfdbda29388b29) E:\Windows\system32\DRIVERS\fdc.sys
2010/12/10 10:25:54.0713 FileInfo (6cf00369c97f3cf563be99be983d13d8) E:\Windows\system32\drivers\fileinfo.sys
2010/12/10 10:25:54.0726 Filetrace (42c51dc94c91da21cb9196eb64c45db9) E:\Windows\system32\drivers\filetrace.sys
2010/12/10 10:25:54.0743 flpydisk (87907aa70cb3c56600f1c2fb8841579b) E:\Windows\system32\DRIVERS\flpydisk.sys
2010/12/10 10:25:54.0759 FltMgr (7520ec808e0c35e0ee6f841294316653) E:\Windows\system32\drivers\fltmgr.sys
2010/12/10 10:25:54.0779 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) E:\Windows\system32\drivers\FsDepends.sys
2010/12/10 10:25:54.0793 Fs_Rec (a574b4360e438977038aae4bf60d79a2) E:\Windows\system32\drivers\Fs_Rec.sys
2010/12/10 10:25:54.0811 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) E:\Windows\system32\DRIVERS\fvevol.sys
2010/12/10 10:25:54.0825 gagp30kx (65ee0c7a58b65e74ae05637418153938) E:\Windows\system32\DRIVERS\gagp30kx.sys
2010/12/10 10:25:54.0841 hcw85cir (c44e3c2bab6837db337ddee7544736db) E:\Windows\system32\drivers\hcw85cir.sys
2010/12/10 10:25:54.0858 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) E:\Windows\system32\drivers\HdAudio.sys
2010/12/10 10:25:54.0874 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) E:\Windows\system32\DRIVERS\HDAudBus.sys
2010/12/10 10:25:54.0887 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) E:\Windows\system32\DRIVERS\HidBatt.sys
2010/12/10 10:25:54.0902 HidBth (89448f40e6df260c206a193a4683ba78) E:\Windows\system32\DRIVERS\hidbth.sys
2010/12/10 10:25:54.0915 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) E:\Windows\system32\DRIVERS\hidir.sys
2010/12/10 10:25:54.0933 HidUsb (25072fb35ac90b25f9e4e3bacf774102) E:\Windows\system32\DRIVERS\hidusb.sys
2010/12/10 10:25:54.0956 HpSAMD (295fdc419039090eb8b49ffdbb374549) E:\Windows\system32\DRIVERS\HpSAMD.sys
2010/12/10 10:25:54.0974 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) E:\Windows\system32\drivers\HTTP.sys
2010/12/10 10:25:54.0991 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) E:\Windows\system32\drivers\hwpolicy.sys
2010/12/10 10:25:55.0006 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) E:\Windows\system32\DRIVERS\i8042prt.sys
2010/12/10 10:25:55.0023 iaStorV (934af4d7c5f457b9f0743f4299b77b67) E:\Windows\system32\DRIVERS\iaStorV.sys
2010/12/10 10:25:55.0041 iirsp (4173ff5708f3236cf25195fecd742915) E:\Windows\system32\DRIVERS\iirsp.sys
2010/12/10 10:25:55.0061 intelide (a0f12f2c9ba6c72f3987ce780e77c130) E:\Windows\system32\DRIVERS\intelide.sys
2010/12/10 10:25:55.0076 intelppm (3b514d27bfc4accb4037bc6685f766e0) E:\Windows\system32\DRIVERS\intelppm.sys
2010/12/10 10:25:55.0093 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) E:\Windows\system32\DRIVERS\ipfltdrv.sys
2010/12/10 10:25:55.0110 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) E:\Windows\system32\DRIVERS\IPMIDrv.sys
2010/12/10 10:25:55.0125 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) E:\Windows\system32\drivers\ipnat.sys
2010/12/10 10:25:55.0138 IRENUM (42996cff20a3084a56017b7902307e9f) E:\Windows\system32\drivers\irenum.sys
2010/12/10 10:25:55.0153 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) E:\Windows\system32\DRIVERS\isapnp.sys
2010/12/10 10:25:55.0168 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) E:\Windows\system32\DRIVERS\msiscsi.sys
2010/12/10 10:25:55.0183 kbdclass (adef52ca1aeae82b50df86b56413107e) E:\Windows\system32\DRIVERS\kbdclass.sys
2010/12/10 10:25:55.0197 kbdhid (3d9f0ebf350edcfd6498057301455964) E:\Windows\system32\DRIVERS\kbdhid.sys
2010/12/10 10:25:55.0216 KSecDD (e36a061ec11b373826905b21be10948f) E:\Windows\system32\Drivers\ksecdd.sys
2010/12/10 10:25:55.0231 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) E:\Windows\system32\Drivers\ksecpkg.sys
2010/12/10 10:25:55.0251 Lavasoft Kernexplorer (0bd6d3f477df86420de942a741dabe37) E:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys
2010/12/10 10:25:55.0266 Lbd (b7c19ec8b0dd7efa58ad41ffeb8b8cda) E:\Windows\system32\DRIVERS\Lbd.sys
2010/12/10 10:25:55.0283 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) E:\Windows\system32\DRIVERS\lltdio.sys
2010/12/10 10:25:55.0307 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) E:\Windows\system32\DRIVERS\lsi_fc.sys
2010/12/10 10:25:55.0321 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) E:\Windows\system32\DRIVERS\lsi_sas.sys
2010/12/10 10:25:55.0335 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) E:\Windows\system32\DRIVERS\lsi_sas2.sys
2010/12/10 10:25:55.0350 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) E:\Windows\system32\DRIVERS\lsi_scsi.sys
2010/12/10 10:25:55.0360 luafv (6703e366cc18d3b6e534f5cf7df39cee) E:\Windows\system32\drivers\luafv.sys
2010/12/10 10:25:55.0380 megasas (0fff5b045293002ab38eb1fd1fc2fb74) E:\Windows\system32\DRIVERS\megasas.sys
2010/12/10 10:25:55.0390 MegaSR (dcbab2920c75f390caf1d29f675d03d6) E:\Windows\system32\DRIVERS\MegaSR.sys
2010/12/10 10:25:55.0417 Modem (f001861e5700ee84e2d4e52c712f4964) E:\Windows\system32\drivers\modem.sys
2010/12/10 10:25:55.0431 monitor (79d10964de86b292320e9dfe02282a23) E:\Windows\system32\DRIVERS\monitor.sys
2010/12/10 10:25:55.0445 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) E:\Windows\system32\DRIVERS\mouclass.sys
2010/12/10 10:25:55.0460 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) E:\Windows\system32\DRIVERS\mouhid.sys
2010/12/10 10:25:55.0474 mountmgr (921c18727c5920d6c0300736646931c2) E:\Windows\system32\drivers\mountmgr.sys
2010/12/10 10:25:55.0489 mpio (2af5997438c55fb79d33d015c30e1974) E:\Windows\system32\DRIVERS\mpio.sys
2010/12/10 10:25:55.0504 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) E:\Windows\system32\drivers\mpsdrv.sys
2010/12/10 10:25:55.0522 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) E:\Windows\system32\drivers\mrxdav.sys
2010/12/10 10:25:55.0537 mrxsmb (f1b6aa08497ea86ca6ef6f7a08b0bfb8) E:\Windows\system32\DRIVERS\mrxsmb.sys
2010/12/10 10:25:55.0552 mrxsmb10 (5613358b4050f46f5a9832da8050d6e4) E:\Windows\system32\DRIVERS\mrxsmb10.sys
2010/12/10 10:25:55.0566 mrxsmb20 (25c9792778d80feb4c8201e62281bfdf) E:\Windows\system32\DRIVERS\mrxsmb20.sys
2010/12/10 10:25:55.0580 msahci (4326d168944123f38dd3b2d9c37a0b12) E:\Windows\system32\DRIVERS\msahci.sys
2010/12/10 10:25:55.0595 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) E:\Windows\system32\DRIVERS\msdsm.sys
2010/12/10 10:25:55.0617 Msfs (daefb28e3af5a76abcc2c3078c07327f) E:\Windows\system32\drivers\Msfs.sys
2010/12/10 10:25:55.0631 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) E:\Windows\System32\drivers\mshidkmdf.sys
2010/12/10 10:25:55.0645 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) E:\Windows\system32\DRIVERS\msisadrv.sys
2010/12/10 10:25:55.0665 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) E:\Windows\system32\drivers\MSKSSRV.sys
2010/12/10 10:25:55.0679 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) E:\Windows\system32\drivers\MSPCLOCK.sys
2010/12/10 10:25:55.0693 MSPQM (f456e973590d663b1073e9c463b40932) E:\Windows\system32\drivers\MSPQM.sys
2010/12/10 10:25:55.0709 MsRPC (0e008fc4819d238c51d7c93e7b41e560) E:\Windows\system32\drivers\MsRPC.sys
2010/12/10 10:25:55.0724 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) E:\Windows\system32\DRIVERS\mssmbios.sys
2010/12/10 10:25:55.0738 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) E:\Windows\system32\drivers\MSTEE.sys
2010/12/10 10:25:55.0752 MTConfig (33599130f44e1f34631cea241de8ac84) E:\Windows\system32\DRIVERS\MTConfig.sys
2010/12/10 10:25:55.0767 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) E:\Windows\system32\DRIVERS\ASACPI.sys
2010/12/10 10:25:55.0781 Mup (159fad02f64e6381758c990f753bcc80) E:\Windows\system32\Drivers\mup.sys
2010/12/10 10:25:55.0800 NativeWifiP (26384429fcd85d83746f63e798ab1480) E:\Windows\system32\DRIVERS\nwifi.sys
2010/12/10 10:25:55.0821 NDIS (23759d175a0a9baaf04d05047bc135a8) E:\Windows\system32\drivers\ndis.sys
2010/12/10 10:25:55.0841 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) E:\Windows\system32\DRIVERS\ndiscap.sys
2010/12/10 10:25:55.0855 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) E:\Windows\system32\DRIVERS\ndistapi.sys
2010/12/10 10:25:55.0869 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) E:\Windows\system32\DRIVERS\ndisuio.sys
2010/12/10 10:25:55.0884 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) E:\Windows\system32\DRIVERS\ndiswan.sys
2010/12/10 10:25:55.0898 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) E:\Windows\system32\drivers\NDProxy.sys
2010/12/10 10:25:55.0913 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) E:\Windows\system32\DRIVERS\netbios.sys
2010/12/10 10:25:55.0929 NetBT (dd52a733bf4ca5af84562a5e2f963b91) E:\Windows\system32\DRIVERS\netbt.sys
2010/12/10 10:25:55.0955 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) E:\Windows\system32\DRIVERS\nfrd960.sys
2010/12/10 10:25:55.0971 Npfs (1db262a9f8c087e8153d89bef3d2235f) E:\Windows\system32\drivers\Npfs.sys
2010/12/10 10:25:55.0988 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) E:\Windows\system32\drivers\nsiproxy.sys
2010/12/10 10:25:56.0015 Ntfs (3795dcd21f740ee799fb7223234215af) E:\Windows\system32\drivers\Ntfs.sys
2010/12/10 10:25:56.0038 Null (f9756a98d69098dca8945d62858a812c) E:\Windows\system32\drivers\Null.sys
2010/12/10 10:25:56.0165 nvlddmkm (b0881dda5a8160422561ffab7f0008b1) E:\Windows\system32\DRIVERS\nvlddmkm.sys
2010/12/10 10:25:56.0266 nvraid (3f3d04b1d08d43c16ea7963954ec768d) E:\Windows\system32\DRIVERS\nvraid.sys
2010/12/10 10:25:56.0281 nvstor (c99f251a5de63c6f129cf71933aced0f) E:\Windows\system32\DRIVERS\nvstor.sys
2010/12/10 10:25:56.0295 nv_agp (5a0983915f02bae73267cc2a041f717d) E:\Windows\system32\DRIVERS\nv_agp.sys
2010/12/10 10:25:56.0309 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) E:\Windows\system32\DRIVERS\ohci1394.sys
2010/12/10 10:25:56.0338 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) E:\Windows\system32\DRIVERS\parport.sys
2010/12/10 10:25:56.0352 partmgr (ff4218952b51de44fe910953a3e686b9) E:\Windows\system32\drivers\partmgr.sys
2010/12/10 10:25:56.0366 Parvdm (eb0a59f29c19b86479d36b35983daadc) E:\Windows\system32\DRIVERS\parvdm.sys
2010/12/10 10:25:56.0383 pci (c858cb77c577780ecc456a892e7e7d0f) E:\Windows\system32\DRIVERS\pci.sys
2010/12/10 10:25:56.0393 pciide (afe86f419014db4e5593f69ffe26ce0a) E:\Windows\system32\DRIVERS\pciide.sys
2010/12/10 10:25:56.0413 pcmcia (f396431b31693e71e8a80687ef523506) E:\Windows\system32\DRIVERS\pcmcia.sys
2010/12/10 10:25:56.0429 pcw (250f6b43d2b613172035c6747aeeb19f) E:\Windows\system32\drivers\pcw.sys
2010/12/10 10:25:56.0447 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) E:\Windows\system32\drivers\peauth.sys
2010/12/10 10:25:56.0501 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) E:\Windows\system32\DRIVERS\raspptp.sys
2010/12/10 10:25:56.0516 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) E:\Windows\system32\DRIVERS\processr.sys
2010/12/10 10:25:56.0537 Psched (6270ccae2a86de6d146529fe55b3246a) E:\Windows\system32\DRIVERS\pacer.sys
2010/12/10 10:25:56.0552 PxHelp20 (d970470f8f39470bdae94d313a1ccdce) E:\Windows\system32\Drivers\PxHelp20.sys
2010/12/10 10:25:56.0577 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) E:\Windows\system32\DRIVERS\ql2300.sys
2010/12/10 10:25:56.0602 ql40xx (b4dd51dd25182244b86737dc51af2270) E:\Windows\system32\DRIVERS\ql40xx.sys
2010/12/10 10:25:56.0618 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) E:\Windows\system32\drivers\qwavedrv.sys
2010/12/10 10:25:56.0632 RasAcd (30a81b53c766d0133bb86d234e5556ab) E:\Windows\system32\DRIVERS\rasacd.sys
2010/12/10 10:25:56.0646 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) E:\Windows\system32\DRIVERS\AgileVpn.sys
2010/12/10 10:25:56.0664 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) E:\Windows\system32\DRIVERS\rasl2tp.sys
2010/12/10 10:25:56.0680 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) E:\Windows\system32\DRIVERS\raspppoe.sys
2010/12/10 10:25:56.0695 RasSstp (44101f495a83ea6401d886e7fd70096b) E:\Windows\system32\DRIVERS\rassstp.sys
2010/12/10 10:25:56.0710 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) E:\Windows\system32\DRIVERS\rdbss.sys
2010/12/10 10:25:56.0724 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) E:\Windows\system32\DRIVERS\rdpbus.sys
2010/12/10 10:25:56.0738 RDPCDD (1e016846895b15a99f9a176a05029075) E:\Windows\system32\DRIVERS\RDPCDD.sys
2010/12/10 10:25:56.0756 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) E:\Windows\system32\drivers\rdpdr.sys
2010/12/10 10:25:56.0771 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) E:\Windows\system32\drivers\rdpencdd.sys
2010/12/10 10:25:56.0788 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) E:\Windows\system32\drivers\rdprefmp.sys
2010/12/10 10:25:56.0804 RDPWD (801371ba9782282892d00aadb08ee367) E:\Windows\system32\drivers\RDPWD.sys
2010/12/10 10:25:56.0820 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) E:\Windows\system32\drivers\rdyboost.sys
2010/12/10 10:25:56.0848 rspndr (032b0d36ad92b582d869879f5af5b928) E:\Windows\system32\DRIVERS\rspndr.sys
2010/12/10 10:25:56.0862 s3cap (5423d8437051e89dd34749f242c98648) E:\Windows\system32\DRIVERS\vms3cap.sys
2010/12/10 10:25:56.0880 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) E:\Windows\system32\DRIVERS\sbp2port.sys
2010/12/10 10:25:56.0897 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) E:\Windows\system32\DRIVERS\scfilter.sys
2010/12/10 10:25:56.0920 secdrv (90a3935d05b494a5a39d37e71f09a677) E:\Windows\system32\drivers\secdrv.sys
2010/12/10 10:25:56.0943 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) E:\Windows\system32\DRIVERS\serenum.sys
2010/12/10 10:25:56.0958 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) E:\Windows\system32\DRIVERS\serial.sys
2010/12/10 10:25:56.0972 sermouse (79bffb520327ff916a582dfea17aa813) E:\Windows\system32\DRIVERS\sermouse.sys
2010/12/10 10:25:56.0997 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) E:\Windows\system32\DRIVERS\sffdisk.sys
2010/12/10 10:25:57.0011 sffp_mmc (932a68ee27833cfd57c1639d375f2731) E:\Windows\system32\DRIVERS\sffp_mmc.sys
2010/12/10 10:25:57.0026 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) E:\Windows\system32\DRIVERS\sffp_sd.sys
2010/12/10 10:25:57.0040 sfloppy (db96666cc8312ebc45032f30b007a547) E:\Windows\system32\DRIVERS\sfloppy.sys
2010/12/10 10:25:57.0060 sisagp (2565cac0dc9fe0371bdce60832582b2e) E:\Windows\system32\DRIVERS\sisagp.sys
2010/12/10 10:25:57.0075 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) E:\Windows\system32\DRIVERS\SiSRaid2.sys
2010/12/10 10:25:57.0089 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) E:\Windows\system32\DRIVERS\sisraid4.sys
2010/12/10 10:25:57.0104 Smb (3e21c083b8a01cb70ba1f09303010fce) E:\Windows\system32\DRIVERS\smb.sys
2010/12/10 10:25:57.0127 spldr (95cf1ae7527fb70f7816563cbc09d942) E:\Windows\system32\drivers\spldr.sys
2010/12/10 10:25:57.0153 srv (2dbedfb1853f06110ec2aa7f3213c89f) E:\Windows\system32\DRIVERS\srv.sys
2010/12/10 10:25:57.0171 srv2 (db37131d1027c50ea7ee21c8bb4536aa) E:\Windows\system32\DRIVERS\srv2.sys
2010/12/10 10:25:57.0187 srvnet (f5980b74124db9233b33f86fc5ebbb4f) E:\Windows\system32\DRIVERS\srvnet.sys
2010/12/10 10:25:57.0209 stexstor (db32d325c192b801df274bfd12a7e72b) E:\Windows\system32\DRIVERS\stexstor.sys
2010/12/10 10:25:57.0226 storflt (957e346ca948668f2496a6ccf6ff82cc) E:\Windows\system32\DRIVERS\vmstorfl.sys
2010/12/10 10:25:57.0240 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) E:\Windows\system32\DRIVERS\storvsc.sys
2010/12/10 10:25:57.0255 swenum (e58c78a848add9610a4db6d214af5224) E:\Windows\system32\DRIVERS\swenum.sys
2010/12/10 10:25:57.0295 Tcpip (bb7f39c31c4a4417fd318e7cd184e225) E:\Windows\system32\drivers\tcpip.sys
2010/12/10 10:25:57.0331 TCPIP6 (bb7f39c31c4a4417fd318e7cd184e225) E:\Windows\system32\DRIVERS\tcpip.sys
2010/12/10 10:25:57.0353 tcpipreg (e64444523add154f86567c469bc0b17f) E:\Windows\system32\drivers\tcpipreg.sys
2010/12/10 10:25:57.0370 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) E:\Windows\system32\drivers\tdpipe.sys
2010/12/10 10:25:57.0385 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) E:\Windows\system32\drivers\tdtcp.sys
2010/12/10 10:25:57.0400 tdx (cb39e896a2a83702d1737bfd402b3542) E:\Windows\system32\DRIVERS\tdx.sys
2010/12/10 10:25:57.0414 TermDD (c36f41ee20e6999dbf4b0425963268a5) E:\Windows\system32\DRIVERS\termdd.sys
2010/12/10 10:25:57.0446 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) E:\Windows\system32\DRIVERS\tssecsrv.sys
2010/12/10 10:25:57.0462 tunnel (3e461d890a97f9d4c168f5fda36e1d00) E:\Windows\system32\DRIVERS\tunnel.sys
2010/12/10 10:25:57.0475 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) E:\Windows\system32\DRIVERS\uagp35.sys
2010/12/10 10:25:57.0491 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) E:\Windows\system32\DRIVERS\udfs.sys
2010/12/10 10:25:57.0516 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) E:\Windows\system32\DRIVERS\uliagpkx.sys
2010/12/10 10:25:57.0531 umbus (049b3a50b3d646baeeee9eec9b0668dc) E:\Windows\system32\DRIVERS\umbus.sys
2010/12/10 10:25:57.0546 UmPass (7550ad0c6998ba1cb4843e920ee0feac) E:\Windows\system32\DRIVERS\umpass.sys
2010/12/10 10:25:57.0566 usbccgp (8455c4ed038efd09e99327f9d2d48ffa) E:\Windows\system32\DRIVERS\usbccgp.sys
2010/12/10 10:25:57.0582 usbcir (04ec7cec62ec3b6d9354eee93327fc82) E:\Windows\system32\DRIVERS\usbcir.sys
2010/12/10 10:25:57.0596 usbehci (1c333bfd60f2fed2c7ad5daf533cb742) E:\Windows\system32\DRIVERS\usbehci.sys
2010/12/10 10:25:57.0613 usbhub (ee6ef93ccfa94fae8c6ab298273d8ae2) E:\Windows\system32\DRIVERS\usbhub.sys
2010/12/10 10:25:57.0627 usbohci (a6fb7957ea7afb1165991e54ce934b74) E:\Windows\system32\DRIVERS\usbohci.sys
2010/12/10 10:25:57.0642 usbprint (797d862fe0875e75c7cc4c1ad7b30252) E:\Windows\system32\DRIVERS\usbprint.sys
2010/12/10 10:25:57.0657 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) E:\Windows\system32\DRIVERS\usbscan.sys
2010/12/10 10:25:57.0671 USBSTOR (d8889d56e0d27e57ed4591837fe71d27) E:\Windows\system32\DRIVERS\USBSTOR.SYS
2010/12/10 10:25:57.0685 usbuhci (78780c3ebce17405b1ccd07a3a8a7d72) E:\Windows\system32\DRIVERS\usbuhci.sys
2010/12/10 10:25:57.0706 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) E:\Windows\system32\DRIVERS\vdrvroot.sys
2010/12/10 10:25:57.0723 vga (17c408214ea61696cec9c66e388b14f3) E:\Windows\system32\DRIVERS\vgapnp.sys
2010/12/10 10:25:57.0738 VgaSave (8e38096ad5c8570a6f1570a61e251561) E:\Windows\System32\drivers\vga.sys
2010/12/10 10:25:57.0754 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) E:\Windows\system32\DRIVERS\vhdmp.sys
2010/12/10 10:25:57.0769 viaagp (c829317a37b4bea8f39735d4b076e923) E:\Windows\system32\DRIVERS\viaagp.sys
2010/12/10 10:25:57.0783 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) E:\Windows\system32\DRIVERS\viac7.sys
2010/12/10 10:25:57.0797 viaide (e43574f6a56a0ee11809b48c09e4fd3c) E:\Windows\system32\DRIVERS\viaide.sys
2010/12/10 10:25:57.0813 vmbus (379b349f65f453d2a6e75ea6b7448e49) E:\Windows\system32\DRIVERS\vmbus.sys
2010/12/10 10:25:57.0828 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) E:\Windows\system32\DRIVERS\VMBusHID.sys
2010/12/10 10:25:57.0843 volmgr (384e5a2aa49934295171e499f86ba6f3) E:\Windows\system32\DRIVERS\volmgr.sys
2010/12/10 10:25:57.0859 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) E:\Windows\system32\drivers\volmgrx.sys
2010/12/10 10:25:57.0876 volsnap (58df9d2481a56edde167e51b334d44fd) E:\Windows\system32\DRIVERS\volsnap.sys
2010/12/10 10:25:57.0891 vsmraid (9dfa0cc2f8855a04816729651175b631) E:\Windows\system32\DRIVERS\vsmraid.sys
2010/12/10 10:25:57.0908 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) E:\Windows\System32\drivers\vwifibus.sys
2010/12/10 10:25:57.0929 WacomPen (de3721e89c653aa281428c8a69745d90) E:\Windows\system32\DRIVERS\wacompen.sys
2010/12/10 10:25:57.0944 WANARP (692a712062146e96d28ba0b7d75de31b) E:\Windows\system32\DRIVERS\wanarp.sys
2010/12/10 10:25:57.0953 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) E:\Windows\system32\DRIVERS\wanarp.sys
2010/12/10 10:25:57.0982 Wd (1112a9badacb47b7c0bb0392e3158dff) E:\Windows\system32\DRIVERS\wd.sys
2010/12/10 10:25:58.0000 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) E:\Windows\system32\drivers\Wdf01000.sys
2010/12/10 10:25:58.0035 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) E:\Windows\system32\DRIVERS\wfplwf.sys
2010/12/10 10:25:58.0050 WIMMount (5cf95b35e59e2a38023836fff31be64c) E:\Windows\system32\drivers\wimmount.sys
2010/12/10 10:25:58.0085 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) E:\Windows\system32\DRIVERS\WinUsb.sys
2010/12/10 10:25:58.0102 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) E:\Windows\system32\DRIVERS\wmiacpi.sys
2010/12/10 10:25:58.0131 ws2ifsl (6db3276587b853bf886b69528fdb048c) E:\Windows\system32\drivers\ws2ifsl.sys
2010/12/10 10:25:58.0159 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) E:\Windows\system32\drivers\WudfPf.sys
2010/12/10 10:25:58.0174 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) E:\Windows\system32\DRIVERS\WUDFRd.sys
2010/12/10 10:25:58.0239 ================================================================================
2010/12/10 10:25:58.0239 Scan finished
2010/12/10 10:25:58.0239 ================================================================================

salut


/!\ ATTENTION SUIVRE A LA LETTRE CES INDICATIONS/!\

__________________________________________________________
>Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.<
>>>>>>>Ne pas utiliser en dehors de ce cas de figure : dangereux!<<<<<<<<
=====================================================

▶ Surtout , pense à l'enregistrement à renommer Combofix en "ton prenom.exe" avant qu'il soit enregistré sur ton disque dur

Telecharge ici : Combofix

Avant d'utiliser ComboFix :

Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :

▶ Télécharge Defogger (de jpshortstuff) sur ton Bureau

▶ Lance le

Une fenêtre apparait : clique sur "Disable"

▶ Fais redémarrer l'ordinateur si l'outil te le demande

Note : Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"

_________________________________________________________
>> referme les fenêtres de tous les programmes en cours.
>> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
>>la protection en temps réel de ton Antivirus et de tes Antispywares,
>>qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur combofix renommé

▶ !!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

▶ n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

▶▶ Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

re... là mon PC est inutilisable mais windows 7 boot.
lorsque j'ai voulu lancer Chrome après avoir utiliser COMBOFIX il m'a mis un message d'erreur :

E:Users\n\AppData\local\Google\chrome\Application\chrome.exe
Tentative d'opération non autorisée sur une clé du registre marqué pour suppression

Le même message s'affiche pour Word 2010, ainsi que pour le raccourci de l'Explorateur dans la barre de lancement rapide de 7.Impossible également de relance Defogger. Idem impossible d'ouvrir le fichier Combofix.txt même le bloc note ne s'ouvre plus. (j'ai du le copier dans mon dossier de partage et l'ouvrir sur mon protable)

Mais je suppose que tu vas m'aider à régler tout ça. Petite info je ne sais pas si ça t'aideras mais j'ai un SSD (E:) pour 7 , word et AdobeCS, tous mes téléchargement ce font sur mon disque C: qui possède une version de Vista 64 de secours. Mais le bios est configuré pour booter sur E: via 7.

Compte rendu Combofix :
ComboFix 10-12-09.02 - n 10/12/2010 13:20:11.1.2 - x86
Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.3327.2468 [GMT 1:00]
Lancé depuis: e:\users\n\Desktop\brice.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\ANTIGEN.dll
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\ANTIGEN.tmp
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\CLSV.exe
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\eb.sys
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\energy.drv
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\FW.drv
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\gid.tmp
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\grid.tmp
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\hymt.sys
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\kernel32.dll
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\pal.sys
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\PE.dll
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\PE.exe
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\PE.tmp
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\SICKBOY.drv
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\sld.drv
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\std.dll
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\std.tmp
e:\users\n\AppData\Roaming\Microsoft\Windows\Recent\tjd.sys
e:\windows\system32\kb.dll

e:\windows\explorer.exe . . . est infecté!! . . .Failed to restore. Attempting to replace on reboot

Une copie infectée de e:\windows\System32\wininit.exe a été trouvée et désinfectée
Copie restaurée à partir de - e:\windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

Une copie infectée de e:\windows\explorer.exe a été trouvée et désinfectée
Copie restaurée à partir de - e:\windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-11-10 au 2010-12-10 ))))))))))))))))))))))))))))))))))))
.

2010-12-10 12:24 . 2010-12-10 12:24 -------- d-----w- e:\users\Default\AppData\Local\temp
2010-12-10 09:25 . 2010-12-10 09:25 -------- d-----w- E:\tdsskiller
2010-12-10 02:19 . 2010-12-10 02:19 -------- d-----w- e:\windows\system32\Wat
2010-12-10 02:04 . 2009-09-10 05:52 257024 ----a-w- e:\windows\system32\msv1_0.dll
2010-12-10 02:01 . 2010-02-11 07:10 293376 ----a-w- e:\windows\system32\browserchoice.exe
2010-12-10 02:00 . 2009-11-25 11:47 99176 ----a-w- e:\windows\system32\PresentationHostProxy.dll
2010-12-10 02:00 . 2009-11-25 11:47 49472 ----a-w- e:\windows\system32\netfxperf.dll
2010-12-10 02:00 . 2009-11-25 11:47 297808 ----a-w- e:\windows\system32\mscoree.dll
2010-12-10 02:00 . 2009-11-25 11:47 295264 ----a-w- e:\windows\system32\PresentationHost.exe
2010-12-10 02:00 . 2009-11-25 11:47 1130824 ----a-w- e:\windows\system32\dfshim.dll
2010-12-10 02:00 . 2010-03-04 03:57 190976 ----a-w- e:\windows\system32\drivers\ks.sys
2010-12-10 01:05 . 2010-11-29 16:42 38224 ----a-w- e:\windows\system32\drivers\mbamswissarmy.sys
2010-12-10 01:05 . 2010-12-10 01:05 -------- d-----w- e:\programdata\Malwarebytes
2010-12-10 01:05 . 2010-11-29 16:42 20952 ----a-w- e:\windows\system32\drivers\mbam.sys
2010-12-10 00:52 . 2010-12-10 00:33 15880 ----a-w- e:\windows\system32\lsdelete.exe
2010-12-10 00:30 . 2010-12-10 00:30 -------- dc----w- e:\windows\system32\DRVSTORE
2010-12-10 00:30 . 2010-11-22 08:50 64288 ----a-w- e:\windows\system32\drivers\Lbd.sys
2010-12-10 00:30 . 2010-12-10 00:30 98392 ----a-w- e:\windows\system32\drivers\SBREDrv.sys
2010-12-10 00:21 . 2010-12-10 00:21 -------- dc-h--w- e:\programdata\{589802B2-1BF3-4609-9ADE-CF6E6608D06D}
2010-12-10 00:21 . 2010-12-10 00:30 -------- d-----w- e:\programdata\Lavasoft
2010-12-10 00:21 . 2010-12-10 00:21 -------- d-----w- e:\program files\Lavasoft
2010-12-09 23:05 . 2010-12-09 23:06 -------- d-----w- e:\program files\Wavesz
2010-12-09 22:43 . 2010-12-09 22:43 -------- d-----w- e:\program files\Antares Audio Technologies
2010-12-09 22:42 . 2010-12-09 22:42 -------- d-----w- e:\programdata\Audio Ease
2010-12-09 22:42 . 2007-10-05 19:04 1409 ----a-w- e:\windows\system32\QTFont.for
2010-12-09 22:42 . 2010-12-09 22:42 -------- d-----w- e:\program files\Audio Ease
2010-12-09 17:55 . 2010-09-07 15:52 46672 ----a-w- e:\windows\system32\drivers\aswTdi.sys
2010-12-09 17:55 . 2010-09-07 15:52 165584 ----a-w- e:\windows\system32\drivers\aswSP.sys
2010-12-09 17:55 . 2010-09-07 15:47 23376 ----a-w- e:\windows\system32\drivers\aswRdr.sys
2010-12-09 17:55 . 2010-09-07 15:47 50768 ----a-w- e:\windows\system32\drivers\aswMonFlt.sys
2010-12-09 17:55 . 2010-09-07 15:47 17744 ----a-w- e:\windows\system32\drivers\aswFsBlk.sys
2010-12-09 17:55 . 2010-09-07 16:12 38848 ----a-w- e:\windows\avastSS.scr
2010-12-09 17:55 . 2010-09-07 16:11 167592 ----a-w- e:\windows\system32\aswBoot.exe
2010-12-09 17:55 . 2010-12-09 17:55 -------- d-----w- e:\programdata\Alwil Software
2010-12-09 17:55 . 2010-12-09 17:55 -------- d-----w- e:\program files\Alwil Software
2010-12-09 15:00 . 2010-12-09 15:00 -------- d-sh--w- e:\programdata\IASZYPOMYSV
2010-12-09 15:00 . 2010-12-09 20:53 -------- d-sh--w- e:\programdata\7a58e7
2010-12-09 13:51 . 2010-12-09 14:45 -------- d-----w- e:\program files\Groobax
2010-12-09 13:08 . 2010-12-09 13:08 -------- d-----w- e:\program files\Sony
2010-12-09 09:02 . 2010-12-09 14:45 -------- d-----w- e:\program files\Sony Setup
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin.dll
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\program files\QuickTime
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\programdata\Apple Computer
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\program files\Common Files\Apple
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\program files\Apple Software Update
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\programdata\Apple
2010-12-07 15:55 . 2010-11-16 11:01 6273872 ----a-w- e:\programdata\Microsoft\Windows Defender\Definition Updates\{7E8F50E3-8F66-4C92-8BE4-EF0C12F5DE0B}\mpengine.dll
2010-12-07 13:32 . 2010-12-07 13:32 -------- d-----w- e:\program files\Microsoft Synchronization Services
2010-12-07 13:31 . 2010-12-10 02:01 -------- d-----w- e:\program files\Microsoft.NET
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\windows\PCHEALTH
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\program files\Microsoft Sync Framework
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\program files\Microsoft SQL Server Compact Edition
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\program files\Microsoft Analysis Services
2010-12-07 13:31 . 2010-12-07 13:33 -------- d-----w- e:\programdata\Microsoft Help
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----r- E:\MSOCache
2010-12-07 11:06 . 2010-12-09 14:45 -------- d-----w- e:\programdata\FLEXnet
2010-12-07 09:55 . 2010-12-07 11:00 -------- d-----w- e:\program files\Common Files\PX Storage Engine
2010-12-07 09:53 . 2008-04-07 04:38 22872 ----a-r- e:\windows\system32\AdobePDFUI.dll
2010-12-07 09:51 . 2010-12-07 09:51 -------- d-----w- e:\program files\Adobe Media Player
2010-12-07 09:36 . 2010-12-07 09:36 -------- d-----w- e:\program files\Common Files\Adobe AIR
2010-12-07 02:10 . 2010-12-07 02:10 -------- d-----w- e:\windows\system32\Macromed
2010-12-07 02:10 . 2010-12-07 02:10 -------- d-----w- e:\program files\Common Files\Macrovision Shared
2010-12-07 02:07 . 2010-12-07 10:54 -------- d-----w- e:\program files\Common Files\Adobe
2010-12-07 02:05 . 2010-06-14 06:12 1286016 ----a-w- e:\windows\system32\drivers\tcpip.sys
2010-12-07 02:04 . 2010-08-21 05:36 224256 ----a-w- e:\windows\system32\schannel.dll
2010-12-07 02:03 . 2010-07-13 05:22 26504 ----a-w- e:\windows\system32\drivers\Diskdump.sys
2010-12-07 00:48 . 2010-12-07 00:48 -------- d-----w- e:\program files\uTorrent
2010-12-07 00:38 . 2010-12-10 11:01 -------- d-----w- e:\program files\Steam
2010-12-07 00:38 . 2010-12-07 09:06 -------- d-----w- e:\program files\Common Files\Steam
2010-12-07 00:29 . 2010-12-07 00:32 -------- d-----w- e:\program files\SilverFast Application
2010-12-07 00:26 . 2010-12-07 00:26 -------- d-----w- e:\programdata\ArcSoft
2010-12-07 00:26 . 2010-12-07 00:26 -------- d-----w- e:\program files\ArcSoft
2010-12-07 00:26 . 2010-12-07 00:26 -------- d-----w- e:\program files\Common Files\ArcSoft
2010-12-07 00:10 . 2010-12-07 00:10 -------- d-----w- e:\program files\ABBYY FineReader 6.0 Sprint
2010-12-07 00:10 . 2010-12-07 00:10 -------- d-----w- e:\programdata\UDL
2010-12-07 00:03 . 2006-10-30 23:10 71840 ----a-w- e:\windows\system32\EPPicMgr.dll
2010-12-07 00:03 . 2006-10-30 23:10 120992 ----a-w- e:\windows\system32\EpPicPrt.dll
2010-12-07 00:03 . 2006-10-19 23:10 80024 ----a-w- e:\windows\system32\PICSDK.dll
2010-12-07 00:03 . 2006-10-19 23:10 501912 ----a-w- e:\windows\system32\PICSDK2.dll
2010-12-07 00:03 . 2006-10-19 23:10 108704 ----a-w- e:\windows\system32\PICEntry.dll
2010-12-06 23:59 . 2010-12-07 00:26 -------- d--h--w- e:\program files\InstallShield Installation Information
2010-12-06 23:59 . 2010-12-07 00:25 -------- d-----w- e:\program files\Common Files\InstallShield
2010-12-06 23:59 . 2010-12-07 00:12 -------- d-----w- e:\program files\Epson Software
2010-12-06 23:58 . 2010-12-07 00:12 -------- d-----w- e:\program files\epson
2010-12-06 23:58 . 2009-04-30 23:00 15872 ----a-w- e:\windows\system32\escdev.dll
2010-12-06 23:58 . 2009-04-30 23:00 128392 ----a-w- e:\windows\system32\esdevapp.exe
2010-12-06 23:58 . 2007-11-19 23:00 48640 ----a-w- e:\windows\system32\escwiab.dll
2010-12-06 22:41 . 2010-12-06 22:41 -------- d-----w- e:\program files\VideoLAN
2010-12-06 22:13 . 2010-12-06 22:13 -------- d-----w- E:\PFiles
2010-12-06 22:13 . 2010-12-10 02:01 -------- d-sh--w- e:\windows\Installer
2010-12-06 21:40 . 2010-01-09 06:52 132608 ----a-w- e:\windows\system32\cabview.dll
2010-12-06 21:40 . 2009-12-29 06:55 172032 ----a-w- e:\windows\system32\wintrust.dll
2010-12-06 18:06 . 2010-10-19 09:41 222080 ------w- e:\windows\system32\MpSigStub.exe
2010-12-06 17:35 . 2010-12-10 12:30 -------- d-----w- e:\windows\system32\wbem\Performance
2010-12-06 17:22 . 2010-12-06 21:39 -------- d-----w- e:\windows\Panther
2010-12-06 17:20 . 2010-12-06 17:20 -------- d-----w- E:\Windows.old

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="e:\users\n\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-12-06 136176]
"Steam"="e:\program files\Steam\Steam.exe" [2010-12-07 1242448]
"uTorrent"="e:\program files\uTorrent\uTorrent.exe" [2010-12-07 395128]
"AdobeBridge"="e:\program files\Adobe\Adobe Bridge CS4\Bridge.exe" [2008-08-28 13145448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EEventManager"="e:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616]
"ArcSoft Connection Service"="e:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]
"AdobeCS4ServiceManager"="e:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="e:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="e:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"BCSSync"="e:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-01-21 91520]
"QuickTime Task"="e:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"avast5"="e:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"Malwarebytes' Anti-Malware (reboot)"="c:\antivirus\Malwarebytes' Anti-Malware\mbam.exe" [2010-11-29 963976]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;e:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;e:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;e:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2010-11-22 15264]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;e:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
R3 osppsvc;Office Software Protection Platform;e:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 WatAdminSvc;Service Windows Activation Technologies;e:\windows\system32\Wat\WatAdminSvc.exe [2010-12-10 1343400]
S0 Lbd;Lbd;e:\windows\system32\DRIVERS\Lbd.sys [2010-11-22 64288]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;e:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;e:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-12-10 1389400]
S3 AtcL001;Pilote de miniport NDIS pour contrôleur Atheros L1 Gigabit Ethernet;e:\windows\system32\DRIVERS\l160x86.sys [2009-07-13 47104]

.
Contenu du dossier 'Tâches planifiées'

2010-12-10 e:\windows\Tasks\Ad-Aware Update (Weekly).job
- e:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-11-22 00:32]

2010-12-09 e:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-51543557-707049822-2373659926-1000Core.job
- e:\users\n\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-06 21:44]

2010-12-10 e:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-51543557-707049822-2373659926-1000UA.job
- e:\users\n\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-06 21:44]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyServer = http=127.0.0.1:25438
IE: Ajouter la cible du lien à un fichier PDF existant - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: E&xport to Microsoft Excel - e:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - e:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - e:\program files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@e:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="e:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
e:\program files\Alwil Software\Avast5\AvastSvc.exe
e:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
e:\windows\system32\sppsvc.exe
e:\windows\system32\wbem\unsecapp.exe
e:\windows\system32\taskhost.exe
e:\windows\system32\conhost.exe
e:\program files\Lavasoft\Ad-Aware\AAWTray.exe
.
**************************************************************************
.
Heure de fin: 2010-12-10 13:36:11 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-12-10 12:36

Avant-CF: 48 124 878 848 octets libres
Après-CF: 47 991 349 248 octets libres

- - End Of File - - B91317666C138972FF5A56738C66E719

relance ton windows 7 il devrait retourner normalement au redemarrage

Tout fonctionne à merveille!!!!!!!
Un très grand merci à toi!

ce n'est pas fini :

Fais analyser le(s) fichier(s) suivants sur Virustotal :

Virus Total

* * Colle directement le chemin des fichiers , un par un , dans l'espace "Parcourir" apres chaque analyse :

C:\Windows\System32\Winlogon.exe
C:\Windows\Explorer.exe
C:\Windows\System32\Wininit.exe


* Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
* Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
* Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.

Voilà les résultats :

0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name: winlogon.exe
Submission date: 2010-12-10 13:46:45 (UTC)
Current status: finished
Result: 0/ 43 (0.0%)
VT Community

not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.12.10.00 2010.12.09 -
AntiVir 7.10.14.248 2010.12.10 -
Antiy-AVL 2.0.3.7 2010.12.10 -
Avast 4.8.1351.0 2010.12.10 -
Avast5 5.0.677.0 2010.12.10 -
AVG 9.0.0.851 2010.12.10 -
BitDefender 7.2 2010.12.10 -
CAT-QuickHeal 11.00 2010.12.10 -
ClamAV 0.96.4.0 2010.12.10 -
Command 5.2.11.5 2010.12.10 -
Comodo 7012 2010.12.10 -
DrWeb 5.0.2.03300 2010.12.10 -
Emsisoft 5.1.0.1 2010.12.10 -
eSafe 7.0.17.0 2010.12.09 -
eTrust-Vet 36.1.8033 2010.12.10 -
F-Prot 4.6.2.117 2010.12.10 -
F-Secure 9.0.16160.0 2010.12.10 -
Fortinet 4.2.254.0 2010.12.10 -
GData 21 2010.12.10 -
Ikarus T3.1.1.90.0 2010.12.10 -
Jiangmin 13.0.900 2010.12.10 -
K7AntiVirus 9.71.3200 2010.12.09 -
Kaspersky 7.0.0.125 2010.12.10 -
McAfee 5.400.0.1158 2010.12.10 -
McAfee-GW-Edition 2010.1C 2010.12.10 -
Microsoft 1.6402 2010.12.10 -
NOD32 5691 2010.12.10 -
Norman 6.06.12 2010.12.10 -
nProtect 2010-12-10.01 2010.12.10 -
Panda 10.0.2.7 2010.12.09 -
PCTools 7.0.3.5 2010.12.10 -
Prevx 3.0 2010.12.10 -
Rising 22.77.03.08 2010.12.10 -
Sophos 4.60.0 2010.12.10 -
SUPERAntiSpyware 4.40.0.1006 2010.12.10 -
Symantec 20101.3.0.103 2010.12.10 -
TheHacker 6.7.0.1.097 2010.12.09 -
TrendMicro 9.120.0.1004 2010.12.10 -
TrendMicro-HouseCall 9.120.0.1004 2010.12.10 -
VBA32 3.12.14.2 2010.12.09 -
VIPRE 7587 2010.12.10 -
ViRobot 2010.12.10.4194 2010.12.10 -
VirusBuster 13.6.84.1 2010.12.09 -
Additional informationShow all
MD5 : 856491fced98093d824b9eb2892f564a
SHA1 : 35965825f7246eb7c81488bffeef7918ca4dea46
SHA256: 2a7ec4994127ad450f455f9a26a0569f6b7f544bf52d0e0fa5e766e87083bdd9

File name: explorer.exe
Submission date: 2010-12-10 14:11:29 (UTC)
Current status: finished
Result: 0/ 43 (0.0%)
VT Community

not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.12.10.00 2010.12.09 -
AntiVir 7.10.14.248 2010.12.10 -
Antiy-AVL 2.0.3.7 2010.12.10 -
Avast 4.8.1351.0 2010.12.10 -
Avast5 5.0.677.0 2010.12.10 -
AVG 9.0.0.851 2010.12.10 -
BitDefender 7.2 2010.12.10 -
CAT-QuickHeal 11.00 2010.12.10 -
ClamAV 0.96.4.0 2010.12.10 -
Command 5.2.11.5 2010.12.10 -
Comodo 7012 2010.12.10 -
DrWeb 5.0.2.03300 2010.12.10 -
Emsisoft 5.1.0.1 2010.12.10 -
eSafe 7.0.17.0 2010.12.09 -
eTrust-Vet 36.1.8033 2010.12.10 -
F-Prot 4.6.2.117 2010.12.10 -
F-Secure 9.0.16160.0 2010.12.10 -
Fortinet 4.2.254.0 2010.12.10 -
GData 21 2010.12.10 -
Ikarus T3.1.1.90.0 2010.12.10 -
Jiangmin 13.0.900 2010.12.10 -
K7AntiVirus 9.71.3200 2010.12.09 -
Kaspersky 7.0.0.125 2010.12.10 -
McAfee 5.400.0.1158 2010.12.10 -
McAfee-GW-Edition 2010.1C 2010.12.10 -
Microsoft 1.6402 2010.12.10 -
NOD32 5692 2010.12.10 -
Norman 6.06.12 2010.12.10 -
nProtect 2010-12-10.01 2010.12.10 -
Panda 10.0.2.7 2010.12.09 -
PCTools 7.0.3.5 2010.12.10 -
Prevx 3.0 2010.12.10 -
Rising 22.77.03.08 2010.12.10 -
Sophos 4.60.0 2010.12.10 -
SUPERAntiSpyware 4.40.0.1006 2010.12.10 -
Symantec 20101.3.0.103 2010.12.10 -
TheHacker 6.7.0.1.097 2010.12.09 -
TrendMicro 9.120.0.1004 2010.12.10 -
TrendMicro-HouseCall 9.120.0.1004 2010.12.10 -
VBA32 3.12.14.2 2010.12.09 -
VIPRE 7588 2010.12.10 -
ViRobot 2010.12.10.4194 2010.12.10 -
VirusBuster 13.6.85.0 2010.12.10 -
Additional informationShow all
MD5 : bbd8e74f23d7605cb0cdb57a1b25d826
SHA1 : d84af003a6a9dcf6ca9bd68bb66f2b96dcd1fce8
SHA256: 2e5e05f85aa53789a88cccb98dc6a52864492cf92f259ed24f4ffd894e91d096
VT Community

File name: wininit.exe
Submission date: 2010-12-10 14:22:21 (UTC)
Current status: finished
Result: 0/ 43 (0.0%)
VT Community

not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2010.12.10.00 2010.12.09 -
AntiVir 7.10.14.248 2010.12.10 -
Antiy-AVL 2.0.3.7 2010.12.10 -
Avast 4.8.1351.0 2010.12.10 -
Avast5 5.0.677.0 2010.12.10 -
AVG 9.0.0.851 2010.12.10 -
BitDefender 7.2 2010.12.10 -
CAT-QuickHeal 11.00 2010.12.10 -
ClamAV 0.96.4.0 2010.12.10 -
Command 5.2.11.5 2010.12.10 -
Comodo 7012 2010.12.10 -
DrWeb 5.0.2.03300 2010.12.10 -
Emsisoft 5.1.0.1 2010.12.10 -
eSafe 7.0.17.0 2010.12.09 -
eTrust-Vet 36.1.8033 2010.12.10 -
F-Prot 4.6.2.117 2010.12.10 -
F-Secure 9.0.16160.0 2010.12.10 -
Fortinet 4.2.254.0 2010.12.10 -
GData 21 2010.12.10 -
Ikarus T3.1.1.90.0 2010.12.10 -
Jiangmin 13.0.900 2010.12.10 -
K7AntiVirus 9.71.3200 2010.12.09 -
Kaspersky 7.0.0.125 2010.12.10 -
McAfee 5.400.0.1158 2010.12.10 -
McAfee-GW-Edition 2010.1C 2010.12.10 -
Microsoft 1.6402 2010.12.10 -
NOD32 5692 2010.12.10 -
Norman 6.06.12 2010.12.10 -
nProtect 2010-12-10.01 2010.12.10 -
Panda 10.0.2.7 2010.12.09 -
PCTools 7.0.3.5 2010.12.10 -
Prevx 3.0 2010.12.10 -
Rising 22.77.03.08 2010.12.10 -
Sophos 4.60.0 2010.12.10 -
SUPERAntiSpyware 4.40.0.1006 2010.12.10 -
Symantec 20101.3.0.103 2010.12.10 -
TheHacker 6.7.0.1.097 2010.12.09 -
TrendMicro 9.120.0.1004 2010.12.10 -
TrendMicro-HouseCall 9.120.0.1004 2010.12.10 -
VBA32 3.12.14.2 2010.12.09 -
VIPRE 7588 2010.12.10 -
ViRobot 2010.12.10.4194 2010.12.10 -
VirusBuster 13.6.85.0 2010.12.10 -
Additional informationShow all
MD5 : 117ea87df785ca1b9d821f6f213dce07
SHA1 : 9ad5c2277da37cd167fca1238ef7e64814c28984
SHA256: b9c1b9da26015b8d5a356da81e263cd6eede172fde09f46064f91f943cb1561a

__________________________________________________
=>/!\Le script qui suit a été écrit spécialement cet ordinateur/!\ <=
=>il est fort déconseillé de le transposer sur un autre ordinateur !<=
----------------------------------------------------------------------------

Toujours avec toutes les protections désactivées, fais ceci :

▶ Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
▶ Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

----------------------------------------------------------
KillAll::

Folder::
e:\programdata\IASZYPOMYSV
e:\programdata\7a58e7
E:\Windows.old

DDS::
uInternet Settings,ProxyServer = http=127.0.0.1:25438


------------------------------------------------------------------

▶ Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
▶ Quitte le Bloc Notes

▶ Fais un glisser/déposer de ce fichier CFScript sur le fichier combofix

▶ Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
▶ Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

ComboFix 10-12-09.04 - n 10/12/2010 15:55:29.2.2 - x86
Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.3327.2136 [GMT 1:00]
Lancé depuis: e:\users\n\Desktop\brice.exe
Commutateurs utilisés :: e:\users\n\Desktop\CFScript.txt
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

e:\programdata\7a58e7
e:\programdata\7a58e7\340736.reg
e:\programdata\7a58e7\82946bc9cda9339e994e23eae19d5dd3.ocx
e:\programdata\7a58e7\IAV.ico
e:\programdata\7a58e7\IAVSys\VDAI.ntf
e:\programdata\7a58e7\mcp.ico
e:\programdata\7a58e7\y2p45e7tm9qv5e7tm9q0xcgrviwsgcvn.dll
e:\programdata\IASZYPOMYSV
e:\programdata\IASZYPOMYSV\IAOGPPIGXV.cfg
E:\Windows.old
e:\windows.old\$Recycle.Bin\S-1-5-21-4289235331-3168891620-1716791837-1000\desktop.ini

.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_monitor

((((((((((((((((((((((((((((( Fichiers créés du 2010-11-10 au 2010-12-10 ))))))))))))))))))))))))))))))))))))
.

2010-12-10 14:59 . 2010-12-10 14:59 -------- d-----w- e:\users\Default\AppData\Local\temp
2010-12-10 12:19 . 2010-12-10 12:36 -------- d-----w- E:\brice
2010-12-10 09:25 . 2010-12-10 09:25 -------- d-----w- E:\tdsskiller
2010-12-10 02:19 . 2010-12-10 02:19 -------- d-----w- e:\windows\system32\Wat
2010-12-10 02:04 . 2009-09-10 05:52 257024 ----a-w- e:\windows\system32\msv1_0.dll
2010-12-10 02:01 . 2010-02-11 07:10 293376 ----a-w- e:\windows\system32\browserchoice.exe
2010-12-10 02:00 . 2009-11-25 11:47 99176 ----a-w- e:\windows\system32\PresentationHostProxy.dll
2010-12-10 02:00 . 2009-11-25 11:47 49472 ----a-w- e:\windows\system32\netfxperf.dll
2010-12-10 02:00 . 2009-11-25 11:47 297808 ----a-w- e:\windows\system32\mscoree.dll
2010-12-10 02:00 . 2009-11-25 11:47 295264 ----a-w- e:\windows\system32\PresentationHost.exe
2010-12-10 02:00 . 2009-11-25 11:47 1130824 ----a-w- e:\windows\system32\dfshim.dll
2010-12-10 02:00 . 2010-03-04 03:57 190976 ----a-w- e:\windows\system32\drivers\ks.sys
2010-12-10 01:05 . 2010-11-29 16:42 38224 ----a-w- e:\windows\system32\drivers\mbamswissarmy.sys
2010-12-10 01:05 . 2010-12-10 01:05 -------- d-----w- e:\programdata\Malwarebytes
2010-12-10 01:05 . 2010-11-29 16:42 20952 ----a-w- e:\windows\system32\drivers\mbam.sys
2010-12-10 00:52 . 2010-12-10 00:33 15880 ----a-w- e:\windows\system32\lsdelete.exe
2010-12-10 00:30 . 2010-12-10 00:30 -------- dc----w- e:\windows\system32\DRVSTORE
2010-12-10 00:30 . 2010-11-22 08:50 64288 ----a-w- e:\windows\system32\drivers\Lbd.sys
2010-12-10 00:30 . 2010-12-10 00:30 98392 ----a-w- e:\windows\system32\drivers\SBREDrv.sys
2010-12-10 00:21 . 2010-12-10 00:21 -------- dc-h--w- e:\programdata\{589802B2-1BF3-4609-9ADE-CF6E6608D06D}
2010-12-10 00:21 . 2010-12-10 00:30 -------- d-----w- e:\programdata\Lavasoft
2010-12-10 00:21 . 2010-12-10 00:21 -------- d-----w- e:\program files\Lavasoft
2010-12-09 23:05 . 2010-12-09 23:06 -------- d-----w- e:\program files\Waves
2010-12-09 22:43 . 2010-12-09 22:43 -------- d-----w- e:\program files\Antares Audio Technologies
2010-12-09 22:42 . 2010-12-09 22:42 -------- d-----w- e:\programdata\Audio Ease
2010-12-09 22:42 . 2007-10-05 19:04 1409 ----a-w- e:\windows\system32\QTFont.for
2010-12-09 22:42 . 2010-12-09 22:42 -------- d-----w- e:\program files\Audio Ease
2010-12-09 17:55 . 2010-09-07 15:52 46672 ----a-w- e:\windows\system32\drivers\aswTdi.sys
2010-12-09 17:55 . 2010-09-07 15:52 165584 ----a-w- e:\windows\system32\drivers\aswSP.sys
2010-12-09 17:55 . 2010-09-07 15:47 23376 ----a-w- e:\windows\system32\drivers\aswRdr.sys
2010-12-09 17:55 . 2010-09-07 15:47 50768 ----a-w- e:\windows\system32\drivers\aswMonFlt.sys
2010-12-09 17:55 . 2010-09-07 15:47 17744 ----a-w- e:\windows\system32\drivers\aswFsBlk.sys
2010-12-09 17:55 . 2010-09-07 16:12 38848 ----a-w- e:\windows\avastSS.scr
2010-12-09 17:55 . 2010-09-07 16:11 167592 ----a-w- e:\windows\system32\aswBoot.exe
2010-12-09 17:55 . 2010-12-09 17:55 -------- d-----w- e:\programdata\Alwil Software
2010-12-09 17:55 . 2010-12-09 17:55 -------- d-----w- e:\program files\Alwil Software
2010-12-09 13:51 . 2010-12-09 14:45 -------- d-----w- e:\program files\Groobax
2010-12-09 13:08 . 2010-12-09 13:08 -------- d-----w- e:\program files\Sony
2010-12-09 09:02 . 2010-12-09 14:45 -------- d-----w- e:\program files\Sony Setup
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2010-12-07 17:39 . 2010-12-07 17:39 159744 ----a-w- e:\program files\Internet Explorer\Plugins\npqtplugin.dll
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\program files\QuickTime
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\programdata\Apple Computer
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\program files\Common Files\Apple
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\program files\Apple Software Update
2010-12-07 17:39 . 2010-12-07 17:39 -------- d-----w- e:\programdata\Apple
2010-12-07 15:55 . 2010-11-16 11:01 6273872 ----a-w- e:\programdata\Microsoft\Windows Defender\Definition Updates\{7E8F50E3-8F66-4C92-8BE4-EF0C12F5DE0B}\mpengine.dll
2010-12-07 13:32 . 2010-12-07 13:32 -------- d-----w- e:\program files\Microsoft Synchronization Services
2010-12-07 13:31 . 2010-12-10 02:01 -------- d-----w- e:\program files\Microsoft.NET
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\windows\PCHEALTH
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\program files\Microsoft Sync Framework
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\program files\Microsoft SQL Server Compact Edition
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----w- e:\program files\Microsoft Analysis Services
2010-12-07 13:31 . 2010-12-07 13:33 -------- d-----w- e:\programdata\Microsoft Help
2010-12-07 13:31 . 2010-12-07 13:31 -------- d-----r- E:\MSOCache
2010-12-07 11:06 . 2010-12-09 14:45 -------- d-----w- e:\programdata\FLEXnet
2010-12-07 09:55 . 2010-12-07 11:00 -------- d-----w- e:\program files\Common Files\PX Storage Engine
2010-12-07 09:53 . 2008-04-07 04:38 22872 ----a-r- e:\windows\system32\AdobePDFUI.dll
2010-12-07 09:51 . 2010-12-07 09:51 -------- d-----w- e:\program files\Adobe Media Player
2010-12-07 09:36 . 2010-12-07 09:36 -------- d-----w- e:\program files\Common Files\Adobe AIR
2010-12-07 02:10 . 2010-12-07 02:10 -------- d-----w- e:\windows\system32\Macromed
2010-12-07 02:10 . 2010-12-07 02:10 -------- d-----w- e:\program files\Common Files\Macrovision Shared
2010-12-07 02:07 . 2010-12-07 10:54 -------- d-----w- e:\program files\Common Files\Adobe
2010-12-07 02:05 . 2010-06-14 06:12 1286016 ----a-w- e:\windows\system32\drivers\tcpip.sys
2010-12-07 02:04 . 2010-08-21 05:36 224256 ----a-w- e:\windows\system32\schannel.dll
2010-12-07 02:03 . 2010-07-13 05:22 26504 ----a-w- e:\windows\system32\drivers\Diskdump.sys
2010-12-07 00:48 . 2010-12-07 00:48 -------- d-----w- e:\program files\uTorrent
2010-12-07 00:38 . 2010-12-10 13:25 -------- d-----w- e:\program files\Steam
2010-12-07 00:38 . 2010-12-07 09:06 -------- d-----w- e:\program files\Common Files\Steam
2010-12-07 00:29 . 2010-12-07 00:32 -------- d-----w- e:\program files\SilverFast Application
2010-12-07 00:26 . 2010-12-07 00:26 -------- d-----w- e:\programdata\ArcSoft
2010-12-07 00:26 . 2010-12-07 00:26 -------- d-----w- e:\program files\ArcSoft
2010-12-07 00:26 . 2010-12-07 00:26 -------- d-----w- e:\program files\Common Files\ArcSoft
2010-12-07 00:10 . 2010-12-07 00:10 -------- d-----w- e:\program files\ABBYY FineReader 6.0 Sprint
2010-12-07 00:10 . 2010-12-07 00:10 -------- d-----w- e:\programdata\UDL
2010-12-07 00:03 . 2006-10-30 23:10 71840 ----a-w- e:\windows\system32\EPPicMgr.dll
2010-12-07 00:03 . 2006-10-30 23:10 120992 ----a-w- e:\windows\system32\EpPicPrt.dll
2010-12-07 00:03 . 2006-10-19 23:10 80024 ----a-w- e:\windows\system32\PICSDK.dll
2010-12-07 00:03 . 2006-10-19 23:10 501912 ----a-w- e:\windows\system32\PICSDK2.dll
2010-12-07 00:03 . 2006-10-19 23:10 108704 ----a-w- e:\windows\system32\PICEntry.dll
2010-12-06 23:59 . 2010-12-07 00:26 -------- d--h--w- e:\program files\InstallShield Installation Information
2010-12-06 23:59 . 2010-12-07 00:25 -------- d-----w- e:\program files\Common Files\InstallShield
2010-12-06 23:59 . 2010-12-07 00:12 -------- d-----w- e:\program files\Epson Software
2010-12-06 23:58 . 2010-12-07 00:12 -------- d-----w- e:\program files\epson
2010-12-06 23:58 . 2009-04-30 23:00 15872 ----a-w- e:\windows\system32\escdev.dll
2010-12-06 23:58 . 2009-04-30 23:00 128392 ----a-w- e:\windows\system32\esdevapp.exe
2010-12-06 23:58 . 2007-11-19 23:00 48640 ----a-w- e:\windows\system32\escwiab.dll
2010-12-06 22:41 . 2010-12-06 22:41 -------- d-----w- e:\program files\VideoLAN
2010-12-06 22:13 . 2010-12-06 22:13 -------- d-----w- E:\PFiles
2010-12-06 22:13 . 2010-12-10 02:01 -------- d-sh--w- e:\windows\Installer
2010-12-06 21:40 . 2010-01-09 06:52 132608 ----a-w- e:\windows\system32\cabview.dll
2010-12-06 21:40 . 2009-12-29 06:55 172032 ----a-w- e:\windows\system32\wintrust.dll
2010-12-06 18:06 . 2010-10-19 09:41 222080 ------w- e:\windows\system32\MpSigStub.exe
2010-12-06 17:35 . 2010-12-10 15:05 -------- d-----w- e:\windows\system32\wbem\Performance
2010-12-06 17:22 . 2010-12-06 21:39 -------- d-----w- e:\windows\Panther

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="e:\users\n\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-12-06 136176]
"Steam"="e:\program files\Steam\Steam.exe" [2010-12-07 1242448]
"uTorrent"="e:\program files\uTorrent\uTorrent.exe" [2010-12-07 395128]
"AdobeBridge"="e:\program files\Adobe\Adobe Bridge CS4\Bridge.exe" [2008-08-28 13145448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EEventManager"="e:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616]
"ArcSoft Connection Service"="e:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]
"AdobeCS4ServiceManager"="e:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="e:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="e:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"BCSSync"="e:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-01-21 91520]
"QuickTime Task"="e:\program files\QuickTime\QTTask.exe" [2010-09-08 421888]
"avast5"="e:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"Malwarebytes' Anti-Malware (reboot)"="c:\antivirus\Malwarebytes' Anti-Malware\mbam.exe" [2010-11-29 963976]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;e:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;e:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
R3 Lavasoft Kernexplorer;Lavasoft helper driver;e:\program files\Lavasoft\Ad-Aware\KernExplorer.sys [2010-11-22 15264]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;e:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
R3 osppsvc;Office Software Protection Platform;e:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 WatAdminSvc;Service Windows Activation Technologies;e:\windows\system32\Wat\WatAdminSvc.exe [2010-12-10 1343400]
S0 Lbd;Lbd;e:\windows\system32\DRIVERS\Lbd.sys [2010-11-22 64288]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;e:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;e:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-12-10 1389400]
S3 AtcL001;Pilote de miniport NDIS pour contrôleur Atheros L1 Gigabit Ethernet;e:\windows\system32\DRIVERS\l160x86.sys [2009-07-13 47104]

.
Contenu du dossier 'Tâches planifiées'

2010-12-10 e:\windows\Tasks\Ad-Aware Update (Weekly).job
- e:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-11-22 00:32]

2010-12-09 e:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-51543557-707049822-2373659926-1000Core.job
- e:\users\n\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-06 21:44]

2010-12-10 e:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-51543557-707049822-2373659926-1000UA.job
- e:\users\n\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-06 21:44]
.
.
------- Examen supplémentaire -------
.
IE: Ajouter la cible du lien à un fichier PDF existant - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - e:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: E&xport to Microsoft Excel - e:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - e:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - e:\program files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@e:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="e:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
e:\program files\Alwil Software\Avast5\AvastSvc.exe
e:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
e:\windows\system32\sppsvc.exe
e:\windows\system32\wbem\unsecapp.exe
e:\windows\system32\taskhost.exe
e:\program files\Lavasoft\Ad-Aware\AAWTray.exe
e:\windows\system32\conhost.exe
e:\program files\windows defender\MpCmdRun.exe
.
**************************************************************************
.
Heure de fin: 2010-12-10 18:21:12 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-12-10 17:21
ComboFix2.txt 2010-12-10 12:36

Avant-CF: 48 112 701 440 octets libres
Après-CF: 47 954 337 792 octets libres

- - End Of File - - 0388C7CD412A671441F444F71E9583B0

Alors? il est propre?

DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!! (car l'outil est detecté a tort comme infection contenant un module qui sert à arrêter des processus , et un autre servant à prendre des droits dans le registre pour effectuer des suppressions)

▶ Télécharge ici :List_Kill'em

et enregistre le sur ton bureau

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur le raccourci sur ton bureau pour lancer l'installation

Laisse coché :

♦ Executer List_Kill'em

une fois terminée , clic sur "terminer"

lance -le avec l icone sur le bureau comme indiqué au dessus

choisis l'option Search

▶ laisse travailler l'outil

il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "ok" ou "Agree"

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal ,c'est une recherche supplementaire de fichiers cachés , le programme n'est pas bloqué.

▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

▶▶▶ NE LE POSTE PAS SUR LE FORUM

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

▶ Clique sur Parcourir et cherche le fichier C:\List'em.txt

▶ Clique sur Ouvrir.

▶ Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt

est ajouté dans la page.

▶ Copie ce lien dans ta réponse.

▶ Fais de même avec more.txt qui se trouve sur ton bureau
¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤¤

Lorsque je lance List_Kill'em (il ne ce lance pas seul, alors que j'ai laissé coché) et que je sélectionne "Search" un fenêtre del_reg.bat s'ouvre :
Windows ne trouve pas 'del_reg.bat'. Vérifiez que vous avez entré le nom correct, puis réessayer.

Que faire?

tu suis cette consigne ?

si tu as Vista ou windows 7 => clic droit "executer en tant que...."

et tu ne cliques pas search mais clean pour obtenir ce resultat

ça me mets toujours le même résultat....

Windows ne trouve pas 'del_reg.bat'. Vérifiez que vous avez entré le nom correct, puis réessayer.

que ce soit sur "search" ou sur "clean" en tant qu"administrateur" ou pas!
:(

tes protections sont desactivées ?

oui, sauf Avast mais toutes les protections sont coupées

bah coupe avast

ça change rien!

clic droit executer en tant qu'administrateur sur C:\Program Files\List_Kill'em\del_reg

ok, par contre le fichier List'em ne contient que :

Boot: Normal

et il n'y a pas de fichier more.txt