Défi pour helper

Résolu
papa__ours Messages postés 510 Statut Membre -  
papa__ours Messages postés 510 Statut Membre -
Bonjour,

me voila confronté à un problème très pénible depuis environ 3 semaines.
je ne sais pas comment le résoudre:

aujourd'hui, mon lecteur "redémarre" indépendamment de mon pc depuis une heure environ (il à dû le faire au moins une cinquantaine de fois maintenant). je croyais le problème résolu puisque je n'avais eu aucuns problèmes depuis quasiment une semaine.

j'avais déjà créer un topic sur le sujet, topic auquel je me répondait à moi-même puisque personne ne semblait alors en mesure de m'aider: https://forums.commentcamarche.net/forum/affich-22007205-lecteur-dvd-se-lance-tout-seul-virus2-com#p22072766

je vous relance chers helpers avec ce topic un peu plus racoleur en espérant qu'au moins l'un d'entre vous pourra m'aider.

merci d'avance.

18 réponses

Résumé de la discussion

Le problème décrit est que le lecteur DVD se lance tout seul sur Windows 7, phénomène lié à une potentielle infection par virus ou malware et à des comportements anormaux du système.
Plusieurs contributions suggèrent des nettoyages ciblés, comme la suppression de fichiers temporaires C:\ProgramData\xml*.tmp, et l'examen de comportements liés à des outils de sécurité ou de nettoyage.
Des difficultés apparaissent lors des tentatives avec pre_scan, des messages indiquent qu'un proxy est détecté puis que g3n h@ckm@n a cessé de fonctionner, et des éléments de malware apparaissent dans les rapports.
Le rapport Find3M signale des créations et suppressions de programmes, ainsi que la restauration d’un fichier système infecté venant de winsxs, montrant l’ampleur des manipulations logicielles.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. papa__ours Messages postés 510 Statut Membre 38
     
    je me suis résolu à débrancher mon lecteur faute de réponses :(
    0
  2. arth Messages postés 84 Date d'inscription   Statut Contributeur Dernière intervention   1 296
     
    Le problème c'est que tu avoues toi même avoir eu des soucis de Virus, donc déjà faudrait être sûr que toute cochonnerie a bien été nettoyée.

    Quand au lecteur BR qui "redémarre" ça peut être une conséquence du virus, ou encore il est peut être HS ou en voie de l'être.
    0
  3. papa__ours Messages postés 510 Statut Membre 38
     
    arth 11 mai 2011 à 23:34
    Le problème c'est que tu avoues toi même avoir eu des soucis de Virus, donc déjà faudrait être sûr que toute cochonnerie a bien été nettoyée.

    =>je croyais avoir nettoyer correctement mon pc en fait, et puis une semaine s'était écoulé entre aujourd'hui et la dernière fois que j'ai eu ce problème.
    ce que j'aimerais c'est justement que l'on m'aide à éradiquer ce ou ces virus (que je n'ai pas pu trouver d'ailleurs).
    0
    1. mushu14 Messages postés 11897 Date d'inscription   Statut Contributeur Dernière intervention   1 123
       
      lut,
      pour les virus c'est dans virus/sécurité, pas hardware (a moins que tu veuille qu'on désosse ton matos ^^)
      0
    2. papa__ours Messages postés 510 Statut Membre 38
       
      ok j'ai créer un topic dans le forum approprié:
      http://www.commentcamarche.net/forum/affich-22077094-defi-pour-un-helper#p22077094
      0
    3. mushu14 Messages postés 11897 Date d'inscription   Statut Contributeur Dernière intervention   1 123
       
      ha ben non, elle est passée aux fraises...
      0
    4. papa__ours Messages postés 510 Statut Membre 38
       
      comment ça se fait?
      0
    5. arth Messages postés 84 Date d'inscription   Statut Contributeur Dernière intervention   1 296
       
      Redirigé dans V/S.
      0
  4. gen-hackman
     
    salut

    aujourd'hui, mon lecteur "redémarre" indépendamment de mon pc

    ton lecteur de quoi ?
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      salut,
      je parlais du lecteur blu-ray
      0
    2. RaceGame Messages postés 4526 Date d'inscription   Statut Membre Dernière intervention   555
       
      Salut gen-hackman

      Blu-ray !

      Edit: papa_ours est toujours la, je me retire. Bonne nuit
      0
    3. gen-hackman
       
      et si tu le debranches ?
      0
    4. papa__ours Messages postés 510 Statut Membre 38
       
      plus rien! (pour l'instant)
      0
    5. gen-hackman
       
      revenons ici

      je parlais de juste debrancher la nappe
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gen-hackman
     
    mais c'est quoi c est un lecteur blue ray dans une tour ?
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      oui, exactement
      0
    2. gen-hackman
       
      c'est quoi que tu apelles "redémarre" ?
      0
    3. arth Messages postés 84 Date d'inscription   Statut Contributeur Dernière intervention   1 296
       
      Il vaut mieux lire son autre topic, qui est plus complet.
      0
    4. papa__ours Messages postés 510 Statut Membre 38
       
      visuellement parlant, elle se comporte exactement de le même façon que lors d'un démarrage ou d'un redémarrage du pc;
      la diode en façade s'allume à plusieurs reprises et elle émet deux ou trois "clic"
      0
  7. gen-hackman
     
    ▶ Télécharge Reload_TDSSKiller

    ▶ Lance le

    choisis : télécharger la derniere version

    ▶ relance-le

    choisis : lancer le nettoyage

    TDSSKiller va s'ouvrir , clique sur "Start Scan"

    une fois qu'il a terminé , redemarre s'il te le demande pour finir de nettoyer

    sinon , ferme tdssKiller et le rapport s'affichera sur le bureau

    ▶ Copie/Colle son contenu dans ta prochaine réponse.
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      voila, et merci de ton aide

      2011/05/12 01:19:41.0840 3508 TDSS rootkit removing tool 2.5.0.0 May 1 2011 14:20:16
      2011/05/12 01:19:42.0180 3508 ================================================================================
      2011/05/12 01:19:42.0180 3508 SystemInfo:
      2011/05/12 01:19:42.0180 3508
      2011/05/12 01:19:42.0180 3508 OS Version: 6.1.7601 ServicePack: 1.0
      2011/05/12 01:19:42.0180 3508 Product type: Workstation
      2011/05/12 01:19:42.0180 3508 ComputerName: YANNICK-PC
      2011/05/12 01:19:42.0180 3508 UserName: yannick
      2011/05/12 01:19:42.0180 3508 Windows directory: C:\Windows
      2011/05/12 01:19:42.0180 3508 System windows directory: C:\Windows
      2011/05/12 01:19:42.0180 3508 Running under WOW64
      2011/05/12 01:19:42.0180 3508 Processor architecture: Intel x64
      2011/05/12 01:19:42.0180 3508 Number of processors: 4
      2011/05/12 01:19:42.0180 3508 Page size: 0x1000
      2011/05/12 01:19:42.0180 3508 Boot type: Normal boot
      2011/05/12 01:19:42.0180 3508 ================================================================================
      2011/05/12 01:19:42.0630 3508 Initialize success
      2011/05/12 01:19:44.0310 1328 ================================================================================
      2011/05/12 01:19:44.0310 1328 Scan started
      2011/05/12 01:19:44.0310 1328 Mode: Manual;
      2011/05/12 01:19:44.0310 1328 ================================================================================
      2011/05/12 01:19:45.0264 1328 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
      2011/05/12 01:19:45.0342 1328 a2acc (0b8ed3de81ec30ad50873f033b34b39e) C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys
      2011/05/12 01:19:45.0404 1328 a2injectiondriver (f75ddc4047aa1ac85164445cba7601ef) C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys
      2011/05/12 01:19:45.0436 1328 a2util (e41d79682a209f72f4f578cfd4a53952) C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys
      2011/05/12 01:19:45.0498 1328 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
      2011/05/12 01:19:45.0545 1328 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
      2011/05/12 01:19:45.0576 1328 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
      2011/05/12 01:19:45.0607 1328 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
      2011/05/12 01:19:45.0638 1328 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
      2011/05/12 01:19:45.0716 1328 AFD (d31dc7a16dea4a9baf179f3d6fbdb38c) C:\Windows\system32\drivers\afd.sys
      2011/05/12 01:19:45.0763 1328 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
      2011/05/12 01:19:45.0810 1328 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
      2011/05/12 01:19:45.0826 1328 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
      2011/05/12 01:19:45.0841 1328 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
      2011/05/12 01:19:45.0888 1328 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
      2011/05/12 01:19:45.0919 1328 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
      2011/05/12 01:19:45.0950 1328 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
      2011/05/12 01:19:45.0982 1328 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
      2011/05/12 01:19:46.0013 1328 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
      2011/05/12 01:19:46.0060 1328 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
      2011/05/12 01:19:46.0075 1328 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
      2011/05/12 01:19:46.0169 1328 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
      2011/05/12 01:19:46.0325 1328 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
      2011/05/12 01:19:46.0372 1328 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
      2011/05/12 01:19:46.0418 1328 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
      2011/05/12 01:19:46.0465 1328 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
      2011/05/12 01:19:46.0543 1328 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
      2011/05/12 01:19:46.0590 1328 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
      2011/05/12 01:19:46.0621 1328 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
      2011/05/12 01:19:46.0637 1328 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
      2011/05/12 01:19:46.0668 1328 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
      2011/05/12 01:19:46.0699 1328 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
      2011/05/12 01:19:46.0730 1328 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
      2011/05/12 01:19:46.0762 1328 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
      2011/05/12 01:19:46.0793 1328 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
      2011/05/12 01:19:46.0840 1328 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
      2011/05/12 01:19:46.0886 1328 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
      2011/05/12 01:19:46.0933 1328 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
      2011/05/12 01:19:46.0980 1328 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
      2011/05/12 01:19:47.0042 1328 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
      2011/05/12 01:19:47.0074 1328 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
      2011/05/12 01:19:47.0120 1328 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
      2011/05/12 01:19:47.0152 1328 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
      2011/05/12 01:19:47.0183 1328 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
      2011/05/12 01:19:47.0214 1328 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
      2011/05/12 01:19:47.0276 1328 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
      2011/05/12 01:19:47.0354 1328 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
      2011/05/12 01:19:47.0386 1328 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
      2011/05/12 01:19:47.0432 1328 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
      2011/05/12 01:19:47.0542 1328 driverhardwarev2x64 (3f9933fac064a84a293207f039860de7) C:\Program Files (x86)\ma-config.com\Drivers\driverhardwarev2x64.sys
      2011/05/12 01:19:47.0588 1328 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
      2011/05/12 01:19:47.0651 1328 dtsoftbus01 (fb9bef3401ee5ecc2603311b9c64f44a) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
      2011/05/12 01:19:47.0713 1328 dvdfab (c5c75c883f18552930920a0b905646ff) C:\Windows\system32\drivers\dvdfab.sys
      2011/05/12 01:19:47.0776 1328 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
      2011/05/12 01:19:47.0822 1328 eamonm (3ab77769efeb99eecbadcbf3d44b91e7) C:\Windows\system32\DRIVERS\eamonm.sys
      2011/05/12 01:19:47.0916 1328 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
      2011/05/12 01:19:47.0978 1328 ehdrv (fdba3178662060496c6545666fc6bbe5) C:\Windows\system32\DRIVERS\ehdrv.sys
      2011/05/12 01:19:48.0056 1328 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
      2011/05/12 01:19:48.0088 1328 epfwwfpr (3eddce232ebdb231c21175d772f2fe0a) C:\Windows\system32\DRIVERS\epfwwfpr.sys
      2011/05/12 01:19:48.0123 1328 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
      2011/05/12 01:19:48.0163 1328 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
      2011/05/12 01:19:48.0193 1328 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
      2011/05/12 01:19:48.0223 1328 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
      2011/05/12 01:19:48.0273 1328 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
      2011/05/12 01:19:48.0293 1328 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
      2011/05/12 01:19:48.0323 1328 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
      2011/05/12 01:19:48.0373 1328 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
      2011/05/12 01:19:48.0413 1328 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
      2011/05/12 01:19:48.0443 1328 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
      2011/05/12 01:19:48.0533 1328 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
      2011/05/12 01:19:48.0563 1328 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
      2011/05/12 01:19:48.0653 1328 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
      2011/05/12 01:19:48.0703 1328 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
      2011/05/12 01:19:48.0753 1328 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
      2011/05/12 01:19:48.0783 1328 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
      2011/05/12 01:19:48.0813 1328 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
      2011/05/12 01:19:48.0833 1328 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
      2011/05/12 01:19:48.0883 1328 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
      2011/05/12 01:19:48.0953 1328 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
      2011/05/12 01:19:49.0023 1328 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
      2011/05/12 01:19:49.0073 1328 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
      2011/05/12 01:19:49.0113 1328 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
      2011/05/12 01:19:49.0153 1328 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
      2011/05/12 01:19:49.0193 1328 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
      2011/05/12 01:19:49.0293 1328 IntcAzAudAddService (bfbabcb231628a4551dbb10d0ea25d62) C:\Windows\system32\drivers\RTKVHD64.sys
      2011/05/12 01:19:49.0343 1328 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
      2011/05/12 01:19:49.0383 1328 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
      2011/05/12 01:19:49.0423 1328 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
      2011/05/12 01:19:49.0463 1328 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
      2011/05/12 01:19:49.0493 1328 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
      2011/05/12 01:19:49.0523 1328 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
      2011/05/12 01:19:49.0563 1328 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
      2011/05/12 01:19:49.0593 1328 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
      2011/05/12 01:19:49.0633 1328 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
      2011/05/12 01:19:49.0663 1328 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys
      2011/05/12 01:19:49.0713 1328 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
      2011/05/12 01:19:49.0753 1328 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
      2011/05/12 01:19:49.0783 1328 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
      2011/05/12 01:19:49.0873 1328 LHidFilt (ceb6e18dcfad5c72b81c7da1ac3c1cc1) C:\Windows\system32\DRIVERS\LHidFilt.Sys
      2011/05/12 01:19:49.0943 1328 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
      2011/05/12 01:19:49.0983 1328 LMouFilt (f9e48f18be4d2b365f138987b8e7885b) C:\Windows\system32\DRIVERS\LMouFilt.Sys
      2011/05/12 01:19:50.0013 1328 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
      2011/05/12 01:19:50.0043 1328 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
      2011/05/12 01:19:50.0063 1328 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
      2011/05/12 01:19:50.0093 1328 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
      2011/05/12 01:19:50.0129 1328 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
      2011/05/12 01:19:50.0176 1328 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
      2011/05/12 01:19:50.0207 1328 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
      2011/05/12 01:19:50.0254 1328 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
      2011/05/12 01:19:50.0269 1328 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
      2011/05/12 01:19:50.0316 1328 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
      2011/05/12 01:19:50.0347 1328 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
      2011/05/12 01:19:50.0378 1328 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
      2011/05/12 01:19:50.0425 1328 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
      2011/05/12 01:19:50.0456 1328 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
      2011/05/12 01:19:50.0534 1328 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
      2011/05/12 01:19:50.0566 1328 mrxsmb (c2b4651001a867ff3f8865863b592991) C:\Windows\system32\DRIVERS\mrxsmb.sys
      2011/05/12 01:19:50.0597 1328 mrxsmb10 (7e79946afc5f799ab62982282be5ac13) C:\Windows\system32\DRIVERS\mrxsmb10.sys
      2011/05/12 01:19:50.0644 1328 mrxsmb20 (5fb954100cea2bfec6446fbbecaa3f79) C:\Windows\system32\DRIVERS\mrxsmb20.sys
      2011/05/12 01:19:50.0675 1328 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
      2011/05/12 01:19:50.0706 1328 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
      2011/05/12 01:19:50.0768 1328 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
      2011/05/12 01:19:50.0800 1328 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
      2011/05/12 01:19:50.0831 1328 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
      2011/05/12 01:19:50.0878 1328 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
      2011/05/12 01:19:50.0909 1328 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
      2011/05/12 01:19:50.0924 1328 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
      2011/05/12 01:19:50.0987 1328 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
      2011/05/12 01:19:51.0018 1328 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
      2011/05/12 01:19:51.0049 1328 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
      2011/05/12 01:19:51.0080 1328 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
      2011/05/12 01:19:51.0096 1328 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
      2011/05/12 01:19:51.0158 1328 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
      2011/05/12 01:19:51.0236 1328 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
      2011/05/12 01:19:51.0330 1328 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
      2011/05/12 01:19:51.0361 1328 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
      2011/05/12 01:19:51.0424 1328 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
      2011/05/12 01:19:51.0470 1328 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
      2011/05/12 01:19:51.0502 1328 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
      2011/05/12 01:19:51.0533 1328 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
      2011/05/12 01:19:51.0626 1328 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
      2011/05/12 01:19:51.0704 1328 netr7364 (0461e245827ecf7c52cdd56df0d66fa9) C:\Windows\system32\DRIVERS\netr7364.sys
      2011/05/12 01:19:51.0767 1328 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
      2011/05/12 01:19:51.0798 1328 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
      2011/05/12 01:19:51.0829 1328 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
      2011/05/12 01:19:51.0892 1328 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
      2011/05/12 01:19:51.0954 1328 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
      2011/05/12 01:19:52.0001 1328 NVHDA (f2662fdc20518ee8a8eed4f61ba42349) C:\Windows\system32\drivers\nvhda64v.sys
      2011/05/12 01:19:52.0297 1328 nvlddmkm (a963c2c276a97b088ded5d7a83be8052) C:\Windows\system32\DRIVERS\nvlddmkm.sys
      2011/05/12 01:19:52.0578 1328 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
      2011/05/12 01:19:52.0609 1328 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
      2011/05/12 01:19:52.0672 1328 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
      2011/05/12 01:19:52.0734 1328 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
      2011/05/12 01:19:52.0812 1328 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
      2011/05/12 01:19:52.0859 1328 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
      2011/05/12 01:19:52.0906 1328 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
      2011/05/12 01:19:52.0937 1328 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
      2011/05/12 01:19:52.0968 1328 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
      2011/05/12 01:19:52.0999 1328 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
      2011/05/12 01:19:53.0030 1328 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
      2011/05/12 01:19:53.0186 1328 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
      2011/05/12 01:19:53.0202 1328 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
      2011/05/12 01:19:53.0280 1328 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
      2011/05/12 01:19:53.0358 1328 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
      2011/05/12 01:19:53.0405 1328 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
      2011/05/12 01:19:53.0452 1328 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
      2011/05/12 01:19:53.0483 1328 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
      2011/05/12 01:19:53.0545 1328 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
      2011/05/12 01:19:53.0592 1328 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
      2011/05/12 01:19:53.0623 1328 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
      2011/05/12 01:19:53.0654 1328 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
      2011/05/12 01:19:53.0701 1328 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
      2011/05/12 01:19:53.0732 1328 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
      2011/05/12 01:19:53.0764 1328 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
      2011/05/12 01:19:53.0810 1328 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
      2011/05/12 01:19:53.0842 1328 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
      2011/05/12 01:19:53.0873 1328 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
      2011/05/12 01:19:53.0935 1328 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
      2011/05/12 01:19:53.0966 1328 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
      2011/05/12 01:19:54.0013 1328 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
      2011/05/12 01:19:54.0076 1328 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
      2011/05/12 01:19:54.0138 1328 RTL8167 (abcb5a38a0d85bdf69b7877e1ad1eed5) C:\Windows\system32\DRIVERS\Rt64win7.sys
      2011/05/12 01:19:54.0169 1328 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
      2011/05/12 01:19:54.0278 1328 SANDRA (5efbbfcc6adac121c8e2fe76641ed329) C:\Program Files\SiSoftware\SiSoftware Sandra Professionnel Personnel 2010.SP1d\WNt500x64\Sandra.sys
      2011/05/12 01:19:54.0341 1328 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
      2011/05/12 01:19:54.0388 1328 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
      2011/05/12 01:19:54.0434 1328 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
      2011/05/12 01:19:54.0497 1328 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
      2011/05/12 01:19:54.0537 1328 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
      2011/05/12 01:19:54.0587 1328 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
      2011/05/12 01:19:54.0637 1328 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
      2011/05/12 01:19:54.0667 1328 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
      2011/05/12 01:19:54.0697 1328 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
      2011/05/12 01:19:54.0727 1328 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
      2011/05/12 01:19:54.0767 1328 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
      2011/05/12 01:19:54.0797 1328 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
      2011/05/12 01:19:54.0837 1328 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
      2011/05/12 01:19:54.0887 1328 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
      2011/05/12 01:19:54.0957 1328 sptd (4b3f898dc1378ced2f35d04e5b0ce0df) C:\Windows\System32\Drivers\sptd.sys
      2011/05/12 01:19:54.0957 1328 Suspicious file (NoAccess): C:\Windows\System32\Drivers\sptd.sys. md5: 4b3f898dc1378ced2f35d04e5b0ce0df
      2011/05/12 01:19:54.0957 1328 sptd - detected LockedFile.Multi.Generic (1)
      2011/05/12 01:19:55.0007 1328 srv (65bbf4920148c2ee279055da7228fc7b) C:\Windows\system32\DRIVERS\srv.sys
      2011/05/12 01:19:55.0047 1328 srv2 (da939f762a1ccc2d77428621ddbd40a7) C:\Windows\system32\DRIVERS\srv2.sys
      2011/05/12 01:19:55.0077 1328 srvnet (3f847c9dc87299516f7dc82fb6572865) C:\Windows\system32\DRIVERS\srvnet.sys
      2011/05/12 01:19:55.0117 1328 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
      2011/05/12 01:19:55.0177 1328 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
      2011/05/12 01:19:55.0227 1328 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
      2011/05/12 01:19:55.0267 1328 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
      2011/05/12 01:19:55.0417 1328 Tcpip (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\drivers\tcpip.sys
      2011/05/12 01:19:55.0477 1328 TCPIP6 (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\DRIVERS\tcpip.sys
      2011/05/12 01:19:55.0537 1328 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
      2011/05/12 01:19:55.0567 1328 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
      2011/05/12 01:19:55.0607 1328 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
      2011/05/12 01:19:55.0647 1328 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
      2011/05/12 01:19:55.0677 1328 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
      2011/05/12 01:19:55.0747 1328 TfFsMon (21ac1ffd8f59b0ebfbbb2c3467e9f2cf) C:\Windows\system32\drivers\TfFsMon.sys
      2011/05/12 01:19:55.0777 1328 TfNetMon (b0ebe0ce99e4751cf7637a09fead7eda) C:\Windows\system32\drivers\TfNetMon.sys
      2011/05/12 01:19:55.0817 1328 TfSysMon (d6e991dcdd91323d979878025f0ceaea) C:\Windows\system32\drivers\TfSysMon.sys
      2011/05/12 01:19:55.0897 1328 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
      2011/05/12 01:19:55.0947 1328 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
      2011/05/12 01:19:56.0017 1328 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
      2011/05/12 01:19:56.0057 1328 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
      2011/05/12 01:19:56.0117 1328 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
      2011/05/12 01:19:56.0167 1328 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
      2011/05/12 01:19:56.0207 1328 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
      2011/05/12 01:19:56.0237 1328 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
      2011/05/12 01:19:56.0287 1328 usbaudio (82e8f44688e6fac57b5b7c6fc7adbc2a) C:\Windows\system32\drivers\usbaudio.sys
      2011/05/12 01:19:56.0337 1328 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
      2011/05/12 01:19:56.0377 1328 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
      2011/05/12 01:19:56.0427 1328 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
      2011/05/12 01:19:56.0497 1328 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
      2011/05/12 01:19:56.0537 1328 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
      2011/05/12 01:19:56.0573 1328 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
      2011/05/12 01:19:56.0619 1328 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
      2011/05/12 01:19:56.0651 1328 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
      2011/05/12 01:19:56.0697 1328 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\DRIVERS\usbuhci.sys
      2011/05/12 01:19:56.0760 1328 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
      2011/05/12 01:19:56.0807 1328 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
      2011/05/12 01:19:56.0838 1328 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
      2011/05/12 01:19:56.0885 1328 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
      2011/05/12 01:19:56.0931 1328 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
      2011/05/12 01:19:56.0963 1328 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
      2011/05/12 01:19:56.0994 1328 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
      2011/05/12 01:19:57.0041 1328 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
      2011/05/12 01:19:57.0087 1328 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
      2011/05/12 01:19:57.0134 1328 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
      2011/05/12 01:19:57.0165 1328 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
      2011/05/12 01:19:57.0181 1328 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
      2011/05/12 01:19:57.0212 1328 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
      2011/05/12 01:19:57.0259 1328 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
      2011/05/12 01:19:57.0306 1328 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
      2011/05/12 01:19:57.0337 1328 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
      2011/05/12 01:19:57.0399 1328 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
      2011/05/12 01:19:57.0446 1328 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
      2011/05/12 01:19:57.0524 1328 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
      2011/05/12 01:19:57.0555 1328 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
      2011/05/12 01:19:57.0680 1328 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
      2011/05/12 01:19:57.0758 1328 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
      2011/05/12 01:19:57.0821 1328 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
      2011/05/12 01:19:57.0867 1328 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
      2011/05/12 01:19:57.0977 1328 {95808DC4-FA4A-4C74-92FE-5B863F82066B} (74983addca2d9618512c088d856d6615) C:\Program Files (x86)\CyberLink\PowerDVD\000.fcl
      2011/05/12 01:19:58.0039 1328 ================================================================================
      2011/05/12 01:19:58.0039 1328 Scan finished
      2011/05/12 01:19:58.0039 1328 ================================================================================
      2011/05/12 01:19:58.0055 4376 Detected object count: 1
      2011/05/12 01:20:06.0142 4376 LockedFile.Multi.Generic(sptd) - User select action: Skip
      0
  8. gen-hackman
     
    qu'il soit vide ou plein ?
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      oui exactement
      0
  9. gen-hackman
     
    ▶ Télécharge ici : USBFIX sur ton bureau

    branche tous tes periphériques sans les ouvrir

    /!\ Désactive provisoirement et seulement le temps de l'utilisation d'USBFIX, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."

    sur l'icône Usbfix située sur ton Bureau.
    Sur la page, clique sur le bouton :

    ▶ choisi l option Suppression

    ▶ UsbFix scannera ton pc , laisse travailler l outil.

    ▶ Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

    ▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

    ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      voila

      ############################## | UsbFix 7.044 | [Deletion]

      User: yannick (Administrator) # YANNICK-PC [HP-Pavilion KP219AA-ABF m9273.fr]
      Updated 25/04/2011 by TeamXscript
      Started at 01:58:49 | 12/05/2011
      Website: http://www.teamxscript.org
      Submit your sample: http://www.teamxscript.org/Upload.php
      Contact: TeamXscript.ElDesaparecido@gmail.com

      CPU: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
      CPU 2: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
      Microsoft Windows 7 Édition Intégrale (6.1.7601 64-Bit) # Service Pack 1
      Internet Explorer 9.0.8112.16421

      Windows Firewall: Enabled
      RAM -> 4095 Mb
      C:\ (%systemdrive%) -> Fixed drive # 244 Gb (148 Mb free - 60%) [] # NTFS
      D:\ -> Fixed drive # 466 Gb (135 Mb free - 29%) [] # NTFS
      G:\ -> CD-ROM
      H:\ -> CD-ROM
      I:\ -> CD-ROM
      J:\ -> CD-ROM
      K:\ -> Fixed drive # 221 Gb (94 Mb free - 42%) [] # NTFS

      ################## | Files # Infected Folders |


      Deleted ! C:\Users\yannick\AppData\Roaming\dll
      Deleted ! C:\Users\yannick\AppData\Roaming\temp4876969.txt
      Deleted ! C:\$RECYCLE.BIN\S-1-5-20
      Deleted ! C:\$RECYCLE.BIN\S-1-5-21-4232598072-1058645508-674976008-1000
      Deleted ! D:\$RECYCLE.BIN\S-1-5-20
      Deleted ! D:\$RECYCLE.BIN\S-1-5-21-2217973571-2771636368-3193357204-1000
      Deleted ! D:\$RECYCLE.BIN\S-1-5-21-2217973571-2771636368-3193357204-1003
      Deleted ! D:\$RECYCLE.BIN\S-1-5-21-4232598072-1058645508-674976008-1000
      Deleted ! K:\$RECYCLE.BIN\S-1-5-21-4232598072-1058645508-674976008-1000

      ################## | Registry |


      ################## | Mountpoints2 |


      ################## | Listing |

      [12/05/2011 - 02:03:19 | SHD ] C:\$Recycle.Bin
      [22/02/2011 - 23:10:00 | SHD ] C:\Boot
      [20/11/2010 - 14:40:07 | RASH | 383786] C:\bootmgr
      [02/02/2011 - 03:46:46 | RASH | 8192] C:\BOOTSECT.BAK
      [11/05/2011 - 00:18:59 | SHD ] C:\Config.Msi
      [14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1028.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1031.txt
      [07/11/2007 - 08:00:40 | N | 10134] C:\eula.1033.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1036.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1040.txt
      [07/11/2007 - 08:00:40 | N | 118] C:\eula.1041.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1042.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.2052.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.3082.txt
      [07/11/2007 - 08:00:40 | N | 1110] C:\globdata.ini
      [24/04/2011 - 00:24:44 | N | 13932208] C:\Google.exe
      [11/05/2011 - 07:57:46 | ASH | 3220664320] C:\hiberfil.sys
      [04/05/2011 - 03:53:14 | N | 100] C:\index.ini
      [07/11/2007 - 08:44:20 | N | 855040] C:\install.exe
      [07/11/2007 - 08:00:40 | N | 843] C:\install.ini
      [07/11/2007 - 08:44:20 | N | 75280] C:\install.res.1028.dll
      [07/11/2007 - 08:44:20 | N | 95248] C:\install.res.1031.dll
      [07/11/2007 - 08:44:20 | N | 90128] C:\install.res.1033.dll
      [07/11/2007 - 08:44:20 | N | 96272] C:\install.res.1036.dll
      [07/11/2007 - 08:44:20 | N | 94224] C:\install.res.1040.dll
      [07/11/2007 - 08:44:20 | N | 80400] C:\install.res.1041.dll
      [07/11/2007 - 08:44:20 | N | 78864] C:\install.res.1042.dll
      [07/11/2007 - 08:44:20 | N | 74768] C:\install.res.2052.dll
      [07/11/2007 - 08:44:20 | N | 95248] C:\install.res.3082.dll
      [21/09/2010 - 00:50:14 | D ] C:\Intel
      [22/08/2010 - 17:31:24 | N | 177] C:\ITB.log
      [02/12/2006 - 00:37:14 | N | 904704] C:\msdia80.dll
      [29/10/2010 - 01:32:30 | RHD ] C:\MSOCache
      [26/08/2010 - 18:49:00 | D ] C:\NVIDIA
      [11/05/2011 - 07:57:49 | ASH | 4294221824] C:\pagefile.sys
      [25/04/2011 - 00:45:38 | D ] C:\Program Files
      [11/05/2011 - 16:37:02 | D ] C:\Program Files (x86)
      [03/05/2011 - 13:15:24 | HD ] C:\ProgramData
      [30/04/2011 - 23:29:10 | D ] C:\Qoobox
      [01/02/2011 - 19:06:33 | SHD ] C:\Recovery
      [11/05/2011 - 00:14:48 | SHD ] C:\System Volume Information
      [09/05/2011 - 02:02:21 | D ] C:\UnrealTournament
      [12/05/2011 - 02:03:21 | D ] C:\UsbFix
      [12/05/2011 - 01:59:01 | A | 3936] C:\UsbFix.txt
      [05/05/2011 - 13:37:46 | D ] C:\Users
      [07/11/2007 - 08:00:40 | N | 5686] C:\vcredist.bmp
      [07/11/2007 - 08:50:40 | N | 1927956] C:\VC_RED.cab
      [07/11/2007 - 08:53:12 | N | 242176] C:\VC_RED.MSI
      [11/05/2011 - 00:22:21 | D ] C:\Windows
      [12/05/2011 - 02:03:19 | SHD ] D:\$RECYCLE.BIN
      [18/03/2011 - 16:29:30 | D ] D:\documents
      [01/05/2011 - 20:24:31 | D ] D:\images
      [11/05/2011 - 22:19:51 | D ] D:\incoming
      [09/05/2011 - 02:08:21 | D ] D:\jeux
      [10/05/2011 - 13:45:53 | D ] D:\Music
      [07/05/2011 - 02:04:56 | D ] D:\programmes
      [16/11/2010 - 02:38:58 | SHD ] D:\System Volume Information
      [15/04/2011 - 13:24:43 | D ] D:\Videos
      [10/11/2010 - 02:19:20 | N | 691] D:\Yannick - Raccourci.lnk
      [12/05/2011 - 02:03:21 | SHD ] K:\$RECYCLE.BIN
      [02/05/2011 - 13:49:00 | N | 528] K:\MediaID.bin
      [02/05/2011 - 17:32:42 | SHD ] K:\System Volume Information
      [02/05/2011 - 16:26:01 | D ] K:\WindowsImageBackup
      [02/05/2011 - 13:49:33 | D ] K:\YANNICK-PC

      ################## | Vaccin |

      C:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
      D:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
      K:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)

      ################## | Upload |

      Please send the file: C:\UsbFix_Upload_Me_YANNICK-PC.zip
      http://www.teamxscript.org/Upload.php
      Thank you for your contribution.

      ################## | E.O.F |
      0
  10. gen-hackman
     
    c'est quoi ca ?

    C:\Google.exe
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      je me suis posé la question moi aussi mais je n'en sais rien.
      j'ai eu google earth un moment, peut être que c'est ca?
      0
    2. gen-hackman
       
      y'a une icone speciale ou juste l'icone simple d'un exe ,?
      0
    3. papa__ours Messages postés 510 Statut Membre 38
       
      je n'ai rien de tel sur mon bureau. rien non plus dans le menu demarrer. rien en tout cas qui correspond à google.exe
      0
    4. gen-hackman
       
      ca ne repond pas à ma question
      0
    5. papa__ours Messages postés 510 Statut Membre 38
       
      ah pardon je vient de trouver le .exe de google earth dans C:
      0
  11. gen-hackman
     
    ▶ Télécharge ZHPDiag (de Nicolas Coolman)

    ou :ZHPDiag

    ▶ Enregistre le sur ton Bureau.

    Une fois le téléchargement achevé,

    ▶ lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.

    ▶ Clique sur le tournevis puis sur Tous pour cocher toutes les cases des options.

    ▶ Clique sur la loupe pour lancer l'analyse.

    A la fin de l'analyse,

    ▶ clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

    Pour me le transmettre clique sur ce lien :

    http://www.cijoint.fr/

    ▶ Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt

    ▶ Clique sur Ouvrir.

    ▶ Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

    est ajouté dans la page.

    ▶ Copie ce lien dans ta réponse.
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      voila:

      http://www.cijoint.fr/cjlink.php?file=cj201105/cijSiHNRXt.txt
      0
  12. gen-hackman
     
    desactive tes protections puis enregistre ceci sur ton bureau

    Pre_Scan

    Avertissement: Il y aura une extinction courte du bureau --> pas de panique.

    une fois telechargé lance-le , laisse faire le scan jusqu'à l'apparition de "Pre_scan.txt" sur le bureau.

    si l'outil detecte un proxy et que tu n'en as pas installé clique sur "supprimer le proxy"

    si l'outil semble ne pas avoir fonctionné clique plusieurs fois très rapidement dessus ou renomme-le winlogon , ou change son extension en .com ou .scr

    ▶▶▶ NE LE POSTE PAS SUR LE FORUM

    Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

    ▶ Clique sur Parcourir et cherche le fichier ci-dessus(Pre_Scan.txt).

    ▶ Clique sur Ouvrir.

    ▶ Clique sur "Cliquez ici pour déposer le fichier".

    juste au niveau du bouton , en fin de chargement du fichier , Un lien de cette forme apparaitra :

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    ▶ Copie ce lien dans ta réponse.
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      après avoir scrupuleusement suivi toutes tes instructions, il s'est avéré impossible de faire fonctionner pre_scan.
      après l'apparition de la fenêtre me disant qu'un proxy à été détecté, une deuxième s'ouvre et me dit que "g3n h@ckm@n à cessé de fonctionner", il m'est alors impossible de cliquer rapidement sur pre_scan puisque tout les logos de mon bureau ont (à ce moment là) disparu, et je dois redémarrer ma cession ensuite.
      j'ai renommé pre_scan en winlogon, j'ai aussi changer l'extension en .com et en .scr (sous les noms "pre_scan" et "winlogon") mais rien à faire, à chaques tentatives, cette fenêtre me disant que "g3n h@ckm@n à cessé de fonctionner" apparait.
      0
  13. gen-hackman
     

    /!\ ATTENTION SUIVRE A LA LETTRE CES INDICATIONS/!\

    __________________________________________________________
    >Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.<
    >>>>>>>Ne pas utiliser en dehors de ce cas de figure : dangereux!<<<<<<<<
    =====================================================

    ▶ Surtout , pense à l'enregistrement à renommer Combofix en "ton prenom.exe" avant qu'il soit enregistré sur ton disque dur

    Telecharge ici : Combofix

    Avant d'utiliser ComboFix :

    Si tu utilises AVG, IL FAUT IMPERATIVEMENT LE DESINSTALLER avant d'utiliser Combofix car il peut causer des dégâts en interaction avec l'outil pouvant mener à la réinstallation totale du système.
    La simple désactivation du résident n'est pas suffisante.
    Télécharge le désinstalleur d'AVG sur ce lien : https://www.avg.com/fr-fr/avg-remover
    Choisis la version adéquate (32 ou 64 bits)/!\

    Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :

    ▶ Télécharge Defogger (de jpshortstuff) sur ton Bureau

    ▶ Lance le

    Une fenêtre apparait : clique sur "Disable"

    ▶ Fais redémarrer l'ordinateur si l'outil te le demande

    Note : Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"

    _________________________________________________________
    >> referme les fenêtres de tous les programmes en cours.
    >> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
    >>la protection en temps réel de ton Antivirus et de tes Antispywares,
    >>qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
    °°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°

    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."

    sur combofix renommé

    ¤¤¤¤¤¤¤¤¤¤ LAISSE-LE INSTALLER LA CONSOLE DE RECUPERATION S'IL TE LE DEMANDE ¤¤¤¤¤¤¤¤¤¤

    ▶ !!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

    ▶ n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    ▶▶ Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    0
  14. papa__ours Messages postés 510 Statut Membre 38
     
    en lisant le rapport de combofix j'ai remarqué que j'avais complètement oublier de désactiver windows defender:

    ComboFix 11-05-11.04 - yannick 12/05/2011 17:21:26.1.4 - x64
    Microsoft Windows 7 Édition Intégrale 6.1.7601.1.1252.33.1033.18.4095.2545 [GMT 2:00]
    Lancé depuis: c:\users\yannick\Desktop\yannick.exe
    AV: Emsisoft Anti-Malware *Disabled/Updated* {0ADC9F7D-20C1-240F-01E2-43466EBA893A}
    AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
    SP: Emsisoft Anti-Malware *Disabled/Updated* {B1BD7E99-06FB-2B81-3B52-7834153DC387}
    SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Un antivirus résident est actif
    .
    .
    .
    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\program files (x86)\ESET\MiNODLogin
    c:\program files (x86)\ESET\MiNODLogin\MiNODLogin.jar
    c:\program files (x86)\ESET\MiNODLogin\MiNODLoginLib.dll
    c:\program files (x86)\ESET\MiNODLogin\MiNODLoginUninst.exe
    c:\program files (x86)\ESET\MiNODLogin\servidores.xml
    .
    Une copie infectée de c:\windows\SysWow64\userinit.exe a été trouvée et désinfectée
    Copie restaurée à partir de - c:\windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
    .
    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2011-04-12 au 2011-05-12 ))))))))))))))))))))))))))))))))))))
    .
    .
    2011-05-12 11:18 . 2011-05-12 11:18 -------- d-----w- c:\users\yannick\AppData\Local\{9139154A-FDF5-4E73-A3B2-9DFC096EA4F0}
    2011-05-12 09:21 . 2011-05-12 09:21 -------- d-----w- C:\Kill'em
    2011-05-12 09:06 . 2011-05-12 09:06 -------- d-----w- c:\program files (x86)\File Extension Changer
    2011-05-12 00:54 . 2011-05-12 00:54 512 ----a-w- C:\PhysicalDisk0_MBR.bin
    2011-05-12 00:40 . 2011-05-12 00:54 -------- d-----w- c:\program files (x86)\ZHPDiag
    2011-05-11 23:56 . 2011-05-12 00:03 -------- d-----w- C:\UsbFix
    2011-05-11 22:25 . 2011-05-11 22:25 -------- d-----w- c:\users\yannick\AppData\Local\{403378D5-E483-4DB0-8AA5-9B6CFFCBA4F4}
    2011-05-11 14:37 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
    2011-05-11 14:37 . 2011-05-11 14:40 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
    2011-05-11 10:24 . 2011-05-11 10:25 -------- d-----w- c:\users\yannick\AppData\Local\{7503200D-3EA4-4D08-949F-CFD295ED352B}
    2011-05-10 22:23 . 2011-05-10 22:24 -------- d-----w- c:\users\yannick\AppData\Local\{9DAED211-F5FF-41A9-816B-89A69003479F}
    2011-05-10 22:13 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
    2011-05-10 22:13 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
    2011-05-10 22:12 . 2011-04-09 07:02 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
    2011-05-10 22:12 . 2011-04-09 06:02 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
    2011-05-10 22:12 . 2011-04-09 06:02 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
    2011-05-10 20:15 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
    2011-05-10 20:15 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
    2011-05-10 20:15 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
    2011-05-10 20:15 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
    2011-05-10 20:15 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
    2011-05-10 20:15 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
    2011-05-10 10:21 . 2011-05-10 10:21 -------- d-----w- c:\users\yannick\AppData\Local\{3244256B-1CE4-4313-B45E-2979068DDC86}
    2011-05-10 06:36 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{65E35226-36EE-4D91-9312-C838160594C7}\mpengine.dll
    2011-05-09 22:20 . 2011-05-09 22:21 -------- d-----w- c:\users\yannick\AppData\Local\{5D30ABB8-F05D-468B-8916-85EE86829F96}
    2011-05-09 10:20 . 2011-05-09 10:20 -------- d-----w- c:\users\yannick\AppData\Local\{B6746E93-D34C-4DC7-9319-B4512BEFA767}
    2011-05-08 23:48 . 2011-05-09 00:02 -------- d-----w- C:\UnrealTournament
    2011-05-08 22:19 . 2011-05-08 22:19 -------- d-----w- c:\users\yannick\AppData\Local\{59049912-73B5-4365-A0C8-014CB2C0DF14}
    2011-05-08 10:19 . 2011-05-08 10:19 -------- d-----w- c:\users\yannick\AppData\Local\{28C4179A-A120-4C07-A886-E02D91C0363B}
    2011-05-07 21:53 . 2011-05-07 21:53 -------- d-----w- c:\users\yannick\AppData\Local\{C7418C1B-F9B0-4BAF-A132-8AA5E8C6E5C4}
    2011-05-07 09:52 . 2011-05-07 09:52 -------- d-----w- c:\users\yannick\AppData\Local\{85C242FD-264F-4B5D-8C33-21FF9C255D09}
    2011-05-06 21:51 . 2011-05-06 21:52 -------- d-----w- c:\users\yannick\AppData\Local\{282336CA-3837-4B3B-8646-0B89349DB2DF}
    2011-05-06 09:51 . 2011-05-06 09:51 -------- d-----w- c:\users\yannick\AppData\Local\{15096215-0F67-4034-9841-04B9BE7FD8AD}
    2011-05-05 21:50 . 2011-05-05 21:50 -------- d-----w- c:\users\yannick\AppData\Local\{4FD62717-511E-4D02-A1F6-E615815ABA2C}
    2011-05-05 18:21 . 2011-05-05 18:21 -------- d-----w- c:\users\yannick\AppData\Local\Zattoo
    2011-05-05 18:21 . 2011-05-05 18:25 -------- d-----w- c:\program files (x86)\Zattoo4
    2011-05-05 09:50 . 2011-05-05 09:50 -------- d-----w- c:\users\yannick\AppData\Local\{00E861DC-BC08-488E-AFAB-16F743FE3BAF}
    2011-05-04 23:58 . 2011-05-04 23:59 -------- d-----w- c:\users\yannick\AppData\Roaming\Offline Explorer
    2011-05-04 23:56 . 2011-05-05 00:01 -------- d-----w- c:\program files (x86)\Offline Explorer Enterprise
    2011-05-04 21:49 . 2011-05-04 21:49 -------- d-----w- c:\users\yannick\AppData\Local\{D31116AC-2B54-465D-B1C5-ACFA4A101319}
    2011-05-04 09:48 . 2011-05-04 09:49 -------- d-----w- c:\users\yannick\AppData\Local\{4BD66317-8484-4D87-B88C-CEEA3B3CBBA9}
    2011-05-03 21:48 . 2011-05-03 21:48 -------- d-----w- c:\users\yannick\AppData\Local\{C24FE7F9-1699-4720-9ECC-F1AAEE3AFA29}
    2011-05-03 11:15 . 2010-01-14 14:08 59880 ----a-w- c:\windows\system32\drivers\TfSysMon.sys
    2011-05-03 11:15 . 2010-01-14 14:08 41888 ----a-w- c:\windows\system32\drivers\TfNetMon.sys
    2011-05-03 11:15 . 2010-01-14 14:08 65072 ----a-w- c:\windows\system32\drivers\TfFsMon.sys
    2011-05-03 11:15 . 2011-05-03 11:15 -------- d-----w- c:\program files (x86)\ThreatFire
    2011-05-03 11:15 . 2011-05-03 11:15 -------- d-----w- c:\programdata\PC Tools
    2011-05-03 09:47 . 2011-05-03 09:47 -------- d-----w- c:\users\yannick\AppData\Local\{3792A250-0EB3-4524-B530-A62573877137}
    2011-05-02 23:03 . 2011-05-02 23:03 -------- d-----w- c:\users\yannick\AppData\Roaming\OpenDNS Updater
    2011-05-02 23:02 . 2011-05-02 23:03 -------- d-----w- c:\program files (x86)\OpenDNS Updater
    2011-05-02 21:46 . 2011-05-02 21:47 -------- d-----w- c:\users\yannick\AppData\Local\{DFEA948B-9D30-4C2C-AA82-C0AAAC9E9C44}
    2011-05-02 08:17 . 2011-05-02 08:17 -------- d-----w- c:\users\yannick\AppData\Local\{D1972559-17DE-4353-8C11-43D0BCBFB0B7}
    2011-05-01 20:16 . 2011-05-01 20:17 -------- d-----w- c:\users\yannick\AppData\Local\{4BC951E0-A8E1-4421-8CE6-905598D0E6CF}
    2011-05-01 14:38 . 2011-05-12 18:36 -------- d-----w- c:\program files (x86)\Emsisoft Anti-Malware
    2011-05-01 11:48 . 2011-05-01 11:48 0 ----a-w- c:\programdata\xmlF126.tmp
    2011-05-01 11:48 . 2011-05-01 11:48 0 ----a-w- c:\programdata\xmlCC57.tmp
    2011-05-01 08:16 . 2011-05-01 08:16 -------- d-----w- c:\users\yannick\AppData\Local\{FAEB09C6-0D4D-43D3-905B-1D4EA20A87D6}
    2011-04-30 22:50 . 2011-04-30 22:50 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
    2011-04-30 18:36 . 2011-04-30 18:37 -------- d-----w- c:\users\yannick\AppData\Local\{0D277D12-DDB5-4B90-93DB-1C069BDD943C}
    2011-04-30 18:28 . 2011-04-30 22:50 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
    2011-04-30 18:18 . 2009-05-19 15:39 3072 ------w- c:\windows\SysWow64\BrDctF2S.dll
    2011-04-30 18:18 . 2007-12-13 20:16 73728 ------w- c:\windows\SysWow64\BrDctF2.dll
    2011-04-30 18:18 . 2007-12-13 20:16 5120 ------w- c:\windows\SysWow64\BrDctF2L.dll
    2011-04-30 18:18 . 2006-12-28 11:39 176128 ------w- c:\windows\SysWow64\BroSNMP.dll
    2011-04-30 18:17 . 2008-06-17 13:33 167936 ------w- c:\windows\SysWow64\NSSearch.dll
    2011-04-30 18:17 . 2011-04-30 18:17 -------- d-----w- c:\users\yannick\AppData\Roaming\InstallShield
    2011-04-30 14:27 . 2011-04-30 17:59 -------- dc----w- c:\windows\system32\DRVSTORE
    2011-04-30 14:27 . 2011-04-30 14:27 49752 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
    2011-04-30 14:23 . 2011-04-30 14:23 -------- d-----w- c:\users\yannick\AppData\Local\Sunbelt Software
    2011-04-30 14:22 . 2011-04-30 17:59 -------- d-----w- c:\programdata\Lavasoft
    2011-04-30 06:36 . 2011-04-30 06:36 -------- d-----w- c:\users\yannick\AppData\Local\{145F2AAB-9881-48A9-BE86-ACD962C15608}
    2011-04-29 18:35 . 2011-04-29 18:35 -------- d-----w- c:\users\yannick\AppData\Local\{07B0D91D-8CE9-456B-BD82-511E31BAADD3}
    2011-04-29 06:34 . 2011-04-29 06:35 -------- d-----w- c:\users\yannick\AppData\Local\{12DF4916-8207-4CC5-9384-0CE264C1E4CA}
    2011-04-28 18:34 . 2011-04-28 18:34 -------- d-----w- c:\users\yannick\AppData\Local\{F6C2BB08-3AC0-4F81-95AF-F298CFDF0AEF}
    2011-04-28 06:33 . 2011-04-28 06:33 -------- d-----w- c:\users\yannick\AppData\Local\{847C7A71-FAB4-4507-A12D-D5D979817720}
    2011-04-27 23:02 . 2005-03-11 22:07 87040 ----a-w- c:\windows\system32\pdfcmnnt.dll
    2011-04-27 23:02 . 1998-06-23 22:00 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX
    2011-04-27 23:02 . 2011-04-27 23:03 -------- d-----w- c:\program files (x86)\PDFCreator
    2011-04-27 23:02 . 1998-07-12 23:08 141312 ----a-w- c:\windows\SysWow64\MSCMCFR.DLL
    2011-04-27 23:02 . 1998-07-05 22:00 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL
    2011-04-27 18:33 . 2011-04-27 18:33 -------- d-----w- c:\users\yannick\AppData\Local\{1AEABE3E-7393-4B59-99D3-DF44E7E322AE}
    2011-04-27 06:28 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
    2011-04-27 06:28 . 2011-03-12 11:23 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
    2011-04-27 06:28 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
    2011-04-27 06:28 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
    2011-04-27 06:28 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
    2011-04-27 06:28 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
    2011-04-27 06:28 . 2011-03-11 06:41 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
    2011-04-27 06:28 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
    2011-04-27 06:27 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
    2011-04-27 06:27 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
    2011-04-27 06:27 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
    2011-04-27 06:27 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
    2011-04-27 06:27 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
    2011-04-27 06:27 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
    2011-04-27 06:27 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
    2011-04-27 06:27 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
    2011-04-27 06:27 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
    2011-04-26 21:54 . 2011-04-26 21:54 -------- d-----w- c:\users\yannick\AppData\Local\{05CA20F2-5E34-4FB5-8AA5-42CE6029170F}
    2011-04-26 09:54 . 2011-04-26 09:54 -------- d-----w- c:\users\yannick\AppData\Local\{C0BB52DB-DE4C-4951-8293-D02407A75F8D}
    2011-04-26 01:08 . 2011-04-26 01:08 -------- d-----w- c:\users\yannick\AppData\Roaming\skypePM
    2011-04-26 01:08 . 2011-04-26 01:08 -------- d-----w- c:\programdata\Skype Extras
    2011-04-26 01:07 . 2011-04-26 01:09 -------- d-----w- c:\users\yannick\AppData\Roaming\Skype
    2011-04-26 01:07 . 2011-04-26 01:07 -------- d-----w- c:\program files (x86)\Common Files\Skype
    2011-04-26 01:07 . 2011-05-01 19:15 -------- d-----r- c:\program files (x86)\Skype
    2011-04-26 01:07 . 2011-04-26 01:07 -------- d-----w- c:\programdata\Skype
    2011-04-25 21:53 . 2011-04-25 21:53 -------- d-----w- c:\users\yannick\AppData\Local\{0F4AE62B-A9C0-4D0E-BBBC-604BF65B73E1}
    2011-04-25 09:52 . 2011-04-25 09:53 -------- d-----w- c:\users\yannick\AppData\Local\{1A29B142-BBD0-4504-B86F-DE4F750704C0}
    2011-04-24 23:08 . 2011-04-24 23:15 -------- d-----w- c:\windows\SysWow64\quicktime
    2011-04-24 22:45 . 2011-04-24 22:48 -------- d-----w- c:\users\yannick\AppData\Roaming\DivX
    2011-04-24 22:45 . 2011-04-24 22:45 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
    2011-04-24 22:45 . 2011-04-24 23:16 -------- d-----w- c:\program files\DivX
    2011-04-24 22:42 . 2011-04-24 23:16 -------- d-----w- c:\program files (x86)\DivX
    2011-04-24 22:41 . 2011-04-24 23:16 -------- d-----w- c:\programdata\DivX
    2011-04-24 21:52 . 2011-04-24 21:52 -------- d-----w- c:\users\yannick\AppData\Local\{92EAEB2E-893B-424B-BBFA-1E4F6345DA6F}
    2011-04-24 09:51 . 2011-04-24 09:51 -------- d-----w- c:\users\yannick\AppData\Local\{6058B1D8-4A85-41C1-BB32-D4D1B3924366}
    2011-04-23 21:50 . 2011-04-23 21:51 -------- d-----w- c:\users\yannick\AppData\Local\{6B124F2B-687D-4C4F-83EC-D781413047E9}
    2011-04-23 10:50 . 2011-04-30 18:18 -------- d-----w- c:\program files (x86)\Brother
    2011-04-23 09:50 . 2011-04-23 09:50 -------- d-----w- c:\users\yannick\AppData\Local\{7C0A5094-9C19-459C-91D5-4FC969440877}
    2011-04-23 01:17 . 2011-04-23 01:17 -------- d-----w- c:\programdata\Solidshield
    2011-04-22 21:49 . 2011-04-22 21:49 -------- d-----w- c:\users\yannick\AppData\Local\{78E68C18-5CF1-4B65-98EA-031179724E18}
    2011-04-22 09:49 . 2011-04-22 09:49 -------- d-----w- c:\users\yannick\AppData\Local\{B27F5020-D8EB-4668-9814-C6D4E701B1A2}
    2011-04-21 22:07 . 2011-04-21 22:07 0 ----a-w- c:\programdata\xmlE199.tmp
    2011-04-21 22:07 . 2011-04-21 22:07 0 ----a-w- c:\programdata\xmlDBCE.tmp
    2011-04-21 21:48 . 2011-04-21 21:48 -------- d-----w- c:\users\yannick\AppData\Local\{33604A69-A37D-467D-AFB3-7482AEDA3B56}
    .
    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2011-05-12 00:03 . 2011-05-12 00:03 14858 ----a-w- C:\UsbFix_Upload_Me_YANNICK-PC.zip
    2011-04-21 19:35 . 2011-02-03 19:56 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
    2011-04-21 06:33 . 2011-03-21 11:03 2306328 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
    2011-04-21 06:32 . 2011-03-21 10:43 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
    2011-04-11 19:17 . 2011-04-11 19:17 2724120 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
    2011-04-11 19:16 . 2011-04-11 19:16 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
    2011-04-11 19:16 . 2011-04-11 19:16 639296 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
    2011-04-08 05:14 . 2011-02-23 06:28 8411752 ----a-w- c:\windows\system32\nvwgf2umx.dll
    2011-04-08 05:14 . 2011-02-23 06:28 6299752 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
    2011-04-08 05:14 . 2011-02-23 06:28 10071656 ----a-w- c:\windows\SysWow64\nvd3dum.dll
    2011-04-08 05:14 . 2010-07-10 04:38 2273896 ----a-w- c:\windows\system32\nvapi64.dll
    2011-04-07 21:19 . 2011-04-07 21:19 2582120 ----a-w- c:\windows\system32\nvsvcr.dll
    2011-04-07 21:19 . 2011-04-07 21:19 117864 ----a-w- c:\windows\system32\nvmctray.dll
    2011-04-07 21:19 . 2011-04-07 21:19 1012328 ----a-w- c:\windows\system32\nvvsvc.exe
    2011-04-07 21:19 . 2011-04-07 21:19 797288 ----a-w- c:\windows\system32\easyUpdatusAPIU64.dll
    2011-04-07 21:19 . 2011-04-07 21:19 6338152 ----a-w- c:\windows\system32\nvcpl.dll
    2011-04-07 21:18 . 2011-04-07 21:18 3041384 ----a-w- c:\windows\system32\nvsvc64.dll
    2011-03-21 10:43 . 2011-03-21 10:43 639296 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
    2011-03-14 22:04 . 2011-03-14 22:04 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
    2011-03-14 22:04 . 2011-03-14 22:04 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
    2011-03-14 22:04 . 2011-03-14 22:04 669184 ----a-w- c:\windows\SysWow64\pbsvc.exe
    2011-03-09 06:04 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
    2011-03-04 06:19 . 2011-04-27 06:28 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
    2011-03-04 06:19 . 2011-04-27 06:28 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
    2011-02-23 06:28 . 2011-02-23 06:28 1614440 ----a-w- c:\windows\system32\nvdispco642090.dll
    2011-02-23 06:28 . 2011-02-23 06:28 1359976 ----a-w- c:\windows\system32\nvgenco642040.dll
    2011-02-22 20:50 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
    2011-02-22 20:50 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
    2011-02-19 12:05 . 2011-03-09 06:07 1139200 ----a-w- c:\windows\system32\FntCache.dll
    2011-02-19 12:04 . 2011-03-09 06:07 1544192 ----a-w- c:\windows\system32\DWrite.dll
    2011-02-19 12:04 . 2011-03-09 06:07 902656 ----a-w- c:\windows\system32\d2d1.dll
    2011-02-19 06:30 . 2011-03-09 06:07 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
    2011-02-19 06:30 . 2011-03-09 06:07 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
    .
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "a-squared"="c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2guard.exe" [2011-03-10 3438992]
    "ThreatFire"="c:\program files (x86)\ThreatFire\TFTray.exe" [2010-01-14 378128]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    "EnableLinkedConnections"= 1 (0x1)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
    "NoActiveDesktop"= 0
    "NoActiveDesktopChanges"= 0
    "ForceActiveDesktopOn"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    SetupExecute REG_MULTI_SZ \0
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
    .
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 136176]
    R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files (x86)\ma-config.com\Drivers\driverhardwarev2x64.sys [2010-08-30 15872]
    R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 136176]
    R3 maconfservice;Ma-Config Service;c:\program files (x86)\ma-config.com\maconfservice.exe [2011-04-12 311744]
    R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys [x]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
    R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Professionnel Personnel 2010.SP1d\RpcAgentSrv.exe [2009-08-10 93336]
    R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
    R3 tsusbhub;tsusbhub; [x]
    R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
    S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [x]
    S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [x]
    S1 a2injectiondriver;a2injectiondriver;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys [2010-09-05 48216]
    S1 a2util;a-squared Malware-IDS utility driver;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys [2010-05-05 14720]
    S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
    S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
    S2 a2AntiMalware;Emsisoft Anti-Malware 5.0 - Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [2011-03-29 2860800]
    S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
    S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-04-07 810120]
    S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
    S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
    S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
    S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
    S2 ThreatFire;ThreatFire;c:\program files (x86)\ThreatFire\TFService.exe service [x]
    S3 a2acc;a2acc;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [2011-02-20 85800]
    S3 dvdfab;dvdfab;c:\windows\system32\drivers\dvdfab.sys [x]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
    S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
    S3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [x]
    .
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
    2009-06-17 11:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
    .
    Contenu du dossier 'Tâches planifiées'
    .
    2011-05-12 c:\windows\Tasks\GlaryInitialize.job
    - c:\program files (x86)\Glary Utilities\initialize.exe [2011-04-15 15:24]
    .
    2011-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 19:45]
    .
    2011-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 19:45]
    .
    .
    --------- x86-64 -----------
    .
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-07 2839840]
    .
    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
    "{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "LoadAppInit_DLLs"=0x0
    .
    ------- Examen supplémentaire -------
    .
    uLocal Page = c:\windows\SysWOW64\blank.htm
    uStart Page = hxxp://www.google.com/
    mLocal Page = c:\windows\SysWOW64\blank.htm
    IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
    IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
    TCP: {9A5C295B-5CAA-46A1-8439-74960B6D020D} = 208.67.222.222,208.67.220.220
    FF - ProfilePath - c:\users\yannick\AppData\Roaming\Mozilla\Firefox\Profiles\4sptc414.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - prefs.js: network.proxy.ftp - localhost
    FF - prefs.js: network.proxy.ftp_port - 8118
    FF - prefs.js: network.proxy.http - localhost
    FF - prefs.js: network.proxy.http_port - 8118
    FF - prefs.js: network.proxy.socks - localhost
    FF - prefs.js: network.proxy.socks_port - 9050
    FF - prefs.js: network.proxy.ssl - localhost
    FF - prefs.js: network.proxy.ssl_port - 8118
    FF - prefs.js: network.proxy.type - 0
    .
    - - - - ORPHELINS SUPPRIMES - - - -
    .
    AddRemove-MiNODLogin - c:\program files (x86)\ESET\MiNODLogin\MiNODLoginUninst.exe
    AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
    .
    .
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ThreatFire]
    "AlternateImagePath"=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
    "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD\000.fcl"
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
    c:\windows\SysWOW64\PnkBstrA.exe
    c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
    c:\program files (x86)\ThreatFire\TFService.exe
    c:\program files (x86)\Windows Live\Contacts\wlcomm.exe
    .
    **************************************************************************
    .
    Heure de fin: 2011-05-12 20:49:23 - La machine a redémarré
    ComboFix-quarantined-files.txt 2011-05-12 18:49
    .
    Avant-CF: 158 456 414 208 octets libres
    Après-CF: 158 413 463 552 octets libres
    .
    - - End Of File - - 2628A2D2606FC78EA9DF3CF7888E71E4
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      j'ai donc effectué un deuxième scan en ayant bel et bien désactiver windows defender:

      ComboFix 11-05-11.04 - yannick 12/05/2011 21:41:09.2.4 - x64
      Microsoft Windows 7 Édition Intégrale 6.1.7601.1.1252.33.1033.18.4095.3003 [GMT 2:00]
      Lancé depuis: c:\users\yannick\Desktop\yannick.exe
      AV: Emsisoft Anti-Malware *Disabled/Updated* {0ADC9F7D-20C1-240F-01E2-43466EBA893A}
      AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
      SP: Emsisoft Anti-Malware *Disabled/Updated* {B1BD7E99-06FB-2B81-3B52-7834153DC387}
      SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
      SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      .
      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2011-04-12 au 2011-05-12 ))))))))))))))))))))))))))))))))))))
      .
      .
      2011-05-12 19:56 . 2011-05-12 19:56 -------- d-----w- c:\users\Default\AppData\Local\temp
      2011-05-12 15:17 . 2011-05-12 19:26 -------- d-----w- C:\yannick
      2011-05-12 11:18 . 2011-05-12 11:18 -------- d-----w- c:\users\yannick\AppData\Local\{9139154A-FDF5-4E73-A3B2-9DFC096EA4F0}
      2011-05-12 09:21 . 2011-05-12 09:21 -------- d-----w- C:\Kill'em
      2011-05-12 09:06 . 2011-05-12 09:06 -------- d-----w- c:\program files (x86)\File Extension Changer
      2011-05-12 00:54 . 2011-05-12 00:54 512 ----a-w- C:\PhysicalDisk0_MBR.bin
      2011-05-12 00:40 . 2011-05-12 00:54 -------- d-----w- c:\program files (x86)\ZHPDiag
      2011-05-11 23:56 . 2011-05-12 00:03 -------- d-----w- C:\UsbFix
      2011-05-11 22:25 . 2011-05-11 22:25 -------- d-----w- c:\users\yannick\AppData\Local\{403378D5-E483-4DB0-8AA5-9B6CFFCBA4F4}
      2011-05-11 14:37 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
      2011-05-11 14:37 . 2011-05-11 14:40 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
      2011-05-11 10:24 . 2011-05-11 10:25 -------- d-----w- c:\users\yannick\AppData\Local\{7503200D-3EA4-4D08-949F-CFD295ED352B}
      2011-05-10 22:23 . 2011-05-10 22:24 -------- d-----w- c:\users\yannick\AppData\Local\{9DAED211-F5FF-41A9-816B-89A69003479F}
      2011-05-10 22:13 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
      2011-05-10 22:13 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
      2011-05-10 22:12 . 2011-04-09 07:02 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
      2011-05-10 22:12 . 2011-04-09 06:02 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
      2011-05-10 22:12 . 2011-04-09 06:02 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
      2011-05-10 20:15 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
      2011-05-10 20:15 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
      2011-05-10 20:15 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
      2011-05-10 20:15 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
      2011-05-10 20:15 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
      2011-05-10 20:15 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
      2011-05-10 10:21 . 2011-05-10 10:21 -------- d-----w- c:\users\yannick\AppData\Local\{3244256B-1CE4-4313-B45E-2979068DDC86}
      2011-05-10 06:36 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{65E35226-36EE-4D91-9312-C838160594C7}\mpengine.dll
      2011-05-09 22:20 . 2011-05-09 22:21 -------- d-----w- c:\users\yannick\AppData\Local\{5D30ABB8-F05D-468B-8916-85EE86829F96}
      2011-05-09 10:20 . 2011-05-09 10:20 -------- d-----w- c:\users\yannick\AppData\Local\{B6746E93-D34C-4DC7-9319-B4512BEFA767}
      2011-05-08 23:48 . 2011-05-09 00:02 -------- d-----w- C:\UnrealTournament
      2011-05-08 22:19 . 2011-05-08 22:19 -------- d-----w- c:\users\yannick\AppData\Local\{59049912-73B5-4365-A0C8-014CB2C0DF14}
      2011-05-08 10:19 . 2011-05-08 10:19 -------- d-----w- c:\users\yannick\AppData\Local\{28C4179A-A120-4C07-A886-E02D91C0363B}
      2011-05-07 21:53 . 2011-05-07 21:53 -------- d-----w- c:\users\yannick\AppData\Local\{C7418C1B-F9B0-4BAF-A132-8AA5E8C6E5C4}
      2011-05-07 09:52 . 2011-05-07 09:52 -------- d-----w- c:\users\yannick\AppData\Local\{85C242FD-264F-4B5D-8C33-21FF9C255D09}
      2011-05-06 21:51 . 2011-05-06 21:52 -------- d-----w- c:\users\yannick\AppData\Local\{282336CA-3837-4B3B-8646-0B89349DB2DF}
      2011-05-06 09:51 . 2011-05-06 09:51 -------- d-----w- c:\users\yannick\AppData\Local\{15096215-0F67-4034-9841-04B9BE7FD8AD}
      2011-05-05 21:50 . 2011-05-05 21:50 -------- d-----w- c:\users\yannick\AppData\Local\{4FD62717-511E-4D02-A1F6-E615815ABA2C}
      2011-05-05 18:21 . 2011-05-05 18:21 -------- d-----w- c:\users\yannick\AppData\Local\Zattoo
      2011-05-05 18:21 . 2011-05-05 18:25 -------- d-----w- c:\program files (x86)\Zattoo4
      2011-05-05 09:50 . 2011-05-05 09:50 -------- d-----w- c:\users\yannick\AppData\Local\{00E861DC-BC08-488E-AFAB-16F743FE3BAF}
      2011-05-04 23:58 . 2011-05-04 23:59 -------- d-----w- c:\users\yannick\AppData\Roaming\Offline Explorer
      2011-05-04 23:56 . 2011-05-05 00:01 -------- d-----w- c:\program files (x86)\Offline Explorer Enterprise
      2011-05-04 21:49 . 2011-05-04 21:49 -------- d-----w- c:\users\yannick\AppData\Local\{D31116AC-2B54-465D-B1C5-ACFA4A101319}
      2011-05-04 09:48 . 2011-05-04 09:49 -------- d-----w- c:\users\yannick\AppData\Local\{4BD66317-8484-4D87-B88C-CEEA3B3CBBA9}
      2011-05-03 21:48 . 2011-05-03 21:48 -------- d-----w- c:\users\yannick\AppData\Local\{C24FE7F9-1699-4720-9ECC-F1AAEE3AFA29}
      2011-05-03 11:15 . 2010-01-14 14:08 59880 ----a-w- c:\windows\system32\drivers\TfSysMon.sys
      2011-05-03 11:15 . 2010-01-14 14:08 41888 ----a-w- c:\windows\system32\drivers\TfNetMon.sys
      2011-05-03 11:15 . 2010-01-14 14:08 65072 ----a-w- c:\windows\system32\drivers\TfFsMon.sys
      2011-05-03 11:15 . 2011-05-03 11:15 -------- d-----w- c:\program files (x86)\ThreatFire
      2011-05-03 11:15 . 2011-05-03 11:15 -------- d-----w- c:\programdata\PC Tools
      2011-05-03 09:47 . 2011-05-03 09:47 -------- d-----w- c:\users\yannick\AppData\Local\{3792A250-0EB3-4524-B530-A62573877137}
      2011-05-02 23:03 . 2011-05-02 23:03 -------- d-----w- c:\users\yannick\AppData\Roaming\OpenDNS Updater
      2011-05-02 23:02 . 2011-05-02 23:03 -------- d-----w- c:\program files (x86)\OpenDNS Updater
      2011-05-02 21:46 . 2011-05-02 21:47 -------- d-----w- c:\users\yannick\AppData\Local\{DFEA948B-9D30-4C2C-AA82-C0AAAC9E9C44}
      2011-05-02 08:17 . 2011-05-02 08:17 -------- d-----w- c:\users\yannick\AppData\Local\{D1972559-17DE-4353-8C11-43D0BCBFB0B7}
      2011-05-01 20:16 . 2011-05-01 20:17 -------- d-----w- c:\users\yannick\AppData\Local\{4BC951E0-A8E1-4421-8CE6-905598D0E6CF}
      2011-05-01 14:38 . 2011-05-12 19:36 -------- d-----w- c:\program files (x86)\Emsisoft Anti-Malware
      2011-05-01 11:48 . 2011-05-01 11:48 0 ----a-w- c:\programdata\xmlF126.tmp
      2011-05-01 11:48 . 2011-05-01 11:48 0 ----a-w- c:\programdata\xmlCC57.tmp
      2011-05-01 08:16 . 2011-05-01 08:16 -------- d-----w- c:\users\yannick\AppData\Local\{FAEB09C6-0D4D-43D3-905B-1D4EA20A87D6}
      2011-04-30 22:50 . 2011-04-30 22:50 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
      2011-04-30 18:36 . 2011-04-30 18:37 -------- d-----w- c:\users\yannick\AppData\Local\{0D277D12-DDB5-4B90-93DB-1C069BDD943C}
      2011-04-30 18:28 . 2011-04-30 22:50 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
      2011-04-30 18:18 . 2009-05-19 15:39 3072 ------w- c:\windows\SysWow64\BrDctF2S.dll
      2011-04-30 18:18 . 2007-12-13 20:16 73728 ------w- c:\windows\SysWow64\BrDctF2.dll
      2011-04-30 18:18 . 2007-12-13 20:16 5120 ------w- c:\windows\SysWow64\BrDctF2L.dll
      2011-04-30 18:18 . 2006-12-28 11:39 176128 ------w- c:\windows\SysWow64\BroSNMP.dll
      2011-04-30 18:17 . 2008-06-17 13:33 167936 ------w- c:\windows\SysWow64\NSSearch.dll
      2011-04-30 18:17 . 2011-04-30 18:17 -------- d-----w- c:\users\yannick\AppData\Roaming\InstallShield
      2011-04-30 14:27 . 2011-04-30 17:59 -------- dc----w- c:\windows\system32\DRVSTORE
      2011-04-30 14:27 . 2011-04-30 14:27 49752 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
      2011-04-30 14:23 . 2011-04-30 14:23 -------- d-----w- c:\users\yannick\AppData\Local\Sunbelt Software
      2011-04-30 14:22 . 2011-04-30 17:59 -------- d-----w- c:\programdata\Lavasoft
      2011-04-30 06:36 . 2011-04-30 06:36 -------- d-----w- c:\users\yannick\AppData\Local\{145F2AAB-9881-48A9-BE86-ACD962C15608}
      2011-04-29 18:35 . 2011-04-29 18:35 -------- d-----w- c:\users\yannick\AppData\Local\{07B0D91D-8CE9-456B-BD82-511E31BAADD3}
      2011-04-29 06:34 . 2011-04-29 06:35 -------- d-----w- c:\users\yannick\AppData\Local\{12DF4916-8207-4CC5-9384-0CE264C1E4CA}
      2011-04-28 18:34 . 2011-04-28 18:34 -------- d-----w- c:\users\yannick\AppData\Local\{F6C2BB08-3AC0-4F81-95AF-F298CFDF0AEF}
      2011-04-28 06:33 . 2011-04-28 06:33 -------- d-----w- c:\users\yannick\AppData\Local\{847C7A71-FAB4-4507-A12D-D5D979817720}
      2011-04-27 23:02 . 2005-03-11 22:07 87040 ----a-w- c:\windows\system32\pdfcmnnt.dll
      2011-04-27 23:02 . 1998-06-23 22:00 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX
      2011-04-27 23:02 . 2011-04-27 23:03 -------- d-----w- c:\program files (x86)\PDFCreator
      2011-04-27 23:02 . 1998-07-12 23:08 141312 ----a-w- c:\windows\SysWow64\MSCMCFR.DLL
      2011-04-27 23:02 . 1998-07-05 22:00 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL
      2011-04-27 18:33 . 2011-04-27 18:33 -------- d-----w- c:\users\yannick\AppData\Local\{1AEABE3E-7393-4B59-99D3-DF44E7E322AE}
      2011-04-27 06:28 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
      2011-04-27 06:28 . 2011-03-12 11:23 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
      2011-04-27 06:28 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
      2011-04-27 06:28 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
      2011-04-27 06:28 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
      2011-04-27 06:28 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
      2011-04-27 06:28 . 2011-03-11 06:41 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
      2011-04-27 06:28 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
      2011-04-27 06:27 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
      2011-04-27 06:27 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
      2011-04-27 06:27 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
      2011-04-27 06:27 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
      2011-04-27 06:27 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
      2011-04-27 06:27 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
      2011-04-27 06:27 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
      2011-04-27 06:27 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
      2011-04-27 06:27 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
      2011-04-26 21:54 . 2011-04-26 21:54 -------- d-----w- c:\users\yannick\AppData\Local\{05CA20F2-5E34-4FB5-8AA5-42CE6029170F}
      2011-04-26 09:54 . 2011-04-26 09:54 -------- d-----w- c:\users\yannick\AppData\Local\{C0BB52DB-DE4C-4951-8293-D02407A75F8D}
      2011-04-26 01:08 . 2011-04-26 01:08 -------- d-----w- c:\users\yannick\AppData\Roaming\skypePM
      2011-04-26 01:08 . 2011-04-26 01:08 -------- d-----w- c:\programdata\Skype Extras
      2011-04-26 01:07 . 2011-04-26 01:09 -------- d-----w- c:\users\yannick\AppData\Roaming\Skype
      2011-04-26 01:07 . 2011-04-26 01:07 -------- d-----w- c:\program files (x86)\Common Files\Skype
      2011-04-26 01:07 . 2011-05-01 19:15 -------- d-----r- c:\program files (x86)\Skype
      2011-04-26 01:07 . 2011-04-26 01:07 -------- d-----w- c:\programdata\Skype
      2011-04-25 21:53 . 2011-04-25 21:53 -------- d-----w- c:\users\yannick\AppData\Local\{0F4AE62B-A9C0-4D0E-BBBC-604BF65B73E1}
      2011-04-25 09:52 . 2011-04-25 09:53 -------- d-----w- c:\users\yannick\AppData\Local\{1A29B142-BBD0-4504-B86F-DE4F750704C0}
      2011-04-24 23:08 . 2011-04-24 23:15 -------- d-----w- c:\windows\SysWow64\quicktime
      2011-04-24 22:45 . 2011-04-24 22:48 -------- d-----w- c:\users\yannick\AppData\Roaming\DivX
      2011-04-24 22:45 . 2011-04-24 22:45 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
      2011-04-24 22:45 . 2011-04-24 23:16 -------- d-----w- c:\program files\DivX
      2011-04-24 22:42 . 2011-04-24 23:16 -------- d-----w- c:\program files (x86)\DivX
      2011-04-24 22:41 . 2011-04-24 23:16 -------- d-----w- c:\programdata\DivX
      2011-04-24 21:52 . 2011-04-24 21:52 -------- d-----w- c:\users\yannick\AppData\Local\{92EAEB2E-893B-424B-BBFA-1E4F6345DA6F}
      2011-04-24 09:51 . 2011-04-24 09:51 -------- d-----w- c:\users\yannick\AppData\Local\{6058B1D8-4A85-41C1-BB32-D4D1B3924366}
      2011-04-23 21:50 . 2011-04-23 21:51 -------- d-----w- c:\users\yannick\AppData\Local\{6B124F2B-687D-4C4F-83EC-D781413047E9}
      2011-04-23 10:50 . 2011-04-30 18:18 -------- d-----w- c:\program files (x86)\Brother
      2011-04-23 09:50 . 2011-04-23 09:50 -------- d-----w- c:\users\yannick\AppData\Local\{7C0A5094-9C19-459C-91D5-4FC969440877}
      2011-04-23 01:17 . 2011-04-23 01:17 -------- d-----w- c:\programdata\Solidshield
      2011-04-22 21:49 . 2011-04-22 21:49 -------- d-----w- c:\users\yannick\AppData\Local\{78E68C18-5CF1-4B65-98EA-031179724E18}
      2011-04-22 09:49 . 2011-04-22 09:49 -------- d-----w- c:\users\yannick\AppData\Local\{B27F5020-D8EB-4668-9814-C6D4E701B1A2}
      2011-04-21 22:07 . 2011-04-21 22:07 0 ----a-w- c:\programdata\xmlE199.tmp
      .
      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2011-05-12 00:03 . 2011-05-12 00:03 14858 ----a-w- C:\UsbFix_Upload_Me_YANNICK-PC.zip
      2011-04-21 19:35 . 2011-02-03 19:56 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
      2011-04-21 06:33 . 2011-03-21 11:03 2306328 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
      2011-04-21 06:32 . 2011-03-21 10:43 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
      2011-04-11 19:17 . 2011-04-11 19:17 2724120 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
      2011-04-11 19:16 . 2011-04-11 19:16 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
      2011-04-11 19:16 . 2011-04-11 19:16 639296 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
      2011-04-08 05:14 . 2011-02-23 06:28 8411752 ----a-w- c:\windows\system32\nvwgf2umx.dll
      2011-04-08 05:14 . 2011-02-23 06:28 6299752 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
      2011-04-08 05:14 . 2011-02-23 06:28 10071656 ----a-w- c:\windows\SysWow64\nvd3dum.dll
      2011-04-08 05:14 . 2010-07-10 04:38 2273896 ----a-w- c:\windows\system32\nvapi64.dll
      2011-04-07 21:19 . 2011-04-07 21:19 2582120 ----a-w- c:\windows\system32\nvsvcr.dll
      2011-04-07 21:19 . 2011-04-07 21:19 117864 ----a-w- c:\windows\system32\nvmctray.dll
      2011-04-07 21:19 . 2011-04-07 21:19 1012328 ----a-w- c:\windows\system32\nvvsvc.exe
      2011-04-07 21:19 . 2011-04-07 21:19 797288 ----a-w- c:\windows\system32\easyUpdatusAPIU64.dll
      2011-04-07 21:19 . 2011-04-07 21:19 6338152 ----a-w- c:\windows\system32\nvcpl.dll
      2011-04-07 21:18 . 2011-04-07 21:18 3041384 ----a-w- c:\windows\system32\nvsvc64.dll
      2011-03-21 10:43 . 2011-03-21 10:43 639296 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
      2011-03-14 22:04 . 2011-03-14 22:04 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
      2011-03-14 22:04 . 2011-03-14 22:04 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
      2011-03-14 22:04 . 2011-03-14 22:04 669184 ----a-w- c:\windows\SysWow64\pbsvc.exe
      2011-03-09 06:04 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
      2011-03-04 06:19 . 2011-04-27 06:28 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
      2011-03-04 06:19 . 2011-04-27 06:28 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
      2011-02-23 06:28 . 2011-02-23 06:28 1614440 ----a-w- c:\windows\system32\nvdispco642090.dll
      2011-02-23 06:28 . 2011-02-23 06:28 1359976 ----a-w- c:\windows\system32\nvgenco642040.dll
      2011-02-22 20:50 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
      2011-02-22 20:50 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
      2011-02-19 12:05 . 2011-03-09 06:07 1139200 ----a-w- c:\windows\system32\FntCache.dll
      2011-02-19 12:04 . 2011-03-09 06:07 1544192 ----a-w- c:\windows\system32\DWrite.dll
      2011-02-19 12:04 . 2011-03-09 06:07 902656 ----a-w- c:\windows\system32\d2d1.dll
      2011-02-19 06:30 . 2011-03-09 06:07 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
      2011-02-19 06:30 . 2011-03-09 06:07 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
      .
      .
      ((((((((((((((((((((((((((((( SnapShot@2011-05-12_18.36.55 )))))))))))))))))))))))))))))))))))))))))
      .
      + 2011-02-02 12:06 . 2011-05-12 19:25 384622 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
      .
      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4
      .
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
      "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
      "a-squared"="c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2guard.exe" [2011-03-10 3438992]
      "ThreatFire"="c:\program files (x86)\ThreatFire\TFTray.exe" [2010-01-14 378128]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "ConsentPromptBehaviorAdmin"= 5 (0x5)
      "ConsentPromptBehaviorUser"= 3 (0x3)
      "EnableUIADesktopToggle"= 0 (0x0)
      "EnableLinkedConnections"= 1 (0x1)
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
      "NoActiveDesktop"= 0
      "NoActiveDesktopChanges"= 0
      "ForceActiveDesktopOn"= 0 (0x0)
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
      SetupExecute REG_MULTI_SZ \0
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
      Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
      .
      R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
      R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
      R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 136176]
      R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files (x86)\ma-config.com\Drivers\driverhardwarev2x64.sys [2010-08-30 15872]
      R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 136176]
      R3 maconfservice;Ma-Config Service;c:\program files (x86)\ma-config.com\maconfservice.exe [2011-04-12 311744]
      R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys [x]
      R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
      R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Professionnel Personnel 2010.SP1d\RpcAgentSrv.exe [2009-08-10 93336]
      R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
      R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
      R3 tsusbhub;tsusbhub; [x]
      R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
      S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [x]
      S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [x]
      S1 a2injectiondriver;a2injectiondriver;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys [2010-09-05 48216]
      S1 a2util;a-squared Malware-IDS utility driver;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys [2010-05-05 14720]
      S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
      S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
      S2 a2AntiMalware;Emsisoft Anti-Malware 5.0 - Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [2011-03-29 2860800]
      S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
      S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-04-07 810120]
      S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
      S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
      S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
      S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
      S2 ThreatFire;ThreatFire;c:\program files (x86)\ThreatFire\TFService.exe service [x]
      S3 a2acc;a2acc;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [2011-02-20 85800]
      S3 dvdfab;dvdfab;c:\windows\system32\drivers\dvdfab.sys [x]
      S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
      S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
      S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
      S3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [x]
      .
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
      2009-06-17 11:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
      .
      Contenu du dossier 'Tâches planifiées'
      .
      2011-05-12 c:\windows\Tasks\GlaryInitialize.job
      - c:\program files (x86)\Glary Utilities\initialize.exe [2011-04-15 15:24]
      .
      2011-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 19:45]
      .
      2011-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 19:45]
      .
      .
      --------- x86-64 -----------
      .
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-07 2839840]
      .
      [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
      "{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]
      .
      ------- Examen supplémentaire -------
      .
      uLocal Page = c:\windows\SysWOW64\blank.htm
      uStart Page = hxxp://www.google.com/
      mLocal Page = c:\windows\SysWOW64\blank.htm
      IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
      IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
      TCP: {9A5C295B-5CAA-46A1-8439-74960B6D020D} = 208.67.222.222,208.67.220.220
      FF - ProfilePath - c:\users\yannick\AppData\Roaming\Mozilla\Firefox\Profiles\4sptc414.default\
      FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
      FF - prefs.js: network.proxy.ftp - localhost
      FF - prefs.js: network.proxy.ftp_port - 8118
      FF - prefs.js: network.proxy.http - localhost
      FF - prefs.js: network.proxy.http_port - 8118
      FF - prefs.js: network.proxy.socks - localhost
      FF - prefs.js: network.proxy.socks_port - 9050
      FF - prefs.js: network.proxy.ssl - localhost
      FF - prefs.js: network.proxy.ssl_port - 8118
      FF - prefs.js: network.proxy.type - 0
      .
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ThreatFire]
      "AlternateImagePath"=""
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
      "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD\000.fcl"
      .
      --------------------- CLES DE REGISTRE BLOQUEES ---------------------
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Shockwave Flash Object"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
      @="0"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
      @="ShockwaveFlash.ShockwaveFlash.10"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="ShockwaveFlash.ShockwaveFlash"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Macromedia Flash Factory Object"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
      @="FlashFactory.FlashFactory.1"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="FlashFactory.FlashFactory"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker4"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
      @Denied: (Full) (Everyone)
      .
      Heure de fin: 2011-05-12 22:05:42
      ComboFix-quarantined-files.txt 2011-05-12 20:05
      ComboFix2.txt 2011-05-12 18:49
      .
      Avant-CF: 158 480 912 384 octets libres
      Après-CF: 158 168 301 568 octets libres
      .
      - - End Of File - - C10DB5A0A7081EA70DFE4BC2D5163108
      0
  15. gen-hackman
     

    __________________________________________________
    =>/!\Le script qui suit a été écrit spécialement cet ordinateur/!\ <=
    =>il est fort déconseillé de le transposer sur un autre ordinateur !<=
    ----------------------------------------------------------------------------

    Toujours avec toutes les protections désactivées, fais ceci :

    ▶ Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
    ▶ Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

    ----------------------------------------------------------
    KillAll::

    File::
    c:\programdata\xmlF126.tmp
    c:\programdata\xmlCC57.tmp
    c:\programdata\xmlE199.tmp
    c:\programdata\xmlDBCE.tmp

    RegLock::
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ThreatFire]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]


    ------------------------------------------------------------------

    ▶ Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
    ▶ Quitte le Bloc Notes

    ▶ Fais un glisser/déposer de ce fichier CFScript sur le fichier combofix

    ▶ Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
    ▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
    ▶ Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      ComboFix 11-05-11.04 - yannick 12/05/2011 23:26:37.3.4 - x64
      Microsoft Windows 7 Édition Intégrale 6.1.7601.1.1252.33.1033.18.4095.3061 [GMT 2:00]
      Lancé depuis: c:\users\yannick\Desktop\yannick.exe
      Commutateurs utilisés :: c:\users\yannick\Desktop\CFScript.txt
      AV: Emsisoft Anti-Malware *Disabled/Updated* {0ADC9F7D-20C1-240F-01E2-43466EBA893A}
      AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
      SP: Emsisoft Anti-Malware *Disabled/Updated* {B1BD7E99-06FB-2B81-3B52-7834153DC387}
      SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
      SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      * Un nouveau point de restauration a été créé
      .
      FILE ::
      "c:\programdata\xmlCC57.tmp"
      "c:\programdata\xmlDBCE.tmp"
      "c:\programdata\xmlE199.tmp"
      "c:\programdata\xmlF126.tmp"
      .
      .
      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      c:\programdata\xmlCC57.tmp
      c:\programdata\xmlDBCE.tmp
      c:\programdata\xmlE199.tmp
      c:\programdata\xmlF126.tmp
      .
      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2011-04-12 au 2011-05-12 ))))))))))))))))))))))))))))))))))))
      .
      .
      2011-05-12 21:42 . 2011-05-12 21:42 -------- d-----w- c:\users\Default\AppData\Local\temp
      2011-05-12 15:17 . 2011-05-12 19:26 -------- d-----w- C:\yannick
      2011-05-12 11:18 . 2011-05-12 11:18 -------- d-----w- c:\users\yannick\AppData\Local\{9139154A-FDF5-4E73-A3B2-9DFC096EA4F0}
      2011-05-12 09:21 . 2011-05-12 09:21 -------- d-----w- C:\Kill'em
      2011-05-12 09:06 . 2011-05-12 09:06 -------- d-----w- c:\program files (x86)\File Extension Changer
      2011-05-12 00:54 . 2011-05-12 00:54 512 ----a-w- C:\PhysicalDisk0_MBR.bin
      2011-05-12 00:40 . 2011-05-12 00:54 -------- d-----w- c:\program files (x86)\ZHPDiag
      2011-05-11 23:56 . 2011-05-12 00:03 -------- d-----w- C:\UsbFix
      2011-05-11 22:25 . 2011-05-11 22:25 -------- d-----w- c:\users\yannick\AppData\Local\{403378D5-E483-4DB0-8AA5-9B6CFFCBA4F4}
      2011-05-11 14:37 . 2010-12-20 16:09 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
      2011-05-11 14:37 . 2011-05-11 14:40 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
      2011-05-11 10:24 . 2011-05-11 10:25 -------- d-----w- c:\users\yannick\AppData\Local\{7503200D-3EA4-4D08-949F-CFD295ED352B}
      2011-05-10 22:23 . 2011-05-10 22:24 -------- d-----w- c:\users\yannick\AppData\Local\{9DAED211-F5FF-41A9-816B-89A69003479F}
      2011-05-10 22:13 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
      2011-05-10 22:13 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
      2011-05-10 22:12 . 2011-04-09 07:02 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
      2011-05-10 22:12 . 2011-04-09 06:02 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
      2011-05-10 22:12 . 2011-04-09 06:02 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
      2011-05-10 20:15 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
      2011-05-10 20:15 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
      2011-05-10 20:15 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
      2011-05-10 20:15 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
      2011-05-10 20:15 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
      2011-05-10 20:15 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
      2011-05-10 10:21 . 2011-05-10 10:21 -------- d-----w- c:\users\yannick\AppData\Local\{3244256B-1CE4-4313-B45E-2979068DDC86}
      2011-05-10 06:36 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{65E35226-36EE-4D91-9312-C838160594C7}\mpengine.dll
      2011-05-09 22:20 . 2011-05-09 22:21 -------- d-----w- c:\users\yannick\AppData\Local\{5D30ABB8-F05D-468B-8916-85EE86829F96}
      2011-05-09 10:20 . 2011-05-09 10:20 -------- d-----w- c:\users\yannick\AppData\Local\{B6746E93-D34C-4DC7-9319-B4512BEFA767}
      2011-05-08 23:48 . 2011-05-09 00:02 -------- d-----w- C:\UnrealTournament
      2011-05-08 22:19 . 2011-05-08 22:19 -------- d-----w- c:\users\yannick\AppData\Local\{59049912-73B5-4365-A0C8-014CB2C0DF14}
      2011-05-08 10:19 . 2011-05-08 10:19 -------- d-----w- c:\users\yannick\AppData\Local\{28C4179A-A120-4C07-A886-E02D91C0363B}
      2011-05-07 21:53 . 2011-05-07 21:53 -------- d-----w- c:\users\yannick\AppData\Local\{C7418C1B-F9B0-4BAF-A132-8AA5E8C6E5C4}
      2011-05-07 09:52 . 2011-05-07 09:52 -------- d-----w- c:\users\yannick\AppData\Local\{85C242FD-264F-4B5D-8C33-21FF9C255D09}
      2011-05-06 21:51 . 2011-05-06 21:52 -------- d-----w- c:\users\yannick\AppData\Local\{282336CA-3837-4B3B-8646-0B89349DB2DF}
      2011-05-06 09:51 . 2011-05-06 09:51 -------- d-----w- c:\users\yannick\AppData\Local\{15096215-0F67-4034-9841-04B9BE7FD8AD}
      2011-05-05 21:50 . 2011-05-05 21:50 -------- d-----w- c:\users\yannick\AppData\Local\{4FD62717-511E-4D02-A1F6-E615815ABA2C}
      2011-05-05 18:21 . 2011-05-05 18:21 -------- d-----w- c:\users\yannick\AppData\Local\Zattoo
      2011-05-05 18:21 . 2011-05-05 18:25 -------- d-----w- c:\program files (x86)\Zattoo4
      2011-05-05 09:50 . 2011-05-05 09:50 -------- d-----w- c:\users\yannick\AppData\Local\{00E861DC-BC08-488E-AFAB-16F743FE3BAF}
      2011-05-04 23:58 . 2011-05-04 23:59 -------- d-----w- c:\users\yannick\AppData\Roaming\Offline Explorer
      2011-05-04 23:56 . 2011-05-05 00:01 -------- d-----w- c:\program files (x86)\Offline Explorer Enterprise
      2011-05-04 21:49 . 2011-05-04 21:49 -------- d-----w- c:\users\yannick\AppData\Local\{D31116AC-2B54-465D-B1C5-ACFA4A101319}
      2011-05-04 09:48 . 2011-05-04 09:49 -------- d-----w- c:\users\yannick\AppData\Local\{4BD66317-8484-4D87-B88C-CEEA3B3CBBA9}
      2011-05-03 21:48 . 2011-05-03 21:48 -------- d-----w- c:\users\yannick\AppData\Local\{C24FE7F9-1699-4720-9ECC-F1AAEE3AFA29}
      2011-05-03 11:15 . 2010-01-14 14:08 59880 ----a-w- c:\windows\system32\drivers\TfSysMon.sys
      2011-05-03 11:15 . 2010-01-14 14:08 41888 ----a-w- c:\windows\system32\drivers\TfNetMon.sys
      2011-05-03 11:15 . 2010-01-14 14:08 65072 ----a-w- c:\windows\system32\drivers\TfFsMon.sys
      2011-05-03 11:15 . 2011-05-03 11:15 -------- d-----w- c:\program files (x86)\ThreatFire
      2011-05-03 11:15 . 2011-05-03 11:15 -------- d-----w- c:\programdata\PC Tools
      2011-05-03 09:47 . 2011-05-03 09:47 -------- d-----w- c:\users\yannick\AppData\Local\{3792A250-0EB3-4524-B530-A62573877137}
      2011-05-02 23:03 . 2011-05-02 23:03 -------- d-----w- c:\users\yannick\AppData\Roaming\OpenDNS Updater
      2011-05-02 23:02 . 2011-05-02 23:03 -------- d-----w- c:\program files (x86)\OpenDNS Updater
      2011-05-02 21:46 . 2011-05-02 21:47 -------- d-----w- c:\users\yannick\AppData\Local\{DFEA948B-9D30-4C2C-AA82-C0AAAC9E9C44}
      2011-05-02 08:17 . 2011-05-02 08:17 -------- d-----w- c:\users\yannick\AppData\Local\{D1972559-17DE-4353-8C11-43D0BCBFB0B7}
      2011-05-01 20:16 . 2011-05-01 20:17 -------- d-----w- c:\users\yannick\AppData\Local\{4BC951E0-A8E1-4421-8CE6-905598D0E6CF}
      2011-05-01 14:38 . 2011-05-12 19:36 -------- d-----w- c:\program files (x86)\Emsisoft Anti-Malware
      2011-05-01 08:16 . 2011-05-01 08:16 -------- d-----w- c:\users\yannick\AppData\Local\{FAEB09C6-0D4D-43D3-905B-1D4EA20A87D6}
      2011-04-30 22:50 . 2011-04-30 22:50 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
      2011-04-30 18:36 . 2011-04-30 18:37 -------- d-----w- c:\users\yannick\AppData\Local\{0D277D12-DDB5-4B90-93DB-1C069BDD943C}
      2011-04-30 18:28 . 2011-04-30 22:50 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite
      2011-04-30 18:18 . 2009-05-19 15:39 3072 ------w- c:\windows\SysWow64\BrDctF2S.dll
      2011-04-30 18:18 . 2007-12-13 20:16 73728 ------w- c:\windows\SysWow64\BrDctF2.dll
      2011-04-30 18:18 . 2007-12-13 20:16 5120 ------w- c:\windows\SysWow64\BrDctF2L.dll
      2011-04-30 18:18 . 2006-12-28 11:39 176128 ------w- c:\windows\SysWow64\BroSNMP.dll
      2011-04-30 18:17 . 2008-06-17 13:33 167936 ------w- c:\windows\SysWow64\NSSearch.dll
      2011-04-30 18:17 . 2011-04-30 18:17 -------- d-----w- c:\users\yannick\AppData\Roaming\InstallShield
      2011-04-30 14:27 . 2011-04-30 17:59 -------- dc----w- c:\windows\system32\DRVSTORE
      2011-04-30 14:27 . 2011-04-30 14:27 49752 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
      2011-04-30 14:23 . 2011-04-30 14:23 -------- d-----w- c:\users\yannick\AppData\Local\Sunbelt Software
      2011-04-30 14:22 . 2011-04-30 17:59 -------- d-----w- c:\programdata\Lavasoft
      2011-04-30 06:36 . 2011-04-30 06:36 -------- d-----w- c:\users\yannick\AppData\Local\{145F2AAB-9881-48A9-BE86-ACD962C15608}
      2011-04-29 18:35 . 2011-04-29 18:35 -------- d-----w- c:\users\yannick\AppData\Local\{07B0D91D-8CE9-456B-BD82-511E31BAADD3}
      2011-04-29 06:34 . 2011-04-29 06:35 -------- d-----w- c:\users\yannick\AppData\Local\{12DF4916-8207-4CC5-9384-0CE264C1E4CA}
      2011-04-28 18:34 . 2011-04-28 18:34 -------- d-----w- c:\users\yannick\AppData\Local\{F6C2BB08-3AC0-4F81-95AF-F298CFDF0AEF}
      2011-04-28 06:33 . 2011-04-28 06:33 -------- d-----w- c:\users\yannick\AppData\Local\{847C7A71-FAB4-4507-A12D-D5D979817720}
      2011-04-27 23:02 . 2005-03-11 22:07 87040 ----a-w- c:\windows\system32\pdfcmnnt.dll
      2011-04-27 23:02 . 1998-06-23 22:00 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX
      2011-04-27 23:02 . 2011-04-27 23:03 -------- d-----w- c:\program files (x86)\PDFCreator
      2011-04-27 23:02 . 1998-07-12 23:08 141312 ----a-w- c:\windows\SysWow64\MSCMCFR.DLL
      2011-04-27 23:02 . 1998-07-05 22:00 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL
      2011-04-27 18:33 . 2011-04-27 18:33 -------- d-----w- c:\users\yannick\AppData\Local\{1AEABE3E-7393-4B59-99D3-DF44E7E322AE}
      2011-04-27 06:28 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
      2011-04-27 06:28 . 2011-03-12 11:23 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
      2011-04-27 06:28 . 2011-02-25 06:19 2871808 ----a-w- c:\windows\explorer.exe
      2011-04-27 06:28 . 2011-02-25 05:30 2616320 ----a-w- c:\windows\SysWow64\explorer.exe
      2011-04-27 06:28 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
      2011-04-27 06:28 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
      2011-04-27 06:28 . 2011-03-11 06:41 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
      2011-04-27 06:28 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
      2011-04-27 06:27 . 2011-03-11 06:41 189824 ----a-w- c:\windows\system32\drivers\storport.sys
      2011-04-27 06:27 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
      2011-04-27 06:27 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
      2011-04-27 06:27 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
      2011-04-27 06:27 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
      2011-04-27 06:27 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
      2011-04-27 06:27 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
      2011-04-27 06:27 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
      2011-04-27 06:27 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
      2011-04-26 21:54 . 2011-04-26 21:54 -------- d-----w- c:\users\yannick\AppData\Local\{05CA20F2-5E34-4FB5-8AA5-42CE6029170F}
      2011-04-26 09:54 . 2011-04-26 09:54 -------- d-----w- c:\users\yannick\AppData\Local\{C0BB52DB-DE4C-4951-8293-D02407A75F8D}
      2011-04-26 01:08 . 2011-04-26 01:08 -------- d-----w- c:\users\yannick\AppData\Roaming\skypePM
      2011-04-26 01:08 . 2011-04-26 01:08 -------- d-----w- c:\programdata\Skype Extras
      2011-04-26 01:07 . 2011-04-26 01:09 -------- d-----w- c:\users\yannick\AppData\Roaming\Skype
      2011-04-26 01:07 . 2011-04-26 01:07 -------- d-----w- c:\program files (x86)\Common Files\Skype
      2011-04-26 01:07 . 2011-05-01 19:15 -------- d-----r- c:\program files (x86)\Skype
      2011-04-26 01:07 . 2011-04-26 01:07 -------- d-----w- c:\programdata\Skype
      2011-04-25 21:53 . 2011-04-25 21:53 -------- d-----w- c:\users\yannick\AppData\Local\{0F4AE62B-A9C0-4D0E-BBBC-604BF65B73E1}
      2011-04-25 09:52 . 2011-04-25 09:53 -------- d-----w- c:\users\yannick\AppData\Local\{1A29B142-BBD0-4504-B86F-DE4F750704C0}
      2011-04-24 23:08 . 2011-04-24 23:15 -------- d-----w- c:\windows\SysWow64\quicktime
      2011-04-24 22:45 . 2011-04-24 22:48 -------- d-----w- c:\users\yannick\AppData\Roaming\DivX
      2011-04-24 22:45 . 2011-04-24 22:45 -------- d-----w- c:\program files (x86)\Common Files\PX Storage Engine
      2011-04-24 22:45 . 2011-04-24 23:16 -------- d-----w- c:\program files\DivX
      2011-04-24 22:42 . 2011-04-24 23:16 -------- d-----w- c:\program files (x86)\DivX
      2011-04-24 22:41 . 2011-04-24 23:16 -------- d-----w- c:\programdata\DivX
      2011-04-24 21:52 . 2011-04-24 21:52 -------- d-----w- c:\users\yannick\AppData\Local\{92EAEB2E-893B-424B-BBFA-1E4F6345DA6F}
      2011-04-24 09:51 . 2011-04-24 09:51 -------- d-----w- c:\users\yannick\AppData\Local\{6058B1D8-4A85-41C1-BB32-D4D1B3924366}
      2011-04-23 21:50 . 2011-04-23 21:51 -------- d-----w- c:\users\yannick\AppData\Local\{6B124F2B-687D-4C4F-83EC-D781413047E9}
      2011-04-23 10:50 . 2011-04-30 18:18 -------- d-----w- c:\program files (x86)\Brother
      2011-04-23 09:50 . 2011-04-23 09:50 -------- d-----w- c:\users\yannick\AppData\Local\{7C0A5094-9C19-459C-91D5-4FC969440877}
      2011-04-23 01:17 . 2011-04-23 01:17 -------- d-----w- c:\programdata\Solidshield
      2011-04-22 21:49 . 2011-04-22 21:49 -------- d-----w- c:\users\yannick\AppData\Local\{78E68C18-5CF1-4B65-98EA-031179724E18}
      2011-04-22 09:49 . 2011-04-22 09:49 -------- d-----w- c:\users\yannick\AppData\Local\{B27F5020-D8EB-4668-9814-C6D4E701B1A2}
      2011-04-21 21:48 . 2011-04-21 21:48 -------- d-----w- c:\users\yannick\AppData\Local\{33604A69-A37D-467D-AFB3-7482AEDA3B56}
      2011-04-21 20:59 . 2011-04-21 20:59 0 ----a-w- c:\programdata\xml3B3E.tmp
      2011-04-21 20:59 . 2011-04-21 20:59 0 ----a-w- c:\programdata\xml361E.tmp
      .
      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2011-05-12 00:03 . 2011-05-12 00:03 14858 ----a-w- C:\UsbFix_Upload_Me_YANNICK-PC.zip
      2011-04-21 19:35 . 2011-02-03 19:56 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
      2011-04-21 06:33 . 2011-03-21 11:03 2306328 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
      2011-04-21 06:32 . 2011-03-21 10:43 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
      2011-04-11 19:17 . 2011-04-11 19:17 2724120 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
      2011-04-11 19:16 . 2011-04-11 19:16 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
      2011-04-11 19:16 . 2011-04-11 19:16 639296 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
      2011-04-08 05:14 . 2011-02-23 06:28 8411752 ----a-w- c:\windows\system32\nvwgf2umx.dll
      2011-04-08 05:14 . 2011-02-23 06:28 6299752 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
      2011-04-08 05:14 . 2011-02-23 06:28 10071656 ----a-w- c:\windows\SysWow64\nvd3dum.dll
      2011-04-08 05:14 . 2010-07-10 04:38 2273896 ----a-w- c:\windows\system32\nvapi64.dll
      2011-04-07 21:19 . 2011-04-07 21:19 2582120 ----a-w- c:\windows\system32\nvsvcr.dll
      2011-04-07 21:19 . 2011-04-07 21:19 117864 ----a-w- c:\windows\system32\nvmctray.dll
      2011-04-07 21:19 . 2011-04-07 21:19 1012328 ----a-w- c:\windows\system32\nvvsvc.exe
      2011-04-07 21:19 . 2011-04-07 21:19 797288 ----a-w- c:\windows\system32\easyUpdatusAPIU64.dll
      2011-04-07 21:19 . 2011-04-07 21:19 6338152 ----a-w- c:\windows\system32\nvcpl.dll
      2011-04-07 21:18 . 2011-04-07 21:18 3041384 ----a-w- c:\windows\system32\nvsvc64.dll
      2011-03-21 10:43 . 2011-03-21 10:43 639296 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
      2011-03-14 22:04 . 2011-03-14 22:04 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
      2011-03-14 22:04 . 2011-03-14 22:04 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
      2011-03-14 22:04 . 2011-03-14 22:04 669184 ----a-w- c:\windows\SysWow64\pbsvc.exe
      2011-03-09 06:04 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
      2011-03-04 06:19 . 2011-04-27 06:28 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
      2011-03-04 06:19 . 2011-04-27 06:28 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
      2011-02-23 06:28 . 2011-02-23 06:28 1614440 ----a-w- c:\windows\system32\nvdispco642090.dll
      2011-02-23 06:28 . 2011-02-23 06:28 1359976 ----a-w- c:\windows\system32\nvgenco642040.dll
      2011-02-22 20:50 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
      2011-02-22 20:50 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
      2011-02-19 12:05 . 2011-03-09 06:07 1139200 ----a-w- c:\windows\system32\FntCache.dll
      2011-02-19 12:04 . 2011-03-09 06:07 1544192 ----a-w- c:\windows\system32\DWrite.dll
      2011-02-19 12:04 . 2011-03-09 06:07 902656 ----a-w- c:\windows\system32\d2d1.dll
      2011-02-19 06:30 . 2011-03-09 06:07 1076736 ----a-w- c:\windows\SysWow64\DWrite.dll
      2011-02-19 06:30 . 2011-03-09 06:07 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
      .
      .
      ((((((((((((((((((((((((((((( SnapShot@2011-05-12_18.36.55 )))))))))))))))))))))))))))))))))))))))))
      .
      - 2011-02-13 22:52 . 2011-05-12 18:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
      + 2011-02-13 22:52 . 2011-05-12 21:44 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
      - 2009-07-14 04:54 . 2011-05-12 18:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
      + 2009-07-14 04:54 . 2011-05-12 21:44 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
      + 2009-07-14 04:54 . 2011-05-12 21:44 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
      - 2009-07-14 04:54 . 2011-05-12 18:35 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
      - 2009-07-14 04:54 . 2011-05-12 18:35 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
      + 2009-07-14 04:54 . 2011-05-12 21:44 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
      + 2011-02-01 19:01 . 2011-05-12 21:45 69878 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
      + 2009-07-14 05:10 . 2011-05-12 21:45 34072 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
      - 2009-07-14 05:10 . 2011-05-12 18:37 34072 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
      + 2011-02-01 17:45 . 2011-05-12 21:45 12574 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-4232598072-1058645508-674976008-1000_UserData.bin
      - 2011-05-12 18:35 . 2011-05-12 18:35 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
      + 2011-05-12 21:43 . 2011-05-12 21:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
      - 2011-05-12 18:35 . 2011-05-12 18:35 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
      + 2011-05-12 21:43 . 2011-05-12 21:43 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
      + 2011-02-02 12:06 . 2011-05-12 20:49 384816 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin
      - 2009-07-14 05:01 . 2011-05-12 18:34 430124 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
      + 2009-07-14 05:01 . 2011-05-12 21:43 430124 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
      + 2011-02-02 02:13 . 2011-05-12 21:43 22749181 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4232598072-1058645508-674976008-1000-8192.dat
      - 2011-02-02 02:13 . 2011-05-12 18:34 22749181 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-4232598072-1058645508-674976008-1000-8192.dat
      .
      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4
      .
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
      "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
      "a-squared"="c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2guard.exe" [2011-03-10 3438992]
      "ThreatFire"="c:\program files (x86)\ThreatFire\TFTray.exe" [2010-01-14 378128]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "ConsentPromptBehaviorAdmin"= 5 (0x5)
      "ConsentPromptBehaviorUser"= 3 (0x3)
      "EnableUIADesktopToggle"= 0 (0x0)
      "EnableLinkedConnections"= 1 (0x1)
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
      "NoActiveDesktop"= 0
      "NoActiveDesktopChanges"= 0
      "ForceActiveDesktopOn"= 0 (0x0)
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
      SetupExecute REG_MULTI_SZ \0
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
      Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
      .
      R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
      R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
      R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 136176]
      R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files (x86)\ma-config.com\Drivers\driverhardwarev2x64.sys [2010-08-30 15872]
      R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 136176]
      R3 maconfservice;Ma-Config Service;c:\program files (x86)\ma-config.com\maconfservice.exe [2011-04-12 311744]
      R3 netr7364;RT73 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr7364.sys [x]
      R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
      R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Professionnel Personnel 2010.SP1d\RpcAgentSrv.exe [2009-08-10 93336]
      R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
      R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
      R3 tsusbhub;tsusbhub; [x]
      R4 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
      S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys [x]
      S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys [x]
      S1 a2injectiondriver;a2injectiondriver;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys [2010-09-05 48216]
      S1 a2util;a-squared Malware-IDS utility driver;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys [2010-05-05 14720]
      S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
      S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
      S2 a2AntiMalware;Emsisoft Anti-Malware 5.0 - Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [2011-03-29 2860800]
      S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
      S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-04-07 810120]
      S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
      S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
      S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
      S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-04-08 2218600]
      S2 ThreatFire;ThreatFire;c:\program files (x86)\ThreatFire\TFService.exe service [x]
      S3 a2acc;a2acc;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [2011-02-20 85800]
      S3 dvdfab;dvdfab;c:\windows\system32\drivers\dvdfab.sys [x]
      S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
      S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
      S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
      S3 TfNetMon;TfNetMon;c:\windows\system32\drivers\TfNetMon.sys [x]
      .
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
      2009-06-17 11:11 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
      .
      Contenu du dossier 'Tâches planifiées'
      .
      2011-05-12 c:\windows\Tasks\GlaryInitialize.job
      - c:\program files (x86)\Glary Utilities\initialize.exe [2011-04-15 15:24]
      .
      2011-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 19:45]
      .
      2011-05-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-01 19:45]
      .
      .
      --------- x86-64 -----------
      .
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-04-07 2839840]
      .
      [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
      "{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]
      .
      ------- Examen supplémentaire -------
      .
      uLocal Page = c:\windows\SysWOW64\blank.htm
      uStart Page = hxxp://www.google.com/
      mLocal Page = c:\windows\SysWOW64\blank.htm
      IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
      IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
      TCP: {9A5C295B-5CAA-46A1-8439-74960B6D020D} = 208.67.222.222,208.67.220.220
      FF - ProfilePath - c:\users\yannick\AppData\Roaming\Mozilla\Firefox\Profiles\4sptc414.default\
      FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
      FF - prefs.js: network.proxy.ftp - localhost
      FF - prefs.js: network.proxy.ftp_port - 8118
      FF - prefs.js: network.proxy.http - localhost
      FF - prefs.js: network.proxy.http_port - 8118
      FF - prefs.js: network.proxy.socks - localhost
      FF - prefs.js: network.proxy.socks_port - 9050
      FF - prefs.js: network.proxy.ssl - localhost
      FF - prefs.js: network.proxy.ssl_port - 8118
      FF - prefs.js: network.proxy.type - 0
      .
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\ThreatFire]
      "AlternateImagePath"=""
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
      "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD\000.fcl"
      .
      ------------------------ Autres processus actifs ------------------------
      .
      c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
      c:\windows\SysWOW64\PnkBstrA.exe
      c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
      c:\program files (x86)\ThreatFire\TFService.exe
      c:\program files (x86)\Windows Live\Contacts\wlcomm.exe
      .
      **************************************************************************
      .
      Heure de fin: 2011-05-12 23:56:50 - La machine a redémarré
      ComboFix-quarantined-files.txt 2011-05-12 21:56
      ComboFix2.txt 2011-05-12 20:05
      ComboFix3.txt 2011-05-12 18:49
      .
      Avant-CF: 163 898 130 432 octets libres
      Après-CF: 163 685 199 872 octets libres
      .
      - - End Of File - - 465EBD95DBF4963B079731D2B2CF3760
      0
  16. gen-hackman
     
    supprime pre_scan retelcharge-le et relance-le
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      pareil que tout à l'heure; rien à faire, ni en .exe, .com, .scr, ni en le renommant winlogon et en changeant les extensions
      0
  17. gen-hackman
     
    ▶ Télécharge : Gmer (by Przemyslaw Gmerek) et enregistre-le sur ton bureau

    Desactive toutes tes protections le temps du scan de gMer

    Pour XP => double clique sur gmer.exe
    Pour Vista et 7 => clique droit "executer en tant que...."

    ▶ clique sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.

    ▶ Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      GMER 1.0.15.15627 - http://www.gmer.net
      Rootkit scan 2011-05-13 00:49:29
      Windows 6.1.7601 Service Pack 1
      Running: gmer.exe


      ---- Registry - GMER 1.0.15 ----

      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x01 0x4E 0xE9 0x72 ...
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files (x86)\DAEMON Tools Lite\
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0xA0 0x02 0x00 0x00 ...
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x24 0x9F 0x0C 0x3A ...
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x71 0x8A 0x0D 0xBD ...
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1@hdf12 0x11 0x24 0x21 0xC3 ...
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2
      Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2@hdf12 0x11 0x24 0x21 0xC3 ...
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x01 0x4E 0xE9 0x72 ...
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files (x86)\DAEMON Tools Lite\
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0xA0 0x02 0x00 0x00 ...
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x24 0x9F 0x0C 0x3A ...
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x71 0x8A 0x0D 0xBD ...
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1 (not active ControlSet)
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq1@hdf12 0x11 0x24 0x21 0xC3 ...
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2 (not active ControlSet)
      Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq2@hdf12 0x11 0x24 0x21 0xC3 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@e2e25e6dec4c60cd2d0e875b102d6d25\r\n 0x3C 0x2B 0x1A 0xC9 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@d45f472b218c6cb099061f3dae768813\r\n 0x87 0xB4 0x8C 0x4F ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@58cc430ee5748f0ae58177880c20d518\r\n 0xE7 0xE0 0x85 0xD5 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@9b59baf14fdb26fa43d7814e48c153c5\r\n 0x0B 0xCC 0xE2 0x8E ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@839cc7d9b6189b86fdfcbbaee38ff2e2\r\n 0x89 0x72 0x06 0x45 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@b09797748d0a4d1c68c117395abb88e3\r\n 0x9B 0x6D 0x95 0xD2 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@6bd0166fa0659a84ed178e3a26da50bd\r\n 0xC3 0xF5 0x28 0xDC ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@0401edd79a52789819f3f518a7ff015b\r\n 0xA9 0xE1 0x6F 0x53 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@5747a57c90ed4391507af4d1da6958d2\r\n 0xB8 0x29 0x46 0x0D ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@055e980cf119ad7759ddd568fd1940d1\r\n 0xA1 0xBD 0x84 0xB6 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@9982f70d70444ffd22ce44b4a583f909\r\n 0xFB 0x8E 0xCD 0x76 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@b462d940d024499c3f1d2f8e81959659\r\n 0x5C 0x9A 0x83 0x17 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@f44c7a2928f053ec7850b52b718b9c5e\r\n 0xD3 0x11 0xFB 0x8E ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@470f656f838fb858f9954c6fb312467c\r\n 0x0F 0x48 0xD6 0x39 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@37bafca503169ebbce2237e4f9709544\r\n 0xEB 0x67 0x3A 0xE2 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@a9680a9b212c56ba39a30595d5cb78b4\r\n 0xFA 0xBA 0xD1 0xBD ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@eca006660f2ea3e0d0174cd0e02ecc9e\r\n 0x5C 0x8F 0xC2 0xF5 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@e12ed859510444e4538744e60dca87fe\r\n 0x99 0xA4 0x5A 0xFB ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@3b574445c48cf19f9f10bc08a80f45ab\r\n 0xD4 0xF0 0xB7 0x29 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@2dc95dbc36a32543e6e59d5f8bb3c2d5\r\n 0xDF 0xB1 0xD9 0xD6 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@7533e404d6ded7fa592930a17f4f6e08\r\n 0x87 0xB4 0x8C 0x4F ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@267121d13f1ec45b05211ff3a6bf228f\r\n 0xF9 0xC5 0x92 0x5F ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@8687064c1cd380ddc6e32339af96eb13\r\n 0x78 0x61 0xF5 0x33 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@7ac2d74436da3a6327f86b09570df408\r\n 0x31 0x80 0x7A 0x1F ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@db2997cfe42e17aa35b0faad8f7cacaf\r\n 0x45 0x39 0x83 0x22 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@d37b61f7320b87f50a69d8f464718302\r\n 0x92 0x6A 0xED 0xDA ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@cb2ae97747d01f133a811a9f096c844f\r\n 0x5A 0xD1 0x48 0xC0 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@6015ac7e2e00084f609e9b18aaf6960b\r\n 0x57 0x1E 0x90 0xAC ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@8762da002fcb1af401a6a2c9bce6a4ef\r\n 0x79 0x40 0xB2 0x8E ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@459f6bf78db1b92bb26bdb6b5c3b86e1\r\n 0xEA 0x7D 0xBC 0x25 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@f856c5302a133dd4dc8620c377f8e84e\r\n 0x30 0x8B 0x3B 0x01 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@c3338e966c55874a1fbfe7844c8041ee\r\n 0xE7 0xE0 0x85 0x15 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@c0ffbda4beb9b482199e57430477fc07\r\n 0x27 0x9E 0x15 0x0D ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@7d600de2dea576cefc1444d7a1314373\r\n 0x62 0xDF 0xB1 0x59 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@248de9c40abdcecc78e3db97c9f7a81f\r\n 0xFC 0x6D 0x8A 0x91 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@96577bf3a20a9095f8dc21adc67e76e9\r\n 0x77 0x8D 0xF9 0xBA ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@378436c7b6ea200ab002e8b05a5770dd\r\n 0xB2 0xD9 0x56 0xA9 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@67d67d72491baa7209acc9c6320be487\r\n 0xE7 0xD5 0xC4 0x73 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@dbd09d0446955ef25205c03c98deed6b\r\n 0xA2 0xA7 0x02 0x33 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@7cf8c75c95a6d2ba2d1afc1b83e6acbb\r\n 0x09 0xED 0x25 0xF4 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@1a763aae9ce198900e63a2f6a5bf1b75\r\n 0x74 0xDA 0x40 0xA7 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@28605074b7e5018322661d5e6d82f3bd\r\n 0xFB 0x99 0x8E 0x98 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@a984d024256d71eedb1f770e4aa7c529\r\n 0xDA 0x40 0xA7 0x4D ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@baf0c30f57095d180c265d21252b70ae\r\n 0x8D 0x04 0x7C 0xB3 ...
      Reg HKCU\Software\Microsoft\Windows Live\Companion\nikopol57@live.fr@a1091ad63ce6807499a2f31f506b6605\r\n 0x5A 0xC6 0x87 0x1E ...

      ---- EOF - GMER 1.0.15 ----
      0
  18. gen-hackman
     
    alors je comprends pas....

    repasse une suppression d'USBFix en mode sans echec
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      ############################## | UsbFix 7.044 | [Deletion]

      User: yannick (Administrator) # YANNICK-PC [HP-Pavilion KP219AA-ABF m9273.fr]
      Updated 25/04/2011 by TeamXscript
      Started at 01:07:47 | 13/05/2011
      Website: http://www.teamxscript.org
      Submit your sample: http://www.teamxscript.org/Upload.php
      Contact: TeamXscript.ElDesaparecido@gmail.com

      CPU: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
      CPU 2: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
      Microsoft Windows 7 Édition Intégrale (6.1.7601 64-Bit) # Service Pack 1
      Internet Explorer 9.0.8112.16421

      RAM -> 4095 Mb
      C:\ (%systemdrive%) -> Fixed drive # 244 Gb (152 Mb free - 62%) [] # NTFS
      D:\ -> Fixed drive # 466 Gb (135 Mb free - 29%) [] # NTFS
      E:\ -> CD-ROM
      F:\ -> CD-ROM
      I:\ -> CD-ROM
      J:\ -> CD-ROM
      K:\ -> Fixed drive # 221 Gb (94 Mb free - 42%) [] # NTFS

      ################## | Files # Infected Folders |


      Deleted ! C:\$RECYCLE.BIN\S-1-5-21-4232598072-1058645508-674976008-1000
      Deleted ! D:\$RECYCLE.BIN\S-1-5-21-4232598072-1058645508-674976008-1000
      Deleted ! K:\$RECYCLE.BIN\S-1-5-21-4232598072-1058645508-674976008-1000

      ################## | Registry |

      Deleted ! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

      ################## | Mountpoints2 |


      ################## | Listing |

      [13/05/2011 - 01:09:48 | D ] C:\$RECYCLE.BIN
      [12/05/2011 - 02:03:47 | RAD ] C:\Autorun.inf
      [22/02/2011 - 23:10:00 | D ] C:\Boot
      [20/11/2010 - 14:40:07 | RASH | 383786] C:\bootmgr
      [02/02/2011 - 03:46:46 | RASH | 8192] C:\BOOTSECT.BAK
      [12/05/2011 - 23:56:57 | N | 28123] C:\ComboFix.txt
      [11/05/2011 - 00:18:59 | D ] C:\Config.Msi
      [14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1028.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1031.txt
      [07/11/2007 - 08:00:40 | N | 10134] C:\eula.1033.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1036.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1040.txt
      [07/11/2007 - 08:00:40 | N | 118] C:\eula.1041.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.1042.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.2052.txt
      [07/11/2007 - 08:00:40 | N | 17734] C:\eula.3082.txt
      [07/11/2007 - 08:00:40 | N | 1110] C:\globdata.ini
      [13/05/2011 - 01:02:14 | ASH | 3220664320] C:\hiberfil.sys
      [04/05/2011 - 03:53:14 | N | 100] C:\index.ini
      [07/11/2007 - 08:00:40 | N | 843] C:\install.ini
      [07/11/2007 - 08:44:20 | N | 75280] C:\install.res.1028.dll
      [07/11/2007 - 08:44:20 | N | 95248] C:\install.res.1031.dll
      [07/11/2007 - 08:44:20 | N | 90128] C:\install.res.1033.dll
      [07/11/2007 - 08:44:20 | N | 96272] C:\install.res.1036.dll
      [07/11/2007 - 08:44:20 | N | 94224] C:\install.res.1040.dll
      [07/11/2007 - 08:44:20 | N | 80400] C:\install.res.1041.dll
      [07/11/2007 - 08:44:20 | N | 78864] C:\install.res.1042.dll
      [07/11/2007 - 08:44:20 | N | 74768] C:\install.res.2052.dll
      [07/11/2007 - 08:44:20 | N | 95248] C:\install.res.3082.dll
      [21/09/2010 - 00:50:14 | D ] C:\Intel
      [22/08/2010 - 17:31:24 | N | 177] C:\ITB.log
      [13/05/2011 - 00:23:12 | D ] C:\Kill'em
      [02/12/2006 - 00:37:14 | N | 904704] C:\msdia80.dll
      [29/10/2010 - 01:32:30 | RD ] C:\MSOCache
      [26/08/2010 - 18:49:00 | D ] C:\NVIDIA
      [13/05/2011 - 01:02:16 | ASH | 4294221824] C:\pagefile.sys
      [12/05/2011 - 02:54:31 | N | 512] C:\PhysicalDisk0_MBR.bin
      [13/05/2011 - 00:23:12 | N | 7677] C:\Pre_Scan.txt
      [25/04/2011 - 00:45:38 | D ] C:\Program Files
      [12/05/2011 - 11:06:59 | D ] C:\Program Files (x86)
      [12/05/2011 - 23:41:55 | D ] C:\ProgramData
      [12/05/2011 - 23:57:17 | D ] C:\Qoobox
      [01/02/2011 - 19:06:33 | D ] C:\Recovery
      [12/05/2011 - 23:22:40 | SHD ] C:\System Volume Information
      [12/05/2011 - 11:09:01 | N | 100] C:\txt
      [09/05/2011 - 02:02:21 | D ] C:\UnrealTournament
      [13/05/2011 - 01:09:49 | D ] C:\UsbFix
      [13/05/2011 - 01:07:49 | A | 892] C:\UsbFix.txt
      [12/05/2011 - 02:03:47 | N | 14858] C:\UsbFix_Upload_Me_YANNICK-PC.zip
      [05/05/2011 - 13:37:46 | D ] C:\Users
      [07/11/2007 - 08:00:40 | N | 5686] C:\vcredist.bmp
      [07/11/2007 - 08:50:40 | N | 1927956] C:\VC_RED.cab
      [07/11/2007 - 08:53:12 | N | 242176] C:\VC_RED.MSI
      [12/05/2011 - 23:57:05 | D ] C:\Windows
      [12/05/2011 - 21:26:13 | D ] C:\yannick
      [13/05/2011 - 01:09:48 | D ] D:\$RECYCLE.BIN
      [12/05/2011 - 02:03:47 | RAD ] D:\Autorun.inf
      [18/03/2011 - 16:29:30 | D ] D:\documents
      [01/05/2011 - 20:24:31 | D ] D:\images
      [11/05/2011 - 22:19:51 | D ] D:\incoming
      [09/05/2011 - 02:08:21 | D ] D:\jeux
      [10/05/2011 - 13:45:53 | D ] D:\Music
      [07/05/2011 - 02:04:56 | D ] D:\programmes
      [16/11/2010 - 02:38:58 | SHD ] D:\System Volume Information
      [15/04/2011 - 13:24:43 | D ] D:\Videos
      [10/11/2010 - 02:19:20 | N | 691] D:\Yannick - Raccourci.lnk
      [13/05/2011 - 01:09:48 | D ] K:\$RECYCLE.BIN
      [12/05/2011 - 02:03:47 | RAD ] K:\Autorun.inf
      [02/05/2011 - 13:49:00 | N | 528] K:\MediaID.bin
      [02/05/2011 - 17:32:42 | SHD ] K:\System Volume Information
      [02/05/2011 - 16:26:01 | D ] K:\WindowsImageBackup
      [02/05/2011 - 13:49:33 | D ] K:\YANNICK-PC

      ################## | Vaccin |

      C:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
      D:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)
      K:\Autorun.inf -> Vaccine created by UsbFix (TeamXscript)

      ################## | Upload |

      Please send the file: C:\UsbFix_Upload_Me_YANNICK-PC.zip
      http://www.teamxscript.org/Upload.php
      Thank you for your contribution.

      ################## | E.O.F |
      0
  19. gen-hackman
     
    re

    poste le contenu de ceci ?

    C:\Pre_Scan.txt
    0
    1. papa__ours Messages postés 510 Statut Membre 38
       
      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan 1.0.1.2 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

      ¤¤¤¤¤ XP | Vista | Seven - 32/64 bits ¤¤¤¤¤

      Mis à jour le 12/05/2011 | 22.30 par g3n-h@ckm@n
      Utilisateur : yannick (Administrateurs)
      Ordinateur : YANNICK-PC

      Système d'exploitation : Windows 7 Ultimate (64 bits)
      Internet Explorer : 9.0.8112.16421
      Mozilla Firefox : 4.0.1 (fr)

      Scan : 00:23:08 | 13/05/2011

      ¤¤¤¤¤¤¤¤¤¤¤ Processus en cours

      848 | C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe - SYSTEM - Normal - 612
      1636 | C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe - SYSTEM - Normal - 612
      1728 | C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe - SYSTEM - Normal - 612
      1776 | C:\Windows\SysWOW64\PnkBstrA.exe - SYSTEM - Normal - 612
      1816 | c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe - SYSTEM - Normal - 612
      1936 | C:\Program Files (x86)\ThreatFire\TFService.exe - SYSTEM - Normal - 612
      5112 | C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe - SYSTEM - Normal - 612
      3832 | C:\Program Files (x86)\Nero\Update\NASvc.exe - SYSTEM - Normal - 612
      3620 | C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe - UpdatusUser - Normal - 612
      1676 | C:\Windows\sysWOW64\wbem\wmiprvse.exe - NETWORK SERVICE - Normal - 784
      3060 | C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe - yannick - Normal - 784
      4928 | C:\Users\yannick\Desktop\winlogon.scr - yannick - Normal - 2452
      3324 | C:\Windows\SysWOW64\cmd.exe - yannick - Normal - 4928
      1784 | C:\Kill'em\Pv.exe - yannick - Normal - 3324

      ¤¤¤¤¤¤¤¤¤¤ Winlogon

      [HKLM | Winlogon] | Shell : Explorer.exe
      [HKLM | Winlogon] | AutoRestartShell : 1
      [HKLM | Winlogon] | userinit : C:\Windows\SysWOW64\userinit.exe,
      [HKLM | Winlogon] | PowerDownAfterShutdown : 1
      [HKLM | Winlogon] | System :

      ¤¤¤¤¤¤¤¤¤¤ Associations

      [.exe] : exefile
      [exefile | command] : "%1" %*
      [.com] : ComFile
      [comfile | command] : "%1" %*
      [.reg] : regfile
      [regfile | command] : regedit.exe "%1"
      [.scr] : scrfile
      [scrfile | command] : "%1" /S
      [.bat] : batfile
      [batfile | command] : "%1" %*
      [.cmd] : cmdfile
      [cmdfile | command] : "%1" %*
      [.pif] : piffile
      [piffile | command] : "%1" %*
      [.url] : InternetShortcut
      [InternetShortcut | command] : "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l -> "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l
      [Application.Manifest | command] : rundll32.exe dfshim.dll,ShOpenVerbApplication %1
      [Application.Reference | command] : rundll32.exe dfshim.dll,ShOpenVerbShortcut %1|%2
      [Folder | command] : C:\Windows\explorer.exe

      ¤

      [Firefox | Command] | @ : "C:\Program Files (x86)\Mozilla Firefox\Firefox.exe"
      [Firefox - Safemode | Command] | @ : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode
      [IE | Command] | @ : "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
      [Applications | IE | Command] | @ : "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1
      [Assoc | Applications] | @ : http://shell.windows.com/fileassoc/%04x/xml/redir.asp?Ext=%s

      ¤¤¤¤¤¤¤¤¤¤ Divers

      [HKCU | Desktop] | Wallpaper : C:\Users\yannick\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
      [HKLM | policies\Explorer] | NoDriveTypeAutoRun : 145
      [HKLM | policies\Explorer] | NoActiveDesktop : 0
      [HKLM | policies\Explorer] | NoActiveDesktopChanges : 0

      ¤¤¤¤¤¤¤¤¤¤ Services

      [Ndisuio] | Start : 3
      [lmhosts] | Start : 2 : Actif
      [LanmanWorkstation] | Start : 2 : Actif
      [LanmanServer] | Start : 2 : Actif
      [agp440] | Start : 2 : Redémarré
      [AudioEndpointBuilder] | Start : 2 : Actif
      [Audiosrv] | Start : 2 : Actif
      [BFE] | Start : 2 : Actif
      [Bits] | Start : 2 : Actif
      [CryptSvc] | Start : 2 : Actif
      [EapHost] | Start : 2 : Actif
      [Wlansvc] | Start : 2 : Actif
      [SharedAccess] | Start : 2 : Redémarré
      [windefend] | Start : 3 -> 2 : Redémarré
      [wuauserv] | Start : 2 : Actif
      [WerSvc] | Start : 2 : Actif
      [wscsvc] | Start : 2 : Actif

      ¤¤¤¤¤¤¤¤¤¤ Internet Explorer

      [HKCU | Main] | Start Page : https://www.google.com/?gws_rd=ssl
      [HKCU | Main] | Local Page : C:\Windows\SysWOW64\blank.htm
      [HKCU | Main] | Search Page : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

      [HKLM | Main] | Start Page : https://www.msn.com/fr-fr/?ocid=iehp
      [HKLM | Main] | Local Page : C:\Windows\SysWOW64\blank.htm
      [HKLM | Main] | Default_Search_URL : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      [HKLM | Main] | Default_Page_URL : https://www.msn.com/fr-fr/?ocid=iehp
      [HKLM | Main] | Search Page : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

      ¤¤¤¤¤¤¤¤¤¤ Processus

      C:\Windows\explorer.exe -> Processus stoppé
      C:\Windows\explorer.exe -> Processus stoppé
      C:\Windows\explorer.exe -> Processus stoppé
      C:\Windows\explorer.exe -> Processus stoppé

      ¤¤¤¤¤¤¤¤¤¤ Traitement Fichiers | Dossiers | Registre

      Mise en quarantaine : C:\Windows\Temp\Cab3754.tmp
      Mise en quarantaine : C:\Windows\Temp\Tar3765.tmp

      ¤¤¤¤¤¤¤¤¤¤ IFEO


      ¤¤¤¤¤¤¤¤¤¤ Mountpoints2


      ¤¤¤¤¤¤¤¤¤¤ Listing %AppData%

      C:\Users\yannick\AppData\Roaming\Acronis
      C:\Users\yannick\AppData\Roaming\Adobe
      C:\Users\yannick\AppData\Roaming\Ashampoo
      C:\Users\yannick\AppData\Roaming\Brother
      C:\Users\yannick\AppData\Roaming\Corel
      C:\Users\yannick\AppData\Roaming\CyberLink
      C:\Users\yannick\AppData\Roaming\DAEMON Tools Lite
      C:\Users\yannick\AppData\Roaming\DivX
      C:\Users\yannick\AppData\Roaming\GlarySoft
      C:\Users\yannick\AppData\Roaming\Google
      C:\Users\yannick\AppData\Roaming\Identities
      C:\Users\yannick\AppData\Roaming\InstallShield
      C:\Users\yannick\AppData\Roaming\JLC's Software
      C:\Users\yannick\AppData\Roaming\Leadertech
      C:\Users\yannick\AppData\Roaming\Logishrd
      C:\Users\yannick\AppData\Roaming\Logitech
      C:\Users\yannick\AppData\Roaming\Macromedia
      C:\Users\yannick\AppData\Roaming\Malwarebytes
      C:\Users\yannick\AppData\Roaming\Media Center Programs
      C:\Users\yannick\AppData\Roaming\Microsoft
      C:\Users\yannick\AppData\Roaming\Mozilla
      C:\Users\yannick\AppData\Roaming\Musicmatch
      C:\Users\yannick\AppData\Roaming\Nero
      C:\Users\yannick\AppData\Roaming\Offline Explorer
      C:\Users\yannick\AppData\Roaming\OpenDNS Updater
      C:\Users\yannick\AppData\Roaming\Skype
      C:\Users\yannick\AppData\Roaming\skypePM
      C:\Users\yannick\AppData\Roaming\Stardock
      C:\Users\yannick\AppData\Roaming\Stellarium
      C:\Users\yannick\AppData\Roaming\Tor
      C:\Users\yannick\AppData\Roaming\uTorrent
      C:\Users\yannick\AppData\Roaming\Vidalia
      C:\Users\yannick\AppData\Roaming\vlc

      ¤¤¤¤¤¤¤¤¤¤ Listing %CommonAppData%

      C:\ProgramData\Adobe
      C:\ProgramData\Application Data
      C:\ProgramData\ashampoo
      C:\ProgramData\Brother
      C:\ProgramData\Corel
      C:\ProgramData\CyberLink
      C:\ProgramData\DAEMON Tools Lite
      C:\ProgramData\Desktop
      C:\ProgramData\DivX
      C:\ProgramData\Documents
      C:\ProgramData\EA Core
      C:\ProgramData\Electronic Arts
      C:\ProgramData\eMule
      C:\ProgramData\ESET
      C:\ProgramData\ezsidmv.dat
      C:\ProgramData\Favorites
      C:\ProgramData\Google
      C:\ProgramData\Lavasoft
      C:\ProgramData\LightScribe
      C:\ProgramData\Logishrd
      C:\ProgramData\ma-config.com
      C:\ProgramData\Malwarebytes
      C:\ProgramData\Microsoft
      C:\ProgramData\Microsoft Help
      C:\ProgramData\Nero
      C:\ProgramData\NVIDIA
      C:\ProgramData\NVIDIA Corporation
      C:\ProgramData\PC Tools
      C:\ProgramData\Protexis
      C:\ProgramData\sandra.mda
      C:\ProgramData\Skype
      C:\ProgramData\Skype Extras
      C:\ProgramData\Solidshield
      C:\ProgramData\Start Menu
      C:\ProgramData\Sun
      C:\ProgramData\Templates
      C:\ProgramData\WorldWindData
      C:\ProgramData\xml208A.tmp
      C:\ProgramData\xml3331.tmp
      C:\ProgramData\xml361E.tmp
      C:\ProgramData\xml3B3E.tmp
      C:\ProgramData\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
      0
    2. gen-hackman
       
      tu peux supprimer ca ?

      C:\ProgramData\xml208A.tmp
      C:\ProgramData\xml3331.tmp
      C:\ProgramData\xml361E.tmp
      C:\ProgramData\xml3B3E.tmp
      0
    3. papa__ours Messages postés 510 Statut Membre 38
       
      oui, c'est fait
      0

Discussions similaires

download helper pour opera
tomgt4 -
Operationoeil -

3 réponses
Copain Pokémon et défi pour le faire évoluer
Pikachu -
Jean20B -

10 réponses
Éliminer Web Helper ?
Calvus -
justedufun -

8 réponses
La confidentialité avec les amis sur Pokémon Go
Alexstan -
Alexstan -

2 réponses
Wondershare Studio // INFECTION?
Pbagi -
PJT -

5 réponses