Windows Recovery et perte du son et du wifi !

RogueKiller V5.1.2 [13/05/2011] par Tigzy
contact sur http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Systeme d'exploitation: Windows 7 (6.1.7600 ) 64 bits version
Demarrage : Mode normal
Utilisateur: MAHER [Droits d'admin]
Mode: Raccourcis RAZ -- Date : 15/05/2011 09:49:31

Processus malicieux: 0

Attributs de fichiers restaures:
Bureau: Success 0 / Fail 0
Lancement rapide: Success 0 / Fail 0
Programmes: Success 0 / Fail 0
Menu demarrer: Success 0 / Fail 0
Dossier utilisateur: Success 3 / Fail 0
Mes documents: Success 0 / Fail 0
Mes favoris: Success 0 / Fail 6
Mes images: Success 0 / Fail 0
Ma musique: Success 0 / Fail 0
Mes videos: Success 0 / Fail 0
Disques locaux: Success 1 / Fail 1

Termine : << RKreport[56].txt >>
RKreport[10].txt ; RKreport[11].txt ; RKreport[12].txt ; RKreport[13].txt ; RKreport[14].txt ;
RKreport[15].txt ; RKreport[16].txt ; RKreport[17].txt ; RKreport[18].txt ; RKreport[19].txt ;
RKreport[1].txt ; RKreport[20].txt ; RKreport[21].txt ; RKreport[22].txt ; RKreport[23].txt ;
RKreport[24].txt ; RKreport[25].txt ; RKreport[26].txt ; RKreport[27].txt ; RKreport[28].txt ;
RKreport[29].txt ; RKreport[2].txt ; RKreport[30].txt ; RKreport[31].txt ; RKreport[32].txt ;
RKreport[33].txt ; RKreport[34].txt ; RKreport[35].txt ; RKreport[36].txt ; RKreport[37].txt ;
RKreport[38].txt ; RKreport[39].txt ; RKreport[3].txt ; RKreport[40].txt ; RKreport[41].txt ;
RKreport[42].txt ; RKreport[43].txt ; RKreport[44].txt ; RKreport[45].txt ; RKreport[46].txt ;
RKreport[47].txt ; RKreport[48].txt ; RKreport[49].txt ; RKreport[4].txt ; RKreport[50].txt ;
RKreport[51].txt ; RKreport[52].txt ; RKreport[53].txt ; RKreport[54].txt ; RKreport[55].txt ;
RKreport[56].txt ; RKreport[5].txt ; RKreport[6].txt ; RKreport[7].txt ; RKreport[8].txt ;
RKreport[9].txt

Merci pour ton aide d'abord,, hhhhh il est vrai que j'ai fais pas mal de manoeuvres et telechargé pas mal de trucs mais tu le verras toi meme puisque tu dois y connaitre plus que moi lol. le rapport suit et encore merci

j'arrive pas a poster tout le rapport , c peut etre parce qu'il est trop long??? je l'ai envoyé sur le site que tu m'as dit , mais ici j'arrive pas a le poster !!!!!!! que dois je faire ??

il a tout scanné mais il a rien trouvé ( Not found ) ,, et a la fin c'est un rapport blanc qui sort ou rien n'est ecrit ...

En ce qui concerne votre demande d'avant pour le rapport ZHPDiag , Je vous joints ici le lien si ça peut vous aider .

http://pjjoint.malekal.com/files.php?read=f15z15v12q8o8z15h9s7b8

http://cjoint.com/?AEplbbS4u88

c ce que j'ai pu faire c bon ??

j'ai suivi la premiere étape comme vous me l'aviez dit mais une fois que j'appuis sur GO , ça avance bien et puis ça s'arrete et il ya une petite fenetre qui sort ou c'est ecrit:( Violation d'accés a l'adresse 00427C96 dans le module 'ZHPFIX.EXE ' Lecture de l'adresse 0000001 D )
et puis ça bloque et ça n'avance plus !!!!!!!!

Clique droit -> Executer en tant qu'admin pour Vista ou Seven

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Version de la base de données: 6582

Windows 6.1.7600
Internet Explorer 9.0.8112.16421

15/05/2011 12:08:05
mbam-log-2011-05-15 (12-08-05).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 170891
Temps écoulé: 2 minute(s), 52 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté

alors aprés redemarrage , je vois que j'ai récupéré les fichiers du menu demarrer mais ils sont presque tous vide !! et je n'ai toujours pas de son , il a du faire beaucoup de dégats dis donc.

j'ai tout essayé depuis tt a l'heure, mais a chaque fois qu'il demarre il enleve les icones du bureaux et puis ya plus rien qui se passe pendant longtemps et je n'arrive pas a eteindre le pc qu'apres avoir forcé en l'eteignant par le bouton On/Off .
Ya pas une autre solution? parce qu'il n'a pas l'air de voiloir fonctionner. merci pour tt en toout cas

ComboFix 11-05-14.01 - MAHER 15/05/2011 16:47:28.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7600.0.1252.33.1036.18.4063.2887 [GMT 2:00]
Lancé depuis: c:\users\MAHER\Desktop\domino.exe
* Un nouveau point de restauration a été créé
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\ntuser.dat
c:\tdsskiller\tdsskiller.exe
c:\users\MAHER\AppData\Roaming\Adobe\plugs
c:\users\MAHER\AppData\Roaming\Adobe\plugs\mmc23373021.txt
c:\users\MAHER\AppData\Roaming\Adobe\shed
c:\users\MAHER\AppData\Roaming\Adobe\shed\thr1.chm
c:\users\MAHER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ShopperReports
c:\users\MAHER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ShopperReports\About Us.lnk
c:\users\MAHER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ShopperReports\Customer Support.lnk
c:\users\MAHER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ShopperReports\ShopperReports Uninstall Instructions.lnk
c:\windows\Downloaded Program Files\Install.inf
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-04-15 au 2011-05-15 ))))))))))))))))))))))))))))))))))))
.
.
2011-05-15 14:54 . 2011-05-15 14:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-15 14:26 . 2011-05-15 14:27 -------- d-----w- c:\users\MAHER\AppData\Local\{CA8886ED-F68C-47C0-A910-1B7C3FD7C6B8}
2011-05-15 13:32 . 2011-05-15 13:32 -------- d-----w- c:\program files\ma-config.com
2011-05-15 13:32 . 2011-05-15 13:32 -------- d-----w- c:\programdata\ma-config.com
2011-05-15 12:49 . 2011-05-15 12:49 -------- d-----w- c:\programdata\LightScribe
2011-05-15 12:12 . 2011-05-15 12:12 -------- d-----w- C:\Kill'em
2011-05-15 09:54 . 2010-11-29 15:42 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-05-15 08:26 . 2011-05-15 14:53 -------- d-----w- C:\tdsskiller
2011-05-15 08:03 . 2011-05-15 08:03 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-05-15 06:06 . 2011-05-15 09:46 -------- d-----w- c:\program files (x86)\ZHPDiag
2011-05-15 05:03 . 2011-05-15 05:03 -------- dc----w- c:\users\MAHER\AppData\Local\MigWiz
2011-05-15 02:26 . 2011-05-15 02:26 -------- d-----w- c:\users\MAHER\AppData\Local\{12C1EA56-1208-4263-A18B-3E3B813C1BDF}
2011-05-14 22:34 . 2011-05-15 07:07 -------- d-----w- c:\program files (x86)\GridinSoft Trojan Killer
2011-05-14 12:38 . 2011-04-11 08:21 8802128 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{367805B8-62F3-47DB-A62E-1C9ACFB5B28E}\mpengine.dll
2011-05-14 12:35 . 2011-05-14 12:35 -------- d-----w- c:\users\MAHER\AppData\Local\{EE9071A5-41AA-4DDD-B988-DBFD508C4BE3}
2011-05-14 03:45 . 2011-05-14 03:45 -------- d-----w- c:\program files (x86)\Ad-Remover
2011-05-14 03:12 . 2011-05-14 03:13 -------- d-----r- c:\program files (x86)\Skype
2011-05-14 01:58 . 2011-05-14 02:52 -------- d-----w- C:\Log
2011-05-14 00:28 . 2011-05-14 00:28 -------- d-----w- c:\users\MAHER\AppData\Roaming\Malwarebytes
2011-05-14 00:28 . 2011-05-14 00:28 -------- d-----w- c:\programdata\Malwarebytes
2011-05-14 00:28 . 2011-05-15 10:04 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-05-14 00:28 . 2010-11-29 15:42 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-13 23:30 . 2011-05-10 11:59 22360 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-05-13 23:30 . 2011-05-10 12:04 287576 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-05-13 23:30 . 2011-05-10 12:02 53592 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-05-13 23:30 . 2011-05-10 11:59 31064 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-05-13 23:30 . 2011-05-10 12:10 253888 ----a-w- c:\windows\system32\aswBoot.exe
2011-05-13 23:30 . 2011-05-10 12:04 600920 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-13 23:30 . 2011-05-10 11:59 64344 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-05-13 23:29 . 2011-05-10 12:10 40112 ----a-w- c:\windows\avastSS.scr
2011-05-13 23:29 . 2011-05-10 12:10 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-05-13 23:29 . 2011-05-13 23:29 -------- d-----w- c:\programdata\AVAST Software
2011-05-13 23:29 . 2011-05-13 23:29 -------- d-----w- c:\program files\AVAST Software
2011-05-13 23:18 . 2011-05-13 23:19 -------- d-----w- c:\users\MAHER\AppData\Local\{8CF2ADB5-5C49-4756-BCB7-AE11B951439C}
2011-05-13 22:53 . 2006-04-17 09:56 1207808 ------w- c:\windows\SysWow64\PhoenixDll.dll
2011-05-13 22:53 . 2004-10-16 19:46 178176 ------w- c:\windows\SysWow64\StellarProfile.dll
2011-05-13 22:53 . 2011-05-13 22:53 -------- d-----w- c:\program files (x86)\Stellar Phoenix Windows Data Recovery - Home
2011-05-13 22:53 . 2011-05-13 22:53 -------- d-----w- c:\program files (x86)\Avanquest_FR
2011-05-13 22:36 . 2011-05-14 22:30 -------- d-----w- c:\windows\1226A4C56F274C4EAE372B5512DE125A.TMP
2011-05-13 22:36 . 2011-05-13 22:36 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2011-05-13 11:17 . 2011-05-13 11:18 -------- d--h--w- c:\users\MAHER\AppData\Local\{2C4060C1-0A99-4BC0-8DF9-18C676F3CAD0}
2011-05-13 01:59 . 2011-05-15 03:07 -------- d-----w- c:\programdata\lP00000IeDnO00000
2011-05-12 22:03 . 2011-05-12 22:04 -------- d--h--w- c:\users\MAHER\AppData\Local\{22CFD11F-93CE-4317-96F0-F2648383198D}
2011-05-12 13:59 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-05-12 13:59 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2011-05-12 10:03 . 2011-05-12 10:03 -------- d--h--w- c:\users\MAHER\AppData\Local\{36C90B1E-6B25-4957-A25B-E47685CC7BF2}
2011-05-11 22:52 . 2011-05-11 22:52 -------- d-----w- c:\programdata\Skype Extras
2011-05-11 21:29 . 2011-04-09 06:45 5509504 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-05-11 21:29 . 2011-04-09 06:13 3957632 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-05-11 21:29 . 2011-04-09 06:13 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-05-11 21:29 . 2011-03-25 03:23 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-05-11 21:29 . 2011-03-25 03:23 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-05-11 21:29 . 2011-03-25 03:23 324608 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-05-11 21:29 . 2011-03-25 03:22 52224 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-05-11 21:29 . 2011-03-25 03:22 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-05-11 21:29 . 2011-03-25 03:22 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-05-11 21:29 . 2011-03-25 03:22 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-05-11 21:25 . 2011-05-11 21:25 -------- d--h--w- c:\users\MAHER\AppData\Local\{6F6D3FAA-4621-4FC8-A7D2-2380BDEAB286}
2011-05-10 12:21 . 2011-05-11 02:11 -------- d--h--w- c:\users\MAHER\AppData\Local\{F92524F2-C0C4-4423-8AC5-DAF9A824BB33}
2011-05-08 15:21 . 2011-05-10 00:20 -------- d--h--w- c:\users\MAHER\AppData\Local\{94E3680F-0118-4AC1-A746-B50CBEA3DB7D}
2011-05-07 23:19 . 2011-05-07 23:19 -------- d--h--w- c:\users\MAHER\AppData\Local\{2954BA2F-D618-4E16-A37B-283AB84F2435}
2011-05-07 11:18 . 2011-05-07 11:19 -------- d--h--w- c:\users\MAHER\AppData\Local\{BE787BD7-33D8-4844-8C1B-A9F849A37EAD}
2011-05-06 23:17 . 2011-05-06 23:18 -------- d--h--w- c:\users\MAHER\AppData\Local\{CA0322AB-44E8-496A-9723-CCBE40C8209F}
2011-05-06 11:17 . 2011-05-06 11:17 -------- d--h--w- c:\users\MAHER\AppData\Local\{906D88A4-09CB-4416-B716-047EF083A6EB}
2011-05-03 16:15 . 2011-05-05 20:56 -------- d--h--w- c:\users\MAHER\AppData\Local\{387A3A83-DF0E-4752-9599-4735015236DD}
2011-05-02 13:07 . 2011-04-14 16:47 89048 ------w- c:\program files (x86)\Mozilla Firefox\libEGL.dll
2011-05-02 13:07 . 2011-04-14 16:47 781272 ------w- c:\program files (x86)\Mozilla Firefox\mozsqlite3.dll
2011-05-02 13:07 . 2011-04-14 16:47 465880 ------w- c:\program files (x86)\Mozilla Firefox\libGLESv2.dll
2011-05-02 13:07 . 2011-04-14 16:47 1874904 ------w- c:\program files (x86)\Mozilla Firefox\mozjs.dll
2011-05-02 13:07 . 2011-04-14 16:47 15832 ------w- c:\program files (x86)\Mozilla Firefox\mozalloc.dll
2011-05-02 13:07 . 2011-04-14 16:47 142296 ------w- c:\program files (x86)\Mozilla Firefox\components\browsercomps.dll
2011-05-02 13:07 . 2010-01-01 08:00 1974616 ------w- c:\program files (x86)\Mozilla Firefox\D3DCompiler_42.dll
2011-05-02 13:07 . 2010-01-01 08:00 1892184 ------w- c:\program files (x86)\Mozilla Firefox\d3dx9_42.dll
2011-05-02 13:04 . 2011-05-02 13:05 -------- d--h--w- c:\users\MAHER\AppData\Local\{7B5B437C-1415-4380-B4FE-45A0F536207B}
2011-05-01 18:40 . 2011-05-01 18:40 -------- d--h--w- c:\users\MAHER\AppData\Local\{6DDC0F46-BEC6-4A77-B1F9-3D6622C473EF}
2011-04-30 15:54 . 2011-05-01 03:55 -------- d--h--w- c:\users\MAHER\AppData\Local\{C67E3F93-178E-45EC-A34E-440BC23489E9}
2011-04-29 14:30 . 2011-04-30 02:40 -------- d--h--w- c:\users\MAHER\AppData\Local\{36378FBC-DB6B-43B6-A4CF-AF9D2BAEC2C9}
2011-04-29 02:29 . 2011-04-29 02:29 -------- d--h--w- c:\users\MAHER\AppData\Local\{CBA81AAB-13C7-4030-8B87-93BB372CFD20}
2011-04-28 14:28 . 2011-04-28 14:28 -------- d--h--w- c:\users\MAHER\AppData\Local\{6F3723B1-CC72-4552-A0A5-5D641B283FC2}
2011-04-27 10:21 . 2011-04-27 22:22 -------- d--h--w- c:\users\MAHER\AppData\Local\{27295FE7-67B0-4A5D-8EAB-9F6128F89965}
2011-04-25 23:30 . 2011-04-25 23:30 -------- d--h--w- c:\users\MAHER\AppData\Local\{B1E731E6-6A70-4D47-BDF2-4CE731F45412}
2011-04-25 11:29 . 2011-04-25 11:29 -------- d--h--w- c:\users\MAHER\AppData\Local\{8DB21FB4-98FD-4AC6-8600-831A08AD2CF1}
2011-04-24 21:38 . 2011-04-24 21:39 -------- d--h--w- c:\users\MAHER\AppData\Local\{33FCF24A-3995-4808-9365-88702565A72F}
2011-04-23 14:07 . 2011-04-24 02:08 -------- d--h--w- c:\users\MAHER\AppData\Local\{12F60BCE-6048-4F8B-95B6-5A7945CD74F5}
2011-04-23 02:06 . 2011-04-23 02:07 -------- d--h--w- c:\users\MAHER\AppData\Local\{AD2967B3-90F2-4E6D-AB60-0BEEFBAEFA4A}
2011-04-22 14:06 . 2011-04-22 14:06 -------- d--h--w- c:\users\MAHER\AppData\Local\{89D53CA3-31FC-40DB-B467-21971EF29E7F}
2011-04-22 01:07 . 2011-04-22 01:07 -------- d--h--w- c:\users\MAHER\AppData\Local\{9829E0F4-5A03-4053-9C33-2E43041C1550}
2011-04-21 13:23 . 2011-04-21 13:23 159080 ---ha-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10138.bin
2011-04-21 13:00 . 2011-04-21 13:00 -------- d--h--w- c:\users\MAHER\AppData\Local\{7D41BC07-4D69-4519-9B2D-581073AF8655}
2011-04-21 00:59 . 2011-04-21 01:00 -------- d--h--w- c:\users\MAHER\AppData\Local\{2E7E7C94-76FE-4A69-BFD2-AAF688F34D1E}
2011-04-20 12:58 . 2011-04-20 12:59 -------- d--h--w- c:\users\MAHER\AppData\Local\{1CF96EE5-F4A0-4206-A2DE-8907231CF48A}
2011-04-20 00:58 . 2011-04-20 00:58 -------- d--h--w- c:\users\MAHER\AppData\Local\{6C2A605D-EADD-4CCE-9242-345B5A4CCC4E}
2011-04-19 12:57 . 2011-04-19 12:57 -------- d--h--w- c:\users\MAHER\AppData\Local\{F7D3F946-E864-4E66-92F4-9389B10CA5D4}
2011-04-18 22:14 . 2011-04-18 22:14 -------- d--h--w- c:\users\MAHER\AppData\Local\{F9A6532E-62A0-403F-BFB1-785658F23C78}
2011-04-18 10:13 . 2011-04-18 10:13 -------- d--h--w- c:\users\MAHER\AppData\Local\{60670B0C-9B33-4F72-ABEA-AC955A91C312}
2011-04-17 19:40 . 2011-03-08 06:14 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-04-17 19:34 . 2011-04-17 19:34 -------- d--h--w- c:\users\MAHER\AppData\Local\{994CA550-1FB7-48DC-972D-D1C42B4CD9DF}
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-31 10:53 . 2011-03-31 10:53 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-03-31 10:53 . 2011-03-31 10:53 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-03-31 10:53 . 2011-03-31 10:53 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-03-31 10:53 . 2011-03-31 10:53 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-03-31 10:53 . 2011-03-31 10:53 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-03-31 10:53 . 2011-03-31 10:53 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-03-31 10:53 . 2011-03-31 10:53 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-03-31 10:53 . 2011-03-31 10:53 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-03-31 10:53 . 2011-03-31 10:53 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-03-31 10:53 . 2011-03-31 10:53 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-03-31 10:53 . 2011-03-31 10:53 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-03-31 10:53 . 2011-03-31 10:53 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-03-31 10:53 . 2011-03-31 10:53 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-03-31 10:53 . 2011-03-31 10:53 448512 ----a-w- c:\windows\system32\html.iec
2011-03-31 10:53 . 2011-03-31 10:53 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-03-31 10:53 . 2011-03-31 10:53 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-03-31 10:53 . 2011-03-31 10:53 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-03-31 10:53 . 2011-03-31 10:53 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-03-31 10:53 . 2011-03-31 10:53 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-03-31 10:53 . 2011-03-31 10:53 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-03-31 10:53 . 2011-03-31 10:53 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-03-31 10:53 . 2011-03-31 10:53 2303488 ----a-w- c:\windows\system32\jscript9.dll
2011-03-31 10:53 . 2011-03-31 10:53 222208 ----a-w- c:\windows\system32\msls31.dll
2011-03-31 10:53 . 2011-03-31 10:53 1797632 ----a-w- c:\windows\SysWow64\jscript9.dll
2011-03-31 10:53 . 2011-03-31 10:53 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-03-31 10:53 . 2011-03-31 10:53 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-03-31 10:53 . 2011-03-31 10:53 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-03-31 10:53 . 2011-03-31 10:53 160256 ----a-w- c:\windows\system32\wextract.exe
2011-03-31 10:53 . 2011-03-31 10:53 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-03-31 10:53 . 2011-03-31 10:53 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-03-31 10:53 . 2011-03-31 10:53 1492992 ----a-w- c:\windows\system32\inetcpl.cpl
2011-03-31 10:53 . 2011-03-31 10:53 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-03-31 10:53 . 2011-03-31 10:53 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-03-31 10:53 . 2011-03-31 10:53 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-03-31 10:53 . 2011-03-31 10:53 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-03-31 10:53 . 2011-03-31 10:53 12288 ----a-w- c:\windows\system32\mshta.exe
2011-03-31 10:53 . 2011-03-31 10:53 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-03-31 10:53 . 2011-03-31 10:53 114176 ----a-w- c:\windows\system32\admparse.dll
2011-03-31 10:53 . 2011-03-31 10:53 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-03-31 10:53 . 2011-03-31 10:53 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-03-31 10:53 . 2011-03-31 10:53 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-03-31 10:53 . 2011-03-31 10:53 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-03-31 10:51 . 2011-03-31 10:51 135680 ---ha-w- c:\users\MAHER\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
2011-03-09 02:16 . 2010-06-24 09:33 18328 ---ha-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-04 06:17 . 2011-04-27 22:21 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2011-03-04 06:17 . 2011-04-27 22:21 347648 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2011-02-24 21:24 . 2009-11-29 22:45 639296 ---ha-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-02-20 15:34 . 2009-11-29 22:45 2724120 ---ha-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2011-02-20 15:34 . 2011-02-20 15:34 42776 ---ha-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2011-02-20 15:34 . 2009-12-09 20:06 639296 ---ha-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-02-19 06:37 . 2011-03-09 12:42 1135104 ----a-w- c:\windows\system32\FntCache.dll
2011-02-19 06:37 . 2011-03-09 12:42 1540608 ----a-w- c:\windows\system32\DWrite.dll
2011-02-19 06:36 . 2011-03-09 12:42 902656 ----a-w- c:\windows\system32\d2d1.dll
2011-02-19 05:32 . 2011-03-09 12:42 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-02-19 05:32 . 2011-03-09 12:42 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2009-03-27 24103720]
"AccelerometerSysTrayApplet"="c:\program files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe" [2009-07-13 75576]
"PPAP"="c:\program files (x86)\Common Files\PPLiveNetwork\PPAP.exe" [2010-04-06 185800]
"LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-06-17 2363392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2010-12-07 274608]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"UpdatePRCShortCut"="c:\program files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-02 98304]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-03-17 421888]
"QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-06-24 320056]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2010-06-15 141624]
"HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-06-22 60464]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"HideFastUserSwitching"= 0 (0x0)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"WallpaperStyle"= 2
.
[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-07 136176]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-07 136176]
R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\x64\maconfservice.exe [2011-05-01 420864]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
R4 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-04-24 483688]
R4 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-24 209768]
R4 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]
S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 driverhardwarev2x64;driverhardwarev2x64;c:\program files\ma-config.com\Drivers\driverhardwarev2x64.sys [2010-08-30 15872]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - DRIVERHARDWAREV2X64
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 10:11 451872 ------w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'
.
2011-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-07 18:17]
.
2011-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-07 18:17]
.
2011-04-23 c:\windows\Tasks\HPCeeScheduleForMAHER.job
- c:\program files (x86)\hewlett-packard\sdp\ceement\HPCEE.exe [2009-08-20 12:38]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-20 171520]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-07-21 610872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.msn.fr/
uLocal Page = c:\windows\SysWOW64\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
DPF: {EF0D1A14-1033-41A2-A589-240C01EDC078} - hxxp://download.pplive.com/config/pplite/pluginsetup.cab
FF - ProfilePath - c:\users\MAHER\AppData\Roaming\Mozilla\Firefox\Profiles\khaufo8e.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q=
FF - prefs.js: browser.search.selectedEngine - Bing
FF - prefs.js: browser.startup.homepage - hxxp://fr.msn.com/?ocid=iehp
FF - prefs.js: keyword.URL - hxxp://www.bing.com/search?mkt=fr-FR&form=MIAWB2&q=
FF - prefs.js: network.proxy.http - 41.234.203.252
FF - prefs.js: network.proxy.http_port - 80
FF - prefs.js: network.proxy.type - 4
.
- - - - ORPHELINS SUPPRIMES - - - -
.
BHO-{6ec85fcf-87ad-41d7-ae1f-f116f8ad4848} - (no file)
Toolbar-{6ec85fcf-87ad-41d7-ae1f-f116f8ad4848} - (no file)
Wow6432Node-HKCU-Run-hiiabc - c:\users\maher\appdata\local\hiiabc.exe
Wow6432Node-HKCU-Run-Firewall Aliase - c:\windows\mdm.exe
Wow6432Node-HKCU-Run-cacaoweb - c:\users\MAHER\AppData\Roaming\cacaoweb\cacaoweb.exe
Wow6432Node-HKLM-Run-SSDMonitor - c:\program files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
Wow6432Node-HKLM-Run-NortonOnlineBackupReminder - c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe
Wow6432Node-HKLM-Run-AppleSyncNotifier - c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
WebBrowser-{0FC85F5D-6207-4515-A490-45A549D285C0} - (no file)
HKLM-Run-SysTrayApp - c:\program files\IDT\WDM\sttray64.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-996174307-2739329429-1000173953-1001\Software\SecuROM\License information*]
"datasecu"=hex:e3,1f,1b,fb,d2,f5,6f,86,e7,6b,cb,0e,ae,77,7a,2b,dc,28,e4,20,15,
db,03,89,3f,13,2f,3b,fd,19,85,0e,a2,ee,cc,17,d9,bc,a9,cb,a9,77,53,86,7f,aa,\
"rkeysecu"=hex:63,9a,8e,98,b4,e5,38,3d,21,c6,59,d0,c7,fa,87,20
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus\1]
@="131473"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2011-05-15 16:57:15
ComboFix-quarantined-files.txt 2011-05-15 14:57
.
Avant-CF: 236 931 141 632 octets libres
Après-CF: 236 567 576 576 octets libres
.
- - End Of File - - 985AB0F4173387880F529BF62C378F35

coté améliorations , il y'en a , deja les dossier du menu demarrer ont repris leurs icones et leur couleurs , et puis j'ai récupéré aussi quelques elements de mon bureau qui manquaient,, et surtout je me reconnecte en wifi maintenant super.
Par contre mon plus gros souci reste le son maintenant , c emmerdant.mais je te remercie quand meme si tu peux encore m'aider a récupéere le son . merciiiiiiiiiiiiiiiii

non j'ai vérifié ya pa de ? ni De ! jaunes ou rouges tout a l'air bon ça me rend fou lol,, mais j'ai une croix rouge sur l'icone du micro qui est sur tout en bas a droite , et quand je clique du droit et je choisis:( resolution du son ) , ça travaille et puis ça me mets : ( un ou plusieurs services audio sont inactifs et devant c marqué en rouge non corrigé !!!!!!
je sais pas si ça peut t'aider.

GMER 1.0.15.15627 - http://www.gmer.net
Rootkit scan 2011-05-15 18:00:26
Windows 6.1.7600
Running: 1u8frpst.exe


---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage@Bind ???~p???????????????????????t???System32\drivers\volmgrx.sys?????h????????????????$??|???9???????-???e???????????????|???????e??????????? ???????n?????|?? ???????(?????H??????s????@%SystemRoot%\system32\vds.exe,-112?????? ???|???????????????????????????????????????????????????? ??|???????????e??RpcSs?PlugPlay????????R??????????????d????????????????????????,??|??????????????x????????????????????????????????|?|?|?|?|????H??|?????????e????@%SystemRoot%\system32\vds.exe,-100???????????????????????????<??|????????h?????%SystemRoot%\System32\vds.exe?????H??|?????????n????????????????t???? ???????|???????????|?;????????8?????????t?????Alignment Settings in Bytes?????? ??????????????B????????????????????B?????????????????B????? ???????|???????????|???????????????????????????|??????????????????0????????????????'???????????????????? ???????????????p????? ?????????????????????'??|??????? ???????|?????|??????????L???????????????????s????????|???|???|???|????? ???????|???????????|?,????????'???&???????????????????????Mic
Reg HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage@Route ???st?????<??????????????s???????????????s???s???s??@%systemroot%\system32\drivers\luafv.sys,-101????????????????????????x???s??????????????t????t??{8????\??s?????????n?????s?s{8??????????????? ??????????????????????????????t????{???~??usb.inf?????? ???????s???????????s?????????????? ???????????? ??????????????????? ???????n?????s?????s??????????@?????????????"??s?????????e????@keyiso.dll,-100??????@??s????????h?????%SystemRoot%\system32\lsass.exe???????"??s?????????n????@keyiso.dll,-101????? ???s??????????????LocalSystem?????RpcSs????????????????????????????????s?????????????? ????????????????s???????????e???s?s?s?s?s?s?s?s????? ???????s???????????s??????????????????????????????0????????????????????????????????????? ????????????????????????????????????????????????????????????s????? ???????n???????????u??????????8???????????????????????????????????y????s??????????????0c???????????????d???????u???d???s?s?s????4??s????????h????????????????g????????????????system32\DRIVERS\mouclass.sys?ouclass.sys??????????????
Reg HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage@Export ?????????????????????????????????????????Z???????e??????????????????????????????????????????????????4m???????????????????????????????? ???@???????????????@???????????????????????????????D???????????????D?????????????????????????????????????????????????????????????????????????????????????????????86?????????????????????????????????????@?????????D??????????????????????????????????????????@system32\DRIVERS\pci.sys,#1540;PCI to PCI Bridge???machine.inf:INTEL_SYS.NTamd64:PCI_DRV:6.1.7600.16385:pci\ven_8086&dev_2948??????Port racine PCI Express 5 de la famille Intel(R) ICH9 - 2948?5??PCI\VEN_8086&DEV_294A&SUBSYS_3624103C&REV_03?PCI\VEN_8086&DEV_294A&SUBSYS_3624103C?PCI\VEN_8086&DEV_294A&CC_060400?PCI\VEN_8086&DEV_294A&CC_0604????PCI\VEN_8086&DEV_294A&REV_03?PCI\VEN_8086&DEV_294A?PCI\VEN_8086&CC_060400?PCI\VEN_8086&CC_0604?PCI\VEN_8086?PCI\CC_060400?PCI\CC_0604????????d?k?k?k????????????*6to4mp?50???????h?j?k?k?????????????h???????????????h?k?k?p????????????????????????????????????????????????????????????au?????????
Reg HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage@Bind ?????l??tunnel???????????/???????e??\\?\STORAGE#VOLUMESNAPSHOT#HARDDISKVOLUMESNAPSHOT9#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}???? ???????*??????xi????2?????????????????Carte Microsoft 6to4 #15????Microsoft????????????????????h???????????????????P???e??tunnel??????nettun.inf??????????????? ????????????????????????????????????????????s?????????????????????? ???????T??????????????????????????&????????????????????3??? ?????????????????????0????????????&???????????????????????? ?????????????????????0????????????????????? ???????????????????k?0?????????????????????????????f??IS??nettun.inf??????????????????????????????????? ???????1?????????????,??N?????$???<???????????????????????????????7D??? ?????????????????????,????????????'????????????????????}????$??????4???????T??Root\*6TO4MP\0013????????????E??????CE??\\?\Root#*6TO4MP#0013#{ad498944-762f-11d0-8dcb-00c04fc3358c}\{D44043D1-F98F-4297-B376-C61AEE9CADDD}?03??? ???????:?????????????:??????????6?&????????????????????p??? ???????E?????D-4???????????6?????eF4??v2.
Reg HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage@Route ???t????????????????t?????????????????????????????????????????????????????????????V??????????????d???????????:???:???????????????????????????h?j????t??????r???r???r???s???s???s???s????? ???????s??????????????????????????????????????? ???????s?????s?????s???????? ?????????????? ???????s???????????s???????? ?d???????????? ???????n?????s?????s????????$???????????????n?????@%systemroot%\system32\wkssvc.dll,-100???????? ??s??????p???NetworkProvider???????h??s????????h?????%SystemRoot%\System32\svchost.exe -k NetworkService???????N??s?????????n????@%systemroot%\system32\wkssvc.dll,-101??????? 8??s??????????????NT AUTHORITY\NetworkService??????????????????????????????????:??????????????????t??????? ?????????????,??s????????????????<??s???????????e??Bowser?MRxSmb10?MRxSmb20?NSI?????????????????????????????????9?g90???????????????s??????????????????SeChangeNotifyPrivilege?SeImpersonatePrivilege?SeAuditPrivilege??????????????????????????????s?s?s?s?s?s?s?s?s?s?s?s????? ???????s???????????[???????????????????e?????????
Reg HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage@Export ????????? ???????@????????????????????$?N?&?????????USBSTOR????????????#52???????n???4??B-??????????????????????un??????? P??????2?????87-??????????????????nettun.inf:Microsoft.NTamd64:6to4mp.ndi:6.1.7600.16385:*6to4mp??????????????????????????????????????? ???????D?????D0-??? "??????1?????}"???ndis5_ip6_tunnel?????????????????????????????????h??????????*6to4mp?????? ????????????????????????????????????????????s?????? ???????????????????g?0????????????????????????????????Carte Microsoft 6to4 #20????????????????????Microsoft???nettun.inf??????? ?????????????????????0??L????????? ???????????? ?????????????????????0????????????&???????????????????????? ?????????????????????0????????????????????????????? ?????????????????????0????????????????????????????????????????????????????????????nettun.inf?fac??? ???????t?????ilt??6to4mp.ndi??????? ??????????????????6-21-2006???? ?????????????????????0????????????????????? ?????????????????????0????????????????????????????????????6to4mp.ndi??????????????????????????? ?????
Reg HKLM\SYSTEM\ControlSet002\services\LanmanServer\Linkage@Bind ???n?????????????????????F??ew????????????$??n????????h???????$??n???4???????-??????????????????????? ???d???&???????&???n???????d???????????????????9???????t??????@????7???????n??.NTAMD64?????????????????o?????????n????????????????????????????????????????*6to4mp??????n??????????????t????????o??????p???????????????t?????Z??t?????????e?????????n???????????s?y????????r???????????????????????????t???? ???e???E??????????system32\DRIVERS\arcsas.sys?\arcsas.sys?RA????L??n?????????e??????<??o????????h?????Net??n???????????????????d??????LocalSystem??????????????????????????????????????????????????????n???:??????Root\*6TO4MP\0020????n??????????????????? ???????n???????????n??????????R?&?????????????????????t????n?n?n?n?n??s????n?p?s????<???????????h???????R????????????e?????n???????????n??????h??????????????????????????????????????????????????????????????? ?*??????&???n???????????????????????l??system32\DRIVERS\bowser.sys?????? ???n???5??????????? ???????o???????????????????????????????t?????????????????????????????
Reg HKLM\SYSTEM\ControlSet002\services\LanmanServer\Linkage@Route ???o????RPCSS???????????x??????o?????|???????????????????????????????3??????????????????????????????????????*6to4mp??e????????????L??o????????????????????8??o????????h???????N??????????????????????-???2???e??????50????$??o???-???????A???????????A??????-8??%systemroot%\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe??????????????????????????????????????????????%SystemRoot%\System32\srvsvc.dll?????????????????????????o???????????????????????????????????????4??????e6??? ???j???w?????tem???o?o?????{???w??@%systemroot%\system32\drivers\dfsc.sys,-101??????6??p???????????????o?o?????????????????????????o??tunnel??????????????HP Filter????o??????????????????????????????????????????nd??????e???? ???????o?????o???????????????????? ???????????? ???????o????????'??n????????L???????????????????????????????????????????????????????????????????????Symantec IPS Provider???????DingSvc????????????????????????? ??????????? ????(??????P????????????(??????P????????????(??????P????????????(??????P????????????(??????P????????????
Reg HKLM\SYSTEM\ControlSet002\services\LanmanServer\Linkage@Export ???p????????p????????????p??????????????? ???????n???????????|??????????t?O?????????system32\DRIVERS\hidusb.sys?\hidusb.sys???????8??p????????h??????????????????t?s?v?vEn???~?~?????????????????????q?u?????????????i???????p??????? ???????q???????????n???????? ?B? ???????????B??p???????????????????????????????????t?t????? ???????n??????????????????????R?P?????????%SystemRoot%\System32\mprmsg.dll????? ???????q???????????n?,?????? ?N?N? ?????????????????????N??p??????????????{e670a5a2-ce74-4ab4-9347-61b815319f4c}????????8??p??????????????%windir%\system32\dfdts.dll??????p?p?p?p?p?r?p??? ???????n???????????o??????????2?Q????G??????R??????????????d???o?o?o?o?o?o?p?of5???????p????:??t????????h??????~?~?????????h???6???e???e??Microsoft????????????????3???????????????????p??????????????????????????? ???????n??????????????????????V?S?????????%SystemRoot%\System32\Drivers\yk62x64.sys???????"??????g?????????o????????????*??????????????????????0??10??????????????????????????????????????????.NTAMD64?????p?v?????????t?????
Reg HKLM\SYSTEM\ControlSet002\services\LanmanWorkstation\Linkage@Bind ???e?o??????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ??????????????? ????????????????????????????????????????? ??????????? ???????????????????????????????$???4????? ??????? ???????????????
Reg HKLM\SYSTEM\ControlSet002\services\LanmanWorkstation\Linkage@Route ???h?s???????????????f???F???e????0??p??????p????????????????????h?h6.??????<????????????4??? ???d???A?????8EE??SiSRaid4?????i?i????????????@oem5.inf,%pci\ven_197b&dev_2383.devicedesc%;JMB38X MS Host Controller??????{4d36e970-e325-11ce-bfc1-08002be10318}????????X??????????t???????h???????e??? P??????????????????~?g?????m?t????????????????????13???????i?g?i???i?i?i???????????????h??????????????????tcpipreg?-???????????????????v???D???D?????????????h?????????? ???????????r??6??Carte Microsoft 6to4 #2???????X?????? ???t????\??s?????????e?????????i??????????? ???????h?????h??????????(??????????????????????????h?h????? ???????h?????h???????,??4????????????????????????????h????? ???????h?????????????,???????????????????????????h????? ???????h???????????g????????"??????????????????? ?????????????????????????????????????????????????????????????????????????????80????????????????????????????????????X??h??????????????????????????????????????????????????????????? ???????h?????????????0??L????????? ??????????????h???h???
Reg HKLM\SYSTEM\ControlSet002\services\LanmanWorkstation\Linkage@Export ???n?r?????????????????????????????????????????????????????????????????????n?????7?n???n?n?????? ????????????????????????????}???????{???????p???k?k?|?|????hpdskflt???????????????????????????????????????????????????????????n???????????????????????????n???????????????????????????????????????????????????????????????g?????????n??????p????????????o??sS??????????????????????????????????????????????????????????p???????????????? ???????n?????n???????????????????????????????.?/??? ???????n?????n??????????"???&????? ???????4???@usbvideo.inf,%usbvideo.devicedesc%;P?riph?rique vid?o USB??????????????????t???HP Accelerometer????????RpcSs???????????????USB\VID_5986&PID_0143&REV_0014&MI_00?USB\VID_5986&PID_0143&MI_00?????????i????????????s??????????????????n????????????????????"??n?????????e?????????????????????????????-???????????????????l?n?u???????????I??_F????'?????????????{6bdd1fc6-810f-11d0-bec7-08002be2092f}\0000?????????????????t????????????????????????&??USB\DevClass_00&SubClass_00&Prot_00?USB\DevClass_00&SubClas

---- EOF - GMER 1.0.15 ----

dsl mais j'ai fait que copier ,, non y'avait pas de lignes rouges

quand je l'installe et je selectionne la langue il ya une fenetre qui sort :
( impossible d'éxecuter le fichier: C:\program files (x86)\ list_kill'em\List_Kill'em.exe
CreateProcess a échoué ; code 740
L'opertaion demandée necessite une élévation. )

Executer en tant qu'admin pour Vista ou Seven

C bon mais y'a eu qu'un seul rapport :

http://www.cijoint.fr/cjlink.php?file=cj201105/cijpTXbal4.txt