Supprimer antimalware doctor

Mais mon problème c'est que je n'ai pas accès a internet, donc je ne peux pas telecharger rien...

utilse le pc d'où tu réponds et une cle usb pour le transfert jusqu'au bureau du pc malade

ah ok ok merci...je vais le faire et je te donnerai des nouvelles sous peu! merci :)

voici ce que ça m'a donnée.

RogueKiller V5.1.5 [05/20/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows 7 (6.1.7600 ) 32 bits version
Started in : Safe mode
User: Melany [Admin rights]
Mode: Remove -- Date : 05/20/2011 18:39:26

Bad processes: 0

Registry Entries: 18
[SUSP PATH] HKCU\[...]\Run : tun70uidop.exe (C:\Users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\tun70uidop.exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : 5GUTNY6MFK (C:\Users\Melany\AppData\Local\Temp\Tx4.exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : R8388QA8U8 (C:\Users\Melany\AppData\Local\Temp\Tx6 .exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : hARalSyaYNWv (C:\ProgramData\hARalSyaYNWv.exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : tun70uidop .exe (C:\Users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\tun70uidop .exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : tun70uidop .exe (C:\Users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\tun70uidop .exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : tun70uidop .exe (C:\Users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\tun70uidop .exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : tun70uidop .exe (C:\Users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\tun70uidop .exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : Spyware Doctor with AntiVirus (C:\Users\Melany\Desktop\sdasetup_revwire207.exe -min) -> DELETED
[BLACKLIST DLL] HKLM\[...]\Run : Kxahoz (rundll32.exe "C:\Users\Melany\AppData\Local\aruzaziz.dll",Startup) -> DELETED
[SUSP PATH] {810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job : c:\windows\tzogog.exe -> DELETED
[SUSP PATH] {22116563-108C-42c0-A7CE-60161B75E508}.job : c:\users\melany\appdata\local\temp\tx6 .exe -> DELETED
[HJPOL] HKCU\[...]\System : DisableTaskMgr (1) -> DELETED
[HJPOL] HKLM\[...]\System : DisableTaskMgr (1) -> DELETED
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> REPLACED (1)
[HJ] HKCU\[...]\ActiveDesktop : NoChangingWallPaper (1) -> REPLACED (0)
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Users\Melany\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg)

HOSTS File:


Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

Voici le rapport de l'option 4

RogueKiller V5.1.5 [05/20/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows 7 (6.1.7600 ) 32 bits version
Started in : Normal mode
User: Melany [Admin rights]
Mode: ProxyFix -- Date : 05/22/2011 11:34:33

Bad processes: 0

Registry Entries: 0

voici le lien
http://www.cijoint.fr/cjlink.php?file=cj201105/cijtGRLsPB.odt

Voici le rapport de combofix
ComboFix 11-05-26.05 - Melany 2011-05-27 16:28:39.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.2.1033.18.894.301 [GMT -4:00]
Running from: c:\users\Melany\Desktop\CHELE.exe
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
c:\program files\Common Files\Java\Java Update\jusched.exe
c:\program files\DivX\DivX Update\DivXUpdate.exe
c:\program files\Druide\Antidote\Gestionnaire Antidote .exe
c:\program files\Druide\Antidote\Gestionnaire Antidote .exe
c:\program files\Druide\Antidote\Gestionnaire Antidote .exe
c:\program files\Druide\Antidote\Gestionnaire Antidote .exe
c:\program files\Druide\Antidote\Gestionnaire Antidote .exe
c:\program files\Druide\Antidote\Gestionnaire Antidote.exe
c:\program files\FunWebProducts
c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
c:\program files\iTunes\iTunesHelper.exe
c:\program files\Logitech\Logitech Vid\vid.exe
c:\program files\Logitech\Logitech WebCam Software\LWS.exe
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\1.bin\MWSSVC.EXE
c:\program files\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files\MyWebSearch\bar\Game\CHESS.F3S
c:\program files\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files\MyWebSearch\bar\icons\CM.ICO
c:\program files\MyWebSearch\bar\icons\MFC.ICO
c:\program files\MyWebSearch\bar\icons\PSS.ICO
c:\program files\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files\MyWebSearch\bar\icons\WB.ICO
c:\program files\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files\MyWebSearch\bar\Message\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\QuickTime\QTTask .exe
c:\program files\Windows Live\Messenger\msnmsgr.exe
c:\programdata\33939192.exe
c:\programdata\4q3INX6j.exe
c:\programdata\hARalSyaYNWv .exe
c:\programdata\hARalSyaYNWv.exe
c:\users\Melany\2gweorjqjutp92vjy9gake
c:\users\Melany\AppData\Local\okf.exe
c:\users\Melany\AppData\Roaming\Adobe\plugs
c:\users\Melany\AppData\Roaming\Adobe\plugs\mmc1129906.txt
c:\users\Melany\AppData\Roaming\Adobe\plugs\mmc83.exe
c:\users\Melany\AppData\Roaming\Adobe\plugs\mmc972140.txt
c:\users\Melany\AppData\Roaming\Adobe\shed
c:\users\Melany\AppData\Roaming\Adobe\shed\thr1.chm
c:\users\Melany\AppData\Roaming\inst.exe
c:\users\Melany\AppData\Roaming\Microsoft\Windows\Templates\a71nyf35l24l5rf37at7y4g225wl4dyp88b266o6377kr
c:\windows\Fonts\27MFpfL.com
c:\windows\system32\f3PSSavr.scr
c:\windows\Tasks\At1.job
c:\windows\Tzogoa.exe
c:\windows\Tzogob.exe
c:\windows\Tzogoc.exe
c:\windows\Tzogod.exe
c:\windows\Tzogoe.exe
c:\windows\Tzogof.exe
c:\windows\Tzogog.exe
.
[code] <pre>
c:\program files\Adobe\Reader 9.0\Reader\Reader_sl .exe ---^> c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon .exe ---^> c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
c:\program files\Common Files\Java\Java Update\jusched .exe ---^> c:\program files\Common Files\Java\Java Update\jusched.exe
c:\program files\DivX\DivX Update\DivXUpdate .exe ---^> c:\program files\DivX\DivX Update\DivXUpdate.exe
c:\program files\Druide\Antidote\Gestionnaire Antidote .exe ---^> c:\program files\Druide\Antidote\Gestionnaire Antidote.exe
c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe ---^> c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
c:\program files\iTunes\iTunesHelper .exe ---^> c:\program files\iTunes\iTunesHelper.exe
c:\program files\Logitech\Logitech Vid\vid .exe ---^> c:\program files\Logitech\Logitech Vid\vid.exe
c:\program files\Logitech\Logitech WebCam Software\LWS .exe ---^> c:\program files\Logitech\Logitech WebCam Software\LWS.exe
c:\program files\QuickTime\QTTask .exe ---^> c:\program files\QuickTime\QTTask.exe
c:\program files\QuickTime\QTTask .exe ---^> c:\program files\QuickTime\QTTask.exe
c:\program files\QuickTime\QTTask .exe ---^> c:\program files\QuickTime\QTTask.exe
c:\program files\QuickTime\QTTask .exe ---^> c:\program files\QuickTime\QTTask.exe
c:\program files\QuickTime\QTTask .exe ---^> c:\program files\QuickTime\QTTask.exe
c:\program files\Windows Live\Messenger\msnmsgr .exe ---^> c:\program files\Windows Live\Messenger\msnmsgr.exe
</pre> /code
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_MyWebSearchService
.
.
((((((((((((((((((((((((( Files Created from 2011-04-28 to 2011-05-28 )))))))))))))))))))))))))))))))
.
.
2011-05-27 21:54 . 2011-05-28 14:16 -------- d-----w- c:\users\Melany\AppData\Local\temp
2011-05-27 21:54 . 2011-05-27 21:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-27 17:52 . 2011-05-27 17:53 -------- d-----w- C:\CHELE
2011-05-24 23:32 . 2011-05-24 23:32 -------- d--h--w- c:\users\Melany\AppData\Local\Mozilla
2011-05-23 12:42 . 2011-05-23 12:42 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-05-23 12:34 . 2011-05-27 06:50 -------- d--h--w- c:\program files\ZHPDiag
2011-05-21 23:15 . 2011-05-21 23:15 -------- d--h--w- c:\program files\AVAST Software
2011-05-21 18:48 . 2011-05-21 18:48 -------- d--h--w- c:\users\Melany\AppData\Local\{EB149762-6FD7-4726-8D41-0C0766E5E485}
2011-05-20 23:21 . 2010-07-16 18:59 656320 ----a-w- c:\windows\system32\drivers\pctEFA.sys
2011-05-20 23:21 . 2010-07-16 18:59 338880 ----a-w- c:\windows\system32\drivers\pctDS.sys
2011-05-20 23:21 . 2011-01-17 13:10 251560 ----a-w- c:\windows\system32\drivers\pctgntdi.sys
2011-05-20 23:21 . 2010-12-16 12:38 103232 ----a-w- c:\windows\system32\drivers\pctwfpfilter.sys
2011-05-20 23:21 . 2010-12-10 20:57 160448 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys
2011-05-20 23:21 . 2010-12-10 17:24 239168 ----a-w- c:\windows\system32\drivers\PCTCore.sys
2011-05-20 23:21 . 2010-12-16 12:46 70536 ----a-w- c:\windows\system32\drivers\pctplsg.sys
2011-05-20 23:19 . 2011-05-27 06:51 -------- d-----w- c:\program files\Common Files\PC Tools
2011-05-20 23:19 . 2011-05-28 14:14 -------- d-----w- c:\program files\PC Tools Security
2011-05-20 23:19 . 2011-05-20 23:19 -------- d--h--w- c:\users\Melany\AppData\Roaming\PC Tools
2011-05-20 22:56 . 2011-05-20 22:56 -------- d--h--w- c:\users\Melany\AppData\Local\{BECCB446-0B55-4129-9139-226311BAA9A4}
2011-05-20 22:41 . 2010-11-29 21:42 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-20 22:36 . 2011-05-27 06:52 -------- d-----w- c:\programdata\PC Tools
2011-05-17 00:09 . 2011-05-17 00:09 -------- d--h--w- c:\users\Melany\AppData\Local\{E29B974F-00E8-483D-831D-14EEA5111874}
2011-05-16 22:04 . 2011-05-16 22:04 -------- d--h--w- c:\users\Melany\AppData\Local\{F6DA7FBD-2A5F-4498-9D15-5F8B932FC057}
2011-05-16 21:37 . 2011-05-16 21:38 -------- d--h--w- c:\users\Melany\AppData\Local\{CDE8A768-C17C-4C30-9C39-24FA1345A286}
2011-05-16 21:14 . 2011-05-16 21:14 -------- d--h--w- c:\users\Melany\AppData\Local\{1FD4D516-8319-451B-A65B-FD67EF28C416}
2011-05-16 20:56 . 2011-05-16 20:58 -------- d--h--w- c:\users\Melany\AppData\Local\{7244BB31-CED5-47C6-878F-FFE3D5518ED1}
2011-05-16 02:23 . 2011-05-17 23:25 0 ---ha-w- c:\users\Melany\AppData\Local\Mjexayeher.bin
2011-05-16 02:23 . 2011-05-27 06:52 -------- d--h--w- c:\users\Melany\AppData\Local\{2086D30A-C4C4-4FE9-952A-B907A26230C5}
2011-05-16 02:20 . 2011-05-16 02:20 -------- d--h--w- c:\users\Melany\AppData\Roaming\Malwarebytes
2011-05-16 02:19 . 2010-11-29 21:42 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-16 02:19 . 2011-05-27 06:47 -------- d-----w- c:\programdata\Malwarebytes
2011-05-16 02:19 . 2011-05-27 06:51 -------- d--h--w- c:\program files\Malwarebytes' Anti-Malware
2011-05-16 01:32 . 2011-05-27 06:47 -------- d-----w- c:\programdata\MFAData
2011-05-16 01:07 . 2011-05-16 01:08 -------- d--h--w- c:\users\Melany\AppData\Local\{1349AAE1-A8D6-4861-AE9C-0FD388DFD5E7}
2011-05-16 00:42 . 2011-05-27 06:53 -------- d--h--w- c:\users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27
2011-05-15 00:05 . 2011-05-15 00:05 -------- d--h--w- c:\users\Melany\AppData\Local\{F9727F5E-D4B5-42C1-B6D8-13EBA06E19C7}
2011-05-13 22:57 . 2011-05-13 22:58 -------- d--h--w- c:\users\Melany\AppData\Local\{A2C1D63C-E439-456E-9615-2F97B9D2691B}
2011-05-13 19:32 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BEF8B1F7-2687-48EC-A5EB-5AB45F0698B1}\mpengine.dll
2011-05-11 07:26 . 2011-05-11 07:26 -------- d--h--w- c:\users\Melany\AppData\Local\{A4C772CD-317D-42F8-A286-284F52A7B0AD}
2011-05-10 21:47 . 2011-03-25 03:06 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-05-10 21:47 . 2011-03-25 03:06 284160 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-05-10 21:47 . 2011-03-25 03:06 75776 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-05-10 21:47 . 2011-03-25 03:06 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-05-10 21:47 . 2011-03-25 03:06 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-05-10 21:47 . 2011-03-25 03:06 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-05-10 21:47 . 2011-03-25 03:06 5888 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-05-10 21:47 . 2011-04-09 06:13 3957632 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-05-10 21:47 . 2011-04-09 06:13 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-05-05 22:45 . 2011-05-05 22:46 -------- d--h--w- c:\users\Melany\AppData\Local\{7E320EA3-A946-434D-A291-D915C5BF941C}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-19 19:33 . 2010-06-24 15:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-12 11:31 . 2011-04-27 21:11 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2011-03-11 05:44 . 2011-04-27 21:11 146304 ----a-w- c:\windows\system32\drivers\storport.sys
2011-03-11 05:44 . 2011-04-27 21:11 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-03-11 05:44 . 2011-04-27 21:11 1210240 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-03-11 05:44 . 2011-04-27 21:11 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-03-11 05:43 . 2011-04-27 21:11 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-03-11 05:43 . 2011-04-27 21:11 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-03-11 05:43 . 2011-04-27 21:11 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-03-11 05:40 . 2011-04-14 10:58 1137664 ----a-w- c:\windows\system32\mfc42.dll
2011-03-11 05:40 . 2011-04-14 10:58 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-11 05:39 . 2011-04-27 21:11 1686016 ----a-w- c:\windows\system32\esent.dll
2011-03-11 05:37 . 2011-04-27 21:11 74240 ----a-w- c:\windows\system32\fsutil.exe
2011-03-08 05:38 . 2011-04-14 10:58 740864 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 05:29 . 2011-04-14 10:59 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-03-03 05:27 . 2011-04-14 10:59 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-03-03 03:31 . 2011-04-14 10:59 2331136 ----a-w- c:\windows\system32\win32k.sys
.
[code]<pre>
c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM .exe
c:\program files\PC Tools Security\pctsGui .exe
c:\program files\QuickTime\QTTask .exe
</pre>/code
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\tbSoft.dll" [2010-06-13 2734688]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
2010-06-13 23:10 2734688 ---ha-w- c:\program files\Softonic_France\tbSoft.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-02-01 23:17 1487240 ---ha-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\tbSoft.dll" [2010-06-13 2734688]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
"{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}"= "c:\program files\Softonic_France\tbSoft.dll" [2010-06-13 2734688]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-07-16 5458704]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-03-18 39408]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2008-06-03 536576]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"5GUTNY6MFK"="c:\windows\Tzogog.exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\QuickTime\QTTask .exe -atboottime" [X]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"ConnectionManager"="c:\program files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe" [N/A]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"NBAgent"="c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [N/A]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-28 207424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-11-18 421160]
"ISTray"="c:\program files\PC Tools Security\pctsGui.exe" [N/A]
.
c:\users\Melany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de d'tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-12-12 385024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4640000]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-04-03 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2010-12-10 239168]
S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS.sys [2010-07-16 338880]
S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA.sys [2010-07-16 656320]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
S2 sdAuxService;PC Tools Auxiliary Service;c:\program files\PC Tools Security\pctsAuxs.exe [2010-03-15 366840]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-24 483688]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2009-11-04 17408]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-24 550760]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-24 195944]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-24 21864]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-24 19304]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-24 209768]
.
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - PCTSDInjDriver32
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-05-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-05-14 c:\windows\Tasks\Norton Security Scan for Melany.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-10 14:06]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
LSP: c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
TCP: DhcpNameServer = 206.80.254.4 206.80.254.68
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Swearware\backup\winsock2\Parameters]
@DACL=(02 0000)
@SACL=
"NameSpace_Callout"=expand:"%SystemRoot%\\System32\\fwpuclnt.dll"
"WinSock_Registry_Version"="2.0"
"AutodialDLL"="rasadhlp.dll"
"Current_NameSpace_Catalog"="NameSpace_Catalog5"
"Current_Protocol_Catalog"="Protocol_Catalog9"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(1968)
c:\program files\PC Tools Security\pctgmhk.dll
c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll
c:\windows\system32\CSCAPI.dll
c:\windows\System32\hcproviders.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\program files\PC Tools Security\pctsSvc.exe
c:\program files\Microsoft\BingBar\SeaPort.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Google\Google Toolbar\GoogleToolbarUser_32.exe
c:\windows\PEV.exe
.
**************************************************************************
.
Completion time: 2011-05-28 11:17:44 - machine was rebooted
ComboFix-quarantined-files.txt 2011-05-28 15:17
.
Pre-Run: 46 415 093 760 bytes free
Post-Run: 48 509 362 176 bytes free
.
- - End Of File - - E4AF5BEE29FC01A5DC31661D9A2BB21D

J'ai un problème à chaque fois que j'essaye de lancer le scan, mon ordinateur s'éteint et une page bleu apparait, et lorsqu'il se rallume le scan ne se poursuit pas.

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 3084

Additional information about the problem:
BCCode: 1000007e
BCP1: C0000005
BCP2: 82AC8419
BCP3: 98575B50
BCP4: 98575730
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Qu'est-ce que je pourrais faire? Merci encore!

fais le en mode sans echec
https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

Voici le nouveau rapport
ComboFix 11-05-30.06 - Melany 2011-05-31 9:07.2.2 - x86 MINIMAL
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.2.1033.18.894.443 [GMT -4:00]
Running from: c:\users\Melany\Desktop\CHELE.exe
Command switches used :: c:\users\Melany\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
FILE ::
"c:\program files\Ask.com\GenericAskToolbar.dll"
"c:\windows\Tzogog.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Ask.com\GenericAskToolbar.dll
c:\users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27
c:\users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\enemies-names.txt
c:\users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\local.ini
c:\users\Melany\AppData\Roaming\870191500809F644C6C5D140791CFB27\lsrslt.ini
.
.
((((((((((((((((((((((((( Files Created from 2011-04-28 to 2011-05-31 )))))))))))))))))))))))))))))))
.
.
2011-05-31 13:20 . 2011-05-31 13:37 -------- d-----w- c:\users\Melany\AppData\Local\temp
2011-05-31 13:20 . 2011-05-31 13:20 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-05-30 13:13 . 2011-05-30 13:13 -------- d-----w- c:\users\Melany\AppData\Local\{67D79EA4-BEA9-4132-972D-CDE579D573EB}
2011-05-30 04:11 . 2011-05-30 04:11 -------- d-----w- c:\users\Melany\AppData\Local\{679281AB-91A0-42B0-A5BD-1F70E7EBC8AE}
2011-05-29 22:08 . 2011-05-29 22:08 -------- d-----w- c:\users\Melany\AppData\Local\{02B82D25-78EF-44FF-A67D-FBC5EEA982C6}
2011-05-29 18:29 . 2011-05-29 19:22 -------- d-----w- c:\programdata\eB43101GnPpG43101
2011-05-29 16:40 . 2011-05-29 16:40 -------- d-----w- c:\users\Melany\AppData\Local\{E6D49C14-1971-45CD-AFEB-18CA6177BFC5}
2011-05-29 15:11 . 2011-05-29 15:11 -------- d-----w- c:\users\Melany\AppData\Local\{063DCFD5-C2F9-4312-8F9D-CD47BEB88764}
2011-05-28 21:36 . 2011-05-10 11:59 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-05-28 21:36 . 2011-05-10 12:03 307928 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-05-28 21:36 . 2011-05-10 11:59 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-05-28 21:36 . 2011-05-10 12:02 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-05-28 21:36 . 2011-05-10 12:03 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-28 21:35 . 2011-05-10 11:59 53592 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-05-28 21:34 . 2011-05-10 12:10 40112 ----a-w- c:\windows\avastSS.scr
2011-05-28 21:34 . 2011-05-10 12:10 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-05-28 18:26 . 2011-05-28 18:26 -------- d-----w- c:\program files\iPod
2011-05-28 18:05 . 2011-05-28 18:05 -------- d-----w- c:\program files\Bonjour
2011-05-28 17:59 . 2011-05-28 17:59 -------- d-----w- c:\program files\Safari
2011-05-28 17:57 . 2011-05-28 17:57 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-05-28 17:57 . 2011-05-28 17:57 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-05-28 17:57 . 2011-05-28 17:57 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-05-28 17:57 . 2011-05-28 17:57 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-05-28 17:57 . 2011-05-28 17:57 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-05-28 17:57 . 2011-05-28 17:57 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-05-28 17:57 . 2011-05-28 17:57 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-05-28 17:41 . 2011-05-28 17:42 -------- d-----w- c:\users\Melany\AppData\Local\{6D166132-369E-4AB9-9AF6-81E57F4CF289}
2011-05-27 17:52 . 2011-05-27 17:53 -------- d-----w- C:\CHELE
2011-05-24 23:32 . 2011-05-24 23:32 -------- d-----w- c:\users\Melany\AppData\Local\Mozilla
2011-05-23 12:42 . 2011-05-23 12:42 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-05-23 12:34 . 2011-05-27 06:50 -------- d-----w- c:\program files\ZHPDiag
2011-05-21 23:15 . 2011-05-21 23:15 -------- d-----w- c:\program files\AVAST Software
2011-05-21 18:48 . 2011-05-21 18:48 -------- d-----w- c:\users\Melany\AppData\Local\{EB149762-6FD7-4726-8D41-0C0766E5E485}
2011-05-20 23:19 . 2011-05-28 17:37 -------- d-----w- c:\program files\Common Files\PC Tools
2011-05-20 22:56 . 2011-05-20 22:56 -------- d-----w- c:\users\Melany\AppData\Local\{BECCB446-0B55-4129-9139-226311BAA9A4}
2011-05-20 22:41 . 2010-12-20 22:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-20 22:36 . 2011-05-28 16:54 -------- d-----w- c:\programdata\PC Tools
2011-05-17 00:09 . 2011-05-17 00:09 -------- d-----w- c:\users\Melany\AppData\Local\{E29B974F-00E8-483D-831D-14EEA5111874}
2011-05-16 22:04 . 2011-05-16 22:04 -------- d-----w- c:\users\Melany\AppData\Local\{F6DA7FBD-2A5F-4498-9D15-5F8B932FC057}
2011-05-16 21:37 . 2011-05-16 21:38 -------- d-----w- c:\users\Melany\AppData\Local\{CDE8A768-C17C-4C30-9C39-24FA1345A286}
2011-05-16 21:14 . 2011-05-16 21:14 -------- d-----w- c:\users\Melany\AppData\Local\{1FD4D516-8319-451B-A65B-FD67EF28C416}
2011-05-16 20:56 . 2011-05-16 20:58 -------- d-----w- c:\users\Melany\AppData\Local\{7244BB31-CED5-47C6-878F-FFE3D5518ED1}
2011-05-16 02:23 . 2011-05-17 23:25 0 ----a-w- c:\users\Melany\AppData\Local\Mjexayeher.bin
2011-05-16 02:23 . 2011-05-27 06:52 -------- d-----w- c:\users\Melany\AppData\Local\{2086D30A-C4C4-4FE9-952A-B907A26230C5}
2011-05-16 02:20 . 2011-05-16 02:20 -------- d-----w- c:\users\Melany\AppData\Roaming\Malwarebytes
2011-05-16 02:19 . 2010-12-20 22:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-16 02:19 . 2011-05-27 06:47 -------- d-----w- c:\programdata\Malwarebytes
2011-05-16 02:19 . 2011-05-28 16:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-05-16 01:32 . 2011-05-27 06:47 -------- d-----w- c:\programdata\MFAData
2011-05-16 01:07 . 2011-05-16 01:08 -------- d-----w- c:\users\Melany\AppData\Local\{1349AAE1-A8D6-4861-AE9C-0FD388DFD5E7}
2011-05-15 00:05 . 2011-05-15 00:05 -------- d-----w- c:\users\Melany\AppData\Local\{F9727F5E-D4B5-42C1-B6D8-13EBA06E19C7}
2011-05-13 22:57 . 2011-05-13 22:58 -------- d-----w- c:\users\Melany\AppData\Local\{A2C1D63C-E439-456E-9615-2F97B9D2691B}
2011-05-13 19:32 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BEF8B1F7-2687-48EC-A5EB-5AB45F0698B1}\mpengine.dll
2011-05-11 07:26 . 2011-05-11 07:26 -------- d-----w- c:\users\Melany\AppData\Local\{A4C772CD-317D-42F8-A286-284F52A7B0AD}
2011-05-10 21:47 . 2011-03-25 03:06 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-05-10 21:47 . 2011-03-25 03:06 284160 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-05-10 21:47 . 2011-03-25 03:06 75776 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-05-10 21:47 . 2011-03-25 03:06 43008 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-05-10 21:47 . 2011-03-25 03:06 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-05-10 21:47 . 2011-03-25 03:06 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-05-10 21:47 . 2011-03-25 03:06 5888 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-05-10 21:47 . 2011-04-09 06:13 3957632 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-05-10 21:47 . 2011-04-09 06:13 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-05-05 22:45 . 2011-05-05 22:46 -------- d-----w- c:\users\Melany\AppData\Local\{7E320EA3-A946-434D-A291-D915C5BF941C}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-06 20:20 . 2011-04-06 20:20 91424 ----a-w- c:\windows\system32\dnssd.dll
2011-04-06 20:20 . 2011-04-06 20:20 107808 ----a-w- c:\windows\system32\dns-sd.exe
2011-03-19 19:33 . 2010-06-24 15:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-03-12 11:31 . 2011-04-27 21:11 442880 ----a-w- c:\windows\system32\XpsPrint.dll
2011-03-11 05:44 . 2011-04-27 21:11 146304 ----a-w- c:\windows\system32\drivers\storport.sys
2011-03-11 05:44 . 2011-04-27 21:11 143744 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-03-11 05:44 . 2011-04-27 21:11 1210240 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-03-11 05:44 . 2011-04-27 21:11 117120 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-03-11 05:43 . 2011-04-27 21:11 332160 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-03-11 05:43 . 2011-04-27 21:11 80256 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-03-11 05:43 . 2011-04-27 21:11 22400 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-03-11 05:40 . 2011-04-14 10:58 1137664 ----a-w- c:\windows\system32\mfc42.dll
2011-03-11 05:40 . 2011-04-14 10:58 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-11 05:39 . 2011-04-27 21:11 1686016 ----a-w- c:\windows\system32\esent.dll
2011-03-11 05:37 . 2011-04-27 21:11 74240 ----a-w- c:\windows\system32\fsutil.exe
2011-03-08 05:38 . 2011-04-14 10:58 740864 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-03 05:29 . 2011-04-14 10:59 132608 ----a-w- c:\windows\system32\dnsrslvr.dll
2011-03-03 05:27 . 2011-04-14 10:59 28672 ----a-w- c:\windows\system32\dnscacheugc.exe
2011-03-03 03:31 . 2011-04-14 10:59 2331136 ----a-w- c:\windows\system32\win32k.sys
.
[code]<pre>
c:\program files\QuickTime\QTTask .exe
</pre>/code
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-07-16 5458704]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-03-18 39408]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2008-06-03 536576]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"ConnectionManager"="c:\program files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe" [N/A]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"NBAgent"="c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [N/A]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-28 207424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-04-27 421160]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2009-07-14 8704]
.
c:\users\Melany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de d'tection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-12-12 385024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"HideSCAHealth"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R0 emlp;emlp;c:\windows\System32\drivers\mkrrckup.sys [x]
R1 aswSnx;aswSnx; [x]
R1 aswSP;aswSP; [x]
R2 aswFsBlk;aswFsBlk; [x]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-05-10 53592]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-04-24 483688]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4640000]
R3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-24 550760]
R3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-24 195944]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-24 21864]
R3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-24 19304]
R3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-24 209768]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-04-03 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2009-11-04 17408]
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-05-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-05-14 c:\windows\Tasks\Norton Security Scan for Melany.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-10 14:06]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
TCP: DhcpNameServer = 206.80.254.4 206.80.254.68
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{4daac69c-cba7-45e2-9bc8-1044483d3352} - (no file)
BHO-{4daac69c-cba7-45e2-9bc8-1044483d3352} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Swearware\backup\winsock2\Parameters]
@DACL=(02 0000)
@SACL=
"NameSpace_Callout"=expand:"%SystemRoot%\\System32\\fwpuclnt.dll"
"WinSock_Registry_Version"="2.0"
"AutodialDLL"="rasadhlp.dll"
"Current_NameSpace_Catalog"="NameSpace_Catalog5"
"Current_Protocol_Catalog"="Protocol_Catalog9"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\conhost.exe
c:\windows\helppane.exe
.
**************************************************************************
.
Completion time: 2011-05-31 09:44:35 - machine was rebooted
ComboFix-quarantined-files.txt 2011-05-31 13:44
ComboFix2.txt 2011-05-28 15:17
.
Pre-Run: 49 056 919 552 bytes free
Post-Run: 49 081 217 024 bytes free
.
- - End Of File - - 4D6057AA1366EB79D463A45056401082

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 6701

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

2011-05-31 11:47:43
mbam-log-2011-05-31 (11-47-43).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 291223
Temps écoulé: 1 heure(s), 1 minute(s), 5 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\program files\windows live\messenger\msimg32.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\windows live\messenger\riched20.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.