Processus hôte + fenêtres de pub
Fluctabilus
Messages postés
164
Statut
Membre
-
Fluctabilus Messages postés 164 Statut Membre -
Fluctabilus Messages postés 164 Statut Membre -
Bonjour,
Petit problème, je viens de récupérer un pc sous Vista. J'ai des fenêtres qui s'ouvrent de temps à autre, mon écran se fige par moment pdt quelques secondes et la barre des tâches devient blanche (le fond est noir habituellement)
Et pour couronner le tout j'ai une fenêtre : "le processus hôte pr les services windows..." qui apparait également. (je suis aller sur le forum windows mais cette fenêtre continue d'apparaitre!!) J'ai fait un scan avec ccleaner, mbam, ad-r, J'ai également fait les mises à jour des drivers et de Vista... Bref je viens chercher de l'aide car je ne sais plus quoi faire...
Voici le rapport zhpdiag : http://www.cijoint.fr/cjlink.php?file=cj201107/cij4L0uXUW.txt
Petit problème, je viens de récupérer un pc sous Vista. J'ai des fenêtres qui s'ouvrent de temps à autre, mon écran se fige par moment pdt quelques secondes et la barre des tâches devient blanche (le fond est noir habituellement)
Et pour couronner le tout j'ai une fenêtre : "le processus hôte pr les services windows..." qui apparait également. (je suis aller sur le forum windows mais cette fenêtre continue d'apparaitre!!) J'ai fait un scan avec ccleaner, mbam, ad-r, J'ai également fait les mises à jour des drivers et de Vista... Bref je viens chercher de l'aide car je ne sais plus quoi faire...
Voici le rapport zhpdiag : http://www.cijoint.fr/cjlink.php?file=cj201107/cij4L0uXUW.txt
A voir également:
- Processus hôte + fenêtres de pub
- Bloqueur de pub youtube - Accueil - Streaming
- Stop pub gratuit - Télécharger - Divers Utilitaires
- Processus hote windows rundll32 c'est quoi - Forum Virus
- Supprimer la pub - Guide
- Comment ouvrir un fichier pub ? - Forum Windows
9 réponses
Bonjour,
Fais un scan avec TDSSKiller et poste le rapport :
https://forum.malekal.com/viewtopic.php?t=28637&start=
Fais un scan avec TDSSKiller et poste le rapport :
https://forum.malekal.com/viewtopic.php?t=28637&start=
Merci pour ton aide Destrio. Voicci le rapport : http://www.cijoint.fr/cjlink.php?file=cj201107/cijmkqM0pX.txt
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
--> Désactive l'UAC le temps de la désinfection.
/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\
--> Télécharge ComboFix (de sUBs) sur ton Bureau.
--> Clique droit sur ComboFix.exe (le .exe n'est pas forcément visible) et choisis Exécuter en tant qu'administrateur afin de le lancer.
--> Réponds Oui au message d'avertissement pour que ComboFix commence l'analyse de ton PC.
--> Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.
Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix
/!\ Désactive tes protections résidentes (Antivirus, etc...) /!\
--> Télécharge ComboFix (de sUBs) sur ton Bureau.
--> Clique droit sur ComboFix.exe (le .exe n'est pas forcément visible) et choisis Exécuter en tant qu'administrateur afin de le lancer.
--> Réponds Oui au message d'avertissement pour que ComboFix commence l'analyse de ton PC.
--> Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.
Pour t'aider : Un guide et un tutoriel sur l'utilisation de ComboFix
bon voici le rapport combofix,
Je dois aller bosser de retour vers 23h00
ComboFix 11-07-12.04 - Marielle 12/07/2011 13:03:00.1.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.1853 [GMT 2:00]
Lancé depuis: c:\users\Marielle\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\drv\Tuner\Yuan\Resources\_desktop.ini
c:\users\Marielle\Desktop\Internet Explorer.lnk
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-06-12 au 2011-07-12 ))))))))))))))))))))))))))))))))))))
.
.
2011-07-12 11:10 . 2011-07-12 11:11 -------- d-----w- c:\users\Marielle\AppData\Local\temp
2011-07-12 11:10 . 2011-07-12 11:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-12 10:50 . 2011-07-12 11:00 -------- d-----w- C:\32788R22FWJFW
2011-07-12 10:45 . 2011-06-20 06:57 7074640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2CBE471A-C30E-4FD8-87A4-018E5D506E20}\mpengine.dll
2011-07-12 09:38 . 2011-07-12 09:38 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-07-12 09:34 . 2011-07-12 09:38 -------- d-----w- c:\program files\ZHPDiag
2011-07-11 10:39 . 2011-07-11 10:49 -------- d-----w- c:\program files\Ad-Remover
2011-07-10 22:07 . 2011-07-10 22:07 -------- d-----w- c:\users\Marielle\AppData\Roaming\Malwarebytes
2011-07-10 22:07 . 2011-05-29 07:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-10 22:07 . 2011-07-10 22:07 -------- d-----w- c:\programdata\Malwarebytes
2011-07-10 22:07 . 2011-07-10 22:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-10 22:07 . 2011-05-29 07:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-08 18:06 . 2011-07-08 18:07 -------- d-----w- c:\program files\Defraggler
2011-07-08 17:34 . 2011-04-15 14:00 53248 ----a-w- c:\windows\system32\CSVer.dll
2011-07-08 17:32 . 2011-07-08 17:32 -------- d-----w- c:\users\Marielle\AppData\Roaming\Intel
2011-07-08 17:31 . 2011-07-08 17:31 -------- d-----w- c:\program files\Cisco
2011-07-08 17:31 . 2011-07-08 17:31 -------- d-----w- c:\program files\Common Files\Intel
2011-07-08 17:31 . 2011-07-08 17:31 -------- d-----w- c:\programdata\Intel
2011-07-08 17:26 . 2011-07-08 17:26 -------- d-----w- c:\users\UpdatusUser
2011-07-08 17:25 . 2011-05-21 06:01 66664 ----a-w- c:\windows\system32\nvshext.dll
2011-07-08 17:25 . 2011-05-21 06:01 615528 ----a-w- c:\windows\system32\nvvsvc.exe
2011-07-08 17:25 . 2011-05-21 06:01 2560616 ----a-w- c:\windows\system32\nvsvcr.dll
2011-07-08 17:25 . 2011-05-21 06:01 543336 ----a-w- c:\windows\system32\easyupdatusapiu.dll
2011-07-08 17:25 . 2011-07-08 17:25 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-07-08 17:24 . 2011-05-21 06:01 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-08 17:24 . 2011-05-21 06:01 6555240 ----a-w- c:\windows\system32\nvwgf2um.dll
2011-07-08 17:24 . 2011-05-21 06:01 16456296 ----a-w- c:\windows\system32\nvoglv32.dll
2011-07-08 17:24 . 2011-05-21 06:01 10589800 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-07-08 17:24 . 2011-05-21 06:01 899688 ----a-w- c:\windows\system32\nvdispco3220150.dll
2011-07-08 17:24 . 2011-05-21 06:01 865896 ----a-w- c:\windows\system32\nvgenco322090.dll
2011-07-08 17:24 . 2011-05-21 06:01 5301352 ----a-w- c:\windows\system32\nvcuda.dll
2011-07-08 17:24 . 2011-05-21 06:01 2804328 ----a-w- c:\windows\system32\nvcuvid.dll
2011-07-08 17:24 . 2011-05-21 06:01 2082408 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-07-08 17:24 . 2011-05-21 06:01 13011560 ----a-w- c:\windows\system32\nvcompiler.dll
2011-07-08 17:24 . 2011-07-08 17:27 -------- d-----w- c:\program files\NVIDIA Corporation
2011-07-08 17:23 . 2011-07-08 17:23 -------- d-----w- C:\NVIDIA
2011-07-08 17:17 . 2011-07-08 17:17 -------- d-----w- c:\windows\fr
2011-07-08 17:16 . 2010-09-22 22:21 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2011-07-08 17:09 . 2009-09-04 15:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-07-08 17:09 . 2009-09-04 15:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2011-07-08 17:09 . 2009-09-04 15:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-07-08 17:08 . 2011-07-08 17:08 -------- d-----w- c:\program files\ma-config.com
2011-07-08 17:08 . 2011-07-08 17:08 -------- d-----w- c:\programdata\ma-config.com
2011-07-08 16:59 . 2011-07-08 17:04 -------- d-----w- c:\programdata\Comodo
2011-07-08 16:59 . 2011-07-08 17:00 -------- d-----w- c:\program files\COMODO
2011-07-08 16:58 . 2011-07-08 16:59 -------- d-----w- c:\programdata\Comodo Downloader
2011-07-08 16:40 . 2011-07-10 12:24 137656 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-07-08 16:40 . 2011-07-08 16:40 -------- d-----w- c:\programdata\Avira
2011-07-08 16:40 . 2011-07-08 16:40 -------- d-----w- c:\program files\Avira
2011-07-08 16:40 . 2011-02-04 10:09 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-08 16:17 . 2011-07-08 16:17 -------- d-----w- c:\users\Marielle\AppData\Local\Seven Zip
2011-07-08 12:42 . 2011-03-12 21:55 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-07-08 12:06 . 2011-07-08 12:06 469256 ----a-w- c:\program files\Common Files\Windows Live\.cache\7818aa701cc3d672c\InstallManager_WLE_WLE.exe
2011-07-08 12:06 . 2011-07-08 12:06 15712 ----a-w- c:\program files\Common Files\Windows Live\.cache\6eaeb1501cc3d6720\MeshBetaRemover.exe
2011-07-08 12:05 . 2011-07-08 12:05 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\613c4f501cc3d6718\DSETUP.dll
2011-07-08 12:05 . 2011-07-08 12:05 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\613c4f501cc3d6718\DXSETUP.exe
2011-07-08 12:05 . 2011-07-08 12:05 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\613c4f501cc3d6718\dsetup32.dll
2011-07-08 12:05 . 2011-07-08 12:05 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\6030f9d01cc3d6717\DSETUP.dll
2011-07-08 12:05 . 2011-07-08 12:05 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\6030f9d01cc3d6717\DXSETUP.exe
2011-07-08 12:05 . 2011-07-08 12:05 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\6030f9d01cc3d6717\dsetup32.dll
2011-07-08 12:04 . 2011-07-11 08:37 -------- d-----w- c:\users\Marielle\AppData\Local\Windows Live
2011-07-08 12:04 . 2009-08-04 08:02 754688 ----a-w- c:\windows\system32\webservices.dll
2011-07-08 10:59 . 2011-07-11 11:23 -------- d-----w- c:\program files\CCleaner
2011-07-08 10:11 . 2011-06-16 04:38 142296 ----a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll
2011-07-08 10:11 . 2011-06-16 04:38 89048 ----a-w- c:\program files\Mozilla Firefox\libEGL.dll
2011-07-08 10:11 . 2011-06-16 04:38 781272 ----a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll
2011-07-08 10:11 . 2011-06-16 04:38 719832 ----a-w- c:\program files\Mozilla Firefox\mozcpp19.dll
2011-07-08 10:11 . 2011-06-16 04:38 465880 ----a-w- c:\program files\Mozilla Firefox\libGLESv2.dll
2011-07-08 10:11 . 2011-06-16 04:38 1850328 ----a-w- c:\program files\Mozilla Firefox\mozjs.dll
2011-07-08 10:11 . 2011-06-16 04:38 16856 ----a-w- c:\program files\Mozilla Firefox\plugin-container.exe
2011-07-08 10:11 . 2011-06-16 04:38 15832 ----a-w- c:\program files\Mozilla Firefox\mozalloc.dll
2011-07-08 10:11 . 2010-01-01 08:00 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-07-08 10:11 . 2010-01-01 08:00 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-07-08 09:48 . 2011-07-08 09:48 -------- d-----w- c:\program files\Windows Portable Devices
2011-07-08 09:43 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-07-08 09:43 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-07-08 09:43 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-07-08 09:43 . 2009-09-25 01:33 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2011-07-08 09:43 . 2009-09-25 02:10 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2011-07-08 09:43 . 2009-09-25 02:07 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2011-07-08 09:43 . 2009-09-25 02:04 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2011-07-08 09:43 . 2009-09-25 01:33 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2011-07-08 09:43 . 2009-09-25 01:32 252928 ----a-w- c:\windows\system32\dxdiag.exe
2011-07-08 09:41 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2011-07-08 09:41 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2011-07-08 09:41 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2011-07-07 19:23 . 2011-07-07 19:23 -------- d-----w- c:\programdata\WindowsSearch
2011-07-07 17:11 . 2011-07-07 17:11 -------- d-----w- c:\users\Marielle\AppData\Roaming\vlc
2011-07-07 17:10 . 2011-07-07 17:10 -------- d-----w- c:\program files\VideoLAN
2011-07-07 16:49 . 2011-04-14 14:59 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys
2011-07-07 16:49 . 2011-01-20 16:08 478720 ----a-w- c:\windows\system32\dxgi.dll
2011-07-07 16:49 . 2011-01-20 14:15 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-07-07 16:49 . 2011-01-20 16:37 638336 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-07-07 16:49 . 2011-01-20 14:24 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2011-07-07 16:47 . 2011-05-02 17:16 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-07-07 16:47 . 2011-04-29 13:24 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-07-07 16:47 . 2011-04-29 13:24 79872 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-07-07 16:47 . 2011-04-29 13:24 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-07 16:47 . 2011-05-02 12:02 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-07-07 16:47 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-07-07 16:47 . 2011-04-29 15:59 276992 ----a-w- c:\windows\system32\schannel.dll
2011-07-07 12:29 . 2011-07-07 12:29 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-07 11:34 . 2011-07-07 11:34 -------- d-----w- c:\windows\system32\ca-ES
2011-07-07 11:34 . 2011-07-07 11:34 -------- d-----w- c:\windows\system32\eu-ES
2011-07-07 11:34 . 2011-07-07 11:34 -------- d-----w- c:\windows\system32\vi-VN
2011-07-07 10:43 . 2011-07-07 10:43 -------- d-----w- c:\program files\SFR
2011-06-30 07:37 . 2011-06-30 07:37 82400 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-06-30 07:37 . 2011-06-30 07:37 36568 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-06-30 07:37 . 2011-06-30 07:37 238960 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-06-30 07:37 . 2011-06-30 07:37 19088 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-06-30 07:37 . 2011-06-30 07:37 285256 ----a-w- c:\windows\system32\guard32.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-08 17:12 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-05-24 17:14 . 2009-10-02 19:10 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-05-21 06:01 . 2011-07-08 17:24 12392 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-05-21 06:01 . 2007-12-11 19:24 301672 ----a-w- c:\windows\system32\nvhotkey.dll
2011-05-21 06:01 . 2007-12-11 19:24 2557544 ----a-w- c:\windows\system32\nvsvc.dll
2011-05-21 06:01 . 2007-12-11 19:24 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-05-21 06:01 . 2007-12-11 19:24 11992680 ----a-w- c:\windows\system32\nvd3dum.dll
2011-05-21 06:01 . 2007-12-11 19:24 3693672 ----a-w- c:\windows\system32\nvcpl.dll
2011-05-21 06:01 . 2007-12-11 19:24 2335848 ----a-w- c:\windows\system32\nvapi.dll
2011-05-04 02:52 . 2011-05-03 12:25 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-16 04:38 . 2011-07-08 10:11 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 4669440]
"eAudio"="c:\acer\Empowering Technology\eAudio\eAudio.exe" [2007-06-11 1286144]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 457216]
"PLFSetL"="c:\windows\PLFSetL.exe" [2007-07-05 94208]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-06-27 752136]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-06-06 159744]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"ORAHSSSessionManager"="c:\program files\Orange\SessionManager\SessionManager.exe" [2009-08-24 135920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-02-04 281768]
"COMODO"="c:\program files\COMODO\COMODO GeekBuddy\CLPSLA.exe" [2011-05-26 208184]
"CPA"="c:\program files\COMODO\COMODO GeekBuddy\VALA.exe" [2011-05-26 182584]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-06-30 2554696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
.
c:\users\Marielle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-8-10 535336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\eNetHook.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]
2007-05-24 12:38 206952 ------w- c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec PIF AlertEng]
2008-01-29 15:38 583048 ----a-w- c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1567671479-1689534374-2053314720-1000]
"EnableNotificationsRef"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-04-07 36608]
R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2011-07-03 311416]
R3 PCAMp50;PCAMp50 NDIS Protocol Driver;c:\windows\system32\Drivers\PCAMp50.sys [2006-11-28 28224]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-06-30 238960]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-06-30 36568]
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 13560]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 ALaunchService;ALaunch Service;c:\acer\ALaunch\ALaunchSvc.exe [2007-01-26 50688]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-07-10 136360]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-05-26 154424]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2007-06-05 179712]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2007-03-07 32256]
S3 NETwLv32; Pilote de carte de la série Intel(R) Wireless WiFi Link 5000 pour Windows Vista 32 bits ;c:\windows\system32\DRIVERS\NETwLv32.sys [2010-10-07 6639616]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Marielle\AppData\Roaming\Mozilla\Firefox\Profiles\ybpljxb4.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
.
- - - - ORPHELINS SUPPRIMES - - - -
.
HKLM-Run-eRecoveryService - (no file)
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-12 13:11
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2011-07-12 13:13:38
ComboFix-quarantined-files.txt 2011-07-12 11:13
.
Avant-CF: 67 286 642 688 octets libres
Après-CF: 67 248 095 232 octets libres
.
- - End Of File - - A82C05580AAA1EEA0E038D3A70353E99
Je dois aller bosser de retour vers 23h00
ComboFix 11-07-12.04 - Marielle 12/07/2011 13:03:00.1.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.1853 [GMT 2:00]
Lancé depuis: c:\users\Marielle\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
FW: COMODO Firewall *Enabled* {4D6F75E0-14AF-2E9E-AACD-24CDCF08AA2A}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\drv\Tuner\Yuan\Resources\_desktop.ini
c:\users\Marielle\Desktop\Internet Explorer.lnk
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-06-12 au 2011-07-12 ))))))))))))))))))))))))))))))))))))
.
.
2011-07-12 11:10 . 2011-07-12 11:11 -------- d-----w- c:\users\Marielle\AppData\Local\temp
2011-07-12 11:10 . 2011-07-12 11:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-12 10:50 . 2011-07-12 11:00 -------- d-----w- C:\32788R22FWJFW
2011-07-12 10:45 . 2011-06-20 06:57 7074640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2CBE471A-C30E-4FD8-87A4-018E5D506E20}\mpengine.dll
2011-07-12 09:38 . 2011-07-12 09:38 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2011-07-12 09:34 . 2011-07-12 09:38 -------- d-----w- c:\program files\ZHPDiag
2011-07-11 10:39 . 2011-07-11 10:49 -------- d-----w- c:\program files\Ad-Remover
2011-07-10 22:07 . 2011-07-10 22:07 -------- d-----w- c:\users\Marielle\AppData\Roaming\Malwarebytes
2011-07-10 22:07 . 2011-05-29 07:11 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-07-10 22:07 . 2011-07-10 22:07 -------- d-----w- c:\programdata\Malwarebytes
2011-07-10 22:07 . 2011-07-10 22:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-07-10 22:07 . 2011-05-29 07:11 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-08 18:06 . 2011-07-08 18:07 -------- d-----w- c:\program files\Defraggler
2011-07-08 17:34 . 2011-04-15 14:00 53248 ----a-w- c:\windows\system32\CSVer.dll
2011-07-08 17:32 . 2011-07-08 17:32 -------- d-----w- c:\users\Marielle\AppData\Roaming\Intel
2011-07-08 17:31 . 2011-07-08 17:31 -------- d-----w- c:\program files\Cisco
2011-07-08 17:31 . 2011-07-08 17:31 -------- d-----w- c:\program files\Common Files\Intel
2011-07-08 17:31 . 2011-07-08 17:31 -------- d-----w- c:\programdata\Intel
2011-07-08 17:26 . 2011-07-08 17:26 -------- d-----w- c:\users\UpdatusUser
2011-07-08 17:25 . 2011-05-21 06:01 66664 ----a-w- c:\windows\system32\nvshext.dll
2011-07-08 17:25 . 2011-05-21 06:01 615528 ----a-w- c:\windows\system32\nvvsvc.exe
2011-07-08 17:25 . 2011-05-21 06:01 2560616 ----a-w- c:\windows\system32\nvsvcr.dll
2011-07-08 17:25 . 2011-05-21 06:01 543336 ----a-w- c:\windows\system32\easyupdatusapiu.dll
2011-07-08 17:25 . 2011-07-08 17:25 -------- d-----w- c:\programdata\NVIDIA Corporation
2011-07-08 17:24 . 2011-05-21 06:01 57960 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-08 17:24 . 2011-05-21 06:01 6555240 ----a-w- c:\windows\system32\nvwgf2um.dll
2011-07-08 17:24 . 2011-05-21 06:01 16456296 ----a-w- c:\windows\system32\nvoglv32.dll
2011-07-08 17:24 . 2011-05-21 06:01 10589800 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2011-07-08 17:24 . 2011-05-21 06:01 899688 ----a-w- c:\windows\system32\nvdispco3220150.dll
2011-07-08 17:24 . 2011-05-21 06:01 865896 ----a-w- c:\windows\system32\nvgenco322090.dll
2011-07-08 17:24 . 2011-05-21 06:01 5301352 ----a-w- c:\windows\system32\nvcuda.dll
2011-07-08 17:24 . 2011-05-21 06:01 2804328 ----a-w- c:\windows\system32\nvcuvid.dll
2011-07-08 17:24 . 2011-05-21 06:01 2082408 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-07-08 17:24 . 2011-05-21 06:01 13011560 ----a-w- c:\windows\system32\nvcompiler.dll
2011-07-08 17:24 . 2011-07-08 17:27 -------- d-----w- c:\program files\NVIDIA Corporation
2011-07-08 17:23 . 2011-07-08 17:23 -------- d-----w- C:\NVIDIA
2011-07-08 17:17 . 2011-07-08 17:17 -------- d-----w- c:\windows\fr
2011-07-08 17:16 . 2010-09-22 22:21 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2011-07-08 17:09 . 2009-09-04 15:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-07-08 17:09 . 2009-09-04 15:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2011-07-08 17:09 . 2009-09-04 15:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-07-08 17:08 . 2011-07-08 17:08 -------- d-----w- c:\program files\ma-config.com
2011-07-08 17:08 . 2011-07-08 17:08 -------- d-----w- c:\programdata\ma-config.com
2011-07-08 16:59 . 2011-07-08 17:04 -------- d-----w- c:\programdata\Comodo
2011-07-08 16:59 . 2011-07-08 17:00 -------- d-----w- c:\program files\COMODO
2011-07-08 16:58 . 2011-07-08 16:59 -------- d-----w- c:\programdata\Comodo Downloader
2011-07-08 16:40 . 2011-07-10 12:24 137656 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-07-08 16:40 . 2011-07-08 16:40 -------- d-----w- c:\programdata\Avira
2011-07-08 16:40 . 2011-07-08 16:40 -------- d-----w- c:\program files\Avira
2011-07-08 16:40 . 2011-02-04 10:09 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-07-08 16:17 . 2011-07-08 16:17 -------- d-----w- c:\users\Marielle\AppData\Local\Seven Zip
2011-07-08 12:42 . 2011-03-12 21:55 876032 ----a-w- c:\windows\system32\XpsPrint.dll
2011-07-08 12:06 . 2011-07-08 12:06 469256 ----a-w- c:\program files\Common Files\Windows Live\.cache\7818aa701cc3d672c\InstallManager_WLE_WLE.exe
2011-07-08 12:06 . 2011-07-08 12:06 15712 ----a-w- c:\program files\Common Files\Windows Live\.cache\6eaeb1501cc3d6720\MeshBetaRemover.exe
2011-07-08 12:05 . 2011-07-08 12:05 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\613c4f501cc3d6718\DSETUP.dll
2011-07-08 12:05 . 2011-07-08 12:05 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\613c4f501cc3d6718\DXSETUP.exe
2011-07-08 12:05 . 2011-07-08 12:05 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\613c4f501cc3d6718\dsetup32.dll
2011-07-08 12:05 . 2011-07-08 12:05 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\6030f9d01cc3d6717\DSETUP.dll
2011-07-08 12:05 . 2011-07-08 12:05 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\6030f9d01cc3d6717\DXSETUP.exe
2011-07-08 12:05 . 2011-07-08 12:05 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\6030f9d01cc3d6717\dsetup32.dll
2011-07-08 12:04 . 2011-07-11 08:37 -------- d-----w- c:\users\Marielle\AppData\Local\Windows Live
2011-07-08 12:04 . 2009-08-04 08:02 754688 ----a-w- c:\windows\system32\webservices.dll
2011-07-08 10:59 . 2011-07-11 11:23 -------- d-----w- c:\program files\CCleaner
2011-07-08 10:11 . 2011-06-16 04:38 142296 ----a-w- c:\program files\Mozilla Firefox\components\browsercomps.dll
2011-07-08 10:11 . 2011-06-16 04:38 89048 ----a-w- c:\program files\Mozilla Firefox\libEGL.dll
2011-07-08 10:11 . 2011-06-16 04:38 781272 ----a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll
2011-07-08 10:11 . 2011-06-16 04:38 719832 ----a-w- c:\program files\Mozilla Firefox\mozcpp19.dll
2011-07-08 10:11 . 2011-06-16 04:38 465880 ----a-w- c:\program files\Mozilla Firefox\libGLESv2.dll
2011-07-08 10:11 . 2011-06-16 04:38 1850328 ----a-w- c:\program files\Mozilla Firefox\mozjs.dll
2011-07-08 10:11 . 2011-06-16 04:38 16856 ----a-w- c:\program files\Mozilla Firefox\plugin-container.exe
2011-07-08 10:11 . 2011-06-16 04:38 15832 ----a-w- c:\program files\Mozilla Firefox\mozalloc.dll
2011-07-08 10:11 . 2010-01-01 08:00 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll
2011-07-08 10:11 . 2010-01-01 08:00 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll
2011-07-08 09:48 . 2011-07-08 09:48 -------- d-----w- c:\program files\Windows Portable Devices
2011-07-08 09:43 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2011-07-08 09:43 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2011-07-08 09:43 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-07-08 09:43 . 2009-09-25 01:33 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2011-07-08 09:43 . 2009-09-25 02:10 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2011-07-08 09:43 . 2009-09-25 02:07 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2011-07-08 09:43 . 2009-09-25 02:04 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2011-07-08 09:43 . 2009-09-25 01:33 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2011-07-08 09:43 . 2009-09-25 01:32 252928 ----a-w- c:\windows\system32\dxdiag.exe
2011-07-08 09:41 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2011-07-08 09:41 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2011-07-08 09:41 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2011-07-07 19:23 . 2011-07-07 19:23 -------- d-----w- c:\programdata\WindowsSearch
2011-07-07 17:11 . 2011-07-07 17:11 -------- d-----w- c:\users\Marielle\AppData\Roaming\vlc
2011-07-07 17:10 . 2011-07-07 17:10 -------- d-----w- c:\program files\VideoLAN
2011-07-07 16:49 . 2011-04-14 14:59 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys
2011-07-07 16:49 . 2011-01-20 16:08 478720 ----a-w- c:\windows\system32\dxgi.dll
2011-07-07 16:49 . 2011-01-20 14:15 979456 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-07-07 16:49 . 2011-01-20 16:37 638336 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-07-07 16:49 . 2011-01-20 14:24 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2011-07-07 16:47 . 2011-05-02 17:16 739328 ----a-w- c:\windows\system32\inetcomm.dll
2011-07-07 16:47 . 2011-04-29 13:24 214016 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-07-07 16:47 . 2011-04-29 13:24 79872 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-07-07 16:47 . 2011-04-29 13:24 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-07 16:47 . 2011-05-02 12:02 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-07-07 16:47 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll
2011-07-07 16:47 . 2011-04-29 15:59 276992 ----a-w- c:\windows\system32\schannel.dll
2011-07-07 12:29 . 2011-07-07 12:29 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-07 11:34 . 2011-07-07 11:34 -------- d-----w- c:\windows\system32\ca-ES
2011-07-07 11:34 . 2011-07-07 11:34 -------- d-----w- c:\windows\system32\eu-ES
2011-07-07 11:34 . 2011-07-07 11:34 -------- d-----w- c:\windows\system32\vi-VN
2011-07-07 10:43 . 2011-07-07 10:43 -------- d-----w- c:\program files\SFR
2011-06-30 07:37 . 2011-06-30 07:37 82400 ----a-w- c:\windows\system32\drivers\inspect.sys
2011-06-30 07:37 . 2011-06-30 07:37 36568 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2011-06-30 07:37 . 2011-06-30 07:37 238960 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2011-06-30 07:37 . 2011-06-30 07:37 19088 ----a-w- c:\windows\system32\drivers\cmderd.sys
2011-06-30 07:37 . 2011-06-30 07:37 285256 ----a-w- c:\windows\system32\guard32.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-08 17:12 . 2010-06-24 09:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-05-24 17:14 . 2009-10-02 19:10 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-05-21 06:01 . 2011-07-08 17:24 12392 ----a-w- c:\windows\system32\drivers\nvBridge.kmd
2011-05-21 06:01 . 2007-12-11 19:24 301672 ----a-w- c:\windows\system32\nvhotkey.dll
2011-05-21 06:01 . 2007-12-11 19:24 2557544 ----a-w- c:\windows\system32\nvsvc.dll
2011-05-21 06:01 . 2007-12-11 19:24 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-05-21 06:01 . 2007-12-11 19:24 11992680 ----a-w- c:\windows\system32\nvd3dum.dll
2011-05-21 06:01 . 2007-12-11 19:24 3693672 ----a-w- c:\windows\system32\nvcpl.dll
2011-05-21 06:01 . 2007-12-11 19:24 2335848 ----a-w- c:\windows\system32\nvapi.dll
2011-05-04 02:52 . 2011-05-03 12:25 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-16 04:38 . 2011-07-08 10:11 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-07-06 4669440]
"eAudio"="c:\acer\Empowering Technology\eAudio\eAudio.exe" [2007-06-11 1286144]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 457216]
"PLFSetL"="c:\windows\PLFSetL.exe" [2007-07-05 94208]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-06-27 752136]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-06-06 159744]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"ORAHSSSessionManager"="c:\program files\Orange\SessionManager\SessionManager.exe" [2009-08-24 135920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-02-04 281768]
"COMODO"="c:\program files\COMODO\COMODO GeekBuddy\CLPSLA.exe" [2011-05-26 208184]
"CPA"="c:\program files\COMODO\COMODO GeekBuddy\VALA.exe" [2011-05-26 182584]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-06-30 2554696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
.
c:\users\Marielle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-12-15 384000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-8-10 535336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\eNetHook.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie]
2007-05-24 12:38 206952 ------w- c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec PIF AlertEng]
2008-01-29 15:38 583048 ----a-w- c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1567671479-1689534374-2053314720-1000]
"EnableNotificationsRef"=dword:00000001
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-04-07 36608]
R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2011-07-03 311416]
R3 PCAMp50;PCAMp50 NDIS Protocol Driver;c:\windows\system32\Drivers\PCAMp50.sys [2006-11-28 28224]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2011-06-30 238960]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2011-06-30 36568]
S2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [2006-11-02 13560]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 ALaunchService;ALaunch Service;c:\acer\ALaunch\ALaunchSvc.exe [2007-01-26 50688]
S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-07-10 136360]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-05-26 154424]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-21 2214504]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2007-06-05 179712]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2007-03-07 32256]
S3 NETwLv32; Pilote de carte de la série Intel(R) Wireless WiFi Link 5000 pour Windows Vista 32 bits ;c:\windows\system32\DRIVERS\NETwLv32.sys [2010-10-07 6639616]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Marielle\AppData\Roaming\Mozilla\Firefox\Profiles\ybpljxb4.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
.
- - - - ORPHELINS SUPPRIMES - - - -
.
HKLM-Run-eRecoveryService - (no file)
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-12 13:11
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2011-07-12 13:13:38
ComboFix-quarantined-files.txt 2011-07-12 11:13
.
Avant-CF: 67 286 642 688 octets libres
Après-CF: 67 248 095 232 octets libres
.
- - End Of File - - A82C05580AAA1EEA0E038D3A70353E99