Bonjour à tous, je rencontre un problème sérieux sur mon portable : Depuis 3 jours, impossible de démarrer un programme, exécuter un logiciel, ouvrir une image, me connecter à internet,... Lorsque je clique sur l'icone désiré, le rond bleu se met à tourner sans fin, le disque dur travaille, un peu, et rien d'autre ne passe. Merci de me porter assistance.

Accès aux programmes impossible (vista) !

Réponse 41 / 69

PatCathare
18 oct. 2011 à 18:44

Je pense maitriser quoi ? Si j'étais si fort, je ne sais pas ce que je ferais ici. C'est pas bon ce que j'ai envoyé comme rapport ?

Réponse 42 / 69

Utilisateur anonyme
18 oct. 2011 à 18:55

Re

Je ne peux te montrer du doigt ou cliquer ,mais je pense qu'avec ce minimum d'explications ,tu devrais pouvoir;

Donc;tu reprends la manipulation avec ZHPsearch.

et poste moi ce rapport ;merci.

@+

Réponse 43 / 69

PatCathare
18 oct. 2011 à 22:30

Oui, je t'ai posté le rapport et tu ne m'as pas répondu, je vais donc te le reposter là, sinon tu l'as au dessus :

Rapport de ZHPSearch 1.23.19 par Nicolas Coolman, Update du 25/02/2011
Run by Patrice at 18/10/2011 15:57:11
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

---\\ Elément(s) de recherche
ntfs.sys
/md5

---\\ Liste des Fichiers & Dossiers:
Aucune ligne trouvée

---\\ Bilan de la recherche
Mode de recherche : Fichiers, Dossiers
Elément(s) trouvé(s) : 0
Nombre de fichiers analysés : 504546
Nombre de clés, valeurs ou données analysées : 0
Mode : Recherche complète
End of the scan (03mn 23s)

Réponse 44 / 69

Utilisateur anonyme
18 oct. 2011 à 23:21

Re

Tu tapes ntfs.sys et de suite après sans aller à la ligne le bouton /MD5
Ne loupe pas le reste ;merci.
@+

Réponse 45 / 69

PatCathare
19 oct. 2011 à 06:33

Rapport de ZHPSearch 1.23.19 par Nicolas Coolman, Update du 25/02/2011
Run by Patrice at 19/10/2011 06:28:16
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

---\\ Elément(s) de recherche
ntfs.sys /md5

---\\ Liste des Fichiers & Dossiers:
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Qoobox\Quarantine\C\Windows\System32\drivers\ntfs.sys.vir [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\ERDNT\cache\ntfs.sys [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\System32\drivers\ntfs.sys [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 10/01/2010 10:57:32 | ---A- | -- C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6002.18005_none_a85ca2c91a0d64df_ntfs.sys_e80dca04 [1083880] => Fichier inconnu
[MD5.b4effe29eb4f15538fd8a9681108492d] - (.Microsoft Corporation.) 21/01/2008 03:23:51 | ---A- | -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6001.18000_none_a67129bd1ceb9993\ntfs.sys [1081912] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6002.18005_none_a85ca2c91a0d64df\ntfs.sys [1083880] => Fichier inconnu

---\\ Bilan de la recherche
Mode de recherche : Fichiers, Dossiers
Elément(s) trouvé(s) : 6
Nombre de fichiers analysés : 252375
Nombre de clés, valeurs ou données analysées : 0
Mode : Recherche complète
End of the scan (01mn 22s)

Réponse 46 / 69

Utilisateur anonyme
19 oct. 2011 à 10:21

Bonjour

Ce fichier ntfs.sys est propre.

Poste moi un nouveau rapport ZHPDiag;merci.

@+

Réponse 47 / 69

PatCathare
19 oct. 2011 à 16:52

Rapport de ZHPSearch 1.23.19 par Nicolas Coolman, Update du 25/02/2011
Run by Patrice at 19/10/2011 16:50:31
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

---\\ Elément(s) de recherche
ntfs.sys /md5

---\\ Liste des Fichiers & Dossiers:
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Qoobox\Quarantine\C\Windows\System32\drivers\ntfs.sys.vir [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\ERDNT\cache\ntfs.sys [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\System32\drivers\ntfs.sys [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 10/01/2010 10:57:32 | ---A- | -- C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6002.18005_none_a85ca2c91a0d64df_ntfs.sys_e80dca04 [1083880] => Fichier inconnu
[MD5.b4effe29eb4f15538fd8a9681108492d] - (.Microsoft Corporation.) 21/01/2008 03:23:51 | ---A- | -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6001.18000_none_a67129bd1ceb9993\ntfs.sys [1081912] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6002.18005_none_a85ca2c91a0d64df\ntfs.sys [1083880] => Fichier inconnu

---\\ Bilan de la recherche
Mode de recherche : Fichiers, Dossiers
Elément(s) trouvé(s) : 6
Nombre de fichiers analysés : 252562
Nombre de clés, valeurs ou données analysées : 0
Mode : Recherche complète
End of the scan (01mn 13s)

Réponse 48 / 69

Utilisateur anonyme
20 oct. 2011 à 08:11

Bonjour

Je t'ai demandé un nouveau rapport ZHPDIag;merci.

Utilise ci-joint

@+

Réponse 49 / 69

PatCathare
20 oct. 2011 à 09:04

Rapport de ZHPSearch 1.23.19 par Nicolas Coolman, Update du 25/02/2011
Run by Patrice at 20/10/2011 09:01:28
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)

---\\ Elément(s) de recherche
ntfs.sys /md5

---\\ Liste des Fichiers & Dossiers:
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Qoobox\Quarantine\C\Windows\System32\drivers\ntfs.sys.vir [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\ERDNT\cache\ntfs.sys [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\System32\drivers\ntfs.sys [1083880] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 10/01/2010 10:57:32 | ---A- | -- C:\Windows\winsxs\Backup\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6002.18005_none_a85ca2c91a0d64df_ntfs.sys_e80dca04 [1083880] => Fichier inconnu
[MD5.b4effe29eb4f15538fd8a9681108492d] - (.Microsoft Corporation.) 21/01/2008 03:23:51 | ---A- | -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6001.18000_none_a67129bd1ceb9993\ntfs.sys [1081912] => Fichier inconnu
[MD5.6a4a98cee84cf9e99564510dda4baa47] - (.Microsoft Corporation.) 11/04/2009 07:32:49 | ---A- | -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.0.6002.18005_none_a85ca2c91a0d64df\ntfs.sys [1083880] => Fichier inconnu

---\\ Bilan de la recherche
Mode de recherche : Fichiers, Dossiers
Elément(s) trouvé(s) : 6
Nombre de fichiers analysés : 252860
Nombre de clés, valeurs ou données analysées : 0
Mode : Recherche complète
End of the scan (01mn 22s)

Utilisateur anonyme
20 oct. 2011 à 09:20

Re

Un rapport ZHPDiag et non ZHPScan
Merci

@+

Réponse 50 / 69

PatCathare
20 oct. 2011 à 09:28

j'ai pas trouvé de procédure concernant autre chose, mais j'ai fait d'initiative

Réponse 51 / 69

PatCathare
20 oct. 2011 à 09:29

Par contre, impossible de le coller ici, que ce soit en réponse ou en ajout de commentaire, il m'indique en rouge : titre du message non renseigné.
???

Réponse 52 / 69

PatCathare
20 oct. 2011 à 11:14

C'est parce qu'il est trop long ?

Réponse 53 / 69

PatCathare Messages postés 41 Date d'inscription jeudi 13 octobre 2011 Statut Membre Dernière intervention 9 février 2015
20 oct. 2011 à 11:20

Rapport de ZHPDiag/MD5 v1.28.1367 par Nicolas Coolman, Update du 05/10/2011
Run by Patrice at 20/10/2011 09:12:16
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Nouvelle version disponible

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.19154 (Defaut)
MFIE: Mozilla Firefox 7.0.1 v7.0.1
GCIE: Google Chrome v14.0.835.187
OBIE: Safari v5.34.50.0

---\\ Windows Product Information
Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
Windows Automatic Updates : OK

---\\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 6, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 3070 MB (65% free)
System Restore: Activé (Enable)
System drive C: has 38 GB (25%) free of 149 GB

---\\ Logged in mode
~ Computer Name: PORTABLE-PAT
~ User Name: Patrice
~ All Users Names: Patrice, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Patrice\AppData\Roaming\
~ %Desktop% : C:\Users\Patrice\Desktop\
~ %Favorites% : C:\Users\Patrice\Favorites\
~ %LocalAppData% : C:\Users\Patrice\AppData\Local\
~ %StartMenu% : C:\Users\Patrice\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 38 Go of 149 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 46 Go of 139 Go)
E:\ CD-ROM drive (Free 0 Go of 1 Go)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
~ Scan Security Center in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.11/09/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:23:42.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.18F17E90657528C232B1944DEB4EC160] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/10/2011 - 00:06:24.) -- C:\Windows\system32\wininet.dll [916480]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/09/2009 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.16/04/2008 - 12:15:11.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.16/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408] *1916
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/09/2009 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944] *1836
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:23:51.) -- C:\Windows\system32\drivers\Cdfs.sys [70144] *1844
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/09/2009 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072] *1812
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.16/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264] *1884
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/09/2009 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152] *1916
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:23:20.) -- C:\Windows\system32\drivers\i8042prt.sys [54784] *1900
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:24:25.) -- C:\Windows\system32\drivers\IpNat.sys [100864] *1868
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.16/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496] *1852
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/09/2009 - 05:45:37.) -- C:\Windows\system32\drivers\netBT.sys [185856] *1820
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.18/10/2011 - 07:32:49.) -- C:\Windows\system32\drivers\ntfs.sys [1083880] *1916
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360] *1900
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:24:55.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288] #1908,1916
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:23:01.) -- C:\Windows\system32\drivers\rdpdr.sys [248832] *1868
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/09/2009 - 05:45:56.) -- C:\Windows\system32\drivers\tdx.sys [72192] *1812
~ Scan Generic Processes in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/2841
~ Mes musiques (My Musics) : 67/886
~ Mes Videos (My Videos) : 27/64
~ Mes Favoris (My Favorites) : 5/55
~ Mes Documents (My Documents) : 4/110
~ Mon Bureau (My Desktop) : 13/525
~ Menu demarrer (Programs) : 7/41
~ Scan Hidden Files in 00mn 02s

---\\ Processus lancés
[MD5.3708CCEE4878EB0B9E7B92355A631853] - (.Microsoft Corporation - Aide et support Microsoft®.) -- C:\Windows\helppane.exe [498176] [PID.1916]
[MD5.7E6EA9CB72B5DE84A5D700BED877E5F9] - (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe [397312] [PID.1516]
[MD5.4E5585800B561FBEF64B27425365A36F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.3596]
[MD5.83F4BA8B8CDA4F063AA2002955A508A9] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files\Mozilla Firefox\plugin-container.exe [16856] [PID.3816]
[MD5.7B2E3899314974CC40D93A6CD7C855C8] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [2134016] [PID.3244]
[MD5.5DAF7081A4BB112FA3F1915819330A3E] - (...) -- C:\Program Files\ZHPDiag\pv.exe [61440] [PID.]
~ Scan Processes Running in 00mn 00s

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Patrice\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] http://www.plusnetwork.com
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.plusnetwork.com
G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] Adblock Plus for Google Chrome (Beta) v.1.1.4 (Activé)
G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock v.2.4.28 (Activé)
~ Scan Google Browser in 00mn 00s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\whhsk6jx.default\prefs.js
C:\Users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\whhsk6jx.default\user.js (.not file.)
M3 - MFPP: Plugins - [Patrice] -- C:\Users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\whhsk6jx.default\searchplugins\Messenger Plus Smartbar Search.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\amazon-france.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\bing.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\cnrtl-tlfi-fr.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay-france.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\McSiteAdvisor.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-fr.xml
M3 - MFPP: Plugins - [Patrice] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo-france.xml
M2 - MFEP: prefs.js [Patrice - whhsk6jx.default\bbrs_002@blabbers.com] [] Browser Companion Helper v1.0.5 (.Ginyas.)
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_26 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.5] - (.Microsoft Corp. - Office Live Update v1.5.) -- C:\Program Files\Microsoft\Office Live\npOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3538.0513] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [Adobe Acrobat] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Patrice\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Patrice\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 00s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.plusnetwork.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.woofi.info
R0 - HKUS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.plusnetwork.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.plusnetwork.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
R1 - HKUS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: Messenger Plus Live France Toolbar - {59994074-c06d-4a75-9768-49e5a8c21264} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 2, 2) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll
R3 - URLSearchHook: BittorrentBar_FR Toolbar - {ef79f67a-6ad7-4715-a0f8-932fca442023} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.7.3) -- C:\Program Files\BittorrentBar_FR\tbBitt.dll
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} . (.Conduit Ltd. - Conduit Toolbar.) (5, 5, 2, 0) -- C:\Program Files\DVDVideoSoftTB\tbDVDV.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
~ Scan IE Browser in 00mn 00s

---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s

---\\ Browser Helper Objects de navigateur (O2)
[MD5.EFA048EA2B278972E8B64C7A7AAB0E5B] - (.Pas de propriétaire - Browser Companion Helper plug-in.) -- C:\Program Files\BrowserCompanion\jsloader.dll [225584] [PID.]
[MD5.C3104BE7D2B689EBE47E2AAC64C07530] - (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [61888] [PID.]
[MD5.1FDC62785DE1C4249DC34F05FF557B5C] - (.SFR - Aide à la navigation SFR.) -- C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll [165184] [PID.]
[MD5.203A74767EB81F96A5166B1933DB46D0] - (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [75200] [PID.]
[MD5.469B44AE63D2AE02B512EC92C64D4A06] - (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll [2734688] [PID.]
[MD5.94C790AE25B8D4F00C0A386AF8D1C093] - (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\DVDVideoSoftTB\tbDVDV.dll [2393184] [PID.]
[MD5.CF39A105CD553EED31E2255AFF4C6742] - (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [441216] [PID.]
[MD5.16D50C93F5FDA8C22F3919EB3CBAA725] - (.Pas de propriétaire - Browser Companion Helper Verifier.) -- C:\Program Files\BrowserCompanion\updatebhoWin32.dll [141104] [PID.]
[MD5.C38FDD6F1C51F75F2A63B6E53971A4CC] - (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [349640] [PID.]
[MD5.B26A962848501344E21DEEA9504F5144] - (...) -- C:\Program Files\Lexmark Printable Web\bho.dll [180224] [PID.]
[MD5.E7D55E121FF1951CB86C7E0DC6A33877] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll [42272] [PID.]
[MD5.D9A0CE26ADA5BD15B1B03A752DDF14A6] - (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\BittorrentBar_FR\tbBitt.dll [3911776] [PID.]
[MD5.C38FDD6F1C51F75F2A63B6E53971A4CC] - (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [349640] [PID.]
~ Scan BHO in 00mn 00s

---\\ Internet Explorer Toolbars (O3)
[MD5.C38FDD6F1C51F75F2A63B6E53971A4CC] - (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [349640] [PID.]
[MD5.469B44AE63D2AE02B512EC92C64D4A06] - (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_Live_France\tbMes1.dll [2734688] [PID.]
[MD5.D9A0CE26ADA5BD15B1B03A752DDF14A6] - (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\BittorrentBar_FR\tbBitt.dll [3911776] [PID.]
[MD5.94C790AE25B8D4F00C0A386AF8D1C093] - (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\DVDVideoSoftTB\tbDVDV.dll [2393184] [PID.]
[MD5.128DD9AF8640DBCC711940903C8B554F] - (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll [297808] [PID.]
~ Scan Toolbar in 00mn 00s

---\\ Applications démarrées par registre & par dossier (O4)
~ Scan Application in 00mn 00s

---\\ Autres liens utilisateurs (O4)
[MD5.7ACBBC85FCE4989B533220FC3B291633] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [638216] [PID.]
[MD5.7E6EA9CB72B5DE84A5D700BED877E5F9] - (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe [397312] [PID.1516]
[MD5.2D821AFA5A1A9CA7F9F997A1AAD09E72] - (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe [168960] [PID.]
[MD5.2E6A96F965AB59B15CC263870D89E7C3] - (.Adobe Systems, Inc. - Adobe Illustrator.) -- C:\Program Files\Adobe\Illustrator CS Version d'évaluation\Support Files\Contents\Windows\Illustrator.exe [11716259] [PID.]
[MD5.11016C926FBC7AD61047A4A96C6DE5FF] - (.Adobe Systems Incorporated - InDesign Application.) -- C:\Program Files\Adobe\InDesign CS\InDesign.exe [1736704] [PID.]
[MD5.8BBFFD6536EF589FC2D2820F6E377ABD] - (.Adobe Systems, Incorporated - Adobe Photoshop CS3.) -- C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe [44814336] [PID.]
[MD5.9E8F8F88D474017478C4B030550A3425] - (.DVDVideoSoft.com Limited - Free Studio Manager.) -- C:\Program Files\Common Files\DVDVideoSoft\FreeStudioManager.exe [6200412] [PID.]
[MD5.F739E834D951774519C2B137C1D53152] - (.DVDVideoSoft Limited. - Free YouTube to MP3 Converter.) -- C:\Program Files\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe [2197504] [PID.]
[MD5.1A9B12C7ACCE76CFC77FE9FDCA9041A9] - (.METAGENIA - Kplan : Gestion d'informations.) -- C:\Program Files\metagenia\kplan\KPlan.exe [6408192] [PID.]
[MD5.FAF519B54185C1D5CEED041DDAE4D4C0] - (.GeoVid - Pas de description.) -- C:\Program Files\Video mp3 Extractor\Video2Mp3.exe [81920] [PID.]
[MD5.DC50191BD3B579DDB58D78AD53C6E49B] - (.XnView, https://www.xnview.com/en/ - XnView for Windows.) -- C:\Program Files\XnView\xnview.exe [4046848] [PID.]
[MD5.997D9F915982F482541CF080B444B281] - (...) -- C:\Windows\Installer\{735619D4-B42A-437A-958C-199BFCAEDB38}\SafariIco.exe [897024] [PID.]
[MD5.2ECA0B57869ADD52D925C42ADB19A115] - (.Google Inc. - Google Chrome.) -- C:\Users\Patrice\AppData\Local\Google\Chrome\Application\chrome.exe [1030200] [PID.]
[MD5.4E5585800B561FBEF64B27425365A36F] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [924632] [PID.3596]
[MD5.7E6EA9CB72B5DE84A5D700BED877E5F9] - (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe [397312] [PID.1516]
~ Scan Global Startup in 00mn 01s

---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
[MD5.C38FDD6F1C51F75F2A63B6E53971A4CC] - (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [349640] [PID.]
[MD5.C38FDD6F1C51F75F2A63B6E53971A4CC] - (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [349640] [PID.]
[MD5.C38FDD6F1C51F75F2A63B6E53971A4CC] - (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [349640] [PID.]
[MD5.C38FDD6F1C51F75F2A63B6E53971A4CC] - (.Adobe Systems Incorporated - Adobe PDF Toolbar for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [349640] [PID.]
[MD5.9C0E4C45CBADDC466E32A54354224FE6] - (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe [18366312] [PID.]
[MD5.031E88503203799F451910D35B105EE8] - (...) -- C:\Users\Patrice\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm [267] [PID.]
~ Scan IE Menu Contextuel in 00mn 00s

---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
~ Scan IE Extra Buttons in 00mn 00s

---\\ Winsock hijacker (Layered Service Provider) (O10)
[MD5.D1A84F7D4CAFCFE2A32149FF418056E5] - (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll [48128] [PID.]
[MD5.FC62A635063B762E1C3C60EA77279378] - (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de m.) -- C:\Windows\system32\napinsp.dll [50176] [PID.]
[MD5.690D41DF1D555F96D4898A0F54EBA065] - (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll [62464] [PID.]
[MD5.690D41DF1D555F96D4898A0F54EBA065] - (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll [62464] [PID.]
[MD5.8617350C9B590B63E620881092751BCB] - (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\Windows\system32\mswsock.dll [223232] [PID.]
[MD5.C411C80F90D6732380352B98B37BBD53] - (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll [19968] [PID.]
[MD5.2B81226910F765A9191EB9DB93743237] - (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll [121704] [PID.]
~ Scan Winsock in 00mn 00s

---\\ Protocole additionnel (O18)
[MD5.7E6C9B54B10123EA983ECDF7FBFFEA86] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [5971456] [PID.]
[MD5.E87993C9E936C366D37A7898A1E26F9D] - (.Blabbers Communications Ltd - Blabbers data protacol for IE w/c.) -- C:\Program Files\BrowserCompanion\tdataprotocol.dll [158512] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.E87993C9E936C366D37A7898A1E26F9D] - (.Blabbers Communications Ltd - Blabbers data protacol for IE w/c.) -- C:\Program Files\BrowserCompanion\tdataprotocol.dll [158512] [PID.]
[MD5.73F97C8899429EFAEE8C8944DCC08C2E] - (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll [1544704] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.08886EFE112F7E5437711FCF6D8B04C1] - (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [141824] [PID.]
[MD5.7E6C9B54B10123EA983ECDF7FBFFEA86] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [5971456] [PID.]
[MD5.749AE81CD855A5F7BE9FC3BE0949D6FF] - (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll [65912] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.7E6C9B54B10123EA983ECDF7FBFFEA86] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [5971456] [PID.]
[MD5.8FFDEB99EAC611D617016F2174D48FC6] - (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll [739328] [PID.]
[MD5.F4C8E624DDA6B347CA62A83220AB5EEF] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1212416] [PID.]
[MD5.9E7370CC3D6A43942433F85D0E2BBDD8] - (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll [873216] [PID.]
[MD5.08886EFE112F7E5437711FCF6D8B04C1] - (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [141824] [PID.]
[MD5.749AE81CD855A5F7BE9FC3BE0949D6FF] - (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll [65912] [PID.]
[MD5.E87993C9E936C366D37A7898A1E26F9D] - (.Blabbers Communications Ltd - Blabbers data protacol for IE w/c.) -- C:\Program Files\BrowserCompanion\tdataprotocol.dll [158512] [PID.]
[MD5.7E6C9B54B10123EA983ECDF7FBFFEA86] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [5971456] [PID.]
[MD5.73F97C8899429EFAEE8C8944DCC08C2E] - (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll [1544704] [PID.]
[MD5.7E6C9B54B10123EA983ECDF7FBFFEA86] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [5971456] [PID.]
[MD5.8627BE311E0A572B1BFC23377E6DA951] - (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll [741240] [PID.]
[MD5.31D70E22E0E929E2A1279F51245624CC] - (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll [42864] [PID.]
~ Scan Protocole Additionnel in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
[MD5.104F866DEDEDA8191AEC7B706A3FEDE7] - (.Adobe Systems Incorporated - 3D Capture Dll 9.4.) -- C:\Windows\System32\acaptuser32.dll [112056] [PID.]
~ Scan AppInit DLL in 00mn 00s

---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
[MD5.CC8915DB4E33E8FB29CA0D2DBF75306E] - (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll [236544] [PID.]
~ Scan SSODL in 00mn 00s

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
[MD5.4504819D18FAC09B6108D8728467E5B2] - (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll [1324032] [PID.]
~ Scan STS/SSO in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)
[MD5.609A6F49B6AF0F25837F8A0EDDDB0745] - (.Pas de propriétaire - ADSMSrv.) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [73728] [PID.]
[MD5.20F6F19FE9E753F2780DC2FA083AD597] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [37664] [PID.]
[MD5.5A055A4777CBBC8845DD598CB2EEBF69] - (.Pas de propriétaire - ASLDR Service.) -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe [94208] [PID.]
[MD5.7C157574A181B19B9DCF5F339E25337E] - (.Pas de propriétaire - GFNEXSrv.) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208] [PID.]
[MD5.1C87705CCB2F60172B0FC86B5D82F00D] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [387944] [PID.]
[MD5.191D8ECCC40F05B52FAC0513F35BA01D] - (.ESET - ESET Service.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [810144] [PID.]
[MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [136176] [PID.]
[MD5.8A74607CF62F4D098AACD87080E2B613] - (.Lexmark International, Inc. - Lexmark Connect Service Executable.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\lxduserv.exe [98984] [PID.]
[MD5.7B138CF1F964A697E628192EDCD8BFB0] - (.Pas de propriétaire - Printer Communication System.) -- C:\Windows\system32\lxducoms.exe [594600] [PID.]
[MD5.94E920BE59B9AB65D95E582DBAA136AC] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [366152] [PID.]
[MD5.9D1CCE440552500DED3A62F9D779CDB4] - (.Nero AG - NeroUpdate.) -- C:\Program Files\Nero\Update\NASvc.exe [503080] [PID.]
[MD5.11E1DC466C3E384C1A697B95DC5AA785] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.9.) -- C:\Windows\system32\nvvsvc.exe [196608] [PID.]
[MD5.739DB668DBD812285ECC553E64A5E212] - (.Pas de propriétaire - spmgr Module.) -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [125496] [PID.]
~ Scan Services in 00mn 00s

---\\ Enumération Active Desktop & MHTML Editor (O24)
~ Scan Desktop Component in 00mn 00s

---\\ Tâches planifiées en automatique (O39)
[MD5.E592FE9D3EABFE2DBFDB34AD81E35CCC] - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1054] [PID.]
[MD5.1CAF8387DD34B888E62FB253AF3EFECE] - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1058] [PID.]
[MD5.47054A5724456A2468D62077AFE16AFD] - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2180978303-2291401722-1775044503-1000Core.job [1034] [PID.]
[MD5.52DD0576999F17E044784FF117D1B371] - (...) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2180978303-2291401722-1775044503-1000UA.job [1086] [PID.]
[MD5.89711A9CCFA3C72392024B30F876079E] - (...) -- C:\Windows\Tasks\User_Feed_Synchronization-{61DE3AAB-1C73-4098-BCEB-6EC5EB2C0174}.job [406] [PID.]
~ Scan Scheduled Task in 00mn 00s

---\\ Pilotes lancés au démarrage (O41)
~ Scan Drivers in 00mn 00s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.329072EDDC2C71210EF6D8532DDA7E70] - 19/10/2011 - 21:10:43 ---A- . (...) -- C:\Windows\ntbtlog.txt [585746]
O44 - LFC:[MD5.50A9926B433522662000797BFFC35126] - 19/10/2011 - 21:10:36 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.CAB522F49C88EB10A933B9A9D11FDCBD] - 18/10/2011 - 08:33:39 ---A- . (...) -- C:\Windows\system32\FNTCACHE.DAT [2516120]
O44 - LFC:[MD5.82D7D9E4DCF35A11BB00E0BCD1B1A1C0] - 18/10/2011 - 08:26:40 --HA- . (...) -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [3616]
O44 - LFC:[MD5.82D7D9E4DCF35A11BB00E0BCD1B1A1C0] - 18/10/2011 - 08:26:40 --HA- . (...) -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [3616]
O44 - LFC:[MD5.00A92AA005E18ED7852FC7D834786313] - 18/10/2011 - 08:20:12 ---A- . (...) -- C:\ComboFix.txt [38239]
O44 - LFC:[MD5.3CF3D4A45CC2AF973DBC30EC8D33252B] - 18/10/2011 - 08:12:58 ---A- . (...) -- C:\Windows\system.ini [215]
O44 - LFC:[MD5.8673895951F520FD983479320A57CC80] - 18/10/2011 - 07:39:07 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1743017]
O44 - LFC:[MD5.5B4FA64BA0D3F1DD1CD4BDECA61C3AEC] - 18/10/2011 - 06:19:12 ---A- . (...) -- C:\Windows\PFRO.log [167886]
O44 - LFC:[MD5.FBB15E4A189B34ADFDEBC968976019AB] - 17/10/2011 - 16:38:26 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1527530]
O44 - LFC:[MD5.8BCB2790EBC91426FA548613953A75D1] - 17/10/2011 - 16:38:26 ---A- . (...) -- C:\Windows\system32\perfc009.dat [104914]
O44 - LFC:[MD5.C8FFBB66388DC9512941D6D2B5CA2728] - 17/10/2011 - 16:38:26 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [127504]
O44 - LFC:[MD5.0CD14C0C3A283B2E43213381B7ED1CF6] - 17/10/2011 - 16:38:26 ---A- . (...) -- C:\Windows\system32\perfh009.dat [598900]
O44 - LFC:[MD5.094737A5D011030A0D1F23C013321EFA] - 17/10/2011 - 16:38:26 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [681798]
O44 - LFC:[MD5.6BCAF46E2B7FA9ACE92B4D39F3037C5C] - 17/10/2011 - 14:15:16 ---A- . (...) -- C:\Windows\system32\acovcnt.exe [45056]
O44 - LFC:[MD5.753BC16326FEE4A421ACB636CCD602F4] - 17/10/2011 - 10:00:14 ---A- . (.NirSoft - NirCmd.) -- C:\Windows\NIRCMD.exe [60416]
O44 - LFC:[MD5.A46842C9B0C567A5A9584E83A163560C] - 17/10/2011 - 10:00:14 ---A- . (.SteelWerX - Freeware implementation of REG.EXE.) -- C:\Windows\SWREG.exe [518144]
O44 - LFC:[MD5.0297C72529807322B152F517FDB0A9FC] - 17/10/2011 - 10:00:14 ---A- . (.SteelWerX - Freeware implementation of SC.EXE.) -- C:\Windows\SWSC.exe [406528]
O44 - LFC:[MD5.44F6875460F7389C2574C917E66B8B77] - 13/10/2011 - 18:17:44 ---A- . (...) -- C:\AdwCleaner[S3].txt [1436]
O44 - LFC:[MD5.BD4C1462BE2098E8514DB5E17729F195] - 13/10/2011 - 18:17:01 ---A- . (...) -- C:\AdwCleaner[S2].txt [1360]
O44 - LFC:[MD5.0A1294999C271B098179B34CD410C1EB] - 13/10/2011 - 16:52:01 ---A- . (...) -- C:\TDSSKiller.2.6.8.0_13.10.2011_17.35.30_log.txt [78258]
O44 - LFC:[MD5.69A6268D7F81E53D568AB4E7E991CAF3] - 13/10/2011 - 16:50:21 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [22216]
O44 - LFC:[MD5.2DD76B46F72A1D2FB09F56D296D8C4F0] - 13/10/2011 - 16:44:57 ---A- . (...) -- C:\AdwCleaner[S1].txt [11363]
O44 - LFC:[MD5.899357EDF9DF009B4282AFD7CF4C31FB] - 13/10/2011 - 16:35:20 ---A- . (...) -- C:\TDSSKiller.2.6.8.0_13.10.2011_17.34.09_log.txt [78258]
O44 - LFC:[MD5.FB10179CDF67A882F52D50A5907F1DDA] - 13/10/2011 - 12:39:44 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.A118C5D445259E28569AA0957F66CA21] - 30/09/2011 - 15:46:35 ---A- . (...) -- C:\Windows\setupact.log [201829]
O44 - LFC:[MD5.EEBACD996A2059BAE2181BB60673B938] - 27/09/2011 - 05:22:45 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\system32\FlashPlayerCPLApp.cpl [404640]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/09/2011 - 07:17:57 --HA- . (...) -- C:\Windows\system32\drivers\Msft_User_WpdRapi_01_00_00.Wdf [0]
O44 - LFC:[MD5.F042EE4C8D66248D9B86DCF52ABAE416] - 26/06/2011 - 07:45:56 ---A- . (...) -- C:\Windows\PEV.exe [256000]
O44 - LFC:[MD5.0277C027A26428DB64EF4F64F52BB4FD] - 07/11/2010 - 18:20:24 ---A- . (...) -- C:\Windows\MBR.exe [208896]
O44 - LFC:[MD5.9E05A9C264C8A908A8E79450FCBFF047] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\grep.exe [80412]
O44 - LFC:[MD5.2B657A67AEBB84AEA5632C53E61E23BF] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\sed.exe [98816]
O44 - LFC:[MD5.5E832F4FAF5F481F2EAF3B3A48F603B8] - 31/08/2000 - 01:00:00 ---A- . (...) -- C:\Windows\zip.exe [68096]
~ Scan Files in 00mn 03s

---\\ Contrôle du Safe Boot (CSB) (O49)
~ Scan CSB in 00mn 00s

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:23:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422968]
O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:23:25 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [300600]
O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:23:26 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [101432]
O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:23:27 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [149560]
O58 - SDL:[MD5.9EAEF5FC9B8E351AFA7E78A6FAE91F91] - 21/01/2008 - 03:23:00 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [17464]
O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:23:23 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [79416]
O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:23:24 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [79928]
O58 - SDL:[MD5.4385E371C25C94C804E9D3152BD9E1F7] - 27/09/2008 - 04:19:26 ---A- . (.Windows (R) Codename Longhorn DDK provider - Data Security Manager Driver.) -- C:\Windows\system32\drivers\AsDsm.sys [29752]
O58 - SDL:[MD5.600EFE56F37ADBD65A0FB076B50D1B8D] - 27/09/2008 - 19:07:44 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athr.sys [909824]
O58 - SDL:[MD5.97AFFA9D95FFE20EEE6229BC6BE166CF] - 27/09/2008 - 08:11:57 ---A- . (.ATK0100 - ATK0100 ACPI Utility.) -- C:\Windows\system32\drivers\ATKACPI.sys [7680]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
O58 - SDL:[MD5.0CA25E686A4928484E9FDABD168AB629] - 21/01/2008 - 03:23:00 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [19000]
O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]
O58 - SDL:[MD5.23020385D34E35DFC2D6503FA67D3FFC] - 12/05/2009 - 17:00:54 ---A- . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\Windows\system32\drivers\DsAudioDevice_207.sys [16640]
O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:23:24 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [118784]
O58 - SDL:[MD5.04CBA07E73F152970FC34D66D3892E2A] - 17/10/2011 - 14:04:06 ---A- . (.ESET - Amon monitor.) -- C:\Windows\system32\drivers\eamonm.sys [137144]
O58 - SDL:[MD5.FE7824239D132AD9EBD8645FE1199B30] - 17/10/2011 - 14:04:06 ---A- . (.ESET - ESET Helper driver.) -- C:\Windows\system32\drivers\ehdrv.sys [115008]
O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:23:22 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [342584]
O58 - SDL:[MD5.DDB45F6371714601A43E8BE38145BE18] - 17/10/2011 - 12:47:38 ---A- . (.ESET - ESET Personal Firewall driver.) -- C:\Windows\system32\drivers\epfwwfpr.sys [95384]
O58 - SDL:[MD5.1D4D6D24256F61E6B08A3CF8184A78B8] - 15/07/2011 - 12:45:34 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\system32\drivers\ewusbfake.sys [103040]
O58 - SDL:[MD5.92CA47DA32009CCC00A5ADED04ABBD78] - 15/07/2011 - 12:45:35 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\system32\drivers\ewusbmdm.sys [102784]
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 18/04/2011 - 12:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600]
O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:23:26 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [40504]
O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:23:23 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [235064]
O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]
O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]
O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]
O58 - SDL:[MD5.27BD4AC228EF6C0D490617C32E86A672] - 27/09/2008 - 22:41:51 ---A- . (.Pas de propriétaire - Keyboard Filter Driver.) -- C:\Windows\system32\drivers\kbfiltr.sys [15928]
O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [96312]
O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:23:25 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89656]
O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:23:23 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96312]
O58 - SDL:[MD5.8039F480C192DD99FED4EBC71FFBF795] - 27/09/2008 - 18:21:02 ---A- . (.Windows (R) Codename Longhorn DDK provider - ASUS CopyProtect driver.) -- C:\Windows\system32\drivers\lullaby.sys [15416]
O58 - SDL:[MD5.B1AD87B4C97B6B59FCD075001E76865F] - 26/04/2004 - 22:31:04 ---A- . (.Logitech Inc. - Video Minidriver.) -- C:\Windows\system32\drivers\lvcd.sys [474304]
O58 - SDL:[MD5.BC4052D0E8415E00E3270E0AA792860B] - 26/04/2004 - 22:28:30 ---A- . (.Logitech Inc. - USB Statistic Driver.) -- C:\Windows\system32\drivers\LVUSBSta.sys [12112]
O58 - SDL:[MD5.A3E700D78EEC390F1208098CDCA5C6B6] - 07/01/2009 - 10:07:00 ---A- . (.Pinnacle Systems GmbH - Pinnacle Marvin Discrete Bus Enumerator.) -- C:\Windows\system32\drivers\MarvinBus.sys [171520]
O58 - SDL:[MD5.69A6268D7F81E53D568AB4E7E991CAF3] - 13/10/2011 - 16:00:50 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [22216]
O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [31288]
O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:23:27 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [386616]
O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]
O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]
O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]
O58 - SDL:[MD5.440690DA4358D9682DBCC56DA7D419AB] - 27/09/2008 - 15:22:59 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 175.) -- C:\Windows\system32\drivers\nvlddmkm.sys [7522624]
O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [102968]
O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:23:21 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [45112]
O58 - SDL:[MD5.1BEBE7DE8508A02650CDCE45C664C2A2] - 07/01/2009 - 12:59:00 ---A- . (.Pinnacle Systems GmbH - PCLEPCI.) -- C:\Windows\system32\drivers\Pclepci.sys [14165]
O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:23:24 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1122360]
O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]
O58 - SDL:[MD5.C35CA13D3627EBD9DD12A23CE781BC3D] - 27/09/2008 - 04:42:08 ---A- . (.REDC - RICOH SD Driver.) -- C:\Windows\system32\drivers\rimmptsk.sys [45568]
O58 - SDL:[MD5.C398BCA91216755B098679A8DA8A2300] - 27/09/2008 - 18:42:58 ---A- . (.REDC - RICOH MS Driver.) -- C:\Windows\system32\drivers\rimsptsk.sys [43008]
O58 - SDL:[MD5.2A2554CB24506E0A0508FC395C4A1B42] - 27/09/2008 - 19:54:02 ---A- . (.REDC - RICOH XD SM Driver.) -- C:\Windows\system32\drivers\rixdptsk.sys [38400]
O58 - SDL:[MD5.0557AAEE4C86E2C333ACD2BAF42A7619] - 27/09/2008 - 00:09:47 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [2159384]
O58 - SDL:[MD5.1C5C2CB892553D2CF3F45A4BB323FCD6] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 Driver.) -- C:\Windows\system32\drivers\s1018bus.sys [86824]
O58 - SDL:[MD5.2AB45CEDAA214125501A0C7F91E105A4] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018cm.sys [12200]
O58 - SDL:[MD5.2AB45CEDAA214125501A0C7F91E105A4] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018cmnt.sys [12200]
O58 - SDL:[MD5.130A3049E2A66AF0877DA7E9B18DDE90] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Ericsson Mobile Platform S1018 USB WMC Extended Ethernet (WDM c.) -- C:\Windows\system32\drivers\s1018cr.sys [10792]
O58 - SDL:[MD5.38F5EA219593F19B6B3A1B9C169E3B61] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Modem Filter Driver.) -- C:\Windows\system32\drivers\s1018mdfl.sys [15016]
O58 - SDL:[MD5.666AF6B64FC7DF92D3CA4819EA91631D] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Modem WDM Driver.) -- C:\Windows\system32\drivers\s1018mdm.sys [114728]
O58 - SDL:[MD5.F4CEDA6E2DDFF2AF8BD745615A7CA9C0] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Device Management Driver.) -- C:\Windows\system32\drivers\s1018mgmt.sys [106208]
O58 - SDL:[MD5.3622D9FF2253DCBE885B10736609A4CA] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Ericsson Mobile Platform S1018 USB WMC Extended Ethernet (NDIS.) -- C:\Windows\system32\drivers\s1018nd5.sys [26024]
O58 - SDL:[MD5.49431EFDA842B474531C29FFAE9F5D09] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC OBEX Interface Device Driver.) -- C:\Windows\system32\drivers\s1018obex.sys [104744]
O58 - SDL:[MD5.AC6B514CB4474F4C867D7CDC9CD54F05] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB Ethernet Emulation.) -- C:\Windows\system32\drivers\s1018unic.sys [109864]
O58 - SDL:[MD5.5DD0D936FD9E503C96B9D41A284F815E] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018wh.sys [12200]
O58 - SDL:[MD5.5DD0D936FD9E503C96B9D41A284F815E] - 17/04/2011 - 15:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018whnt.sys [12200]
O58 - SDL:[MD5.06847AA6F3A9BF7C44134D00A2E578C0] - 18/04/2011 - 10:33:34 ---A- . (.MCCI Corporation - Sony Ericsson Device 125 Driver.) -- C:\Windows\system32\drivers\s125bus.sys [83336]
O58 - SDL:[MD5.3614D30325659D9D466D4ED767609CD6] - 18/04/2011 - 10:33:38 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s125cm.sys [12424]
O58 - SDL:[MD5.3614D30325659D9D466D4ED767609CD6] - 18/04/2011 - 10:33:38 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s125cmnt.sys [12424]
O58 - SDL:[MD5.F83F88E1B125308FB5015EA0349502B0] - 18/04/2011 - 10:33:42 ---A- . (.MCCI Corporation - Sony Ericsson Device 125 USB WMC Modem Filter Driver.) -- C:\Windows\system32\drivers\s125mdfl.sys [15112]
O58 - SDL:[MD5.402A97756C14940AD6AE5169C2FB105E] - 18/04/2011 - 10:33:44 ---A- . (.MCCI Corporation - Sony Ericsson Device 125 USB WMC Modem WDM Driver.) -- C:\Windows\system32\drivers\s125mdm.sys [108680]
O58 - SDL:[MD5.82B14C51DE76825EC769A6374E4C57D6] - 18/04/2011 - 10:33:46 ---A- . (.MCCI Corporation - Sony Ericsson Device 125 USB WMC Device Management Driver.) -- C:\Windows\system32\drivers\s125mgmt.sys [100488]
O58 - SDL:[MD5.BEDFC5707C356FD073BF1A4AFE442D91] - 18/04/2011 - 10:33:46 ---A- . (.MCCI Corporation - Sony Ericsson Device 125 USB WMC OBEX Interface Device Driver.) -- C:\Windows\system32\drivers\s125obex.sys [98696]
O58 - SDL:[MD5.DFA5BCD0D7DFB632DE08F72B21FD8FB8] - 18/04/2011 - 10:33:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s125wh.sys [12424]
O58 - SDL:[MD5.DFA5BCD0D7DFB632DE08F72B21FD8FB8] - 18/04/2011 - 10:33:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s125whnt.sys [12424]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.73838461F11FC7DAEE7922C945B2D74F] - 27/09/2008 - 05:09:03 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [48128]
O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:23:26 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [74808]
O58 - SDL:[MD5.C8A58FC905C9184FA70E37F71060C64D] - 02/11/2006 - 08:41:49 ---A- . (.Motorola Inc. - Motorola SM56 Modem WDM Driver.) -- C:\Windows\system32\drivers\smserial.sys [1010560]
O58 - SDL:[MD5.0057F29323C393A35903B4C5DAF9A144] - 27/09/2008 - 23:16:39 ---A- . (.Pas de propriétaire - USBCAMD for Sonix UVC.) -- C:\Windows\system32\drivers\sncduvc.sys [28160]
O58 - SDL:[MD5.85DA7B2A2F248C8C69D7D0A526342683] - 27/09/2008 - 23:13:57 ---A- . (.Pas de propriétaire - UVC Camera Streaming Driver.) -- C:\Windows\system32\drivers\snp2uvc.sys [1807744]
O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]
O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]
O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]
O58 - SDL:[MD5.55F6E55CC2430CA8713387106FA79817] - 27/09/2008 - 11:12:47 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys [196400]
O58 - SDL:[MD5.EA02D11234C29E3AF778081498072131] - 12/05/2009 - 08:49:06 ---A- . (.RapidSolution Software AG - Tunebite High-Speed Dubbing.) -- C:\Windows\system32\drivers\tbhsd.sys [38816]
O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:23:20 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [238648]
O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]
O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:23:23 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]
O58 - SDL:[MD5.83CAFCB53201BBAC04D822F32438E244] - 13/06/2011 - 07:06:08 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\system32\drivers\usbaapl.sys [42496]
O58 - SDL:[MD5.AADF5587A4063F52C2C3FED7887426FC] - 21/01/2008 - 03:23:00 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [20024]
O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:23:23 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [130616]
O58 - SDL:[MD5.7D1F3B131D503EF43EE594B5A2B9B427] - 02/11/2006 - 08:30:56 ---A- . (.Marvell - Pilote miniport NDIS6.0 pour contrôleur Ethernet Marvell Yukon.) -- C:\Windows\system32\drivers\yk60x86.sys [194048]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]
O58 - SDL:[MD5.600EFE56F37ADBD65A0FB076B50D1B8D] - 27/09/2008 - 19:07:44 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\athr.sys [909824]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]
~ Scan Drivers in 00mn 06s

End of the scan (530 lines in 00mn 23s)(0)

Réponse 54 / 69

PatCathare Messages postés 41 Date d'inscription jeudi 13 octobre 2011 Statut Membre Dernière intervention 9 février 2015
20 oct. 2011 à 11:20

Ha quand même !
lol

Réponse 55 / 69

Utilisateur anonyme
20 oct. 2011 à 13:14

Re

1) Télécharge DelFix de Xplode
Ou si problème sur ce site : http://sd-1.archive-host.com/membres/up/17959594961240255/DelFix.exe

Ou encore : https://www.commentcamarche.net/download/s/delfix

* Lance le.
* A l'invite, [Suppression]
* Un rapport va s'ouvrir à la fin, colle le dans la réponse

Ensuite pour le désinstaller ; tu relances et tu passes à l'option [Désinstallation]

@+

Réponse 56 / 69

PatCathare Messages postés 41 Date d'inscription jeudi 13 octobre 2011 Statut Membre Dernière intervention 9 février 2015
20 oct. 2011 à 13:38

# DelFix v8.1 - Rapport créé le 20/10/2011 à 13:37
# Mis à jour le 20/06/11 à 19h par Xplode
# Système d'exploitation : Windows Vista (TM) Home Premium (32 bits) [version 6.0.6002] Service Pack 2
# Nom d'utilisateur : Patrice - PORTABLE-PAT (Administrateur)
# Exécuté depuis : C:\Users\Patrice\Downloads\DelFix-8.1.exe
# Option [Suppression]

~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\Combofix
Supprimé : C:\Qoobox
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\ComboFix.txt
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\TDSSKiller.2.6.8.0_13.10.2011_17.34.09_log.txt
Supprimé : C:\TDSSKiller.2.6.8.0_13.10.2011_17.35.30_log.txt
Supprimé : C:\Windows\grep.exe
Supprimé : C:\Windows\MBR.exe
Supprimé : C:\Windows\NIRCMD.exe
Supprimé : C:\Windows\PEV.exe
Supprimé : C:\Windows\sed.exe
Supprimé : C:\Windows\SWREG.exe
Supprimé : C:\Windows\SWSC.exe
Supprimé : C:\Windows\SWXCACLS.exe
Supprimé : C:\Windows\zip.exe
Supprimé : C:\Users\Patrice\Desktop\ComboFix.exe
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Patrice\Downloads\esetsmartinstaller_enu.exe
Supprimé : C:\Users\Patrice\Downloads\hijackthis.log

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
ACL -> [F] & Clé Supprimée : HKLM\SOFTWARE\Swearware

~~~~~~ Autre ~~~~~~

-> Prefetch vidé

########## EOF - "C:\DelFixSuppr.txt" - [1680 octets] ##########

Réponse 57 / 69

Utilisateur anonyme
21 oct. 2011 à 08:13

Bonjour

On reprend avec ComboFix que tu renomme et enregistre sur le bureau.

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Ou ici : https://forospyware.com
>Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

- Installe le console de récupération comme demandé ;utile en cas de plantage

- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)

::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes

@+

Réponse 58 / 69

PatCathare Messages postés 41 Date d'inscription jeudi 13 octobre 2011 Statut Membre Dernière intervention 9 février 2015
22 oct. 2011 à 13:00

ComboFix 11-10-21.06 - Patrice 22/10/2011 12:32:46.1.2 - x86
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3070.1712 [GMT 2:00]
Lancé depuis: c:\users\Patrice\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Patrice\AppData\Local\temp\ppcrlui_6120_2
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-09-22 au 2011-10-22 ))))))))))))))))))))))))))))))))))))
.
.
2011-10-22 10:22 . 2011-10-22 10:22 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92D8917F-9F05-46E2-BE57-3D2BB13A25AA}\offreg.dll
2011-10-22 10:22 . 2011-10-07 03:48 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92D8917F-9F05-46E2-BE57-3D2BB13A25AA}\mpengine.dll
2011-10-17 09:45 . 2011-09-14 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-10-17 09:45 . 2011-08-25 16:15 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2011-10-17 09:45 . 2011-08-25 16:14 238080 ----a-w- c:\windows\system32\oleacc.dll
2011-10-17 09:45 . 2011-08-25 16:14 563712 ----a-w- c:\windows\system32\oleaut32.dll
2011-10-17 09:45 . 2011-08-25 13:31 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2011-10-13 15:50 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-10-13 06:47 . 2011-10-20 07:12 -------- d-----w- C:\ZHP
2011-10-12 14:31 . 2011-10-12 14:31 -------- d-----w- c:\programdata\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
2011-10-12 12:33 . 2011-10-18 05:19 -------- d-----w- c:\program files\ESET
2011-10-12 06:35 . 2011-10-12 06:35 -------- d-----w- c:\users\Patrice\AppData\Roaming\Systweak
2011-10-12 06:35 . 2011-10-12 06:35 -------- d-----w- c:\program files\RegClean Pro
2011-10-10 14:24 . 2011-10-10 14:24 -------- d-----w- c:\users\Patrice\AppData\Roaming\Malwarebytes
2011-10-10 14:23 . 2011-10-13 15:50 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-10-10 14:23 . 2011-10-10 14:23 -------- d-----w- c:\programdata\Malwarebytes
2011-10-08 17:24 . 2011-10-09 06:42 -------- d-----w- c:\users\Invité
2011-09-30 14:47 . 2011-09-30 14:47 -------- d-----w- c:\programdata\Lexmark 5600-6600 Series
2011-09-30 13:16 . 2011-10-13 02:17 -------- d-----w- c:\program files\BrowserCompanion
2011-09-29 13:22 . 2011-09-29 13:22 -------- d-----w- c:\windows\fr
2011-09-29 13:16 . 2011-09-29 13:16 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-17 13:15 . 2008-09-27 19:21 45056 ----a-w- c:\windows\system32\acovcnt.exe
2011-09-27 04:22 . 2011-08-14 16:28 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2008-07-02 02:28 . 2008-07-02 02:28 61440 ----a-w- c:\program files\Common Files\CPInstallAction.dll
2011-10-03 00:33 . 2011-08-24 09:25 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{00cbb66b-1d3b-46d3-9577-323a336acb50}]
2011-07-21 10:10 225584 ----a-w- c:\program files\BrowserCompanion\jsloader.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]
2009-10-15 08:53 165184 ----a-w- c:\program files\SFR\Kit\SFRNavErrorHelper.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{59994074-c06d-4a75-9768-49e5a8c21264}]
2010-07-05 17:10 2734688 ----a-w- c:\program files\Messenger_Plus_Live_France\tbMes1.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
2010-04-27 08:08 2393184 ----a-w- c:\program files\DVDVideoSoftTB\tbDVDV.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}]
2011-07-21 10:10 141104 ----a-w- c:\program files\BrowserCompanion\updatebhoWin32.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ef79f67a-6ad7-4715-a0f8-932fca442023}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\BittorrentBar_FR\tbBitt.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes1.dll" [2010-07-05 2734688]
"{ef79f67a-6ad7-4715-a0f8-932fca442023}"= "c:\program files\BittorrentBar_FR\tbBitt.dll" [2010-12-09 3911776]
"{872b5b88-9db5-4310-bdd0-ac189557e5f5}"= "c:\program files\DVDVideoSoftTB\tbDVDV.dll" [2010-04-27 2393184]
.
[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]
.
[HKEY_CLASSES_ROOT\clsid\{ef79f67a-6ad7-4715-a0f8-932fca442023}]
.
[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{59994074-C06D-4A75-9768-49E5A8C21264}"= "c:\program files\Messenger_Plus_Live_France\tbMes1.dll" [2010-07-05 2734688]
"{EF79F67A-6AD7-4715-A0F8-932FCA442023}"= "c:\program files\BittorrentBar_FR\tbBitt.dll" [2010-12-09 3911776]
"{872B5B88-9DB5-4310-BDD0-AC189557E5F5}"= "c:\program files\DVDVideoSoftTB\tbDVDV.dll" [2010-04-27 2393184]
.
[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]
.
[HKEY_CLASSES_ROOT\clsid\{ef79f67a-6ad7-4715-a0f8-932fca442023}]
.
[HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\Patrice\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\Patrice\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\Patrice\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]
"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-06-09 13543968]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-06-09 92704]
"HControlUser"="c:\program files\ATK Hotkey\HcontrolUser.exe" [2008-01-12 98304]
"ATKOSD2"="c:\program files\ATKOSD2\ATKOSD2.exe" [2008-01-23 7766016]
"RtHDVCpl"="RtHDVCpl.exe" [2008-08-12 6265376]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"ChkMail"="c:\program files\ChkMail\ChkMail\ChkMail.exe" [2007-07-14 741376]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMedia.exe" [2008-06-25 159744]
"ASUS Camera ScreenSaver"="c:\windows\AsScrProlog.exe" [2008-09-27 47672]
"ASUS Screen Saver Protector"="c:\windows\ASScrPro.exe" [2008-09-27 33136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2011-09-07 40376]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2010-09-22 640440]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2007-12-14 524288]
"lxdumon.exe"="c:\program files\Lexmark 5600-6600 Series\lxdumon.exe" [2008-09-10 676520]
"lxduamon"="c:\program files\Lexmark 5600-6600 Series\lxduamon.exe" [2008-09-10 16040]
"Lexmark 5600-6600 Series Fax Server"="c:\program files\Lexmark 5600-6600 Series\fm3032.exe" [2008-09-10 311976]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-29 937920]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2010-12-13 135536]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"PlusService"="c:\program files\Yuna Software\Messenger Plus!\PlusService.exe" [2011-09-20 801792]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2008-01-21 215552]
"Browser companion helper"="c:\program files\BrowserCompanion\BCHelper.exe" [2011-08-08 182576]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-10-17 2219184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
.
c:\users\Patrice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Patrice\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-5-25 24176560]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-11-14 110592]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"EnableShellExecuteHooks"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\acaptuser32.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
.
R2 0257331318482734mcinstcleanup;McAfee Application Installer Cleanup (0257331318482734);c:\users\Patrice\AppData\Local\Temp\025733~1.EXE [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-21 136176]
R2 lxduCATSCustConnectService;lxduCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxduserv.exe [2008-05-23 98984]
R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]
R3 DsAudioDevice_207;DsAudioDevice_207;c:\windows\system32\drivers\DsAudioDevice_207.sys [2009-01-08 16640]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-21 136176]
R3 hwusbfake;Huawei DataCard USB Fake;c:\windows\system32\DRIVERS\ewusbfake.sys [2009-06-15 103040]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys [2010-12-13 30576]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R3 WSDPrintDevice;Prise en charge de l'impression WSD via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [2008-01-21 16896]
S0 lullaby;lullaby;c:\windows\system32\DRIVERS\lullaby.sys [2008-05-29 15416]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-12-21 137144]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2010-12-21 95384]
S2 lxdu_device;lxdu_device;c:\windows\system32\lxducoms.exe [2008-05-23 594600]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2006-12-08 5120]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-08-31 22216]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSGB6.sys [2007-11-16 48128]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Contenu du dossier 'Tâches planifiées'
.
2011-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-27 08:35]
.
2011-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-27 08:35]
.
2011-10-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2180978303-2291401722-1775044503-1000Core.job
- c:\users\Patrice\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-21 08:35]
.
2011-10-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2180978303-2291401722-1775044503-1000UA.job
- c:\users\Patrice\AppData\Local\Google\Update\GoogleUpdate.exe [2011-03-21 08:35]
.
2009-12-30 c:\windows\Tasks\User_Feed_Synchronization-{61DE3AAB-1C73-4098-BCEB-6EC5EB2C0174}.job
- c:\windows\system32\msfeedssync.exe [2011-10-17 21:29]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.plusnetwork.com/?dp=MessengerPlus
mStart Page = hxxp://fr.woofi.info
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.plusnetwork.com/?sp=lintbie&q={searchTerms}&dp=MessengerPlus
IE: Ajouter la cible du lien à un fichier PDF existant - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Ajouter à un fichier PDF existant - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convertir au format Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Convertir la cible du lien au format Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convertir les liens sélectionnés en fichier Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube to Mp3 Converter - c:\users\Patrice\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
TCP: DhcpNameServer = 192.168.1.1
Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - c:\program files\BrowserCompanion\tdataprotocol.dll
Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - c:\program files\BrowserCompanion\tdataprotocol.dll
Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - c:\program files\BrowserCompanion\tdataprotocol.dll
FF - ProfilePath - c:\users\Patrice\AppData\Roaming\Mozilla\Firefox\Profiles\whhsk6jx.default\
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=mcafee&p=
.
.
------- Associations de fichier -------
.
.txt=
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-22 12:44
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
.
c:\users\Patrice\AppData\Local\Temp\catchme.dll 53248 bytes executable
C:\ADSM_PData_0150
.
Scan terminé avec succès
Fichiers cachés: 2
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.032"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.ani"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.arw"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.bay"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.bmp"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.bw"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.cr2"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.crw"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.cs1"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.cur"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.dcr"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.dcx"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.dib"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.djv"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.djvu"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.dng"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.emf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.eps"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.erf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.fff"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.fpx"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.gif"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.hdr"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.icl"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.icn"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.ico"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.iff"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.ilbm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.int"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.inta"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.iw4"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.j2c"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.j2k"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jfif"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jif"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jp2"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jpc"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jpe"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jpeg"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jpg"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jpk"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.jpx"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.lbm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.mef"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.mos"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.mrw"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.nef"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.orf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pbm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pcd"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pct"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pcx"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pef"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pgm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pic"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pict"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pix"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.png"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.ppm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.psd"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.psp"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.pspimage"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.raf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.ras"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.raw"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.rgb"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.rgba"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.rle"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.rsb"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.sgi"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.sr2"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.srf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.tga"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.thm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.tif"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.tiff"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.ttc"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.ttf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10o\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10o"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10p\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10p"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v10pf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.v10pf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.wbm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.wbmp"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.wmf"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.xbm"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.xif"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.xmp"
.
[HKEY_USERS\S-1-5-21-2180978303-2291401722-1775044503-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 10.0.xpm"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2011-10-22 12:55:27
ComboFix-quarantined-files.txt 2011-10-22 10:55
.
Avant-CF: 37 354 024 960 octets libres
Après-CF: 36 757 180 416 octets libres
.
- - End Of File - - 3F19C882D76436E0947B2724B1305B45

Réponse 59 / 69

PatCathare Messages postés 41 Date d'inscription jeudi 13 octobre 2011 Statut Membre Dernière intervention 9 février 2015
25 oct. 2011 à 07:30

Et maintenant ?

Réponse 60 / 69

Utilisateur anonyme
25 oct. 2011 à 12:12

Bonjour

Vérifions si cela ne proviendrai pas de Windows.

Pour cela:

http://fixitcenter.support.microsoft.com/Portal/WhyFixIt?ln=fr-fr

@+

Accès aux programmes impossible (vista) !

69 réponses

Discussions similaires