Liaison internet très très lente. Spyware ?

Merci d'avoir repris le fil.
C'est vrai que Master@Altaîr m'a bien aidé, et je le remercie encore et encore.
Je mets en route le premier point dont tu parles (DelFix), et je reviens... ;-)

Apparemment, c'est déjà supprimé, je me souviens que je l'avais fait.
Ensuite, point n°2 : ZHPDiag... Je mets en route aussi.

# DelFix v8.6 - Rapport créé le 24/10/2011 à 13:09:37
# Mis à jour le 13/10/11 à 18h par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
# Nom d'utilisateur : Philippe - PHILIPPE-PC (Administrateur)
# Exécuté depuis : C:\Users\Philippe\Downloads\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\Users\Philippe\Downloads\Hotmail (1).zip
Supprimé : C:\Users\Philippe\Downloads\Hotmail.zip
Supprimé : C:\Users\Philippe\Downloads\Ile Maurice Septembre 2009 220.JPG

~~~~~~ Registre ~~~~~~


~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [688 octets] - [24/10/2011 13:09:37]

########## EOF - C:\DelFix[S1].txt - [811 octets] ##########

OK

Voila le rapport de ZHPDiag

http://www.cijoint.fr/cjlink.php?file=cj201110/cijy47IrXT.txt

Je vois un "Warning: possible TDL3 rootkit infection !"... sera-ce cela ?

Ah ! il serait revenu.
Je te tiens au courant. ;)

J'ai modifié les réglages de AVAST comme indiqué.
Je vais maintenant installer TDSKiller.

Rapport de TDSKiller après détection d'un Suspicious file puis de la validation de l'option "Skip" sur TDSKiller :

18:30:33.0887 5772 TDSS rootkit removing tool 2.6.12.0 Oct 21 2011 11:23:48
18:30:34.0087 5772 ============================================================
18:30:34.0087 5772 Current date / time: 2011/10/24 18:30:34.0087
18:30:34.0088 5772 SystemInfo:
18:30:34.0088 5772
18:30:34.0088 5772 OS Version: 6.1.7601 ServicePack: 1.0
18:30:34.0088 5772 Product type: Workstation
18:30:34.0088 5772 ComputerName: PHILIPPE-PC
18:30:34.0088 5772 UserName: Philippe
18:30:34.0088 5772 Windows directory: C:\windows
18:30:34.0088 5772 System windows directory: C:\windows
18:30:34.0088 5772 Processor architecture: Intel x86
18:30:34.0088 5772 Number of processors: 2
18:30:34.0088 5772 Page size: 0x1000
18:30:34.0088 5772 Boot type: Normal boot
18:30:34.0088 5772 ============================================================
18:30:34.0198 5772 Initialize success
18:30:37.0562 1648 ============================================================
18:30:37.0562 1648 Scan started
18:30:37.0562 1648 Mode: Manual;
18:30:37.0562 1648 ============================================================
18:30:37.0968 1648 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys
18:30:37.0985 1648 1394ohci - ok
18:30:38.0062 1648 39625699 (89fdba391985968401f51a5c577933cd) C:\windows\system32\drivers\14350179.sys
18:30:38.0102 1648 5U876UVC (080a40550fb95a328917512f3f5a0409) C:\windows\system32\DRIVERS\5U876.sys
18:30:38.0103 1648 5U876UVC - ok
18:30:38.0190 1648 a2acc (71574a98093d94bdbb3cb74e272d29a5) C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\a2accx86.sys
18:30:38.0191 1648 a2acc - ok
18:30:38.0209 1648 a2injectiondriver (b4fba42bdd499eb94423166d65b67b93) C:\Program Files\Emsisoft Anti-Malware\a2dix86.sys
18:30:38.0210 1648 a2injectiondriver - ok
18:30:38.0225 1648 a2util (2da26eb05b5495d3b2ee36456c239fb7) C:\Program Files\Emsisoft Anti-Malware\a2util32.sys
18:30:38.0225 1648 a2util - ok
18:30:38.0272 1648 Accelerometer (cc1f1d3d70dc13c2c281488d347d4415) C:\windows\system32\DRIVERS\Accelerometer.sys
18:30:38.0273 1648 Accelerometer - ok
18:30:38.0315 1648 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys
18:30:38.0317 1648 ACPI - ok
18:30:38.0343 1648 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys
18:30:38.0344 1648 AcpiPmi - ok
18:30:38.0378 1648 ADIHdAudAddService (6c61bceb60c2c187e6f96001fd69493e) C:\windows\system32\drivers\ADIHdAud.sys
18:30:38.0380 1648 ADIHdAudAddService - ok
18:30:38.0452 1648 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys
18:30:38.0454 1648 adp94xx - ok
18:30:38.0500 1648 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys
18:30:38.0502 1648 adpahci - ok
18:30:38.0535 1648 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys
18:30:38.0536 1648 adpu320 - ok
18:30:38.0583 1648 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys
18:30:38.0585 1648 AFD - ok
18:30:38.0627 1648 AgereSoftModem (7e10e3bb9b258ad8a9300f91214d67b9) C:\windows\system32\DRIVERS\AGRSM.sys
18:30:38.0634 1648 AgereSoftModem - ok
18:30:38.0662 1648 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys
18:30:38.0663 1648 agp440 - ok
18:30:38.0692 1648 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys
18:30:38.0693 1648 aic78xx - ok
18:30:38.0715 1648 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys
18:30:38.0716 1648 aliide - ok
18:30:38.0753 1648 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys
18:30:38.0754 1648 amdagp - ok
18:30:38.0776 1648 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys
18:30:38.0777 1648 amdide - ok
18:30:38.0807 1648 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys
18:30:38.0808 1648 AmdK8 - ok
18:30:38.0824 1648 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys
18:30:38.0825 1648 AmdPPM - ok
18:30:38.0852 1648 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys
18:30:38.0854 1648 amdsata - ok
18:30:38.0880 1648 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys
18:30:38.0881 1648 amdsbs - ok
18:30:38.0897 1648 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys
18:30:38.0898 1648 amdxata - ok
18:30:38.0950 1648 Andbus (3e59df4984fbd6800d6621480b38a34e) C:\windows\system32\DRIVERS\lgandbus.sys
18:30:38.0951 1648 Andbus - ok
18:30:38.0991 1648 AndDiag (8e0bf6f3b2c9c292bc7ce0de727cdd56) C:\windows\system32\DRIVERS\lganddiag.sys
18:30:38.0991 1648 AndDiag - ok
18:30:39.0022 1648 AndGps (1d2c90e25483363d54b652898bbc8f2a) C:\windows\system32\DRIVERS\lgandgps.sys
18:30:39.0022 1648 AndGps - ok
18:30:39.0054 1648 ANDModem (b1b06a95da2cac7fa19832c60c348c85) C:\windows\system32\DRIVERS\lgandmodem.sys
18:30:39.0054 1648 ANDModem - ok
18:30:39.0085 1648 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys
18:30:39.0085 1648 AppID - ok
18:30:39.0132 1648 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys
18:30:39.0132 1648 arc - ok
18:30:39.0147 1648 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys
18:30:39.0147 1648 arcsas - ok
18:30:39.0194 1648 aswFsBlk (c47623ffd181a1e7d63574dde2a0a711) C:\windows\system32\drivers\aswFsBlk.sys
18:30:39.0210 1648 aswFsBlk - ok
18:30:39.0241 1648 aswMonFlt (4804753a4ec7d67cc22d226bffd1c1e3) C:\windows\system32\drivers\aswMonFlt.sys
18:30:39.0241 1648 aswMonFlt - ok
18:30:39.0256 1648 aswRdr (36239e24470a3dd81fae37510953cc6c) C:\windows\system32\drivers\aswRdr.sys
18:30:39.0256 1648 aswRdr - ok
18:30:39.0334 1648 aswSnx (caa846e9c83836bdc3d2d700c678db65) C:\windows\system32\drivers\aswSnx.sys
18:30:39.0334 1648 aswSnx - ok
18:30:39.0381 1648 aswSP (748ae7f2d7da33adb063fe05704a9969) C:\windows\system32\drivers\aswSP.sys
18:30:39.0381 1648 aswSP - ok
18:30:39.0397 1648 aswTdi (ca9925ce1dbd07ffe1eb357752cf5577) C:\windows\system32\drivers\aswTdi.sys
18:30:39.0397 1648 aswTdi - ok
18:30:39.0428 1648 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys
18:30:39.0428 1648 AsyncMac - ok
18:30:39.0459 1648 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys
18:30:39.0459 1648 atapi - ok
18:30:39.0490 1648 AtiHdmiService (e2398389648b5d44dc63ca43fdd5b3f8) C:\windows\system32\drivers\AtiHdmi.sys
18:30:39.0490 1648 AtiHdmiService - ok
18:30:39.0613 1648 atikmdag (a4252328d2b1520571102992ef0b0e5c) C:\windows\system32\DRIVERS\atikmdag.sys
18:30:39.0645 1648 atikmdag - ok
18:30:39.0712 1648 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys
18:30:39.0717 1648 b06bdrv - ok
18:30:39.0744 1648 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys
18:30:39.0746 1648 b57nd60x - ok
18:30:39.0790 1648 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys
18:30:39.0791 1648 Beep - ok
18:30:39.0831 1648 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys
18:30:39.0832 1648 blbdrive - ok
18:30:39.0870 1648 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys
18:30:39.0871 1648 bowser - ok
18:30:39.0895 1648 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys
18:30:39.0896 1648 BrFiltLo - ok
18:30:39.0908 1648 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys
18:30:39.0909 1648 BrFiltUp - ok
18:30:39.0934 1648 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys
18:30:39.0936 1648 Brserid - ok
18:30:39.0958 1648 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys
18:30:39.0959 1648 BrSerWdm - ok
18:30:39.0989 1648 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys
18:30:39.0990 1648 BrUsbMdm - ok
18:30:40.0001 1648 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys
18:30:40.0002 1648 BrUsbSer - ok
18:30:40.0030 1648 BthEnum (2865a5c8e98c70c605f417908cebb3a4) C:\windows\system32\drivers\BthEnum.sys
18:30:40.0031 1648 BthEnum - ok
18:30:40.0051 1648 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys
18:30:40.0052 1648 BTHMODEM - ok
18:30:40.0069 1648 BthPan (ad1872e5829e8a2c3b5b4b641c3eab0e) C:\windows\system32\DRIVERS\bthpan.sys
18:30:40.0070 1648 BthPan - ok
18:30:40.0105 1648 BTHPORT (c2fbf6d271d9a94d839c416bf186ead9) C:\windows\System32\Drivers\BTHport.sys
18:30:40.0108 1648 BTHPORT - ok
18:30:40.0155 1648 BTHUSB (c81e9413a25a439f436b1d4b6a0cf9e9) C:\windows\System32\Drivers\BTHUSB.sys
18:30:40.0157 1648 BTHUSB - ok
18:30:40.0191 1648 btwaudio (d57d29132efe13a83133d9bd449e0cf1) C:\windows\system32\drivers\btwaudio.sys
18:30:40.0192 1648 btwaudio - ok
18:30:40.0211 1648 btwavdt (d282c14a69357d0e1bafaecc2ca98c3a) C:\windows\system32\DRIVERS\btwavdt.sys
18:30:40.0212 1648 btwavdt - ok
18:30:40.0236 1648 btwl2cap (aafd7cb76ba61fbb08e302da208c974a) C:\windows\system32\DRIVERS\btwl2cap.sys
18:30:40.0237 1648 btwl2cap - ok
18:30:40.0258 1648 btwrchid (02eb4d2b05967df2d32f29c84ab1fb17) C:\windows\system32\DRIVERS\btwrchid.sys
18:30:40.0259 1648 btwrchid - ok
18:30:40.0288 1648 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys
18:30:40.0289 1648 cdfs - ok
18:30:40.0324 1648 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\drivers\cdrom.sys
18:30:40.0325 1648 cdrom - ok
18:30:40.0357 1648 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys
18:30:40.0358 1648 circlass - ok
18:30:40.0394 1648 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys
18:30:40.0397 1648 CLFS - ok
18:30:40.0419 1648 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys
18:30:40.0420 1648 CmBatt - ok
18:30:40.0457 1648 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys
18:30:40.0458 1648 cmdide - ok
18:30:40.0492 1648 CNG (1b675691ed940766149c93e8f4488d68) C:\windows\system32\Drivers\cng.sys
18:30:40.0495 1648 CNG - ok
18:30:40.0525 1648 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys
18:30:40.0526 1648 Compbatt - ok
18:30:40.0560 1648 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys
18:30:40.0560 1648 CompositeBus - ok
18:30:40.0592 1648 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys
18:30:40.0592 1648 crcdisk - ok
18:30:40.0654 1648 CSC (3c2177a897b4ca2788c6fb0c3fd81d4b) C:\windows\system32\drivers\csc.sys
18:30:40.0654 1648 CSC - ok
18:30:40.0701 1648 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys
18:30:40.0701 1648 DfsC - ok
18:30:40.0748 1648 DgiVecp (b327b0ca9fce58893d456ee2360378af) C:\windows\system32\Drivers\DgiVecp.sys
18:30:40.0748 1648 DgiVecp - ok
18:30:40.0779 1648 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys
18:30:40.0794 1648 discache - ok
18:30:40.0826 1648 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys
18:30:40.0826 1648 Disk - ok
18:30:40.0857 1648 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys
18:30:40.0857 1648 drmkaud - ok
18:30:40.0904 1648 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys
18:30:40.0904 1648 DXGKrnl - ok
18:30:40.0997 1648 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys
18:30:41.0028 1648 ebdrv - ok
18:30:41.0075 1648 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys
18:30:41.0075 1648 elxstor - ok
18:30:41.0112 1648 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys
18:30:41.0113 1648 ErrDev - ok
18:30:41.0156 1648 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys
18:30:41.0158 1648 exfat - ok
18:30:41.0184 1648 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys
18:30:41.0185 1648 fastfat - ok
18:30:41.0217 1648 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys
18:30:41.0218 1648 fdc - ok
18:30:41.0251 1648 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys
18:30:41.0252 1648 FileInfo - ok
18:30:41.0264 1648 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys
18:30:41.0265 1648 Filetrace - ok
18:30:41.0277 1648 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys
18:30:41.0278 1648 flpydisk - ok
18:30:41.0296 1648 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys
18:30:41.0298 1648 FltMgr - ok
18:30:41.0321 1648 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys
18:30:41.0322 1648 FsDepends - ok
18:30:41.0352 1648 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys
18:30:41.0353 1648 fssfltr - ok
18:30:41.0390 1648 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\windows\system32\drivers\Fs_Rec.sys
18:30:41.0391 1648 Fs_Rec - ok
18:30:41.0424 1648 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys
18:30:41.0426 1648 fvevol - ok
18:30:41.0443 1648 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys
18:30:41.0444 1648 gagp30kx - ok
18:30:41.0476 1648 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys
18:30:41.0477 1648 GEARAspiWDM - ok
18:30:41.0596 1648 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys
18:30:41.0597 1648 hcw85cir - ok
18:30:41.0648 1648 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys
18:30:41.0650 1648 HdAudAddService - ok
18:30:41.0668 1648 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys
18:30:41.0669 1648 HDAudBus - ok
18:30:41.0685 1648 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys
18:30:41.0686 1648 HidBatt - ok
18:30:41.0723 1648 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys
18:30:41.0724 1648 HidBth - ok
18:30:41.0744 1648 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys
18:30:41.0745 1648 HidIr - ok
18:30:41.0769 1648 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\DRIVERS\hidusb.sys
18:30:41.0771 1648 HidUsb - ok
18:30:41.0812 1648 hpdskflt (4ef10b866c62abbeaf7511cdd05a19be) C:\windows\system32\DRIVERS\hpdskflt.sys
18:30:41.0813 1648 hpdskflt - ok
18:30:41.0834 1648 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\windows\system32\DRIVERS\HpqKbFiltr.sys
18:30:41.0835 1648 HpqKbFiltr - ok
18:30:41.0854 1648 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys
18:30:41.0855 1648 HpSAMD - ok
18:30:41.0898 1648 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys
18:30:41.0901 1648 HTTP - ok
18:30:41.0936 1648 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys
18:30:41.0938 1648 hwpolicy - ok
18:30:41.0967 1648 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys
18:30:41.0969 1648 i8042prt - ok
18:30:41.0994 1648 iaStor (01446278d4563b3013c92830ae6cbb26) C:\windows\system32\DRIVERS\iaStor.sys
18:30:41.0996 1648 iaStor - ok
18:30:42.0033 1648 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys
18:30:42.0036 1648 iaStorV - ok
18:30:42.0145 1648 igfx (ad626f6964f4d364d226c39e06872dd3) C:\windows\system32\DRIVERS\igdkmd32.sys
18:30:42.0161 1648 igfx - ok
18:30:42.0192 1648 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys
18:30:42.0192 1648 iirsp - ok
18:30:42.0255 1648 ImmunetProtectDriver (0452cbd785659bb9e86b6c849bc292f9) C:\windows\system32\DRIVERS\ImmunetProtect.sys
18:30:42.0255 1648 ImmunetProtectDriver - ok
18:30:42.0286 1648 ImmunetSelfProtectDriver (426737322b000e3d9d7fb5b13f443b27) C:\windows\system32\DRIVERS\ImmunetSelfProtect.sys
18:30:42.0286 1648 ImmunetSelfProtectDriver - ok
18:30:42.0301 1648 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys
18:30:42.0301 1648 intelide - ok
18:30:42.0317 1648 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys
18:30:42.0317 1648 intelppm - ok
18:30:42.0333 1648 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys
18:30:42.0333 1648 IpFilterDriver - ok
18:30:42.0364 1648 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys
18:30:42.0364 1648 IPMIDRV - ok
18:30:42.0379 1648 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys
18:30:42.0379 1648 IPNAT - ok
18:30:42.0395 1648 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys
18:30:42.0395 1648 IRENUM - ok
18:30:42.0426 1648 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys
18:30:42.0426 1648 isapnp - ok
18:30:42.0457 1648 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys
18:30:42.0457 1648 iScsiPrt - ok
18:30:42.0473 1648 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys
18:30:42.0473 1648 kbdclass - ok
18:30:42.0489 1648 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys
18:30:42.0489 1648 kbdhid - ok
18:30:42.0535 1648 KSecDD (412cea1aa78cc02a447f5c9e62b32ff1) C:\windows\system32\Drivers\ksecdd.sys
18:30:42.0535 1648 KSecDD - ok
18:30:42.0551 1648 KSecPkg (26c046977e85b95036453d7b88ba1820) C:\windows\system32\Drivers\ksecpkg.sys
18:30:42.0551 1648 KSecPkg - ok
18:30:42.0598 1648 Lbd - ok
18:30:42.0613 1648 lgbusenum - ok
18:30:42.0629 1648 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys
18:30:42.0645 1648 lltdio - ok
18:30:42.0687 1648 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys
18:30:42.0688 1648 LSI_FC - ok
18:30:42.0713 1648 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys
18:30:42.0715 1648 LSI_SAS - ok
18:30:42.0738 1648 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys
18:30:42.0739 1648 LSI_SAS2 - ok
18:30:42.0760 1648 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys
18:30:42.0761 1648 LSI_SCSI - ok
18:30:42.0780 1648 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys
18:30:42.0781 1648 luafv - ok
18:30:42.0842 1648 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\windows\system32\drivers\mbam.sys
18:30:42.0843 1648 MBAMProtector - ok
18:30:42.0899 1648 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys
18:30:42.0900 1648 megasas - ok
18:30:42.0924 1648 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys
18:30:42.0926 1648 MegaSR - ok
18:30:42.0956 1648 MfeAVFK (64b96de8c492bd435372d9130a535f1d) C:\windows\system32\drivers\MfeAVFK.sys
18:30:42.0957 1648 MfeAVFK - ok
18:30:42.0975 1648 MfeBOPK (078e87a89d36cc3516f19d5fb518bddc) C:\windows\system32\drivers\MfeBOPK.sys
18:30:42.0977 1648 MfeBOPK - ok
18:30:43.0003 1648 mfehidk (168c565101fd5b9db694efdec91fafa9) C:\windows\system32\drivers\mfehidk.sys
18:30:43.0005 1648 mfehidk - ok
18:30:43.0024 1648 MfeRKDK (e0842f67dc9bc4d21d1e319610ebe9e5) C:\windows\system32\drivers\MfeRKDK.sys
18:30:43.0026 1648 MfeRKDK - ok
18:30:43.0046 1648 mfetdik (43a7acbbd70ecd62f0b63486c72089a3) C:\windows\system32\drivers\mfetdik.sys
18:30:43.0048 1648 mfetdik - ok
18:30:43.0073 1648 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys
18:30:43.0074 1648 Modem - ok
18:30:43.0095 1648 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys
18:30:43.0096 1648 monitor - ok
18:30:43.0132 1648 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys
18:30:43.0133 1648 mouclass - ok
18:30:43.0151 1648 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys
18:30:43.0152 1648 mouhid - ok
18:30:43.0183 1648 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys
18:30:43.0184 1648 mountmgr - ok
18:30:43.0215 1648 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys
18:30:43.0216 1648 mpio - ok
18:30:43.0235 1648 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys
18:30:43.0236 1648 mpsdrv - ok
18:30:43.0284 1648 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys
18:30:43.0285 1648 MRxDAV - ok
18:30:43.0326 1648 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys
18:30:43.0327 1648 mrxsmb - ok
18:30:43.0373 1648 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys
18:30:43.0375 1648 mrxsmb10 - ok
18:30:43.0396 1648 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys
18:30:43.0397 1648 mrxsmb20 - ok
18:30:43.0438 1648 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys
18:30:43.0439 1648 msahci - ok
18:30:43.0460 1648 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys
18:30:43.0462 1648 msdsm - ok
18:30:43.0500 1648 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys
18:30:43.0501 1648 Msfs - ok
18:30:43.0533 1648 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys
18:30:43.0534 1648 mshidkmdf - ok
18:30:43.0553 1648 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys
18:30:43.0555 1648 msisadrv - ok
18:30:43.0603 1648 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys
18:30:43.0604 1648 MSKSSRV - ok
18:30:43.0616 1648 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys
18:30:43.0617 1648 MSPCLOCK - ok
18:30:43.0639 1648 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys
18:30:43.0639 1648 MSPQM - ok
18:30:43.0670 1648 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys
18:30:43.0685 1648 MsRPC - ok
18:30:43.0732 1648 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys
18:30:43.0732 1648 mssmbios - ok
18:30:43.0732 1648 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys
18:30:43.0748 1648 MSTEE - ok
18:30:43.0779 1648 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys
18:30:43.0779 1648 MTConfig - ok
18:30:43.0795 1648 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys
18:30:43.0810 1648 Mup - ok
18:30:43.0826 1648 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys
18:30:43.0826 1648 NativeWifiP - ok
18:30:43.0873 1648 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys
18:30:43.0888 1648 NDIS - ok
18:30:43.0904 1648 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys
18:30:43.0904 1648 NdisCap - ok
18:30:43.0919 1648 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys
18:30:43.0919 1648 NdisTapi - ok
18:30:43.0966 1648 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys
18:30:43.0966 1648 Ndisuio - ok
18:30:43.0997 1648 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys
18:30:43.0997 1648 NdisWan - ok
18:30:44.0029 1648 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys
18:30:44.0029 1648 NDProxy - ok
18:30:44.0044 1648 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys
18:30:44.0044 1648 NetBIOS - ok
18:30:44.0091 1648 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys
18:30:44.0091 1648 NetBT - ok
18:30:44.0262 1648 NETw1v32 (d1f531b61cb35422d691e545de60554c) C:\windows\system32\DRIVERS\NETw1v32.sys
18:30:44.0294 1648 NETw1v32 - ok
18:30:44.0449 1648 NETw5s32 (5b2dfa9c5c02ddf2a113cc0f551b59df) C:\windows\system32\DRIVERS\NETw5s32.sys
18:30:44.0488 1648 NETw5s32 - ok
18:30:44.0586 1648 netw5v32 (58218ec6b61b1169cf54aab0d00f5fe2) C:\windows\system32\DRIVERS\netw5v32.sys
18:30:44.0609 1648 netw5v32 - ok
18:30:44.0637 1648 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys
18:30:44.0639 1648 nfrd960 - ok
18:30:44.0702 1648 nmwcd (cfe3462a9e94a57dcd9676f6b7fe7f67) C:\windows\system32\drivers\ccdcmb.sys
18:30:44.0703 1648 nmwcd - ok
18:30:44.0751 1648 nmwcdc (8f2a94f991f8c73cec26b4b5620d1edc) C:\windows\system32\drivers\ccdcmbo.sys
18:30:44.0752 1648 nmwcdc - ok
18:30:44.0790 1648 nmwcdnsu (99145c5d4b6c4d6f5ce83ee6abffe294) C:\windows\system32\drivers\nmwcdnsu.sys
18:30:44.0792 1648 nmwcdnsu - ok
18:30:44.0838 1648 nmwcdnsuc (faee7b61c6885b091cec1ff06da2e1ab) C:\windows\system32\drivers\nmwcdnsuc.sys
18:30:44.0839 1648 nmwcdnsuc - ok
18:30:44.0871 1648 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys
18:30:44.0872 1648 Npfs - ok
18:30:44.0893 1648 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys
18:30:44.0894 1648 nsiproxy - ok
18:30:44.0950 1648 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys
18:30:44.0958 1648 Ntfs - ok
18:30:44.0980 1648 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys
18:30:44.0981 1648 Null - ok
18:30:45.0016 1648 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys
18:30:45.0018 1648 nvraid - ok
18:30:45.0042 1648 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys
18:30:45.0044 1648 nvstor - ok
18:30:45.0085 1648 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys
18:30:45.0086 1648 nv_agp - ok
18:30:45.0121 1648 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys
18:30:45.0122 1648 ohci1394 - ok
18:30:45.0180 1648 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys
18:30:45.0181 1648 Parport - ok
18:30:45.0208 1648 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\windows\system32\drivers\partmgr.sys
18:30:45.0208 1648 partmgr - ok
18:30:45.0223 1648 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys
18:30:45.0223 1648 Parvdm - ok
18:30:45.0270 1648 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\windows\system32\DRIVERS\pccsmcfd.sys
18:30:45.0270 1648 pccsmcfd - ok
18:30:45.0286 1648 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys
18:30:45.0301 1648 pci - ok
18:30:45.0317 1648 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys
18:30:45.0317 1648 pciide - ok
18:30:45.0348 1648 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys
18:30:45.0348 1648 pcmcia - ok
18:30:45.0395 1648 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys
18:30:45.0395 1648 pcw - ok
18:30:45.0426 1648 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys
18:30:45.0426 1648 PEAUTH - ok
18:30:45.0504 1648 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys
18:30:45.0504 1648 PptpMiniport - ok
18:30:45.0535 1648 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys
18:30:45.0535 1648 Processor - ok
18:30:45.0567 1648 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys
18:30:45.0567 1648 Psched - ok
18:30:45.0598 1648 PxHelp20 (40fedd328f98245ad201cf5f9f311724) C:\windows\system32\Drivers\PxHelp20.sys
18:30:45.0598 1648 PxHelp20 - ok
18:30:45.0645 1648 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys
18:30:45.0645 1648 ql2300 - ok
18:30:45.0676 1648 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys
18:30:45.0676 1648 ql40xx - ok
18:30:45.0707 1648 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys
18:30:45.0707 1648 QWAVEdrv - ok
18:30:45.0723 1648 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys
18:30:45.0738 1648 RasAcd - ok
18:30:45.0770 1648 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys
18:30:45.0771 1648 RasAgileVpn - ok
18:30:45.0794 1648 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys
18:30:45.0795 1648 Rasl2tp - ok
18:30:45.0819 1648 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys
18:30:45.0821 1648 RasPppoe - ok
18:30:45.0842 1648 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys
18:30:45.0843 1648 RasSstp - ok
18:30:45.0885 1648 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys
18:30:45.0887 1648 rdbss - ok
18:30:45.0910 1648 RDID1009 (592a973bd498707d0601f8dfd4af69b0) C:\windows\system32\Drivers\rdwm1009.sys
18:30:45.0912 1648 RDID1009 - ok
18:30:45.0940 1648 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys
18:30:45.0941 1648 rdpbus - ok
18:30:45.0972 1648 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys
18:30:45.0974 1648 RDPCDD - ok
18:30:46.0018 1648 RDPDR (b973fcfc50dc1434e1970a146f7e3885) C:\windows\system32\drivers\rdpdr.sys
18:30:46.0019 1648 RDPDR - ok
18:30:46.0039 1648 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys
18:30:46.0040 1648 RDPENCDD - ok
18:30:46.0063 1648 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys
18:30:46.0065 1648 RDPREFMP - ok
18:30:46.0110 1648 RDPWD (288b06960d78428ff89e811632684e20) C:\windows\system32\drivers\RDPWD.sys
18:30:46.0111 1648 RDPWD - ok
18:30:46.0148 1648 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys
18:30:46.0150 1648 rdyboost - ok
18:30:46.0208 1648 RFCOMM (cb928d9e6daf51879dd6ba8d02f01321) C:\windows\system32\DRIVERS\rfcomm.sys
18:30:46.0210 1648 RFCOMM - ok
18:30:46.0260 1648 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys
18:30:46.0261 1648 rspndr - ok
18:30:46.0300 1648 RsvLock (13335d083935ab88e09c9acc077355b5) C:\windows\system32\drivers\RsvLock.sys
18:30:46.0301 1648 RsvLock - ok
18:30:46.0334 1648 s3cap (7fa7f2e249a5dcbb7970630e15e1f482) C:\windows\system32\drivers\vms3cap.sys
18:30:46.0336 1648 s3cap - ok
18:30:46.0358 1648 SafeBoot (062b82fa74c895382ab0784d493c8c9c) C:\windows\system32\drivers\SafeBoot.sys
18:30:46.0359 1648 Suspicious file (NoAccess): C:\windows\system32\drivers\SafeBoot.sys. md5: 062b82fa74c895382ab0784d493c8c9c
18:30:46.0363 1648 SafeBoot ( LockedFile.Multi.Generic ) - warning
18:30:46.0363 1648 SafeBoot - detected LockedFile.Multi.Generic (1)
18:30:46.0431 1648 SbAlg (c9cb2c392c35cbee2733c836d23dc642) C:\windows\system32\drivers\SbAlg.sys
18:30:46.0432 1648 SbAlg - ok
18:30:46.0465 1648 SbFsLock (b5a8ecdee930b52fd3ba35700a15ea53) C:\windows\system32\drivers\SbFsLock.sys
18:30:46.0467 1648 SbFsLock - ok
18:30:46.0500 1648 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys
18:30:46.0501 1648 sbp2port - ok
18:30:46.0568 1648 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys
18:30:46.0570 1648 scfilter - ok
18:30:46.0623 1648 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys
18:30:46.0624 1648 secdrv - ok
18:30:46.0678 1648 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys
18:30:46.0679 1648 Serenum - ok
18:30:46.0709 1648 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys
18:30:46.0711 1648 Serial - ok
18:30:46.0743 1648 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys
18:30:46.0744 1648 sermouse - ok
18:30:46.0824 1648 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys
18:30:46.0824 1648 sffdisk - ok
18:30:46.0839 1648 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys
18:30:46.0839 1648 sffp_mmc - ok
18:30:46.0871 1648 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys
18:30:46.0871 1648 sffp_sd - ok
18:30:46.0886 1648 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys
18:30:46.0886 1648 sfloppy - ok
18:30:46.0949 1648 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys
18:30:46.0949 1648 sisagp - ok
18:30:46.0980 1648 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys
18:30:46.0980 1648 SiSRaid2 - ok
18:30:47.0011 1648 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys
18:30:47.0011 1648 SiSRaid4 - ok
18:30:47.0027 1648 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys
18:30:47.0027 1648 Smb - ok
18:30:47.0073 1648 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys
18:30:47.0073 1648 spldr - ok
18:30:47.0136 1648 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys
18:30:47.0136 1648 srv - ok
18:30:47.0167 1648 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys
18:30:47.0167 1648 srv2 - ok
18:30:47.0198 1648 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys
18:30:47.0198 1648 srvnet - ok
18:30:47.0229 1648 SSPORT (ef3458337d7341a05169cefc73709264) C:\windows\system32\Drivers\SSPORT.sys
18:30:47.0229 1648 SSPORT - ok
18:30:47.0261 1648 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys
18:30:47.0261 1648 stexstor - ok
18:30:47.0335 1648 storflt (472af0311073dceceaa8fa18ba2bdf89) C:\windows\system32\drivers\vmstorfl.sys
18:30:47.0336 1648 storflt - ok
18:30:47.0367 1648 storvsc (dcaffd62259e0bdb433dd67b5bb37619) C:\windows\system32\drivers\storvsc.sys
18:30:47.0368 1648 storvsc - ok
18:30:47.0391 1648 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys
18:30:47.0393 1648 swenum - ok
18:30:47.0449 1648 SynTP (0e8676fb3bb95aa40fdf7a4a31018c8b) C:\windows\system32\DRIVERS\SynTP.sys
18:30:47.0457 1648 SynTP - ok
18:30:47.0541 1648 Tcpip (04e4a7d53a7ace02e8c55b17a498f631) C:\windows\system32\drivers\tcpip.sys
18:30:47.0550 1648 Tcpip - ok
18:30:47.0591 1648 TCPIP6 (04e4a7d53a7ace02e8c55b17a498f631) C:\windows\system32\DRIVERS\tcpip.sys
18:30:47.0599 1648 TCPIP6 - ok
18:30:47.0643 1648 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys
18:30:47.0644 1648 tcpipreg - ok
18:30:47.0687 1648 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys
18:30:47.0688 1648 TDPIPE - ok
18:30:47.0712 1648 TDTCP (2c10395baa4847f83042813c515cc289) C:\windows\system32\drivers\tdtcp.sys
18:30:47.0714 1648 TDTCP - ok
18:30:47.0752 1648 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys
18:30:47.0753 1648 tdx - ok
18:30:47.0774 1648 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys
18:30:47.0775 1648 TermDD - ok
18:30:47.0824 1648 TPM (5ad05191dc8b444a7ba4d79b76c42a30) C:\windows\system32\drivers\tpm.sys
18:30:47.0825 1648 TPM - ok
18:30:47.0886 1648 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys
18:30:47.0888 1648 tssecsrv - ok
18:30:47.0942 1648 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys
18:30:47.0944 1648 TsUsbFlt - ok
18:30:47.0986 1648 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys
18:30:47.0988 1648 tunnel - ok
18:30:48.0019 1648 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys
18:30:48.0021 1648 uagp35 - ok
18:30:48.0068 1648 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys
18:30:48.0070 1648 udfs - ok
18:30:48.0111 1648 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys
18:30:48.0113 1648 uliagpkx - ok
18:30:48.0152 1648 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys
18:30:48.0153 1648 umbus - ok
18:30:48.0184 1648 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys
18:30:48.0186 1648 UmPass - ok
18:30:48.0260 1648 UnlockerDriver5 (bb879dcfd22926efbeb3298129898cbb) C:\Program Files\Unlocker\UnlockerDriver5.sys
18:30:48.0261 1648 UnlockerDriver5 - ok
18:30:48.0320 1648 upperdev (ec01da44b090d2651fc032c8b9257232) C:\windows\system32\DRIVERS\usbser_lowerflt.sys
18:30:48.0320 1648 upperdev - ok
18:30:48.0351 1648 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\windows\system32\Drivers\usbaapl.sys
18:30:48.0367 1648 USBAAPL - ok
18:30:48.0398 1648 usbaudio (1d9f2bd026e8e2d45033a4df3f16b78c) C:\windows\system32\drivers\usbaudio.sys
18:30:48.0398 1648 usbaudio - ok
18:30:48.0429 1648 usbbus - ok
18:30:48.0461 1648 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys
18:30:48.0476 1648 usbccgp - ok
18:30:48.0507 1648 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys
18:30:48.0507 1648 usbcir - ok
18:30:48.0523 1648 UsbDiag - ok
18:30:48.0554 1648 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys
18:30:48.0554 1648 usbehci - ok
18:30:48.0585 1648 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys
18:30:48.0585 1648 usbhub - ok
18:30:48.0601 1648 USBModem - ok
18:30:48.0632 1648 usbohci (a6fb7957ea7afb1165991e54ce934b74) C:\windows\system32\DRIVERS\usbohci.sys
18:30:48.0632 1648 usbohci - ok
18:30:48.0663 1648 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys
18:30:48.0663 1648 usbprint - ok
18:30:48.0695 1648 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys
18:30:48.0695 1648 usbscan - ok
18:30:48.0726 1648 usbser (31181de6190b39fc8007dffd1a48ffd6) C:\windows\system32\drivers\usbser.sys
18:30:48.0741 1648 usbser - ok
18:30:48.0788 1648 UsbserFilt (4abd37cfbd710e64f01f9da8710c73f7) C:\windows\system32\DRIVERS\usbser_lowerfltj.sys
18:30:48.0788 1648 UsbserFilt - ok
18:30:48.0804 1648 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\DRIVERS\USBSTOR.SYS
18:30:48.0819 1648 USBSTOR - ok
18:30:48.0851 1648 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\DRIVERS\usbuhci.sys
18:30:48.0851 1648 usbuhci - ok
18:30:48.0894 1648 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys
18:30:48.0896 1648 usbvideo - ok
18:30:48.0939 1648 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys
18:30:48.0940 1648 vdrvroot - ok
18:30:48.0980 1648 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys
18:30:48.0982 1648 vga - ok
18:30:49.0007 1648 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys
18:30:49.0008 1648 VgaSave - ok
18:30:49.0034 1648 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys
18:30:49.0036 1648 vhdmp - ok
18:30:49.0074 1648 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys
18:30:49.0076 1648 viaagp - ok
18:30:49.0107 1648 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys
18:30:49.0109 1648 ViaC7 - ok
18:30:49.0138 1648 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys
18:30:49.0139 1648 viaide - ok
18:30:49.0180 1648 vmbus (c2f2911156fdc7817c52829c86da494e) C:\windows\system32\drivers\vmbus.sys
18:30:49.0182 1648 vmbus - ok
18:30:49.0206 1648 VMBusHID (d4d77455211e204f370d08f4963063ce) C:\windows\system32\drivers\VMBusHID.sys
18:30:49.0208 1648 VMBusHID - ok
18:30:49.0234 1648 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys
18:30:49.0236 1648 volmgr - ok
18:30:49.0264 1648 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys
18:30:49.0266 1648 volmgrx - ok
18:30:49.0303 1648 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys
18:30:49.0305 1648 volsnap - ok
18:30:49.0341 1648 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys
18:30:49.0343 1648 vsmraid - ok
18:30:49.0368 1648 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys
18:30:49.0370 1648 vwifibus - ok
18:30:49.0387 1648 VWiFiFlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys
18:30:49.0388 1648 VWiFiFlt - ok
18:30:49.0413 1648 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys
18:30:49.0414 1648 vwifimp - ok
18:30:49.0461 1648 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys
18:30:49.0462 1648 WacomPen - ok
18:30:49.0496 1648 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys
18:30:49.0497 1648 WANARP - ok
18:30:49.0506 1648 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys
18:30:49.0508 1648 Wanarpv6 - ok
18:30:49.0569 1648 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys
18:30:49.0571 1648 Wd - ok
18:30:49.0605 1648 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys
18:30:49.0608 1648 Wdf01000 - ok
18:30:49.0678 1648 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys
18:30:49.0680 1648 WfpLwf - ok
18:30:49.0704 1648 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys
18:30:49.0706 1648 WIMMount - ok
18:30:49.0832 1648 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys
18:30:49.0833 1648 WmiAcpi - ok
18:30:49.0874 1648 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys
18:30:49.0889 1648 ws2ifsl - ok
18:30:49.0952 1648 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys
18:30:49.0967 1648 WudfPf - ok
18:30:49.0983 1648 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys
18:30:49.0983 1648 WUDFRd - ok
18:30:50.0077 1648 yukonw7 (30b73eb97218a16cbc6de535782a1b35) C:\windows\system32\DRIVERS\yk62x86.sys
18:30:50.0077 1648 yukonw7 - ok
18:30:50.0123 1648 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
18:30:50.0139 1648 \Device\Harddisk0\DR0 - ok
18:30:50.0139 1648 MBR (0x1B8) (bbb0a0725ad66f38b1a32135f3cb55d6) \Device\Harddisk1\DR1
18:30:58.0743 1648 \Device\Harddisk1\DR1 - ok
18:30:58.0746 1648 Boot (0x1200) (a262899c9979d950a91b5811f183bbd3) \Device\Harddisk0\DR0\Partition0
18:30:58.0747 1648 \Device\Harddisk0\DR0\Partition0 - ok
18:30:58.0782 1648 Boot (0x1200) (ee99d7d6236d68bc0a9e979f1b9b2351) \Device\Harddisk0\DR0\Partition1
18:30:58.0782 1648 \Device\Harddisk0\DR0\Partition1 - ok
18:30:58.0811 1648 Boot (0x1200) (bb5ccc4987b0b371e199482e1906c860) \Device\Harddisk0\DR0\Partition2
18:30:58.0812 1648 \Device\Harddisk0\DR0\Partition2 - ok
18:30:58.0823 1648 Boot (0x1200) (788496e98460a03b10c4a3f3fd37e3a6) \Device\Harddisk0\DR0\Partition3
18:30:58.0823 1648 \Device\Harddisk0\DR0\Partition3 - ok
18:30:58.0826 1648 Boot (0x1200) (b5a1598e7afc701eea5acc8ac81583b9) \Device\Harddisk1\DR1\Partition0
18:30:58.0827 1648 \Device\Harddisk1\DR1\Partition0 - ok
18:30:58.0831 1648 Boot (0x1200) (a63415966b3b691be37f1894186d4f17) \Device\Harddisk1\DR1\Partition1
18:30:58.0832 1648 \Device\Harddisk1\DR1\Partition1 - ok
18:30:58.0836 1648 Boot (0x1200) (03babf21913602e06daa496fc4778779) \Device\Harddisk1\DR1\Partition2
18:30:58.0837 1648 \Device\Harddisk1\DR1\Partition2 - ok
18:30:58.0838 1648 ============================================================
18:30:58.0838 1648 Scan finished
18:30:58.0838 1648 ============================================================
18:30:58.0847 4240 Detected object count: 1
18:30:58.0847 4240 Actual detected object count: 1
18:31:02.0599 4240 SafeBoot ( LockedFile.Multi.Generic ) - skipped by user
18:31:02.0599 4240 SafeBoot ( LockedFile.Multi.Generic ) - User select action: Skip
18:31:05.0364 3436 Deinitialize success

Oui, je m'étais trompé, j'avais mal lu comment utiliser TDSKiller sur le tuto, donc une première fois, j'ai essayé de supprimer (Delete) SafeBoot.sys, et évidemment, ce fichier semble nécessaire au démarrage de Windows, donc ça lançait mon outil de récupération... Après j'ai fait "Quarantaine" et enfin "Skip"... C'est vrai que j'ai effacé mon premier rapport de TDSK du forum, celui que tu as du recevoir par mail... En tout cas, je l'ai toujours, mon problème, je veux dire, ça rame toujours...

On va laisser de côté TDSSKiller insuffisant.
Je te re confirme si je peux en fin de soirée ou demain pour 1, voire 2 outils à passer. En attendant, ne touche rien de plus.

+ ;)

OK... Ben dis-donc, je suis bien malaaaaade alors ;-)

Prends ton temps, de toute façon, ça fait trois semaines que je supporte (de plus voir de vidéo sur le net, d'attendre 20 sec une page qui se charge en 1 sec normalement, etc.)

Tout ce que je souhaite, c'est de pas me sentir seul face à tout ça ; mais comme tu prends les choses en main, ça me va ! Ne te presse pas : du moment qu'une petite veilleuse reste allumée dans un coin de ta tête pour me rappeler à toi de temps à autre, je me sens rassuré ;-)

@+ Philippe

OK, AntiZeroAccess a donc balayé mon ordi, et à la fin il m'a dit que mon système n'était pas infecté par ZeroAccess/Max++ Rootkit.
Pourtant, le fichier SafeBoot.sys est apparu en rouge avec le message Error!...

Question : n'aurais-je pas mis le fichier SafeBoot en quarantaine avec mes manips ratées sur TDSK hier ? Comment en sortir ?

Le dernier TDSK que j'ai fait, j'avais coché l'option "SKIP"...

1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 11:08:47 le 25/10/2011
4.
5. Valeur(s) recherchée(s):
6. safeboot.sys
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Calcul du Hash "MD5"
11. (!) --- Affichage des dossiers
12. (!) --- Recherche registre
13.
14. ====== Fichier(s) ======
15.
16.
17. "C:\Windows\System32\drivers\SafeBoot.sys" [ ARCHIVE | 109 Ko ]
18. TC: 29/07/2009,16:30:16 | TM: 29/07/2009,16:30:16 | DA: 25/12/2009,10:28:35
19.
20. Hash MD5: [Impossible à obtenir]
21.
22.
23. =========================
24.
25.
26.
27. ====== Entrée(s) du registre ======
28.
29.
30. [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0ECA73E7B01254844B61DE1325C46243]
31. "B5D8154CC26C48946A51F11CDD558BA6"="C:\windows\system32\Drivers\SafeBoot.sys" (REG_SZ)
32.
33. =========================
34.
35. Fin à: 11:17:24 le 25/10/2011
36. 1083152 Éléments analysés
37.
38. =========================
39. E.O.F

ComboFix 11-10-24.05 - Philippe 25/10/2011 15:40:32.1.2 - x86
Microsoft Windows 7 Professionnel 6.1.7601.1.1252.33.1036.18.3066.1547 [GMT 2:00]
Lancé depuis: c:\users\Philippe\Desktop\skude.exe
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AV: Emsisoft Anti-Malware *Disabled/Outdated* {0ADC9F7D-20C1-240F-01E2-43466EBA893A}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Emsisoft Anti-Malware *Disabled/Outdated* {B1BD7E99-06FB-2B81-3B52-7834153DC387}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Philippe\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
c:\users\Philippe\AppData\Roaming\Microsoft\Windows\Recent\Vélib.URL
c:\users\Philippe\Desktop\Internet Explorer.lnk
c:\users\Philippe\WINDOWS
c:\windows\ST6UNST.000
G:\Autorun.inf
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-09-25 au 2011-10-25 ))))))))))))))))))))))))))))))))))))
.
.
2011-10-25 13:52 . 2011-10-25 13:54 -------- d-----w- c:\users\Philippe\AppData\Local\temp
2011-10-25 13:52 . 2011-10-25 13:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-10-25 09:07 . 2011-10-25 09:07 -------- d-----w- c:\program files\SEAF
2011-10-25 07:04 . 2011-10-25 13:34 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{76926DB0-D2FB-4B6E-84D8-E3D84A0857E5}\offreg.dll
2011-10-24 18:45 . 2011-10-07 03:48 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{76926DB0-D2FB-4B6E-84D8-E3D84A0857E5}\mpengine.dll
2011-10-24 16:09 . 2011-10-24 16:09 -------- d-----w- C:\TDSSKiller_Quarantine
2011-10-24 11:13 . 2011-10-24 15:42 -------- d-----w- c:\program files\ZHPDiag
2011-10-12 03:24 . 2011-08-17 04:24 465408 ----a-w- c:\windows\system32\psisdecd.dll
2011-10-12 03:24 . 2011-08-17 04:19 75776 ----a-w- c:\windows\system32\psisrndr.ax
2011-10-12 03:23 . 2011-08-27 04:26 571904 ----a-w- c:\windows\system32\oleaut32.dll
2011-10-12 03:23 . 2011-08-27 04:26 233472 ----a-w- c:\windows\system32\oleacc.dll
2011-10-12 03:23 . 2011-09-06 02:28 2334720 ----a-w- c:\windows\system32\win32k.sys
2011-10-10 04:28 . 2011-10-24 19:39 -------- d-----w- c:\program files\Notabene
2011-10-08 15:15 . 2011-10-08 15:15 -------- d-----w- c:\windows\fr
2011-10-08 15:09 . 2011-10-08 15:09 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-10-08 15:06 . 2011-10-08 15:06 15712 ----a-w- c:\program files\Common Files\Windows Live\.cache\eb7636e81cc85cb01\MeshBetaRemover.exe
2011-10-08 14:42 . 2011-10-08 14:42 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-10-08 14:42 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-10-08 09:06 . 2011-10-24 19:39 -------- d-----w- C:\ZHP
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-03 03:06 . 2010-05-04 22:17 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-09-19 06:33 . 2009-12-24 22:36 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-09-06 20:45 . 2010-06-30 05:41 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 20:45 . 2009-12-24 22:36 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 20:38 . 2011-03-12 06:15 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:37 . 2009-12-24 22:36 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:36 . 2009-12-24 22:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2009-12-24 22:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2009-12-24 22:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-08-15 11:52 . 2011-08-15 11:52 86528 ----a-w- c:\windows\system32\iesysprep.dll
2011-08-15 11:52 . 2011-08-15 11:52 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-08-15 11:52 . 2011-08-15 11:52 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-08-15 11:52 . 2011-08-15 11:52 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-08-15 11:52 . 2011-08-15 11:52 161792 ----a-w- c:\windows\system32\msls31.dll
2011-08-15 11:52 . 2011-08-15 11:52 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-08-15 11:52 . 2011-08-15 11:52 74752 ----a-w- c:\windows\system32\iesetup.dll
2011-08-15 11:52 . 2011-08-15 11:52 63488 ----a-w- c:\windows\system32\tdc.ocx
2011-08-15 11:52 . 2011-08-15 11:52 420864 ----a-w- c:\windows\system32\vbscript.dll
2011-08-15 11:52 . 2011-08-15 11:52 367104 ----a-w- c:\windows\system32\html.iec
2011-08-15 11:52 . 2011-08-15 11:52 23552 ----a-w- c:\windows\system32\licmgr10.dll
2011-08-15 11:52 . 2011-08-15 11:52 152064 ----a-w- c:\windows\system32\wextract.exe
2011-08-15 11:52 . 2011-08-15 11:52 150528 ----a-w- c:\windows\system32\iexpress.exe
2011-08-15 11:52 . 2011-08-15 11:52 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2011-08-15 11:52 . 2011-08-15 11:52 1427456 ----a-w- c:\windows\system32\inetcpl.cpl
2011-08-15 11:52 . 2011-08-15 11:52 11776 ----a-w- c:\windows\system32\mshta.exe
2011-08-15 11:52 . 2011-08-15 11:52 101888 ----a-w- c:\windows\system32\admparse.dll
2011-08-15 11:52 . 2011-08-15 11:52 35840 ----a-w- c:\windows\system32\imgutil.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-08-25 186904]
"WirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-04 1791272]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-04 98304]
"acevents"="c:\program files\ActivIdentity\ActivClient\acevents.exe" [2009-06-03 153640]
"accrdsub"="c:\program files\ActivIdentity\ActivClient\accrdsub.exe" [2009-06-03 400936]
"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2009-07-30 354360]
"CognizanceTS"="c:\progra~1\HEWLET~1\IAM\Bin\ASTSVCC.dll" [2009-07-23 24848]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2009-05-18 1314816]
"SoundMAX"="c:\program files\Analog Devices\SoundMAX\soundmax.exe" [2009-05-18 3866624]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2009-10-13 606208]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-09-06 3722416]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
c:\users\Philippe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
EvernoteClipper.lnk - c:\program files\Evernote\Evernote\EvernoteClipper.exe [2011-8-8 977408]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-30 795936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\HEWLET~1\IAM\Bin\APSHook.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
SetupExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-11-17 19:59 421160 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LG LinkAir]
2011-08-21 15:11 2449768 ----a-w- c:\program files\LG Electronics\LG PC Suite IV\LinkAir\LinkAir.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2009-07-27 22:49 288312 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2011-06-20 14:41 273544 ----a-w- c:\program files\Real\RealPlayer\Update\realsched.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"LightScribe Control Panel"=c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"NokiaMusic FastStart"="c:\program files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"B2C_AGENT"=c:\programdata\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe
.
R0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-09 136176]
R3 a2acc;a2acc;c:\program files\EMSISOFT ANTI-MALWARE\a2accx86.sys [2011-02-20 73728]
R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus.sys [2010-12-07 14336]
R3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\DRIVERS\lganddiag.sys [2010-12-07 20736]
R3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps.sys [2010-12-07 20096]
R3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\DRIVERS\lgandmodem.sys [2010-12-07 25088]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-09 136176]
R3 HP ProtectTools Service;HP ProtectTools Service;c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [2009-07-30 45056]
R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\DRIVERS\lgbtbus.sys [x]
R3 NETw1v32;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw1v32.sys [2009-07-20 5958656]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
R3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2011-05-18 137600]
R3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2011-05-18 8576]
R3 RDID1009;UM-1;c:\windows\system32\Drivers\rdwm1009.sys [2009-09-18 61568]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-29 1343400]
R3 wxpSvc;webcamXP Service;c:\program files\wLite\wService.exe [2011-07-27 5023744]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 SafeBoot;SafeBoot; [x]
S0 SbAlg;SbAlg; [x]
S0 SbFsLock;SbFsLock; [x]
S1 a2injectiondriver;a2injectiondriver;c:\program files\Emsisoft Anti-Malware\a2dix86.sys [2010-09-05 41928]
S1 a2util;a-squared Malware-IDS utility driver;c:\program files\Emsisoft Anti-Malware\a2util32.sys [2010-05-05 11776]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 RsvLock;RsvLock; [x]
S1 VWiFiFlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 ac.sharedstore;ActivIdentity Shared Store Service;c:\program files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-03 207400]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-04 176128]
S2 ASBroker;Courtier de session de connexion;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 ASChannel;Canal de communication local;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-19 54616]
S2 ATService;AuthenTec Fingerprint Service;c:\program files\Fingerprint Sensor\AtService.exe [2009-07-29 1201400]
S2 HpFkCryptService;Drive Encryption Service;c:\program files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2009-07-29 256544]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-05-13 26168]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2007-08-13 5120]
S2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 5U876UVC;HP Webcam [2 MP series];c:\windows\system32\DRIVERS\5U876.sys [2009-06-30 13:01 118656]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-08-31 22216]
S3 NETw5s32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows 7 32 bits ;c:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-09-28 315392]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker
Bioscrypt REG_MULTI_SZ ASChannel
GPSvcGroup REG_MULTI_SZ GPSvc
yksvcs REG_MULTI_SZ yksvc
bdx REG_MULTI_SZ scan sysagent
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-06-17 19:11 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Contenu du dossier 'Tâches planifiées'
.
2011-10-25 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2010-09-04 07:07]
.
2011-10-25 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-03-09 15:26]
.
2011-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-09 06:05]
.
2011-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-09 06:05]
.
2011-10-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1846020376-287824675-3458462006-1001Core.job
- c:\users\Philippe\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-07 23:00]
.
2011-10-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1846020376-287824675-3458462006-1001UA.job
- c:\users\Philippe\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-07 23:00]
.
2011-10-25 c:\windows\Tasks\HPCeeScheduleForPhilippe.job
- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-09-17 21:38]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local
IE: Add to Evernote 4.0 - c:\program files\Evernote\Evernote\EvernoteIE.dll/204
IE: LG Air Sync (R-Click) - Save as Mobile Image - c:\program files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/206
IE: LG Air Sync (R-Click) - Save as Mobile Memo - c:\program files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/208
IE: LG Air Sync (R-Click) - Save as Mobile Text file - c:\program files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/210
IE: LG Air Sync (R-Click) - Set as Mobile Wallpaper - c:\program files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/205
IE: LG Air Sync Option - c:\program files\LG Electronics\LG PC Suite IV\LinkAir\IEContextMenu.dll/209
IE: SmarThru4 Enregistrer au format HTML - c:\program files\SmarThru 4\WebCapture.dll1.htm
IE: SmarThru4 Enregistrer le texte sélectionné - c:\program files\SmarThru 4\WebCapture.dll.htm
IE: SmarThru4 Sélection par capture - c:\program files\SmarThru 4\WebCapture.dll2.htm
IE: SmarThru4 Web Capture - c:\program files\SmarThru 4\WebCapture.dll
IE: {{A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://c:\program files\Evernote\Evernote\EvernoteIE.dll/204
Trusted Zone: //about.htm/
Trusted Zone: //Exclude.htm/
Trusted Zone: //LanguageSelection.htm/
Trusted Zone: //Message.htm/
Trusted Zone: //MyAgttryCmd.htm/
Trusted Zone: //MyAgttryNag.htm/
Trusted Zone: //MyNotification.htm/
Trusted Zone: //NOCLessUpdate.htm/
Trusted Zone: //quarantine.htm/
Trusted Zone: //ScanNow.htm/
Trusted Zone: //strings.vbs/
Trusted Zone: //Template.htm/
Trusted Zone: //Update.htm/
Trusted Zone: //VirFound.htm/
Trusted Zone: mcafee.com\*
Trusted Zone: mcafeeasap.com\betavscan
Trusted Zone: mcafeeasap.com\vs
Trusted Zone: mcafeeasap.com\www
FF - ProfilePath - c:\users\Philippe\AppData\Roaming\Mozilla\Firefox\Profiles\vhpyeeld.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p=
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p=
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p=
FF - prefs.js: keyword.URL - hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox 4.0 Beta 5\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\wxpSvc]
"ImagePath"="c:\program files\wLite\wService.exe /startedbyscm:5053B757-40E35B3B-webcamSRV"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1846020376-287824675-3458462006-1001_Classes\VirtualStore\MACHINE\SOFTWARE\Apple Computer, Inc.\QuickTime\Favorite Movies]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\atieclxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\system32\conhost.exe
c:\windows\system32\taskhost.exe
c:\program files\Hewlett-Packard\IAM\Bin\AsGHost.exe
c:\windows\system32\AEADISRV.EXE
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\WIDCOMM\Bluetooth Software\btwdins.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Microsoft\BingBar\SeaPort.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Hewlett-Packard\Shared\hpqToaster.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Heure de fin: 2011-10-25 16:00:27 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-10-25 14:00
.
Avant-CF: 194 121 166 848 octets libres
Après-CF: 193 561 677 824 octets libres
.
- - End Of File - - 7F989CA3D7E7502A612F0E68BC7A2125

Je le mets aussi en ci-joint :
http://www.cijoint.fr/cjlink.php?file=cj201110/cijrHnjG4j.txt

Oui, je crois bien qu'il y a une très nette amélioration !
Serait-on sur la voie ? Y aurait-il pour moi enfin un rayon de soleil depuis trois semaines ?

Faut-il encore faire des recherches ? des vérifications ? supprimer des outils ?

Ok, je le fais. Juste par curiosité : c'était quoi, alors ? Virus ? Spyware ?

http://www.cijoint.fr/cjlink.php?file=cj201110/cijjugwzsZ.txt

Voilà voilà

Ya encore quelques chose de louche ?

Ok. En tout cas, c'est vraiment très chouette que sur le net, on trouve des gars (des filles ?) comme toi qui soient prêts à filer un coup de main par pure philanthropie ;-)

Si dans la vie réelle on était tous plus portés à s'entraider, on serait pas dans la merde où chacun reconnaît qu'on est !

Tiens moi au courant, si tu trouves des infos sur mon compagnon des trois dernières semaines, que je lui fasse une épitaphe digne de son nom !

Dis-moi aussi si je dois désinstaller certains outils.

@ + ou bye

Philippe

Salut !
Serais-ce à dire que pour s'aider il ne faut pas se voir ? Bof ! Internet est un outil vraiment très particulier.
Ne désinstalle rien pour le moment. ComBboFix a fait du bon travail.
Des fichiers supprimés et des fichiers cachés que je voudrais bien comprendre.
+ ;)

J'espère que j'ai tout bien compris, ça m'a paru compliqué !
Voilà :

Rapport de ZHPFix 1.12.3365 par Nicolas Coolman, Update du 18/10/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-25-10-2011-22-24-40.txt
Run by Philippe at 25/10/2011 22:24:40
Windows 7 Business Edition, 32-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
SUPPRIME O42 - Logiciel: pdfforge Toolbar v4.6 - (.Spigot, Inc..) [HKLM] -- {E6098043-1183-4580-89EF-423CBF807188}

========== Clé(s) du Registre ==========
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E6098043-1183-4580-89EF-423CBF807188}]

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\Philippe\AppData\Local\{348A56D2-0DD4-4984-9033-2E08A309D087}
SUPPRIME Folder: C:\Users\Philippe\AppData\Local\{65FA78F5-BF32-43CF-9058-56A13AE56CFF}
SUPPRIME Folder: C:\Users\Philippe\AppData\Local\{BF890ACE-C6F6-4F5E-898A-E714EAF917F8}
SUPPRIME Temporaires Windows: : 83
SUPPRIME Flash Cookies: 31

========== Fichier(s) ==========
ABSENT File: c:\users\philippe\appdata\roaming\microsoft\internet explorer\quick launch\raccourci vers cic internet.txt
ABSENT File: d:\data\documents philippe\numéros (cb, identifiants, etc.)\cic internet.txt
SUPPRIME Temporaires Windows: : 20
SUPPRIME Flash Cookies: 9


========== Récapitulatif ==========
1 : Clé(s) du Registre
5 : Dossier(s)
4 : Fichier(s)
1 : Logiciel(s)


End of clean in 00mn 53s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 25/10/2011 22:24:40 [1453]

C'est drôle que les dernières lignes flèchent vers mon document où sont mes références bancaires, non ? De toute façon, tout est codé ;-)

Tu crois qu'il y a encore des problèmes ?

Tiens, c'est drôle, je ne peux plus consulter mon compte en banque en ligne ? Tu y comprends quelque chose ?

Si ça se trouve, quelqu'un a essayé de me dérober mes identifiants internet, en particulier ceux qui me permettent de consulter mon compte en ligne. Heureusement, j'ai vérifié auprès de ma banque ce matin, il n'y a aucune opération suspecte, car j'ai pour habitude de coder mes mots de passe. Ouf ! As-tu déjà entendu parler de ce genre d'arnaque, à travers un virus ou un spyware ? En tout cas, mon problème d'ordi semble résolu, lui... ;-)

Ah, ok :

http://www.cijoint.fr/cjlink.php?file=cj201110/cijGgbMeOX.txt

Pourquoi, avant, on faisait plein de HijackThis ? ça a été remplacé par ZHPDiag ?

HJT n'évolue plus donc (depuis que son développeur l'a vendu) il a perdu de son efficacité.
Il rend encore quelques services.
OUI, emplacé par ZHPDiag developpé par nicolas coolman qui a fait là (et continuer de faire) un très beau travail et qui évolue sans arrêt.

OK, merci, Bleuet' (ou Bleuette ? ;-)
Y a-t-il d'autres vérifs, alors ?

Je suis pour mettre des fleurs ! Ce sera Bleuet'.

C'est un PC portable de marque HP, acheté directement auprès de HP, via internet, par la société où travaille mon père. C'est donc censé être un PC pro. D'ailleurs, c'est un ProBook 4710s.
Depuis ComboFix, tout semble normal, oui.

Ce qui peut expliquer la redondance rootkit.
Lire >
http://www.depannetonpc.net/dossiers/lire_13_1_le-tatouage-bios-disque-dur-la-menace-fantome.html
Qui ressemble bien à ta configuration.
---

Si tu considères qu'il n'y a plus de problème met ton premier message en [RESOLU] comme ceci >

https://www.commentcamarche.net/infos/25917-marquer-un-fil-de-discussion-comme-etant-resolu/

Ok - ce que tu me dis - et ce que j'ai lu sur la page dont tu me donnes le lien - est plus compréhensible que du japonnais, mais moins clair que la recette de la pâte à crêpe.

En tout cas, je clique sur "résolu" et te remercie.

Si la bouteille de champagne virtuelle existait - et elle doit bien exister - je t'en offrirais une.

Tu peux aussi aller au café en bas de chez moi ("La Môme", Paris 18e, rue Stephenson).
Ils sont prévenus : si un consommateur vient chez eux et dit : «Je suis Bleuet'» ils lui serviront gratuitement ce qu'il demande.

Bye ;-)

Attention que je ne te prenne pas au mot !
Gare à la note. ;)