Comment reparer mon ordinateur

Bonjour,

voici le lien
http://www.cijoint.fr/cjlink.php?file=cj201111/cijZHvoMoH.txt

Voici ce que ca donne
ComboFix 11-11-07.03 - Melany 2011-11-07 15:49:37.2.2 - x86 NETWORK
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.2.1033.18.894.76 [GMT -5:00]
Running from: c:\users\Melany\Desktop\CHELE.exe
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\privacy.exe
C:\system.bin
c:\system.bin\2C3F67F95E9.exe
c:\users\Melany\AppData\Local\{2086D30A-C4C4-4FE9-952A-B907A26230C5}
c:\users\Melany\AppData\Local\{2086D30A-C4C4-4FE9-952A-B907A26230C5}\chrome.manifest
c:\users\Melany\AppData\Local\{2086D30A-C4C4-4FE9-952A-B907A26230C5}\chrome\content\_cfg.js
c:\users\Melany\AppData\Local\{2086D30A-C4C4-4FE9-952A-B907A26230C5}\chrome\content\overlay.xul
c:\users\Melany\AppData\Local\{2086D30A-C4C4-4FE9-952A-B907A26230C5}\install.rdf
c:\users\Melany\Desktop\Setup.exe
c:\windows\system32\hs_err_pid4824.log
c:\windows\system32\hs_err_pid5596.log
.
.
((((((((((((((((((((((((( Files Created from 2011-10-07 to 2011-11-07 )))))))))))))))))))))))))))))))
.
.
2011-11-07 21:09 . 2011-11-07 21:11 -------- d-----w- c:\users\Melany\AppData\Local\temp
2011-11-07 21:09 . 2011-11-07 21:09 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-11-07 21:09 . 2011-11-07 21:09 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-07 20:05 . 2011-11-07 20:05 54016 ----a-w- c:\windows\system32\drivers\dvtgac.sys
2011-11-07 18:34 . 2011-11-07 20:07 -------- d-----w- C:\sh4ldr
2011-11-07 18:34 . 2011-11-07 18:34 -------- d-----w- c:\program files\Enigma Software Group
2011-11-07 18:34 . 2011-11-07 20:07 -------- d-----w- c:\windows\1C7CC8E2CFCF41E6A8637C7A45CE8A78.TMP
2011-11-07 18:34 . 2011-11-07 18:34 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2011-11-07 16:57 . 2011-11-07 17:30 -------- d-----w- C:\Kill'em
2011-11-07 03:11 . 2011-11-07 03:11 -------- d-----w- c:\program files\CCleaner
2011-11-06 23:31 . 2011-11-06 23:31 -------- d-----w- C:\CHELE7807C
2011-11-05 16:02 . 2011-11-05 16:02 -------- d-----w- C:\6f74fece6804cb7b843c81ff413c9514
2011-10-29 13:36 . 2011-10-29 13:37 -------- d-----w- C:\bd5fb6290826e33d7a2e821b4dc8
2011-10-26 02:23 . 2011-08-15 04:25 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-25 01:57 . 2011-10-25 01:57 -------- d-----w- C:\209a1056c69b51810a
2011-10-21 15:37 . 2011-10-21 15:38 -------- d-----w- c:\users\Melany\AppData\Local\{037143DA-82B4-46A6-9704-937B5195EFD6}
2011-10-21 15:00 . 2011-10-21 15:00 -------- d-----w- c:\windows\en
2011-10-21 14:51 . 2011-10-21 14:51 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-10-21 14:38 . 2010-08-11 04:44 2983424 ----a-w- c:\windows\system32\UIRibbon.dll
2011-10-21 14:38 . 2010-08-11 04:35 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-10-19 16:29 . 2011-10-19 19:07 -------- d-----w- C:\CHELE5025C
2011-10-17 13:34 . 2011-10-18 02:50 -------- d-----w- C:\9e8ad03592eca5e49f9387099492c5
2011-10-15 14:03 . 2011-10-15 14:03 -------- d-----w- c:\program files\iPod
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-10-15 13:51 . 2011-10-15 13:51 -------- d-----w- c:\program files\Bonjour
2011-10-15 13:49 . 2011-10-15 13:49 -------- d-----w- c:\program files\Apple Software Update
2011-10-10 13:22 . 2011-10-10 13:22 -------- d-----w- C:\807b17b907eb967bf2
2011-10-09 14:16 . 2011-10-10 00:44 -------- d-----w- C:\8eb68b42a357ee96f6af30ce4612b7
2011-10-09 03:03 . 2011-10-09 03:03 -------- d-----w- C:\7356defa763a16e38c1e691d
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-31 03:05 . 2011-08-31 03:05 83816 ----a-w- c:\windows\system32\dns-sd.exe
2011-08-31 03:05 . 2011-08-31 03:05 73064 ----a-w- c:\windows\system32\dnssd.dll
2011-08-28 02:33 . 2011-08-28 02:33 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
.
[code]<pre>
c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM .exe
c:\program files\QuickTime\QTTask .exe
</pre>/code
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
2011-01-17 14:54 175912 ----a-w- c:\program files\Softonic_France\prxtbSof0.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-02-01 23:17 1487240 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
"{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2011-05-13 4283256]
"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-07-16 5458704]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-03-18 39408]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2008-06-03 536576]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Privacy Protection"="c:\programdata\privacy.exe" [N/A]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"ConnectionManager"="c:\program files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe" [N/A]
"NBAgent"="c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [N/A]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-28 207424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe" [2010-11-08 233936]
.
c:\users\Melany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de détection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-12-12 385024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\srv1148]
@="service"
.
R0 gpsndg;gpsndg;c:\windows\System32\drivers\myplp.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 srv1148;srv1148;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4640000]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2010-03-19 47360]
R3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 577384]
R3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 194408]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 21864]
R3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 19304]
R3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-04-03 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2009-11-04 17408]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - NATIVEWIFIP
*NewlyCreated* - NDISUIO
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
srv1148
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-11-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-11-05 c:\windows\Tasks\Norton Security Scan for Melany.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-10 14:06]
.
2011-08-12 c:\windows\Tasks\User_Feed_Synchronization-{EC214D0F-63B2-420D-878E-9AB24759442B}.job
- c:\windows\system32\msfeedssync.exe [2011-10-13 04:32]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
TCP: DhcpNameServer = 206.80.254.68 206.80.254.4
.
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7600
.
CreateFile("\\.\PHYSICALDRIVE0"): The process cannot access the file because it is being used by another process.
device: opened successfully
user: error reading MBR
kernel: MBR read successfully
user != kernel MBR !!!
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\srv1148]
"servicedll"="\\?\globalroot\Device\HarddiskVolume1\Windows\temp\srv1148.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Swearware\backup\winsock2\Parameters]
@DACL=(02 0000)
@SACL=
"NameSpace_Callout"=expand:"%SystemRoot%\\System32\\fwpuclnt.dll"
"WinSock_Registry_Version"="2.0"
"AutodialDLL"="rasadhlp.dll"
"Current_NameSpace_Catalog"="NameSpace_Catalog5"
"Current_Protocol_Catalog"="Protocol_Catalog9"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-11-07 16:20:47
ComboFix-quarantined-files.txt 2011-11-07 21:20
ComboFix2.txt 2011-10-19 18:26
ComboFix3.txt 2011-05-31 13:44
ComboFix4.txt 2011-05-28 15:17
.
Pre-Run: 43 593 756 672 bytes free
Post-Run: 43 439 124 480 bytes free
.
- - End Of File - - FE07267070849D3F6C8E337C0970E483

Je ne trouve pas le fichier de la première étape même si je fais les changements dans panneaux de configuration :S ...que puije faire?

fais le 2)

ComboFix 11-11-09.01 - Melany 2011-11-09 14:26:26.10.2 - x86 NETWORK
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.2.1033.18.894.168 [GMT -5:00]
Running from: c:\users\Melany\Desktop\CHELE.exe
Command switches used :: c:\users\Melany\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
FILE ::
"c:\windows\system32\drivers\dvtgac.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-- Previous Run --
.
Infected copy of c:\windows\system32\Drivers\atapi.sys was found and disinfected
Restored copy from - c:\windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
.
-- Previous Run --
.
Infected copy of c:\windows\system32\Drivers\atapi.sys was found and disinfected
Restored copy from - c:\windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
.
--------
.
Infected copy of c:\windows\system32\userinit.exe was found and disinfected
Restored copy from - c:\windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
.
--------
.
Infected copy of c:\windows\system32\imm32.dll was found and disinfected
Restored copy from - c:\windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_5e5d8801d8ad160d\imm32.dll
.
.
((((((((((((((((((((((((( Files Created from 2011-10-09 to 2011-11-09 )))))))))))))))))))))))))))))))
.
.
2011-11-09 19:50 . 2011-11-09 19:50 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-11-09 19:50 . 2011-11-09 19:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-09 04:48 . 2011-11-09 19:57 -------- d-----w- c:\users\Melany\AppData\Local\temp
2011-11-08 03:56 . 2011-11-08 03:56 -------- d-----w- c:\users\Melany\AppData\Roaming\Avira
2011-11-08 03:54 . 2011-07-21 17:22 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-11-08 03:54 . 2011-07-21 17:22 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-11-08 03:53 . 2011-11-08 03:53 -------- d-----w- c:\programdata\Avira
2011-11-08 03:53 . 2011-11-08 03:53 -------- d-----w- c:\program files\Avira
2011-11-07 18:34 . 2011-11-07 20:07 -------- d-----w- C:\sh4ldr
2011-11-07 18:34 . 2011-11-07 18:34 -------- d-----w- c:\program files\Enigma Software Group
2011-11-07 18:34 . 2011-11-07 20:07 -------- d-----w- c:\windows\1C7CC8E2CFCF41E6A8637C7A45CE8A78.TMP
2011-11-07 18:34 . 2011-11-07 18:34 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2011-11-07 16:57 . 2011-11-07 17:30 -------- d-----w- C:\Kill'em
2011-11-07 03:11 . 2011-11-07 03:11 -------- d-----w- c:\program files\CCleaner
2011-11-06 23:31 . 2011-11-06 23:31 -------- d-----w- C:\CHELE7807C
2011-11-05 16:02 . 2011-11-05 16:02 -------- d-----w- C:\6f74fece6804cb7b843c81ff413c9514
2011-10-29 13:36 . 2011-10-29 13:37 -------- d-----w- C:\bd5fb6290826e33d7a2e821b4dc8
2011-10-26 02:23 . 2011-08-15 04:25 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-25 01:57 . 2011-10-25 01:57 -------- d-----w- C:\209a1056c69b51810a
2011-10-21 15:37 . 2011-10-21 15:38 -------- d-----w- c:\users\Melany\AppData\Local\{037143DA-82B4-46A6-9704-937B5195EFD6}
2011-10-21 15:00 . 2011-10-21 15:00 -------- d-----w- c:\windows\en
2011-10-21 14:51 . 2011-10-21 14:51 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-10-21 14:38 . 2010-08-11 04:44 2983424 ----a-w- c:\windows\system32\UIRibbon.dll
2011-10-21 14:38 . 2010-08-11 04:35 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-10-19 16:29 . 2011-10-19 19:07 -------- d-----w- C:\CHELE5025C
2011-10-17 13:34 . 2011-10-18 02:50 -------- d-----w- C:\9e8ad03592eca5e49f9387099492c5
2011-10-15 14:03 . 2011-10-15 14:03 -------- d-----w- c:\program files\iPod
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-10-15 13:51 . 2011-10-15 13:51 -------- d-----w- c:\program files\Bonjour
2011-10-15 13:49 . 2011-10-15 13:49 -------- d-----w- c:\program files\Apple Software Update
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-31 03:05 . 2011-08-31 03:05 83816 ----a-w- c:\windows\system32\dns-sd.exe
2011-08-31 03:05 . 2011-08-31 03:05 73064 ----a-w- c:\windows\system32\dnssd.dll
2011-08-28 02:33 . 2011-08-28 02:33 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
.
[code]<pre>
c:\program files\QuickTime\QTTask .exe
</pre>/code
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
2011-01-17 14:54 175912 ----a-w- c:\program files\Softonic_France\prxtbSof0.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-02-01 23:17 1487240 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
"{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2011-05-13 4283256]
"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-07-16 5458704]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-03-18 39408]
"Gestionnaire Antidote.exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote.exe" [2008-06-03 536576]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"ConnectionManager"="c:\program files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe" [N/A]
"NBAgent"="c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [N/A]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-28 207424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe" [2010-11-08 233936]
.
c:\users\Melany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de détection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-12-12 385024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\srv1148]
@="service"
.
R0 gpsndg;gpsndg;c:\windows\System32\drivers\myplp.sys [x]
R0 nwlxggrj;nwlxggrj;c:\windows\System32\drivers\dvtgac.sys [x]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 srv1148;srv1148;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4640000]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2010-03-19 47360]
R3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 577384]
R3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 194408]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 21864]
R3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 19304]
R3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-04-03 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2009-11-04 17408]
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
srv1148
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-11-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-11-05 c:\windows\Tasks\Norton Security Scan for Melany.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-10 14:06]
.
2011-08-12 c:\windows\Tasks\User_Feed_Synchronization-{EC214D0F-63B2-420D-878E-9AB24759442B}.job
- c:\windows\system32\msfeedssync.exe [2011-10-13 04:32]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
TCP: DhcpNameServer = 206.80.254.68 206.80.254.4
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\srv1148]
"servicedll"="\\?\globalroot\Device\HarddiskVolume1\Windows\temp\srv1148.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Swearware\backup\winsock2\Parameters]
@DACL=(02 0000)
@SACL=
"NameSpace_Callout"=expand:"%SystemRoot%\\System32\\fwpuclnt.dll"
"WinSock_Registry_Version"="2.0"
"AutodialDLL"="rasadhlp.dll"
"Current_NameSpace_Catalog"="NameSpace_Catalog5"
"Current_Protocol_Catalog"="Protocol_Catalog9"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\conhost.exe
c:\windows\helppane.exe
.
**************************************************************************
.
Completion time: 2011-11-09 15:30:51 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-09 20:30
ComboFix2.txt 2011-11-07 21:20
ComboFix3.txt 2011-10-19 18:26
ComboFix4.txt 2011-05-31 13:44
ComboFix5.txt 2011-11-09 04:25
.
Pre-Run: 42 429 652 992 bytes free
Post-Run: 42 368 077 824 bytes free
.
- - End Of File - - 9DEDB3654BFEE683368F30C8A86F6E3B

J'ai desinstallé antidote en allant sur "desinstaller un programme" mais je suis pas sur si ca la fonctionné parce que dans le raport de combofix, il apparait....Voici de toute maniere le raport :S


ComboFix 11-11-09.02 - Melany 2011-11-09 23:09:09.12.2 - x86 NETWORK
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.2.1033.18.894.490 [GMT -5:00]
Running from: c:\users\Melany\Desktop\CHELE.exe
Command switches used :: c:\users\Melany\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Disabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
FILE ::
"c:\windows\System32\drivers\dvtgac.sys"
"c:\windows\System32\drivers\myplp.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_gpsndg
-------\Service_nwlxggrj
.
.
((((((((((((((((((((((((( Files Created from 2011-10-10 to 2011-11-10 )))))))))))))))))))))))))))))))
.
.
2011-11-10 04:27 . 2011-11-10 04:27 -------- d-----w- c:\users\Public\AppData\Local\temp
2011-11-10 04:27 . 2011-11-10 04:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-09 04:48 . 2011-11-10 04:33 -------- d-----w- c:\users\Melany\AppData\Local\temp
2011-11-08 03:56 . 2011-11-08 03:56 -------- d-----w- c:\users\Melany\AppData\Roaming\Avira
2011-11-08 03:54 . 2011-07-21 17:22 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-11-08 03:54 . 2011-07-21 17:22 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-11-08 03:53 . 2011-11-08 03:53 -------- d-----w- c:\programdata\Avira
2011-11-08 03:53 . 2011-11-08 03:53 -------- d-----w- c:\program files\Avira
2011-11-07 18:34 . 2011-11-07 20:07 -------- d-----w- C:\sh4ldr
2011-11-07 18:34 . 2011-11-07 18:34 -------- d-----w- c:\program files\Enigma Software Group
2011-11-07 18:34 . 2011-11-07 20:07 -------- d-----w- c:\windows\1C7CC8E2CFCF41E6A8637C7A45CE8A78.TMP
2011-11-07 18:34 . 2011-11-07 18:34 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2011-11-07 16:57 . 2011-11-07 17:30 -------- d-----w- C:\Kill'em
2011-11-07 03:11 . 2011-11-07 03:11 -------- d-----w- c:\program files\CCleaner
2011-11-06 23:31 . 2011-11-06 23:31 -------- d-----w- C:\CHELE7807C
2011-11-05 16:02 . 2011-11-05 16:02 -------- d-----w- C:\6f74fece6804cb7b843c81ff413c9514
2011-10-29 13:36 . 2011-10-29 13:37 -------- d-----w- C:\bd5fb6290826e33d7a2e821b4dc8
2011-10-26 02:23 . 2011-08-15 04:25 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2011-10-25 01:57 . 2011-10-25 01:57 -------- d-----w- C:\209a1056c69b51810a
2011-10-21 15:37 . 2011-10-21 15:38 -------- d-----w- c:\users\Melany\AppData\Local\{037143DA-82B4-46A6-9704-937B5195EFD6}
2011-10-21 15:00 . 2011-10-21 15:00 -------- d-----w- c:\windows\en
2011-10-21 14:51 . 2011-10-21 14:51 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-10-21 14:38 . 2010-08-11 04:44 2983424 ----a-w- c:\windows\system32\UIRibbon.dll
2011-10-21 14:38 . 2010-08-11 04:35 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2011-10-19 16:29 . 2011-10-19 19:07 -------- d-----w- C:\CHELE5025C
2011-10-17 13:34 . 2011-10-18 02:50 -------- d-----w- C:\9e8ad03592eca5e49f9387099492c5
2011-10-15 14:03 . 2011-10-15 14:03 -------- d-----w- c:\program files\iPod
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-10-15 13:54 . 2011-10-15 13:54 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-10-15 13:51 . 2011-10-15 13:51 -------- d-----w- c:\program files\Bonjour
2011-10-15 13:49 . 2011-10-15 13:49 -------- d-----w- c:\program files\Apple Software Update
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-31 03:05 . 2011-08-31 03:05 83816 ----a-w- c:\windows\system32\dns-sd.exe
2011-08-31 03:05 . 2011-08-31 03:05 73064 ----a-w- c:\windows\system32\dnssd.dll
2011-08-28 02:33 . 2011-08-28 02:33 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
.
[code]<pre>
c:\program files\QuickTime\QTTask .exe
</pre>/code
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
2011-01-17 14:54 175912 ----a-w- c:\program files\Softonic_France\prxtbSof0.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2011-02-01 23:17 1487240 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{4daac69c-cba7-45e2-9bc8-1044483d3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2011-02-01 1487240]
"{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}"= "c:\program files\Softonic_France\prxtbSof0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_CLASSES_ROOT\clsid\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2011-05-13 4283256]
"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-07-16 5458704]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-03-18 39408]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
"Gestionnaire Antidote .exe"="c:\program files\Druide\Antidote\Gestionnaire Antidote .exe" [N/A]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 2793304]
"ConnectionManager"="c:\program files\Winsim\ConnectionManager\Simply.SystemTrayIcon.exe" [N/A]
"NBAgent"="c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [N/A]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-28 207424]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-12-20 963976]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe" [2010-11-08 233936]
.
c:\users\Melany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Outil de détection de support Picture Motion Browser.lnk - c:\program files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe [2010-12-12 385024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\srv1148]
@="service"
.
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264]
R2 srv1148;srv1148;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 135664]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4640000]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2010-03-19 47360]
R3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-09-14 577384]
R3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-09-14 194408]
R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-09-14 21864]
R3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-09-14 19304]
R3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-04-03 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2009-11-04 17408]
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
srv1148
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-11-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-18 04:00]
.
2011-11-05 c:\windows\Tasks\Norton Security Scan for Melany.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-10 14:06]
.
2011-08-12 c:\windows\Tasks\User_Feed_Synchronization-{EC214D0F-63B2-420D-878E-9AB24759442B}.job
- c:\windows\system32\msfeedssync.exe [2011-10-13 04:32]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: real.com\rhap-app-4-0
Trusted Zone: real.com\rhapreg
TCP: DhcpNameServer = 206.80.254.68 206.80.254.4
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\srv1148]
"servicedll"="\\?\globalroot\Device\HarddiskVolume1\Windows\temp\srv1148.tmp"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Swearware\backup\winsock2\Parameters]
@DACL=(02 0000)
@SACL=
"NameSpace_Callout"=expand:"%SystemRoot%\\System32\\fwpuclnt.dll"
"WinSock_Registry_Version"="2.0"
"AutodialDLL"="rasadhlp.dll"
"Current_NameSpace_Catalog"="NameSpace_Catalog5"
"Current_Protocol_Catalog"="Protocol_Catalog9"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\conhost.exe
c:\windows\helppane.exe
.
**************************************************************************
.
Completion time: 2011-11-10 00:06:41 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-10 05:06
ComboFix2.txt 2011-11-09 20:30
ComboFix3.txt 2011-11-07 21:20
ComboFix4.txt 2011-10-19 18:26
ComboFix5.txt 2011-11-10 03:22
.
Pre-Run: 42 677 788 672 bytes free
Post-Run: 42 613 841 920 bytes free
.
- - End Of File - - DA672DEB7BDA19FB8323843E2ABDED18

Voici le rapport d'AWCleane....pour ce qui est de létape 2.. je ne suis pas capable de télécharger ZHPdiag, car a chaque fois il me demande de me loger et je ne sais pas quel est mon nom d'utilisateur et mon mot de passe, j'ai essayé ceux du compte que je me suis fait sur zebulon, mais ca ne fonctionne pas...


# AdwCleaner v1.317B - Logfile created 11/10/2011 at 11:38:14
# Updated 11/10/11 at 2:00p.m by Xplode
# Operating system : Windows 7 Ultimate (32 bits)
# User : Melany - VANESSAPC2OO10 (Administrator)
# Running from : C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AQU3C9RC\adwcleaner[1].exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Windows\system32\config\systemprofile\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Windows\system32\config\systemprofile\AppData\LocalLow\Conduit
Folder Deleted : C:\Windows\system32\config\systemprofile\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Windows\system32\config\systemprofile\AppData\LocalLow\PriceGong
Folder Deleted : C:\Program Files\Ask.com
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\ConduitEngine
Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
File Deleted : C:\Windows\system32\conduitEngine.tmp

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKLM\SOFTWARE\AskToolbar
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\conduitEngine
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{799391D3-EB86-4bac-9BD3-CBFEA58A0E15}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D858DAFC-9573-4811-B323-7011A3AA7E61}
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7600.16385

Registry is OK.

*************************

AdwCleaner[S1].txt - [6462 octets] - [10/11/2011 11:38:14]

*************************

Temporary folder : : 3 folder(s)et 5 file(s) deleted

########## EOF - \AdwCleaner[S1].txt - [6676 octets] ##########

bien

=> ZHPdiag

je ne suis pas capable de télécharger ZHPdiag, car a chaque fois il me demande de me loger et je ne sais pas quel est mon nom d'utilisateur et mon mot de passe, j'ai essayé ceux du compte que je me suis fait sur zebulon, mais ca ne fonctionne pas...

essaie ce lien https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

voici le lien:

http://pjjoint.malekal.com/files.php?id=ZHPDiag_z5t11l7u6g14u11l15n6t13v15s7z8y14h6e12g10n11w14h11y7

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 8144

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

11/11/2011 11:38:55 PM
mbam-log-2011-11-11 (23-38-55).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 412377
Temps écoulé: 1 heure(s), 34 minute(s), 19 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 15

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4Y3Y0C3A1F7XWHYEKYSA (Trojan.Downloader) -> Value: 4Y3Y0C3A1F7XWHYEKYSA -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4Y3Y0C3A1F7XWHYEKYSA (Trojan.Downloader) -> Value: 4Y3Y0C3A1F7XWHYEKYSA -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\Recycle.Bin (Trojan.Spyeyes) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\Recycle.Bin\b6232f3a5e9.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\Kill'em\quarantine\14a8.tmp.kill'em (Exploit.Drop.Gen) -> Quarantined and deleted successfully.
c:\Kill'em\quarantine\4c9.tmp.kill'em (Exploit.Drop.Gen) -> Quarantined and deleted successfully.
c:\Kill'em\quarantine\privacy.exe.kill'em (Exploit.Drop.Gen) -> Quarantined and deleted successfully.
c:\Kill'em\quarantine\~!#d221.tmp.kill'em (Trojan.Agent) -> Quarantined and deleted successfully.
c:\programdata\privacy.exe (Exploit.Drop.Gen) -> Quarantined and deleted successfully.
c:\Qoobox\quarantine\C\programdata\privacy.exe.vir (Exploit.Drop.Gen) -> Quarantined and deleted successfully.
c:\Users\Melany\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\tnyoqevl.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\deployment\cache\6.0\22\3d3f49d6-2640a74b (Trojan.Inject.adb) -> Quarantined and deleted successfully.
c:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\deployment\cache\6.0\55\6ef37c37-241a30cc (Trojan.Inject.adb) -> Quarantined and deleted successfully.
c:\Windows\temp\3DB7.tmp (Exploit.Drop.Gen) -> Quarantined and deleted successfully.
c:\Windows\temp\5073.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Windows\temp\MRT.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Windows\temp\~!#A7DF.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\Recycle.Bin\44161d0ddfaad15 (Trojan.Spyeyes) -> Quarantined and deleted successfully.

Voici le lien.
http://dl.free.fr/pqMxhB2nm

quand j'essaye d'envoyer le fichier ça dit toujours Internet Explorer cannot display the webpage..on dirais que le site internet n'accepte pas le fichier..

10:01:24.0718 0344 TDSS rootkit removing tool 2.6.18.0 Nov 11 2011 15:47:15
10:01:24.0812 0344 ============================================================
10:01:24.0812 0344 Current date / time: 2011/11/14 10:01:24.0812
10:01:24.0812 0344 SystemInfo:
10:01:24.0812 0344
10:01:24.0812 0344 OS Version: 6.1.7600 ServicePack: 0.0
10:01:24.0812 0344 Product type: Workstation
10:01:24.0812 0344 ComputerName: VANESSAPC2OO10
10:01:24.0812 0344 UserName: Melany
10:01:24.0812 0344 Windows directory: C:\Windows
10:01:24.0812 0344 System windows directory: C:\Windows
10:01:24.0812 0344 Processor architecture: Intel x86
10:01:24.0812 0344 Number of processors: 2
10:01:24.0812 0344 Page size: 0x1000
10:01:24.0812 0344 Boot type: Safe boot with network
10:01:24.0812 0344 ============================================================
10:01:26.0265 0344 Initialize success
10:01:40.0781 0688 ============================================================
10:01:40.0781 0688 Scan started
10:01:40.0781 0688 Mode: Manual;
10:01:40.0781 0688 ============================================================
10:01:42.0062 0688 .tdx - ok
10:01:42.0187 0688 1394ohci (6d2aca41739bfe8cb86ee8e85f29697d) C:\Windows\system32\DRIVERS\1394ohci.sys
10:01:42.0187 0688 1394ohci - ok
10:01:42.0312 0688 ACPI (f0e07d144c8685b8774bc32fc8da4df0) C:\Windows\system32\DRIVERS\ACPI.sys
10:01:42.0328 0688 ACPI - ok
10:01:42.0390 0688 AcpiPmi (98d81ca942d19f7d9153b095162ac013) C:\Windows\system32\DRIVERS\acpipmi.sys
10:01:42.0390 0688 AcpiPmi - ok
10:01:42.0453 0688 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\Windows\system32\DRIVERS\adp94xx.sys
10:01:42.0484 0688 adp94xx - ok
10:01:42.0515 0688 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\Windows\system32\DRIVERS\adpahci.sys
10:01:42.0531 0688 adpahci - ok
10:01:42.0546 0688 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\Windows\system32\DRIVERS\adpu320.sys
10:01:42.0562 0688 adpu320 - ok
10:01:42.0656 0688 AFD (0db7a48388d54d154ebec120461a0fcd) C:\Windows\system32\drivers\afd.sys
10:01:42.0671 0688 AFD - ok
10:01:42.0750 0688 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\Windows\system32\DRIVERS\agp440.sys
10:01:42.0750 0688 agp440 - ok
10:01:42.0828 0688 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\Windows\system32\DRIVERS\djsvs.sys
10:01:42.0828 0688 aic78xx - ok
10:01:42.0875 0688 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\Windows\system32\DRIVERS\aliide.sys
10:01:42.0875 0688 aliide - ok
10:01:42.0890 0688 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\Windows\system32\DRIVERS\amdagp.sys
10:01:42.0890 0688 amdagp - ok
10:01:42.0906 0688 amdide (cd5914170297126b6266860198d1d4f0) C:\Windows\system32\DRIVERS\amdide.sys
10:01:42.0921 0688 amdide - ok
10:01:42.0937 0688 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\Windows\system32\DRIVERS\amdk8.sys
10:01:42.0953 0688 AmdK8 - ok
10:01:42.0968 0688 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\Windows\system32\DRIVERS\amdppm.sys
10:01:42.0968 0688 AmdPPM - ok
10:01:43.0031 0688 amdsata (19ce906b4cdc11fc4fef5745f33a63b6) C:\Windows\system32\drivers\amdsata.sys
10:01:43.0031 0688 amdsata - ok
10:01:43.0093 0688 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\Windows\system32\DRIVERS\amdsbs.sys
10:01:43.0093 0688 amdsbs - ok
10:01:43.0140 0688 amdxata (869e67d66be326a5a9159fba8746fa70) C:\Windows\system32\drivers\amdxata.sys
10:01:43.0156 0688 amdxata - ok
10:01:43.0234 0688 AppID (feb834c02ce1e84b6a38f953ca067706) C:\Windows\system32\drivers\appid.sys
10:01:43.0234 0688 AppID - ok
10:01:43.0359 0688 arc (2932004f49677bd84dbc72edb754ffb3) C:\Windows\system32\DRIVERS\arc.sys
10:01:43.0359 0688 arc - ok
10:01:43.0421 0688 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\Windows\system32\DRIVERS\arcsas.sys
10:01:43.0421 0688 arcsas - ok
10:01:43.0468 0688 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\Windows\system32\DRIVERS\asyncmac.sys
10:01:43.0468 0688 AsyncMac - ok
10:01:43.0531 0688 atapi (338c86357871c167a96ab976519bf59e) C:\Windows\system32\DRIVERS\atapi.sys
10:01:43.0531 0688 atapi - ok
10:01:43.0671 0688 atikmdag (a23efb72057fed7128eb558866055fdf) C:\Windows\system32\DRIVERS\atikmdag.sys
10:01:43.0765 0688 atikmdag - ok
10:01:43.0890 0688 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\Windows\system32\DRIVERS\avgntflt.sys
10:01:43.0890 0688 avgntflt - ok
10:01:43.0953 0688 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\Windows\system32\DRIVERS\avipbb.sys
10:01:43.0968 0688 avipbb - ok
10:01:44.0031 0688 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\Windows\system32\DRIVERS\bxvbdx.sys
10:01:44.0046 0688 b06bdrv - ok
10:01:44.0109 0688 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\Windows\system32\DRIVERS\b57nd60x.sys
10:01:44.0109 0688 b57nd60x - ok
10:01:44.0234 0688 Beep (505506526a9d467307b3c393dedaf858) C:\Windows\system32\drivers\Beep.sys
10:01:44.0234 0688 Beep - ok
10:01:44.0296 0688 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\Windows\system32\DRIVERS\blbdrive.sys
10:01:44.0296 0688 blbdrive - ok
10:01:44.0375 0688 bowser (9a5c671b7fbae4865149bb11f59b91b2) C:\Windows\system32\DRIVERS\bowser.sys
10:01:44.0375 0688 bowser - ok
10:01:44.0406 0688 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\DRIVERS\BrFiltLo.sys
10:01:44.0406 0688 BrFiltLo - ok
10:01:44.0421 0688 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\DRIVERS\BrFiltUp.sys
10:01:44.0421 0688 BrFiltUp - ok
10:01:44.0468 0688 Brserid (845b8ce732e67f3b4133164868c666ea) C:\Windows\System32\Drivers\Brserid.sys
10:01:44.0484 0688 Brserid - ok
10:01:44.0515 0688 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\System32\Drivers\BrSerWdm.sys
10:01:44.0515 0688 BrSerWdm - ok
10:01:44.0546 0688 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\System32\Drivers\BrUsbMdm.sys
10:01:44.0546 0688 BrUsbMdm - ok
10:01:44.0578 0688 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\System32\Drivers\BrUsbSer.sys
10:01:44.0578 0688 BrUsbSer - ok
10:01:44.0593 0688 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\Windows\system32\DRIVERS\bthmodem.sys
10:01:44.0609 0688 BTHMODEM - ok
10:01:44.0718 0688 catchme - ok
10:01:44.0781 0688 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\Windows\system32\DRIVERS\cdfs.sys
10:01:44.0796 0688 cdfs - ok
10:01:44.0859 0688 cdrom (ba6e70aa0e6091bc39de29477d866a77) C:\Windows\system32\DRIVERS\cdrom.sys
10:01:44.0859 0688 cdrom - ok
10:01:44.0968 0688 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\Windows\system32\DRIVERS\circlass.sys
10:01:44.0968 0688 circlass - ok
10:01:45.0031 0688 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\Windows\system32\CLFS.sys
10:01:45.0031 0688 CLFS - ok
10:01:45.0093 0688 CmBatt (dea805815e587dad1dd2c502220b5616) C:\Windows\system32\DRIVERS\CmBatt.sys
10:01:45.0093 0688 CmBatt - ok
10:01:45.0125 0688 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\Windows\system32\DRIVERS\cmdide.sys
10:01:45.0125 0688 cmdide - ok
10:01:45.0156 0688 CNG (1b675691ed940766149c93e8f4488d68) C:\Windows\system32\Drivers\cng.sys
10:01:45.0171 0688 CNG - ok
10:01:45.0203 0688 Compbatt (a6023d3823c37043986713f118a89bee) C:\Windows\system32\DRIVERS\compbatt.sys
10:01:45.0203 0688 Compbatt - ok
10:01:45.0296 0688 CompositeBus (f1724ba27e97d627f808fb0ba77a28a6) C:\Windows\system32\DRIVERS\CompositeBus.sys
10:01:45.0296 0688 CompositeBus - ok
10:01:45.0375 0688 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\Windows\system32\DRIVERS\crcdisk.sys
10:01:45.0375 0688 crcdisk - ok
10:01:45.0453 0688 CSC (27c9490bdd0ae48911ab8cf1932591ed) C:\Windows\system32\drivers\csc.sys
10:01:45.0468 0688 CSC - ok
10:01:45.0609 0688 dc3d (33e7ab50f87f97abd9057205e27cb182) C:\Windows\system32\DRIVERS\dc3d.sys
10:01:45.0609 0688 dc3d - ok
10:01:45.0687 0688 DfsC (83d1ecea8faae75604c0fa49ac7ad996) C:\Windows\system32\Drivers\dfsc.sys
10:01:45.0687 0688 DfsC - ok
10:01:45.0734 0688 discache (1a050b0274bfb3890703d490f330c0da) C:\Windows\system32\drivers\discache.sys
10:01:45.0750 0688 discache - ok
10:01:45.0812 0688 Disk (565003f326f99802e68ca78f2a68e9ff) C:\Windows\system32\DRIVERS\disk.sys
10:01:45.0812 0688 Disk - ok
10:01:45.0890 0688 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\Windows\system32\drivers\drmkaud.sys
10:01:45.0890 0688 drmkaud - ok
10:01:45.0968 0688 DXGKrnl (1679a4669326cb1a67cc95658d273234) C:\Windows\System32\drivers\dxgkrnl.sys
10:01:45.0984 0688 DXGKrnl - ok
10:01:46.0156 0688 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\Windows\system32\DRIVERS\evbdx.sys
10:01:46.0265 0688 ebdrv - ok
10:01:46.0359 0688 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\Windows\system32\DRIVERS\elxstor.sys
10:01:46.0375 0688 elxstor - ok
10:01:46.0421 0688 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\Windows\system32\DRIVERS\errdev.sys
10:01:46.0421 0688 ErrDev - ok
10:01:46.0484 0688 exfat (2dc9108d74081149cc8b651d3a26207f) C:\Windows\system32\drivers\exfat.sys
10:01:46.0500 0688 exfat - ok
10:01:46.0546 0688 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\Windows\system32\drivers\fastfat.sys
10:01:46.0546 0688 fastfat - ok
10:01:46.0593 0688 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\Windows\system32\DRIVERS\fdc.sys
10:01:46.0593 0688 fdc - ok
10:01:46.0671 0688 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\Windows\system32\drivers\fileinfo.sys
10:01:46.0671 0688 FileInfo - ok
10:01:46.0703 0688 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\Windows\system32\drivers\filetrace.sys
10:01:46.0703 0688 Filetrace - ok
10:01:46.0718 0688 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\Windows\system32\DRIVERS\flpydisk.sys
10:01:46.0734 0688 flpydisk - ok
10:01:46.0796 0688 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\Windows\system32\drivers\fltmgr.sys
10:01:46.0796 0688 FltMgr - ok
10:01:46.0843 0688 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\Windows\system32\drivers\FsDepends.sys
10:01:46.0843 0688 FsDepends - ok
10:01:46.0906 0688 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
10:01:46.0906 0688 fssfltr - ok
10:01:46.0953 0688 Fs_Rec (a574b4360e438977038aae4bf60d79a2) C:\Windows\system32\drivers\Fs_Rec.sys
10:01:46.0953 0688 Fs_Rec - ok
10:01:47.0015 0688 fvevol (dafbd9fe39197495aed6d51f3b85b5d2) C:\Windows\system32\DRIVERS\fvevol.sys
10:01:47.0015 0688 fvevol - ok
10:01:47.0062 0688 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\Windows\system32\DRIVERS\gagp30kx.sys
10:01:47.0062 0688 gagp30kx - ok
10:01:47.0234 0688 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
10:01:47.0234 0688 GEARAspiWDM - ok
10:01:47.0671 0688 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\Windows\system32\drivers\hcw85cir.sys
10:01:47.0671 0688 hcw85cir - ok
10:01:47.0734 0688 HdAudAddService (3530cad25deba7dc7de8bb51632cbc5f) C:\Windows\system32\drivers\HdAudio.sys
10:01:47.0750 0688 HdAudAddService - ok
10:01:47.0843 0688 HDAudBus (717a2207fd6f13ad3e664c7d5a43c7bf) C:\Windows\system32\DRIVERS\HDAudBus.sys
10:01:47.0843 0688 HDAudBus - ok
10:01:47.0875 0688 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\Windows\system32\DRIVERS\HidBatt.sys
10:01:47.0875 0688 HidBatt - ok
10:01:47.0906 0688 HidBth (89448f40e6df260c206a193a4683ba78) C:\Windows\system32\DRIVERS\hidbth.sys
10:01:47.0906 0688 HidBth - ok
10:01:47.0921 0688 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\Windows\system32\DRIVERS\hidir.sys
10:01:47.0921 0688 HidIr - ok
10:01:48.0015 0688 HidUsb (25072fb35ac90b25f9e4e3bacf774102) C:\Windows\system32\DRIVERS\hidusb.sys
10:01:48.0031 0688 HidUsb - ok
10:01:48.0109 0688 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\Windows\system32\DRIVERS\HpSAMD.sys
10:01:48.0109 0688 HpSAMD - ok
10:01:48.0156 0688 HTTP (c531c7fd9e8b62021112787c4e2c5a5a) C:\Windows\system32\drivers\HTTP.sys
10:01:48.0171 0688 HTTP - ok
10:01:48.0203 0688 hwpolicy (8305f33cde89ad6c7a0763ed0b5a8d42) C:\Windows\system32\drivers\hwpolicy.sys
10:01:48.0203 0688 hwpolicy - ok
10:01:48.0250 0688 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\Windows\system32\DRIVERS\i8042prt.sys
10:01:48.0265 0688 i8042prt - ok
10:01:48.0343 0688 iaStorV (71f1a494fedf4b33c02c4a6a28d6d9e9) C:\Windows\system32\drivers\iaStorV.sys
10:01:48.0359 0688 iaStorV - ok
10:01:48.0406 0688 iirsp (4173ff5708f3236cf25195fecd742915) C:\Windows\system32\DRIVERS\iirsp.sys
10:01:48.0406 0688 iirsp - ok
10:01:48.0453 0688 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\Windows\system32\DRIVERS\intelide.sys
10:01:48.0453 0688 intelide - ok
10:01:48.0500 0688 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\Windows\system32\DRIVERS\intelppm.sys
10:01:48.0515 0688 intelppm - ok
10:01:48.0546 0688 IPMIDRV (e4454b6c37d7ffd5649611f6496308a7) C:\Windows\system32\DRIVERS\IPMIDrv.sys
10:01:48.0546 0688 IPMIDRV - ok
10:01:48.0593 0688 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\Windows\system32\drivers\ipnat.sys
10:01:48.0593 0688 IPNAT - ok
10:01:48.0656 0688 IRENUM (42996cff20a3084a56017b7902307e9f) C:\Windows\system32\drivers\irenum.sys
10:01:48.0656 0688 IRENUM - ok
10:01:48.0687 0688 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\Windows\system32\DRIVERS\isapnp.sys
10:01:48.0687 0688 isapnp - ok
10:01:48.0718 0688 iScsiPrt (ed46c223ae46c6866ab77cdc41c404b7) C:\Windows\system32\DRIVERS\msiscsi.sys
10:01:48.0718 0688 iScsiPrt - ok
10:01:48.0781 0688 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\Windows\system32\DRIVERS\kbdclass.sys
10:01:48.0781 0688 kbdclass - ok
10:01:48.0843 0688 kbdhid (3d9f0ebf350edcfd6498057301455964) C:\Windows\system32\DRIVERS\kbdhid.sys
10:01:48.0859 0688 kbdhid - ok
10:01:48.0890 0688 KSecDD (e36a061ec11b373826905b21be10948f) C:\Windows\system32\Drivers\ksecdd.sys
10:01:48.0890 0688 KSecDD - ok
10:01:48.0921 0688 KSecPkg (365c6154bbbc5377173f1ca7bfb6cc59) C:\Windows\system32\Drivers\ksecpkg.sys
10:01:48.0921 0688 KSecPkg - ok
10:01:49.0000 0688 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\Windows\system32\DRIVERS\lltdio.sys
10:01:49.0015 0688 lltdio - ok
10:01:49.0078 0688 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\Windows\system32\DRIVERS\lsi_fc.sys
10:01:49.0093 0688 LSI_FC - ok
10:01:49.0140 0688 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\Windows\system32\DRIVERS\lsi_sas.sys
10:01:49.0156 0688 LSI_SAS - ok
10:01:49.0171 0688 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\Windows\system32\DRIVERS\lsi_sas2.sys
10:01:49.0171 0688 LSI_SAS2 - ok
10:01:49.0203 0688 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\Windows\system32\DRIVERS\lsi_scsi.sys
10:01:49.0218 0688 LSI_SCSI - ok
10:01:49.0281 0688 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\Windows\system32\drivers\luafv.sys
10:01:49.0281 0688 luafv - ok
10:01:49.0359 0688 LVPr2Mon (1a7db7a00a4b0d8da24cd691a4547291) C:\Windows\system32\DRIVERS\LVPr2Mon.sys
10:01:49.0359 0688 LVPr2Mon - ok
10:01:49.0578 0688 LVUVC (a240e42a7402e927a71b6e8aa4629b13) C:\Windows\system32\DRIVERS\lvuvc.sys
10:01:49.0750 0688 LVUVC - ok
10:01:49.0828 0688 MBAMSwissArmy - ok
10:01:49.0859 0688 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\Windows\system32\DRIVERS\megasas.sys
10:01:49.0875 0688 megasas - ok
10:01:49.0921 0688 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\Windows\system32\DRIVERS\MegaSR.sys
10:01:49.0937 0688 MegaSR - ok
10:01:50.0062 0688 Micorsoft Windows Service (ecfc6e4eb3ee71ff8d0444c479f710b8) C:\Users\Melany\AppData\Local\Temp\byavqerx.sys
10:01:50.0078 0688 Micorsoft Windows Service - ok
10:01:50.0125 0688 Modem (f001861e5700ee84e2d4e52c712f4964) C:\Windows\system32\drivers\modem.sys
10:01:50.0125 0688 Modem - ok
10:01:50.0187 0688 monitor (79d10964de86b292320e9dfe02282a23) C:\Windows\system32\DRIVERS\monitor.sys
10:01:50.0187 0688 monitor - ok
10:01:50.0265 0688 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\Windows\system32\DRIVERS\mouclass.sys
10:01:50.0265 0688 mouclass - ok
10:01:50.0328 0688 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\Windows\system32\DRIVERS\mouhid.sys
10:01:50.0343 0688 mouhid - ok
10:01:50.0359 0688 mountmgr (921c18727c5920d6c0300736646931c2) C:\Windows\system32\drivers\mountmgr.sys
10:01:50.0359 0688 mountmgr - ok
10:01:50.0390 0688 mpio (2af5997438c55fb79d33d015c30e1974) C:\Windows\system32\DRIVERS\mpio.sys
10:01:50.0390 0688 mpio - ok
10:01:50.0421 0688 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\Windows\system32\drivers\mpsdrv.sys
10:01:50.0421 0688 mpsdrv - ok
10:01:50.0468 0688 MRxDAV (b1be47008d20e43da3adc37c24cdb89d) C:\Windows\system32\drivers\mrxdav.sys
10:01:50.0468 0688 MRxDAV - ok
10:01:50.0531 0688 mrxsmb (ca7570e42522e24324a12161db14ec02) C:\Windows\system32\DRIVERS\mrxsmb.sys
10:01:50.0531 0688 mrxsmb - ok
10:01:50.0609 0688 mrxsmb10 (f965c3ab2b2ae5c378f4562486e35051) C:\Windows\system32\DRIVERS\mrxsmb10.sys
10:01:50.0609 0688 mrxsmb10 - ok
10:01:50.0656 0688 mrxsmb20 (25c38264a3c72594dd21d355d70d7a5d) C:\Windows\system32\DRIVERS\mrxsmb20.sys
10:01:50.0671 0688 mrxsmb20 - ok
10:01:50.0703 0688 msahci (4326d168944123f38dd3b2d9c37a0b12) C:\Windows\system32\DRIVERS\msahci.sys
10:01:50.0703 0688 msahci - ok
10:01:50.0781 0688 msdsm (455029c7174a2dbb03dba8a0d8bddd9a) C:\Windows\system32\DRIVERS\msdsm.sys
10:01:50.0781 0688 msdsm - ok
10:01:50.0843 0688 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\Windows\system32\drivers\Msfs.sys
10:01:50.0859 0688 Msfs - ok
10:01:50.0875 0688 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\Windows\System32\drivers\mshidkmdf.sys
10:01:50.0875 0688 mshidkmdf - ok
10:01:50.0906 0688 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\Windows\system32\DRIVERS\msisadrv.sys
10:01:50.0906 0688 msisadrv - ok
10:01:50.0984 0688 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\Windows\system32\drivers\MSKSSRV.sys
10:01:50.0984 0688 MSKSSRV - ok
10:01:51.0015 0688 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\Windows\system32\drivers\MSPCLOCK.sys
10:01:51.0015 0688 MSPCLOCK - ok
10:01:51.0046 0688 MSPQM (f456e973590d663b1073e9c463b40932) C:\Windows\system32\drivers\MSPQM.sys
10:01:51.0046 0688 MSPQM - ok
10:01:51.0078 0688 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\Windows\system32\drivers\MsRPC.sys
10:01:51.0078 0688 MsRPC - ok
10:01:51.0140 0688 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\Windows\system32\DRIVERS\mssmbios.sys
10:01:51.0140 0688 mssmbios - ok
10:01:51.0156 0688 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\Windows\system32\drivers\MSTEE.sys
10:01:51.0156 0688 MSTEE - ok
10:01:51.0171 0688 MTConfig (33599130f44e1f34631cea241de8ac84) C:\Windows\system32\DRIVERS\MTConfig.sys
10:01:51.0171 0688 MTConfig - ok
10:01:51.0218 0688 Mup (159fad02f64e6381758c990f753bcc80) C:\Windows\system32\Drivers\mup.sys
10:01:51.0218 0688 Mup - ok
10:01:51.0359 0688 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\Windows\system32\DRIVERS\nwifi.sys
10:01:51.0375 0688 NativeWifiP - ok
10:01:51.0484 0688 NDIS (23759d175a0a9baaf04d05047bc135a8) C:\Windows\system32\drivers\ndis.sys
10:01:51.0500 0688 NDIS - ok
10:01:51.0578 0688 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\Windows\system32\DRIVERS\ndiscap.sys
10:01:51.0578 0688 NdisCap - ok
10:01:51.0625 0688 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\Windows\system32\DRIVERS\ndistapi.sys
10:01:51.0625 0688 NdisTapi - ok
10:01:51.0671 0688 Ndisuio (b30ae7f2b6d7e343b0df32e6c08fce75) C:\Windows\system32\DRIVERS\ndisuio.sys
10:01:51.0671 0688 Ndisuio - ok
10:01:51.0718 0688 NdisWan (267c415eadcbe53c9ca873dee39cf3a4) C:\Windows\system32\DRIVERS\ndiswan.sys
10:01:51.0734 0688 NdisWan - ok
10:01:51.0781 0688 NDProxy (af7e7c63dcef3f8772726f86039d6eb4) C:\Windows\system32\drivers\NDProxy.sys
10:01:51.0781 0688 NDProxy - ok
10:01:51.0843 0688 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\Windows\system32\DRIVERS\netbios.sys
10:01:51.0843 0688 NetBIOS - ok
10:01:51.0859 0688 NetBT (dd52a733bf4ca5af84562a5e2f963b91) C:\Windows\system32\DRIVERS\netbt.sys
10:01:51.0875 0688 NetBT - ok
10:01:51.0953 0688 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\Windows\system32\DRIVERS\nfrd960.sys
10:01:51.0968 0688 nfrd960 - ok
10:01:51.0984 0688 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\Windows\system32\drivers\Npfs.sys
10:01:51.0984 0688 Npfs - ok
10:01:52.0031 0688 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\Windows\system32\drivers\nsiproxy.sys
10:01:52.0031 0688 nsiproxy - ok
10:01:52.0125 0688 Ntfs (187002ce05693c306f43c873f821381f) C:\Windows\system32\drivers\Ntfs.sys
10:01:52.0156 0688 Ntfs - ok
10:01:52.0250 0688 NuidFltr (cf7e041663119e09d2e118521ada9300) C:\Windows\system32\DRIVERS\NuidFltr.sys
10:01:52.0250 0688 NuidFltr - ok
10:01:52.0281 0688 Null (f9756a98d69098dca8945d62858a812c) C:\Windows\system32\drivers\Null.sys
10:01:52.0281 0688 Null - ok
10:01:52.0343 0688 nvraid (f1b0bed906f97e16f6d0c3629d2f21c6) C:\Windows\system32\drivers\nvraid.sys
10:01:52.0343 0688 nvraid - ok
10:01:52.0406 0688 nvstor (4520b63899e867f354ee012d34e11536) C:\Windows\system32\drivers\nvstor.sys
10:01:52.0406 0688 nvstor - ok
10:01:52.0484 0688 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\Windows\system32\DRIVERS\nv_agp.sys
10:01:52.0484 0688 nv_agp - ok
10:01:52.0531 0688 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\Windows\system32\DRIVERS\ohci1394.sys
10:01:52.0531 0688 ohci1394 - ok
10:01:52.0640 0688 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\Windows\system32\DRIVERS\parport.sys
10:01:52.0671 0688 Parport - ok
10:01:52.0859 0688 partmgr (ff4218952b51de44fe910953a3e686b9) C:\Windows\system32\drivers\partmgr.sys
10:01:52.0859 0688 partmgr - ok
10:01:52.0890 0688 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\Windows\system32\DRIVERS\parvdm.sys
10:01:52.0890 0688 Parvdm - ok
10:01:52.0921 0688 pci (c858cb77c577780ecc456a892e7e7d0f) C:\Windows\system32\DRIVERS\pci.sys
10:01:52.0921 0688 pci - ok
10:01:52.0953 0688 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\Windows\system32\DRIVERS\pciide.sys
10:01:52.0953 0688 pciide - ok
10:01:52.0984 0688 pcmcia (f396431b31693e71e8a80687ef523506) C:\Windows\system32\DRIVERS\pcmcia.sys
10:01:53.0000 0688 pcmcia - ok
10:01:53.0078 0688 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\Windows\system32\Drivers\pcouffin.sys
10:01:53.0078 0688 pcouffin - ok
10:01:53.0093 0688 pcw (250f6b43d2b613172035c6747aeeb19f) C:\Windows\system32\drivers\pcw.sys
10:01:53.0093 0688 pcw - ok
10:01:53.0140 0688 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\Windows\system32\drivers\peauth.sys
10:01:53.0156 0688 PEAUTH - ok
10:01:53.0312 0688 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\Windows\system32\DRIVERS\raspptp.sys
10:01:53.0312 0688 PptpMiniport - ok
10:01:53.0343 0688 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\Windows\system32\DRIVERS\processr.sys
10:01:53.0343 0688 Processor - ok
10:01:53.0406 0688 Psched (6270ccae2a86de6d146529fe55b3246a) C:\Windows\system32\DRIVERS\pacer.sys
10:01:53.0406 0688 Psched - ok
10:01:53.0437 0688 PxHelp20 (1962166e0ceb740704f30fa55ad3d509) C:\Windows\system32\Drivers\PxHelp20.sys
10:01:53.0437 0688 PxHelp20 - ok
10:01:53.0500 0688 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\Windows\system32\DRIVERS\ql2300.sys
10:01:53.0562 0688 ql2300 - ok
10:01:53.0609 0688 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\Windows\system32\DRIVERS\ql40xx.sys
10:01:53.0609 0688 ql40xx - ok
10:01:53.0625 0688 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\Windows\system32\drivers\qwavedrv.sys
10:01:53.0640 0688 QWAVEdrv - ok
10:01:53.0656 0688 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\Windows\system32\DRIVERS\rasacd.sys
10:01:53.0671 0688 RasAcd - ok
10:01:53.0734 0688 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\Windows\system32\DRIVERS\AgileVpn.sys
10:01:53.0734 0688 RasAgileVpn - ok
10:01:53.0796 0688 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\Windows\system32\DRIVERS\rasl2tp.sys
10:01:53.0796 0688 Rasl2tp - ok
10:01:53.0859 0688 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\Windows\system32\DRIVERS\raspppoe.sys
10:01:53.0859 0688 RasPppoe - ok
10:01:53.0921 0688 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\Windows\system32\DRIVERS\rassstp.sys
10:01:53.0921 0688 RasSstp - ok
10:01:53.0984 0688 rdbss (835d7e81bf517a3b72384bdcc85e1ce6) C:\Windows\system32\DRIVERS\rdbss.sys
10:01:53.0984 0688 rdbss - ok
10:01:54.0031 0688 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\Windows\system32\DRIVERS\rdpbus.sys
10:01:54.0031 0688 rdpbus - ok
10:01:54.0062 0688 RDPCDD (1e016846895b15a99f9a176a05029075) C:\Windows\system32\DRIVERS\RDPCDD.sys
10:01:54.0062 0688 RDPCDD - ok
10:01:54.0093 0688 RDPDR (c5ff95883ffef704d50c40d21cfb3ab5) C:\Windows\system32\drivers\rdpdr.sys
10:01:54.0093 0688 RDPDR - ok
10:01:54.0140 0688 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\Windows\system32\drivers\rdpencdd.sys
10:01:54.0156 0688 RDPENCDD - ok
10:01:54.0171 0688 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\Windows\system32\drivers\rdprefmp.sys
10:01:54.0171 0688 RDPREFMP - ok
10:01:54.0218 0688 RDPWD (801371ba9782282892d00aadb08ee367) C:\Windows\system32\drivers\RDPWD.sys
10:01:54.0218 0688 RDPWD - ok
10:01:54.0296 0688 rdyboost (4ea225bf1cf05e158853f30a99ca29a7) C:\Windows\system32\drivers\rdyboost.sys
10:01:54.0296 0688 rdyboost - ok
10:01:54.0390 0688 rspndr (032b0d36ad92b582d869879f5af5b928) C:\Windows\system32\DRIVERS\rspndr.sys
10:01:54.0390 0688 rspndr - ok
10:01:54.0468 0688 RTL8023xp (166911eada13cd34dd8f8c667707be94) C:\Windows\system32\DRIVERS\Rtnicxp.sys
10:01:54.0468 0688 RTL8023xp - ok
10:01:54.0484 0688 s3cap (5423d8437051e89dd34749f242c98648) C:\Windows\system32\DRIVERS\vms3cap.sys
10:01:54.0484 0688 s3cap - ok
10:01:54.0562 0688 sbp2port (34ee0c44b724e3e4ce2eff29126de5b5) C:\Windows\system32\DRIVERS\sbp2port.sys
10:01:54.0562 0688 sbp2port - ok
10:01:54.0609 0688 scfilter (a95c54b2ac3cc9c73fcdf9e51a1d6b51) C:\Windows\system32\DRIVERS\scfilter.sys
10:01:54.0609 0688 scfilter - ok
10:01:54.0687 0688 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
10:01:54.0687 0688 secdrv - ok
10:01:54.0734 0688 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\Windows\system32\DRIVERS\serenum.sys
10:01:54.0734 0688 Serenum - ok
10:01:54.0765 0688 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\Windows\system32\DRIVERS\serial.sys
10:01:54.0781 0688 Serial - ok
10:01:54.0796 0688 sermouse (79bffb520327ff916a582dfea17aa813) C:\Windows\system32\DRIVERS\sermouse.sys
10:01:54.0796 0688 sermouse - ok
10:01:54.0843 0688 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\Windows\system32\DRIVERS\sffdisk.sys
10:01:54.0843 0688 sffdisk - ok
10:01:54.0859 0688 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\Windows\system32\DRIVERS\sffp_mmc.sys
10:01:54.0859 0688 sffp_mmc - ok
10:01:54.0890 0688 sffp_sd (4f1e5b0fe7c8050668dbfade8999aefb) C:\Windows\system32\DRIVERS\sffp_sd.sys
10:01:54.0890 0688 sffp_sd - ok
10:01:54.0921 0688 sfloppy (db96666cc8312ebc45032f30b007a547) C:\Windows\system32\DRIVERS\sfloppy.sys
10:01:54.0921 0688 sfloppy - ok
10:01:55.0000 0688 Sftfs (8f00cc8cacf83dce5b35079f615b0f12) C:\Windows\system32\DRIVERS\Sftfslh.sys
10:01:55.0015 0688 Sftfs - ok
10:01:55.0125 0688 Sftplay (afdb934586c4c8b2be39ae7eea6f52be) C:\Windows\system32\DRIVERS\Sftplaylh.sys
10:01:55.0125 0688 Sftplay - ok
10:01:55.0156 0688 Sftredir (6b1865d82e0290729ed7496c24275592) C:\Windows\system32\DRIVERS\Sftredirlh.sys
10:01:55.0156 0688 Sftredir - ok
10:01:55.0171 0688 Sftvol (621eccb1265a01ce2bdf6f2c5e727e2b) C:\Windows\system32\DRIVERS\Sftvollh.sys
10:01:55.0187 0688 Sftvol - ok
10:01:55.0296 0688 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\Windows\system32\DRIVERS\sisagp.sys
10:01:55.0296 0688 sisagp - ok
10:01:55.0343 0688 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\Windows\system32\DRIVERS\SiSRaid2.sys
10:01:55.0343 0688 SiSRaid2 - ok
10:01:55.0375 0688 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\Windows\system32\DRIVERS\sisraid4.sys
10:01:55.0375 0688 SiSRaid4 - ok
10:01:55.0421 0688 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\Windows\system32\DRIVERS\smb.sys
10:01:55.0421 0688 Smb - ok
10:01:55.0500 0688 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\Windows\system32\drivers\spldr.sys
10:01:55.0515 0688 spldr - ok
10:01:55.0593 0688 srv (c4a027b8c0bd3fc0699f41fa5e9e0c87) C:\Windows\system32\DRIVERS\srv.sys
10:01:55.0609 0688 srv - ok
10:01:55.0687 0688 srv2 (414bb592cad8a79649d01f9d94318fb3) C:\Windows\system32\DRIVERS\srv2.sys
10:01:55.0718 0688 srv2 - ok
10:01:55.0765 0688 srvnet (ff207d67700aa18242aaf985d3e7d8f4) C:\Windows\system32\DRIVERS\srvnet.sys
10:01:55.0781 0688 srvnet - ok
10:01:55.0875 0688 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
10:01:55.0890 0688 ssmdrv - ok
10:01:55.0953 0688 stexstor (db32d325c192b801df274bfd12a7e72b) C:\Windows\system32\DRIVERS\stexstor.sys
10:01:55.0953 0688 stexstor - ok
10:01:56.0000 0688 storflt (957e346ca948668f2496a6ccf6ff82cc) C:\Windows\system32\DRIVERS\vmstorfl.sys
10:01:56.0015 0688 storflt - ok
10:01:56.0078 0688 storvsc (d5751969dc3e4b88bf482ac8ec9fe019) C:\Windows\system32\DRIVERS\storvsc.sys
10:01:56.0078 0688 storvsc - ok
10:01:56.0109 0688 swenum (e58c78a848add9610a4db6d214af5224) C:\Windows\system32\DRIVERS\swenum.sys
10:01:56.0109 0688 swenum - ok
10:01:56.0234 0688 Tcpip (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\drivers\tcpip.sys
10:01:56.0265 0688 Tcpip - ok
10:01:56.0359 0688 TCPIP6 (c2daaeb48f3a47c410b041a0d2382ee1) C:\Windows\system32\DRIVERS\tcpip.sys
10:01:56.0359 0688 TCPIP6 - ok
10:01:56.0421 0688 tcpipreg (e64444523add154f86567c469bc0b17f) C:\Windows\system32\drivers\tcpipreg.sys
10:01:56.0421 0688 tcpipreg - ok
10:01:56.0453 0688 TDPIPE (1875c1490d99e70e449e3afae9fcbadf) C:\Windows\system32\drivers\tdpipe.sys
10:01:56.0468 0688 TDPIPE - ok
10:01:56.0484 0688 TDTCP (7551e91ea999ee9a8e9c331d5a9c31f3) C:\Windows\system32\drivers\tdtcp.sys
10:01:56.0484 0688 TDTCP - ok
10:01:56.0515 0688 tdx (45b871a4e0d71ad94fc647323d7009ef) C:\Windows\system32\DRIVERS\tdx.sys
10:01:56.0531 0688 tdx ( Rootkit.Win32.ZAccess.k ) - infected
10:01:56.0531 0688 tdx - detected Rootkit.Win32.ZAccess.k (0)
10:01:56.0546 0688 TermDD (c36f41ee20e6999dbf4b0425963268a5) C:\Windows\system32\DRIVERS\termdd.sys
10:01:56.0546 0688 TermDD - ok
10:01:56.0671 0688 tssecsrv (98ae6fa07d12cb4ec5cf4a9bfa5f4242) C:\Windows\system32\DRIVERS\tssecsrv.sys
10:01:56.0671 0688 tssecsrv - ok
10:01:56.0765 0688 tunnel (3e461d890a97f9d4c168f5fda36e1d00) C:\Windows\system32\DRIVERS\tunnel.sys
10:01:56.0765 0688 tunnel - ok
10:01:56.0796 0688 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\Windows\system32\DRIVERS\uagp35.sys
10:01:56.0796 0688 uagp35 - ok
10:01:56.0828 0688 udfs (09cc3e16f8e5ee7168e01cf8fcbe061a) C:\Windows\system32\DRIVERS\udfs.sys
10:01:56.0843 0688 udfs - ok
10:01:56.0921 0688 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\Windows\system32\DRIVERS\uliagpkx.sys
10:01:56.0937 0688 uliagpkx - ok
10:01:57.0046 0688 umbus (049b3a50b3d646baeeee9eec9b0668dc) C:\Windows\system32\DRIVERS\umbus.sys
10:01:57.0046 0688 umbus - ok
10:01:57.0062 0688 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\Windows\system32\DRIVERS\umpass.sys
10:01:57.0078 0688 UmPass - ok
10:01:57.0171 0688 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys
10:01:57.0171 0688 USBAAPL - ok
10:01:57.0234 0688 usbaudio (2436a42aab4ad48a9b714e5b0f344627) C:\Windows\system32\drivers\usbaudio.sys
10:01:57.0234 0688 usbaudio - ok
10:01:57.0296 0688 usbccgp (c31ae588e403042632dc796cf09e30b0) C:\Windows\system32\DRIVERS\usbccgp.sys
10:01:57.0312 0688 usbccgp - ok
10:01:57.0343 0688 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\Windows\system32\DRIVERS\usbcir.sys
10:01:57.0359 0688 usbcir - ok
10:01:57.0421 0688 usbehci (e4c436d914768ce965d5e659ba7eebd8) C:\Windows\system32\DRIVERS\usbehci.sys
10:01:57.0421 0688 usbehci - ok
10:01:57.0484 0688 usbhub (bdcd7156ec37448f08633fd899823620) C:\Windows\system32\DRIVERS\usbhub.sys
10:01:57.0500 0688 usbhub - ok
10:01:57.0562 0688 usbohci (eb2d819a639015253c871cda09d91d58) C:\Windows\system32\DRIVERS\usbohci.sys
10:01:57.0562 0688 usbohci - ok
10:01:57.0609 0688 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\Windows\system32\DRIVERS\usbprint.sys
10:01:57.0625 0688 usbprint - ok
10:01:57.0671 0688 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\Windows\system32\DRIVERS\usbscan.sys
10:01:57.0671 0688 usbscan - ok
10:01:57.0734 0688 USBSTOR (1c4287739a93594e57e2a9e6a3ed7353) C:\Windows\system32\DRIVERS\USBSTOR.SYS
10:01:57.0734 0688 USBSTOR - ok
10:01:57.0796 0688 usbuhci (22480bf4e5a09192e5e30ba4dde79fa4) C:\Windows\system32\drivers\usbuhci.sys
10:01:57.0796 0688 usbuhci - ok
10:01:57.0859 0688 usbvideo (b5f6a992d996282b7fae7048e50af83a) C:\Windows\System32\Drivers\usbvideo.sys
10:01:57.0906 0688 usbvideo - ok
10:01:58.0203 0688 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\Windows\system32\DRIVERS\vdrvroot.sys
10:01:58.0203 0688 vdrvroot - ok
10:01:58.0265 0688 vga (17c408214ea61696cec9c66e388b14f3) C:\Windows\system32\DRIVERS\vgapnp.sys
10:01:58.0265 0688 vga - ok
10:01:58.0312 0688 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\Windows\System32\drivers\vga.sys
10:01:58.0312 0688 VgaSave - ok
10:01:58.0343 0688 vhdmp (3be6e1f3a4f1afec8cee0d7883f93583) C:\Windows\system32\DRIVERS\vhdmp.sys
10:01:58.0343 0688 vhdmp - ok
10:01:58.0406 0688 viaagp (c829317a37b4bea8f39735d4b076e923) C:\Windows\system32\DRIVERS\viaagp.sys
10:01:58.0406 0688 viaagp - ok
10:01:58.0421 0688 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\Windows\system32\DRIVERS\viac7.sys
10:01:58.0437 0688 ViaC7 - ok
10:01:58.0453 0688 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\Windows\system32\DRIVERS\viaide.sys
10:01:58.0468 0688 viaide - ok
10:01:58.0500 0688 vmbus (379b349f65f453d2a6e75ea6b7448e49) C:\Windows\system32\DRIVERS\vmbus.sys
10:01:58.0500 0688 vmbus - ok
10:01:58.0546 0688 VMBusHID (ec2bbab4b84d0738c6c83d2234dc36fe) C:\Windows\system32\DRIVERS\VMBusHID.sys
10:01:58.0546 0688 VMBusHID - ok
10:01:58.0562 0688 volmgr (384e5a2aa49934295171e499f86ba6f3) C:\Windows\system32\DRIVERS\volmgr.sys
10:01:58.0578 0688 volmgr - ok
10:01:58.0609 0688 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\Windows\system32\drivers\volmgrx.sys
10:01:58.0609 0688 volmgrx - ok
10:01:58.0640 0688 volsnap (58df9d2481a56edde167e51b334d44fd) C:\Windows\system32\DRIVERS\volsnap.sys
10:01:58.0640 0688 volsnap - ok
10:01:58.0703 0688 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\Windows\system32\DRIVERS\vsmraid.sys
10:01:58.0703 0688 vsmraid - ok
10:01:58.0750 0688 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\Windows\System32\drivers\vwifibus.sys
10:01:58.0750 0688 vwifibus - ok
10:01:58.0796 0688 WacomPen (de3721e89c653aa281428c8a69745d90) C:\Windows\system32\DRIVERS\wacompen.sys
10:01:58.0796 0688 WacomPen - ok
10:01:58.0875 0688 WANARP (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
10:01:58.0875 0688 WANARP - ok
10:01:58.0875 0688 Wanarpv6 (692a712062146e96d28ba0b7d75de31b) C:\Windows\system32\DRIVERS\wanarp.sys
10:01:58.0875 0688 Wanarpv6 - ok
10:01:58.0984 0688 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\Windows\system32\DRIVERS\wd.sys
10:01:58.0984 0688 Wd - ok
10:01:59.0031 0688 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys
10:01:59.0046 0688 Wdf01000 - ok
10:01:59.0140 0688 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\Windows\system32\DRIVERS\wfplwf.sys
10:01:59.0140 0688 WfpLwf - ok
10:01:59.0171 0688 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\Windows\system32\drivers\wimmount.sys
10:01:59.0171 0688 WIMMount - ok
10:01:59.0328 0688 WinUsb (30fc6e5448d0cbaaa95280eeef7fedae) C:\Windows\system32\DRIVERS\WinUsb.sys
10:01:59.0328 0688 WinUsb - ok
10:01:59.0437 0688 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\Windows\system32\DRIVERS\wmiacpi.sys
10:01:59.0437 0688 WmiAcpi - ok
10:01:59.0546 0688 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\Windows\system32\drivers\ws2ifsl.sys
10:01:59.0546 0688 ws2ifsl - ok
10:01:59.0625 0688 WudfPf (6f9b6c0c93232cff47d0f72d6db1d21e) C:\Windows\system32\drivers\WudfPf.sys
10:01:59.0625 0688 WudfPf - ok
10:01:59.0718 0688 WUDFRd (f91ff1e51fca30b3c3981db7d5924252) C:\Windows\system32\DRIVERS\WUDFRd.sys
10:01:59.0718 0688 WUDFRd - ok
10:01:59.0781 0688 MBR (0x1B8) (de1996b5390bac8242e23168f828c750) \Device\Harddisk0\DR0
10:01:59.0781 0688 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - infected
10:01:59.0781 0688 \Device\Harddisk0\DR0 - detected Rootkit.Win32.TDSS.tdl4 (0)
10:01:59.0781 0688 Boot (0x1200) (718f72de7a29b4034006082251b90e98) \Device\Harddisk0\DR0\Partition0
10:01:59.0796 0688 \Device\Harddisk0\DR0\Partition0 - ok
10:01:59.0828 0688 Boot (0x1200) (2887ffaab0e129817ca01abd3a9da517) \Device\Harddisk0\DR0\Partition1
10:01:59.0828 0688 \Device\Harddisk0\DR0\Partition1 - ok
10:01:59.0828 0688 ============================================================
10:01:59.0828 0688 Scan finished
10:01:59.0828 0688 ============================================================
10:01:59.0859 1224 Detected object count: 2
10:01:59.0859 1224 Actual detected object count: 2
10:03:27.0125 1224 VerifyFileNameVersionInfo: GetFileVersionInfoSizeW(C:\Windows\system32\drivers\tdx.sys) error 1813
10:03:32.0390 1224 Backup copy found, using it..
10:03:32.0421 1224 C:\Windows\system32\DRIVERS\tdx.sys - will be cured on reboot
10:03:34.0546 1224 tdx ( Rootkit.Win32.ZAccess.k ) - User select action: Cure
10:03:34.0593 1224 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - will be cured on reboot
10:03:34.0609 1224 \Device\Harddisk0\DR0 - ok
10:03:34.0609 1224 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - User select action: Cure
10:03:46.0656 0912 Deinitialize success

voici le lien:
http://pjjoint.malekal.com/files.php?id=ZHPDiag_i13m6o10v10p8r5r15d15g6w6o14n15e9s7o12p13w12d15i7h7

j'ai rallumer mon ordinateur tout avais l'aire normal...mais la deuxieme fois que je lai fais...mon ordi ne rallume plus...il reste pris sur la page noir ou normalement on fait f8 pour le mettre en modesafe mais je les fait et ca ne fonctionne pas...qu'est ce que je peu faire?...

le probleme c'est que je ne peux pas rentrer en modesafe ou en un tout autre mode...

arf, ca se complique sévère

as tu le cd de windows ?

non :(...je crois que je vais aller la faire reparer....je te remerci pr ton aide! :)