ZAccess toujours et galère toujours également

merci de ta réponse si rapide !

alors, comme convenu le ZAccess est détecté à l'aide de l'option 2 dont voici le rapport


RogueKiller V6.2.2 [31/12/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7600 ) 64 bits version
Demarrage : Mode normal
Utilisateur: PLAY [Droits d'admin]
Mode: Suppression -- Date : 08/01/2012 21:05:59

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Entrees de registre: 6 ¤¤¤
[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REPLACED (2)
[HJ] HKLM\[...]\System : EnableLUA (0) -> REPLACED (1)
[HJ] HKLM\[...]\Security Center : AntiVirusDisableNotify (1) -> REPLACED (0)
[HJ] HKLM\[...]\Security Center : FirewallDisableNotify (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤
[ZeroAccess] sys32\consrv.dll present!

¤¤¤ Fichier HOSTS: ¤¤¤


¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: +++++
--- User ---
[MBR] fc9d81df1b118ed6bd2eba863b758b10
[BSP] e0b4aa50fbc1448c5b741059bafb51bc : Windows 7 MBR Code
Partition table:
0 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 63 | Size: 83889 Mo
1 - [XXXXXX] UNKNW [VISIBLE] Offset (sectors): 163846935 | Size: 916304 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt



et voici celui de l'option 4


RogueKiller V6.2.2 [31/12/2011] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Systeme d'exploitation: Windows 7 (6.1.7600 ) 64 bits version
Demarrage : Mode normal
Utilisateur: PLAY [Droits d'admin]
Mode: Proxy RAZ -- Date : 08/01/2012 21:06:28

¤¤¤ Processus malicieux: 0 ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Entrees de registre: 0 ¤¤¤

Termine : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

n'hésite pas à me dire si je poste mal les rapports, car bien que j'ai de petites connaissances informatiques, je suis loin d'être infaillible ! Merci ^^

0 Threat... c'était à prévoir, j'avais déjà suivi ce schéma de désinfection ^^

21:16:38.0713 4196 TDSS rootkit removing tool 2.6.25.0 Dec 23 2011 14:51:16
21:16:38.0939 4196 ============================================================
21:16:38.0939 4196 Current date / time: 2012/01/08 21:16:38.0939
21:16:38.0939 4196 SystemInfo:
21:16:38.0939 4196
21:16:38.0939 4196 OS Version: 6.1.7600 ServicePack: 0.0
21:16:38.0939 4196 Product type: Workstation
21:16:38.0939 4196 ComputerName: SEB
21:16:38.0940 4196 UserName: PLAY
21:16:38.0940 4196 Windows directory: C:\Windows
21:16:38.0940 4196 System windows directory: C:\Windows
21:16:38.0940 4196 Running under WOW64
21:16:38.0940 4196 Processor architecture: Intel x64
21:16:38.0940 4196 Number of processors: 4
21:16:38.0940 4196 Page size: 0x1000
21:16:38.0940 4196 Boot type: Normal boot
21:16:38.0940 4196 ============================================================
21:16:39.0728 4196 Initialize success
21:16:44.0142 5712 ============================================================
21:16:44.0142 5712 Scan started
21:16:44.0142 5712 Mode: Manual; SigCheck; TDLFS;
21:16:44.0142 5712 ============================================================
21:16:44.0837 5712 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys
21:16:44.0914 5712 1394ohci - ok
21:16:44.0933 5712 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys
21:16:44.0955 5712 ACPI - ok
21:16:44.0974 5712 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys
21:16:44.0988 5712 AcpiPmi - ok
21:16:45.0046 5712 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
21:16:45.0070 5712 adp94xx - ok
21:16:45.0089 5712 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
21:16:45.0110 5712 adpahci - ok
21:16:45.0120 5712 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
21:16:45.0140 5712 adpu320 - ok
21:16:45.0171 5712 AFD (6ef20ddf3172e97d69f596fb90602f29) C:\Windows\system32\drivers\afd.sys
21:16:45.0196 5712 AFD - ok
21:16:45.0210 5712 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys
21:16:45.0227 5712 agp440 - ok
21:16:45.0245 5712 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys
21:16:45.0260 5712 aliide - ok
21:16:45.0295 5712 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys
21:16:45.0310 5712 amdide - ok
21:16:45.0328 5712 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
21:16:45.0347 5712 AmdK8 - ok
21:16:45.0526 5712 amdkmdag (5b03217859b014b090cb5060c1d96875) C:\Windows\system32\DRIVERS\atikmdag.sys
21:16:45.0611 5712 amdkmdag - ok
21:16:45.0634 5712 amdkmdap (35d2184a99ad4cd5d17284d6c9f382c9) C:\Windows\system32\DRIVERS\atikmpag.sys
21:16:45.0654 5712 amdkmdap - ok
21:16:45.0676 5712 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
21:16:45.0690 5712 AmdPPM - ok
21:16:45.0719 5712 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys
21:16:45.0730 5712 amdsata - ok
21:16:45.0746 5712 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
21:16:45.0759 5712 amdsbs - ok
21:16:45.0773 5712 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys
21:16:45.0784 5712 amdxata - ok
21:16:45.0840 5712 AnyDVD (2c4a05fcef72ef614dcd11d0872498c9) C:\Windows\system32\Drivers\AnyDVD.sys
21:16:45.0892 5712 AnyDVD - ok
21:16:45.0904 5712 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys
21:16:45.0938 5712 AppID - ok
21:16:45.0959 5712 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
21:16:45.0974 5712 arc - ok
21:16:45.0999 5712 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
21:16:46.0015 5712 arcsas - ok
21:16:46.0029 5712 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
21:16:46.0068 5712 AsyncMac - ok
21:16:46.0077 5712 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys
21:16:46.0088 5712 atapi - ok
21:16:46.0125 5712 AtiHDAudioService (dbb487d09f56c674430ac454fd8bcab9) C:\Windows\system32\drivers\AtihdW76.sys
21:16:46.0140 5712 AtiHDAudioService - ok
21:16:46.0183 5712 atksgt (fc0e8778c000291caf60eb88c011e931) C:\Windows\system32\DRIVERS\atksgt.sys
21:16:46.0203 5712 atksgt - ok
21:16:46.0263 5712 AvgLdx64 (b447db072bf939db9e07bef2adf4ecbd) C:\Windows\System32\Drivers\avgldx64.sys
21:16:46.0286 5712 AvgLdx64 - ok
21:16:46.0314 5712 AvgMfx64 (0db5a749acd8e66091736f88c40207bd) C:\Windows\System32\Drivers\avgmfx64.sys
21:16:46.0337 5712 AvgMfx64 - ok
21:16:46.0359 5712 AvgRkx64 (5e7f0f9cbe0f7823371a4d51df29f7ff) C:\Windows\system32\Drivers\avgrkx64.sys
21:16:46.0380 5712 AvgRkx64 - ok
21:16:46.0418 5712 AvgTdiA (8aa68c0ba2b84fd7eb3e1f10bbfc825b) C:\Windows\System32\Drivers\avgtdia.sys
21:16:46.0433 5712 AvgTdiA - ok
21:16:46.0470 5712 avzmdzvx (a412d2fd7c0e1b50a7845fa083894223) C:\Windows\system32\drivers\avzmdzvx.sys
21:16:46.0485 5712 avzmdzvx - ok
21:16:46.0549 5712 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
21:16:46.0573 5712 b06bdrv - ok
21:16:46.0598 5712 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
21:16:46.0621 5712 b57nd60a - ok
21:16:46.0652 5712 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
21:16:46.0685 5712 Beep - ok
21:16:46.0704 5712 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
21:16:46.0718 5712 blbdrive - ok
21:16:46.0742 5712 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys
21:16:46.0757 5712 bowser - ok
21:16:46.0768 5712 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
21:16:46.0784 5712 BrFiltLo - ok
21:16:46.0799 5712 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
21:16:46.0815 5712 BrFiltUp - ok
21:16:46.0829 5712 Bridge (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
21:16:46.0865 5712 Bridge - ok
21:16:46.0868 5712 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
21:16:46.0899 5712 BridgeMP - ok
21:16:46.0923 5712 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
21:16:46.0937 5712 Brserid - ok
21:16:46.0954 5712 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
21:16:46.0968 5712 BrSerWdm - ok
21:16:46.0980 5712 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
21:16:46.0995 5712 BrUsbMdm - ok
21:16:47.0007 5712 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
21:16:47.0022 5712 BrUsbSer - ok
21:16:47.0042 5712 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
21:16:47.0058 5712 BTHMODEM - ok
21:16:47.0079 5712 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
21:16:47.0109 5712 cdfs - ok
21:16:47.0141 5712 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys
21:16:47.0156 5712 cdrom - ok
21:16:47.0178 5712 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
21:16:47.0193 5712 circlass - ok
21:16:47.0224 5712 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
21:16:47.0240 5712 CLFS - ok
21:16:47.0290 5712 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
21:16:47.0307 5712 CmBatt - ok
21:16:47.0324 5712 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys
21:16:47.0337 5712 cmdide - ok
21:16:47.0363 5712 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys
21:16:47.0388 5712 CNG - ok
21:16:47.0401 5712 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
21:16:47.0415 5712 Compbatt - ok
21:16:47.0440 5712 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys
21:16:47.0458 5712 CompositeBus - ok
21:16:47.0502 5712 cpuz134 (17719a7f571d4cd08223f0b30f71b8b8) C:\Windows\system32\drivers\cpuz134_x64.sys
21:16:47.0515 5712 cpuz134 - ok
21:16:47.0529 5712 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
21:16:47.0545 5712 crcdisk - ok
21:16:47.0572 5712 CSC (4a6173c2279b498cd8f57cae504564cb) C:\Windows\system32\drivers\csc.sys
21:16:47.0598 5712 CSC - ok
21:16:47.0658 5712 DefragFS (afaaa345fceb1ac24e0d63d85a7775fd) C:\Windows\system32\drivers\DefragFS.sys
21:16:47.0674 5712 DefragFS - ok
21:16:47.0689 5712 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys
21:16:47.0710 5712 DfsC - ok
21:16:47.0721 5712 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
21:16:47.0764 5712 discache - ok
21:16:47.0775 5712 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
21:16:47.0787 5712 Disk - ok
21:16:47.0863 5712 driverhardwarev2x64 (b28c853770c995552b9f5760d8245f44) C:\Program Files\ma-config.com\Drivers\driverhardwarev2x64.sys
21:16:47.0882 5712 driverhardwarev2x64 - ok
21:16:47.0904 5712 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
21:16:47.0921 5712 drmkaud - ok
21:16:47.0959 5712 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\Windows\System32\drivers\dxgkrnl.sys
21:16:47.0997 5712 DXGKrnl - ok
21:16:48.0064 5712 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
21:16:48.0110 5712 ebdrv - ok
21:16:48.0140 5712 ElbyCDIO (a05fc7eca0966ebb70e4d17b855a853b) C:\Windows\system32\Drivers\ElbyCDIO.sys
21:16:48.0151 5712 ElbyCDIO - ok
21:16:48.0172 5712 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
21:16:48.0193 5712 elxstor - ok
21:16:48.0211 5712 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys
21:16:48.0228 5712 ErrDev - ok
21:16:48.0248 5712 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
21:16:48.0283 5712 exfat - ok
21:16:48.0304 5712 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
21:16:48.0336 5712 fastfat - ok
21:16:48.0367 5712 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
21:16:48.0397 5712 fdc - ok
21:16:48.0413 5712 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
21:16:48.0434 5712 FileInfo - ok
21:16:48.0450 5712 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
21:16:48.0488 5712 Filetrace - ok
21:16:48.0516 5712 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
21:16:48.0530 5712 flpydisk - ok
21:16:48.0541 5712 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys
21:16:48.0557 5712 FltMgr - ok
21:16:48.0567 5712 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
21:16:48.0579 5712 FsDepends - ok
21:16:48.0593 5712 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
21:16:48.0604 5712 Fs_Rec - ok
21:16:48.0615 5712 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys
21:16:48.0630 5712 fvevol - ok
21:16:48.0650 5712 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
21:16:48.0661 5712 gagp30kx - ok
21:16:48.0673 5712 gdrv - ok
21:16:48.0696 5712 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
21:16:48.0705 5712 GEARAspiWDM - ok
21:16:48.0715 5712 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
21:16:48.0728 5712 hcw85cir - ok
21:16:48.0765 5712 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys
21:16:48.0787 5712 HdAudAddService - ok
21:16:48.0806 5712 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys
21:16:48.0827 5712 HDAudBus - ok
21:16:48.0844 5712 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
21:16:48.0860 5712 HidBatt - ok
21:16:48.0879 5712 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
21:16:48.0899 5712 HidBth - ok
21:16:48.0908 5712 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
21:16:48.0926 5712 HidIr - ok
21:16:48.0944 5712 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys
21:16:48.0961 5712 HidUsb - ok
21:16:48.0987 5712 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys
21:16:49.0001 5712 HpSAMD - ok
21:16:49.0027 5712 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys
21:16:49.0068 5712 HTTP - ok
21:16:49.0087 5712 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys
21:16:49.0098 5712 hwpolicy - ok
21:16:49.0137 5712 hxctlflt (4b7423fcc37664954460ac3e71752b62) C:\Windows\system32\Drivers\hxctlflt.sys
21:16:49.0153 5712 hxctlflt - ok
21:16:49.0163 5712 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
21:16:49.0179 5712 i8042prt - ok
21:16:49.0212 5712 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys
21:16:49.0230 5712 iaStorV - ok
21:16:49.0261 5712 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
21:16:49.0278 5712 iirsp - ok
21:16:49.0341 5712 IntcAzAudAddService (135856ac71116ccff05ed8481745241b) C:\Windows\system32\drivers\RTKVHD64.sys
21:16:49.0381 5712 IntcAzAudAddService - ok
21:16:49.0400 5712 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys
21:16:49.0411 5712 intelide - ok
21:16:49.0444 5712 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
21:16:49.0463 5712 intelppm - ok
21:16:49.0479 5712 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys
21:16:49.0522 5712 IpFilterDriver - ok
21:16:49.0531 5712 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys
21:16:49.0550 5712 IPMIDRV - ok
21:16:49.0566 5712 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
21:16:49.0608 5712 IPNAT - ok
21:16:49.0623 5712 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
21:16:49.0646 5712 IRENUM - ok
21:16:49.0664 5712 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys
21:16:49.0675 5712 isapnp - ok
21:16:49.0701 5712 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys
21:16:49.0717 5712 iScsiPrt - ok
21:16:49.0741 5712 jdanurdt (a412d2fd7c0e1b50a7845fa083894223) C:\Windows\system32\drivers\jdanurdt.sys
21:16:49.0753 5712 jdanurdt - ok
21:16:49.0794 5712 JRAID (23ce9aae4e88b95484f616cc572391ac) C:\Windows\system32\DRIVERS\jraid.sys
21:16:49.0809 5712 JRAID ( UnsignedFile.Multi.Generic ) - warning
21:16:49.0809 5712 JRAID - detected UnsignedFile.Multi.Generic (1)
21:16:49.0832 5712 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
21:16:49.0849 5712 kbdclass - ok
21:16:49.0867 5712 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys
21:16:49.0887 5712 kbdhid - ok
21:16:49.0921 5712 kpbesdxl (a412d2fd7c0e1b50a7845fa083894223) C:\Windows\system32\drivers\kpbesdxl.sys
21:16:49.0937 5712 kpbesdxl - ok
21:16:49.0953 5712 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys
21:16:49.0972 5712 KSecDD - ok
21:16:49.0987 5712 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys
21:16:50.0008 5712 KSecPkg - ok
21:16:50.0024 5712 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
21:16:50.0071 5712 ksthunk - ok
21:16:50.0092 5712 L1E (2ac603c3188c704cfce353659aa7ad71) C:\Windows\system32\DRIVERS\L1E62x64.sys
21:16:50.0106 5712 L1E - ok
21:16:50.0132 5712 lirsgt (156ab2e56dc3ca0b582e3362e07cded7) C:\Windows\system32\DRIVERS\lirsgt.sys
21:16:50.0145 5712 lirsgt - ok
21:16:50.0171 5712 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
21:16:50.0204 5712 lltdio - ok
21:16:50.0227 5712 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
21:16:50.0239 5712 LSI_FC - ok
21:16:50.0259 5712 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
21:16:50.0271 5712 LSI_SAS - ok
21:16:50.0297 5712 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
21:16:50.0309 5712 LSI_SAS2 - ok
21:16:50.0324 5712 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
21:16:50.0336 5712 LSI_SCSI - ok
21:16:50.0344 5712 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
21:16:50.0376 5712 luafv - ok
21:16:50.0399 5712 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
21:16:50.0411 5712 megasas - ok
21:16:50.0429 5712 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
21:16:50.0443 5712 MegaSR - ok
21:16:50.0453 5712 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
21:16:50.0483 5712 Modem - ok
21:16:50.0501 5712 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
21:16:50.0516 5712 monitor - ok
21:16:50.0525 5712 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
21:16:50.0537 5712 mouclass - ok
21:16:50.0558 5712 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
21:16:50.0572 5712 mouhid - ok
21:16:50.0582 5712 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys
21:16:50.0595 5712 mountmgr - ok
21:16:50.0613 5712 MpFilter (c177a7ebf5e8a0b596f618870516cab8) C:\Windows\system32\DRIVERS\MpFilter.sys
21:16:50.0628 5712 MpFilter - ok
21:16:50.0647 5712 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys
21:16:50.0659 5712 mpio - ok
21:16:50.0688 5712 MpNWMon (8fbf6b31fe8af1833d93c5913d5b4d55) C:\Windows\system32\DRIVERS\MpNWMon.sys
21:16:50.0699 5712 MpNWMon - ok
21:16:50.0718 5712 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
21:16:50.0755 5712 mpsdrv - ok
21:16:50.0780 5712 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys
21:16:50.0799 5712 MRxDAV - ok
21:16:50.0824 5712 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys
21:16:50.0841 5712 mrxsmb - ok
21:16:50.0866 5712 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys
21:16:50.0886 5712 mrxsmb10 - ok
21:16:50.0895 5712 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys
21:16:50.0913 5712 mrxsmb20 - ok
21:16:50.0932 5712 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys
21:16:50.0946 5712 msahci - ok
21:16:50.0964 5712 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys
21:16:50.0979 5712 msdsm - ok
21:16:50.0991 5712 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
21:16:51.0026 5712 Msfs - ok
21:16:51.0045 5712 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
21:16:51.0069 5712 mshidkmdf - ok
21:16:51.0077 5712 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys
21:16:51.0087 5712 msisadrv - ok
21:16:51.0104 5712 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
21:16:51.0134 5712 MSKSSRV - ok
21:16:51.0148 5712 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
21:16:51.0172 5712 MSPCLOCK - ok
21:16:51.0188 5712 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
21:16:51.0213 5712 MSPQM - ok
21:16:51.0241 5712 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys
21:16:51.0255 5712 MsRPC - ok
21:16:51.0269 5712 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
21:16:51.0281 5712 mssmbios - ok
21:16:51.0301 5712 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
21:16:51.0324 5712 MSTEE - ok
21:16:51.0332 5712 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
21:16:51.0346 5712 MTConfig - ok
21:16:51.0418 5712 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
21:16:51.0445 5712 Mup - ok
21:16:51.0581 5712 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
21:16:51.0614 5712 NativeWifiP - ok
21:16:51.0650 5712 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys
21:16:51.0685 5712 NDIS - ok
21:16:51.0706 5712 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
21:16:51.0745 5712 NdisCap - ok
21:16:51.0767 5712 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
21:16:51.0796 5712 NdisTapi - ok
21:16:51.0814 5712 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys
21:16:51.0844 5712 Ndisuio - ok
21:16:51.0853 5712 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys
21:16:51.0884 5712 NdisWan - ok
21:16:51.0901 5712 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys
21:16:51.0930 5712 NDProxy - ok
21:16:51.0938 5712 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
21:16:51.0967 5712 NetBIOS - ok
21:16:51.0982 5712 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys
21:16:52.0024 5712 NetBT - ok
21:16:52.0054 5712 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
21:16:52.0065 5712 nfrd960 - ok
21:16:52.0087 5712 NisDrv (5f7d72cbcdd025af1f38fdeee5646968) C:\Windows\system32\DRIVERS\NisDrvWFP.sys
21:16:52.0098 5712 NisDrv - ok
21:16:52.0109 5712 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
21:16:52.0138 5712 Npfs - ok
21:16:52.0148 5712 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
21:16:52.0176 5712 nsiproxy - ok
21:16:52.0211 5712 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys
21:16:52.0240 5712 Ntfs - ok
21:16:52.0325 5712 ntk_PowerDVD (7420b2e1f65642129b6e23bd42f752aa) C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys
21:16:52.0348 5712 ntk_PowerDVD - ok
21:16:52.0363 5712 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
21:16:52.0401 5712 Null - ok
21:16:52.0576 5712 nvlddmkm (dd81fbc57ab9134cddc5ce90880bfd80) C:\Windows\system32\DRIVERS\nvlddmkm.sys
21:16:52.0696 5712 nvlddmkm - ok
21:16:52.0729 5712 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys
21:16:52.0741 5712 nvraid - ok
21:16:52.0778 5712 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys
21:16:52.0794 5712 nvstor - ok
21:16:52.0810 5712 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys
21:16:52.0827 5712 nv_agp - ok
21:16:52.0858 5712 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys
21:16:52.0891 5712 ohci1394 - ok
21:16:52.0924 5712 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
21:16:52.0953 5712 Parport - ok
21:16:52.0963 5712 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys
21:16:52.0985 5712 partmgr - ok
21:16:52.0997 5712 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys
21:16:53.0017 5712 pci - ok
21:16:53.0026 5712 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys
21:16:53.0040 5712 pciide - ok
21:16:53.0056 5712 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
21:16:53.0070 5712 pcmcia - ok
21:16:53.0079 5712 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
21:16:53.0090 5712 pcw - ok
21:16:53.0119 5712 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
21:16:53.0157 5712 PEAUTH - ok
21:16:53.0220 5712 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys
21:16:53.0249 5712 PptpMiniport - ok
21:16:53.0268 5712 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
21:16:53.0281 5712 Processor - ok
21:16:53.0307 5712 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys
21:16:53.0342 5712 Psched - ok
21:16:53.0376 5712 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
21:16:53.0402 5712 ql2300 - ok
21:16:53.0419 5712 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
21:16:53.0431 5712 ql40xx - ok
21:16:53.0440 5712 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
21:16:53.0456 5712 QWAVEdrv - ok
21:16:53.0476 5712 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
21:16:53.0505 5712 RasAcd - ok
21:16:53.0522 5712 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
21:16:53.0551 5712 RasAgileVpn - ok
21:16:53.0562 5712 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys
21:16:53.0594 5712 Rasl2tp - ok
21:16:53.0622 5712 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
21:16:53.0651 5712 RasPppoe - ok
21:16:53.0661 5712 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
21:16:53.0690 5712 RasSstp - ok
21:16:53.0717 5712 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys
21:16:53.0749 5712 rdbss - ok
21:16:53.0758 5712 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
21:16:53.0774 5712 rdpbus - ok
21:16:53.0788 5712 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
21:16:53.0812 5712 RDPCDD - ok
21:16:53.0835 5712 RDPDR (9706b84dbabfc4b4ca46c5a82b14dfa3) C:\Windows\system32\drivers\rdpdr.sys
21:16:53.0850 5712 RDPDR - ok
21:16:53.0859 5712 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
21:16:53.0884 5712 RDPENCDD - ok
21:16:53.0893 5712 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
21:16:53.0916 5712 RDPREFMP - ok
21:16:53.0926 5712 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys
21:16:53.0957 5712 RDPWD - ok
21:16:53.0976 5712 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys
21:16:53.0990 5712 rdyboost - ok
21:16:54.0013 5712 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
21:16:54.0042 5712 rspndr - ok
21:16:54.0064 5712 RTL8167 (e843fdfa8bdd37d271fcdb764c72d054) C:\Windows\system32\DRIVERS\Rt64win7.sys
21:16:54.0079 5712 RTL8167 - ok
21:16:54.0121 5712 RTL8187 (a48b769dec76629bd1a021d33c257b17) C:\Windows\system32\DRIVERS\wg111v2.sys
21:16:54.0154 5712 RTL8187 - ok
21:16:54.0175 5712 s3cap (88af6e02ab19df7fd07ecdf9c91e9af6) C:\Windows\system32\DRIVERS\vms3cap.sys
21:16:54.0186 5712 s3cap - ok
21:16:54.0203 5712 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys
21:16:54.0221 5712 sbp2port - ok
21:16:54.0249 5712 SCDEmu (07237c66e05da6778e9f3cb67fa00736) C:\Windows\system32\drivers\SCDEmu.sys
21:16:54.0264 5712 SCDEmu - ok
21:16:54.0282 5712 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys
21:16:54.0322 5712 scfilter - ok
21:16:54.0351 5712 SCMNdisP (6011cdf54bb6f4c69f38faccdad73d7e) C:\Windows\system32\DRIVERS\scmndisp.sys
21:16:54.0362 5712 SCMNdisP - ok
21:16:54.0381 5712 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
21:16:54.0417 5712 secdrv - ok
21:16:54.0437 5712 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
21:16:54.0454 5712 Serenum - ok
21:16:54.0489 5712 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
21:16:54.0508 5712 Serial - ok
21:16:54.0549 5712 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
21:16:54.0575 5712 sermouse - ok
21:16:54.0598 5712 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys
21:16:54.0621 5712 sffdisk - ok
21:16:54.0637 5712 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys
21:16:54.0659 5712 sffp_mmc - ok
21:16:54.0674 5712 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys
21:16:54.0697 5712 sffp_sd - ok
21:16:54.0710 5712 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
21:16:54.0730 5712 sfloppy - ok
21:16:54.0743 5712 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
21:16:54.0760 5712 SiSRaid2 - ok
21:16:54.0776 5712 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
21:16:54.0794 5712 SiSRaid4 - ok
21:16:54.0804 5712 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
21:16:54.0847 5712 Smb - ok
21:16:54.0929 5712 SNP2UVC (ba2e864cdc01731a4f144019fb3bf598) C:\Windows\system32\DRIVERS\snp2uvc.sys
21:16:54.0971 5712 SNP2UVC - ok
21:16:54.0980 5712 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
21:16:54.0991 5712 spldr - ok
21:16:55.0015 5712 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys
21:16:55.0033 5712 srv - ok
21:16:55.0051 5712 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys
21:16:55.0067 5712 srv2 - ok
21:16:55.0106 5712 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys
21:16:55.0136 5712 srvnet - ok
21:16:55.0172 5712 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
21:16:55.0195 5712 stexstor - ok
21:16:55.0207 5712 storflt (ffd7a6f15b14234b5b0e5d49e7961895) C:\Windows\system32\DRIVERS\vmstorfl.sys
21:16:55.0231 5712 storflt - ok
21:16:55.0252 5712 storvsc (8fccbefc5c440b3c23454656e551b09a) C:\Windows\system32\DRIVERS\storvsc.sys
21:16:55.0274 5712 storvsc - ok
21:16:55.0294 5712 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
21:16:55.0318 5712 swenum - ok
21:16:55.0379 5712 Tcpip (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\drivers\tcpip.sys
21:16:55.0427 5712 Tcpip - ok
21:16:55.0463 5712 TCPIP6 (b9d87c7707f058ac652a398cd28de14b) C:\Windows\system32\DRIVERS\tcpip.sys
21:16:55.0495 5712 TCPIP6 - ok
21:16:55.0517 5712 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys
21:16:55.0549 5712 tcpipreg - ok
21:16:55.0563 5712 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
21:16:55.0598 5712 TDPIPE - ok
21:16:55.0616 5712 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
21:16:55.0651 5712 TDTCP - ok
21:16:55.0670 5712 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys
21:16:55.0701 5712 tdx - ok
21:16:55.0713 5712 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys
21:16:55.0725 5712 TermDD - ok
21:16:55.0777 5712 tkiedqti (a412d2fd7c0e1b50a7845fa083894223) C:\Windows\system32\drivers\tkiedqti.sys
21:16:55.0800 5712 tkiedqti - ok
21:16:55.0849 5712 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys
21:16:55.0890 5712 tssecsrv - ok
21:16:55.0946 5712 TuneUpUtilitiesDrv (dcc94c51d27c7ec0dadeca8f64c94fcf) C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys
21:16:55.0961 5712 TuneUpUtilitiesDrv - ok
21:16:55.0973 5712 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys
21:16:56.0022 5712 tunnel - ok
21:16:56.0045 5712 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
21:16:56.0057 5712 uagp35 - ok
21:16:56.0068 5712 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys
21:16:56.0100 5712 udfs - ok
21:16:56.0131 5712 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys
21:16:56.0142 5712 uliagpkx - ok
21:16:56.0151 5712 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys
21:16:56.0164 5712 umbus - ok
21:16:56.0183 5712 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
21:16:56.0196 5712 UmPass - ok
21:16:56.0224 5712 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
21:16:56.0236 5712 USBAAPL64 - ok
21:16:56.0288 5712 usbaudio (77b01bc848298223a95d4ec23e1785a1) C:\Windows\system32\drivers\usbaudio.sys
21:16:56.0313 5712 usbaudio - ok
21:16:56.0327 5712 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys
21:16:56.0346 5712 usbccgp - ok
21:16:56.0359 5712 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys
21:16:56.0380 5712 usbcir - ok
21:16:56.0393 5712 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys
21:16:56.0408 5712 usbehci - ok
21:16:56.0420 5712 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys
21:16:56.0437 5712 usbhub - ok
21:16:56.0451 5712 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
21:16:56.0464 5712 usbohci - ok
21:16:56.0492 5712 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
21:16:56.0507 5712 usbprint - ok
21:16:56.0522 5712 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
21:16:56.0541 5712 usbscan - ok
21:16:56.0557 5712 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS
21:16:56.0572 5712 USBSTOR - ok
21:16:56.0607 5712 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys
21:16:56.0634 5712 usbuhci - ok
21:16:56.0671 5712 usbvideo (d501e12614b00a3252073101d6a1a74b) C:\Windows\system32\Drivers\usbvideo.sys
21:16:56.0698 5712 usbvideo - ok
21:16:56.0741 5712 VCSVADHWSer (3a4b01c2bdb07dfef29b0b369487503a) C:\Windows\system32\DRIVERS\vcsvad.sys
21:16:56.0752 5712 VCSVADHWSer - ok
21:16:56.0769 5712 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys
21:16:56.0780 5712 vdrvroot - ok
21:16:56.0798 5712 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
21:16:56.0813 5712 vga - ok
21:16:56.0825 5712 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
21:16:56.0854 5712 VgaSave - ok
21:16:56.0872 5712 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys
21:16:56.0886 5712 vhdmp - ok
21:16:56.0904 5712 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys
21:16:56.0915 5712 viaide - ok
21:16:56.0933 5712 vmbus (1501699d7eda984abc4155a7da5738d1) C:\Windows\system32\DRIVERS\vmbus.sys
21:16:56.0947 5712 vmbus - ok
21:16:56.0961 5712 VMBusHID (ae10c35761889e65a6f7176937c5592c) C:\Windows\system32\DRIVERS\VMBusHID.sys
21:16:56.0974 5712 VMBusHID - ok
21:16:56.0984 5712 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys
21:16:56.0996 5712 volmgr - ok
21:16:57.0007 5712 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys
21:16:57.0023 5712 volmgrx - ok
21:16:57.0034 5712 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys
21:16:57.0049 5712 volsnap - ok
21:16:57.0059 5712 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
21:16:57.0071 5712 vsmraid - ok
21:16:57.0112 5712 vuxwgsjb (a412d2fd7c0e1b50a7845fa083894223) C:\Windows\system32\drivers\vuxwgsjb.sys
21:16:57.0123 5712 vuxwgsjb - ok
21:16:57.0133 5712 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
21:16:57.0151 5712 vwifibus - ok
21:16:57.0175 5712 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
21:16:57.0192 5712 WacomPen - ok
21:16:57.0211 5712 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
21:16:57.0245 5712 WANARP - ok
21:16:57.0248 5712 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys
21:16:57.0279 5712 Wanarpv6 - ok
21:16:57.0299 5712 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
21:16:57.0311 5712 Wd - ok
21:16:57.0325 5712 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
21:16:57.0342 5712 Wdf01000 - ok
21:16:57.0366 5712 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
21:16:57.0395 5712 WfpLwf - ok
21:16:57.0404 5712 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
21:16:57.0416 5712 WIMMount - ok
21:16:57.0470 5712 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys
21:16:57.0492 5712 WinUsb - ok
21:16:57.0516 5712 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
21:16:57.0534 5712 WmiAcpi - ok
21:16:57.0560 5712 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
21:16:57.0602 5712 ws2ifsl - ok
21:16:57.0621 5712 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys
21:16:57.0651 5712 WudfPf - ok
21:16:57.0663 5712 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys
21:16:57.0694 5712 WUDFRd - ok
21:16:57.0739 5712 xusb21 (2ee48cfce7ca8e0db4c44c7476c0943b) C:\Windows\system32\DRIVERS\xusb21.sys
21:16:57.0754 5712 xusb21 - ok
21:16:57.0862 5712 {329F96B6-DF1E-4328-BFDA-39EA953C1312} (1870a74ee2901ca09ffbfe79a5ee0e94) C:\Program Files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl
21:16:58.0038 5712 {329F96B6-DF1E-4328-BFDA-39EA953C1312} - ok
21:16:58.0048 5712 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
21:16:58.0091 5712 \Device\Harddisk0\DR0 ( TDSS File System ) - warning
21:16:58.0091 5712 \Device\Harddisk0\DR0 - detected TDSS File System (1)
21:16:58.0095 5712 Boot (0x1200) (179d9d974709be3e0071b12192c09c4a) \Device\Harddisk0\DR0\Partition0
21:16:58.0097 5712 \Device\Harddisk0\DR0\Partition0 - ok
21:16:58.0123 5712 Boot (0x1200) (391f74be55d6bde132dcbabd2eb988be) \Device\Harddisk0\DR0\Partition1
21:16:58.0125 5712 \Device\Harddisk0\DR0\Partition1 - ok
21:16:58.0125 5712 ============================================================
21:16:58.0125 5712 Scan finished
21:16:58.0125 5712 ============================================================
21:16:58.0136 5292 Detected object count: 2
21:16:58.0136 5292 Actual detected object count: 2
21:17:00.0089 5292 JRAID ( UnsignedFile.Multi.Generic ) - skipped by user
21:17:00.0089 5292 JRAID ( UnsignedFile.Multi.Generic ) - User select action: Skip
21:17:00.0091 5292 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user
21:17:00.0091 5292 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip
21:17:07.0663 5324 Deinitialize success

Re c'est rejiik a nouveau, je suis sur mon tel portable car impossible de se co du pc. Combofix a bien analysé et rebooté mais impossible de se reco sur le net depuis...
Je post le rapport des que je peux...

Bon bon bon.... Galère, il semble que combofix ait jeté un gros pavé dans windoz (haha) et je peux plus du tout me reconnecter sur le net... Solution anyone ???

Toujours dans l'impossibilité de me reconnecter. Je suis perdu et naviguer sur le net avec mon tel est vraiment galère. Si quelqu'un pouvait me dire comment me reconnecter...

Salut,

1ère idée : fais redémarrer l'ordi, ça peut suffire.

2 ème idée, fais ce qui est dit ici (en bas de page) :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

@+

Ben redémarrer n'a rien changer et combo fix ma foutu des dossiers en quarantaine... J'ai cru comprendre que je perdrais tout si je supprime combofix...

Hell o ^^ ben en fait non. J'ai du redémarrer une quinzaine de fois depuis hier soir et rien y fait. Le pc me dit que je suis connecté mais en fait non. Et concernant le point de sauvegarde, j'ai des doutes également. Je suis allé ds le panneau de config- restauration système et... Rien ya pas de point de sauvegarde créé. Donc ça sent le formatage je pense.
Une question. Si je desinstalle combofix, c'est la fin des haricots pour le pc je suppose ^^

Et aussi impossible d'accéder au firewall, ça me fout une erreur système également.
Combofix je te hais mdr

Oki je fais ça ce soir en rentrant du taff ! Merci et dsl d'être relou ! Bonne journée, je te tiens au jus !

Bon ben pour roguekiller, ça ne marche pas, et pour le proxy, j'ai farfouillé, désactiver et...ça ne marche pas mieux ^^

une bonne et une mauvaise nouvelle. J'ai récupéré le net en faisant une restauration systeme, mais bon j'ai récupéré mes cochonneries avec....
En revanche combifix est toujours ds le meme état, à savoir qu'il contient des dossiers en quarataine. Je post le rapport de suite !

ComboFix 12-01-07.03 - PLAY 08/01/2012 21:23:30.1.4 - x64
Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.4091.1754 [GMT 1:00]
Lancé depuis: c:\users\PLAY\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\assembly\temp\@
c:\windows\assembly\temp\bckfg.tmp
c:\windows\assembly\temp\cfg.ini
c:\windows\system32\consrv.dll
c:\windows\system32\java.exe
c:\windows\System64
c:\windows\SysWow64\winservice.exe
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SCM_Service
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-12-08 au 2012-01-08 ))))))))))))))))))))))))))))))))))))
.
.
2012-01-08 20:28 . 2012-01-08 20:28 69000 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{944B2DBC-4B9B-48AB-AD7B-B623F18070EA}\offreg.dll
2012-01-08 20:27 . 2012-01-08 20:27 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-08 19:38 . 2012-01-08 19:38 111408 ----a-w- c:\windows\system32\drivers\12878704.sys
2012-01-08 19:19 . 2012-01-08 20:03 -------- d-----w- C:\ZHP
2012-01-08 19:18 . 2012-01-08 19:24 -------- d-----w- c:\program files (x86)\ZHPDiag
2012-01-08 18:21 . 2012-01-08 18:21 -------- d--h--w- c:\programdata\Common Files
2012-01-08 18:18 . 2012-01-08 18:18 13048 ----a-w- c:\windows\system32\avgrssta.dll
2012-01-08 17:56 . 2012-01-08 17:56 -------- d-----w- c:\windows\SysWow64\drivers\avg
2012-01-08 17:49 . 2012-01-08 18:18 56008 ----a-w- c:\windows\system32\drivers\avgrkx64.sys
2012-01-08 17:49 . 2012-01-08 18:18 317520 ----a-w- c:\windows\system32\drivers\avgtdia.sys
2012-01-08 17:48 . 2012-01-08 18:18 269904 ----a-w- c:\windows\system32\drivers\avgldx64.sys
2012-01-08 17:48 . 2012-01-08 18:18 35664 ----a-w- c:\windows\system32\drivers\avgmfx64.sys
2012-01-08 17:48 . 2012-01-08 17:56 -------- d-----w- c:\windows\system32\drivers\Avg
2012-01-08 17:48 . 2012-01-08 17:48 -------- d-----w- c:\programdata\avg9
2012-01-08 17:48 . 2012-01-08 17:48 -------- d-----w- c:\program files (x86)\AVG
2012-01-07 10:52 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{944B2DBC-4B9B-48AB-AD7B-B623F18070EA}\mpengine.dll
2012-01-01 15:01 . 2012-01-01 15:01 -------- d-----w- c:\users\PLAY\AppData\Local\Skyrim
2011-12-28 05:50 . 2011-12-28 05:50 750488 ----a-w- c:\windows\system32\npdeployJava1.dll
2011-12-28 05:50 . 2011-12-28 05:50 660368 ----a-w- c:\windows\system32\deployJava1.dll
2011-12-28 05:50 . 2011-12-28 05:50 -------- d-----w- c:\program files\Java
2011-12-27 19:42 . 2011-12-27 19:50 -------- d-----w- c:\programdata\PDVD
2011-12-27 19:42 . 2011-12-27 19:42 -------- d-----w- c:\users\PLAY\AppData\Local\MediaServer
2011-12-27 19:40 . 2011-12-27 19:40 -------- d-----w- c:\program files (x86)\CyberLink
2011-12-27 19:40 . 2011-12-27 19:40 -------- d-----w- c:\programdata\install_clap
2011-12-19 03:50 . 2011-12-19 03:51 -------- d-----w- c:\users\PLAY\AppData\Local\Facebook
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-27 06:00 . 2011-03-14 18:06 505128 ----a-w- c:\windows\SysWow64\msvcp71.dll
2011-12-27 06:00 . 2011-03-14 18:06 353576 ----a-w- c:\windows\SysWow64\msvcr71.dll
2011-12-27 06:00 . 2011-03-14 18:06 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll
2011-12-10 14:24 . 2011-03-06 16:40 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-21 11:40 . 2011-03-07 15:11 8822856 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-11-20 18:22 . 2011-05-23 20:06 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Device Detector"="DevDetect.exe -autorun" [X]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"Facebook Update"="c:\users\PLAY\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2011-12-19 137536]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-07-28 336384]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"RemoteControl11"="c:\program files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe" [2011-04-20 234792]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"AVG9_TRAY"="c:\progra~2\AVG\AVG9\avgtray.exe" [2012-01-08 2076512]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
NETGEAR WG111v2 Smart Wizard.lnk - c:\program files (x86)\NETGEAR\WG111v2\WG111v2.exe [2011-3-6 1261568]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableInstallerDetection"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk *
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
.
S0 AvgRkx64;avgrkx64.sys;c:\windows\System32\Drivers\avgrkx64.sys [x]
S1 AvgLdx64;AVG AVI Loader Driver x64;c:\windows\System32\Drivers\avgldx64.sys [x]
S1 AvgMfx64;AVG On-access Scanner Minifilter Driver x64;c:\windows\System32\Drivers\avgmfx64.sys [x]
S1 AvgTdiA;AVG Network Redirector x64;c:\windows\System32\Drivers\avgtdia.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 avg9wd;AVG WatchDog;c:\program files (x86)\AVG\AVG9\avgwdsvc.exe [2012-01-08 308136]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
Contenu du dossier 'Tâches planifiées'
.
2011-12-30 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3248097596-2067583920-1660863747-1000Core.job
- c:\users\PLAY\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-12-19 03:50]
.
2012-01-08 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3248097596-2067583920-1660863747-1000UA.job
- c:\users\PLAY\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-12-19 03:50]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-06-25 7883296]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 1436736]
"combofix"="c:\combofix\CF10919.3XE" [2009-07-14 344576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\avgrssta.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://unattendshare.free.fr/index2.html
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~2\Microsoft Office\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\PLAY\AppData\Roaming\Mozilla\Firefox\Profiles\y9bqbldi.default\
FF - prefs.js: browser.startup.homepage - hxxp://unattendshare.free.fr/index2.html
.
- - - - ORPHELINS SUPPRIMES - - - -
.
URLSearchHooks-{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - (no file)
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-{980A182F-E0A2-4A40-94C1-AE0C1235902E} - c:\program files (x86)\Pando Networks\Media Booster\uninst.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.032"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.abr"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ani"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.apd"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bay"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bmp"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.bw"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cs1"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.cur"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dcx"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.dib"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.djv"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.djvu"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.emf"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.eps"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.erf"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.fff"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.fpx"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.gif"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.hdr"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.icl"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.icn"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.iff"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ilbm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.int"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.inta"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.iw4"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.j2c"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.j2k"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jbr"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jfif"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jif"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jp2"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpc"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpe"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpeg"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpg"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpk"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.jpx"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kdc\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.lbm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mef"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.mos"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pbm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pbr"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pcd"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pct"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pcx"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pgm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pic"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pict"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pix"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.png"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ppm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.psd"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.psp"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pspbrush"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.pspimage"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ras"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rgb"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rgba"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rle"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rsb"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.rwl"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.sgi"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="Google.PhotoViewer.3.0"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tga"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.thm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tif"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (S-1-5-21-3248097596-2067583920-1660863747-1000)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.tiff"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ttc"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.ttf"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30po\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30po"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30pp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30pp"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30ppf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30ppf"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wbm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wbmp"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.wmf"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xbm"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xif"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xmp"
.
[HKEY_USERS\S-1-5-21-3248097596-2067583920-1660863747-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xpm"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}]
@Denied: (A 2) (Everyone)
@="FlashProp Class"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1171A62F-05D2-11D1-83FC-00A0C9089C5A}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Flash\\Flash9b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Flash\\Flash9b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.9"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Flash\\Flash9b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Flash\\Flash9b.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Flash\\Flash9b.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Flash\\FlashUtil9b.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Flash\\FlashUtil9b.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}]
@Denied: (A 2) (Everyone)
@="IFlashBroker"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\AVG\AVG9\avgam.exe
c:\program files (x86)\Common Files\ACD Systems\FR\DevDetect.exe
c:\program files (x86)\AVG\AVG9\avgtray.exe
.
**************************************************************************
.
Heure de fin: 2012-01-08 21:31:39 - La machine a redémarré
ComboFix-quarantined-files.txt 2012-01-08 20:31
.
Avant-CF: 29 392 162 816 octets libres
Après-CF: 28 921 749 504 octets libres
.
- - End Of File - - C09FDB82E28848D7639F12715F5CA53D