Hacktool:win32/keygen

non pourquoi?

Ça aurait pu expliquer ton problème, un keygen est un générateur de clé qui est très souvent source d' infections. Tu as la batterie de programmes qui servent a rien tuneup, glary, spyware doctor, Fish te fera enlever tout ça. Bonne désinfection.

Rapport de ZHPFix 1.3.10 par Nicolas Coolman, Update du 11/12/2012
Fichier d'export Registre :
Run by bastien1976 at 20/12/2012 17:57:08
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)



========== Processus mémoire ==========
SUPPRIME Memory Process: C:\Users\bastien1976\AppData\Local\Temp\GC_PCTOOLS.exe

========== Dossier(s) ==========
SUPPRIME Folder: C:\Users\bastien1976\AppData\Local\Macromedia
SUPPRIME Folder: C:\Users\bastien1976\AppData\Local\{1FCEFEBB-57ED-41C0-81C4-06A0DD3D4207}
SUPPRIME Folder: C:\Users\bastien1976\AppData\Local\{45A45060-6742-4675-BAB9-DDDB1BC26909}
SUPPRIME Folder: C:\Users\bastien1976\AppData\Local\{6AD1CA11-C5D6-4EFB-98FD-1E576587EAAE}
SUPPRIME Folder: C:\Users\bastien1976\AppData\Local\{6EBC7F1D-6A6A-40DA-A78B-D4DC2AE8BA11}
SUPPRIME Folder: C:\Users\bastien1976\AppData\Local\{FFEFACDB-FD72-4CA6-9CC0-A71F04A0F153}

========== Fichier(s) ==========
SUPPRIME File: c:\users\bastien1976\appdata\local\temp\gc_pctools.exe

========== Tache planifiée ==========
SUPPRIME Task: YourFile DownloaderUpdate


========== Récapitulatif ==========
1 : Processus mémoire
6 : Dossier(s)
1 : Fichier(s)
1 : Tache planifiée


End of clean in 00mn 38s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 19/12/2012 20:16:12 [386]
C:\ZHP\ZHPFix[R2].txt - 19/12/2012 20:18:43 [437]
C:\ZHP\ZHPFix[R3].txt - 20/12/2012 12:51:13 [488]
C:\ZHP\ZHPFix[R4].txt - 20/12/2012 17:57:09 [1438]

# AdwCleaner v2.101 - Rapport créé le 20/12/2012 à 18:33:31
# Mis à jour le 16/12/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : bastien1976 - BASTIEN1976-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\bastien1976\Downloads\adwcleaner (2).exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****


***** [Registre] *****


***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v16.0.2 (fr)

Nom du profil : default
Fichier : C:\Users\bastien1976\AppData\Roaming\Mozilla\Firefox\Profiles\74fap2g9.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

-\\ Google Chrome v23.0.1271.97

Fichier : C:\Users\bastien1976\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [13347 octets] - [19/12/2012 20:31:40]
AdwCleaner[R2].txt - [1261 octets] - [20/12/2012 09:37:07]
AdwCleaner[R3].txt - [1381 octets] - [20/12/2012 17:46:11]
AdwCleaner[R4].txt - [1191 octets] - [20/12/2012 18:33:31]
AdwCleaner[S1].txt - [13696 octets] - [19/12/2012 20:32:56]
AdwCleaner[S2].txt - [1323 octets] - [20/12/2012 09:37:36]
AdwCleaner[S3].txt - [1443 octets] - [20/12/2012 17:47:04]

########## EOF - C:\AdwCleaner[R4].txt - [1432 octets] ##########
desole

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20121221_o13y14v13o9x10

merci mais je n'arrive pas a trouver le programme:C:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{8927E4FF-1955-4E4B-BCFA-211196855EE8}-Sony Vegas Pro 11 Cracked.rar

ComboFix 12-12-20.02 - bastien1976 21/12/2012 17:47:24.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3819.1495 [GMT 1:00]
Lancé depuis: c:\users\bastien1976\Desktop\bastien1976.exe
AV: Microsoft Security Essentials *Disabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
AV: PC Tools Spyware Doctor with AntiVirus *Disabled/Updated* {2F668A56-D5E0-2DF1-A0AE-CB1284F42AB2}
SP: Microsoft Security Essentials *Disabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-11-21 au 2012-12-21 ))))))))))))))))))))))))))))))))))))
.
.
2012-12-21 16:59 . 2012-12-21 16:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-21 16:00 . 2012-12-21 16:02 -------- d-----w- c:\windows\83B952C7F8F34CA3B4C533C85B24E478.TMP
2012-12-21 09:50 . 2012-12-21 09:50 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2012-12-21 09:36 . 2012-12-21 09:36 76232 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{667F3C19-F66D-491A-AE04-CD2689C4B2F3}\offreg.dll
2012-12-20 20:24 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{667F3C19-F66D-491A-AE04-CD2689C4B2F3}\mpengine.dll
2012-12-20 17:25 . 2012-12-20 17:25 -------- d-----w- C:\_OTM
2012-12-20 17:13 . 2012-12-20 17:13 -------- d-----w- c:\program files\Enigma Software Group
2012-12-20 17:10 . 2012-12-20 17:11 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard
2012-12-20 08:47 . 2012-12-20 08:47 -------- d-----w- c:\users\bastien1976\AppData\Roaming\Malwarebytes
2012-12-20 08:46 . 2012-12-20 08:46 -------- d-----w- c:\programdata\Malwarebytes
2012-12-20 08:46 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-20 08:46 . 2012-12-20 08:46 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-12-19 20:51 . 2012-12-19 20:51 -------- d-----w- c:\program files (x86)\PC Tools
2012-12-19 20:05 . 2012-11-01 14:35 253256 ----a-w- c:\windows\system32\drivers\PCTSD64.sys
2012-12-19 20:05 . 2012-12-21 16:27 -------- d-----w- c:\program files (x86)\Common Files\PC Tools
2012-12-19 19:56 . 2012-12-21 16:27 -------- d-----w- c:\programdata\PC Tools
2012-12-19 19:55 . 2012-12-19 19:55 -------- d-----w- c:\users\bastien1976\AppData\Roaming\TestApp
2012-12-19 19:13 . 2012-11-08 17:24 9125352 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-12-19 19:13 . 2012-12-21 09:50 -------- d-----w- c:\program files (x86)\ZHPDiag
2012-12-19 19:13 . 2012-12-21 09:47 -------- d-----w- C:\ZHP
2012-12-15 17:29 . 2012-12-16 19:18 -------- d-----w- c:\users\bastien1976\AppData\Roaming\DMCache
2012-12-15 15:40 . 2012-12-15 15:40 -------- d-----w- c:\users\bastien1976\AppData\Roaming\dvdcss
2012-12-12 15:13 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-12 15:12 . 2012-10-04 17:38 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-12-12 15:07 . 2012-12-12 16:20 -------- d-----w- c:\program files\PeerBlock
2012-12-10 09:42 . 2012-12-10 09:43 -------- d-----w- c:\program files (x86)\FlashGet
2012-12-09 16:19 . 2012-12-09 16:19 -------- d-----w- c:\users\bastien1976\AppData\Local\PutLockerDownloader
2012-12-09 16:19 . 2012-12-20 17:12 -------- d-----w- c:\program files (x86)\FTDownloader.com
2012-12-07 21:52 . 2012-12-07 21:52 -------- d-----w- c:\windows\SysWow64\Adobe
2012-12-05 09:21 . 2012-12-05 09:23 -------- d-----w- c:\program files (x86)\Google
2012-12-05 09:21 . 2012-12-05 09:23 -------- d-----w- c:\users\bastien1976\AppData\Local\Google
2012-12-03 17:49 . 2012-12-10 09:49 -------- d-----w- C:\Downloads
2012-12-03 17:48 . 2012-12-04 08:48 -------- d-----w- c:\users\bastien1976\AppData\Roaming\BITS
2012-12-03 17:48 . 2012-12-03 17:48 -------- d-----w- c:\users\bastien1976\AppData\Roaming\FlashgetSetup
2012-12-03 17:48 . 2012-12-10 09:43 -------- d-----w- c:\users\bastien1976\AppData\Roaming\FlashGet
2012-12-03 17:48 . 2012-12-03 17:48 -------- d-----w- c:\program files (x86)\FlashGet Network
2012-11-28 16:06 . 2012-11-28 16:05 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{0234CF3A-6710-4683-B473-27DD4BB60CA0}\gapaengine.dll
2012-11-26 15:21 . 2012-11-26 15:21 -------- d-----w- c:\users\bastien1976\AppData\Roaming\GlarySoft
2012-11-26 15:15 . 2012-11-26 15:16 -------- d-----w- c:\program files (x86)\Glary Utilities
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-13 17:36 . 2012-06-28 11:39 67413224 ----a-w- c:\windows\system32\MRT.exe
2012-11-08 03:54 . 2012-06-14 07:21 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-11-08 03:54 . 2011-10-19 17:05 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-10-16 08:38 . 2012-11-29 15:07 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38 . 2012-11-29 15:07 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39 . 2012-11-29 15:07 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-09 18:17 . 2012-11-15 06:27 226816 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-10-09 18:17 . 2012-11-15 06:27 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-15 06:27 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40 . 2012-11-15 06:27 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll
2012-10-04 16:40 . 2012-12-12 15:13 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-10-03 17:56 . 2012-11-15 06:26 1914248 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-10-03 17:44 . 2012-11-15 06:26 70656 ----a-w- c:\windows\system32\nlaapi.dll
2012-10-03 17:44 . 2012-11-15 06:26 303104 ----a-w- c:\windows\system32\nlasvc.dll
2012-10-03 17:44 . 2012-11-15 06:26 246272 ----a-w- c:\windows\system32\netcorehc.dll
2012-10-03 17:44 . 2012-11-15 06:26 18944 ----a-w- c:\windows\system32\netevent.dll
2012-10-03 17:44 . 2012-11-15 06:26 216576 ----a-w- c:\windows\system32\ncsi.dll
2012-10-03 17:42 . 2012-11-15 06:26 569344 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-10-03 16:42 . 2012-11-15 06:26 175104 ----a-w- c:\windows\SysWow64\netcorehc.dll
2012-10-03 16:42 . 2012-11-15 06:26 18944 ----a-w- c:\windows\SysWow64\netevent.dll
2012-10-03 16:42 . 2012-11-15 06:26 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2012-10-03 16:07 . 2012-11-15 06:26 45568 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-10-03 13:38 . 2012-10-03 13:38 972192 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2012-09-25 22:47 . 2012-11-15 06:26 78336 ----a-w- c:\windows\SysWow64\synceng.dll
2012-09-25 22:46 . 2012-11-15 06:26 95744 ----a-w- c:\windows\system32\synceng.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 ----a-w- c:\users\bastien1976\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 ----a-w- c:\users\bastien1976\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 ----a-w- c:\users\bastien1976\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2012-07-13 17418928]
"ccleaner"="c:\program files\CCleaner\CCleaner64.exe" [2012-11-23 5611360]
"PeerBlock"="c:\program files\PeerBlock\peerblock.exe" [2010-11-06 2646128]
"GoogleChromeAutoLaunch_04E0C87829EE4C360B592E1CDF30FC8A"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2012-12-05 1242728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1103440]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216]
.
c:\users\bastien1976\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\bastien1976\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-6-14 27595032]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"RIMBBLaunchAgent.exe"=c:\program files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files\ma-config.com\Drivers\driverhardwarev2x64.sys [2011-07-21 16640]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\x64\maconfservice.exe [2012-09-23 427976]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 128456]
R3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2010-12-01 250984]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2012-06-16 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2012-03-29 22648]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2012-03-29 20520]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2012-03-29 62776]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-05-24 204288]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe [2010-12-16 198784]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]
S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-29 399432]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [2010-01-29 260640]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe [2009-11-13 1353544]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2011-03-30 114704]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-11-12 138024]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2011-01-25 77424]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys [2009-10-14 11856]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-11-28 44672]
S4 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [x]
S4 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS64.sys [x]
S4 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA64.sys [x]
S4 PCTSD;PC Tools Spyware Doctor Driver;c:\windows\system32\Drivers\PCTSD64.sys [2012-11-01 253256]
.
.
Contenu du dossier 'Tâches planifiées'
.
2012-11-08 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-14 03:54]
.
2012-08-31 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2486766795-3022753076-4048834396-1001Core.job
- c:\users\bastien1976\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-30 20:08]
.
2012-08-31 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2486766795-3022753076-4048834396-1001UA.job
- c:\users\bastien1976\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-30 20:08]
.
2012-12-21 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2012-11-26 07:46]
.
2012-12-10 c:\windows\Tasks\GlaryOneClickOptimizer.job
- c:\program files (x86)\Glary Utilities\oneclickoptimizer.exe [2012-11-26 07:46]
.
2012-12-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-05 09:21]
.
2012-12-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-05 09:21]
.
2012-12-21 c:\windows\Tasks\One-Click Optimizer.job
- c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 9\WO9.exe [2012-11-21 11:20]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\bastien1976\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\bastien1976\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\bastien1976\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 97792 ----a-w- c:\users\bastien1976\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 1289704]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://acer.msn.com
mStart Page = hxxp://acer.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: &Tout télécharger avec FlashGet - c:\program files (x86)\FlashGet\jc_all.htm
IE: &Télécharger avec FlashGet - c:\program files (x86)\FlashGet\jc_link.htm
IE: Download all links by FlashGet3 - c:\program files (x86)\FlashGet Network\FlashGet 3\BHO\fdgetallurl.htm
IE: Download by FlashGet3 - c:\program files (x86)\FlashGet Network\FlashGet 3\BHO\fdgeturl.htm
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
FF - ProfilePath - c:\users\bastien1976\AppData\Roaming\Mozilla\Firefox\Profiles\74fap2g9.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.fr/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2012-11-15 16:14; {c6a7c4f0-2b46-45a4-89ba-e91a6a718c0a}; c:\users\bastien1976\AppData\Roaming\Mozilla\Firefox\Profiles\74fap2g9.default\extensions\{c6a7c4f0-2b46-45a4-89ba-e91a6a718c0a}.xpi
FF - ExtSQL: 2012-11-21 17:17; {ba679afc-8ba0-48f4-b8bf-c144e8699fbc}; c:\users\bastien1976\AppData\Roaming\Mozilla\Firefox\Profiles\74fap2g9.default\extensions\{ba679afc-8ba0-48f4-b8bf-c144e8699fbc}
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
AddRemove-1ClickDownload - c:\program files (x86)\FTDownloader.com\uninst.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_235_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_235.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2012-12-21 18:04:53
ComboFix-quarantined-files.txt 2012-12-21 17:04
.
Avant-CF: 263 329 955 840 octets libres
Après-CF: 262 948 225 024 octets libres
.
- - End Of File - - 60C83238EE25265479D38A8880F8A074

comment puis je faire pour enlever ce programme car microsoft security me dit qu il est toujours la

All processes killed
========== FILES ==========
File/Folder c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys not found.
File/Folder C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe not found.
File/Folder C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe not found.
File/Folder C:\Users\bastien1976\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter not found.
C:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{8927E4FF-1955-4E4B-BCFA-211196855EE8}-Sony Vegas Pro 11 Cracked.rar moved successfully.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\1ClickDownload\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Wow6432Node\YourFileDownloader\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\BHO.IFlashGetNetscapeEx\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\BHO.IFlashGetNetscapeEx.1\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SpyHunter 4 Service\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Wow6432Node\YourFileDownloader\ not found.
========== SERVICES/DRIVERS ==========
Service esgiguard stopped successfully!
Service esgiguard deleted successfully!
Error: No service named SpyHunter 4 Service was found to stop!
Service\Driver key SpyHunter 4 Service not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes

User: All Users

User: bastien1976
->Temp folder emptied: 2462664 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 164520451 bytes
->Flash cache emptied: 672 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1525711 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 33222 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 161,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 12212012_221535

Files moved on Reboot...
C:\Users\bastien1976\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\bastien1976\AppData\Local\Temp\MMDUtl.log moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\LMutilps32.log scheduled to be moved on reboot.

Registry entries deleted on Reboot...

bonsoir oui il m'indique qu il ya toujours un virus et comme je vous disait je n'arrive pas a trouver le programme sony vegas pro .comment puis je faire pour le trouver svp merci

1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 22:05:14 le 23/12/2012
4.
5. Valeur(s) recherchée(s):
6. sony vegas pro
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Recherche registre
11.
12. ====== Fichier(s) ======
13.
14.
15. "C:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{590BF874-5028-4157-99F9-B04067183612}-{8927E4FF-1955-4E4B-BCFA-211196855EE8}-Sony Vegas Pro 11 Cracked (1).rar" [ NOT_CONTENT_INDEXED|ARCHIVE | 3754 Ko ]
16. TC: 21/12/2012,18:20:16 | TM: 21/12/2012,18:20:14 | DA: 23/12/2012,21:48:31
17.
18.
19. =========================
20.
21.
22. "C:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{64433D3A-095D-4EDF-8EAE-5FF40AA4E894}-{8927E4FF-1955-4E4B-BCFA-211196855EE8}-Sony Vegas Pro 11 Cracked.rar" [ NOT_CONTENT_INDEXED|ARCHIVE | 3754 Ko ]
23. TC: 21/12/2012,18:19:41 | TM: 21/12/2012,18:19:39 | DA: 23/12/2012,21:48:32
24.
25.
26. =========================
27.
28.
29. "C:\Users\All Users\Microsoft\Microsoft Antimalware\LocalCopy\{590BF874-5028-4157-99F9-B04067183612}-{8927E4FF-1955-4E4B-BCFA-211196855EE8}-Sony Vegas Pro 11 Cracked (1).rar" [ NOT_CONTENT_INDEXED|ARCHIVE | 3754 Ko ]
30. TC: 21/12/2012,18:20:16 | TM: 21/12/2012,18:20:14 | DA: 23/12/2012,21:48:31
31.
32.
33. =========================
34.
35.
36. "C:\Users\All Users\Microsoft\Microsoft Antimalware\LocalCopy\{64433D3A-095D-4EDF-8EAE-5FF40AA4E894}-{8927E4FF-1955-4E4B-BCFA-211196855EE8}-Sony Vegas Pro 11 Cracked.rar" [ NOT_CONTENT_INDEXED|ARCHIVE | 3754 Ko ]
37. TC: 21/12/2012,18:19:41 | TM: 21/12/2012,18:19:39 | DA: 23/12/2012,21:48:32
38.
39.
40. =========================
41.
42.
43. "C:\_OTM\MovedFiles\12212012_221535\C_ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{8927E4FF-1955-4E4B-BCFA-211196855EE8}-Sony Vegas Pro 11 Cracked.rar" [ NOT_CONTENT_INDEXED|ARCHIVE | 3754 Ko ]
44. TC: 19/12/2012,18:57:41 | TM: 19/12/2012,18:57:36 | DA: 21/12/2012,22:14:28
45.
46.
47. =========================
48.
49.
50.
51. ====== Entrée(s) du registre ======
52.
53. Aucun élément dans le registre trouvé
54.
55. =========================
56.
57. Fin à: 22:11:22 le 23/12/2012
58. 458986 Éléments analysés
59.
60. =========================
61. E.O.F
je n'ai pas de rapport de mon antivirus car il l'enleve et ensuite le virus revient:Résumé
HackTool:Win32/Keygen est la détection d'un outil qui génère des clés de différents logiciels.

bonne soirée

le site a change depuis 4 ans ce n'est plus la meme configuration d'antivirus desole je ne sais pas comment faire svp