Pc très lent - analyse hijackthis Fermé

Question

Bonjour, 

Après le branchement du telephone d'un ami, mon ordinateur subit de fort ralentissement malgré une UC quasi non utilisée. Je fais court, désolé, mais c'est compliqué de poster dans ces conditions! Voici une analyse hijackthis, faite en mode sans echec. Si quelqu'un ayant les compétences pour l'analyser peut me donner un coup de main, je le remercie d'avance !!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:19:26, on 30/01/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Safe mode

Running processes:
C:\Program Files (x86)\Trend Micro\HijackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/default.aspx?c=fr&l=fr&s=gen
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (file missing)
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [razer] C:\Program Files (x86)\Razerazerhid.exe
O4 - HKLM\..\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"
O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - AppInit_DLLs: C:\Windows\SysWOW64
vinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Planificateur (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32
etman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
etprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32
lasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Dell DataSafe Online (NOBU) - Dell, Inc. - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
O23 - Service: @%SystemRoot%\system32
sisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32
vvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32asauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32asmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	apisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	bssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	ermsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	hemeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32	rkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe
End of file - 22626 bytes 

Configuration: Windows 7 / Firefox 18.0

Utilisateur anonyme · Answer

Bonjour  
DOUBLON  
   
Ancienne contributrice sécurité sous le pseudo jawaryinti

Nark0 · Answer

Oui désolé je ne retrouvais plus mon ancien compte (celui-ci) donc j'ai d'abord posté en tant que visiteur.

Nark0 · Answer

Je viens de m'apercevoir que lorsque mon ami à brancher son telephone portable sur mon ordi, antivir a detecté ceci:

Dans le fichier 'C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe'
un virus ou un programme indésirable 'TR/Crypt.ZPACK.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

A-t-il réellement bloqué l'intrusion ? J'en doute vu le souci actuel ...

Nark0 · Answer

Antivir vient de detecter un nouveau souci. Voici le message:

Dans le fichier 'C:\Program Files (x86)\Trend Micro\HijackThis\HiJackThis.exe'
un virus ou un programme indésirable 'TR/Crypt.ULPM.Gen' [trojan] a été détecté.
Action exécutée : Refuser l'accès

Si quelqu'un me lit, merci.

Nark0 · Answer

Un peu d'aide ?

Nark0 · Answer

Merci beaucoup!

yoann090 · Answer

Bonjour, apres quelques recherches, la detection est assez générique...
Tu pourrais analyser les 2 fichiers détectés sur virus total stp.   
 https://www.virustotal.com/gui/ 

 clique sur "Parcourir" et trouve puis selectionne ce(s) fichier(s) (un a la fois) 
 C:\Program Files (x86)\Trend Micro\HijackThis\HiJackThis.exe  

 C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe  

* 
* Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.  
* Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.  
* Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.

Nark0 · Answer

Ok c'est fait, mais je ne sais pas vraiment quelles infos je dois te donner maintenant?

Nark0 · Answer

Je n'avais pas vu la modif de ton post précédent.

Voici les liens: 

https://www.virustotal.com/gui/file/bd3d318d24478b2d51ed18c49a68afb6deee2a0b159913b484a69d98cf7702a8

https://www.virustotal.com/gui/file/911e0056e83af82a5f3fdc66085806fbe012aee4c4612b829aec85f8d2c8eccd

Merci de ton aide!

yoann090 · Answer

Pour le btplayerctrl il faut que tu le reanalyses, l'analyse date de 4 mois donc je pense pas que ça soit la tienne ^^

Nark0 · Answer

Merde je l'ai refaite j'ai supprimé la mauvaise page ... j'arrive!

Nark0 · Answer

voilà:

https://www.virustotal.com/gui/file/911e0056e83af82a5f3fdc66085806fbe012aee4c4612b829aec85f8d2c8eccd

yoann090 · Answer

Etrange. 

Fais un scan complet avec Malwarebyte, suis ce tutoriel : http://www.security-helpzone.com/Thread-MalwareBytes-Anti-Malware-MBAM-Scan-complet

Nark0 · Answer

Je l'ai déjà fait, sans résultat. Je recommence et te poste ça.

Nark0 · Answer

Désolé, je n'ai pu revenir hier soir, trop lent ... Du coup je l'ai laissé faire un  scan complet avec MBAM, résultat: nada... 

LE rapport: 

Malwarebytes Anti-Malware 1.70.0.1100 
www.malwarebytes.org 

Version de la base de données: v2013.01.30.09 

Windows 7 Service Pack 1 x64 NTFS 
Internet Explorer 9.0.8112.16421 
Pierre :: PIERRE-PC [administrateur] 

31/01/2013 01:04:29 
mbam-log-2013-01-31 (01-04-29).txt 

Type d'examen: Examen complet (C:\|) 
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM 
Options d'examen désactivées: P2P 
Elément(s) analysé(s): 345483 
Temps écoulé: 8 heure(s), 12 minute(s), 54 seconde(s) 

Processus mémoire détecté(s): 0 
(Aucun élément nuisible détecté) 

Module(s) mémoire détecté(s): 0 
(Aucun élément nuisible détecté) 

Clé(s) du Registre détectée(s): 0 
(Aucun élément nuisible détecté) 

Valeur(s) du Registre détectée(s): 0 
(Aucun élément nuisible détecté) 

Elément(s) de données du Registre détecté(s): 0 
(Aucun élément nuisible détecté) 

Dossier(s) détecté(s): 0 
(Aucun élément nuisible détecté) 

Fichier(s) détecté(s): 0 
(Aucun élément nuisible détecté) 

(fin) 

Ce matin, Antivir a également détecté un nouveau truc. 
Je l'ai fait analysé par virustotal: 

https://www.virustotal.com/gui/file/11062a892f102a4c9d1dd7ba56fdc4e35945c67bb3ecff9f6fd5d74444a5cfb9

yoann090 · Answer

:/ bon vu que ca vient apres connexion d'un périphérique, fais ceci :  
 Téléchargez UsbFix (créé par El Desaparecido)  
 sur votre Bureau.   
Si votre antivirus affiche une alerte, ignorez-la et désactivez l'antivirus temporairement.   
Branchez toutes vos sources de données externes à votre PC (clé USB, disque dur externe, etc...) sans les ouvrir.   

Double cliquez sur UsbFix.exe.  
Cliquez sur recherche. 

http://forum.eldesaparecido.com/img_tuto/UsbFix_recherche.png  
   

Laissez travailler l'outil.   
À la fin du scan, un rapport va s'afficher, postez-le dans votre prochaine réponse sur le forum.   
Le rapport est aussi sauvegardé à la racine du disque système ( C:\UsbFix.txt ).   

Tutoriel en images

Nark0 · Answer

Le problème est survenu lorsqu'un ami a branché son téléphone portable sur le pc, et cela fait un moment que je n'avais branché aucun périphérique. Est-ce que je dois lui demandé de venir branché sur tel ou peut-etre que cette opération a un autre but ?

Nark0 · Answer

Le rapport de usbfix:

############################## | UsbFix V 7.102 | [Recherche]

Utilisateur: Pierre (Administrateur) # PIERRE-PC
Mis à jour le 20/12/2012 par El Desaparecido
Lancé à 13:05:32 | 31/01/2013

Site Web: https://www.sosvirus.net/
Contact: contact@eldesaparecido.com

PC: Dell Inc.          (Dell System XPS L702X) (x64-based PC
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 4010 | Free : 1874]
BIOS: Default System BIOS
BOOT: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium  (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [(!) Disabled]
WU: Windows Update Service [Enabled]
AV: AntiVir Desktop [Enabled | Updated]
FW: Windows FireWall Service [(!) Disabled]

C:\ (%systemdrive%) -> Disque fixe # 451 Go (275 Go libre(s) - 61%) [OS] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> Disque amovible # 4 Go (1 Go libre(s) - 36%) [CORSAIR] # FAT32
G:\ -> Disque fixe # 233 Go (32 Go libre(s) - 14%) [Media-Disk] # NTFS
Y:\ -> Disque fixe # 15 Go (6 Go libre(s) - 42%) [RECOVERY] # NTFS

################## | Processus Actif |

C:\Windows\system32\csrss.exe (428)
C:\Windows\system32\wininit.exe (572)
C:\Windows\system32\csrss.exe (592)
C:\Windows\system32\services.exe (628)
C:\Windows\system32\lsass.exe (652)
C:\Windows\system32\lsm.exe (660)
C:\Windows\system32\svchost.exe (764)
C:\Windows\system32
vvsvc.exe (836)
C:\Windows\system32\svchost.exe (876)
C:\Windows\System32\svchost.exe (940)
C:\Windows\system32\svchost.exe (1020)
C:\Windows\system32\winlogon.exe (300)
C:\Windows\system32\svchost.exe (432)
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (1092)
C:\Windows\system32
vvsvc.exe (1104)
C:\Windows\system32\svchost.exe (1168)
C:\Windows\System32\spoolsv.exe (1416)
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (1476)
C:\Windows\system32	askhost.exe (1520)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1600)
C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (1296)
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (1840)
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (1756)
C:\Windows\system32\svchost.exe (1948)
C:\Windows\System32\svchost.exe (1720)
C:\Program Files\Intel\WiFi\bin\EvtEng.exe (2060)
C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (2088)
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (2172)
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (2196)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe (2240)
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE (2336)
C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (2576)
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (2584)
C:\Windows\system32\svchost.exe (2608)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (2644)
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (2696)
C:\Windows\system32\wbem\unsecapp.exe (2836)
C:\Windows\system32\wbem\wmiprvse.exe (2928)
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (1712)
C:\Windows\system32\conhost.exe (2772)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (3372)
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (3388)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (3416)
C:\Windows\System32\igfxtray.exe (3444)
C:\Windows\System32\hkcmd.exe (3456)
C:\Windows\System32\igfxpers.exe (3464)
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe (3472)
C:\Windows\System32undll32.exe (3528)
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (3624)
C:\Program Files\Dell\QuickSet\quickset.exe (3732)
C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe (3880)
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (4056)
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (3172)
C:\Program Files (x86)\Razerazerhid.exe (3280)
C:\Windows\system32\SearchIndexer.exe (2876)
C:\Program Files (x86)\Razerazerofa.exe (2660)
C:\Program Files\Windows Media Player\wmpnetwk.exe (2568)
C:\Windows\system32\wbem\unsecapp.exe (2792)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (604)
C:\Windows\system32\svchost.exe (4112)
C:\Windows\System32\svchost.exe (4272)
C:\Program Files (x86)\Dell Stage\Dell Stage\stage_secondary.exe (4488)
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (3840)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4348)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (740)
C:\Windows\explorer.exe (4200)
C:\Windows\System32\svchost.exe (1076)
C:\Windows\system32\Dwm.exe (4568)
C:\Windows\system32\wuauclt.exe (2716)
C:\Windows
otepad.exe (992)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe (2012)
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (2968)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (4696)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (2424)
C:\Windows\System32\WUDFHost.exe (1424)
C:\Program Files (x86)\Dell DataSafe Local Backup\SftVss64.exe (4448)
C:\Windows\System32\vds.exe (4888)
C:\UsbFix\Go.exe (5108)
C:\Windows\system32\wbem\wmiprvse.exe (4700)

################## | Éléments infectieux |

Présent! Y:\AUTORUN.INF

################## | Registre |


################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{9511eee2-7cc6-11e0-b743-bc7737532978}
Shell\AutoRun\Command = E:\autorun.exe



################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F |

yoann090 · Answer

Ok relance en suppression.

Nark0 · Answer

voilà c'est fait:

############################## | UsbFix V 7.102 | [Suppression]

Utilisateur: Pierre (Administrateur) # PIERRE-PC
Mis à jour le 20/12/2012 par El Desaparecido
Lancé à 13:39:20 | 31/01/2013

Site Web: https://www.sosvirus.net/
Contact: contact@eldesaparecido.com

PC: Dell Inc.          (Dell System XPS L702X) (x64-based PC
CPU: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz (2001)
RAM -> [Total : 4010 | Free : 1887]
BIOS: Default System BIOS
BOOT: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium  (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [(!) Disabled]
WU: Windows Update Service [Enabled]
AV: AntiVir Desktop [Enabled | Updated]
FW: Windows FireWall Service [(!) Disabled]

C:\ (%systemdrive%) -> Disque fixe # 451 Go (275 Go libre(s) - 61%) [OS] # NTFS
D:\ -> CD-ROM
E:\ -> CD-ROM
F:\ -> Disque amovible # 4 Go (1 Go libre(s) - 36%) [CORSAIR] # FAT32
G:\ -> Disque fixe # 233 Go (32 Go libre(s) - 14%) [Media-Disk] # NTFS
Y:\ -> Disque fixe # 15 Go (6 Go libre(s) - 42%) [RECOVERY] # NTFS

################## | Processus Actif |

C:\Windows\system32\csrss.exe (428)
C:\Windows\system32\wininit.exe (572)
C:\Windows\system32\csrss.exe (592)
C:\Windows\system32\services.exe (628)
C:\Windows\system32\lsass.exe (652)
C:\Windows\system32\lsm.exe (660)
C:\Windows\system32\svchost.exe (764)
C:\Windows\system32
vvsvc.exe (836)
C:\Windows\system32\svchost.exe (876)
C:\Windows\System32\svchost.exe (940)
C:\Windows\system32\svchost.exe (1020)
C:\Windows\system32\winlogon.exe (300)
C:\Windows\system32\svchost.exe (432)
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (1092)
C:\Windows\system32
vvsvc.exe (1104)
C:\Windows\system32\svchost.exe (1168)
C:\Windows\System32\spoolsv.exe (1416)
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (1476)
C:\Windows\system32	askhost.exe (1520)
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1600)
C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (1296)
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (1840)
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (1756)
C:\Windows\system32\svchost.exe (1948)
C:\Windows\System32\svchost.exe (1720)
C:\Program Files\Intel\WiFi\bin\EvtEng.exe (2060)
C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (2088)
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (2172)
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (2196)
C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe (2240)
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE (2336)
C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (2576)
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (2584)
C:\Windows\system32\svchost.exe (2608)
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (2644)
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (2696)
C:\Windows\system32\wbem\unsecapp.exe (2836)
C:\Windows\system32\wbem\wmiprvse.exe (2928)
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (1712)
C:\Windows\system32\conhost.exe (2772)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (3372)
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (3388)
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (3416)
C:\Windows\System32\igfxtray.exe (3444)
C:\Windows\System32\hkcmd.exe (3456)
C:\Windows\System32\igfxpers.exe (3464)
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe (3472)
C:\Windows\System32undll32.exe (3528)
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (3624)
C:\Program Files\Dell\QuickSet\quickset.exe (3732)
C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe (3880)
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (4056)
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (3172)
C:\Program Files (x86)\Razerazerhid.exe (3280)
C:\Windows\system32\SearchIndexer.exe (2876)
C:\Program Files (x86)\Razerazerofa.exe (2660)
C:\Program Files\Windows Media Player\wmpnetwk.exe (2568)
C:\Windows\system32\wbem\unsecapp.exe (2792)
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (604)
C:\Windows\system32\svchost.exe (4112)
C:\Windows\System32\svchost.exe (4272)
C:\Program Files (x86)\Dell Stage\Dell Stage\stage_secondary.exe (4488)
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (3840)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4348)
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (740)
C:\Windows\explorer.exe (4200)
C:\Windows\System32\svchost.exe (1076)
C:\Windows\system32\Dwm.exe (4568)
C:\Windows\system32\wuauclt.exe (2716)
C:\Program Files (x86)\Mozilla Firefox\firefox.exe (2012)
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (2968)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (4696)
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (2424)
C:\Windows\SysWOW64\NOTEPAD.EXE (3688)
C:\Windows\System32\WUDFHost.exe (4752)
C:\Program Files (x86)\Dell DataSafe Local Backup\SftVss64.exe (1696)
C:\Windows\System32\vds.exe (5112)
C:\Windows\system32\wbem\wmiprvse.exe (4128)
C:\UsbFix\Go.exe (4688)

################## | Processus Stoppés |

Stoppé! C:\Windows\system32
vvsvc.exe (836)
Stoppé! C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (1092)
Stoppé! C:\Windows\system32
vvsvc.exe (1104)
Stoppé! C:\Windows\System32\spoolsv.exe (1416)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (1476)
Stoppé! C:\Windows\system32	askhost.exe (1520)
Stoppé! C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1600)
Stoppé! C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (1296)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (1840)
Stoppé! C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (1756)
Stoppé! C:\Program Files\Intel\WiFi\bin\EvtEng.exe (2060)
Stoppé! C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe (2088)
Stoppé! C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (2172)
Stoppé! C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (2196)
Stoppé! C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe (2240)
Stoppé! C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE (2336)
Stoppé! C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe (2576)
Stoppé! C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (2584)
Stoppé! C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (2644)
Stoppé! C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (2696)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (1712)
Stoppé! C:\Windows\system32\conhost.exe (2772)
Stoppé! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (3372)
Stoppé! C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (3388)
Stoppé! C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (3416)
Stoppé! C:\Windows\System32\igfxtray.exe (3444)
Stoppé! C:\Windows\System32\hkcmd.exe (3456)
Stoppé! C:\Windows\System32\igfxpers.exe (3464)
Stoppé! C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe (3472)
Stoppé! C:\Windows\System32undll32.exe (3528)
Stoppé! C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (3624)
Stoppé! C:\Program Files\Dell\QuickSet\quickset.exe (3732)
Stoppé! C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe (3880)
Stoppé! C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (4056)
Stoppé! C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (3172)
Stoppé! C:\Program Files (x86)\Razerazerhid.exe (3280)
Stoppé! C:\Windows\system32\SearchIndexer.exe (2876)
Stoppé! C:\Program Files (x86)\Razerazerofa.exe (2660)
Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (2568)
Stoppé! C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (604)
Stoppé! C:\Program Files (x86)\Dell Stage\Dell Stage\stage_secondary.exe (4488)
Stoppé! C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (3840)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (4348)
Stoppé! C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (740)
Stoppé! C:\Windows\system32\wuauclt.exe (2716)
Stoppé! C:\Program Files (x86)\Mozilla Firefox\firefox.exe (2012)
Stoppé! C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (2968)
Stoppé! C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (4696)
Stoppé! C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (2424)
Stoppé! C:\Windows\SysWOW64\NOTEPAD.EXE (3688)
Stoppé! C:\Windows\System32\WUDFHost.exe (4752)
Stoppé! C:\Program Files (x86)\Dell DataSafe Local Backup\SftVss64.exe (1696)
Stoppé! C:\Windows\System32\vds.exe (5112)

################## | Éléments infectieux |

Supprimé! C:\$RECYCLE.BIN\S-1-5-20
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-1070280405-943386930-2384605315-500
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-2093882097-1864276956-279186977-1001
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-2093882097-1864276956-279186977-500
Supprimé! G:\$RECYCLE.BIN\S-1-5-21-2093882097-1864276956-279186977-1001
Supprimé! G:\Recycler\S-1-5-21-1406906135-4061824080-3340949189-1005
Supprimé! G:\Recycler\S-1-5-21-2025429265-1284227242-1177238915-500
Supprimé! G:\Recycler\S-1-5-21-484763869-515967899-725345543-1004
Supprimé! G:\Recycler\S-1-5-21-507921405-562591055-725345543-500
Supprimé! G:\Recycler\S-1-5-21-70747738-3126514524-975450263-1005
Supprimé! Y:\AUTORUN.INF

(!) Fichiers temporaires supprimés.

################## | Registre |


################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{9511eee2-7cc6-11e0-b743-bc7737532978}

################## | Listing |

[31/01/2013 - 13:53:29 | SHD ] 	C:\$RECYCLE.BIN
[02/02/2012 - 17:21:58 | N | 2435] 	C:\AdwCleaner[S1].txt
[07/05/2011 - 12:30:26 | D ] 	C:\apps
[12/05/2011 - 14:47:48 | D ] 	C:\dell
[07/05/2011 - 13:56:12 | N | 4049] 	C:\dell.sdr
[14/07/2009 - 06:08:56 | SHD ] 	C:\Documents and Settings
[07/05/2011 - 14:06:14 | D ] 	C:\Drivers
[31/01/2013 - 08:44:56 | D ] 	C:\fd825e26f500cab7ab3fb310dd15
[30/07/2011 - 22:18:47 | D ] 	C:\FIND_EULA_PATH
[07/05/2011 - 11:45:12 | N | 1136] 	C:\freefallprotection.log
[31/01/2013 - 00:45:12 | ASH | 3153727488] 	C:\hiberfil.sys
[07/05/2011 - 11:43:02 | D ] 	C:\Intel
[07/09/2011 - 20:21:12 | RHD ] 	C:\MSOCache
[31/01/2013 - 00:45:18 | ASH | 4204969984] 	C:\pagefile.sys
[14/07/2009 - 04:20:08 | D ] 	C:\PerfLogs
[15/01/2013 - 20:01:41 | D ] 	C:\Program Files
[25/01/2013 - 21:54:53 | D ] 	C:\Program Files (x86)
[09/01/2013 - 19:58:51 | HD ] 	C:\ProgramData
[11/05/2011 - 19:15:57 | SHD ] 	C:\System Recovery
[31/01/2013 - 10:09:18 | SHD ] 	C:\System Volume Information
[12/05/2011 - 21:39:41 | D ] 	C:\Temp
[31/01/2013 - 13:53:29 | D ] 	C:\UsbFix
[31/01/2013 - 13:39:29 | A | 11082] 	C:\UsbFix.txt
[11/05/2011 - 19:07:59 | D ] 	C:\Users
[30/01/2013 - 12:39:19 | D ] 	C:\Windows
[31/05/2012 - 08:15:49 | D ] 	C:\ZHP
[22/01/2013 - 19:47:44 | D ] 	F:\Tatoo
[22/04/2012 - 14:01:26 | D ] 	F:\2012-04-22 Tout div
[15/08/2012 - 19:52:02 | D ] 	F:\2012-08-15 Christine
[14/03/2012 - 22:44:42 | D ] 	F:\2012-03-14 s a m meurisier  + ch verte
[19/01/2012 - 18:19:28 | D ] 	F:\2012-01-19 partner
[03/10/2011 - 19:41:10 | D ] 	F:\2011-10-03 bm
[22/11/2011 - 19:04:46 | D ] 	F:\2011-11-22 minou
[01/10/2011 - 21:31:58 | D ] 	F:\2011-10-01 Jules
[02/12/2007 - 17:09:42 | D ] 	F:\2007-12-02 Relicat
[23/02/2008 - 10:56:52 | D ] 	F:\2008-02-23 NISSAN
[23/02/2008 - 10:05:16 | D ] 	F:\2008-02-23 tout a l égout
[07/03/2008 - 17:38:58 | D ] 	F:\2008-03-07 Reservoir d'eau
[23/03/2008 - 11:18:42 | D ] 	F:\2008-03-23
[26/04/2008 - 09:28:32 | D ] 	F:\2008-04-26 terrain
[27/04/2008 - 16:49:30 | D ] 	F:\2008-04-27 permis
[07/05/2008 - 11:26:10 | D ] 	F:\2008-05-07 chantier
[01/06/2008 - 14:04:48 | D ] 	F:\2008-06-01 jante bmw
[04/07/2008 - 15:39:06 | D ] 	F:\2008-07-04 Champigons
[19/09/2008 - 11:11:10 | D ] 	F:\2008-09-19 chantier
[11/01/2009 - 17:03:40 | D ] 	F:\2009-01-11 chantier
[26/02/2009 - 10:56:28 | D ] 	F:\2009-02-26 chantier
[16/04/2009 - 11:29:24 | D ] 	F:\2009-04-16
[03/07/2009 - 15:02:44 | D ] 	F:\2009-07-03
[05/12/2009 - 18:36:18 | D ] 	F:\2009-12-05
[29/03/2010 - 20:40:46 | D ] 	F:\2010-03-29 merco
[11/08/2010 - 17:41:26 | D ] 	F:\2010-08-11 Chantier +
[16/03/2011 - 18:14:58 | D ] 	F:\2011-03-16 Maison AV
[01/04/2011 - 18:18:30 | D ] 	F:\2011-04-01 vente m
[10/05/2011 - 17:10:14 | D ] 	F:\2011-05-10 VOIT MAIS
[14/11/2007 - 14:48:58 | N | 669] 	F:\Sample Pictures.lnk
[13/11/2012 - 18:46:18 | SH | 85] 	F:\desktop.ini
[23/03/2008 - 12:00:02 | N | 1435435] 	F:\montage 1.jpg
[23/03/2008 - 12:00:56 | N | 1585439] 	F:\montage 2.jpg
[28/02/2011 - 18:37:40 | N | 1858191] 	F:\PH ID.JPG
[19/02/2010 - 13:54:48 | N | 1154411] 	F:\photo pot remy.JPG
[15/01/2012 - 20:26:34 | N | 1138774056] 	F:\Intouchables 2011 FRENCH DVDRip XviD-FwD.mp4
[05/01/2009 - 16:16:12 | D ] 	F:\Coffre-fort
[03/01/2010 - 16:51:40 | RASHD ] 	F:\autorun.inf
[23/03/2008 - 12:06:52 | N | 1585435] 	F:\Reservoir d'eau.jpg
[23/03/2008 - 12:05:54 | N | 1083752] 	F:\Reservoir d'eau 5.jpg
[05/06/2011 - 17:10:36 | D ] 	F:\jules
[31/01/2013 - 13:53:29 | SHD ] 	G:\$RECYCLE.BIN
[06/11/2008 - 05:37:11 | N | 734058496] 	G:\3h10 pour Yuma French.avi
[19/12/2008 - 14:04:01 | N | 719845326] 	G:\Agathe.Clery.2008.FRENCH.CAM.XviD-GKS.avi
[09/06/2008 - 15:01:58 | N | 733618176] 	G:\American Gangster - FRENCH Dvd Rip XvId by TheGhOst76.avi
[13/11/2012 - 17:39:04 | D ] 	G:\Autres
[02/05/2009 - 01:21:45 | N | 732264448] 	G:\Babel.avi
[02/05/2009 - 01:28:12 | N | 734339072] 	G:\Braquage à l'Anglaise.avi
[24/04/2011 - 22:59:15 | D ] 	G:\Breaking Bad 1
[10/05/2011 - 22:43:46 | D ] 	G:\Breaking Bad 2
[29/05/2011 - 00:43:37 | D ] 	G:\breaking bad 3
[30/01/2009 - 04:41:41 | N | 732300302] 	G:\Carton.Rouge.-.Mean.Machine.DvdRipp.Fr.Xvid.2pass.Goofy.Joe.[emule-island.com].AVI
[13/11/2012 - 17:44:18 | D ] 	G:\dossier alain
[13/11/2012 - 17:42:27 | D ] 	G:\Films
[13/11/2012 - 17:43:17 | D ] 	G:\films d
[15/02/2009 - 03:47:33 | N | 730835030] 	G:\François Damiens - Les Pièges De Francois L'embrouille Vol 01.avi
[24/11/2008 - 19:54:49 | N | 731994112] 	G:\Gad.Elmaleh.Papa.est.en.haut-SINS.LcKtM.[emule-island.com].avi
[06/11/2008 - 02:10:11 | N | 735594496] 	G:\Gladiator.Extented.Edition.FRENCH.DVDRiP.REPACK.1CD.XViD-IcE-TEAM.ZoBiWaN.avi
[04/08/2009 - 17:34:34 | N | 733333504] 	G:\Gran.Torino.FRENCH.DVDRip.LD.Xvid-Paglop.[emule-island.com].avi
[27/01/2009 - 01:23:22 | N | 735379456] 	G:\HANCOCK.DVDRIP.FR.VVF.COOLI.[emule-island.com].avi
[02/05/2009 - 01:04:01 | N | 731844608] 	G:\Hellboy II - Les Legions D Or Maudite.avi
[27/06/2009 - 08:22:44 | N | 725965766] 	G:\J'irai Dormir À Hollywood Fr Vost Dvdrip.avi
[02/01/2009 - 02:22:26 | N | 734359552] 	G:\James.Bond.Quantum.Of.Solace.FRENCH.DVDSCR.MD.XViD-TGK.LcKtM.avi
[23/06/2009 - 14:09:27 | N | 739177078] 	G:\L'aube rouge.avi
[13/01/2009 - 21:12:39 | N | 732446720] 	G:\L'Echange (2008) de Clint Eastwood FR.TS.MD.1CD.avi
[02/05/2009 - 02:34:13 | N | 725469184] 	G:\Le bon,la brute et le truand.avi
[04/08/2009 - 18:19:04 | N | 743214414] 	G:\Le prix de la loyauté.FRENCH.DVDRip.(edward norton,collin farrel).avi
[09/06/2008 - 16:49:04 | N | 731297358] 	G:\Le.Dernier.Gang.FRENCH.DVDRiP.REPACK.1CD.XviD-GHOST.[emule-island.com].avi
[06/11/2008 - 06:16:22 | N | 728772608] 	G:\Le.Nouveau.Protocole.FRENCH.DVDRiP.XViD-PROD-FloTr4Sh-LiCoKInE.TeaM.[emule-island.com].avi
[02/01/2009 - 01:56:59 | N | 717856768] 	G:\Le.Transporteur.3.TRUEFRENCH.XviD.MD.TS.KiNG.of.RLZ.LcKtM.avi
[06/11/2008 - 01:38:09 | N | 736030410] 	G:\Les.Liens.Du.Sang.FRENCH.DVDRIP.REPACK.1CD.XVID-ITOMA.LiCoKInE.TeaM.[emule-island.com].avi
[23/05/2006 - 15:13:20 | N | 691150848] 	G:\Monthy Python - Sacre Graal - ST français.avi
[06/11/2008 - 02:17:15 | N | 729444352] 	G:\Mr73.FRENCH.DVDRiP.XViD-PROD.avi
[30/08/2009 - 08:36:00 | D ] 	G:\Musiques ordi
[21/09/2008 - 21:50:58 | N | 814176992] 	G:\No.country.for.old.man.FR.divx.avi
[05/08/2009 - 01:53:23 | N | 737890304] 	G:\Nous Étions Soldats (Mel Gibson) Dvdrip Divx Fr.avi
[02/05/2009 - 05:24:06 | N | 732227584] 	G:\Open Range.avi
[31/01/2013 - 13:51:25 | SHD ] 	G:\RECYCLER
[30/01/2009 - 05:32:29 | N | 733962240] 	G:\Revolver 2005 French 2,8 - Policier, Action - avec Jason Statham de Luc Besson DivX.Fr.avi
[30/01/2009 - 04:27:06 | N | 734758912] 	G:\RocknRolla.FRENCH.DVDRiP.XviD-ULTRASON.[emule-island.com].avi
[02/01/2009 - 04:31:06 | N | 734992384] 	G:\Secret.Defense.CAM.FRENCH.XVID-InUTIL.LcKtM.[emule-island.com].avi
[24/10/2009 - 15:21:43 | SHD ] 	G:\System Volume Information
[05/01/2009 - 22:06:41 | N | 733822976] 	G:\There.Will.Be.Blood.FRENCH.DVDRiP.REPACK.1CD.XViD-STS.[emule-island.com].avi
[04/07/2008 - 15:20:52 | ASH | 12288] 	G:\Thumbs.db
[27/08/2011 - 06:30:45 | N | 153] 	Y:\ADRInfos.xml
[18/02/2012 - 10:33:10 | SHD ] 	Y:\Boot
[20/11/2010 - 13:40:07 | RASH | 383786] 	Y:\bootmgr
[11/05/2011 - 19:16:01 | D ] 	Y:\dell
[12/05/2011 - 21:39:41 | N | 0] 	Y:\Dellcd.boot
[12/05/2011 - 21:39:41 | N | 0] 	Y:\Dellcd.sys
[28/04/2009 - 23:49:00 | SH | 7450] 	Y:\Desktop.ini
[12/08/2010 - 00:19:14 | N | 81120] 	Y:\Info.exe
[31/01/2013 - 13:38:56 | N | 312] 	Y:\MASTER.LOG
[12/05/2011 - 20:28:45 | RSHD ] 	Y:\preload
[19/03/2010 - 21:27:02 | SH | 34530] 	Y:\protect.arabic
[05/06/2009 - 18:42:00 | SH | 117133] 	Y:\protect.chinese simplified
[05/06/2009 - 18:42:00 | SH | 117641] 	Y:\protect.chinese traditional
[16/04/2009 - 17:10:00 | SH | 116238] 	Y:\protect.danish
[16/04/2009 - 16:55:00 | SH | 119790] 	Y:\protect.dutch
[17/04/2009 - 18:19:00 | SH | 47233] 	Y:\protect.english
[16/04/2009 - 17:10:00 | SH | 116015] 	Y:\protect.french
[16/04/2009 - 16:58:00 | SH | 116305] 	Y:\protect.german
[19/03/2010 - 21:30:00 | SH | 34476] 	Y:\protect.hebrew
[16/04/2009 - 16:59:00 | SH | 115710] 	Y:\protect.italian
[16/04/2009 - 17:00:00 | SH | 117842] 	Y:\protect.japanese
[16/04/2009 - 17:00:00 | SH | 124495] 	Y:\protect.korean
[16/04/2009 - 17:02:00 | SH | 116195] 	Y:\protect.norwegian
[16/04/2009 - 17:03:00 | SH | 116564] 	Y:\protect.portuguese brazilian
[16/04/2009 - 17:04:00 | SH | 116363] 	Y:\protect.spanish
[16/04/2009 - 17:05:00 | SH | 116404] 	Y:\protect.swedish
[11/05/2011 - 19:16:01 | RD ] 	Y:\Recovery
[07/05/2011 - 16:09:50 | N | 192] 	Y:\ResSys.ini
[12/05/2011 - 21:39:41 | N | 398] 	Y:mcInfo.txt
[07/05/2011 - 12:01:24 | N | 410] 	Y:\ST_InstallBackup.ini
[07/05/2011 - 04:26:39 | SHD ] 	Y:\System Volume Information

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
F:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
G:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
Y:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F |

juju666 · Answer

Bonsoir ▶ Télécharge Dr Web CureIt sur ton Bureau : ▶ redémarre en mode sans échec ▶- Double clique (clic droit "en tant qu'admin" sous Vista) et ensuite clique sur ; ▶- Clique à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton . Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X". ▶- Lorsque le scan rapide est terminé, clique sur le menu puis ; Choisis l'onglet , et décoche . Clique ensuite sur . ▶- De retour à la fenêtre principale : clique pour activer selectionne tous les disques ▶- Clique le bouton avec flèche verte sur la droite, et le scan débutera. ▶- Clique pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter". ▶- Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autre). Si oui, alors clique dessus et ensuite clique sur l'icône , au dessous, et choisis . ▶- Du menu principal de l'outil, au haut à gauche, clique sur le menu et choisis . Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv ▶-pour le rapport tu l enregistres sur ton bureau , tu clic droit dessus /envoyer vers / dossiers compresses Tu envoie l'archive sur cjoint.com et tu colle le lien. @+

Nark0 · Answer

Bon, petit souci, il me semble que le logiciel est différent du tuto que tu m'as donné. 
J'ai lancé une analyse rapide, un fichier a été detruit. Mais ensuite, rien ne correspond... Donc au final aucun rapport... Nouvelle version ? Peux tu m'en dire plus ?

Edit: Après l'analyse rapide, j'ai pu lancé une analyse avec tout les disques, mais j'ai eu l'apparition d'un écran bleu assez rapidement. Je vais retenter en attendant ta réponse.

juju666 · Answer

mmmh
ouais possible qu'il ait changé je demande 1 fois par an un docteur web lol

Nark0 · Answer

Ok j'ai fait un scan complet, mais le logiciel ne propose aucun rapport désolé. 

Je tiens à te remercier pour ton aide et ta perceverance!!

Où en est on ?

juju666 · Answer

Bah pas très loin

Dis moi ce que fait l'ordi (symptômes apparents)

Nark0 · Answer

mon 1er message n'est pas apparu, donc je fais vite!

Ordi très ralenti, même pas exploitable comme hier soir. C'est le symptôme principal !

juju666 · Answer

▶ Fais un clic droit et "Enregistrer la cible (du lien sous) -> tonprenom.exe -> destination ton bureau (ET PAS AILLEURS) sur le lien suivant : ComboFix ▶ Redémarre en mode sans échec (tapote F8 au démarrage) ▶ Lance combofix renommé ▶ Ne touche à rien durant le scan ComboFix devrait redémarrer ton PC. ▶▶ Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. ▶▶▶ Si, après le redémarrage de votre pc par combofix, vous avez des erreurs "Clé marquée pour suppression" ou des soucis de connexion internet, redémarrez à nouveau votre ordinateur

Nark0 · Answer

ComboFix 13-01-31.03 - Pierre 01/02/2013   0:15.1.8 - x64 MINIMAL
Microsoft Windows 7 Édition Familiale Premium   6.1.7601.1.1252.33.1036.18.4010.2704 [GMT 1:00]
Lancé depuis: c:\users\Pierre\Desktop\pierre.exe
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Un nouveau point de restauration a été créé
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2012-12-28 au 2013-01-31  ))))))))))))))))))))))))))))))))))))
.
.
2013-01-31 23:22 . 2013-01-31 23:22	--------	d-----w-	c:\users\UpdatusUser\AppData\Local	emp
2013-01-31 23:22 . 2013-01-31 23:22	--------	d-----w-	c:\users\Default\AppData\Local	emp
2013-01-31 18:21 . 2013-01-31 18:50	--------	d-----w-	c:\users\Pierre\Doctor Web
2013-01-31 12:00 . 2013-01-31 17:49	--------	d-----w-	C:\UsbFix
2013-01-25 20:54 . 2013-01-25 20:54	283200	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2013-01-25 20:54 . 2013-01-25 20:54	--------	d-----w-	c:\program files (x86)\DAEMON Tools Lite
2013-01-15 19:01 . 2013-01-15 19:01	308640	----a-w-	c:\windows\system32\javaws.exe
2013-01-15 19:01 . 2013-01-15 19:01	188832	----a-w-	c:\windows\system32\javaw.exe
2013-01-15 19:01 . 2013-01-15 19:01	188832	----a-w-	c:\windows\system32\java.exe
2013-01-15 19:01 . 2013-01-15 19:01	108448	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2013-01-15 19:01 . 2013-01-15 19:01	--------	d-----w-	c:\program files\Java
2013-01-15 18:58 . 2013-01-15 18:58	--------	d-----w-	c:\users\Pierre\AppData\Local\Programs
2013-01-11 08:46 . 2013-01-11 08:46	--------	d-----w-	c:\program files (x86)\TomTom HOME 2
2013-01-11 08:45 . 2013-01-11 08:45	--------	d-----w-	c:\program files (x86)\TomTom International B.V
2013-01-10 02:05 . 2013-01-10 02:05	--------	d-----w-	c:\windows\PCHEALTH
2013-01-09 18:58 . 2013-01-09 18:58	--------	d-----w-	c:\programdata\TomTom
2013-01-09 18:55 . 2013-01-09 18:55	--------	d-----w-	c:\users\Pierre\AppData\Roaming\TomTom
2013-01-09 18:55 . 2013-01-09 18:55	--------	d-----w-	c:\users\Pierre\AppData\Local\TomTom
2013-01-09 18:52 . 2013-01-09 18:52	--------	d-----w-	c:\users\Pierre\AppData\Local\Downloaded Installations
2013-01-09 18:39 . 2012-11-30 05:45	362496	----a-w-	c:\windows\system32\wow64win.dll
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-15 19:01 . 2012-02-02 17:40	1081760	----a-w-	c:\windows\system32
pdeployJava1.dll
2013-01-15 19:01 . 2011-05-07 10:42	960416	----a-w-	c:\windows\system32\deployJava1.dll
2013-01-10 02:02 . 2011-05-12 17:11	67599240	----a-w-	c:\windows\system32\MRT.exe
2013-01-08 20:55 . 2012-04-08 12:08	697864	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-01-08 20:55 . 2011-05-13 09:27	74248	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-16 17:11 . 2012-12-22 02:00	46080	----a-w-	c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-22 02:00	367616	----a-w-	c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-22 02:00	295424	----a-w-	c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-22 02:00	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2012-12-14 15:49 . 2012-05-31 06:37	24176	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-11-30 04:45 . 2013-01-09 18:39	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2012-11-14 07:06 . 2012-12-13 02:01	17811968	----a-w-	c:\windows\system32\mshtml.dll
2012-11-14 06:32 . 2012-12-13 02:01	10925568	----a-w-	c:\windows\system32\ieframe.dll
2012-11-14 06:11 . 2012-12-13 02:01	2312704	----a-w-	c:\windows\system32\jscript9.dll
2012-11-14 06:04 . 2012-12-13 02:01	1346048	----a-w-	c:\windows\system32\urlmon.dll
2012-11-14 06:04 . 2012-12-13 02:01	1392128	----a-w-	c:\windows\system32\wininet.dll
2012-11-14 06:02 . 2012-12-13 02:01	1494528	----a-w-	c:\windows\system32\inetcpl.cpl
2012-11-14 06:02 . 2012-12-13 02:01	237056	----a-w-	c:\windows\system32\url.dll
2012-11-14 05:59 . 2012-12-13 02:01	85504	----a-w-	c:\windows\system32\jsproxy.dll
2012-11-14 05:58 . 2012-12-13 02:01	816640	----a-w-	c:\windows\system32\jscript.dll
2012-11-14 05:57 . 2012-12-13 02:01	599040	----a-w-	c:\windows\system32\vbscript.dll
2012-11-14 05:57 . 2012-12-13 02:01	173056	----a-w-	c:\windows\system32\ieUnatt.exe
2012-11-14 05:55 . 2012-12-13 02:01	2144768	----a-w-	c:\windows\system32\iertutil.dll
2012-11-14 05:55 . 2012-12-13 02:01	729088	----a-w-	c:\windows\system32\msfeeds.dll
2012-11-14 05:53 . 2012-12-13 02:01	96768	----a-w-	c:\windows\system32\mshtmled.dll
2012-11-14 05:52 . 2012-12-13 02:01	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2012-11-14 05:46 . 2012-12-13 02:01	248320	----a-w-	c:\windows\system32\ieui.dll
2012-11-14 02:09 . 2012-12-13 02:01	1800704	----a-w-	c:\windows\SysWow64\jscript9.dll
2012-11-14 01:58 . 2012-12-13 02:01	1427968	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2012-11-14 01:57 . 2012-12-13 02:01	1129472	----a-w-	c:\windows\SysWow64\wininet.dll
2012-11-14 01:49 . 2012-12-13 02:01	142848	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2012-11-14 01:48 . 2012-12-13 02:01	420864	----a-w-	c:\windows\SysWow64\vbscript.dll
2012-11-14 01:44 . 2012-12-13 02:01	2382848	----a-w-	c:\windows\SysWow64\mshtml.tlb
2012-11-09 05:45 . 2012-12-12 09:49	2048	----a-w-	c:\windows\system32	zres.dll
2012-11-09 04:42 . 2012-12-12 09:49	2048	----a-w-	c:\windows\SysWow64	zres.dll
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2012-02-01 968048]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-07-02 348664]
"razer"="c:\program files (x86)\Razerazerhid.exe" [2005-05-17 147456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [2011-10-14 559616]
"Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2011-01-13 165184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64
vinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2012-06-05 27760]
R2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
R2 AntiVirSchedulerService;Avira Planificateur;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-07-02 86224]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2010-11-03 983104]
R2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-01-13 705856]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe [2011-02-18 378472]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-12-05 92632]
R2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2010-11-04 58128]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2010-10-19 274432]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2010-08-12 175168]
R3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2010-11-04 59904]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-16 317440]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2010-11-11 172632]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS
vstusb.sys [2011-01-31 121960]
R3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [2010-07-13 29288]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-11-30 412264]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers	susbflt.sys [2010-11-20 59392]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-12 1255736]
R3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [2010-12-01 42392]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS
vpciflt.sys [2011-02-19 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [2010-08-20 21616]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-25 283200]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [2010-12-13 27760]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS
usb3hub.sys [2011-02-10 82432]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS
usb3xhc.sys [2011-02-10 181760]
.
.
Contenu du dossier 'Tâches planifiées'
.
2013-01-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 20:55]
.
2013-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-26 10:15]
.
2013-01-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-26 10:15]
.
2013-01-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2093882097-1864276956-279186977-1001Core.job
- c:\users\Pierre\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23 08:14]
.
2013-01-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2093882097-1864276956-279186977-1001UA.job
- c:\users\Pierre\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23 08:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-12-08 6560360]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-11-30 2186856]
"NVHotkey"="c:\windows\system32
vHotkey.dll" [2011-02-18 312936]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-12 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-12 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-12 418840]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2010-11-03 10228224]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2012-02-01 2195824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32
vinitx.dll
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearchAssistant = hxxp://www.google.fr
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\5whcj52i.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://sports.orange.fr/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-01-12 19:39; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\5whcj52i.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Usbfix - c:\usbfix\Un-UsbFix.exe
AddRemove-{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\setup.exe
AddRemove-{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2729449 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2737019 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\Windows\system32\Macromed\Flash\FlashUtil64_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\Windows\system32\Macromed\Flash\FlashUtil64_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2013-02-01  00:34:38
ComboFix-quarantined-files.txt  2013-01-31 23:34
.
Avant-CF: 272 081 285 120 octets libres
Après-CF: 272 079 396 864 octets libres
.
- - End Of File - - 282D0A5D5BAF3E4E01866EB992D78A20


Merci pour votre aide!

Nark0 · Answer

Je viens de voir ce message d'antivir:

L'administrateur a bloqué l'accès au fichier 'C:\Autorun.inf' comme le prévoit la directive de sécurité.

juju666 · Answer

Salut,

Ouais antivir arrête pas de gueuler sur les autoruns.

Désinstalle-le voir si ça change quelque chose, j'ai l'impression qu'il pète un câble pour rien du tout sur ta machine ...

Nark0 · Answer

Salut, Ok je vais faire ça, mais les ralentissements sont bien là :/

juju666 · Answer

Y'a rien qui ressort néfaste, ni sur dr web, ni sur combofix, ...
J'ai bien peur que ton antivir a pris un coup :)

Nark0 · Answer

Je viens de le désinstaller, mais aucun résultat probant :/

juju666 · Answer

Démarrer -> dans la recherche tape "services.msc" (sans les guillemets)

Clic droit -> Propriétés sur les services ci-dessous :

SAMSUNG Android USB Composite Device driver (et consorts)

Tu les arrête si nécessaire puis tu mets en type de démarrage : MANUEL

Appliquer -> OK

Redémarrer.

Nark0 · Answer

Je n'ai pas ce service dans la liste, ni quoi que ce soit d'approchant!

juju666 · Answer

Pourtant ComboFix ne ment jamais : 

R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]

Nark0 · Answer

Oui effectivement, lorsque je fais une recherche avec ces mots clés, je les trouve dans le rapport de combofix, mais pas dans services.msc.

Est-ce qu'ils pourraient se trouver ailleurs ?

Nark0 · Answer

Je peux peut être les déplacer de leurs fichiers pour éviter qu'ils ne se lancent ?

juju666 · Answer

Et tu te retrouvera avec un magnifique BSOD au redémarrage de la machine :o)
De toute manière tu n'y arriveras pas car : 
 
R = en cours de fonctionnement

Nark0 · Answer

ok ok! Bon je ne sais pas trop quoi faire, je t'assure qu'ils ne sont pas visibles dans services.msc, pas sous ce nom en tout cas.

juju666 · Answer

Tu n'as pas besoin des trucs de samsung toute manière ?

Nark0 · Answer

Non du tout! De plus je n'ai pas de tel avec android, donc ca doit venir d'un autre telephone.

juju666 · Answer

Ben vi comme tu dis ici : Après le branchement du telephone d'un ami, mon ordinateur subit de fort ralentissement malgré une UC quasi non utilisée. __________________________________________________ =>/!\Le script qui suit a été écrit spécialement cet ordinateur/!\ <= =>il est fort déconseillé de le transposer sur un autre ordinateur !<= ---------------------------------------------------------------------------- Toujours avec toutes les protections désactivées, fais ceci : ▶ Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes) ▶ Copie/colle dans le bloc-notes ce qui est entre les lignes ci dessous (sans les lignes) : ---------------------------------------------------------- KillAll:: ClearJavaCache:: Driver:: ssadbus ssadmdfl ssadmdm File:: c:\windows\system32\DRIVERS\ssadbus.sys c:\windows\system32\DRIVERS\ssadmdfl.sys c:\windows\system32\DRIVERS\ssadmdm.sys Quit:: ------------------------------------------------------------------ ▶ Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt ▶ Quitte le Bloc Notes ▶ Fais un glisser/déposer de ce fichier CFScript sur le fichier combofix comme ceci : Illustration ▶ Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé. ▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu. ▶ Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

Nark0 · Answer

ComboFix 13-01-31.03 - Pierre 01/02/2013  15:44:36.2.8 - x64
Microsoft Windows 7 Édition Familiale Premium   6.1.7601.1.1252.33.1036.18.4010.2342 [GMT 1:00]
Lancé depuis: c:\users\Pierre\Desktop\pierre.exe
Commutateurs utilisés :: c:\users\Pierre\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\DRIVERS\ssadbus.sys"
"c:\windows\system32\DRIVERS\ssadmdfl.sys"
"c:\windows\system32\DRIVERS\ssadmdm.sys"
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\DRIVERS\ssadbus.sys
c:\windows\system32\DRIVERS\ssadmdfl.sys
c:\windows\system32\DRIVERS\ssadmdm.sys
.
.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_ssadbus
-------\Service_ssadmdfl
-------\Service_ssadmdm
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2013-01-01 au 2013-02-01  ))))))))))))))))))))))))))))))))))))
.
.
2013-02-01 14:53 . 2013-02-01 14:53	--------	d-----w-	c:\users\UpdatusUser\AppData\Local	emp
2013-02-01 14:53 . 2013-02-01 14:53	--------	d-----w-	c:\users\Default\AppData\Local	emp
2013-02-01 12:13 . 2013-02-01 12:13	--------	d-----w-	C:\6a8dec8b9a839b3d4a22c6
2013-02-01 10:43 . 2013-02-01 10:43	--------	d-----w-	C:\40e0f483b86a6c2cb0
2013-02-01 09:11 . 2013-01-18 11:15	9161176	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{818B621F-9662-4FB0-9454-49D3D7DF8C19}\mpengine.dll
2013-01-31 18:21 . 2013-01-31 18:50	--------	d-----w-	c:\users\Pierre\Doctor Web
2013-01-31 12:00 . 2013-01-31 17:49	--------	d-----w-	C:\UsbFix
2013-01-25 20:54 . 2013-01-25 20:54	283200	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2013-01-25 20:54 . 2013-01-25 20:54	--------	d-----w-	c:\program files (x86)\DAEMON Tools Lite
2013-01-15 19:01 . 2013-01-15 19:01	308640	----a-w-	c:\windows\system32\javaws.exe
2013-01-15 19:01 . 2013-01-15 19:01	188832	----a-w-	c:\windows\system32\javaw.exe
2013-01-15 19:01 . 2013-01-15 19:01	188832	----a-w-	c:\windows\system32\java.exe
2013-01-15 19:01 . 2013-01-15 19:01	108448	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2013-01-15 19:01 . 2013-01-15 19:01	--------	d-----w-	c:\program files\Java
2013-01-15 18:58 . 2013-01-15 18:58	--------	d-----w-	c:\users\Pierre\AppData\Local\Programs
2013-01-11 08:46 . 2013-01-11 08:46	--------	d-----w-	c:\program files (x86)\TomTom HOME 2
2013-01-11 08:45 . 2013-01-11 08:45	--------	d-----w-	c:\program files (x86)\TomTom International B.V
2013-01-10 02:05 . 2013-01-10 02:05	--------	d-----w-	c:\windows\PCHEALTH
2013-01-09 18:58 . 2013-01-09 18:58	--------	d-----w-	c:\programdata\TomTom
2013-01-09 18:55 . 2013-01-09 18:55	--------	d-----w-	c:\users\Pierre\AppData\Roaming\TomTom
2013-01-09 18:55 . 2013-01-09 18:55	--------	d-----w-	c:\users\Pierre\AppData\Local\TomTom
2013-01-09 18:52 . 2013-01-09 18:52	--------	d-----w-	c:\users\Pierre\AppData\Local\Downloaded Installations
2013-01-09 18:39 . 2012-11-30 05:45	362496	----a-w-	c:\windows\system32\wow64win.dll
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-17 00:28 . 2011-05-12 18:55	273840	------w-	c:\windows\system32\MpSigStub.exe
2013-01-15 19:01 . 2012-02-02 17:40	1081760	----a-w-	c:\windows\system32
pdeployJava1.dll
2013-01-15 19:01 . 2011-05-07 10:42	960416	----a-w-	c:\windows\system32\deployJava1.dll
2013-01-10 02:02 . 2011-05-12 17:11	67599240	----a-w-	c:\windows\system32\MRT.exe
2013-01-08 20:55 . 2012-04-08 12:08	697864	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-01-08 20:55 . 2011-05-13 09:27	74248	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-16 17:11 . 2012-12-22 02:00	46080	----a-w-	c:\windows\system32\atmlib.dll
2012-12-16 14:45 . 2012-12-22 02:00	367616	----a-w-	c:\windows\system32\atmfd.dll
2012-12-16 14:13 . 2012-12-22 02:00	295424	----a-w-	c:\windows\SysWow64\atmfd.dll
2012-12-16 14:13 . 2012-12-22 02:00	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2012-12-14 15:49 . 2012-05-31 06:37	24176	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-11-30 04:45 . 2013-01-09 18:39	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2012-11-14 07:06 . 2012-12-13 02:01	17811968	----a-w-	c:\windows\system32\mshtml.dll
2012-11-14 06:32 . 2012-12-13 02:01	10925568	----a-w-	c:\windows\system32\ieframe.dll
2012-11-14 06:11 . 2012-12-13 02:01	2312704	----a-w-	c:\windows\system32\jscript9.dll
2012-11-14 06:04 . 2012-12-13 02:01	1346048	----a-w-	c:\windows\system32\urlmon.dll
2012-11-14 06:04 . 2012-12-13 02:01	1392128	----a-w-	c:\windows\system32\wininet.dll
2012-11-14 06:02 . 2012-12-13 02:01	1494528	----a-w-	c:\windows\system32\inetcpl.cpl
2012-11-14 06:02 . 2012-12-13 02:01	237056	----a-w-	c:\windows\system32\url.dll
2012-11-14 05:59 . 2012-12-13 02:01	85504	----a-w-	c:\windows\system32\jsproxy.dll
2012-11-14 05:58 . 2012-12-13 02:01	816640	----a-w-	c:\windows\system32\jscript.dll
2012-11-14 05:57 . 2012-12-13 02:01	599040	----a-w-	c:\windows\system32\vbscript.dll
2012-11-14 05:57 . 2012-12-13 02:01	173056	----a-w-	c:\windows\system32\ieUnatt.exe
2012-11-14 05:55 . 2012-12-13 02:01	2144768	----a-w-	c:\windows\system32\iertutil.dll
2012-11-14 05:55 . 2012-12-13 02:01	729088	----a-w-	c:\windows\system32\msfeeds.dll
2012-11-14 05:53 . 2012-12-13 02:01	96768	----a-w-	c:\windows\system32\mshtmled.dll
2012-11-14 05:52 . 2012-12-13 02:01	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2012-11-14 05:46 . 2012-12-13 02:01	248320	----a-w-	c:\windows\system32\ieui.dll
2012-11-14 02:09 . 2012-12-13 02:01	1800704	----a-w-	c:\windows\SysWow64\jscript9.dll
2012-11-14 01:58 . 2012-12-13 02:01	1427968	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2012-11-14 01:57 . 2012-12-13 02:01	1129472	----a-w-	c:\windows\SysWow64\wininet.dll
2012-11-14 01:49 . 2012-12-13 02:01	142848	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2012-11-14 01:48 . 2012-12-13 02:01	420864	----a-w-	c:\windows\SysWow64\vbscript.dll
2012-11-14 01:44 . 2012-12-13 02:01	2382848	----a-w-	c:\windows\SysWow64\mshtml.tlb
2012-11-09 05:45 . 2012-12-12 09:49	2048	----a-w-	c:\windows\system32	zres.dll
2012-11-09 04:42 . 2012-12-12 09:49	2048	----a-w-	c:\windows\SysWow64	zres.dll
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]
"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2012-02-01 968048]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"razer"="c:\program files (x86)\Razerazerhid.exe" [2005-05-17 147456]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [2011-10-14 559616]
"Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2011-01-13 165184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64
vinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2010-11-11 172632]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS
vstusb.sys [2011-01-31 121960]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers	susbflt.sys [2010-11-20 59392]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-12 1255736]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS
vpciflt.sys [2011-02-19 25960]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [2010-08-20 21616]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-01-25 283200]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2010-11-03 983104]
S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-01-13 705856]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe [2011-02-18 378472]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-12-05 92632]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-11-29 16120]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [2010-12-13 27760]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [2010-11-04 58128]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [2010-10-19 274432]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2010-08-12 175168]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [2010-11-04 59904]
S3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-16 317440]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS
usb3hub.sys [2011-02-10 82432]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS
usb3xhc.sys [2011-02-10 181760]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [2010-07-13 29288]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-11-30 412264]
S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [2010-12-01 42392]
.
.
Contenu du dossier 'Tâches planifiées'
.
2013-02-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 20:55]
.
2013-02-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-26 10:15]
.
2013-02-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-07-26 10:15]
.
2013-02-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2093882097-1864276956-279186977-1001Core.job
- c:\users\Pierre\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23 08:14]
.
2013-02-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2093882097-1864276956-279186977-1001UA.job
- c:\users\Pierre\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-23 08:14]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-12-08 6560360]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-11-30 2186856]
"NVHotkey"="c:\windows\system32
vHotkey.dll" [2011-02-18 312936]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-03-12 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-03-12 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-03-12 418840]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2012-02-01 2195824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32
vinitx.dll
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearchAssistant = hxxp://www.google.fr
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\5whcj52i.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://sports.orange.fr/
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: 2013-01-12 19:39; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Pierre\AppData\Roaming\Mozilla\Firefox\Profiles\5whcj52i.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-Usbfix - c:\usbfix\Un-UsbFix.exe
AddRemove-{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\setup.exe
AddRemove-{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\ClientLP\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2729449 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2737019 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\Windows\system32\Macromed\Flash\FlashUtil64_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\Windows\system32\Macromed\Flash\FlashUtil64_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\Windows\SysWOW64\Macromed\Flash\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
c:\program files (x86)\Dell DataSafe Local Backup\Toaster.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
.
**************************************************************************
.
Heure de fin: 2013-02-01  16:10:13 - La machine a redémarré
ComboFix-quarantined-files.txt  2013-02-01 15:10
ComboFix2.txt  2013-01-31 23:34
.
Avant-CF: 271 492 591 616 octets libres
Après-CF: 271 824 588 800 octets libres
.
- - End Of File - - 5D441EEE26E14CD5263E842258765B17

juju666 · Answer

Voilà drivers samsung yapu :o)

ça a changé quelque chose ?
comment se porte le pc ?

Nark0 · Answer

C'est pareil ...

juju666 · Answer

C'est à y perdre son latin ...

&#9654 Télécharge ici :SEAF.exe de C_XX

&#9654 Lance-le

&#9654 Une fenêtre va s'ouvrir .

&#x25CF Tape samsung dans cette fenêtre 

&#x25CF Dans "[Options des fichiers]", choisis l'option MD5 pour "Calculer le checksum" et coche le bouton radio devant "Informations supplémentaires"

&#x25CF Dans "[Options du registre]", choisis "Chercher également dans le registre"

aide en image

&#9654 Patiente pendant la recherche.

&#9654 Une fenêtre avec un log.txt va s'afficher.

&#9654 Copie/colle ce rapport dans ta prochaine réponse.

Nark0 · Answer

1. ========================= SEAF 1.0.1.0 - C_XX
2. 
3. Commencé à: 17:15:05 le 01/02/2013
4. 
5. Valeur(s) recherchée(s):
6. samsung
7. 
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9. 
10. (!) --- Calcul du Hash "MD5"
11. (!) --- Informations supplémentaires
12. (!) --- Recherche registre
13. 
14. ====== Fichier(s) ======
15. 
16. 
17. "C:\Program Files (x86)\ColorHCFR\Profils_IR\Samsung BDP1000.ihc" [ ARCHIVE | 2 Ko ]
18. TC: 09/07/2011,21:00:54 | TM: 30/01/2008,08:17:28 | DA: 09/07/2011,21:00:54
19. 
20. Hash MD5: 8E7FB7B7820B69389BA18F0B022E855B
21. 
22. 
23. =========================
24. 
25. 
26. "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\MobileContent\Profiles\Samsung.xml" [ ARCHIVE | 2 Ko ]
27. TC: 25/11/2010,07:21:00 | TM: 25/11/2010,07:21:00 | DA: 07/05/2011,12:23:41
28. 
29. Hash MD5: B0AB045939A645EF73A7A2A2E376AE12
30. 
31. 
32. =========================
33. 
34. 
35. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\CHS\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
36. TC: 08/11/2010,23:58:32 | TM: 08/11/2010,23:58:32 | DA: 07/05/2011,12:26:05
37. 
38. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
39. 
40. 
41. =========================
42. 
43. 
44. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\CHT\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
45. TC: 08/11/2010,23:58:32 | TM: 08/11/2010,23:58:32 | DA: 07/05/2011,12:26:05
46. 
47. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
48. 
49. 
50. =========================
51. 
52. 
53. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\DAN\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
54. TC: 08/11/2010,23:58:34 | TM: 08/11/2010,23:58:34 | DA: 07/05/2011,12:26:05
55. 
56. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
57. 
58. 
59. =========================
60. 
61. 
62. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\DEU\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
63. TC: 08/11/2010,23:58:34 | TM: 08/11/2010,23:58:34 | DA: 07/05/2011,12:26:05
64. 
65. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
66. 
67. 
68. =========================
69. 
70. 
71. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\ENU\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
72. TC: 08/11/2010,23:58:36 | TM: 08/11/2010,23:58:36 | DA: 07/05/2011,12:26:05
73. 
74. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
75. 
76. 
77. =========================
78. 
79. 
80. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\ESN\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
81. TC: 08/11/2010,23:58:36 | TM: 08/11/2010,23:58:36 | DA: 07/05/2011,12:26:05
82. 
83. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
84. 
85. 
86. =========================
87. 
88. 
89. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\FRA\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
90. TC: 08/11/2010,23:58:38 | TM: 08/11/2010,23:58:38 | DA: 07/05/2011,12:26:05
91. 
92. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
93. 
94. 
95. =========================
96. 
97. 
98. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\ITA\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
99. TC: 08/11/2010,23:58:38 | TM: 08/11/2010,23:58:38 | DA: 07/05/2011,12:26:05
100. 
101. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
102. 
103. 
104. =========================
105. 
106. 
107. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\JPN\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
108. TC: 08/11/2010,23:58:40 | TM: 08/11/2010,23:58:40 | DA: 07/05/2011,12:26:05
109. 
110. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
111. 
112. 
113. =========================
114. 
115. 
116. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\KOR\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
117. TC: 08/11/2010,23:58:40 | TM: 08/11/2010,23:58:40 | DA: 07/05/2011,12:26:05
118. 
119. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
120. 
121. 
122. =========================
123. 
124. 
125. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\NLD\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
126. TC: 08/11/2010,23:58:40 | TM: 08/11/2010,23:58:40 | DA: 07/05/2011,12:26:05
127. 
128. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
129. 
130. 
131. =========================
132. 
133. 
134. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\NOR\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
135. TC: 08/11/2010,23:58:42 | TM: 08/11/2010,23:58:42 | DA: 07/05/2011,12:26:05
136. 
137. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
138. 
139. 
140. =========================
141. 
142. 
143. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\PLK\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
144. TC: 08/11/2010,23:58:42 | TM: 08/11/2010,23:58:42 | DA: 07/05/2011,12:26:05
145. 
146. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
147. 
148. 
149. =========================
150. 
151. 
152. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\PTB\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
153. TC: 08/11/2010,23:58:42 | TM: 08/11/2010,23:58:42 | DA: 07/05/2011,12:26:05
154. 
155. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
156. 
157. 
158. =========================
159. 
160. 
161. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\RUS\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
162. TC: 08/11/2010,23:58:44 | TM: 08/11/2010,23:58:44 | DA: 07/05/2011,12:26:05
163. 
164. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
165. 
166. 
167. =========================
168. 
169. 
170. "C:\Program Files (x86)\Roxio\OEM\PrintAddon\SVE\prcd_samsung.db" [ ARCHIVE|READONLY | 11 Ko ]
171. TC: 08/11/2010,23:58:44 | TM: 08/11/2010,23:58:44 | DA: 07/05/2011,12:26:05
172. 
173. Hash MD5: B2E22412550A168FC2D0FFD3713EF41B
174. 
175. 
176. =========================
177. 
178. 
179. 
180. ====== Entrée(s) du registre ======
181. 
182. 
183. [HKLM\System\ControlSet001\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{10497b1b-ba51-44e5-8318-a65c837b6661}]
184. DA: 22/01/2012 19:03:57
185. 
186. [HKLM\System\ControlSet001\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{10497b1b-ba51-44e5-8318-a65c837b6661}]
187. DA: 22/01/2012 19:03:57
188. 
189. [HKLM\System\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
190. DA: 22/01/2012 19:03:53
191. 
192. [HKLM\System\ControlSet001\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
193. DA: 22/01/2012 19:03:53
194. 
195. [HKLM\System\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
196. DA: 22/01/2012 19:03:53
197. 
198. [HKLM\System\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
199. DA: 22/01/2012 19:03:53
200. 
201. [HKLM\System\ControlSet001\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
202. DA: 22/01/2012 19:03:57
203. 
204. [HKLM\System\ControlSet001\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
205. DA: 22/01/2012 19:03:57
206. 
207. [HKLM\System\ControlSet001\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
208. DA: 22/01/2012 19:03:57
209. 
210. [HKLM\System\ControlSet001\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
211. DA: 22/01/2012 19:03:57
212. 
213. [HKLM\System\ControlSet001\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
214. DA: 31/01/2012 19:24:00
215. 
216. [HKLM\System\ControlSet001\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
217. DA: 31/01/2012 19:24:00
218. 
219. [HKLM\System\ControlSet001\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_]
220. DA: 31/01/2012 19:24:00
221. 
222. [HKLM\System\ControlSet001\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_]
223. DA: 31/01/2012 19:24:00
224. 
225. [HKLM\System\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#]
226. DA: 31/01/2012 19:24:00
227. 
228. [HKLM\System\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#]
229. DA: 31/01/2012 19:24:00
230. 
231. [HKLM\System\ControlSet001\services\HidIr\Remotes\745a17a0-74d3-11d0-b6fe-00a0c90f57db]
232. "RemoteName"="Samsung MCE remote" (REG_SZ)
233. 
234. [HKLM\System\ControlSet002\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
235. "InfSection"="SAMSUNGWdm.Install.2" (REG_SZ)
236. 
237. [HKLM\System\ControlSet002\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
238. "ProviderName"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
239. 
240. [HKLM\System\ControlSet002\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
241. "DriverDesc"="SAMSUNG Android USB Composite Device" (REG_SZ)
242. 
243. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
244. "FriendlyName"="SAMSUNG Android USB Modem" (REG_SZ)
245. 
246. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
247. "LoggingPath"="C:\Windows\ModemLogs\ModemLog_SAMSUNG Android USB Modem.txt" (REG_SZ)
248. 
249. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
250. "Manufacturer"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
251. 
252. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
253. "Model"="SAMSUNG Android USB Modem" (REG_SZ)
254. 
255. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
256. "InfSection"="SAMSUNG.Install" (REG_SZ)
257. 
258. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
259. "ProviderName"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
260. 
261. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
262. "DriverDesc"="SAMSUNG Android USB Modem" (REG_SZ)
263. 
264. [HKLM\System\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
265. "ResponsesKeyName"="SAMSUNG Android USB Modem::SAMSUNG Electronics Co., Ltd. ::SAMSUNG Electronics Co., Ltd. " (REG_SZ)
266. 
267. [HKLM\System\ControlSet002\Control\Class\{EEC5AD98-8080-425F-922A-DABF3DE3F69A}\0005]
268. "Vendor"="Samsung Electronics Co., Ltd. " (REG_SZ)
269. 
270. [HKLM\System\ControlSet002\Control\Class\{EEC5AD98-8080-425F-922A-DABF3DE3F69A}\0006]
271. "Vendor"="SAMSUNG Electronics Co. Ltd. " (REG_SZ)
272. 
273. [HKLM\System\ControlSet002\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{10497b1b-ba51-44e5-8318-a65c837b6661}]
274. DA: 09/01/2013 19:58:44
275. 
276. [HKLM\System\ControlSet002\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{10497b1b-ba51-44e5-8318-a65c837b6661}]
277. DA: 09/01/2013 19:58:44
278. 
279. [HKLM\System\ControlSet002\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
280. DA: 09/01/2013 19:58:39
281. 
282. [HKLM\System\ControlSet002\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
283. DA: 09/01/2013 19:58:39
284. 
285. [HKLM\System\ControlSet002\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
286. DA: 25/01/2013 21:55:28
287. 
288. [HKLM\System\ControlSet002\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
289. DA: 25/01/2013 21:55:28
290. 
291. [HKLM\System\ControlSet002\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
292. DA: 09/01/2013 19:58:44
293. 
294. [HKLM\System\ControlSet002\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
295. DA: 09/01/2013 19:58:44
296. 
297. [HKLM\System\ControlSet002\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
298. DA: 09/01/2013 19:58:44
299. 
300. [HKLM\System\ControlSet002\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
301. DA: 09/01/2013 19:58:44
302. 
303. [HKLM\System\ControlSet002\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
304. DA: 31/01/2013 12:02:10
305. 
306. [HKLM\System\ControlSet002\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
307. DA: 31/01/2013 12:02:10
308. 
309. [HKLM\System\ControlSet002\Enum\USB\VID_04E8&PID_4F1F\352]
310. "Mfg"="Samsung Electronics Co., Ltd. " (REG_SZ)
311. 
312. [HKLM\System\ControlSet002\Enum\USB\VID_04E8&PID_6601\6&38376e82&0&2]
313. "DeviceDesc"="SAMSUNG Mobile Modem" (REG_SZ)
314. 
315. [HKLM\System\ControlSet002\Enum\USB\VID_04E8&PID_6860\4df16e6b57418fa3]
316. "DeviceDesc"="SAMSUNG_Android" (REG_SZ)
317. 
318. [HKLM\System\ControlSet002\Enum\USB\VID_04E8&PID_6877\10008a140f49]
319. "DeviceDesc"="@oem90.inf,%samsung.cdcbus.desc%;SAMSUNG Android USB Composite Device" (REG_SZ)
320. 
321. [HKLM\System\ControlSet002\Enum\USB\VID_04E8&PID_6877\10008a140f49]
322. "Mfg"="@oem90.inf,%samsung%;SAMSUNG Electronics Co., Ltd. " (REG_SZ)
323. 
324. [HKLM\System\ControlSet002\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
325. "DeviceDesc"="@oem91.inf,%samsung.modem.desc%;SAMSUNG Android USB Modem" (REG_SZ)
326. 
327. [HKLM\System\ControlSet002\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
328. "LocationInformation"="SAMSUNG_Android" (REG_SZ)
329. 
330. [HKLM\System\ControlSet002\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
331. "FriendlyName"="SAMSUNG Android USB Modem" (REG_SZ)
332. 
333. [HKLM\System\ControlSet002\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
334. "Mfg"="@oem91.inf,%samsung%;SAMSUNG Electronics Co., Ltd. " (REG_SZ)
335. 
336. [HKLM\System\ControlSet002\Enum\USB\Vid_04e8&Pid_6877&Mi_02\10008a140f49_02]
337. "LocationInformation"="SAMSUNG_Android" (REG_SZ)
338. 
339. [HKLM\System\ControlSet002\Enum\USB\Vid_04e8&Pid_6877&Mi_02\10008a140f49_02]
340. "Mfg"="SAMSUNG Electronics Co. Ltd. " (REG_SZ)
341. 
342. [HKLM\System\ControlSet002\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_]
343. DA: 31/01/2013 12:02:10
344. 
345. [HKLM\System\ControlSet002\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_]
346. DA: 31/01/2013 12:02:10
347. 
348. [HKLM\System\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#]
349. DA: 31/01/2013 12:02:10
350. 
351. [HKLM\System\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#]
352. DA: 31/01/2013 12:02:10
353. 
354. [HKLM\System\ControlSet002\services\HidIr\Remotes\745a17a0-74d3-11d0-b6fe-00a0c90f57db]
355. "RemoteName"="Samsung MCE remote" (REG_SZ)
356. 
357. [HKLM\System\ControlSet003\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
358. "InfSection"="SAMSUNGWdm.Install.2" (REG_SZ)
359. 
360. [HKLM\System\ControlSet003\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
361. "ProviderName"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
362. 
363. [HKLM\System\ControlSet003\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
364. "DriverDesc"="SAMSUNG Android USB Composite Device" (REG_SZ)
365. 
366. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
367. "FriendlyName"="SAMSUNG Android USB Modem" (REG_SZ)
368. 
369. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
370. "LoggingPath"="C:\Windows\ModemLogs\ModemLog_SAMSUNG Android USB Modem.txt" (REG_SZ)
371. 
372. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
373. "Manufacturer"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
374. 
375. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
376. "Model"="SAMSUNG Android USB Modem" (REG_SZ)
377. 
378. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
379. "InfSection"="SAMSUNG.Install" (REG_SZ)
380. 
381. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
382. "ProviderName"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
383. 
384. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
385. "DriverDesc"="SAMSUNG Android USB Modem" (REG_SZ)
386. 
387. [HKLM\System\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
388. "ResponsesKeyName"="SAMSUNG Android USB Modem::SAMSUNG Electronics Co., Ltd. ::SAMSUNG Electronics Co., Ltd. " (REG_SZ)
389. 
390. [HKLM\System\ControlSet003\Control\Class\{EEC5AD98-8080-425F-922A-DABF3DE3F69A}\0005]
391. "Vendor"="Samsung Electronics Co., Ltd. " (REG_SZ)
392. 
393. [HKLM\System\ControlSet003\Control\Class\{EEC5AD98-8080-425F-922A-DABF3DE3F69A}\0006]
394. "Vendor"="SAMSUNG Electronics Co. Ltd. " (REG_SZ)
395. 
396. [HKLM\System\ControlSet003\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{10497b1b-ba51-44e5-8318-a65c837b6661}]
397. DA: 09/01/2013 19:58:44
398. 
399. [HKLM\System\ControlSet003\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{10497b1b-ba51-44e5-8318-a65c837b6661}]
400. DA: 09/01/2013 19:58:44
401. 
402. [HKLM\System\ControlSet003\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
403. DA: 09/01/2013 19:58:39
404. 
405. [HKLM\System\ControlSet003\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
406. DA: 09/01/2013 19:58:39
407. 
408. [HKLM\System\ControlSet003\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
409. DA: 25/01/2013 21:55:28
410. 
411. [HKLM\System\ControlSet003\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
412. DA: 25/01/2013 21:55:28
413. 
414. [HKLM\System\ControlSet003\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
415. DA: 09/01/2013 19:58:44
416. 
417. [HKLM\System\ControlSet003\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
418. DA: 09/01/2013 19:58:44
419. 
420. [HKLM\System\ControlSet003\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
421. DA: 09/01/2013 19:58:44
422. 
423. [HKLM\System\ControlSet003\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
424. DA: 09/01/2013 19:58:44
425. 
426. [HKLM\System\ControlSet003\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
427. DA: 31/01/2013 12:02:10
428. 
429. [HKLM\System\ControlSet003\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
430. DA: 31/01/2013 12:02:10
431. 
432. [HKLM\System\ControlSet003\Enum\USB\VID_04E8&PID_4F1F\352]
433. "Mfg"="Samsung Electronics Co., Ltd. " (REG_SZ)
434. 
435. [HKLM\System\ControlSet003\Enum\USB\VID_04E8&PID_6601\6&38376e82&0&2]
436. "DeviceDesc"="SAMSUNG Mobile Modem" (REG_SZ)
437. 
438. [HKLM\System\ControlSet003\Enum\USB\VID_04E8&PID_6860\4df16e6b57418fa3]
439. "DeviceDesc"="SAMSUNG_Android" (REG_SZ)
440. 
441. [HKLM\System\ControlSet003\Enum\USB\VID_04E8&PID_6877\10008a140f49]
442. "DeviceDesc"="@oem90.inf,%samsung.cdcbus.desc%;SAMSUNG Android USB Composite Device" (REG_SZ)
443. 
444. [HKLM\System\ControlSet003\Enum\USB\VID_04E8&PID_6877\10008a140f49]
445. "Mfg"="@oem90.inf,%samsung%;SAMSUNG Electronics Co., Ltd. " (REG_SZ)
446. 
447. [HKLM\System\ControlSet003\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
448. "DeviceDesc"="@oem91.inf,%samsung.modem.desc%;SAMSUNG Android USB Modem" (REG_SZ)
449. 
450. [HKLM\System\ControlSet003\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
451. "LocationInformation"="SAMSUNG_Android" (REG_SZ)
452. 
453. [HKLM\System\ControlSet003\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
454. "FriendlyName"="SAMSUNG Android USB Modem" (REG_SZ)
455. 
456. [HKLM\System\ControlSet003\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
457. "Mfg"="@oem91.inf,%samsung%;SAMSUNG Electronics Co., Ltd. " (REG_SZ)
458. 
459. [HKLM\System\ControlSet003\Enum\USB\Vid_04e8&Pid_6877&Mi_02\10008a140f49_02]
460. "LocationInformation"="SAMSUNG_Android" (REG_SZ)
461. 
462. [HKLM\System\ControlSet003\Enum\USB\Vid_04e8&Pid_6877&Mi_02\10008a140f49_02]
463. "Mfg"="SAMSUNG Electronics Co. Ltd. " (REG_SZ)
464. 
465. [HKLM\System\ControlSet003\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_]
466. DA: 31/01/2013 12:02:10
467. 
468. [HKLM\System\ControlSet003\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_]
469. DA: 31/01/2013 12:02:10
470. 
471. [HKLM\System\ControlSet003\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#]
472. DA: 31/01/2013 12:02:10
473. 
474. [HKLM\System\ControlSet003\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#]
475. DA: 31/01/2013 12:02:10
476. 
477. [HKLM\System\ControlSet003\services\HidIr\Remotes\745a17a0-74d3-11d0-b6fe-00a0c90f57db]
478. "RemoteName"="Samsung MCE remote" (REG_SZ)
479. 
480. [HKLM\System\MountedDevices]
481. "\??\Volume{f1f03763-9b05-11e0-bb30-bc7737532978}"="_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}" (REG_BINARY)
482. 
483. [HKLM\System\MountedDevices]
484. "\??\Volume{f1f03767-9b05-11e0-bb30-bc7737532978}"="_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}" (REG_BINARY)
485. 
486. [HKLM\System\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
487. "InfSection"="SAMSUNGWdm.Install.2" (REG_SZ)
488. 
489. [HKLM\System\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
490. "ProviderName"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
491. 
492. [HKLM\System\CurrentControlSet\Control\Class\{36FC9E60-C465-11CF-8056-444553540000}\0016]
493. "DriverDesc"="SAMSUNG Android USB Composite Device" (REG_SZ)
494. 
495. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
496. "FriendlyName"="SAMSUNG Android USB Modem" (REG_SZ)
497. 
498. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
499. "LoggingPath"="C:\Windows\ModemLogs\ModemLog_SAMSUNG Android USB Modem.txt" (REG_SZ)
500. 
501. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
502. "Manufacturer"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
503. 
504. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
505. "Model"="SAMSUNG Android USB Modem" (REG_SZ)
506. 
507. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
508. "InfSection"="SAMSUNG.Install" (REG_SZ)
509. 
510. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
511. "ProviderName"="SAMSUNG Electronics Co., Ltd. " (REG_SZ)
512. 
513. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
514. "DriverDesc"="SAMSUNG Android USB Modem" (REG_SZ)
515. 
516. [HKLM\System\CurrentControlSet\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000]
517. "ResponsesKeyName"="SAMSUNG Android USB Modem::SAMSUNG Electronics Co., Ltd. ::SAMSUNG Electronics Co., Ltd. " (REG_SZ)
518. 
519. [HKLM\System\CurrentControlSet\Control\Class\{EEC5AD98-8080-425F-922A-DABF3DE3F69A}\0005]
520. "Vendor"="Samsung Electronics Co., Ltd. " (REG_SZ)
521. 
522. [HKLM\System\CurrentControlSet\Control\Class\{EEC5AD98-8080-425F-922A-DABF3DE3F69A}\0006]
523. "Vendor"="SAMSUNG Electronics Co. Ltd. " (REG_SZ)
524. 
525. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{10497b1b-ba51-44e5-8318-a65c837b6661}]
526. DA: 09/01/2013 19:58:44
527. 
528. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{10497b1b-ba51-44e5-8318-a65c837b6661}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{10497b1b-ba51-44e5-8318-a65c837b6661}]
529. DA: 09/01/2013 19:58:44
530. 
531. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
532. DA: 09/01/2013 19:58:39
533. 
534. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\##?#USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
535. DA: 09/01/2013 19:58:39
536. 
537. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
538. DA: 25/01/2013 21:55:28
539. 
540. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#{53F56307-B6BF-11D0-94F2-00A0C91EFB8B}#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]
541. DA: 25/01/2013 21:55:28
542. 
543. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
544. DA: 09/01/2013 19:58:44
545. 
546. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{6ac27878-a6fa-4155-ba85-f98f491d4f33}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{6ac27878-a6fa-4155-ba85-f98f491d4f33}]
547. DA: 09/01/2013 19:58:44
548. 
549. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
550. DA: 09/01/2013 19:58:44
551. 
552. [HKLM\System\CurrentControlSet\Control\DeviceClasses\{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}\##?#WpdBusEnumRoot#UMB#2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1##{f33fdc04-d1ac-4e8e-9a30-19bbd4b108ae}]
553. DA: 09/01/2013 19:58:44
554. 
555. [HKLM\System\CurrentControlSet\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_#GT-S8000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
556. DA: 31/01/2013 12:02:10
557. 
558. [HKLM\System\CurrentControlSet\Enum\STORAGE\Volume\_??_USBSTOR#Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_#GT-S8000&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}]
559. DA: 31/01/2013 12:02:10
560. 
561. [HKLM\System\CurrentControlSet\Enum\USB\VID_04E8&PID_4F1F\352]
562. "Mfg"="Samsung Electronics Co., Ltd. " (REG_SZ)
563. 
564. [HKLM\System\CurrentControlSet\Enum\USB\VID_04E8&PID_6601\6&38376e82&0&2]
565. "DeviceDesc"="SAMSUNG Mobile Modem" (REG_SZ)
566. 
567. [HKLM\System\CurrentControlSet\Enum\USB\VID_04E8&PID_6860\4df16e6b57418fa3]
568. "DeviceDesc"="SAMSUNG_Android" (REG_SZ)
569. 
570. [HKLM\System\CurrentControlSet\Enum\USB\VID_04E8&PID_6877\10008a140f49]
571. "DeviceDesc"="@oem90.inf,%samsung.cdcbus.desc%;SAMSUNG Android USB Composite Device" (REG_SZ)
572. 
573. [HKLM\System\CurrentControlSet\Enum\USB\VID_04E8&PID_6877\10008a140f49]
574. "Mfg"="@oem90.inf,%samsung%;SAMSUNG Electronics Co., Ltd. " (REG_SZ)
575. 
576. [HKLM\System\CurrentControlSet\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
577. "DeviceDesc"="@oem91.inf,%samsung.modem.desc%;SAMSUNG Android USB Modem" (REG_SZ)
578. 
579. [HKLM\System\CurrentControlSet\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
580. "LocationInformation"="SAMSUNG_Android" (REG_SZ)
581. 
582. [HKLM\System\CurrentControlSet\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
583. "FriendlyName"="SAMSUNG Android USB Modem" (REG_SZ)
584. 
585. [HKLM\System\CurrentControlSet\Enum\USB\Vid_04e8&Pid_6877&Mi_00\10008a140f49_00]
586. "Mfg"="@oem91.inf,%samsung%;SAMSUNG Electronics Co., Ltd. " (REG_SZ)
587. 
588. [HKLM\System\CurrentControlSet\Enum\USB\Vid_04e8&Pid_6877&Mi_02\10008a140f49_02]
589. "LocationInformation"="SAMSUNG_Android" (REG_SZ)
590. 
591. [HKLM\System\CurrentControlSet\Enum\USB\Vid_04e8&Pid_6877&Mi_02\10008a140f49_02]
592. "Mfg"="SAMSUNG Electronics Co. Ltd. " (REG_SZ)
593. 
594. [HKLM\System\CurrentControlSet\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_MFLASH&Rev_]
595. DA: 31/01/2013 12:02:10
596. 
597. [HKLM\System\CurrentControlSet\Enum\USBSTOR\Disk&Ven_SAMSUNG&Prod_TFLASH&Rev_]
598. DA: 31/01/2013 12:02:10
599. 
600. [HKLM\System\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_MFLASH&REV_#GT-S8000&0#]
601. DA: 31/01/2013 12:02:10
602. 
603. [HKLM\System\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SAMSUNG&PROD_TFLASH&REV_#GT-S8000&1#]
604. DA: 31/01/2013 12:02:10
605. 
606. [HKLM\System\CurrentControlSet\services\HidIr\Remotes\745a17a0-74d3-11d0-b6fe-00a0c90f57db]
607. "RemoteName"="Samsung MCE remote" (REG_SZ)
608. 
609. [HKU\S-1-5-21-2093882097-1864276956-279186977-1001\Software\ImgBurn]
610. "DRIVEOEM_DeviceName_Samsung"="" (REG_SZ)
611. 
612. =========================
613. 
614. Fin à: 17:18:00 le 01/02/2013
615. 386939 Éléments analysés
616. 
617. =========================
618. E.O.F

juju666 · Answer

ça pourrit bien le registre dis donc ...

C'est quoi ton PC ? (Marque et modèle)

Nark0 · Answer

Comme tu dis c'est à ne rien y comprendre !!

C'est un Dell xps L702X

juju666 · Answer

Restaure ton PC à une date ANTÉRIEURE au branchement dudit téléphone Samsung.

Voir : https://www.commentcamarche.net/informatique/windows/147-restaurer-windows-avec-les-points-de-restauration/#restaurer-le-systeme

Nark0 · Answer

Bon je n'ai aucun point de restauration ...

Par contre j'ai fait, à l'achat du pc, un cd(enfin2) de restauration système. Je peux lancer ça. Tu confirmes que je ne vais pas perdre mes données perso ?

juju666 · Answer

Ah, si ...

Nark0 · Answer

Bon ... Formatage et je repars sur de bonne base! Mais on a finalement pas trouvé le problème.

En tout cas merci aux helpeurs qui donnent de leur temps!!

juju666 · Answer

Bah écoute on a viré les drivers samsung, après je vois pas ce qu'on aurait pu faire de plus.
De plus Antivir déconnait grave.
Je te conseille Avast ;)

Nark0 · Answer

Je suis bien d'accord, je ne voyais pas ce que l'on pouvait faire de plus, c'est pour ça que le formatage s'imposait! J'IMAGINE que le système était "touché".

Et d'ailleurs, je te remercie encore pour ton aide, et les autres pour l'aide que j'ai toujours reçu ici!

Pour avast, les uns conseillent celui-ci, les autres celui-là, cela fait des années que j'utilise antivir sans souci majeur, donc je pense lui rester fidèle... jusqu'au prochain problème!

Nark0 · Answer

Ok je viens de lire quelques sujets là dessus, je comprend le point de vue. Je vais creuser un peu.

En même temps, c'est la première fois que j'ai un souci avec cet ordi, donc on ne se soucis pas forcement de l'antivirus quand tout va bien!

Nark0 · Answer

Petite question naïve:

Dans mon cas, il semble que j'ai été infecté par le téléphone d'un pote.

Quel logiciel aurait pu stopper cela? un pare feu ? ou la vigilance de mon ami ?

juju666 · Answer

Non, pas infecté.
Il a mis le bazar dans l'ordi mais de quelle manière ... ?