PC avec pic de lenteur windows 7

Résolu
Elydja Messages postés 60 Statut Membre -  
Elydja Messages postés 60 Statut Membre -
Bonjour,

j'espere etre assez clair dans la description de mon probleme que je vais faire .

Depuis aujourd'hui mon PC devient de plus en plus lent et au bout de quelques minutes redevient normal pour ensuite redevenir lent comme si un programme tirer sur toute la memoire mais pas du tout car j'ai rajouter 2x2Go il y a 2 semaines sans aucun soucis jusqu'ici. Donc un total de 8 Go avec 2Go d'utilisé.
Grace a LEXUS je peux voir que le CPu est utilisé a prés de 40 % au moments du maxi lagg ... Hier soir je jouais encore en ligne sans probleme et la meme au demarage et extinction pareil trés lent .

3 réponses

  1. GhostRider77 Messages postés 2 Date d'inscription   Statut Membre Dernière intervention  
     
    Faites-vous régulièrement des nettoyages de disque et des défragmentations. En ce qui concerne le nettoyage je vous conseille d'essayer Ccleaner que j'utilise régulièrement.
    0
  2. Elydja Messages postés 60 Statut Membre
     
    oui tout les 2 a 3 semaines ccleaner + tuneup utilities ...
    0
    1. Elydja Messages postés 60 Statut Membre
       
      Je sais pas si ca peut aider mais voici le rapport de combofix ..




      ComboFix 13-03-14.02 - Kris 14/03/2013 15:11:59.1.4 - x64
      Microsoft Windows 7 Édition Intégrale 6.1.7601.1.1252.33.1033.18.7671.4573 [GMT 1:00]
      Lancé depuis: c:\users\Kris\Desktop\combofix.exe
      SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      .
      .
      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      C:\install.exe
      c:\program files (x86)\Vid-Saver
      c:\program files (x86)\Vid-Saver\Uninstall.exe
      c:\program files (x86)\Vid-Saver\Vid-Saver.dll
      c:\program files (x86)\Vid-Saver\Vid-Saver.exe
      c:\program files (x86)\Vid-Saver\Vid-Saver.ico
      c:\program files (x86)\Vid-Saver\Vid-Saver.ini
      c:\program files (x86)\Vid-Saver\Vid-SaverGui.exe
      c:\program files (x86)\Vid-Saver\Vid-SaverInstaller.log
      c:\programdata\ntuser.dat
      c:\users\Kris\AppData\Local\22find_B_mib_br_201322215041.exe
      c:\users\Kris\AppData\Local\Desk365-1.3.12.4557.exe
      c:\users\Kris\AppData\Local\Vid-Saver
      c:\users\Kris\AppData\Local\Vid-Saver\Chrome\Vid-Saver.crx
      c:\users\Kris\AppData\Roaming\CheckRun22find.exe
      c:\users\Kris\AppData\Roaming\eoRezo
      c:\users\Kris\AppData\Roaming\eoRezo\cache
      c:\users\Kris\AppData\Roaming\eoRezo\cmhost.cyp
      c:\users\Kris\AppData\Roaming\eoRezo\ConfMedia.cyp
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather.cfg
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\EoWeather.cfg
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\EoWeatherVal_02EC282.cfg
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\67_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\67_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\69_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\69_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\70_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\70_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\78_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\78_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\82_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\82_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\83_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\83_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\84_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\84_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\85_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\85_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\89_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\89_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\back.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\background.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\background_1.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\background_1days.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\background_2days.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\background_7days.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\backPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\band.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\band_small.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\close.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\closePressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\dayPrevisionBackground.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\dayPrevisionClose.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\earth.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\fonds_écran.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\help.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\helpPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\minimise.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\minimisePressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\next.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\nextPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\option.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\optionPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\reflet_ecran.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\small_background.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_classic\Thumbs.db
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\67_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\67_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\69_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\69_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\70_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\70_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\78_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\78_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\82_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\82_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\83_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\83_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\84_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\84_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\85_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\85_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\89_day.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\89_night.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\about.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\back.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\background.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\background_1.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\background_1days.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\background_2days.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\background_7days.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\backPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\close.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\closePressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\dayPrevisionBackground.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\dayPrevisionClose.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\earth.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\fonds_écran.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\help.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\helpPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\minimise.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\minimisePressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\next.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\nextPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\option.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\optionPressed.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\reflet_ecran.png
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\Thumbs.db
      c:\users\Kris\AppData\Roaming\eoRezo\EoWeather\images_station_meteo\txt_14x13.png
      c:\users\Kris\AppData\Roaming\eoRezo\host.cyp
      c:\users\Kris\AppData\Roaming\eoRezo\towns.cfg
      c:\users\Kris\AppData\Roaming\eoRezo\user.cyp
      c:\users\Kris\AppData\Roaming\logs.dat
      c:\windows\SysWow64\Temp
      c:\windows\SysWow64\URTTemp
      c:\windows\SysWow64\URTTemp\regtlib.exe
      .
      .
      ((((((((((((((((((((((((((((( Fichiers créés du 2013-02-14 au 2013-03-14 ))))))))))))))))))))))))))))))))))))
      .
      .
      2013-03-14 14:28 . 2013-03-14 14:28 -------- d-----w- c:\users\Default\AppData\Local\temp
      2013-03-14 14:03 . 2013-03-14 14:11 -------- d-----w- c:\users\Kris\AppData\Roaming\Desk 365
      2013-03-14 14:03 . 2013-03-14 14:10 -------- d-----w- c:\program files (x86)\Desk 365
      2013-03-14 14:03 . 2013-03-14 14:03 -------- d-----w- C:\User Data
      2013-03-14 14:02 . 2013-03-14 14:03 -------- d-----w- c:\users\Kris\chat-land
      2013-03-14 13:05 . 2013-03-14 14:11 -------- d-----w- c:\programdata\Spybot - Search & Destroy
      2013-03-14 13:05 . 2009-01-25 11:14 17272 ----a-w- c:\windows\system32\sdnclean64.exe
      2013-03-14 13:04 . 2013-03-14 13:05 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
      2013-03-14 12:12 . 2013-03-14 12:12 -------- d-----w- C:\VundoFix Backups
      2013-03-13 19:50 . 2013-03-13 19:50 -------- d-----w- c:\program files\Microsoft Silverlight
      2013-03-13 19:50 . 2013-03-13 19:50 -------- d-----w- c:\program files (x86)\Microsoft Silverlight
      2013-03-13 11:01 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{39F2603F-ED58-4F19-AD55-D9343B4E6580}\mpengine.dll
      2013-03-12 05:46 . 2012-11-28 11:34 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{22DF0857-5E4F-4FAA-820E-8243BABA7220}\gapaengine.dll
      2013-03-12 05:46 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
      2013-03-04 11:28 . 2012-06-09 18:21 178688 ----a-w- c:\windows\SysWow64\unrar.dll
      2013-03-04 11:27 . 2013-03-04 11:27 -------- d-----w- c:\users\Kris\AppData\Local\Programs
      2013-03-01 12:18 . 2013-03-01 12:18 -------- d-----w- c:\program files\Microsoft Mouse and Keyboard Center
      2013-02-28 18:18 . 2013-02-28 18:18 -------- d-----w- c:\windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
      2013-02-28 18:17 . 2013-02-28 18:17 -------- d-----w- c:\users\Kris\AppData\Local\Quadriga Games
      2013-02-20 07:41 . 2013-02-20 07:41 -------- d-----w- c:\programdata\REVOLT
      2013-02-16 07:37 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
      2013-02-16 07:37 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
      2013-02-15 22:31 . 2013-02-15 22:31 186432 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
      2013-02-15 07:28 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
      2013-02-15 07:28 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
      2013-02-15 07:28 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
      2013-02-15 07:28 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys
      2013-02-15 07:27 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll
      2013-02-15 07:27 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll
      2013-02-15 07:27 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe
      2013-02-15 07:27 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe
      2013-02-15 07:27 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
      2013-02-15 07:27 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe
      2013-02-15 07:27 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
      2013-02-15 07:27 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
      .
      .
      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2013-03-14 11:48 . 2011-05-06 12:08 25640 ----a-w- c:\windows\gdrv.sys
      2013-03-13 19:53 . 2011-05-12 18:50 72013344 ----a-w- c:\windows\system32\MRT.exe
      2013-03-13 12:06 . 2012-04-02 10:01 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
      2013-03-13 12:06 . 2011-05-13 16:38 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
      2013-02-12 05:45 . 2013-03-13 10:59 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
      2013-02-12 05:45 . 2013-03-13 10:59 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
      2013-02-12 05:45 . 2013-03-13 10:59 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
      2013-02-12 05:45 . 2013-03-13 10:59 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
      2013-02-12 04:48 . 2013-03-13 10:59 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll
      2013-02-12 04:48 . 2013-03-13 10:59 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
      2013-01-30 10:53 . 2011-05-06 12:20 273840 ------w- c:\windows\system32\MpSigStub.exe
      2013-01-29 17:15 . 2013-01-29 17:15 862664 ----a-w- c:\windows\SysWow64\msvcr110.dll
      2013-01-29 17:15 . 2013-01-29 17:15 828872 ----a-w- c:\windows\system32\msvcr110.dll
      2013-01-29 17:15 . 2013-01-29 17:15 661448 ----a-w- c:\windows\system32\msvcp110.dll
      2013-01-29 17:15 . 2013-01-29 17:15 534480 ----a-w- c:\windows\SysWow64\msvcp110.dll
      2013-01-29 17:15 . 2013-01-29 17:15 354264 ----a-w- c:\windows\system32\vccorlib110.dll
      2013-01-29 17:15 . 2013-01-29 17:15 251864 ----a-w- c:\windows\SysWow64\vccorlib110.dll
      2013-01-29 17:15 . 2013-01-29 17:15 50800 ----a-w- c:\windows\system32\drivers\point64.sys
      2013-01-24 09:32 . 2013-01-24 09:32 2177648 ----a-w- c:\windows\system32\coin93.dll
      2013-01-23 13:02 . 2011-10-27 12:48 282696 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
      2013-01-23 13:02 . 2011-10-23 11:06 282696 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
      2013-01-22 11:32 . 2011-10-23 11:06 282696 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
      2013-01-20 14:59 . 2013-01-20 14:59 230320 ----a-w- c:\windows\system32\drivers\MpFilter.sys
      2013-01-20 14:59 . 2012-08-30 20:03 130008 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
      2013-01-19 16:52 . 2011-10-23 11:06 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe
      2013-01-04 04:43 . 2013-02-15 07:27 44032 ----a-w- c:\windows\apppatch\acwow64.dll
      2012-12-28 18:38 . 2011-06-10 23:58 774664 ----a-w- c:\windows\SysWow64\msvcr100.dll
      2012-12-28 18:38 . 2011-06-10 23:58 421896 ----a-w- c:\windows\SysWow64\msvcp100.dll
      2012-12-19 20:50 . 2012-12-19 20:50 5630200 ----a-w- c:\windows\SysWow64\atiumdag.dll
      2012-12-19 20:48 . 2012-12-19 20:48 11278336 ----a-w- c:\windows\system32\drivers\atikmdag.sys
      2012-12-19 20:29 . 2012-12-19 20:29 23461376 ----a-w- c:\windows\system32\atio6axx.dll
      2012-12-19 20:22 . 2012-12-19 20:22 70144 ----a-w- c:\windows\system32\coinst_9.012.dll
      2012-12-19 20:19 . 2012-12-19 20:19 163840 ----a-w- c:\windows\system32\atiapfxx.exe
      2012-12-19 20:18 . 2012-12-19 20:18 51200 ----a-w- c:\windows\system32\aticalrt64.dll
      2012-12-19 20:18 . 2012-12-19 20:18 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
      2012-12-19 20:17 . 2012-12-19 20:17 44544 ----a-w- c:\windows\system32\aticalcl64.dll
      2012-12-19 20:17 . 2012-12-19 20:17 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
      2012-12-19 20:17 . 2012-12-19 20:17 16082944 ----a-w- c:\windows\system32\aticaldd64.dll
      2012-12-19 20:13 . 2012-12-19 20:13 13703168 ----a-w- c:\windows\SysWow64\aticaldd.dll
      2012-12-19 20:12 . 2012-12-19 20:12 18982400 ----a-w- c:\windows\SysWow64\atioglxx.dll
      2012-12-19 20:09 . 2012-12-19 20:09 960512 ----a-w- c:\windows\SysWow64\aticfx32.dll
      2012-12-19 20:08 . 2010-08-26 02:00 1151488 ----a-w- c:\windows\system32\aticfx64.dll
      2012-12-19 20:06 . 2012-12-19 20:06 6681088 ----a-w- c:\windows\SysWow64\atidxx32.dll
      2012-12-19 19:59 . 2012-05-23 01:31 5087744 ----a-w- c:\windows\system32\atiumd6a.dll
      2012-12-19 19:57 . 2012-09-28 01:39 442368 ----a-w- c:\windows\system32\atidemgy.dll
      2012-12-19 19:56 . 2012-12-19 19:56 550912 ----a-w- c:\windows\system32\atieclxx.exe
      2012-12-19 19:56 . 2012-12-19 19:56 240640 ----a-w- c:\windows\system32\atiesrxx.exe
      2012-12-19 19:54 . 2012-12-19 19:54 120320 ----a-w- c:\windows\system32\atitmm64.dll
      2012-12-19 19:54 . 2012-12-19 19:54 21504 ----a-w- c:\windows\system32\atimuixx.dll
      2012-12-19 19:54 . 2012-12-19 19:54 59392 ----a-w- c:\windows\system32\atiedu64.dll
      2012-12-19 19:54 . 2012-12-19 19:54 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
      2012-12-19 19:49 . 2011-05-25 03:52 7370752 ----a-w- c:\windows\system32\atidxx64.dll
      2012-12-19 19:44 . 2012-12-19 19:44 4162048 ----a-w- c:\windows\SysWow64\atiumdva.dll
      2012-12-19 19:44 . 2012-05-23 01:19 6786560 ----a-w- c:\windows\system32\atiumd64.dll
      2012-12-19 19:33 . 2012-12-19 19:33 56320 ----a-w- c:\windows\system32\atimpc64.dll
      2012-12-19 19:33 . 2012-12-19 19:33 56320 ----a-w- c:\windows\system32\amdpcom64.dll
      2012-12-19 19:33 . 2012-06-11 16:27 619008 ----a-w- c:\windows\system32\atiadlxx.dll
      2012-12-19 19:33 . 2012-12-19 19:33 56832 ----a-w- c:\windows\SysWow64\atimpc32.dll
      2012-12-19 19:33 . 2012-12-19 19:33 56832 ----a-w- c:\windows\SysWow64\amdpcom32.dll
      2012-12-19 19:33 . 2012-12-19 19:33 421888 ----a-w- c:\windows\SysWow64\atiadlxy.dll
      2012-12-19 19:33 . 2012-12-19 19:33 17920 ----a-w- c:\windows\system32\atig6pxx.dll
      2012-12-19 19:33 . 2012-12-19 19:33 14848 ----a-w- c:\windows\SysWow64\atiglpxx.dll
      2012-12-19 19:33 . 2012-12-19 19:33 14848 ----a-w- c:\windows\system32\atiglpxx.dll
      2012-12-19 19:33 . 2012-12-19 19:33 41984 ----a-w- c:\windows\system32\atig6txx.dll
      2012-12-19 19:33 . 2012-12-19 19:33 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll
      2012-12-19 19:32 . 2012-12-19 19:32 552960 ----a-w- c:\windows\system32\drivers\atikmpag.sys
      2012-12-19 19:31 . 2011-11-10 02:11 130048 ----a-w- c:\windows\system32\atiuxp64.dll
      2012-12-19 19:31 . 2012-12-19 19:31 109568 ----a-w- c:\windows\SysWow64\atiuxpag.dll
      2012-12-19 19:31 . 2012-05-23 01:07 104448 ----a-w- c:\windows\system32\atiu9p64.dll
      2012-12-19 19:30 . 2012-12-19 19:30 83968 ----a-w- c:\windows\SysWow64\atiu9pag.dll
      2012-12-19 19:30 . 2012-12-19 19:30 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
      2012-12-19 14:45 . 2012-12-19 14:45 222720 ----a-w- c:\windows\system32\clinfo.exe
      2012-12-19 14:44 . 2012-12-19 14:44 76288 ----a-w- c:\windows\system32\OpenVideo64.dll
      2012-12-19 14:44 . 2012-12-19 14:44 65536 ----a-w- c:\windows\SysWow64\OpenVideo.dll
      2012-12-19 14:44 . 2012-12-19 14:44 64000 ----a-w- c:\windows\system32\OVDecode64.dll
      2012-12-19 14:44 . 2012-12-19 14:44 56320 ----a-w- c:\windows\SysWow64\OVDecode.dll
      2012-12-19 14:44 . 2012-12-19 14:44 34518016 ----a-w- c:\windows\system32\amdocl64.dll
      2012-12-19 14:38 . 2012-12-19 14:38 28732928 ----a-w- c:\windows\SysWow64\amdocl.dll
      2012-12-19 14:34 . 2012-12-19 14:34 54784 ----a-w- c:\windows\system32\OpenCL.dll
      2012-12-19 14:34 . 2012-12-19 14:34 50176 ----a-w- c:\windows\SysWow64\OpenCL.dll
      2012-12-16 17:11 . 2012-12-21 11:07 46080 ----a-w- c:\windows\system32\atmlib.dll
      2012-12-16 14:45 . 2012-12-21 11:07 367616 ----a-w- c:\windows\system32\atmfd.dll
      2012-12-16 14:13 . 2012-12-21 11:07 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
      2012-12-16 14:13 . 2012-12-21 11:07 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
      .
      [code]<pre>
      c:\windows\Setup\scripts\7z 4.65 x64 Silent .exe
      </pre>/code
      .
      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
      2012-12-12 20:14 198072 ----a-w- c:\program files (x86)\Yontoo\YontooIEClient.dll
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
      @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 129272 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
      @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 129272 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
      @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 129272 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
      @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 129272 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
      .
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2011-01-15 1475584]
      "NeXuS"="c:\program files (x86)\Winstep\Nexus.exe" [2012-03-28 16957056]
      "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-05-06 39408]
      "HydraVisionDesktopManager"="c:\program files (x86)\ATI Technologies\HydraVision\HydraDM.exe" [2012-01-02 393216]
      "Desk 365"="c:\program files (x86)\Desk 365\desk365.exe" [2012-12-28 484872]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
      "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-09-16 115048]
      "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
      "<NO NAME>"="" [N/A]
      "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-12-19 642808]
      "SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2012-11-13 3825176]
      "CheckRun22find_uninstaller"="c:\users\Kris\AppData\Roaming\CheckRun22find.exe" [N/A]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "ConsentPromptBehaviorAdmin"= 0 (0x0)
      "ConsentPromptBehaviorUser"= 0 (0x0)
      "EnableInstallerDetection"= 0 (0x0)
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
      BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
      @="Service"
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
      "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
      "ISUSScheduler"="c:\program files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
      "HP Software Update"=c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe
      "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
      .
      R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
      R2 supdate;Software Update Service (supdate);c:\program files (x86)\Software\Update\SoftwareUpdate.exe [x]
      R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
      R3 BVRPMPR5a64;BVRPMPR5a64 NDIS Protocol Driver;c:\windows\system32\drivers\BVRPMPR5a64.SYS [2010-01-06 35840]
      R3 dmvsc;dmvsc;c:\windows\system32\DRIVERS\dmvsc.sys [2011-01-15 71168]
      R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files\ma-config.com\Drivers\driverhardwarev2x64.sys [2011-07-21 16640]
      R3 etdrv;etdrv;c:\windows\etdrv.sys [2011-05-16 25640]
      R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys [2011-07-11 30528]
      R3 JLTECH0227;Dual Mode Camera;c:\windows\system32\Drivers\jl2005c.sys [x]
      R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\x64\maconfservice.exe [2013-02-05 428928]
      R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2010-04-14 11776]
      R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2011-01-15 20992]
      R3 RTL8192cu;NETGEAR WNA1000M N150 Wireless USB Micro Adapter;c:\windows\system32\DRIVERS\WNA1000M.sys [x]
      R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [2011-01-15 88960]
      R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\DRIVERS\terminpt.sys [2011-01-15 34816]
      R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2011-01-15 59392]
      R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\DRIVERS\TsUsbGD.sys [2011-01-15 31232]
      R3 tsusbhub;tsusbhub;tsusbhub [x]
      S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 21544]
      S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-12-19 240640]
      S2 DES2 Service;DES2 Service for Energy Saving.;c:\program files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2009-06-17 68136]
      S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
      S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
      S2 Smart TimeLock;Smart TimeLock Service;c:\program files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
      S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
      S3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
      S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2012-05-10 97792]
      S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2012-05-10 217600]
      S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys [2013-01-29 50800]
      S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-11-23 648808]
      S3 SaiK5A0C;SaiK5A0C;c:\windows\system32\DRIVERS\SaiK5A0C.sys [2009-09-14 159752]
      .
      .
      Contenu du dossier 'Tâches planifiées'
      .
      2013-03-14 c:\windows\Tasks\Adobe Flash Player Updater.job
      - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 12:06]
      .
      2013-03-14 c:\windows\Tasks\AutoKMS.job
      - c:\windows\AutoKMS\AutoKMS.exe [2013-01-30 17:19]
      .
      2013-03-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-06 12:31]
      .
      2013-03-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-06 12:31]
      .
      2013-03-14 c:\windows\Tasks\HP Photo Creations Communicator.job
      - c:\programdata\HP Photo Creations\MessageCheck.exe [2012-04-07 10:28]
      .
      .
      --------- X64 Entries -----------
      .
      .
      [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
      2011-01-15 15:53 444752 ----a-w- c:\windows\System32\mscoree.dll
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
      "{1d09c093-f71e-43c3-b948-19316cbd695e}"= "mscoree.dll" [2011-01-15 444752]
      .
      [HKEY_CLASSES_ROOT\CLSID\{1d09c093-f71e-43c3-b948-19316cbd695e}]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
      @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 162552 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
      @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 162552 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
      @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 162552 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
      @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
      [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
      2012-11-13 23:32 162552 ----a-w- c:\users\Kris\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-09-03 11464296]
      "SaiVolume"="c:\program files\Saitek\CyborgKeyboard\SaiVolume.exe" [2009-09-04 186880]
      "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
      .
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
      UxTuneUp
      .
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
      FontCache
      .
      ------- Examen supplémentaire -------
      .
      uStart Page = hxxp://scruter.net
      uLocal Page = c:\windows\system32\blank.htm
      uDefault_Search_URL = "hxxp://scruter.net/result.php?cx=partner-pub-3128276511037541:8870723493&cof=GIMP:CCCCCC;T:000000;ALC:551a8b;GFNT:B7B7B7;LC:2200cc;BGC:FFFFFF;VLC:551a8b;GALT:008B45;FORID:10;DIV:#FFFFF0;&ie=UTF-8&q={searchTerms}&sa=Rechercher"
      uSearchMigratedDefaultURL = "hxxp://scruter.net/result.php?cx=partner-pub-3128276511037541:8870723493&cof=GIMP:CCCCCC;T:000000;ALC:551a8b;GFNT:B7B7B7;LC:2200cc;BGC:FFFFFF;VLC:551a8b;GALT:008B45;FORID:10;DIV:#FFFFF0;&ie=UTF-8&q={searchTerms}&sa=Rechercher"
      mDefault_Page_URL = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mib&from=mib&uid=SAMSUNGXHD103SJ_S246J9BB208967&ts=1363269831
      mStart Page = hxxp://www.22find.com/newtab?utm_source=b&utm_medium=mib&from=mib&uid=SAMSUNGXHD103SJ_S246J9BB208967&ts=1363269831
      mLocal Page = c:\windows\SysWOW64\blank.htm
      IE: &Envoyer à OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
      IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
      TCP: DhcpNameServer = 10.0.0.1
      TCP: Interfaces\{A1D4FC0B-C813-4FB6-81DC-477A77373123}: NameServer = 8.8.8.8,8.8.4.4
      DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/4.0.1.0/GarminAxControl_32.CAB
      .
      - - - - ORPHELINS SUPPRIMES - - - -
      .
      URLSearchHooks-{05eeb91a-aef7-4f8a-978f-fb83e7b03f8e} - (no file)
      BHO-{11111111-1111-1111-1111-110011341191} - c:\program files (x86)\Vid-Saver\Vid-Saver.dll
      Notify-SDWinLogon - SDWinLogon.dll
      WebBrowser-{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - (no file)
      AddRemove-CheckRun22find_uninstaller - c:\users\Kris\AppData\Roaming\CheckRun22find.exe
      AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
      AddRemove-Vid-Saver - c:\program files (x86)\Vid-Saver\Uninstall.exe
      .
      .
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Winstep Xtreme Service]
      "ImagePath"="c:\program files (x86)\Winstep\WsxService"
      .
      --------------------- CLES DE REGISTRE BLOQUEES ---------------------
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
      @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker5"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Shockwave Flash Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
      @="0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
      @="ShockwaveFlash.ShockwaveFlash.11"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="ShockwaveFlash.ShockwaveFlash"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Macromedia Flash Factory Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
      @="FlashFactory.FlashFactory.1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="FlashFactory.FlashFactory"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker5"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
      @="?????????????????? v1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
      @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
      @="?????????????????? v2"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
      @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
      .
      [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
      @Denied: (A) (Everyone)
      "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
      .
      [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
      @Denied: (A) (Everyone)
      .
      [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
      "Key"="ActionsPane3"
      "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
      @Denied: (Full) (Everyone)
      .
      Heure de fin: 2013-03-14 15:33:21
      ComboFix-quarantined-files.txt 2013-03-14 14:33
      .
      Avant-CF: 135 086 972 928 octets libres
      Après-CF: 134 809 915 392 octets libres
      .
      - - End Of File - - 843D6086B04E63C073A013090ED665BA
      0
  3. Elydja Messages postés 60 Statut Membre
     
    Et voici mon hijackthis je ne comprend vraiment rien ...

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:53:29, on 14/03/2013
    Platform: Unknown Windows (WinNT 6.01.3505 SP1)
    MSIE: Internet Explorer v9.00 (9.00.8112.16470)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Winstep\Nexus.exe
    C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
    C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
    C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = scruter.net
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = "http://scruter.net/result.php?cx=partner-pub-3128276511037541:8870723493&cof=GIMP:CCCCCC;T:000000;ALC:551a8b;GFNT:B7B7B7;LC:2200cc;BGC:FFFFFF;VLC:551a8b;GALT:008B45;FORID:10;DIV:#FFFFF0;&ie=UTF-8&q={searchTerms}&sa=Rechercher"
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.22find.com/newtab?utm_source=b&utm_medium=mib&from=mib&uid=SAMSUNGXHD103SJ_S246J9BB208967&ts=1363269831
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.22find.com/newtab?utm_source=b&utm_medium=mib&from=mib&uid=SAMSUNGXHD103SJ_S246J9BB208967&ts=1363269831
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://scruter.net
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: CrossriderApp0003491 - {11111111-1111-1111-1111-110011341191} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: AVG Do-Not-Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - (no file)
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
    O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
    O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
    O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [NeXuS] C:\Program Files (x86)\Winstep\Nexus.exe autostart
    O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe"
    O4 - HKCU\..\Run: [Desk 365] C:\Program Files (x86)\Desk 365\desk365.exe /autorun
    O4 - Startup: Alertes de surveillance de l'encre - HP Deskjet 3050A J611 series.lnk = ?
    O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
    O9 - Extra button: AVG Do-Not-Track - {DA58ACA7-18A6-403A-93DA-6E4172D43709} - (no file)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O13 - Gopher Prefix:
    O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0.1.0/GarminAxControl_32.CAB
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_2_1_0.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{A1D4FC0B-C813-4FB6-81DC-477A77373123}: NameServer = 8.8.8.8,8.8.4.4
    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
    O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
    O23 - Service: DES2 Service for Energy Saving. (DES2 Service) - Unknown owner - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
    O23 - Service: Desk 365 service (desksvc) - Unknown owner - C:\Program Files (x86)\Desk 365\deskSvc.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\x64\maconfservice.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: Software Update Service (supdate) (supdate) - Unknown owner - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe (file missing)
    O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: Winstep Xtreme Service - Unknown owner - C:\Program.exe (file missing)
    O23 - Service: WlanWpsSvc - Unknown owner - C:\Program Files (x86)\NETGEAR\WNA1000M\WlanWpsSvc.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
    0