Explorateur Windows a cessé de fonctionner en boucle

ShadowLee Messages postés 59 Statut Membre -  
 sevriolain -
Bonjour,

Voilà je sais que ca a était déjà posé et répondu par "jfkpresident" sur un autre poste d'une autre personne mais je ne sais pas si c'est pareil pour moi et je suis comment dire très limite en informatique,

Donc j'ai en boucle le message "Explorateur Windows a cessé de fonctionner" il recherche et relance en boucle environ toutes les 2-5 min,

J'ai fait pas mal de site pour rechercher une solution mais personne donne vraiment de solution concrète seul "jfkpresident" a sus en donner une,

J'espère ne pas vous embêter avec cela,

Merci d'avance.

PS: je suis allé dormir je rentré du boulot je repasse vers 12-13h

63 réponses

  • 1
  • 2
  • 3
  • 4
Résumé de la discussion

Le fil porte sur le message « Explorateur Windows a cessé de fonctionner » qui se produit en boucle 2 à 5 minutes et gêne l’utilisation du système. Des solutions concrètes émergent pour l'Explorateur Windows, réaliser un pré-diagnostic, cliquer sur diag et partager le rapport via un service en ligne, ou supprimer des composants problématiques comme des outils fournis par le constructeur. D'autres réponses évoquent des mesures spécifiques telles que la suppression d'Asus WebStorage pour les ordinateurs Asus, ou des conseils variés, dont certains semblent hors sujet par rapport au problème. En cas de persistance, il peut être utile d’évaluer le contexte matériel et les programmes installés, car les solutions proposées dépendent de l’environnement et peuvent produire des effets.

Bobot (l'IA à votre service)
  1. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    salut

    ca le fait à quel moment specialement ? meme si tu ne fais rien ?
    0
  2. ShadowLee Messages postés 59 Statut Membre
     
    Bonjour ca me le fait à n'importe quel moment toutes les 2 min
    0
  3. ShadowLee Messages postés 59 Statut Membre
     
    salut

    je sais qu'il y a beaucoup de monde mais si quelqu'un pouvais s'occuper de moi avant que je parte au boulot merci
    0
  4. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     

    /!\ ATTENTION SUIVRE A LA LETTRE CES INDICATIONS/!\


    Desactive tes protections : https://forum.pcastuces.com/default.asp

    Télécharge ici : Combofix et enregistre-le sur ton bureau

    renomme combofix en ce que tu veux (important pour contrer certaines infections)

    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."


    sur combofix renommé

    ¤¤¤¤¤¤¤¤¤¤ LAISSE-LE INSTALLER LA CONSOLE DE RECUPERATION S'IL TE LE DEMANDE ¤¤¤¤¤¤¤¤¤¤

    ▶ !!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

    ▶ n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

    ▶▶ Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

    ▶▶▶ Si, après le redémarrage de votre pc par combofix, vous avez des erreurs "Clé marquée pour suppression" ou des soucis de connexion internet, redémarrez à nouveau votre ordinateur

    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. ShadowLee Messages postés 59 Statut Membre
     
    bonsoir,

    ComboFix 13-08-27.02 - yohann 28/08/2013 2:50.1.4 - x86
    Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3031.1218 [GMT 2:00]
    Lancé depuis: c:\users\yohann\Downloads\ComboFix.exe
    AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
    SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Un nouveau point de restauration a été créé
    .
    .
    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\program files\DealPly
    c:\program files\DealPly\DealPlyTune.dll
    c:\windows\system32\Config.ini
    c:\windows\system32\sound
    .
    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2013-07-28 au 2013-08-28 ))))))))))))))))))))))))))))))))))))
    .
    .
    2013-08-28 00:42 . 2013-08-28 00:42 29904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{05C70EE0-CA64-4423-9AA6-BA7369333398}\MpKsl868574da.sys
    2013-08-27 02:09 . 2013-08-27 02:11 -------- d-----w- c:\program files\ZHPDiag
    2013-08-27 02:09 . 2013-08-27 02:11 -------- d-----w- C:\ZHP
    2013-08-26 14:38 . 2013-08-06 07:28 7166848 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{05C70EE0-CA64-4423-9AA6-BA7369333398}\mpengine.dll
    2013-08-26 14:26 . 2013-08-06 07:28 7166848 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2013-08-26 14:08 . 2013-08-27 02:24 -------- d-----w- c:\program files\ma-config.com
    2013-08-26 14:08 . 2013-08-26 14:08 -------- d-----w- c:\programdata\ma-config.com
    2013-08-26 03:35 . 2013-08-26 03:35 -------- d-----w- c:\users\yohann\AppData\Roaming\Malwarebytes
    2013-08-26 03:34 . 2013-08-26 03:34 -------- d-----w- c:\programdata\Malwarebytes
    2013-08-26 03:34 . 2013-08-26 15:25 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2013-08-26 01:23 . 2013-08-26 01:23 -------- d-----w- c:\users\yohann\AppData\Roaming\Systweak
    2013-08-26 01:23 . 2013-08-26 15:25 -------- d-----w- c:\program files\RegClean Pro
    2013-08-22 12:32 . 2013-08-22 12:32 697992 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9C3B02CC-3E8C-4921-8408-7122EF3DBBCF}\gapaengine.dll
    2013-08-18 14:02 . 2013-08-18 14:02 -------- d-----w- c:\programdata\Hi-Rez Studios
    2013-08-13 22:22 . 2013-07-09 04:50 652800 ----a-w- c:\windows\system32\rpcrt4.dll
    2013-08-13 22:22 . 2013-07-09 04:46 1166848 ----a-w- c:\windows\system32\crypt32.dll
    2013-08-13 22:22 . 2013-07-09 04:52 175104 ----a-w- c:\windows\system32\wintrust.dll
    2013-08-13 22:22 . 2013-07-09 04:46 140288 ----a-w- c:\windows\system32\cryptsvc.dll
    2013-08-13 22:22 . 2013-07-09 04:46 103936 ----a-w- c:\windows\system32\cryptnet.dll
    2013-08-13 22:22 . 2013-07-09 05:03 3968960 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2013-08-13 22:22 . 2013-07-09 05:03 3913664 ----a-w- c:\windows\system32\ntoskrnl.exe
    2013-08-13 22:22 . 2013-07-09 04:53 1289096 ----a-w- c:\windows\system32\ntdll.dll
    2013-08-13 22:22 . 2013-07-25 08:57 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL
    2013-08-13 22:22 . 2013-07-06 05:05 1293760 ----a-w- c:\windows\system32\drivers\tcpip.sys
    2013-08-13 22:22 . 2013-07-19 01:41 2048 ----a-w- c:\windows\system32\tzres.dll
    2013-08-13 22:22 . 2013-06-15 03:38 31232 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
    2013-08-10 20:40 . 2013-08-10 20:40 -------- d-----w- c:\users\yohann\AppData\Roaming\Unity
    2013-08-10 20:38 . 2013-08-10 20:38 -------- d-----w- c:\users\yohann\AppData\Local\Unity
    .
    .
    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2013-08-21 13:52 . 2012-04-21 19:10 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2013-08-21 13:52 . 2011-05-28 18:26 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-07-18 17:12 . 2011-08-21 22:33 698504 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
    2013-06-30 10:28 . 2013-06-30 10:28 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
    2013-06-30 10:28 . 2012-07-06 13:26 867240 ----a-w- c:\windows\system32\npdeployJava1.dll
    2013-06-30 10:28 . 2011-09-30 00:14 789416 ----a-w- c:\windows\system32\deployJava1.dll
    2013-06-18 19:50 . 2013-06-18 19:50 211560 ----a-w- c:\windows\system32\drivers\MpFilter.sys
    2013-06-18 19:50 . 2010-10-24 19:25 107392 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
    2013-06-05 03:05 . 2013-07-09 18:20 2347520 ----a-w- c:\windows\system32\win32k.sys
    2013-06-04 04:53 . 2013-07-09 18:20 509440 ----a-w- c:\windows\system32\qedit.dll
    .
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Akamai NetSession Interface"="c:\users\yohann\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-20 995176]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
    WiFi Station N.lnk - c:\program files\Hercules\WiFiStationN\WiFiN.exe -s [2012-6-16 128296]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
    R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
    R3 cpuz135;cpuz135;c:\users\yohann\AppData\Local\Temp\cpuz135\cpuz135_x32.sys [x]
    R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
    R3 jgameenp;jgameenp;c:\users\yohann\AppData\Local\Temp\jgameenp.sys [x]
    R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
    R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 107392]
    R3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-06-20 295376]
    R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2011-05-11 4330168]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-28 1343400]
    S1 MpKsl868574da;MpKsl868574da;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{05C70EE0-CA64-4423-9AA6-BA7369333398}\MpKsl868574da.sys [2013-08-28 29904]
    S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
    S2 HerculesWiFi;HerculesWiFi;c:\windows\system32\\HerculesWiFiService.exe [2010-11-17 53544]
    S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;d:\program files\Hi-Rez Studios\HiPatchService.exe [2013-08-13 9216]
    S2 MaConfigAgent;Ma-Config Agent;c:\program files\ma-config.com\MaConfigAgent.exe [2013-08-22 1783632]
    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
    S2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
    S3 dc3d;Pilote de détection des périphériques Microsoft Hardware;c:\windows\system32\DRIVERS\dc3d.sys [2013-05-06 65200]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
    S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 603240]
    .
    .
    --- Autres Services/Pilotes en mémoire ---
    .
    *NewlyCreated* - MPKSL868574DA
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    Akamai REG_MULTI_SZ Akamai
    .
    Contenu du dossier 'Tâches planifiées'
    .
    2013-08-28 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 13:52]
    .
    .
    ------- Examen supplémentaire -------
    .
    uStart Page = hxxp://www.google.fr/
    uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>
    Trusted Zone: ma-config.com
    Trusted Zone: touslesdrivers.com
    TCP: DhcpNameServer = 80.10.46.232 80.10.46.232
    FF - ProfilePath - c:\users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\7wfkqo5y.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
    FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=3B8E900F-0C47-43BD-B534-7495472AAA6C&apn_ptnrs=&apn_sauid=B3579399-6631-4EBC-ABEA-97AC12313001&apn_dtid=OSJ000&&q=
    FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=110818
    FF - user.js: extensions.BabylonToolbar_i.babExt -
    FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
    FF - user.js: extensions.BabylonToolbar_i.id - 242053690000000000004061868fc9b9
    FF - user.js: extensions.BabylonToolbar_i.hardId - 242053690000000000004061868fc9b9
    FF - user.js: extensions.BabylonToolbar_i.instlDay - 15434
    FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
    FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
    FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1715:49
    FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
    FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
    FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
    FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
    FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9
    FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
    user_pref('extensions.dealply.partner', 'iron');
    user_pref('extensions.dealply.channel', 'iron3');
    user_pref('extensions.dealply.installId', 'v23600246184174247775142012040415501821');
    user_pref('extensions.dealply.installIdSource', 'inst');
    user_pref('extensions.dealply.sampleGroup', '1');
    .
    - - - - ORPHELINS SUPPRIMES - - - -
    .
    URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - c:\program files\Ask.com\GenericAskToolbar.dll
    .
    .
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai]
    "ServiceDll"="c:\program files\common files\akamai/netsession_win_8fa3539.dll"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
    "ImagePath"="c:\windows\system32\GameMon.des -service"
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
    @="?????????????????? v1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
    @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
    @="?????????????????? v2"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
    @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Heure de fin: 2013-08-28 02:59:33
    ComboFix-quarantined-files.txt 2013-08-28 00:59
    .
    Avant-CF: 80 342 302 720 octets libres
    Après-CF: 80 290 832 384 octets libres
    .
    - - End Of File - - B534A390A60A256B847A887A2F3D3B63
    A36C5E4F47E84449FF07ED3517B43A31

    j'espère que ca vous aidera pour info je n'utilise pas d'anti virus
    0
  7. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    desinstalle mcafee security scan plus ca sert à rien
    desinstalle regClean Pro c'est de la daube

    ==

    Télécharge et enregistre (lien direct) http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner ADWCleaner sur ton bureau :

    Lance le,(Pour vista/7/8 => clic droit "executer en tant qu'administrateur") puis clique sur scan

    une fois fait , clique sur nettoyer et poste C:\Adwcleaner[Sx].txt

    ==

    execute ceci :

    http://security-helpzone.com/gen-hackman/tutos-canneds/junkware-removal-tool/

    ¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
    Bientôt désinscrit de Commentcamarche...
    0
  8. ShadowLee Messages postés 59 Statut Membre
     
    premier raport avec adwcleaner:

    # AdwCleaner v3.001 - Rapport créé le 28/08/2013 à 11:55:31
    # Mis à jour le 24/08/2013 par Xplode
    # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (32 bits)
    # Nom d'utilisateur : yohann - YOHANN-PC
    # Exécuté depuis : C:\Users\yohann\Downloads\adwcleaner.exe
    # Option : Nettoyer

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Supprimé : C:\ProgramData\Ask
    Dossier Supprimé : C:\ProgramData\Babylon
    Dossier Supprimé : C:\Users\yohann\AppData\Local\Babylon
    Dossier Supprimé : C:\Users\yohann\AppData\Local\PackageAware
    Dossier Supprimé : C:\Users\yohann\AppData\Roaming\Babylon
    Dossier Supprimé : C:\Users\yohann\AppData\Roaming\Systweak
    Fichier Supprimé : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\9ct7lyzh.Go2-Chloé\searchplugins\Askcom.xml
    Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml
    Fichier Supprimé : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\7wfkqo5y.default\user.js

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
    Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
    Clé Supprimée : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
    Clé Supprimée : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
    Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
    Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65BCD620-07DD-012F-819F-073CF1B8F7C6}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9D5BD211-422C-4164-9298-BB4186A30F31}
    Clé Supprimée : HKCU\Software\1ClickDownload
    Clé Supprimée : HKCU\Software\InstallCore
    Clé Supprimée : HKCU\Software\Softonic
    Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
    Clé Supprimée : HKLM\Software\Babylon

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v10.0.9200.16660

    -\\ Mozilla Firefox v23.0.1 (fr)

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\1s2piaxf.Go2-Gr2\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\1u1lzf05.Go2-Gr3\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\4n0r3d6v.Go2-2\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\54esynjg.Julien\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\7wfkqo5y.default\prefs.js ]

    Ligne Supprimée : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
    Ligne Supprimée : user_pref("browser.search.defaultengine", "Ask.com");
    Ligne Supprimée : user_pref("browser.search.defaultenginename", "Ask.com");
    Ligne Supprimée : user_pref("browser.search.order.1", "Ask.com");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110818");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "242053690000000000004061868fc9b9");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.id", "242053690000000000004061868fc9b9");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15434");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", true);
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110818&babsrc=NT_ss&mntrId=242053690000000000004061868fc9b9");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1715:49:59");
    Ligne Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
    Ligne Supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.babylon.com/?affID=110818&babsrc=KW_ss&mntrId=242053690000000000004061868fc9b9&q=");
    Ligne Supprimée : user_pref("extensions.crossrider.bic", "1367d9ef40c91ae6368548dd816d00c0");
    Ligne Supprimée : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=&locale=&apn_uid=3B8E900F-0C47-43BD-B534-7495472AAA6C&apn_ptnrs=&apn_sauid=B3579399-6631-4EBC-ABEA-97AC12313001&ap[...]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\9ct7lyzh.Go2-Chloé\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\aq89spv9.Go2-Gr4\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\ggo0ufyr.Reroll-dijo\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\kkaefm6k.Kivige\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\o6vsmpok.Go2-Gr1\prefs.js ]

    [ Fichier : C:\Users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\xgdontd1.Go2-Choulee\prefs.js ]

    *************************

    AdwCleaner[R0].txt - [7552 octets] - [28/08/2013 11:54:26]
    AdwCleaner[S0].txt - [7579 octets] - [28/08/2013 11:55:31]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7639 octets] ##########

    2 éme rapport avec JRT

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 5.5.4 (08.22.2013:1)
    OS: Windows 7 Home Premium x86
    Ran by yohann on 28/08/2013 at 12:06:26,69
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    ~~~ Services

    ~~~ Registry Values

    ~~~ Registry Keys

    Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9FF80864-D2BC-4F83-BE76-D78FBBC5EA0C}

    ~~~ Files

    ~~~ Folders

    Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{006C5A04-FCA6-40EA-A69A-CAB1C8B53E26}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{01497B95-A143-4323-A4D8-E3FC6746D1C4}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{01C82F55-2F8D-465D-A5D8-DF4A7329F4B7}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{0303D476-501E-4780-BF80-EFDC3476B374}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{03C34D90-EEC5-4EA3-BF45-4AABAE2DD1D1}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{06D3A9CD-2E5B-45AE-A6C9-E0D692476CD4}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{08387CFE-6C1F-45F5-89FE-96FA9902589C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{0A448237-B32C-4FCB-AFDE-F8DA38DCD1E5}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{0A61C4A7-9480-40DE-90FB-E86A072E3095}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{0D2173E4-2C50-4103-A0D6-794BF4686500}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{0ECE4803-60AD-4620-92A9-75931A938120}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1118343F-24DF-4205-94E6-ABC3D9E61C97}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{11C7ECB7-10ED-4A2D-B275-EE430EFE6703}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{14660B89-C690-4134-907B-5B11F52B814F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{147D6F18-EB4E-4F14-9CBA-C37AE9A5FFB9}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{15E13465-EC35-4B18-8DAC-6B3A8255D24A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1607F6EE-412C-465C-9531-2095DD9279D1}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1683AEAD-BFEF-413B-81D7-CA6F794BDD3E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{17C02344-89A2-44A5-A71F-9FBE552A026F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{17D81FCC-F1F1-4180-857E-63D388F0F27A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{17EC6C4A-F933-4170-8926-62729C10B821}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{19A0CA48-42FD-4A19-8098-EC7E2A99810E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1B2B5177-2DD5-4D47-B1BA-1AA2F49B2E3C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1DE25D80-F9D0-4575-A60D-75F072EA351A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1EEEB31E-A02F-4D12-874B-95B4AE405C09}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1FB95EBC-66C8-4D7B-80D4-16CB1946E99D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{1FBA981D-1134-4D0A-819E-2D68038F10B0}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{20435D63-48B1-473F-9B55-C014CC6198F1}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{245118C4-288B-4EE5-A0CC-E060E3D006F8}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{26417A66-685E-4E80-B55E-67CCB392129A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{265F8C7E-E460-481D-84CB-92F28C9F1700}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{26E86BA9-B2D3-47F5-BFAD-65A39E2B37F9}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{2706FDFF-B10F-4F93-BBD4-341A95D441F3}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{27594B8A-6999-4972-BE0A-4CDD89FD3116}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{27E8FFC5-E1E7-4B32-87B8-EE5A4A320B7C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{2AD46ADB-6A68-431B-98DE-9F9DFA76354A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{2C9FC54F-1FA3-4C2F-92A7-A0D888682EC4}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{2E298428-B982-4278-9EDA-100F2B738B63}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{2E844DC2-FAD6-4908-A7B5-5A780C2F080E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{2EDE8B1F-609E-4896-AE5A-59CBA427ABFD}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{3240FFFB-1086-404E-9F90-8B2BCD430D5A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{33966CDD-D2FD-41F7-8F4A-4BB5B6E4A315}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{351678AE-46F0-475F-8F00-2C3425280767}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{35678574-C096-4120-BD35-5BC68B3FA589}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{36A5D431-734A-4D43-AFC3-E183E4B8F491}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{3719F377-2E64-417A-A094-7FFDAED1EC41}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{39D31C04-28AE-41ED-BBA9-E1697AEC6152}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{3BBB9BEF-4B5D-4B77-ACAD-F269F992AE95}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{3DD68A67-6162-43A7-9E32-8975AB2191AE}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{3E1D4ED5-4555-4E53-B0F3-69E3E3943A7A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{404689C2-8A22-4FDF-B33C-06D6CF393E81}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{40D6EBFF-0120-404D-98DA-6F1CFA2452DA}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{42D0E3C5-4EE5-4E4D-8CF4-1338B0DA661D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{4491C4FF-E8B0-47B3-ADCD-C01F9CA5FE22}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{45C86727-857E-44A4-A5AB-F75A5B4B21C3}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{460188BB-02C1-4A5C-B02F-64E27F07DA97}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{46F9A2A2-0848-49DA-9644-8032778BCAAF}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{47934477-19DE-496E-B17A-44AB7F836E0E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{488217C7-C21D-4CA9-BDF9-8DA3998F401F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{4A640689-9198-4651-A939-6B2F86A115BD}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{4ACC60DA-D0C2-42D8-9B8B-A2724515EC95}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{4AF8E8E9-9A08-47F8-888A-2E960C05F741}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{4AFF9245-BE9B-4C71-99AF-1BDE3B2E8DCE}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{4B32364B-8BA3-4A3E-B4F3-BAE6E4AAB32B}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5105A341-19C1-4C5C-92CC-9A2EAADB4828}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{51396BDA-3076-42DC-974D-F5C861A21488}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5260DD79-B695-4ED0-808B-76149DEC8FBC}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{548811CD-040B-4C8C-9A99-DAAC17CA6FAE}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{562B88C3-FE88-4678-A347-A00625BED231}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5850837A-DA2C-4918-A7BD-37082682894B}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5912D830-2468-4EEE-AA86-E78538C92780}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{59AF876F-FF07-455F-931E-48051A931F31}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5B79FBE0-F0F9-4028-BC19-84CC77B23BD2}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5BFA6A3D-B655-47E0-82C6-4BAD33D480A6}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5C2B4356-1182-4849-821F-C1DB1F73078E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5CE272E4-CA3F-4FB2-8F0C-0DECC3CB7117}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5D45A516-17E9-403E-8D9B-94EDEE24F459}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5D4D218D-1C7F-428E-A8CB-9B0ADA0CB6B5}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5D8C071E-74CD-411B-B301-0834B50014BD}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5DA3EF2E-D928-4C19-A4D2-2326A985F777}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5E01AFB6-6B1F-482A-8698-AEF323F955CD}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{5E98A57D-65FF-4F47-B130-06568F8E95CB}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{6007DCB0-B67E-4FF5-9448-B7FB6979A5ED}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{60F1D814-07E9-4ACF-8DFE-4DF939072E3D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{61AA0661-BEDD-471C-B818-EB2A5EF78D2B}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{64A93172-74FC-44F5-BBC2-32706438DC6E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{671A2365-1C1A-461F-AD5A-D14A87840A9D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{6750A2E2-427B-42DF-BBE3-B2945713293D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{67EE3D9B-3DCE-49B6-B549-0D4858340C42}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{690B8F72-4C2D-442C-B9A0-B7B13AE9A340}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{6A512733-9908-47C5-A350-D713BCEB0250}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{6B47E1AD-56B2-4195-BCBD-B9C6CD9D4542}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{6C1C7EF9-9C2D-4210-88F8-F926565B1260}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{6EBACB11-005D-44B3-BED7-91A87BA19F36}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{6FA0104C-3F45-4F60-A767-715751BEBDAF}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{70EC08B2-5EBB-4A1C-B850-C17D38FF33AA}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{76B095CD-F7F0-45B4-9788-E661DEAF1D34}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7752E499-9A9C-480C-B340-8E9607C483FA}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{780E5F71-4A2C-4770-804F-DFFC06DFBE95}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{790B2756-4F26-4317-AC41-5F9E47459FD3}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{79402BF2-9FAE-4DAB-BA69-4D3AFD45FB3E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7A60AC15-6E06-47B1-8594-AA079649AD1F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7A98E093-ECDE-4C52-A232-4E0E3174E304}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7B574685-F161-41CF-8E51-6446D2DA1592}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7D62AF7F-9D27-4757-B3F3-CA44E7129830}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7D7AEDA9-8245-4052-8FAE-FB6F1178F68C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7E37451F-0BDC-4571-9C11-87F629E3F123}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{7E37602E-AE5A-484D-844F-A1B3D2D8912F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{8151590F-3C9E-4766-8845-B1816E0B04BB}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{83218E4B-85B2-425B-8D6D-DFEE72FC1CF6}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{84095F08-268A-420A-AD37-B3E9D6CBDDAF}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{85EBC4D5-05B4-4EFB-991F-E529903F8A40}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{86499B26-7F8E-45B9-9808-93BD99D1CAE8}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{868A8231-FCA7-45B1-BAE8-38C2F179CB76}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{8951D35F-477C-4CF1-87E6-968689FEA46F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{8C108AC2-30F7-4871-9789-F7B26EF284E5}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{8C9B2B52-F31F-4AE7-8E1C-D3DA9B0A9B45}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{8EF8C05B-97D7-4238-A046-3025BB82BDC6}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{914D2661-FA15-422C-8F37-FC3B3D945626}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{91CA3F52-9BCE-4BA3-8924-89CDDA3F5CD8}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{93B603AA-E11B-4BBC-A4B0-9DA8C5197D3A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{965C589F-9435-4430-9CE5-859CED9C11D4}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{96B67CB5-85DA-47CE-AD5B-6C9A3AE684B9}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{96DA2F5B-13EA-4133-BF7C-04C59DF09C6E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{9A5F1DF8-119C-44C5-B55D-70F6B40F8794}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{9DD32759-78C9-4A18-B8B3-850545CB829A}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{9EBB0F9F-0AAC-4649-8DD9-83CD87B3114F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A2201028-0387-4D9D-98AF-83F58FB033C9}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A266C5A9-F68E-4347-A0D9-E7B61E03D357}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A2ACC89E-B742-42BD-AD5E-03F14ACE028E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A2C59421-63EA-42AD-8F65-73B56C903D17}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A30631E7-1762-44EC-AC26-637E03E7B52F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A48CFD67-EADF-45F4-BA52-BF6D32196BE6}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A6703C0D-C665-4928-AEB4-0EA5D3623E86}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{A72C320E-20C7-4E82-8A75-F5C7602D6FED}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{AA580934-C681-4F98-B23B-C9D8942C914D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{AA7464B2-EF34-47CF-AAE2-99E22B3448B8}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{AB5CB937-8EC2-49A3-99A7-A184298FF82F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{ACA50C33-8B18-4497-8DB6-3CBC167500CE}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{ACA741CE-922C-4CAC-96F0-7C4BDA2DEDEB}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{AF092EF8-0B2F-4A43-9507-215CE58027D6}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{AF60D47B-4808-4D29-9952-EC181BE515AB}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B28F02DB-93C6-4E9C-B75B-F9FD413008B3}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B4AA1AF1-3981-432D-A75A-262DCE1B4ABE}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B6B583D8-9AFD-4A3A-B171-60A16E0AC5CA}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B6DF1834-2418-4C21-B379-BEAAE8E8CD0F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B87EDA29-8C11-41EB-87CF-FD9019DA160E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B8CB0D88-C2FF-40FE-B4C8-B04E63682EFC}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B8E3A221-6831-4711-AAE1-C45434956454}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B921B873-CA56-4DEB-A791-8947508DF652}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{B9A99FFA-C8D4-43B4-B9B1-5D7159D7D3B5}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{BA0DCA16-EF97-4C23-8EBE-1ECE2E626834}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{BB35F7C3-C5CB-4CA1-90C3-70E28991F6B6}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{BC85585E-8902-4738-AB27-E5D76AF015BD}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{BCA15829-50DD-40CC-9400-34DEB7F043DF}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C27346B8-73D1-4716-BCBB-EF94A689503D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C361C18F-83C5-4132-A78D-216B6003DA6F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C38FBB23-3A56-4BF3-AE1D-8D669EDCD16C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C429988B-F28E-4401-9105-C3FBBD1661E0}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C51FA38A-3940-4A39-ABE7-AD74B22C05F5}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C70F3E32-2854-42C6-91C2-5E880EF60BE5}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C7E5320A-EE1F-4A39-87BD-8A27BE0903E4}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C8FE9635-5D67-4BD4-B9AC-A5D3FED6AD2C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{C9F731FE-03DA-47A7-A6B5-0F6C042A7EA2}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{CA1A8F1A-EB9A-4619-AC32-B6D7388010FF}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{CB386B46-EC85-4A0E-B55D-761FD742266C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{CD693232-BE62-444E-953C-64050EAC7A0B}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{CF0159DF-5A0A-48AA-9D09-D6B9D1FF6D0B}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D0A92CD6-389A-4AD3-BAFB-15FBE65F0271}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D0E94C79-880C-48BF-95C7-1593A1EE79B7}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D1946349-325D-4C52-9A38-27A52E0641B0}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D44DC8D1-0075-4325-8571-60F252D5FDF4}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D4A9FB55-4D23-41A3-BCA3-BF67A78CE3D4}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D67E88AE-CE71-4B53-A47E-585DA9E61233}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D6A28BFE-E8A8-4507-A275-69666892EA26}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D6CAEE80-35E5-4C6A-935D-83E3B1FA4DCC}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D74FD6BC-407E-48F2-8E3E-403F765DAD42}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{D7E5D13A-CA41-4C9F-B0EC-76F05BF020D1}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{DA3699A8-0651-427E-858A-CB40ECC79194}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{DBD7B17C-5DC0-4BB0-9036-1D669CDA2A4E}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{DC15BA26-4DF9-4971-A331-BFC4593615D8}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E08B6593-5228-4213-BD74-6E54CF5E69D0}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E18D07FB-90CE-4B99-9D6D-5FEF7D8A4D13}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E3F43CD5-8C00-48F1-AE32-DC0093BA89F1}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E4E91BAB-2384-4EA2-A269-E50453CBFC41}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E593F319-0167-481E-81A1-73B323E54126}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E5EAFD82-E156-409C-A01B-50F51AF58383}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E605ABBA-F4A6-4D18-9BBD-9BBF4579E734}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E64A5CB5-5A20-4E94-BBC6-24E79F52E191}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E7DB18B0-0FA5-4A31-9B79-9DC0732D9238}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E885F776-03B5-4560-ADF7-3B9A72E561B2}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{E97D092E-40A7-4B6A-8B1E-39BED1122E2F}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{ED4DC5C7-74DD-467A-AFEF-D54747419C1C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{EE16D636-B66A-4BD0-845F-E2ED0B25791D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{EE8D50E2-C6E4-435A-A327-1B8A796254D2}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{EECCD779-767E-43F1-8B65-6CCE83A0C653}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{EEFABD54-764F-42FD-B4D0-D418CF22EA2D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{EF11AEA7-3BA7-4168-BE6A-BCF3384FD292}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F0E6A423-E547-4F3D-A3D8-A67055F4E657}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F27D544E-EB2F-4CEC-945E-9DF24E45EEB6}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F3E921AA-E85B-4160-97E1-E1267D3108C7}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F424E045-50FB-4578-B18D-C63D71B5ACE1}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F4F1CFCC-4B7A-4625-8ECB-8F7060CC280D}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F4FD6875-5E72-449B-93BD-065B1F6BAB7C}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F51D6C76-7F17-46EE-A225-59CAB59A46DA}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F75BF43D-1865-4866-A3C8-7B991B9261DC}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F7D87E6F-9044-4B9D-A1DD-87FD6826A908}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F9586B4B-C3B5-4098-A295-F734DC802974}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{F9736631-33B4-43D8-A316-F840AC67EA58}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{FB103DC9-FCBA-4E1B-A6CC-9B763439A4B2}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{FBB39429-60B0-4D1F-ADA4-F9C2EEDDE2F0}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{FD826B84-C96F-43D3-9D6E-551D4B040520}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{FE2074DA-F7B2-4A23-9D1E-14EAB0E6E922}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{FE5BE8E0-C1DD-4F36-8CAC-2D7D4B9BD140}
    Successfully deleted: [Empty Folder] C:\Users\yohann\appdata\local\{FFC13543-42A3-47C9-A08B-DB20330AA922}

    ~~~ FireFox

    Emptied folder: C:\Users\yohann\AppData\Roaming\mozilla\firefox\profiles\7wfkqo5y.default\minidumps [630 files]
    Emptied folder: C:\Users\yohann\AppData\Roaming\mozilla\firefox\profiles\4n0r3d6v.Go2-2\minidumps [79 files]
    Emptied folder: C:\Users\yohann\AppData\Roaming\mozilla\firefox\profiles\xgdontd1.Go2-Choulee\minidumps [43 files]
    Emptied folder: C:\Users\yohann\AppData\Roaming\mozilla\firefox\profiles\o6vsmpok.Go2-Gr1\minidumps [28 files]
    Emptied folder: C:\Users\yohann\AppData\Roaming\mozilla\firefox\profiles\1s2piaxf.Go2-Gr2\minidumps [18 files]

    ~~~ Event Viewer Logs were cleared

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on 28/08/2013 at 12:10:51,46
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    0
  9. ShadowLee Messages postés 59 Statut Membre
     
    j'ai toujours le soucis explorateur windows a cessé de fonctionner

    merci de prendre de ton temps pour m'aider
    0
  10. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    pourquoi t'as pas renommé combofix comme demandé au fait ?
    0
  11. ShadowLee Messages postés 59 Statut Membre
     
    bin parce que je rentre du boulot apré une nuit bien remplis j'ai pas forcément les yeux en face des trous désolé je vais le refaire du coup
    0
  12. ShadowLee Messages postés 59 Statut Membre
     
    ComboFix 13-08-29.01 - yohann 29/08/2013 5:35.2.4 - x86
    Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3031.1995 [GMT 2:00]
    Lancé depuis: c:\users\yohann\Desktop\123.exe
    AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
    SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2013-07-28 au 2013-08-29 ))))))))))))))))))))))))))))))))))))
    .
    .
    2013-08-29 03:40 . 2013-08-29 03:40 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
    2013-08-29 03:40 . 2013-08-29 03:40 -------- d-----w- c:\users\Default\AppData\Local\temp
    2013-08-29 03:30 . 2013-08-29 03:30 -------- d-----w- C:\pourlesite
    2013-08-29 03:28 . 2013-08-29 03:28 29904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{792DEFFC-7449-4685-AE97-496DB8FDC439}\MpKslcf3a1f0a.sys
    2013-08-28 10:06 . 2013-08-28 10:06 -------- d-----w- c:\windows\ERUNT
    2013-08-28 09:54 . 2013-08-28 09:55 -------- d-----w- C:\AdwCleaner
    2013-08-28 09:35 . 2013-08-06 07:28 7166848 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{792DEFFC-7449-4685-AE97-496DB8FDC439}\mpengine.dll
    2013-08-28 01:01 . 2013-08-06 07:28 7166848 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2013-08-28 00:57 . 2013-08-29 03:40 -------- d-----w- c:\users\yohann\AppData\Local\temp
    2013-08-27 02:09 . 2013-08-27 02:11 -------- d-----w- c:\program files\ZHPDiag
    2013-08-27 02:09 . 2013-08-27 02:11 -------- d-----w- C:\ZHP
    2013-08-26 14:08 . 2013-08-27 02:24 -------- d-----w- c:\program files\ma-config.com
    2013-08-26 14:08 . 2013-08-26 14:08 -------- d-----w- c:\programdata\ma-config.com
    2013-08-26 03:35 . 2013-08-26 03:35 -------- d-----w- c:\users\yohann\AppData\Roaming\Malwarebytes
    2013-08-26 03:34 . 2013-08-26 03:34 -------- d-----w- c:\programdata\Malwarebytes
    2013-08-26 03:34 . 2013-08-26 15:25 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2013-08-22 12:32 . 2013-08-22 12:32 697992 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9C3B02CC-3E8C-4921-8408-7122EF3DBBCF}\gapaengine.dll
    2013-08-18 14:02 . 2013-08-18 14:02 -------- d-----w- c:\programdata\Hi-Rez Studios
    2013-08-13 22:22 . 2013-07-09 04:50 652800 ----a-w- c:\windows\system32\rpcrt4.dll
    2013-08-13 22:22 . 2013-07-09 04:46 1166848 ----a-w- c:\windows\system32\crypt32.dll
    2013-08-13 22:22 . 2013-07-09 04:52 175104 ----a-w- c:\windows\system32\wintrust.dll
    2013-08-13 22:22 . 2013-07-09 04:46 140288 ----a-w- c:\windows\system32\cryptsvc.dll
    2013-08-13 22:22 . 2013-07-09 04:46 103936 ----a-w- c:\windows\system32\cryptnet.dll
    2013-08-13 22:22 . 2013-07-09 05:03 3968960 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2013-08-13 22:22 . 2013-07-09 05:03 3913664 ----a-w- c:\windows\system32\ntoskrnl.exe
    2013-08-13 22:22 . 2013-07-09 04:53 1289096 ----a-w- c:\windows\system32\ntdll.dll
    2013-08-13 22:22 . 2013-07-25 08:57 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL
    2013-08-13 22:22 . 2013-07-06 05:05 1293760 ----a-w- c:\windows\system32\drivers\tcpip.sys
    2013-08-13 22:22 . 2013-07-19 01:41 2048 ----a-w- c:\windows\system32\tzres.dll
    2013-08-13 22:22 . 2013-06-15 03:38 31232 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
    2013-08-10 20:40 . 2013-08-10 20:40 -------- d-----w- c:\users\yohann\AppData\Roaming\Unity
    2013-08-10 20:38 . 2013-08-10 20:38 -------- d-----w- c:\users\yohann\AppData\Local\Unity
    .
    .
    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2013-08-21 13:52 . 2012-04-21 19:10 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2013-08-21 13:52 . 2011-05-28 18:26 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-07-18 17:12 . 2011-08-21 22:33 698504 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
    2013-06-30 10:28 . 2013-06-30 10:28 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
    2013-06-30 10:28 . 2012-07-06 13:26 867240 ----a-w- c:\windows\system32\npdeployJava1.dll
    2013-06-30 10:28 . 2011-09-30 00:14 789416 ----a-w- c:\windows\system32\deployJava1.dll
    2013-06-18 19:50 . 2013-06-18 19:50 211560 ----a-w- c:\windows\system32\drivers\MpFilter.sys
    2013-06-18 19:50 . 2010-10-24 19:25 107392 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
    2013-06-05 03:05 . 2013-07-09 18:20 2347520 ----a-w- c:\windows\system32\win32k.sys
    2013-06-04 04:53 . 2013-07-09 18:20 509440 ----a-w- c:\windows\system32\qedit.dll
    .
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Akamai NetSession Interface"="c:\users\yohann\AppData\Local\Akamai\netsession_win.exe" [2013-06-04 4489472]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-20 995176]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    WiFi Station N.lnk - c:\program files\Hercules\WiFiStationN\WiFiN.exe -s [2012-6-16 128296]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
    R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
    R3 cpuz135;cpuz135;c:\users\yohann\AppData\Local\Temp\cpuz135\cpuz135_x32.sys [x]
    R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
    R3 jgameenp;jgameenp;c:\users\yohann\AppData\Local\Temp\jgameenp.sys [x]
    R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 107392]
    R3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-06-20 295376]
    R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2011-05-11 4330168]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-28 1343400]
    S1 MpKslcf3a1f0a;MpKslcf3a1f0a;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{792DEFFC-7449-4685-AE97-496DB8FDC439}\MpKslcf3a1f0a.sys [2013-08-29 29904]
    S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
    S2 HerculesWiFi;HerculesWiFi;c:\windows\system32\\HerculesWiFiService.exe [2010-11-17 53544]
    S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;d:\program files\Hi-Rez Studios\HiPatchService.exe [2013-08-13 9216]
    S2 MaConfigAgent;Ma-Config Agent;c:\program files\ma-config.com\MaConfigAgent.exe [2013-08-22 1783632]
    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
    S2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
    S3 dc3d;Pilote de détection des périphériques Microsoft Hardware;c:\windows\system32\DRIVERS\dc3d.sys [2013-05-06 65200]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
    S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 603240]
    .
    .
    --- Autres Services/Pilotes en mémoire ---
    .
    *NewlyCreated* - MPKSLCF3A1F0A
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    Akamai REG_MULTI_SZ Akamai
    .
    Contenu du dossier 'Tâches planifiées'
    .
    2013-08-29 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 13:52]
    .
    .
    ------- Examen supplémentaire -------
    .
    uStart Page = hxxp://www.google.fr/
    uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>
    Trusted Zone: ma-config.com
    Trusted Zone: touslesdrivers.com
    TCP: DhcpNameServer = 80.10.46.232 80.10.46.232
    FF - ProfilePath - c:\users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\7wfkqo5y.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
    .
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai]
    "ServiceDll"="c:\program files\common files\akamai/netsession_win_8fa3539.dll"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
    "ImagePath"="c:\windows\system32\GameMon.des -service"
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
    @="?????????????????? v1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
    @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
    @="?????????????????? v2"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
    @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Heure de fin: 2013-08-29 05:42:27
    ComboFix-quarantined-files.txt 2013-08-29 03:42
    ComboFix2.txt 2013-08-28 00:59
    .
    Avant-CF: 79 918 047 232 octets libres
    Après-CF: 79 866 372 096 octets libres
    .
    - - End Of File - - 304887C15BDABD0336D6B2E2C9C9B95B
    A36C5E4F47E84449FF07ED3517B43A31
    0
  13. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     

    __________________________________________________
    =>/!\Le script qui suit a été écrit spécialement cet ordinateur/!\ <=
    =>il est fort déconseillé de le transposer sur un autre ordinateur !<=
    ----------------------------------------------------------------------------


    Toujours avec toutes les protections désactivées, fais ceci :

    ▶ Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
    ▶ Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

    ----------------------------------------------------------
    KillAll::

    ClearJavaCache::

    Registry::
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Akamai NetSession Interface"=-

    Driver::
    jgameenp

    DDS::
    uInternet Settings,ProxyOverride = 127.0.0.1:9421;<local>

    RegLock::
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

    ------------------------------------------------------------------

    ▶ Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
    ▶ Quitte le Bloc Notes

    ▶ Fais un glisser/déposer de ce fichier CFScript sur le fichier combofix comme sur cette : illustration

    ▶ Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
    ▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
    ▶ Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

    0
  14. ShadowLee Messages postés 59 Statut Membre
     
    bonjour,

    ComboFix 13-08-29.01 - yohann 29/08/2013 15:36:37.3.4 - x86
    Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3031.1996 [GMT 2:00]
    Lancé depuis: c:\users\yohann\Desktop\123.exe
    Commutateurs utilisés :: c:\users\yohann\Desktop\CFScript.txt
    AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
    SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    -------\Legacy_JGAMEENP
    -------\Service_jgameenp
    .
    .
    ((((((((((((((((((((((((((((( Fichiers créés du 2013-07-28 au 2013-08-29 ))))))))))))))))))))))))))))))))))))
    .
    .
    2013-08-29 13:42 . 2013-08-29 13:42 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
    2013-08-29 13:42 . 2013-08-29 13:42 -------- d-----w- c:\users\Default\AppData\Local\temp
    2013-08-29 12:40 . 2013-08-29 12:40 60872 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5E6CECF7-DFCB-4AE6-959F-F17112E3EE97}\offreg.dll
    2013-08-29 12:40 . 2013-08-29 12:40 29904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5E6CECF7-DFCB-4AE6-959F-F17112E3EE97}\MpKsl4c28ab49.sys
    2013-08-29 12:40 . 2013-08-06 07:28 7166848 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5E6CECF7-DFCB-4AE6-959F-F17112E3EE97}\mpengine.dll
    2013-08-29 03:30 . 2013-08-29 03:30 -------- d-----w- C:\pourlesite
    2013-08-28 10:06 . 2013-08-28 10:06 -------- d-----w- c:\windows\ERUNT
    2013-08-28 09:54 . 2013-08-28 09:55 -------- d-----w- C:\AdwCleaner
    2013-08-28 01:01 . 2013-08-06 07:28 7166848 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
    2013-08-28 00:57 . 2013-08-29 13:44 -------- d-----w- c:\users\yohann\AppData\Local\temp
    2013-08-27 02:09 . 2013-08-27 02:11 -------- d-----w- c:\program files\ZHPDiag
    2013-08-27 02:09 . 2013-08-27 02:11 -------- d-----w- C:\ZHP
    2013-08-26 14:08 . 2013-08-27 02:24 -------- d-----w- c:\program files\ma-config.com
    2013-08-26 14:08 . 2013-08-26 14:08 -------- d-----w- c:\programdata\ma-config.com
    2013-08-26 03:35 . 2013-08-26 03:35 -------- d-----w- c:\users\yohann\AppData\Roaming\Malwarebytes
    2013-08-26 03:34 . 2013-08-26 03:34 -------- d-----w- c:\programdata\Malwarebytes
    2013-08-26 03:34 . 2013-08-26 15:25 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2013-08-22 12:32 . 2013-08-22 12:32 697992 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9C3B02CC-3E8C-4921-8408-7122EF3DBBCF}\gapaengine.dll
    2013-08-18 14:02 . 2013-08-18 14:02 -------- d-----w- c:\programdata\Hi-Rez Studios
    2013-08-13 22:22 . 2013-07-09 04:50 652800 ----a-w- c:\windows\system32\rpcrt4.dll
    2013-08-13 22:22 . 2013-07-09 04:46 1166848 ----a-w- c:\windows\system32\crypt32.dll
    2013-08-13 22:22 . 2013-07-09 04:52 175104 ----a-w- c:\windows\system32\wintrust.dll
    2013-08-13 22:22 . 2013-07-09 04:46 140288 ----a-w- c:\windows\system32\cryptsvc.dll
    2013-08-13 22:22 . 2013-07-09 04:46 103936 ----a-w- c:\windows\system32\cryptnet.dll
    2013-08-13 22:22 . 2013-07-09 05:03 3968960 ----a-w- c:\windows\system32\ntkrnlpa.exe
    2013-08-13 22:22 . 2013-07-09 05:03 3913664 ----a-w- c:\windows\system32\ntoskrnl.exe
    2013-08-13 22:22 . 2013-07-09 04:53 1289096 ----a-w- c:\windows\system32\ntdll.dll
    2013-08-13 22:22 . 2013-07-25 08:57 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL
    2013-08-13 22:22 . 2013-07-06 05:05 1293760 ----a-w- c:\windows\system32\drivers\tcpip.sys
    2013-08-13 22:22 . 2013-07-19 01:41 2048 ----a-w- c:\windows\system32\tzres.dll
    2013-08-13 22:22 . 2013-06-15 03:38 31232 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
    2013-08-10 20:40 . 2013-08-10 20:40 -------- d-----w- c:\users\yohann\AppData\Roaming\Unity
    2013-08-10 20:38 . 2013-08-10 20:38 -------- d-----w- c:\users\yohann\AppData\Local\Unity
    .
    .
    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2013-08-21 13:52 . 2012-04-21 19:10 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
    2013-08-21 13:52 . 2011-05-28 18:26 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2013-07-18 17:12 . 2011-08-21 22:33 698504 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
    2013-06-30 10:28 . 2013-06-30 10:28 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
    2013-06-30 10:28 . 2012-07-06 13:26 867240 ----a-w- c:\windows\system32\npdeployJava1.dll
    2013-06-30 10:28 . 2011-09-30 00:14 789416 ----a-w- c:\windows\system32\deployJava1.dll
    2013-06-18 19:50 . 2013-06-18 19:50 211560 ----a-w- c:\windows\system32\drivers\MpFilter.sys
    2013-06-18 19:50 . 2010-10-24 19:25 107392 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
    2013-06-05 03:05 . 2013-07-09 18:20 2347520 ----a-w- c:\windows\system32\win32k.sys
    2013-06-04 04:53 . 2013-07-09 18:20 509440 ----a-w- c:\windows\system32\qedit.dll
    .
    .
    ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-20 995176]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    WiFi Station N.lnk - c:\program files\Hercules\WiFiStationN\WiFiN.exe -s [2012-6-16 128296]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-06-21 162408]
    R3 cpuz135;cpuz135;c:\users\yohann\AppData\Local\Temp\cpuz135\cpuz135_x32.sys [x]
    R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
    R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 107392]
    R3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe [2013-06-20 295376]
    R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2011-05-11 4330168]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
    R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-28 1343400]
    S1 MpKsl4c28ab49;MpKsl4c28ab49;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5E6CECF7-DFCB-4AE6-959F-F17112E3EE97}\MpKsl4c28ab49.sys [2013-08-29 29904]
    S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
    S2 HerculesWiFi;HerculesWiFi;c:\windows\system32\\HerculesWiFiService.exe [2010-11-17 53544]
    S2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;d:\program files\Hi-Rez Studios\HiPatchService.exe [2013-08-13 9216]
    S2 MaConfigAgent;Ma-Config Agent;c:\program files\ma-config.com\MaConfigAgent.exe [2013-08-22 1783632]
    S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]
    S2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [2012-01-19 3027840]
    S3 dc3d;Pilote de détection des périphériques Microsoft Hardware;c:\windows\system32\DRIVERS\dc3d.sys [2013-05-06 65200]
    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
    S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-11-25 603240]
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    Akamai REG_MULTI_SZ Akamai
    .
    Contenu du dossier 'Tâches planifiées'
    .
    2013-08-29 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-21 13:52]
    .
    .
    ------- Examen supplémentaire -------
    .
    uStart Page = hxxp://www.google.fr/
    Trusted Zone: ma-config.com
    Trusted Zone: touslesdrivers.com
    TCP: DhcpNameServer = 192.168.1.1
    FF - ProfilePath - c:\users\yohann\AppData\Roaming\Mozilla\Firefox\Profiles\7wfkqo5y.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
    .
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Akamai]
    "ServiceDll"="c:\program files\common files\akamai/netsession_win_8fa3539.dll"
    .
    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\npggsvc]
    "ImagePath"="c:\windows\system32\GameMon.des -service"
    .
    --------------------- CLES DE REGISTRE BLOQUEES ---------------------
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
    @="?????????????????? v1"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
    @="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
    @="?????????????????? v2"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
    @="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
    .
    ------------------------ Autres processus actifs ------------------------
    .
    c:\windows\system32\nvvsvc.exe
    c:\program files\Microsoft Security Client\MsMpEng.exe
    c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
    c:\windows\system32\nvvsvc.exe
    c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
    c:\windows\system32\HerculesWiFiService.exe
    c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    c:\windows\system32\taskhost.exe
    c:\program files\Microsoft Mouse and Keyboard Center\itype.exe
    c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    c:\windows\System32\WUDFHost.exe
    c:\windows\system32\conhost.exe
    c:\program files\Hercules\WiFiStationN\WiFiN.exe
    c:\program files\NVIDIA Corporation\Display\nvtray.exe
    c:\program files\Windows Media Player\wmpnetwk.exe
    c:\windows\system32\sppsvc.exe
    .
    **************************************************************************
    .
    Heure de fin: 2013-08-29 15:48:08 - La machine a redémarré
    ComboFix-quarantined-files.txt 2013-08-29 13:48
    ComboFix2.txt 2013-08-29 03:42
    ComboFix3.txt 2013-08-28 00:59
    .
    Avant-CF: 79 944 228 864 octets libres
    Après-CF: 79 749 881 856 octets libres
    .
    - - End Of File - - BE370B7B6D4957C6533D6217B82D6ABD
    A36C5E4F47E84449FF07ED3517B43A31
    0
  15. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    mmmm........ toujours les soucis ?
    0
  16. ShadowLee Messages postés 59 Statut Membre
     
    oui toujour malheureusement désolé pour le réponse tardive boulot de nuit :/
    0
  17. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    re

    touche windows + R

    tape :

    chkdsk /f /r c:

    accepte l'analyse au redemarrage et redemarre
    0
  18. ShadowLee Messages postés 59 Statut Membre
     
    salut,

    je l'ai fais mais ce passe rien j'ai redémarrer pas eu d'analyse,

    peu etre parce que j'ai pas d'anti-virus ? et que cette action concerne l'anti-virus ?
    0
  19. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    non

    demarrer/programmes/accessoires clic droit sur "invité de commandes" => executer en tant qu'administrateur

    dans la fenetre noire tape : chkdsk /f /r C:

    puis entrée

    il te dit pas que c'est pas possible parce que le volume est occupé là .?
    0
  20. ShadowLee Messages postés 59 Statut Membre
     
    c'est exacte oui j'ai mis O je redémarre je te redis merci de prendre de temps
    0
  21. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    pas de soucis :)
    0
  • 1
  • 2
  • 3
  • 4