Kgb keylogger

Mdr ! Désolée, je peux pas m'empêcher de rire ! C'est reparti pour un tour ! Tu as vraiment une patience d'ange. Oki, j'arrête de rire et je me mets au boulot :p

2011/05/10 13:03:27.0570 5644 TDSS rootkit removing tool 2.5.0.0 May 1 2011 14:20:16
2011/05/10 13:03:28.0050 5644 ================================================================================
2011/05/10 13:03:28.0050 5644 SystemInfo:
2011/05/10 13:03:28.0050 5644
2011/05/10 13:03:28.0050 5644 OS Version: 6.0.6002 ServicePack: 2.0
2011/05/10 13:03:28.0050 5644 Product type: Workstation
2011/05/10 13:03:28.0050 5644 ComputerName: PC-DE-SANN
2011/05/10 13:03:28.0050 5644 UserName: sann
2011/05/10 13:03:28.0050 5644 Windows directory: C:\Windows
2011/05/10 13:03:28.0050 5644 System windows directory: C:\Windows
2011/05/10 13:03:28.0050 5644 Running under WOW64
2011/05/10 13:03:28.0050 5644 Processor architecture: Intel x64
2011/05/10 13:03:28.0050 5644 Number of processors: 2
2011/05/10 13:03:28.0050 5644 Page size: 0x1000
2011/05/10 13:03:28.0050 5644 Boot type: Normal boot
2011/05/10 13:03:28.0050 5644 ================================================================================
2011/05/10 13:03:28.0552 5644 Initialize success
2011/05/10 13:03:34.0633 4428 ================================================================================
2011/05/10 13:03:34.0633 4428 Scan started
2011/05/10 13:03:34.0633 4428 Mode: Manual;
2011/05/10 13:03:34.0633 4428 ================================================================================
2011/05/10 13:03:35.0354 4428 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
2011/05/10 13:03:35.0501 4428 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
2011/05/10 13:03:36.0095 4428 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
2011/05/10 13:03:36.0416 4428 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
2011/05/10 13:03:36.0519 4428 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
2011/05/10 13:03:36.0710 4428 AFD (12415ccfd3e7cec55b5184e67b039fe4) C:\Windows\system32\drivers\afd.sys
2011/05/10 13:03:36.0828 4428 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
2011/05/10 13:03:36.0950 4428 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
2011/05/10 13:03:37.0121 4428 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
2011/05/10 13:03:37.0194 4428 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
2011/05/10 13:03:37.0325 4428 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
2011/05/10 13:03:37.0486 4428 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
2011/05/10 13:03:37.0561 4428 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
2011/05/10 13:03:37.0629 4428 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/05/10 13:03:37.0685 4428 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
2011/05/10 13:03:37.0937 4428 atikmdag (8ea545f0f90e6388dcaca8f4f9404dc5) C:\Windows\system32\DRIVERS\atikmdag.sys
2011/05/10 13:03:38.0339 4428 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
2011/05/10 13:03:38.0416 4428 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
2011/05/10 13:03:38.0474 4428 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
2011/05/10 13:03:38.0528 4428 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
2011/05/10 13:03:38.0597 4428 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
2011/05/10 13:03:38.0639 4428 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
2011/05/10 13:03:38.0668 4428 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
2011/05/10 13:03:38.0695 4428 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
2011/05/10 13:03:38.0729 4428 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
2011/05/10 13:03:38.0807 4428 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
2011/05/10 13:03:38.0879 4428 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
2011/05/10 13:03:38.0936 4428 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
2011/05/10 13:03:39.0001 4428 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
2011/05/10 13:03:39.0211 4428 cmderd (b39c56607f56828edb615b58c767d6a4) C:\Windows\system32\DRIVERS\cmderd.sys
2011/05/10 13:03:39.0281 4428 cmdGuard (183870c20b99a5293198519a04d38bfd) C:\Windows\system32\DRIVERS\cmdguard.sys
2011/05/10 13:03:39.0320 4428 cmdHlp (d4919ed252d2564a205a239cd00bbbc3) C:\Windows\system32\DRIVERS\cmdhlp.sys
2011/05/10 13:03:39.0372 4428 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
2011/05/10 13:03:39.0411 4428 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys
2011/05/10 13:03:39.0455 4428 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
2011/05/10 13:03:39.0555 4428 DfsC (36cd31121f228e7e79bae60aa45764c6) C:\Windows\system32\Drivers\dfsc.sys
2011/05/10 13:03:39.0660 4428 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
2011/05/10 13:03:39.0731 4428 Dot4 (74c02b1717740c3b8039539e23e4b53f) C:\Windows\system32\DRIVERS\Dot4.sys
2011/05/10 13:03:39.0757 4428 Dot4Print (08321d1860235bf42cf2854234337aea) C:\Windows\system32\DRIVERS\Dot4Prt.sys
2011/05/10 13:03:39.0783 4428 dot4usb (4adccf0124f2b6911d3786a5d0e779e5) C:\Windows\system32\DRIVERS\dot4usb.sys
2011/05/10 13:03:39.0841 4428 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
2011/05/10 13:03:39.0995 4428 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
2011/05/10 13:03:40.0068 4428 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
2011/05/10 13:03:40.0142 4428 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
2011/05/10 13:03:40.0235 4428 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
2011/05/10 13:03:40.0285 4428 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
2011/05/10 13:03:40.0374 4428 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
2011/05/10 13:03:40.0435 4428 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
2011/05/10 13:03:40.0493 4428 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
2011/05/10 13:03:40.0537 4428 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
2011/05/10 13:03:40.0561 4428 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
2011/05/10 13:03:40.0593 4428 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/05/10 13:03:40.0638 4428 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
2011/05/10 13:03:40.0722 4428 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
2011/05/10 13:03:40.0765 4428 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
2011/05/10 13:03:40.0820 4428 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
2011/05/10 13:03:40.0983 4428 HdAudAddService (68e732382b32417ff61fd663259b4b09) C:\Windows\system32\drivers\HdAudio.sys
2011/05/10 13:03:41.0075 4428 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/05/10 13:03:41.0136 4428 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
2011/05/10 13:03:41.0168 4428 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
2011/05/10 13:03:41.0265 4428 HidUsb (128e2da8483fdd4dd0c7b3f9abd6f323) C:\Windows\system32\DRIVERS\hidusb.sys
2011/05/10 13:03:41.0362 4428 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
2011/05/10 13:03:41.0486 4428 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
2011/05/10 13:03:41.0528 4428 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
2011/05/10 13:03:41.0585 4428 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/05/10 13:03:41.0626 4428 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
2011/05/10 13:03:41.0674 4428 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
2011/05/10 13:03:41.0731 4428 inspect (7d34cb7c30ca4247521b4db0a3c02f7f) C:\Windows\system32\DRIVERS\inspect.sys
2011/05/10 13:03:41.0803 4428 int15 (8c7fa71cb1ebcd3ede8958d27b1bf0b4) C:\Windows\SysWOW64\drivers\int15_64.sys
2011/05/10 13:03:41.0873 4428 IntcAzAudAddService (023eb98945069178c21b324b880ad787) C:\Windows\system32\drivers\RTKVHD64.sys
2011/05/10 13:03:41.0951 4428 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
2011/05/10 13:03:41.0981 4428 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
2011/05/10 13:03:42.0051 4428 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/05/10 13:03:42.0143 4428 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
2011/05/10 13:03:42.0183 4428 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
2011/05/10 13:03:42.0238 4428 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
2011/05/10 13:03:42.0282 4428 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
2011/05/10 13:03:42.0356 4428 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/05/10 13:03:42.0397 4428 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
2011/05/10 13:03:42.0450 4428 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
2011/05/10 13:03:42.0486 4428 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/05/10 13:03:42.0525 4428 kbdhid (bf8783a5066cfecf45095459e8010fa7) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/05/10 13:03:42.0605 4428 KSecDD (476e2c1dcea45895994bef11c2a98715) C:\Windows\system32\Drivers\ksecdd.sys
2011/05/10 13:03:42.0638 4428 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
2011/05/10 13:03:42.0721 4428 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
2011/05/10 13:03:42.0772 4428 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
2011/05/10 13:03:42.0812 4428 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
2011/05/10 13:03:42.0846 4428 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
2011/05/10 13:03:42.0868 4428 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
2011/05/10 13:03:42.0950 4428 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
2011/05/10 13:03:42.0987 4428 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
2011/05/10 13:03:43.0040 4428 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
2011/05/10 13:03:43.0093 4428 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
2011/05/10 13:03:43.0121 4428 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
2011/05/10 13:03:43.0184 4428 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
2011/05/10 13:03:43.0229 4428 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
2011/05/10 13:03:43.0290 4428 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
2011/05/10 13:03:43.0324 4428 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
2011/05/10 13:03:43.0365 4428 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
2011/05/10 13:03:43.0395 4428 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
2011/05/10 13:03:43.0463 4428 mrxsmb (dc434b4769e18da09ce1b7755d4c64e9) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/05/10 13:03:43.0498 4428 mrxsmb10 (64713fcfe3de8881d62f8f3f2f794241) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/05/10 13:03:43.0545 4428 mrxsmb20 (0005c599a2abf767a815afcd32e523e3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/05/10 13:03:43.0601 4428 msahci (1ac860612b85d8e85ee257d372e39f4d) C:\Windows\system32\drivers\msahci.sys
2011/05/10 13:03:43.0641 4428 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
2011/05/10 13:03:43.0692 4428 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
2011/05/10 13:03:43.0730 4428 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
2011/05/10 13:03:43.0785 4428 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
2011/05/10 13:03:43.0811 4428 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/05/10 13:03:43.0831 4428 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
2011/05/10 13:03:43.0876 4428 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
2011/05/10 13:03:43.0918 4428 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/05/10 13:03:43.0949 4428 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
2011/05/10 13:03:43.0980 4428 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
2011/05/10 13:03:44.0049 4428 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
2011/05/10 13:03:44.0143 4428 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
2011/05/10 13:03:44.0217 4428 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/05/10 13:03:44.0239 4428 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/05/10 13:03:44.0293 4428 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/05/10 13:03:44.0333 4428 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
2011/05/10 13:03:44.0423 4428 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
2011/05/10 13:03:44.0477 4428 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
2011/05/10 13:03:44.0582 4428 netr28ux (c553716f6f7bca3444cee52dfb7c9016) C:\Windows\system32\DRIVERS\netr28ux.sys
2011/05/10 13:03:44.0681 4428 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
2011/05/10 13:03:44.0745 4428 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
2011/05/10 13:03:44.0834 4428 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
2011/05/10 13:03:44.0937 4428 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
2011/05/10 13:03:45.0052 4428 NTIDrvr (7d397449aaf52b0e7c79b64f6ad4473e) C:\Windows\system32\Drivers\NTIDrvr.sys
2011/05/10 13:03:45.0091 4428 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
2011/05/10 13:03:45.0194 4428 NVENETFD (98350606682594521d56eccb5d01ecf7) C:\Windows\system32\DRIVERS\nvmfdx64.sys
2011/05/10 13:03:45.0316 4428 NVHDA (6e022d5f44cd8b029cf799807bb31269) C:\Windows\system32\drivers\nvhda64v.sys
2011/05/10 13:03:45.0596 4428 nvlddmkm (57903fa36945a692172f384eb96c8f0a) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/05/10 13:03:45.0795 4428 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
2011/05/10 13:03:45.0851 4428 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
2011/05/10 13:03:45.0889 4428 nvstor64 (581286807b5832503fd700a3217b589f) C:\Windows\system32\DRIVERS\nvstor64.sys
2011/05/10 13:03:45.0929 4428 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
2011/05/10 13:03:46.0085 4428 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/05/10 13:03:46.0189 4428 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
2011/05/10 13:03:46.0256 4428 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
2011/05/10 13:03:46.0330 4428 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
2011/05/10 13:03:46.0396 4428 pciide (2657f6c0b78c36d95034be109336e382) C:\Windows\system32\drivers\pciide.sys
2011/05/10 13:03:46.0478 4428 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
2011/05/10 13:03:46.0526 4428 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
2011/05/10 13:03:46.0684 4428 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
2011/05/10 13:03:46.0724 4428 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
2011/05/10 13:03:46.0798 4428 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
2011/05/10 13:03:46.0830 4428 PSDFilter (2cfd31d41cde75328acaeee2d4f4b836) C:\Windows\system32\DRIVERS\psdfilter.sys
2011/05/10 13:03:46.0853 4428 PSDNServ (51a585f999672d8bb07f22ae12b40846) C:\Windows\system32\DRIVERS\PSDNServ.sys
2011/05/10 13:03:46.0906 4428 psdvdisk (db50d3f5c31b1a848b04f7f2a6ff2709) C:\Windows\system32\DRIVERS\PSDVdisk.sys
2011/05/10 13:03:46.0959 4428 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
2011/05/10 13:03:47.0067 4428 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
2011/05/10 13:03:47.0114 4428 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
2011/05/10 13:03:47.0145 4428 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
2011/05/10 13:03:47.0210 4428 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/05/10 13:03:47.0266 4428 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/05/10 13:03:47.0347 4428 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
2011/05/10 13:03:47.0407 4428 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
2011/05/10 13:03:47.0460 4428 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/05/10 13:03:47.0506 4428 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
2011/05/10 13:03:47.0540 4428 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
2011/05/10 13:03:47.0592 4428 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
2011/05/10 13:03:47.0695 4428 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
2011/05/10 13:03:47.0769 4428 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
2011/05/10 13:03:47.0830 4428 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2011/05/10 13:03:47.0869 4428 Serenum (2449316316411d65bd2c761a6ffb2ce2) C:\Windows\system32\DRIVERS\serenum.sys
2011/05/10 13:03:47.0933 4428 Serial (4b438170be2fc8e0bd35ee87a960f84f) C:\Windows\system32\DRIVERS\serial.sys
2011/05/10 13:03:47.0965 4428 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
2011/05/10 13:03:48.0012 4428 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
2011/05/10 13:03:48.0040 4428 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
2011/05/10 13:03:48.0070 4428 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
2011/05/10 13:03:48.0108 4428 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
2011/05/10 13:03:48.0153 4428 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
2011/05/10 13:03:48.0186 4428 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
2011/05/10 13:03:48.0249 4428 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
2011/05/10 13:03:48.0365 4428 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
2011/05/10 13:03:48.0419 4428 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
2011/05/10 13:03:48.0482 4428 srv2 (fa36d119249bf27bc4c0079734e1f33b) C:\Windows\system32\DRIVERS\srv2.sys
2011/05/10 13:03:48.0524 4428 srvnet (cfe7bc92d52c7e79427545909a0182f8) C:\Windows\system32\DRIVERS\srvnet.sys
2011/05/10 13:03:48.0594 4428 ssm_bus (7c1bac427ec5f9641ed769355b71a674) C:\Windows\system32\DRIVERS\ssm_bus.sys
2011/05/10 13:03:48.0625 4428 ssm_mdfl (3b24a09ea547d1e7768e0abd7aea7f07) C:\Windows\system32\DRIVERS\ssm_mdfl.sys
2011/05/10 13:03:48.0670 4428 ssm_mdm (6f5ae233d7286ea8e42851846c6322fe) C:\Windows\system32\DRIVERS\ssm_mdm.sys
2011/05/10 13:03:48.0769 4428 StillCam (14b4db4381e4a55f570d8bb699b791d6) C:\Windows\system32\DRIVERS\serscan.sys
2011/05/10 13:03:48.0834 4428 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
2011/05/10 13:03:48.0876 4428 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
2011/05/10 13:03:48.0911 4428 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
2011/05/10 13:03:48.0952 4428 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
2011/05/10 13:03:49.0036 4428 taphss (f33fdc72298df4bf9813a55d21f4eb31) C:\Windows\system32\DRIVERS\taphss.sys
2011/05/10 13:03:49.0147 4428 Tcpip (973658a2ea9c06b2976884b9046dfc6c) C:\Windows\system32\drivers\tcpip.sys
2011/05/10 13:03:49.0232 4428 Tcpip6 (973658a2ea9c06b2976884b9046dfc6c) C:\Windows\system32\DRIVERS\tcpip.sys
2011/05/10 13:03:49.0298 4428 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
2011/05/10 13:03:49.0350 4428 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
2011/05/10 13:03:49.0393 4428 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
2011/05/10 13:03:49.0444 4428 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
2011/05/10 13:03:49.0483 4428 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
2011/05/10 13:03:49.0585 4428 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/05/10 13:03:49.0641 4428 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
2011/05/10 13:03:49.0695 4428 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
2011/05/10 13:03:49.0734 4428 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
2011/05/10 13:03:49.0774 4428 UBHelper (00c8ce31657624a125fdb90efd554371) C:\Windows\system32\drivers\UBHelper.sys
2011/05/10 13:03:49.0828 4428 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
2011/05/10 13:03:49.0910 4428 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
2011/05/10 13:03:49.0946 4428 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
2011/05/10 13:03:49.0988 4428 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
2011/05/10 13:03:50.0028 4428 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
2011/05/10 13:03:50.0077 4428 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
2011/05/10 13:03:50.0156 4428 USBAAPL64 (54d4b48d443e7228bf64cf7cdc3118ac) C:\Windows\system32\Drivers\usbaapl64.sys
2011/05/10 13:03:50.0204 4428 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys
2011/05/10 13:03:50.0252 4428 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/05/10 13:03:50.0286 4428 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
2011/05/10 13:03:50.0360 4428 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
2011/05/10 13:03:50.0403 4428 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
2011/05/10 13:03:50.0448 4428 usbohci (e406b003a354776d317762694956b0fc) C:\Windows\system32\DRIVERS\usbohci.sys
2011/05/10 13:03:50.0506 4428 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
2011/05/10 13:03:50.0565 4428 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
2011/05/10 13:03:50.0614 4428 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/05/10 13:03:50.0665 4428 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/05/10 13:03:50.0720 4428 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/05/10 13:03:50.0766 4428 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
2011/05/10 13:03:50.0795 4428 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
2011/05/10 13:03:50.0839 4428 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
2011/05/10 13:03:50.0902 4428 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
2011/05/10 13:03:50.0971 4428 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
2011/05/10 13:03:51.0037 4428 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
2011/05/10 13:03:51.0165 4428 VX1000 (47eeff348bdcbbdd8aeb9fd4be5577e6) C:\Windows\system32\DRIVERS\VX1000.sys
2011/05/10 13:03:51.0325 4428 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
2011/05/10 13:03:51.0387 4428 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/10 13:03:51.0405 4428 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
2011/05/10 13:03:51.0450 4428 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
2011/05/10 13:03:51.0501 4428 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
2011/05/10 13:03:51.0675 4428 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/05/10 13:03:51.0763 4428 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
2011/05/10 13:03:51.0800 4428 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
2011/05/10 13:03:51.0860 4428 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/05/10 13:03:52.0016 4428 ================================================================================
2011/05/10 13:03:52.0016 4428 Scan finished
2011/05/10 13:03:52.0016 4428 ================================================================================

lol

un renvoi sur mon compte netlog mais c'est pareil pour facebook

tu peux me faire un screen ?

euh... c'est quoi ça ?

un imrpim'éecran

je ne sais pas faire ça :(

je leur ai dit de sortir de chez moi avec leur valises ! lol ! avec ccleaner
je viens de finir le nettoyage de mes disques. tu aurais pu me dire que ça prenait des heures ! même pas pu aller papoter sur facebook ce soir lol pfffff, obligée de ragarder des niaiseries à la télé !

huhuhuhu ^^

oserais-tu te moquer encore de moi ? :p lol

meuh non.....:D

moui je vois ça :p

rhaaa tu as encore trouvé de quoi m'occuper un moment ! mais que vais-je faire après tout ça ? tu vas me manquer ! lol ! bon je fais tout ça et je reviens d'ici un mois ou 2 quand j'aurai terminé lol

:D

total space cleaned : 568950742 bytes

defogger re-enable ok

problème avec delfix :

error : failed attempt to launch program or document :
action : <C:\DelFixSuppr.txt>
params : <>
the current thread will exit
specifically : application introuvable
line (dièse) je ne sais pas où ça se trouve sur mon clavier
----> 727 ; run, %rapportfiles%

eh bah non tu n'es pas encore débarrassé de moi :p

coucou ! désolée d'avoir disparue soudainement mais problème imprévu :( enfin j'ai fait tout ça et avast n'a rien détecté :) serions-nous enfin tranquilles ? :D

rhaaa je te fais ça demain ! je vais voir si combo truc est planqué sous mon lit. pourvu qu'il ne cherche pas à s'installer lol tu vas me rendre dingue avec tout ça ! mdr ! bonne nuit à toi qui ne dors pas, qui ne mange pas... lol ! bisous et à demain

okay bonne nuit xD

sann au rapport chef !

14/04/2011 8:49.2.2 - x64
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.4094.2556 [GMT 2:00]
Lancé depuis: c:\users\sann\Desktop\ComboFix.exe
Commutateurs utilisés :: c:\users\sann\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\users\Erwann\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\cacaoweb.exe"
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-03-14 au 2011-04-14 ))))))))))))))))))))))))))))))))))))
.
.
2011-04-14 06:56 . 2011-04-14 06:56 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2011-04-14 06:56 . 2011-04-14 06:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-13 20:54 . 2011-04-13 20:54 -------- d-----w- c:\programdata\MFAData
2011-04-13 18:43 . 2011-04-13 18:43 -------- d-----w- C:\Kill'em
2011-04-13 11:27 . 2011-04-13 22:01 -------- d-----w- C:\UsbFix
2011-04-12 18:55 . 2011-04-12 18:55 -------- d-----w- c:\programdata\Nexon
2011-04-12 15:55 . 2011-04-12 15:55 -------- d-----w- c:\program files (x86)\Ad-Remover
2011-04-12 08:13 . 2011-03-15 05:17 8424784 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC1A9543-66FB-47CE-9059-F94B636E28D7}\mpengine.dll
2011-03-23 10:02 . 2011-02-22 14:47 479744 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-03-23 10:02 . 2011-02-22 14:13 288768 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-03-23 10:02 . 2011-02-22 13:53 1149440 ----a-w- c:\windows\system32\FntCache.dll
2011-03-23 10:02 . 2011-02-22 13:33 1068544 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-03-23 10:02 . 2011-02-22 13:53 1555968 ----a-w- c:\windows\system32\DWrite.dll
2011-03-15 15:59 . 2011-03-15 16:24 -------- d-----w- c:\users\sann\AppData\Roaming\codeblocks
2011-03-15 15:59 . 2011-03-15 15:59 -------- d-----w- c:\program files (x86)\CodeBlocks
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-13 22:01 . 2011-04-13 11:31 968533 ----a-w- C:\UsbFix_Upload_Me_PC-DE-SANN.zip
2011-03-18 15:45 . 2011-03-18 15:45 638177119 ------w- C:\iPod4,1_4.2.1_8C148_Restore.zip
2011-03-14 21:19 . 2009-08-18 10:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2011-03-14 21:19 . 2009-08-18 09:24 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-02 17:11 . 2009-12-06 11:40 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-01-20 16:46 . 2011-02-09 20:40 900480 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-20 16:17 . 2011-02-09 20:40 366592 ----a-w- c:\windows\system32\winspool.drv
2011-01-20 16:17 . 2011-02-09 20:40 625152 ----a-w- c:\windows\system32\dxgi.dll
2011-01-20 16:16 . 2011-02-09 20:40 287232 ----a-w- c:\windows\system32\d3d10core.dll
2011-01-20 16:16 . 2011-02-09 20:40 327680 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-01-20 16:16 . 2011-02-09 20:40 196096 ----a-w- c:\windows\system32\d3d10_1.dll
2011-01-20 16:16 . 2011-02-09 20:40 1268224 ----a-w- c:\windows\system32\d3d10.dll
2011-01-20 16:16 . 2011-02-09 20:40 748544 ----a-w- c:\windows\system32\stobject.dll
2011-01-20 16:16 . 2011-02-09 20:40 47104 ----a-w- c:\windows\system32\cdd.dll
2011-01-20 16:16 . 2011-02-09 20:40 3548672 ----a-w- c:\windows\system32\mf.dll
2011-01-20 16:16 . 2011-02-09 20:40 35840 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll
2011-01-20 16:14 . 2011-02-09 20:40 278528 ----a-w- c:\windows\system32\mfplat.dll
2011-01-20 16:14 . 2011-02-09 20:40 195072 ----a-w- c:\windows\system32\mfps.dll
2011-01-20 16:08 . 2011-02-09 20:40 478720 ----a-w- c:\windows\SysWow64\dxgi.dll
2011-01-20 16:08 . 2011-02-09 20:40 219648 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2011-01-20 16:08 . 2011-02-09 20:40 160768 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2011-01-20 16:08 . 2011-02-09 20:40 1029120 ----a-w- c:\windows\SysWow64\d3d10.dll
2011-01-20 16:08 . 2011-02-09 20:40 189952 ----a-w- c:\windows\SysWow64\d3d10core.dll
2011-01-20 16:07 . 2011-02-09 20:40 258048 ----a-w- c:\windows\SysWow64\winspool.drv
2011-01-20 16:07 . 2011-02-09 20:40 586240 ----a-w- c:\windows\SysWow64\stobject.dll
2011-01-20 16:06 . 2011-02-09 20:40 2873344 ----a-w- c:\windows\SysWow64\mf.dll
2011-01-20 16:04 . 2011-02-09 20:40 209920 ----a-w- c:\windows\SysWow64\mfplat.dll
2011-01-20 16:04 . 2011-02-09 20:40 98816 ----a-w- c:\windows\SysWow64\mfps.dll
2011-01-20 15:01 . 2011-02-09 20:40 3068416 ----a-w- c:\windows\system32\xpsservices.dll
2011-01-20 15:01 . 2011-02-09 20:40 1653760 ----a-w- c:\windows\system32\XpsPrint.dll
2011-01-20 14:59 . 2011-02-09 20:40 1032192 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe
2011-01-20 14:58 . 2011-02-09 20:40 1461760 ----a-w- c:\windows\system32\OpcServices.dll
2011-01-20 14:57 . 2011-02-09 20:40 231936 ----a-w- c:\windows\system32\XpsRasterService.dll
2011-01-20 14:42 . 2011-02-09 20:40 1257984 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-01-20 14:41 . 2011-02-09 20:40 428544 ----a-w- c:\windows\system32\MFHEAACdec.dll
2011-01-20 14:40 . 2011-02-09 20:40 345088 ----a-w- c:\windows\system32\mfreadwrite.dll
2011-01-20 14:40 . 2011-02-09 20:40 34304 ----a-w- c:\windows\system32\mfpmp.exe
2011-01-20 14:40 . 2011-02-09 20:40 377344 ----a-w- c:\windows\system32\mfmp4src.dll
2011-01-20 14:37 . 2011-02-09 20:40 2002944 ----a-w- c:\windows\system32\d3d10warp.dll
2011-01-20 14:35 . 2011-02-09 20:40 566272 ----a-w- c:\windows\system32\d3d10level9.dll
2011-01-20 14:28 . 2011-02-09 20:40 1554432 ----a-w- c:\windows\SysWow64\xpsservices.dll
2011-01-20 14:27 . 2011-02-09 20:40 876032 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-01-20 14:25 . 2011-02-09 20:40 847360 ----a-w- c:\windows\SysWow64\OpcServices.dll
2011-01-20 14:24 . 2011-02-09 20:40 135680 ----a-w- c:\windows\SysWow64\XpsRasterService.dll
2011-01-20 14:15 . 2011-02-09 20:40 979456 ----a-w- c:\windows\SysWow64\MFH264Dec.dll
2011-01-20 14:14 . 2011-02-09 20:40 357376 ----a-w- c:\windows\SysWow64\MFHEAACdec.dll
2011-01-20 14:14 . 2011-02-09 20:40 302592 ----a-w- c:\windows\SysWow64\mfmp4src.dll
2011-01-20 14:14 . 2011-02-09 20:40 261632 ----a-w- c:\windows\SysWow64\mfreadwrite.dll
2011-01-20 14:12 . 2011-02-09 20:40 1172480 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2011-01-20 14:11 . 2011-02-09 20:40 486400 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2011-01-20 14:06 . 2011-02-09 20:40 834048 ----a-w- c:\windows\system32\d2d1.dll
2011-01-20 13:47 . 2011-02-09 20:40 683008 ----a-w- c:\windows\SysWow64\d2d1.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-04-13_20.15.31 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-12-01 11:39 . 2011-04-14 07:00 39700 c:\windows\system32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2006-11-02 15:45 . 2011-04-14 07:00 98526 c:\windows\system32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-07 21:47 . 2011-04-14 07:00 18540 c:\windows\system32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-783353092-3114192604-3977293051-1000_UserData.bin
- 2009-07-07 20:43 . 2011-04-13 19:49 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-07 20:43 . 2011-04-14 06:58 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-07 20:43 . 2011-04-13 19:49 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-07 20:43 . 2011-04-14 06:58 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-07 20:43 . 2011-04-13 19:49 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-07 20:43 . 2011-04-14 06:58 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-08-07 16:42 . 2011-04-13 20:56 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-08-07 16:42 . 2011-04-13 19:47 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-08-07 16:42 . 2011-04-13 19:47 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-08-07 16:42 . 2011-04-13 20:56 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2011-04-13 19:47 . 2011-04-13 19:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-04-14 06:58 . 2011-04-14 06:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-04-13 19:47 . 2011-04-13 19:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-04-14 06:58 . 2011-04-14 06:58 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-01-21 10:00 . 2011-04-14 05:50 672084 c:\windows\system32\perfh00C.dat
- 2008-01-21 10:00 . 2011-04-13 19:54 672084 c:\windows\system32\perfh00C.dat
+ 2006-11-02 12:46 . 2011-04-14 05:50 589884 c:\windows\system32\perfh009.dat
- 2006-11-02 12:46 . 2011-04-13 19:54 589884 c:\windows\system32\perfh009.dat
- 2008-01-21 10:00 . 2011-04-13 19:54 124228 c:\windows\system32\perfc00C.dat
+ 2008-01-21 10:00 . 2011-04-14 05:50 124228 c:\windows\system32\perfc00C.dat
- 2006-11-02 12:46 . 2011-04-13 19:54 101896 c:\windows\system32\perfc009.dat
+ 2006-11-02 12:46 . 2011-04-14 05:50 101896 c:\windows\system32\perfc009.dat
+ 2009-07-30 09:34 . 2011-04-14 06:58 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
- 2009-07-30 09:34 . 2011-04-13 19:49 262144 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2011-02-10 22:54 . 2011-04-14 06:56 481104 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
- 2011-02-10 22:54 . 2011-04-13 19:45 481104 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2006-11-02 12:33 . 2011-04-14 06:56 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat
- 2006-11-02 12:33 . 2011-03-25 12:03 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2011-04-14 06:39 . 2011-04-14 06:39 10956800 c:\windows\ERDNT\Hiv-backup\schema.dat
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:52 121392 ----a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"uTorrent"="d:\program files (x86)\uTorrent\uTorrent.exe" [2010-04-19 319792]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
.
c:\users\sann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
IMVU.lnk - c:\users\sann\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe [N/A]
Notification de cadeaux MSN.lnk - c:\users\sann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [N/A]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Ralink Wireless Utility.lnk - c:\program files (x86)\RALINK\Common\RaUI.exe [2011-2-1 970752]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R3 dump_wmimmc;dump_wmimmc;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys [x]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-05-20 269448]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-21 27648]
S2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-08-19 24576]
S2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
S3 netr28ux;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28ux.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
getPlusHelper REG_MULTI_SZ getPlusHelper
Akamai REG_MULTI_SZ Akamai
.
Contenu du dossier 'Tâches planifiées'
.
2011-04-14 c:\windows\Tasks\User_Feed_Synchronization-{FD45503F-EBA3-4833-B6D4-17327C5386F8}.job
- c:\windows\system32\msfeedssync.exe [2011-02-09 04:47]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:53 50736 ----a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spykey"="c:\users\sann\Documents\programmes installation\Spykey.exe" [2011-01-18 169840]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\SysWOW64\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
FF - ProfilePath - c:\users\sann\AppData\Roaming\Mozilla\Firefox\Profiles\dhicexar.default\
FF - prefs.js: browser.startup.homepage - hxxp://fr.msn.com/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - c:\programdata\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - %profile%\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF - Ext: Adobe DLM (powered by getPlus(R)): {E2883E8F-472F-4fb0-9522-AC9BF37916A7} - %profile%\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF - Ext: SocialPlus: {7a88e876-d715-4503-a7bf-a8eba13ca3f9} - %profile%\extensions\{7a88e876-d715-4503-a7bf-a8eba13ca3f9}
FF - Ext: TweakTube: {15e67a59-bd3d-49ae-90dd-b3d3fd14c2ed} - %profile%\extensions\{15e67a59-bd3d-49ae-90dd-b3d3fd14c2ed}
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{84d4e968-0688-4b4d-9659-fb4c4e611232}\Implemented Categories\{71B2D918-2983-47B3-8337-9BEA15F184DA}]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
------------------------ Autres processus actifs ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files (x86)\CyberLink\Shared Files\RichVideo.exe
.
**************************************************************************
.
Heure de fin: 2011-04-14 09:05:22 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-04-14 07:05
ComboFix2.txt 2011-04-13 20:17
.
Avant-CF: 303 950 151 680 octets libres
Après-CF: 303 658 127 360 octets libres
.
- - End Of File - - 950022EBCF5AD8AB1D484D5EAAE7F665

sur ce, pleine de courage, je retourne me coucher...

rhaaa je vais faire une indigestion ! lol je vais te chercher ça

ça me met : application introuvable

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan 1.0.0.28 ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤ XP | Vista | Seven - 32/64 ¤

Mis à jour le 13/04/2011 | 12.40 par g3n-h@ckm@n
Utilisateur : sann (Administrateurs)
Ordinateur : PC-DE-SANN

Système d'exploitation : Windows (TM) Vista Home Premium (64 bits)
Architecture OS : X64
Internet Explorer : 8.0.6001.19019
Mozilla Firefox : 3.5.11 (fr)

Scan : 20:43:57 | 13/04/2011

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKLM\..\..\Winlogon] | Shell -> Aucune modification : Explorer.exe -> Explorer.exe
[HKLM\..\..\Winlogon] | AutoRestartShell -> Aucune modification : 1 -> 1
[HKLM\..\..\Winlogon] | userinit -> Aucune modification : C:\Windows\SysWOW64\Userinit.exe, -> C:\Windows\SysWOW64\Userinit.exe,
[HKLM\..\..\Winlogon] | PowerDownAfterShutdown -> Aucune modification : 1 -> 1

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Associations ¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[.exe] : exefile
[exefile | command] : "%1" %*
[.com] : comfile
[comfile | command] : "%1" %*
[.scr] : scrfile
[scrfile | command] : "%1" /S
[.bat] : batfile
[batfile | command] : "%1" %*
[.cmd] : cmdfile
[cmdfile | command] : "%1" %*
[.pif] : piffile
[piffile | command] : "%1" %*

¤

[Firefox | Command] | @ -> Aucune modification : "C:\Program Files (x86)\Mozilla Firefox\Firefox.exe" -> "C:\Program Files (x86)\Mozilla Firefox\Firefox.exe"
[Firefox - Safemode | Command] | @ -> Aucune modification : "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode -> "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode
[IE | Command] | @ -> Aucune modification : "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -> "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
[Applications | IE | Command] | @ -> Aucune modification : "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 -> "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1
[Safari | Command] | @ -> Aucune modification : "C:\Program Files (x86)\Safari\Safari.exe" -> "C:\Program Files (x86)\Safari\Safari.exe"

¤

¤

¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

[Ndisuio] | Start -> Aucune modification : 3 -> 3
[lmhosts] | Start -> Aucune modification : 2 -> 2 : Service Actif
[LanmanWorkstation] | Start -> Aucune modification : 2 -> 2 : Service Actif
[LanmanServer] | Start -> Aucune modification : 2 -> 2 : Service Actif
[agp440] | Start -> Aucune modification : 2 -> 2 : Service Redemarré
[Bits] | Start -> Aucune modification : 2 -> 2 : Service Actif
[CryptSvc] | Start -> Aucune modification : 2 -> 2 : Service Actif
[EapHost] | Start -> Aucune modification : 2 -> 2 : Service Actif
[Wlansvc] | Start -> Aucune modification : 2 -> 2 : Service Actif
[SharedAccess] | Start -> Aucune modification : 2 -> 2 : Service Redemarré
[windefend] | Start -> Aucune modification : 2 -> 2 : Service Actif
[wuauserv] | Start -> Aucune modification : 2 -> 2 : Service Actif
[WerSvc] | Start -> Aucune modification : 2 -> 2 : Service Actif
[wscsvc] | Start -> Aucune modification : 2 -> 2 : Service Actif

¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKCU | Main] | Start Page -> Aucune Modification : https://www.google.com/?gws_rd=ssl -> https://www.google.com/?gws_rd=ssl
[HKCU | Main] | Local Page -> Aucune Modification : C:\Windows\SysWOW64\blank.htm -> C:\Windows\SysWOW64\blank.htm
[HKCU | Main] | Search Page -> Aucune Modification : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

[HKLM | Main] | Start Page -> Aucune Modification : https://www.msn.com/fr-fr/?ocid=iehp -> https://www.msn.com/fr-fr/?ocid=iehp
[HKLM | Main] | Local Page -> Aucune Modification : C:\Windows\SysWOW64\blank.htm -> C:\Windows\SysWOW64\blank.htm
[HKLM | Main] | Default_Search_URL -> Aucune Modification : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
[HKLM | Main] | Default_Page_URL -> Aucune Modification : https://www.msn.com/fr-fr/?ocid=iehp -> https://www.msn.com/fr-fr/?ocid=iehp
[HKLM | Main] | Search Page -> Aucune Modification : https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processus ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

C:\Windows\explorer.exe -> Processus stoppé
C:\Windows\explorer.exe -> Processus stoppé
C:\Windows\explorer.exe -> Processus stoppé
C:\Windows\explorer.exe -> Processus stoppé
C:\Windows\explorer.exe -> Processus stoppé
C:\Windows\splwow64.exe -> Processus stoppé
C:\Windows\explorer.exe -> Processus stoppé

¤¤¤¤¤¤¤¤¤¤ Clés supprimées et Fichier mis en quarantaine ¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤ IFEO ¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤ Mountpoints2 ¤¤¤¤¤¤¤¤¤¤

c'est pas une application c'est un txt

regarde dans ton disque C;\

c'est le bon cette fois ? et je ne veux plus du combo machin, il me fait peuuuur !

lol ! si tu le dis ! et pour mon avg ?

j'aimerais bien comprendre ce que tu vois dans tous ces rapports

moi je les lis quand même mais je n'y vois rien lol

############################# | UsbFix 7.043 | [Suppression]

Utilisateur: sann (Administrateur) # PC-DE-SANN [Acer Aspire X1700]
Mis à jour le 12/04/2011 par TeamXscript
Lancé à 23:57:21 | 13/04/2011
Site Web: http://www.teamxscript.org
Submit your sample: http://www.teamxscript.org/Upload.php
Contact: TeamXscript.ElDesaparecido@gmail.com

CPU: Intel(R) Pentium(R) Dual CPU E2220 @ 2.40GHz
CPU 2: Intel(R) Pentium(R) Dual CPU E2220 @ 2.40GHz
Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 64-Bit) # Service Pack 2
Internet Explorer 8.0.6001.19019

Pare-feu Windows: Activé
RAM -> 4094 Mo
C:\ (%systemdrive%) -> Disque fixe # 456 Go (283 Go libre(s) - 62%) [ACER] # NTFS
D:\ -> Disque fixe # 457 Go (453 Go libre(s) - 99%) [DATA] # NTFS
F:\ -> CD-ROM
I:\ -> Disque amovible # 4 Go (4 Go libre(s) - 99%) [USB SANN] # FAT32

################## | Éléments infectieux |

Supprimé! C:\$RECYCLE.BIN\S-1-5-21-783353092-3114192604-3977293051-1000
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-783353092-3114192604-3977293051-1000
Non supprimé ! F:\AUTORUN.INF
Non supprimé ! F:\autorun.exe

################## | Registre |

Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |

################## | Listing |

[13/04/2011 - 01:39:29 | D ] C:\$AVG8.VAULT$
[14/04/2011 - 00:01:07 | SHD ] C:\$RECYCLE.BIN
[27/08/2010 - 00:48:50 | D ] C:\ACER
[07/07/2009 - 23:47:49 | D ] C:\ACERSW
[13/04/2011 - 13:38:08 | RAD ] C:\Autorun.inf
[31/10/2008 - 14:27:46 | D ] C:\Book
[06/12/2009 - 00:17:55 | D ] C:\Boot
[11/04/2009 - 08:36:36 | RASH | 333257] C:\bootmgr
[31/10/2008 - 21:06:07 | N | 8192] C:\BOOTSECT.BAK
[13/04/2011 - 22:17:37 | D ] C:\ComboFix
[13/04/2011 - 22:17:34 | N | 18945] C:\ComboFix.txt
[02/11/2006 - 17:42:17 | SHD ] C:\Documents and Settings
[21/10/2010 - 14:35:02 | D ] C:\EGIS_Drive
[18/10/2010 - 20:18:17 | D ] C:\GAMIGO
[12/04/2011 - 20:32:54 | D ] C:\gPotato.eu
[28/02/2011 - 10:12:10 | N | 921624] C:\img2-001.raw
[03/08/2010 - 14:12:28 | N | 921624] C:\img2-002.raw
[18/03/2011 - 17:45:45 | N | 638177119] C:\iPod4,1_4.2.1_8C148_Restore.zip
[13/04/2011 - 20:43:03 | D ] C:\Kill'em
[16/05/2010 - 16:25:23 | N | 127] C:\mbam-error.txt
[31/10/2008 - 13:43:38 | RD ] C:\MSOCache
[13/04/2011 - 22:56:31 | ASH | 4607778816] C:\pagefile.sys
[18/01/2011 - 15:18:10 | N | 32] C:\parametreLocal.ini
[21/01/2008 - 05:04:13 | D ] C:\PerfLogs
[13/04/2011 - 20:43:58 | N | 4688] C:\Pre_Scan.txt
[08/02/2011 - 19:27:08 | D ] C:\Program Files
[13/04/2011 - 20:20:30 | D ] C:\Program Files (x86)
[13/04/2011 - 22:54:17 | D ] C:\ProgramData
[13/04/2011 - 22:17:36 | D ] C:\Qoobox
[31/10/2008 - 13:31:04 | N | 827] C:\RHDSetup.log
[13/04/2011 - 23:52:05 | SHD ] C:\System Volume Information
[13/04/2011 - 20:43:57 | N | 175] C:\txt
[14/04/2011 - 00:01:07 | D ] C:\UsbFix
[13/04/2011 - 23:57:26 | A | 3122] C:\UsbFix.txt
[13/04/2011 - 13:38:09 | N | 57397] C:\UsbFix_Upload_Me_PC-DE-SANN.zip
[05/01/2011 - 14:56:11 | D ] C:\Users
[13/04/2011 - 23:53:42 | D ] C:\Windows
[14/04/2011 - 00:01:07 | D ] D:\$RECYCLE.BIN
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_0.tmp
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_1.tmp
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_11.tmp
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_2.tmp
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_3.tmp
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_4.tmp
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_5.tmp
[06/06/2010 - 17:43:06 | N | 0] D:\3568_1133768_MVM_6.tmp
[01/09/2010 - 00:46:06 | D ] D:\6eae2f5999742e5bbc9bcfb3249411
[25/10/2009 - 01:25:36 | D ] D:\Adobe Photoshop CS3 Extended+patch FR+kegen.HwC
[26/05/2010 - 15:56:22 | D ] D:\Audiosurf
[13/04/2011 - 13:38:08 | RAD ] D:\Autorun.inf
[23/08/2009 - 22:05:17 | N | 2155] D:\Black_Eyed_Peas___I_Got_A_Feeling__Promo_CD_.torrent
[26/06/2010 - 01:18:40 | D ] D:\e60d07b160933088d93ebceb7f4db6
[07/11/2007 - 09:00:40 | N | 17734] D:\eula.1028.txt
[07/11/2007 - 09:00:40 | N | 17734] D:\eula.1031.txt
[07/11/2007 - 09:00:40 | N | 10134] D:\eula.1033.txt
[07/11/2007 - 09:00:40 | N | 17734] D:\eula.1036.txt
[07/11/2007 - 09:00:40 | N | 17734] D:\eula.1040.txt
[07/11/2007 - 09:00:40 | N | 118] D:\eula.1041.txt
[07/11/2007 - 09:00:40 | N | 17734] D:\eula.1042.txt
[07/11/2007 - 09:00:40 | N | 17734] D:\eula.2052.txt
[07/11/2007 - 09:00:40 | N | 17734] D:\eula.3082.txt
[07/11/2007 - 09:00:40 | N | 1110] D:\globdata.ini
[07/11/2007 - 09:00:40 | N | 843] D:\install.ini
[07/11/2007 - 09:03:18 | N | 76304] D:\install.res.1028.dll
[07/11/2007 - 09:03:18 | N | 96272] D:\install.res.1031.dll
[07/11/2007 - 09:03:18 | N | 91152] D:\install.res.1033.dll
[07/11/2007 - 09:03:18 | N | 97296] D:\install.res.1036.dll
[07/11/2007 - 09:03:18 | N | 95248] D:\install.res.1040.dll
[07/11/2007 - 09:03:18 | N | 81424] D:\install.res.1041.dll
[07/11/2007 - 09:03:18 | N | 79888] D:\install.res.1042.dll
[07/11/2007 - 09:03:18 | N | 75792] D:\install.res.2052.dll
[07/11/2007 - 09:03:18 | N | 96272] D:\install.res.3082.dll
[24/10/2009 - 19:27:12 | D ] D:\Microsoft Office Professional Plus 2007 Fr + Key
[16/02/2011 - 14:03:06 | D ] D:\Program Files (x86)
[13/04/2011 - 23:52:04 | SHD ] D:\System Volume Information
[19/08/2009 - 21:08:24 | N | 288560] D:\utorrent.exe
[07/11/2007 - 09:00:40 | N | 5686] D:\vcredist.bmp
[07/11/2007 - 09:09:22 | N | 1442522] D:\VC_RED.cab
[07/11/2007 - 09:12:28 | N | 232960] D:\VC_RED.MSI
[06/04/2009 - 19:05:21 | D ] F:\Atelier Créatif
[23/10/2007 - 18:49:22 | R | 2795461] F:\Autorun.exe
[16/05/2007 - 18:54:54 | R | 172] F:\AUTORUN.INF
[21/04/2009 - 00:38:17 | R | 5185] F:\Autorun.ini
[19/10/2005 - 20:32:44 | R | 29216] F:\bouton_10_ROLLOFF.bmp
[19/10/2005 - 19:39:16 | R | 29216] F:\bouton_10_ROLLON.bmp
[20/03/2007 - 23:41:33 | R | 13132] F:\bouton_OFF.bmp
[21/03/2007 - 00:04:21 | R | 13160] F:\bouton_OVER.bmp
[03/05/2007 - 21:22:54 | R | 3007258] F:\Cartable_CP.exe
[08/04/2009 - 12:42:29 | D ] F:\Eautorun
[04/05/2007 - 21:56:14 | R | 247512] F:\EAutorun.exe
[06/04/2009 - 19:02:31 | D ] F:\INSTALL
[06/04/2009 - 19:03:27 | D ] F:\Interface Data
[06/04/2009 - 19:04:49 | D ] F:\Lapin Malin Anglais CP
[14/05/2007 - 14:10:27 | R | 1194744] F:\Manuel.pdf
[24/10/2007 - 12:42:04 | R | 1336392] F:\Mindscape.bmp
[21/04/2009 - 00:22:00 | R | 9028493] F:\Momes.mov
[17/04/2009 - 13:13:08 | R | 902823936] F:\padding.dat
[02/05/2007 - 14:42:27 | R | 50904] F:\Play.exe
[06/04/2009 - 19:05:10 | D ] F:\R1RSC
[06/04/2009 - 19:05:11 | D ] F:\R1scripts
[06/04/2009 - 19:05:11 | D ] F:\Resource
[06/04/2009 - 19:05:13 | D ] F:\RSC
[15/04/2009 - 17:25:54 | D ] F:\SAV
[06/04/2009 - 19:05:14 | D ] F:\scripts
[17/05/2001 - 02:16:36 | R | 45056] F:\Setup.exe
[25/06/2008 - 20:16:13 | R | 5068632] F:\SpotTV.wmv
[06/04/2009 - 19:29:05 | R | 138408564] F:\Trailer.mov
[06/04/2009 - 19:05:14 | D ] F:\xtras

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
D:\Autorun.inf -> Vaccin créé par UsbFix (TeamXscript)
F:\Autorun.inf -> Vaccin créé par Panda USB Vaccine

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-SANN.zip
http://www.teamxscript.org/Upload.php
Merci de votre contribution.

################## | E.O.F |

tu veux que je le parfume un peu ? lol ! il a quoi ?

lol ! oui chef mais si je mets le rapport, tout le monde va avoir accès à tous mes mots de passe, non ?

http://www.virustotal.com/file-scan/report.html?id=a68082ebd687ec63b9e928ea6567a01bd74da4910ff1f6133f97497c9d8f8c62-1302729871

mais je connais spykey, c'est moi qui l'ai mis sur mon ordi

:p vas-y moque toi ! lol !

:)

tu peux me donner le lien pour reinstaller avg que je puisse le faire avant de me reconnecter ?

mon pc et moi sommes encore vivants !

ComboFix 11-04-12.02 - sann 13/04/2011 21:54:03.1.2 - x64
Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.4094.2680 [GMT 2:00]
Lancé depuis: c:\users\sann\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\sann\AppData\Roaming\.#
c:\users\sann\AppData\Roaming\.#\MBX@334@3A2990.###
c:\users\sann\AppData\Roaming\.#\MBX@334@3A29C0.###
D:\install.exe
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-03-13 au 2011-04-13 ))))))))))))))))))))))))))))))))))))
.
.
2011-04-13 20:15 . 2011-04-13 20:15 -------- d-----w- c:\users\sann\AppData\Local\temp
2011-04-13 20:15 . 2011-04-13 20:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-04-13 18:43 . 2011-04-13 18:43 -------- d-----w- C:\Kill'em
2011-04-13 11:27 . 2011-04-13 11:38 -------- d-----w- C:\UsbFix
2011-04-12 18:55 . 2011-04-12 18:55 -------- d-----w- c:\programdata\Nexon
2011-04-12 15:55 . 2011-04-12 15:55 -------- d-----w- c:\program files (x86)\Ad-Remover
2011-04-12 08:13 . 2011-03-15 05:17 8424784 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC1A9543-66FB-47CE-9059-F94B636E28D7}\mpengine.dll
2011-03-23 10:02 . 2011-02-22 14:47 479744 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-03-23 10:02 . 2011-02-22 14:13 288768 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-03-23 10:02 . 2011-02-22 13:53 1149440 ----a-w- c:\windows\system32\FntCache.dll
2011-03-23 10:02 . 2011-02-22 13:33 1068544 ----a-w- c:\windows\SysWow64\DWrite.dll
2011-03-23 10:02 . 2011-02-22 13:53 1555968 ----a-w- c:\windows\system32\DWrite.dll
2011-03-15 15:59 . 2011-03-15 16:24 -------- d-----w- c:\users\sann\AppData\Roaming\codeblocks
2011-03-15 15:59 . 2011-03-15 15:59 -------- d-----w- c:\program files (x86)\CodeBlocks
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-13 11:38 . 2011-04-13 11:31 57397 ----a-w- C:\UsbFix_Upload_Me_PC-DE-SANN.zip
2011-03-18 15:45 . 2011-03-18 15:45 638177119 ------w- C:\iPod4,1_4.2.1_8C148_Restore.zip
2011-03-14 21:19 . 2009-08-18 10:49 564632 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\wlidui.dll
2011-03-14 21:19 . 2009-08-18 09:24 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-02 17:11 . 2009-12-06 11:40 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-01-20 16:46 . 2011-02-09 20:40 900480 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2011-01-20 16:17 . 2011-02-09 20:40 366592 ----a-w- c:\windows\system32\winspool.drv
2011-01-20 16:17 . 2011-02-09 20:40 625152 ----a-w- c:\windows\system32\dxgi.dll
2011-01-20 16:16 . 2011-02-09 20:40 287232 ----a-w- c:\windows\system32\d3d10core.dll
2011-01-20 16:16 . 2011-02-09 20:40 327680 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-01-20 16:16 . 2011-02-09 20:40 196096 ----a-w- c:\windows\system32\d3d10_1.dll
2011-01-20 16:16 . 2011-02-09 20:40 1268224 ----a-w- c:\windows\system32\d3d10.dll
2011-01-20 16:16 . 2011-02-09 20:40 748544 ----a-w- c:\windows\system32\stobject.dll
2011-01-20 16:16 . 2011-02-09 20:40 47104 ----a-w- c:\windows\system32\cdd.dll
2011-01-20 16:16 . 2011-02-09 20:40 3548672 ----a-w- c:\windows\system32\mf.dll
2011-01-20 16:16 . 2011-02-09 20:40 35840 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll
2011-01-20 16:14 . 2011-02-09 20:40 278528 ----a-w- c:\windows\system32\mfplat.dll
2011-01-20 16:14 . 2011-02-09 20:40 195072 ----a-w- c:\windows\system32\mfps.dll
2011-01-20 16:08 . 2011-02-09 20:40 478720 ----a-w- c:\windows\SysWow64\dxgi.dll
2011-01-20 16:08 . 2011-02-09 20:40 219648 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2011-01-20 16:08 . 2011-02-09 20:40 160768 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2011-01-20 16:08 . 2011-02-09 20:40 1029120 ----a-w- c:\windows\SysWow64\d3d10.dll
2011-01-20 16:08 . 2011-02-09 20:40 189952 ----a-w- c:\windows\SysWow64\d3d10core.dll
2011-01-20 16:07 . 2011-02-09 20:40 258048 ----a-w- c:\windows\SysWow64\winspool.drv
2011-01-20 16:07 . 2011-02-09 20:40 586240 ----a-w- c:\windows\SysWow64\stobject.dll
2011-01-20 16:06 . 2011-02-09 20:40 2873344 ----a-w- c:\windows\SysWow64\mf.dll
2011-01-20 16:04 . 2011-02-09 20:40 209920 ----a-w- c:\windows\SysWow64\mfplat.dll
2011-01-20 16:04 . 2011-02-09 20:40 98816 ----a-w- c:\windows\SysWow64\mfps.dll
2011-01-20 15:01 . 2011-02-09 20:40 3068416 ----a-w- c:\windows\system32\xpsservices.dll
2011-01-20 15:01 . 2011-02-09 20:40 1653760 ----a-w- c:\windows\system32\XpsPrint.dll
2011-01-20 14:59 . 2011-02-09 20:40 1032192 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe
2011-01-20 14:58 . 2011-02-09 20:40 1461760 ----a-w- c:\windows\system32\OpcServices.dll
2011-01-20 14:57 . 2011-02-09 20:40 231936 ----a-w- c:\windows\system32\XpsRasterService.dll
2011-01-20 14:42 . 2011-02-09 20:40 1257984 ----a-w- c:\windows\system32\MFH264Dec.dll
2011-01-20 14:41 . 2011-02-09 20:40 428544 ----a-w- c:\windows\system32\MFHEAACdec.dll
2011-01-20 14:40 . 2011-02-09 20:40 345088 ----a-w- c:\windows\system32\mfreadwrite.dll
2011-01-20 14:40 . 2011-02-09 20:40 34304 ----a-w- c:\windows\system32\mfpmp.exe
2011-01-20 14:40 . 2011-02-09 20:40 377344 ----a-w- c:\windows\system32\mfmp4src.dll
2011-01-20 14:37 . 2011-02-09 20:40 2002944 ----a-w- c:\windows\system32\d3d10warp.dll
2011-01-20 14:35 . 2011-02-09 20:40 566272 ----a-w- c:\windows\system32\d3d10level9.dll
2011-01-20 14:28 . 2011-02-09 20:40 1554432 ----a-w- c:\windows\SysWow64\xpsservices.dll
2011-01-20 14:27 . 2011-02-09 20:40 876032 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-01-20 14:25 . 2011-02-09 20:40 847360 ----a-w- c:\windows\SysWow64\OpcServices.dll
2011-01-20 14:24 . 2011-02-09 20:40 135680 ----a-w- c:\windows\SysWow64\XpsRasterService.dll
2011-01-20 14:15 . 2011-02-09 20:40 979456 ----a-w- c:\windows\SysWow64\MFH264Dec.dll
2011-01-20 14:14 . 2011-02-09 20:40 357376 ----a-w- c:\windows\SysWow64\MFHEAACdec.dll
2011-01-20 14:14 . 2011-02-09 20:40 302592 ----a-w- c:\windows\SysWow64\mfmp4src.dll
2011-01-20 14:14 . 2011-02-09 20:40 261632 ----a-w- c:\windows\SysWow64\mfreadwrite.dll
2011-01-20 14:12 . 2011-02-09 20:40 1172480 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2011-01-20 14:11 . 2011-02-09 20:40 486400 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2011-01-20 14:06 . 2011-02-09 20:40 834048 ----a-w- c:\windows\system32\d2d1.dll
2011-01-20 13:47 . 2011-02-09 20:40 683008 ----a-w- c:\windows\SysWow64\d2d1.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:52 121392 ----a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"uTorrent"="d:\program files (x86)\uTorrent\uTorrent.exe" [2010-04-19 319792]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"PC Booster"="c:\program files (x86)\inKline Global\PC Booster\pcbooster.exe" [2008-04-08 14491648]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-01-25 421160]
.
c:\users\sann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
IMVU.lnk - c:\users\sann\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe [N/A]
Notification de cadeaux MSN.lnk - c:\users\sann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe [N/A]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Ralink Wireless Utility.lnk - c:\program files (x86)\RALINK\Common\RaUI.exe [2011-2-1 970752]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
R3 dump_wmimmc;dump_wmimmc;c:\gpotato.eu\Dragonica\Release\GameGuard\dump_wmimmc.sys [x]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-05-20 269448]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-21 27648]
S2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-08-19 24576]
S2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
S3 netr28ux;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28ux.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
getPlusHelper REG_MULTI_SZ getPlusHelper
Akamai REG_MULTI_SZ Akamai
.
Contenu du dossier 'Tâches planifiées'
.
2011-04-13 c:\windows\Tasks\User_Feed_Synchronization-{FD45503F-EBA3-4833-B6D4-17327C5386F8}.job
- c:\windows\system32\msfeedssync.exe [2011-02-09 04:47]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:53 50736 ----a-w- c:\program files (x86)\Acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spykey"="c:\users\sann\Documents\programmes installation\Spykey.exe" [2011-01-18 169840]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\SysWOW64\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
FF - ProfilePath - c:\users\sann\AppData\Roaming\Mozilla\Firefox\Profiles\dhicexar.default\
FF - prefs.js: browser.startup.homepage - hxxp://fr.msn.com/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - c:\programdata\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Google Toolbar for Firefox: {3112ca9c-de6d-4884-a869-9855de68056c} - %profile%\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF - Ext: Adobe DLM (powered by getPlus(R)): {E2883E8F-472F-4fb0-9522-AC9BF37916A7} - %profile%\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF - Ext: SocialPlus: {7a88e876-d715-4503-a7bf-a8eba13ca3f9} - %profile%\extensions\{7a88e876-d715-4503-a7bf-a8eba13ca3f9}
FF - Ext: TweakTube: {15e67a59-bd3d-49ae-90dd-b3d3fd14c2ed} - %profile%\extensions\{15e67a59-bd3d-49ae-90dd-b3d3fd14c2ed}
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Wow6432Node-HKLM-Run-eRecoveryService - (no file)
BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Notification de cadeaux MSN - c:\users\sann\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus\1]
@="131473"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10h.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
@Denied: (A 2) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
@="Shockwave Flash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
@Denied: (A 2) (Everyone)
@=""
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
@="FlashBroker"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]
"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:00000000
.
Heure de fin: 2011-04-13 22:17:33
ComboFix-quarantined-files.txt 2011-04-13 20:17
.
Avant-CF: 234 878 099 456 octets libres
Après-CF: 233 741 713 408 octets libres
.
- - End Of File - - 4E3E4050F171B3614039AD87900CE351

à aucun moment il ne m'a demandé de l'enregistrer, ça fait tout seul. je n'ai donc pas pu le renommer :( c'est grave Doc ?

quelle version : 32 ou 64 bits ?

oh la tu me fais peur avec ton truc ! j'espère que je n'ai pas d'autres anti-virus ou pare-feu qu'avg sans le savoir. IL m'a installé tellement de trucs sur mon pc ! comment puis-je être sure que je n'ai qu'AVG ? et puis il faut que je note tout ça avant de fermer

Choisis la version adéquate (32 ou 64 bits)/!\

laquelle dois-je choisir ?

alors celui-ci ne fonctionne toujours pas. au bout de 30 secondes, une fenêtre s'ouvre m'indiquant que pre-scan.exe a cessé de fonctionner

non par contre j'ai pu accéder au précédent si cela peut t'interesser :
Version de la base de données: 6346

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19019

13/04/2011 10:59:51
mbam-log-2011-04-13 (10-59-44).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 426265
Temps écoulé: 1 heure(s), 38 minute(s), 43 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\Users\sann\documents\programmes installation\webcammax\keygen + patch\patch.exe (RiskWare.Tool.CK) -> No action taken.

du coup j'ai desinstallé webcammax également, il avait été installé sur mon pc par la personne dont je parle depuis le début

oui apparemment c'était bien lui mais comment a-t-il pu installer ce logiciel espion dans mon pc ? grrrr je vais étrangler ma fille !