Gros beug et pc lent

ben j'attends toujours le rapport...

UP !

oui il est en mode normal...

le rapport :

c:\users\ta session\drWeb\CureIt.log

ton pc est bien demarré en mode normal ?

Bon, quelques soucis me sont venus.

J'ai fais l'analyse avec Drweb en mode sans echec, l'analyse c'est bien déroulé mais a l'enregistrement du fichier, rien est apparu sur mon bureau (l'analyse était trop longue alors je suis parti en laissant l'analyse ce finir). J'ai donc recommencé une deuxieme fois en restant prés du pc, le fichier c'est bien enregistré sur le bureau mais je n'ai plus de connexion wifi, j'ai pour erreur Le service ou le groupe de dépendance n'a pas pu démarrer. J'ai suivi des tuto pour régler ce probleme mais rien y fais.

Que dois-je faire ?

non, pare feu et antivirus desactiver...

tu doi soublier de desactiver une protection ou sandbox....

suis ce tuto :

https://forums.cnetfrance.fr/tutoriels-securite-informatique/179557-dr-web-cureit-le-tutoriel

¤¤¤¤¤¤¤¤¤¤ Pre_Scan_Concept ¤¤¤¤¤¤¤¤¤¤

Toujours le meme probleme. Il a cessé de fonctionner lors du scan. :/
Il y a pas un autre moyen ? on peu passer par un autre logiciel non ?

supprime pre_scan , retelecharge-le puis relance-le puis heberge le rapport qui sera sur ton bureau

supprime aussi le dossier C:\Pre_Scan avant de le lancer

http://forums-fec.be/gen-hackman/Pre_Scan.exe

¤¤¤¤¤¤¤¤¤¤ Pre_Scan_Concept ¤¤¤¤¤¤¤¤¤¤

############################## | UsbFix V 7.094 | [Suppression]

Utilisateur: deb (Administrateur) # PC-DE-DEB
Mis à jour le 20/07/2012 par El Desaparecido
Lancé à 23:18:00 | 25/08/2012

Site Web: https://www.sosvirus.net/
Forum: http://forum.eldesaparecido.com
Fichier suspect ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com

PC: PACKARD BELL BV (EasyNote MH36) (X86-based PC) # Desktop Computer
CPU: Intel(R) Celeron(R) CPU 900 @ 2.20GHz (2194)
RAM -> [Total : 2972 | Free : 1723]
BIOS: PhoenixBIOS 4.0 Release 6.1
BOOT: Normal boot

OS: Microsoft® Windows Vista(TM) Édition Familiale Basique (6.0.6002 32-Bit) # Service Pack 2
WB: Windows Internet Explorer 9.0.8112.16421

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: Avira Desktop [(!) Disabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 220 Go (143 Go libre(s) - 65%) [OS] # NTFS
D:\ -> CD-ROM

################## | Processus Actif |

C:\Windows\system32\csrss.exe (500)
C:\Windows\system32\wininit.exe (548)
C:\Windows\system32\csrss.exe (556)
C:\Windows\system32\services.exe (592)
C:\Windows\system32\lsass.exe (604)
C:\Windows\system32\lsm.exe (612)
C:\Windows\system32\winlogon.exe (640)
C:\Windows\system32\svchost.exe (816)
C:\Windows\system32\svchost.exe (888)
C:\Windows\System32\svchost.exe (924)
C:\Windows\System32\svchost.exe (1052)
C:\Windows\system32\svchost.exe (1068)
C:\Windows\system32\svchost.exe (1164)
C:\Windows\system32\SLsvc.exe (1180)
C:\Windows\system32\svchost.exe (1224)
C:\Windows\system32\svchost.exe (1396)
C:\Windows\System32\spoolsv.exe (1636)
C:\Program Files\Avira\AntiVir Desktop\sched.exe (1692)
C:\Windows\system32\Dwm.exe (1752)
C:\Windows\Explorer.EXE (1764)
C:\Windows\system32\svchost.exe (1792)
C:\Windows\system32\taskeng.exe (1800)
C:\Windows\System32\svchost.exe (480)
C:\Program Files\Avira\AntiVir Desktop\avguard.exe (560)
C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe (752)
C:\Windows\system32\FsUsbExService.Exe (1540)
C:\Windows\system32\lxddcoms.exe (1504)
C:\Windows\system32\svchost.exe (2008)
C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe (2180)
C:\Windows\system32\svchost.exe (2236)
C:\Windows\System32\svchost.exe (2292)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2384)
C:\Windows\system32\SearchIndexer.exe (2432)
C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe (2484)
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2548)
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (2884)
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (3140)
C:\Windows\System32\alg.exe (3252)
C:\Windows\system32\taskeng.exe (3416)
C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (996)
C:\Windows\System32\hkcmd.exe (1872)
C:\Windows\System32\igfxpers.exe (2808)
C:\Program Files\Lexmark 2500 Series\lxddmon.exe (2864)
C:\Program Files\Lexmark 2500 Series\lxddamon.exe (2084)
C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe (2836)
C:\Windows\RtHDVCpl.exe (2332)
C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (2340)
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (2448)
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (2720)
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (1132)
C:\Users\deb\AppData\Local\Akamai\netsession_win.exe (2904)
C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe (3428)
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE (3532)
C:\Program Files\Windows Media Player\wmpnscfg.exe (3548)
C:\Program Files\Windows Media Player\wmpnetwk.exe (3668)
C:\Windows\system32\igfxsrvc.exe (2724)
C:\Windows\system32\svchost.exe (2828)
C:\Windows\system32\wbem\unsecapp.exe (2472)
C:\Windows\system32\wbem\wmiprvse.exe (2612)
C:\Users\deb\AppData\Local\Akamai\netsession_win.exe (1016)
Q:\140061.fra\Office14\ONENOTEM.EXE (192)
C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (2152)
C:\Program Files\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe (1964)
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (4292)
C:\Program Files\Packard Bell\Packard Bell Recovery Management\NotificationCenter\Framework.NotificationCenter.exe (5976)
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (4540)
C:\Windows\servicing\TrustedInstaller.exe (4760)
C:\UsbFix\Go.exe (5720)
C:\Windows\system32\wbem\wmiprvse.exe (5784)

################## | Processus Stoppés |

Stoppé! C:\Windows\system32\SLsvc.exe (1180)
Stoppé! C:\Windows\System32\spoolsv.exe (1636)
Stoppé! C:\Program Files\Avira\AntiVir Desktop\sched.exe (1692)
Stoppé! C:\Windows\Explorer.EXE (1764)
Stoppé! C:\Windows\system32\taskeng.exe (1800)
Stoppé! C:\Program Files\Avira\AntiVir Desktop\avguard.exe (560)
Stoppé! C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe (752)
Stoppé! C:\Windows\system32\FsUsbExService.Exe (1540)
Stoppé! C:\Windows\system32\lxddcoms.exe (1504)
Stoppé! C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe (2180)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2384)
Stoppé! C:\Windows\system32\SearchIndexer.exe (2432)
Stoppé! C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe (2484)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2548)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (2884)
Stoppé! C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (3140)
Stoppé! C:\Windows\System32\alg.exe (3252)
Stoppé! C:\Windows\system32\taskeng.exe (3416)
Stoppé! C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe (996)
Stoppé! C:\Windows\System32\hkcmd.exe (1872)
Stoppé! C:\Windows\System32\igfxpers.exe (2808)
Stoppé! C:\Program Files\Lexmark 2500 Series\lxddmon.exe (2864)
Stoppé! C:\Program Files\Lexmark 2500 Series\lxddamon.exe (2084)
Stoppé! C:\Program Files\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe (2836)
Stoppé! C:\Windows\RtHDVCpl.exe (2332)
Stoppé! C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (2340)
Stoppé! C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (2448)
Stoppé! C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (2720)
Stoppé! C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (1132)
Stoppé! C:\Users\deb\AppData\Local\Akamai\netsession_win.exe (2904)
Stoppé! C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe (3428)
Stoppé! C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE (3532)
Stoppé! C:\Program Files\Windows Media Player\wmpnscfg.exe (3548)
Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (3668)
Stoppé! C:\Windows\system32\igfxsrvc.exe (2724)
Stoppé! C:\Users\deb\AppData\Local\Akamai\netsession_win.exe (1016)
Stoppé! Q:\140061.fra\Office14\ONENOTEM.EXE (192)
Stoppé! C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (2152)
Stoppé! C:\Program Files\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe (1964)
Stoppé! C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (4292)
Stoppé! C:\Program Files\Packard Bell\Packard Bell Recovery Management\NotificationCenter\Framework.NotificationCenter.exe (5976)
Stoppé! C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (4540)
Stoppé! C:\Windows\servicing\TrustedInstaller.exe (4760)

################## | Éléments infectieux |

Supprimé! C:\$RECYCLE.BIN\S-1-5-21-4010412767-3807525827-3392870768-1000

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives

################## | Mountpoints2 |

################## | Listing |

[25/08/2012 - 23:20:14 | SHD ] C:\$RECYCLE.BIN
[21/10/2009 - 19:46:43 | D ] C:\ACER
[15/12/2010 - 23:15:25 | N | 2006] C:\aqua_bitmap.cpp
[18/09/2006 - 23:43:36 | N | 24] C:\autoexec.bat
[04/08/2012 - 01:37:59 | RAD ] C:\Autorun.inf
[08/11/2009 - 15:56:06 | D ] C:\Boot
[11/04/2009 - 08:36:36 | RASH | 333257] C:\bootmgr
[09/01/2009 - 13:38:07 | N | 8192] C:\BOOTSECT.BAK
[04/08/2012 - 03:06:16 | D ] C:\cequetuveux
[04/08/2012 - 03:06:07 | N | 25990] C:\ComboFix.txt
[18/09/2006 - 23:43:37 | N | 10] C:\config.sys
[21/10/2009 - 19:44:15 | SHD ] C:\Documents and Settings
[18/11/2009 - 21:26:41 | D ] C:\drivers
[10/12/2009 - 01:38:46 | D ] C:\f7a12ff0f85ee1114d6e4e6d221ec70c
[09/01/2009 - 05:52:21 | D ] C:\Intel
[09/11/2009 - 16:01:03 | N | 0] C:\IO.SYS
[18/11/2009 - 21:34:18 | D ] C:\logs
[13/11/2009 - 16:43:48 | D ] C:\Microgaming
[09/11/2009 - 16:01:03 | N | 0] C:\MSDOS.SYS
[09/01/2009 - 06:02:24 | RD ] C:\MSOCache
[25/08/2012 - 16:14:12 | ASH | 3430924288] C:\pagefile.sys
[04/12/2009 - 01:12:14 | D ] C:\PerfLogs
[04/08/2012 - 03:37:48 | D ] C:\Pre_Scan
[25/08/2012 - 15:50:26 | D ] C:\Program Files
[04/08/2012 - 03:07:22 | D ] C:\ProgramData
[24/08/2010 - 14:59:36 | N | 91] C:\PS.log
[04/08/2012 - 03:06:13 | D ] C:\Qoobox
[09/01/2009 - 05:59:37 | N | 426] C:\RHDSetup.log
[25/08/2012 - 15:43:57 | SHD ] C:\System Volume Information
[12/09/2011 - 15:40:38 | D ] C:\Temp
[25/08/2012 - 23:20:14 | D ] C:\UsbFix
[25/08/2012 - 23:18:32 | A | 9829] C:\UsbFix.txt
[04/08/2012 - 01:38:03 | N | 8142980] C:\UsbFix_Upload_Me_PC-DE-DEB.zip
[21/10/2009 - 19:45:17 | D ] C:\Users
[25/08/2012 - 15:37:04 | D ] C:\Windows

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_PC-DE-DEB.zip
http://eldesaparecido.com/upload.php
Merci de votre contribution.

################## | E.O.F |

hello refais suppression avec usbfix et poste le rapport

Salut, me revoila aprés 3 semaine d'absence. =)

Je n'est pas de fichier C:\Pre_scan.txt

:/

lol ^^

tu dois avoir un bout de rapport C:\Pre_scan.txt

héberge-le et donne le lien obtenu

Je ne trouve pas heberge-leet.

tu dois avoir un bout de rapport dans c:\ heberge-leet donne le lien

Toujours pareil pour le pre_scan, j'ai redemarrer 2 fois le pc et relancé pre_scan et rien n'y fais.

moi je te conseille d'arrêter de dire des aneries , l'usern'a pas besoin de ca !
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan_Concept ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
ne gardez pas les outils de desinfection dans le pc , ils sont mis à jour tous les jours

Moi, je te conseil un formatage.
Ca va tout remettre a neuf et tu sera bien content du résultat :)

retente pre_scan

ComboFix 12-07-31.06 - deb 04/08/2012 2:46.1.1 - x86
Microsoft® Windows Vista(TM) Édition Familiale Basique 6.0.6002.2.1252.33.1036.18.2972.1707 [GMT 2:00]
Lancé depuis: c:\users\deb\Desktop\cequetuveux.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Smart-Shopper
c:\program files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
c:\program files\Smart-Shopper\Uninst.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\SmartShopper
c:\programdata\Microsoft\Windows\Start Menu\Programs\SmartShopper\SmartShopper - Comapre product prices.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SmartShopper\SmartShopper - Compare travel rate.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SmartShopper\SmartShopper Help.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\SmartShopper\Uninstall SmartShopper.lnk
c:\programdata\SPL54F1.tmp
c:\programdata\SPL67EC.tmp
c:\users\deb\AppData\Local\kfcavs.dat
c:\users\deb\AppData\Local\kfcavs_nav.dat
c:\users\deb\AppData\Local\kfcavs_navps.dat
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome.manifest
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\background.html
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\browser.xul
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\crossrider.js
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\crossriderapi.js
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\dialog.js
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\options.js
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\options.xul
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\search_dialog.xul
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\chrome\content\update.html
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\defaults\preferences\prefs.js
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\install.rdf
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\locale\en-US\translations.dtd
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\button1.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\button2.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\button3.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\button4.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\button5.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\crossrider_statusbar.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\icon128.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\icon16.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\icon24.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\icon48.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\panelarrow-up.png
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\popup.css
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\popup.html
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\popup_binding.xml
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\skin.css
c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\extensions\crossriderapp4479@crossrider.com\skin\update.css
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2012-07-04 au 2012-08-04 ))))))))))))))))))))))))))))))))))))
.
.
2012-08-04 00:59 . 2012-08-04 00:59 -------- d-----w- c:\users\deb\AppData\Local\temp
2012-08-04 00:59 . 2012-08-04 00:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-08-04 00:19 . 2012-08-04 00:19 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{42C8F34C-48B6-4FB2-8149-92167AA0EE1F}\offreg.dll
2012-08-03 23:57 . 2012-08-04 00:26 -------- d-----w- C:\Pre_Scan
2012-08-03 23:31 . 2012-08-03 23:38 -------- d-----w- C:\UsbFix
2012-08-03 22:29 . 2012-07-16 00:41 6891424 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{42C8F34C-48B6-4FB2-8149-92167AA0EE1F}\mpengine.dll
2012-08-03 16:11 . 2012-08-03 16:11 -------- d-----w- c:\windows\LastGood
2012-07-30 16:59 . 2012-06-13 13:40 2047488 ----a-w- c:\windows\system32\win32k.sys
2012-07-30 15:20 . 2012-02-29 15:11 5120 ----a-w- c:\windows\system32\wmi.dll
2012-07-30 15:20 . 2012-02-29 15:11 172032 ----a-w- c:\windows\system32\wintrust.dll
2012-07-30 15:20 . 2012-02-29 15:09 157696 ----a-w- c:\windows\system32\imagehlp.dll
2012-07-30 15:20 . 2012-02-29 13:32 12800 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2012-07-30 14:27 . 2012-06-02 08:16 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-07-30 14:27 . 2012-06-02 09:08 140920 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2012-07-30 14:27 . 2012-06-02 08:22 194560 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2012-07-30 14:27 . 2012-06-02 08:21 194048 ----a-w- c:\program files\Internet Explorer\IEShims.dll
2012-07-30 14:27 . 2012-06-02 08:20 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-07-30 14:27 . 2012-06-02 08:25 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-07-30 14:26 . 2012-06-02 09:08 748664 ----a-w- c:\program files\Internet Explorer\iexplore.exe
2012-07-30 14:26 . 2012-06-02 08:33 1800192 ----a-w- c:\windows\system32\jscript9.dll
2012-07-30 14:26 . 2012-06-02 08:26 387584 ----a-w- c:\program files\Internet Explorer\jsdbgui.dll
2012-07-30 14:26 . 2012-06-02 08:27 678912 ----a-w- c:\program files\Internet Explorer\iedvtool.dll
2012-07-30 14:26 . 2012-06-02 08:25 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-07-30 00:56 . 2012-06-05 16:47 708608 ----a-w- c:\program files\Common Files\System\ado\msado15.dll
2012-07-30 00:56 . 2012-03-01 14:46 219648 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-07-30 00:56 . 2012-02-29 14:08 1172480 ----a-w- c:\windows\system32\d3d10warp.dll
2012-07-30 00:56 . 2012-02-29 13:41 1069056 ----a-w- c:\windows\system32\DWrite.dll
2012-07-30 00:56 . 2012-03-01 14:46 160768 ----a-w- c:\windows\system32\d3d10_1.dll
2012-07-30 00:56 . 2012-02-29 13:44 683008 ----a-w- c:\windows\system32\d2d1.dll
2012-07-30 00:56 . 2012-04-23 16:00 984064 ----a-w- c:\windows\system32\crypt32.dll
2012-07-30 00:56 . 2012-04-23 16:00 98304 ----a-w- c:\windows\system32\cryptnet.dll
2012-07-30 00:56 . 2012-04-23 16:00 133120 ----a-w- c:\windows\system32\cryptsvc.dll
2012-07-30 00:56 . 2011-07-29 16:01 293376 ----a-w- c:\windows\system32\psisdecd.dll
2012-07-30 00:56 . 2011-07-29 16:01 217088 ----a-w- c:\windows\system32\psisrndr.ax
2012-07-30 00:56 . 2011-07-29 16:00 69632 ----a-w- c:\windows\system32\Mpeg2Data.ax
2012-07-30 00:55 . 2011-07-29 16:00 57856 ----a-w- c:\windows\system32\MSDvbNP.ax
2012-07-30 00:55 . 2011-10-14 16:03 189952 ----a-w- c:\windows\system32\winmm.dll
2012-07-30 00:55 . 2011-10-14 16:00 23552 ----a-w- c:\windows\system32\mciseq.dll
2012-07-30 00:55 . 2011-11-18 20:23 1205064 ----a-w- c:\windows\system32\ntdll.dll
2012-07-30 00:47 . 2011-10-14 16:02 429056 ----a-w- c:\windows\system32\EncDec.dll
2012-07-30 00:46 . 2012-03-20 23:28 53120 ----a-w- c:\windows\system32\drivers\partmgr.sys
2012-07-30 00:46 . 2012-03-30 12:39 905600 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-07-30 00:46 . 2012-02-01 15:10 936960 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-07-30 00:46 . 2012-02-01 15:10 1404928 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\InkObj.dll
2012-07-30 00:45 . 2011-11-18 17:47 66560 ----a-w- c:\windows\system32\packager.dll
2012-07-30 00:43 . 2011-11-25 15:59 376320 ----a-w- c:\windows\system32\winsrv.dll
2012-07-30 00:40 . 2011-12-14 16:17 680448 ----a-w- c:\windows\system32\msvcrt.dll
2012-07-30 00:16 . 2011-10-25 15:56 49152 ----a-w- c:\windows\system32\csrsrv.dll
2012-07-30 00:16 . 2011-10-25 15:58 1314816 ----a-w- c:\windows\system32\quartz.dll
2012-07-30 00:16 . 2011-10-25 15:58 497152 ----a-w- c:\windows\system32\qdvd.dll
2012-07-30 00:16 . 2011-11-16 16:23 377344 ----a-w- c:\windows\system32\winhttp.dll
2012-07-30 00:15 . 2011-08-25 16:14 238080 ----a-w- c:\windows\system32\oleacc.dll
2012-07-30 00:15 . 2011-08-25 16:15 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2012-07-30 00:15 . 2011-08-25 16:14 563712 ----a-w- c:\windows\system32\oleaut32.dll
2012-07-30 00:15 . 2011-08-25 13:31 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2012-07-30 00:12 . 2011-11-08 14:42 2048 ----a-w- c:\windows\system32\tzres.dll
2012-07-30 00:11 . 2012-03-01 11:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2012-07-30 00:11 . 2012-06-05 16:47 1401856 ----a-w- c:\windows\system32\msxml6.dll
2012-07-30 00:11 . 2012-06-05 16:47 1248768 ----a-w- c:\windows\system32\msxml3.dll
2012-07-29 23:47 . 2012-05-01 14:03 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-07-29 23:02 . 2012-04-03 08:16 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-07-29 23:02 . 2012-04-03 08:16 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-07-29 22:58 . 2011-09-30 15:57 707584 ----a-w- c:\program files\Common Files\System\wab32.dll
2012-07-29 22:57 . 2012-06-04 15:26 440704 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2012-07-29 22:57 . 2012-06-02 00:04 278528 ----a-w- c:\windows\system32\schannel.dll
2012-07-29 22:57 . 2011-11-16 16:21 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2012-07-29 15:02 . 2012-06-02 00:03 204288 ----a-w- c:\windows\system32\ncrypt.dll
2012-07-29 15:02 . 2011-11-16 16:23 72704 ----a-w- c:\windows\system32\secur32.dll
2012-07-29 15:02 . 2011-11-16 14:12 9728 ----a-w- c:\windows\system32\lsass.exe
2012-07-29 14:50 . 2012-01-09 15:54 613376 ----a-w- c:\windows\system32\rdpencom.dll
2012-07-29 01:58 . 2012-07-29 01:58 -------- d-----w- c:\users\deb\AppData\Local\Macromedia
2012-07-29 01:57 . 2012-07-29 01:57 -------- d-----w- c:\programdata\McAfee Security Scan
2012-07-29 01:57 . 2012-07-29 01:57 -------- d-----w- c:\programdata\McAfee
2012-07-29 01:56 . 2012-07-30 23:56 -------- d-----w- c:\program files\McAfee Security Scan
2012-07-29 01:56 . 2012-08-02 22:59 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-28 23:59 . 2012-07-28 23:59 -------- d-----w- c:\users\deb\AppData\Roaming\Avira
2012-07-28 23:53 . 2012-07-31 00:04 137416 ----a-w- c:\windows\system32\drivers\avipbb.sys
2012-07-28 23:53 . 2011-12-01 15:55 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-07-28 23:53 . 2011-12-01 15:55 74640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-07-28 23:53 . 2012-07-28 23:53 -------- d-----w- c:\programdata\Avira
2012-07-28 23:53 . 2012-07-28 23:53 -------- d-----w- c:\program files\Avira
2012-07-28 23:32 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe
2012-07-28 23:32 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll
2012-07-28 23:32 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-07-28 23:32 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2012-07-28 23:31 . 2012-07-28 23:31 -------- d-----w- c:\users\deb\AppData\Local\Giant Savings
2012-07-28 23:31 . 2012-07-28 23:33 -------- d-----w- c:\program files\Giant Savings
2012-07-28 23:31 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll
2012-07-28 23:31 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll
2012-07-28 23:31 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll
2012-07-28 23:30 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-07-28 23:30 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-07-28 23:20 . 2012-07-28 23:23 -------- d-----w- c:\users\deb\AppData\Local\Akamai
2012-07-28 22:46 . 2012-07-28 22:46 -------- d-----w- c:\program files\CCleaner
2012-07-28 22:41 . 2012-07-28 22:41 -------- d-----w- c:\windows\system32\drivers\NIS\1008030.006
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-03 23:38 . 2012-08-03 23:38 8142980 ----a-w- C:\UsbFix_Upload_Me_PC-DE-DEB.zip
2012-08-02 22:59 . 2011-08-11 12:25 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-05-31 10:25 . 2009-10-21 18:24 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-07-14 00:15 . 2012-07-28 22:39 136672 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
2009-12-20 09:51 87480 ----a-w- c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}]
2011-05-30 13:35 89008 ----a-w- c:\progra~1\IMESHA~1\MediaBar\Datamngr\ToolBar\imeshdtxmltbpi.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2010-10-19 12:53 585136 ----a-w- c:\progra~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{0974BA1E-64EC-11DE-B2A5-E43756D89593}"= "c:\progra~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll" [2009-12-20 87480]
"{28387537-e3f9-4ed7-860c-11e69af4a8a0}"= "c:\progra~1\IMESHA~1\MediaBar\Datamngr\ToolBar\imeshdtxmltbpi.dll" [2011-05-30 89008]
.
[HKEY_CLASSES_ROOT\clsid\{0974ba1e-64ec-11de-b2a5-e43756d89593}]
.
[HKEY_CLASSES_ROOT\clsid\{28387537-e3f9-4ed7-860c-11e69af4a8a0}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\program files\PACKARD BELL\SetUpMyPC\SmpSys.exe" [2008-07-07 1038136]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-08-05 639864]
"KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-08-01 20880]
"KiesHelper"="c:\program files\Samsung\Kies\KiesHelper.exe" [2011-08-01 958352]
"Akamai NetSession Interface"="c:\users\deb\AppData\Local\Akamai\netsession_win.exe" [2012-05-26 4327744]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\program files\Packard Bell\SetupMyPC\SmpSys.exe" [2008-07-07 1038136]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-12 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-12 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-12 145944]
"lxddmon.exe"="c:\program files\Lexmark 2500 Series\lxddmon.exe" [2007-06-11 291760]
"lxddamon"="c:\program files\Lexmark 2500 Series\lxddamon.exe" [2007-04-30 20480]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"RtHDVCpl"="RtHDVCpl.exe" [2008-08-04 6265376]
"BabylonToolbar"="c:\program files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" [2010-11-07 286720]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-12-01 258512]
.
c:\users\deb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 - Capture d'écran et lancement.lnk - c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE [2012-1-4 3208032]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"EnableLUA"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll c:\progra~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - FSUSBEXDISK
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
Akamai REG_MULTI_SZ Akamai
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
ezSharedSvc
.
Contenu du dossier 'Tâches planifiées'
.
2012-08-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-29 22:59]
.
2012-08-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4010412767-3807525827-3392870768-1000Core.job
- c:\users\deb\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-30 00:09]
.
2012-08-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4010412767-3807525827-3392870768-1000UA.job
- c:\users\deb\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-30 00:09]
.
2012-08-04 c:\windows\Tasks\PCConfidential.job
- c:\program files\Winferno\PC Confidential\PCConfidential.exe [2009-11-22 13:10]
.
2012-08-04 c:\windows\Tasks\RegPowerClean.job
- c:\program files\Winferno\RegistryPowerCleaner\RegPowerClean.exe [2009-11-22 13:48]
.
2010-01-29 c:\windows\Tasks\RPCReminder.job
- c:\program files\Winferno\RegistryPowerCleaner\RPCReminder.exe [2009-11-22 13:34]
.
2010-12-15 c:\windows\Tasks\User_Feed_Synchronization-{AAA3225E-2359-4A29-BD57-FF5ADF8E7C25}.job
- c:\windows\system32\msfeedssync.exe [2011-05-05 22:50]
.
.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local;<local>
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\deb\AppData\Roaming\Mozilla\Firefox\Profiles\h8p4xlhe.default\
FF - prefs.js: browser.search.selectedEngine - BearShare Web Search
FF - prefs.js: browser.startup.homepage - hxxp://search.bearshare.com/
.
- - - - ORPHELINS SUPPRIMES - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKCU-Run-kfcavs - c:\users\deb\appdata\local\kfcavs.exe
HKLM-Run-eRecoveryService - (no file)
AddRemove-Live-Player - c:\program files\Live-Player\uninst.exe
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-15_Symbian_Samsung_PC_DLC_Driver - c:\program files\Samsung\USB Drivers\15_Symbian_Samsung_PC_DLC_Driver\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-08-04 02:59
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
.
c:\users\deb\AppData\Local\Temp\catchme.dll 53248 bytes executable
.
Scan terminé avec succès
Fichiers cachés: 1
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}"=hex:51,66,7a,6c,4c,1d,38,12,8d,ec,f8,
7b,2b,25,27,06,e7,c4,bc,f0,98,15,0d,de
"{0974BA1E-64EC-11DE-B2A5-E43756D89593}"=hex:51,66,7a,6c,4c,1d,38,12,70,b9,67,
0d,de,2a,b0,54,cd,b3,a7,77,53,86,d1,87
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}"=hex:51,66,7a,6c,4c,1d,38,12,86,6f,ef,
26,75,33,f1,02,c8,5c,fc,fb,01,f3,fd,bb
"{4A7C84E2-E95C-43C6-8DD3-03ABCD0EB60E}"=hex:51,66,7a,6c,4c,1d,38,12,8c,87,6f,
4e,6e,a7,a8,06,f2,c5,40,eb,c8,50,f2,1a
"{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}"=hex:51,66,7a,6c,4c,1d,38,12,60,d8,39,
64,cd,04,79,07,f5,b7,d6,9a,c1,81,e0,1c
"{6D53EC84-6AAE-4787-AEEE-F4628F01010C}"=hex:51,66,7a,6c,4c,1d,38,12,ea,ef,40,
69,9c,24,e9,02,d1,f8,b7,22,8a,5f,45,18
"{74322BF9-DF26-493F-B0DA-6D2FC5E6429E}"=hex:51,66,7a,6c,4c,1d,38,12,97,28,21,
70,14,91,51,0c,cf,cc,2e,6f,c0,b8,06,8a
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{8BCB5337-EC01-4E38-840C-A964F174255B}"=hex:51,66,7a,6c,4c,1d,38,12,59,50,d8,
8f,33,a2,56,0b,fb,1a,ea,24,f4,2a,61,4f
"{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16,
fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17
"{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9,
b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:60,ef,9e,89,84,21,cc,01
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2012-08-04 03:06:06
ComboFix-quarantined-files.txt 2012-08-04 01:06
.
Avant-CF: 157 894 701 056 octets libres
Après-CF: 157 391 503 360 octets libres
.
- - End Of File - - 547AE72BEF016AAE68584A07C7D94968