Programme ne répond pas

bah si tu as bien lu tout est expliqué dans le lien du menage final

et relogge toi sous ton pseudo et mets le topic en résolu donc...

¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
Windows 8 => meme flop que Vista X 10

Merci beaucoup pour ton aide et ta patience.
Apès tout ça mon PC ne pose plus le problème de "programme ne répond pas" et semble plus réactif.
Pour le soucis de la mise en veille je verrai à l'usage...
Dernière question: dois je garder c-cleaner sur mon PC?
Encore merci pour ton aide précieuse!

magnifique :)

Rapport delfix:

# DelFix v10.4 - Rapport créé le 03/08/2013 à 14:46:54
# Mis à jour le 19/07/2013 par Xplode
# Nom d'utilisateur : Ingid et Nicolas - INGIDETNICOLAS
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\Qoobox
Supprimé : C:\pre_scan
Supprimé : C:\Users\Ingid et Nicolas\Desktop\Nicolas.exe
Supprimé : C:\AdwCleaner[R1].txt
Supprimé : C:\AdwCleaner[S1].txt
Supprimé : C:\ComboFix.txt
Supprimé : C:\JavaRa.log
Supprimé : C:\Pre_Diag_31_07_2013_23_17_09.txt
Supprimé : C:\Pre_Scan_31_07_2013_22_20_15.txt
Supprimé : C:\Users\Ingid et Nicolas\Desktop\Pre_script.txt
Supprimé : C:\Users\Ingid et Nicolas\Downloads\Defogger(1).exe
Supprimé : C:\Users\Ingid et Nicolas\Downloads\defogger_disable.log
Supprimé : C:\Users\Ingid et Nicolas\Downloads\JavaRa.def
Supprimé : C:\Users\Ingid et Nicolas\Downloads\JavaRa.exe
Supprimé : C:\Users\Ingid et Nicolas\Downloads\JavaRa.zip
Supprimé : C:\Users\Ingid et Nicolas\Downloads\winlogon(1).exe
Supprimé : C:\Users\Ingid et Nicolas\Downloads\winlogon.exe
Supprimé : C:\Windows\grep.exe
Supprimé : C:\Windows\PEV.exe
Supprimé : C:\Windows\NIRCMD.exe
Supprimé : C:\Windows\MBR.exe
Supprimé : C:\Windows\SED.exe
Supprimé : C:\Windows\SWREG.exe
Supprimé : C:\Windows\SWSC.exe
Supprimé : C:\Windows\SWXCACLS.exe
Supprimé : C:\Windows\Zip.exe
Supprimée : HKCU\Software\g3n-h@ckm@n
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\g3n-h@ckm@n
Supprimée : HKLM\SOFTWARE\Swearware
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~ Sauvegarde de la base de registre ... OK

~ Purge de la restauration système ...

Supprimé : RP #92 [Point de contrôle planifié | 07/31/2013 15:22:41]
Supprimé : RP #93 [Windows Update | 07/31/2013 20:42:02]
Supprimé : RP #94 [ComboFix created restore point | 08/02/2013 08:36:10]
Supprimé : RP #95 [Removed Adobe Reader XI (11.0.03) - Français. | 08/03/2013 12:38:02]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

C'est le nettoyage final qui enleve tout les rapports etc...?

mmm....fais ce grand menage et dis si ca va mieux

sinon il faudra controler ta carte graphique

http://security-helpzone.com/gen-hackman/nettoyage-en-fin-de-desinfection/

quand je ne touche pas à mon Pc il se met en veille et lorsque je veux m'en servir alors qu'il est en veilleil ne se remet pas en route, l'ecran devient noir, le symbole du disque dur s'allume et reste fixe et plus rien ne répond à part le bouton marche/arrêt.
Je suis donc obligé d'arreter et remettre en route mon PC par ce bouton.

à la mise en veille ?

sois plus clair je comprends pas bien , et je voudrais pas faire des recherches pour rien

Oui toujours un problème au decours de la mise en veille : ecran noir, disque dur qui tourne et rien ne se passe... seule solution arret sauvage puis redemarrage.

encore des soucis ?

Voila enfin le rapport:

ComboFix 13-08-01.01 - Ingid et Nicolas 02/08/2013 19:02:12.4.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3956.2487 [GMT 2:00]
Lancé depuis: c:\users\Ingid et Nicolas\Desktop\Nicolas.exe
Commutateurs utilisés :: c:\users\Ingid et Nicolas\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\TEMP\019684~1.EXE"
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_0196841358708634mcinstcleanup
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2013-07-02 au 2013-08-02 ))))))))))))))))))))))))))))))))))))
.
.
2013-08-02 17:10 . 2013-08-02 17:10 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-08-02 08:21 . 2013-07-02 08:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EAC5A1F6-49B3-4E53-9279-C9676A368797}\mpengine.dll
2013-07-31 20:45 . 2013-07-31 20:49 -------- d-----w- c:\windows\system32\MRT
2013-07-31 19:57 . 2013-08-01 05:03 -------- d-----w- C:\Pre_Scan
2013-07-29 19:31 . 2013-07-29 19:31 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Roaming\Malwarebytes
2013-07-29 19:30 . 2013-07-29 19:30 -------- d-----w- c:\programdata\Malwarebytes
2013-07-29 19:30 . 2013-07-29 19:31 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-07-29 19:30 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-07-29 19:30 . 2013-07-29 19:30 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Programs
2013-07-20 17:52 . 2013-07-20 17:52 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Roaming\Apple Computer
2013-07-20 17:52 . 2013-07-20 17:52 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Apple Computer
2013-07-20 17:51 . 2013-07-30 14:41 -------- d-----w- c:\programdata\Apple Computer
2013-07-20 17:51 . 2013-07-30 14:41 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Apple
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files\Common Files\Apple
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files\Bonjour
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files (x86)\Bonjour
2013-07-20 17:38 . 2013-07-30 14:41 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-07-20 17:38 . 2013-07-20 17:39 -------- d-----w- c:\programdata\Apple
2013-07-19 14:49 . 2013-07-19 14:49 899184 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-07-19 14:49 . 2013-07-19 14:49 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-07-19 14:49 . 2013-07-19 14:49 639312 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-07-14 17:18 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-14 17:18 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-14 17:18 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-14 17:18 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
2013-07-14 17:18 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
2013-07-14 17:18 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
2013-07-14 17:18 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
2013-07-14 17:18 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
2013-07-14 17:18 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-14 17:17 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-14 17:17 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-14 17:17 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-07-14 17:17 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-14 17:17 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-14 17:17 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-14 17:17 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 17:17 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 17:16 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-07-14 17:16 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-28 05:42 . 2013-03-16 16:52 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-06-28 05:42 . 2013-03-16 16:52 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-06-28 05:42 . 2013-03-07 11:31 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-06-23 22:57 . 2013-01-22 20:49 78277128 ----a-w- c:\windows\system32\MRT.exe
2013-06-12 17:09 . 2013-01-23 19:58 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 17:09 . 2013-01-23 19:58 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-16 06:48 . 2013-05-16 06:48 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-16 06:48 . 2013-05-16 06:48 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-16 06:48 . 2013-05-16 06:48 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-16 06:48 . 2013-05-16 06:48 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-16 06:48 . 2013-05-16 06:48 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-05-16 06:48 . 2013-05-16 06:48 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-16 06:48 . 2013-05-16 06:48 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-16 06:48 . 2013-05-16 06:48 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-16 06:48 . 2013-05-16 06:48 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-16 06:48 . 2013-05-16 06:48 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-16 06:48 . 2013-05-16 06:48 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-16 06:48 . 2013-05-16 06:48 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-16 06:48 . 2013-05-16 06:48 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-16 06:48 . 2013-05-16 06:48 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-16 06:48 . 2013-05-16 06:48 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-16 06:48 . 2013-05-16 06:48 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-16 06:48 . 2013-05-16 06:48 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-16 06:48 . 2013-05-16 06:48 441856 ----a-w- c:\windows\system32\html.iec
2013-05-16 06:48 . 2013-05-16 06:48 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-16 06:48 . 2013-05-16 06:48 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-16 06:48 . 2013-05-16 06:48 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-16 06:48 . 2013-05-16 06:48 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-16 06:48 . 2013-05-16 06:48 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-16 06:48 . 2013-05-16 06:48 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-16 06:48 . 2013-05-16 06:48 235008 ----a-w- c:\windows\system32\url.dll
2013-05-16 06:48 . 2013-05-16 06:48 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-16 06:48 . 2013-05-16 06:48 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-16 06:48 . 2013-05-16 06:48 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-16 06:48 . 2013-05-16 06:48 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-16 06:48 . 2013-05-16 06:48 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-16 06:48 . 2013-05-16 06:48 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-16 06:48 . 2013-05-16 06:48 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-16 06:48 . 2013-05-16 06:48 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-16 06:48 . 2013-05-16 06:48 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-16 06:48 . 2013-05-16 06:48 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-16 06:48 . 2013-05-16 06:48 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-16 06:48 . 2013-05-16 06:48 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-16 06:48 . 2013-05-16 06:48 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-16 06:48 . 2013-05-16 06:48 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-16 06:48 . 2013-05-16 06:48 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-16 06:48 . 2013-05-16 06:48 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-16 06:48 . 2013-05-16 06:48 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-16 06:48 . 2013-05-16 06:48 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-16 06:48 . 2013-05-16 06:48 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-16 06:48 . 2013-05-16 06:48 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-16 06:48 . 2013-05-16 06:48 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-16 06:48 . 2013-05-16 06:48 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-16 06:48 . 2013-05-16 06:48 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-16 06:48 . 2013-05-16 06:48 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-16 06:43 . 2013-05-16 06:43 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-05-16 06:43 . 2013-05-16 06:43 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-05-16 06:43 . 2013-05-16 06:43 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-05-16 06:43 . 2013-05-16 06:43 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-16 06:43 . 2013-05-16 06:43 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-05-16 06:43 . 2013-05-16 06:43 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-16 06:43 . 2013-05-16 06:43 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2013-05-16 06:43 . 2013-05-16 06:43 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-05-16 06:43 . 2013-05-16 06:43 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-05-16 06:43 . 2013-05-16 06:43 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-05-16 06:43 . 2013-05-16 06:43 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-05-16 06:43 . 2013-05-16 06:43 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-05-16 06:43 . 2013-05-16 06:43 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-05-16 06:43 . 2013-05-16 06:43 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-05-16 06:43 . 2013-05-16 06:43 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-05-16 06:43 . 2013-05-16 06:43 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-05-16 06:43 . 2013-05-16 06:43 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-05-16 06:43 . 2013-05-16 06:43 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-05-16 06:43 . 2013-05-16 06:43 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-05-16 06:43 . 2013-05-16 06:43 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2013-05-16 06:43 . 2013-05-16 06:43 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-05-16 06:43 . 2013-05-16 06:43 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-16 06:43 . 2013-05-16 06:43 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-05-16 06:43 . 2013-05-16 06:43 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2013-05-16 06:43 . 2013-05-16 06:43 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-05-16 06:43 . 2013-05-16 06:43 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2013-05-16 06:43 . 2013-05-16 06:43 1238528 ----a-w- c:\windows\system32\d3d10.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-11 975952]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 lxea_device;lxea_device;c:\windows\system32\lxeacoms.exe;c:\windows\SYSNATIVE\lxeacoms.exe [x]
S2 lxeaCATSCustConnectService;lxeaCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\lxeaserv.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-01 11:11 1173456 ----a-w- c:\program files (x86)\Google\Chrome\Application\28.0.1500.95\Installer\chrmstp.exe
.
Contenu du dossier 'Tâches planifiées'
.
2013-08-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-23 17:09]
.
2013-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20 19:24]
.
2013-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20 19:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-06-10 324608]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-29 11101800]
"PLFSetI"="c:\windows\PLFSetI.exe" [2013-01-20 206208]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-10-22 325120]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
"lxeamon.exe"="c:\program files (x86)\Lexmark S300-S400 Series\lxeamon.exe" [2011-01-24 770728]
"EzPrint"="c:\program files (x86)\Lexmark S300-S400 Series\ezprint.exe" [2011-01-24 148280]
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\SysWOW64\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\users\Ingid et Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\dpexa03m.default\
FF - prefs.js: browser.startup.homepage - hxxp://fr.yahoo.com/
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
.
.
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Heure de fin: 2013-08-02 19:22:56 - La machine a redémarré
ComboFix-quarantined-files.txt 2013-08-02 17:22
ComboFix2.txt 2013-08-02 13:54
ComboFix3.txt 2013-08-02 08:45
.
Avant-CF: 253 984 677 888 octets libres
Après-CF: 253 913 989 120 octets libres
.
- - End Of File - - 1E761DED243C245DB81AAA61D7F0DC37
D41D8CD98F00B204E9800998ECF8427E

Un fenetre bleue est apparue disant:
compte-rendu en préparation
ne lancez aucun programme tant que combofix n'est pas fini

Ca dure mais j'ai l'impression qu'il ne se passe rien

J'ai lance le scan et je me suis absenté mais quand je suis revenu le PC était éteint et j'ai dû le redemarrer 2 fois pour qu'il fonctionne.
Je n'ai pas trouvé le rapport du scan, j'ai donc recommencé la procédure qui est en cours (Là j'utilise un autre PC)

Le PC malade est en train de redemarrer...

__________________________________________________
=>/!\Le script qui suit a été écrit spécialement cet ordinateur/!\ <=
=>il est fort déconseillé de le transposer sur un autre ordinateur !<=
----------------------------------------------------------------------------

Toujours avec toutes les protections désactivées, fais ceci :

▶ Ouvre le bloc-notes (Menu démarrer --> programmes --> accessoires --> bloc-notes)
▶ Copie/colle dans le bloc-notes ce qui entre les lignes ci dessous (sans les lignes) :

----------------------------------------------------------
KillAll::

ClearJavaCache::

File::
c:\windows\TEMP\019684~1.EXE

Driver::
0196841358708634mcinstcleanup

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]


------------------------------------------------------------------

▶ Enregistre ce fichier sur ton Bureau (et pas ailleurs !) sous le nom CFScript.txt
▶ Quitte le Bloc Notes

▶ Fais un glisser/déposer de ce fichier CFScript sur le fichier combofix comme sur cette : illustration

▶ Patiente le temps du scan. Le Bureau va disparaître à plusieurs reprises : c'est normal ! Ne touche à rien tant que le scan n'est pas terminé.
▶ Une fois le scan achevé, un rapport va s'afficher: poste son contenu.
▶ Si le fichier ne s'ouvre pas, il se trouve ici => C:\ComboFix.txt

Voila j'ai refait en ayant renommé combofix:

ComboFix 13-08-01.01 - Ingid et Nicolas 02/08/2013 15:47:05.2.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3956.2624 [GMT 2:00]
Lancé depuis: c:\users\Ingid et Nicolas\Desktop\Nicolas.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2013-07-02 au 2013-08-02 ))))))))))))))))))))))))))))))))))))
.
.
2013-08-02 13:52 . 2013-08-02 13:52 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-08-02 08:21 . 2013-07-02 08:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EAC5A1F6-49B3-4E53-9279-C9676A368797}\mpengine.dll
2013-07-31 20:45 . 2013-07-31 20:49 -------- d-----w- c:\windows\system32\MRT
2013-07-31 19:57 . 2013-08-01 05:03 -------- d-----w- C:\Pre_Scan
2013-07-29 19:31 . 2013-07-29 19:31 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Roaming\Malwarebytes
2013-07-29 19:30 . 2013-07-29 19:30 -------- d-----w- c:\programdata\Malwarebytes
2013-07-29 19:30 . 2013-07-29 19:31 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-07-29 19:30 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-07-29 19:30 . 2013-07-29 19:30 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Programs
2013-07-20 17:52 . 2013-07-20 17:52 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Roaming\Apple Computer
2013-07-20 17:52 . 2013-07-20 17:52 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Apple Computer
2013-07-20 17:51 . 2013-07-30 14:41 -------- d-----w- c:\programdata\Apple Computer
2013-07-20 17:51 . 2013-07-30 14:41 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Apple
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files\Common Files\Apple
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files\Bonjour
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files (x86)\Bonjour
2013-07-20 17:38 . 2013-07-30 14:41 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-07-20 17:38 . 2013-07-20 17:39 -------- d-----w- c:\programdata\Apple
2013-07-19 14:49 . 2013-07-19 14:49 899184 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-07-19 14:49 . 2013-07-19 14:49 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-07-19 14:49 . 2013-07-19 14:49 639312 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-07-14 17:18 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-14 17:18 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-14 17:18 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-14 17:18 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
2013-07-14 17:18 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
2013-07-14 17:18 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
2013-07-14 17:18 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
2013-07-14 17:18 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
2013-07-14 17:18 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-14 17:17 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-14 17:17 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-14 17:17 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-07-14 17:17 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-14 17:17 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-14 17:17 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-14 17:17 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 17:17 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 17:16 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-07-14 17:16 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-28 05:42 . 2013-03-16 16:52 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-06-28 05:42 . 2013-03-16 16:52 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-06-28 05:42 . 2013-03-07 11:31 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-06-23 22:57 . 2013-01-22 20:49 78277128 ----a-w- c:\windows\system32\MRT.exe
2013-06-12 17:09 . 2013-01-23 19:58 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 17:09 . 2013-01-23 19:58 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-16 06:48 . 2013-05-16 06:48 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-16 06:48 . 2013-05-16 06:48 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-16 06:48 . 2013-05-16 06:48 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-16 06:48 . 2013-05-16 06:48 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-16 06:48 . 2013-05-16 06:48 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-05-16 06:48 . 2013-05-16 06:48 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-16 06:48 . 2013-05-16 06:48 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-16 06:48 . 2013-05-16 06:48 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-16 06:48 . 2013-05-16 06:48 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-16 06:48 . 2013-05-16 06:48 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-16 06:48 . 2013-05-16 06:48 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-16 06:48 . 2013-05-16 06:48 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-16 06:48 . 2013-05-16 06:48 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-16 06:48 . 2013-05-16 06:48 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-16 06:48 . 2013-05-16 06:48 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-16 06:48 . 2013-05-16 06:48 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-16 06:48 . 2013-05-16 06:48 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-16 06:48 . 2013-05-16 06:48 441856 ----a-w- c:\windows\system32\html.iec
2013-05-16 06:48 . 2013-05-16 06:48 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-16 06:48 . 2013-05-16 06:48 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-16 06:48 . 2013-05-16 06:48 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-16 06:48 . 2013-05-16 06:48 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-16 06:48 . 2013-05-16 06:48 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-16 06:48 . 2013-05-16 06:48 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-16 06:48 . 2013-05-16 06:48 235008 ----a-w- c:\windows\system32\url.dll
2013-05-16 06:48 . 2013-05-16 06:48 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-16 06:48 . 2013-05-16 06:48 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-16 06:48 . 2013-05-16 06:48 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-16 06:48 . 2013-05-16 06:48 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-16 06:48 . 2013-05-16 06:48 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-16 06:48 . 2013-05-16 06:48 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-16 06:48 . 2013-05-16 06:48 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-16 06:48 . 2013-05-16 06:48 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-16 06:48 . 2013-05-16 06:48 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-16 06:48 . 2013-05-16 06:48 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-16 06:48 . 2013-05-16 06:48 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-16 06:48 . 2013-05-16 06:48 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-16 06:48 . 2013-05-16 06:48 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-16 06:48 . 2013-05-16 06:48 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-16 06:48 . 2013-05-16 06:48 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-16 06:48 . 2013-05-16 06:48 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-16 06:48 . 2013-05-16 06:48 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-16 06:48 . 2013-05-16 06:48 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-16 06:48 . 2013-05-16 06:48 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-16 06:48 . 2013-05-16 06:48 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-16 06:48 . 2013-05-16 06:48 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-16 06:48 . 2013-05-16 06:48 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-16 06:48 . 2013-05-16 06:48 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-16 06:48 . 2013-05-16 06:48 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-16 06:43 . 2013-05-16 06:43 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-05-16 06:43 . 2013-05-16 06:43 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-05-16 06:43 . 2013-05-16 06:43 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-05-16 06:43 . 2013-05-16 06:43 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-16 06:43 . 2013-05-16 06:43 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-05-16 06:43 . 2013-05-16 06:43 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-16 06:43 . 2013-05-16 06:43 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2013-05-16 06:43 . 2013-05-16 06:43 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-05-16 06:43 . 2013-05-16 06:43 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-05-16 06:43 . 2013-05-16 06:43 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-05-16 06:43 . 2013-05-16 06:43 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-05-16 06:43 . 2013-05-16 06:43 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-05-16 06:43 . 2013-05-16 06:43 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-05-16 06:43 . 2013-05-16 06:43 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-05-16 06:43 . 2013-05-16 06:43 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-05-16 06:43 . 2013-05-16 06:43 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-05-16 06:43 . 2013-05-16 06:43 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-05-16 06:43 . 2013-05-16 06:43 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-05-16 06:43 . 2013-05-16 06:43 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-05-16 06:43 . 2013-05-16 06:43 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2013-05-16 06:43 . 2013-05-16 06:43 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-05-16 06:43 . 2013-05-16 06:43 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-16 06:43 . 2013-05-16 06:43 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-05-16 06:43 . 2013-05-16 06:43 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2013-05-16 06:43 . 2013-05-16 06:43 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-05-16 06:43 . 2013-05-16 06:43 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2013-05-16 06:43 . 2013-05-16 06:43 1238528 ----a-w- c:\windows\system32\d3d10.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-11 975952]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 0196841358708634mcinstcleanup;McAfee Application Installer Cleanup (0196841358708634);c:\windows\TEMP\019684~1.EXE;c:\windows\TEMP\019684~1.EXE [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 lxea_device;lxea_device;c:\windows\system32\lxeacoms.exe;c:\windows\SYSNATIVE\lxeacoms.exe [x]
S2 lxeaCATSCustConnectService;lxeaCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\lxeaserv.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-01 11:11 1173456 ----a-w- c:\program files (x86)\Google\Chrome\Application\28.0.1500.95\Installer\chrmstp.exe
.
Contenu du dossier 'Tâches planifiées'
.
2013-08-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-23 17:09]
.
2013-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20 19:24]
.
2013-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20 19:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-06-10 324608]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-29 11101800]
"PLFSetI"="c:\windows\PLFSetI.exe" [2013-01-20 206208]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-10-22 325120]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
"lxeamon.exe"="c:\program files (x86)\Lexmark S300-S400 Series\lxeamon.exe" [2011-01-24 770728]
"EzPrint"="c:\program files (x86)\Lexmark S300-S400 Series\ezprint.exe" [2011-01-24 148280]
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\SysWOW64\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\users\Ingid et Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\dpexa03m.default\
FF - prefs.js: browser.startup.homepage - hxxp://fr.yahoo.com/
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2013-08-02 15:54:22
ComboFix-quarantined-files.txt 2013-08-02 13:54
ComboFix2.txt 2013-08-02 08:45
.
Avant-CF: 254 737 612 800 octets libres
Après-CF: 254 379 208 704 octets libres
.
- - End Of File - - 6FE770833C9FC1ADBFD2DEFDEBA24A79
D41D8CD98F00B204E9800998ECF8427E

t'as pas renommé combofix comme demandé

Alors j'ai redemarré, attendu que le pc se mette en veille, je l'ai sorti de la veille et tout avait l'air d'être OK mais au moment d'envoyer le message le problème d'origine s'est reposé: ce programme ne répond plus et tout est bloqué donc arrêt sauvage et redemarrage...

et si tu redemarres la machine ?

toutes facons si t'as rien à quoi tu tiens dans le pc c'est sur que c'est plus vite fait

je viens d'essayer de relancer mon Pc après qu'il se soit mis en veille, ça me fait un écran noir avec le disque dur qui tourne sans qu'il ne se passe rien...
Ca n'aurait pas été plus simple de reformater le disque dur et de tout réinstaller?

Voici le rapport de combofix:

ComboFix 13-08-01.01 - Ingid et Nicolas 02/08/2013 10:38:02.1.2 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.3956.2458 [GMT 2:00]
Lancé depuis: c:\users\Ingid et Nicolas\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Un nouveau point de restauration a été créé
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Ingid et Nicolas\Desktop\internet explorer.lnk
c:\windows\SysWow64\ijl11.dll
c:\windows\Temp\log.txt
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2013-07-02 au 2013-08-02 ))))))))))))))))))))))))))))))))))))
.
.
2013-08-02 08:43 . 2013-08-02 08:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-08-02 08:39 . 2013-08-02 08:39 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EAC5A1F6-49B3-4E53-9279-C9676A368797}\offreg.dll
2013-08-02 08:21 . 2013-07-02 08:34 9460976 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EAC5A1F6-49B3-4E53-9279-C9676A368797}\mpengine.dll
2013-07-31 20:45 . 2013-07-31 20:49 -------- d-----w- c:\windows\system32\MRT
2013-07-31 19:57 . 2013-08-01 05:03 -------- d-----w- C:\Pre_Scan
2013-07-29 19:31 . 2013-07-29 19:31 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Roaming\Malwarebytes
2013-07-29 19:30 . 2013-07-29 19:30 -------- d-----w- c:\programdata\Malwarebytes
2013-07-29 19:30 . 2013-07-29 19:31 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-07-29 19:30 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-07-29 19:30 . 2013-07-29 19:30 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Programs
2013-07-20 17:52 . 2013-07-20 17:52 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Roaming\Apple Computer
2013-07-20 17:52 . 2013-07-20 17:52 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Apple Computer
2013-07-20 17:51 . 2013-07-30 14:41 -------- d-----w- c:\programdata\Apple Computer
2013-07-20 17:51 . 2013-07-30 14:41 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\users\Ingid et Nicolas\AppData\Local\Apple
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files (x86)\Apple Software Update
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files\Common Files\Apple
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files\Bonjour
2013-07-20 17:39 . 2013-07-20 17:39 -------- d-----w- c:\program files (x86)\Bonjour
2013-07-20 17:38 . 2013-07-30 14:41 -------- d-----w- c:\program files (x86)\Common Files\Apple
2013-07-20 17:38 . 2013-07-20 17:39 -------- d-----w- c:\programdata\Apple
2013-07-19 14:49 . 2013-07-19 14:49 899184 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-07-19 14:49 . 2013-07-19 14:49 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-07-19 14:49 . 2013-07-19 14:49 639312 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-07-14 17:18 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
2013-07-14 17:18 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
2013-07-14 17:18 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
2013-07-14 17:18 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
2013-07-14 17:18 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
2013-07-14 17:18 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
2013-07-14 17:18 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
2013-07-14 17:18 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
2013-07-14 17:18 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2013-07-14 17:17 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-14 17:17 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
2013-07-14 17:17 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
2013-07-14 17:17 . 2013-04-10 05:48 1732608 ----a-w- c:\program files\Windows Journal\NBDoc.DLL
2013-07-14 17:17 . 2013-04-10 05:46 1402880 ----a-w- c:\program files\Windows Journal\JNWDRV.dll
2013-07-14 17:17 . 2013-04-10 05:46 1393152 ----a-w- c:\program files\Windows Journal\JNTFiltr.dll
2013-07-14 17:17 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 17:17 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2013-07-14 17:16 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-07-14 17:16 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-28 05:42 . 2013-03-16 16:52 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-06-28 05:42 . 2013-03-16 16:52 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-06-28 05:42 . 2013-03-07 11:31 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-06-23 22:57 . 2013-01-22 20:49 78277128 ----a-w- c:\windows\system32\MRT.exe
2013-06-12 17:09 . 2013-01-23 19:58 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-12 17:09 . 2013-01-23 19:58 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-16 06:48 . 2013-05-16 06:48 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-16 06:48 . 2013-05-16 06:48 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-16 06:48 . 2013-05-16 06:48 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-16 06:48 . 2013-05-16 06:48 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-16 06:48 . 2013-05-16 06:48 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-05-16 06:48 . 2013-05-16 06:48 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-16 06:48 . 2013-05-16 06:48 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-16 06:48 . 2013-05-16 06:48 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-16 06:48 . 2013-05-16 06:48 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-16 06:48 . 2013-05-16 06:48 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-16 06:48 . 2013-05-16 06:48 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-16 06:48 . 2013-05-16 06:48 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-16 06:48 . 2013-05-16 06:48 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-16 06:48 . 2013-05-16 06:48 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-16 06:48 . 2013-05-16 06:48 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-16 06:48 . 2013-05-16 06:48 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-16 06:48 . 2013-05-16 06:48 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-16 06:48 . 2013-05-16 06:48 441856 ----a-w- c:\windows\system32\html.iec
2013-05-16 06:48 . 2013-05-16 06:48 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-16 06:48 . 2013-05-16 06:48 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-16 06:48 . 2013-05-16 06:48 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-16 06:48 . 2013-05-16 06:48 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-16 06:48 . 2013-05-16 06:48 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-16 06:48 . 2013-05-16 06:48 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-16 06:48 . 2013-05-16 06:48 235008 ----a-w- c:\windows\system32\url.dll
2013-05-16 06:48 . 2013-05-16 06:48 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-16 06:48 . 2013-05-16 06:48 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-16 06:48 . 2013-05-16 06:48 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-16 06:48 . 2013-05-16 06:48 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-16 06:48 . 2013-05-16 06:48 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-16 06:48 . 2013-05-16 06:48 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-16 06:48 . 2013-05-16 06:48 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-16 06:48 . 2013-05-16 06:48 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-16 06:48 . 2013-05-16 06:48 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-16 06:48 . 2013-05-16 06:48 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-16 06:48 . 2013-05-16 06:48 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-16 06:48 . 2013-05-16 06:48 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-16 06:48 . 2013-05-16 06:48 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-16 06:48 . 2013-05-16 06:48 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-16 06:48 . 2013-05-16 06:48 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-16 06:48 . 2013-05-16 06:48 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-16 06:48 . 2013-05-16 06:48 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-16 06:48 . 2013-05-16 06:48 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-16 06:48 . 2013-05-16 06:48 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-16 06:48 . 2013-05-16 06:48 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-16 06:48 . 2013-05-16 06:48 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-16 06:48 . 2013-05-16 06:48 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-16 06:48 . 2013-05-16 06:48 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-16 06:48 . 2013-05-16 06:48 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-16 06:43 . 2013-05-16 06:43 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-05-16 06:43 . 2013-05-16 06:43 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-05-16 06:43 . 2013-05-16 06:43 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-05-16 06:43 . 2013-05-16 06:43 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-05-16 06:43 . 2013-05-16 06:43 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-05-16 06:43 . 2013-05-16 06:43 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-05-16 06:43 . 2013-05-16 06:43 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
2013-05-16 06:43 . 2013-05-16 06:43 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-05-16 06:43 . 2013-05-16 06:43 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-05-16 06:43 . 2013-05-16 06:43 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-05-16 06:43 . 2013-05-16 06:43 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-05-16 06:43 . 2013-05-16 06:43 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-05-16 06:43 . 2013-05-16 06:43 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-05-16 06:43 . 2013-05-16 06:43 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-05-16 06:43 . 2013-05-16 06:43 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-05-16 06:43 . 2013-05-16 06:43 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-05-16 06:43 . 2013-05-16 06:43 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-05-16 06:43 . 2013-05-16 06:43 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-05-16 06:43 . 2013-05-16 06:43 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-05-16 06:43 . 2013-05-16 06:43 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-05-16 06:43 . 2013-05-16 06:43 221184 ----a-w- c:\windows\system32\UIAnimation.dll
2013-05-16 06:43 . 2013-05-16 06:43 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-05-16 06:43 . 2013-05-16 06:43 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-05-16 06:43 . 2013-05-16 06:43 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-05-16 06:43 . 2013-05-16 06:43 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2013-05-16 06:43 . 2013-05-16 06:43 187392 ----a-w- c:\windows\SysWow64\UIAnimation.dll
2013-05-16 06:43 . 2013-05-16 06:43 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2013-05-16 06:43 . 2013-05-16 06:43 1238528 ----a-w- c:\windows\system32\d3d10.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-08-25 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-11 975952]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 0196841358708634mcinstcleanup;McAfee Application Installer Cleanup (0196841358708634);c:\windows\TEMP\019684~1.EXE;c:\windows\TEMP\019684~1.EXE [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
R3 gupdatem;Service Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 lxea_device;lxea_device;c:\windows\system32\lxeacoms.exe;c:\windows\SYSNATIVE\lxeacoms.exe [x]
S2 lxeaCATSCustConnectService;lxeaCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxeaserv.exe;c:\windows\SYSNATIVE\spool\DRIVERS\x64\3\\lxeaserv.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-01 11:11 1173456 ----a-w- c:\program files (x86)\Google\Chrome\Application\28.0.1500.95\Installer\chrmstp.exe
.
Contenu du dossier 'Tâches planifiées'
.
2013-08-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-23 17:09]
.
2013-08-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20 19:24]
.
2013-08-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-20 19:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2010-06-10 324608]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-29 11101800]
"PLFSetI"="c:\windows\PLFSetI.exe" [2013-01-20 206208]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-10-22 325120]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
"lxeamon.exe"="c:\program files (x86)\Lexmark S300-S400 Series\lxeamon.exe" [2011-01-24 770728]
"EzPrint"="c:\program files (x86)\Lexmark S300-S400 Series\ezprint.exe" [2011-01-24 148280]
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.com/
uLocal Page = c:\windows\SysWOW64\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~4\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\users\Ingid et Nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\dpexa03m.default\
FF - prefs.js: browser.startup.homepage - hxxp://fr.yahoo.com/
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
AddRemove-SquareClock_Production_Castorama_Internet - c:\users\Ingid et Nicolas\AppData\Local\SquareClock.Production_Castorama_Internet\SQ.Remover.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2013-08-02 10:45:47
ComboFix-quarantined-files.txt 2013-08-02 08:45
.
Avant-CF: 250 804 043 776 octets libres
Après-CF: 254 676 709 376 octets libres
.
- - End Of File - - D5E2492488517ED0AF7F19E95CD3A1E4
D41D8CD98F00B204E9800998ECF8427E