Virus you have a security problem!

juste pour la restauration du systeme je peu pas car j'ai vista preinstaller dans le pc et sa me dit que tous sa c automatique je peu pas decocher la case de mon dd donc voilà je te remercie pour tout heuresement qu'il y a des gens comme toi car sinon se serais la merde chez plein de monde passe une bonne nuit et si un jour j'ai un blem je passerais sur ton site qui est pas mal du tout encore merci @ +

Mais de rien ;-)

Tu peux aussi aller supprimer ces 3 programmes qui n ont pas pu être supprimés par toolscleaner :

C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\UsbFix: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\FindyKill: ERREUR DE SUPPRESSION !!
C:\Users\zbenouze\Desktop\ComboFix.exe: ERREUR DE SUPPRESSION !!

merci pour cette precision de ne pas toucher la souris lol car sa marcher voilà le raport

[ Rapport ToolsCleaner version 2.2.6 (par A.Rothstein & dj QUIOU) ]

-->- Recherche:

C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\TB.txt: trouvé !
C:\SDFIX: trouvé !
C:\Combofix: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Program Files\UsbFix: trouvé !
C:\Program Files\FindyKill: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\Program Files\UsbFix\UsbFix.exe: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\UsbFix: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\FindyKill: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UsbFix: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UsbFix\UsbFix.lnk: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\UsbFix: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\FindyKill: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\UsbFix: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\FindyKill: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\UsbFix\UsbFix.lnk: trouvé !
C:\Users\zbenouze\AppData\Local\VirtualStore\Program Files\Trend Micro\HijackThis: trouvé !
C:\Users\zbenouze\AppData\Local\VirtualStore\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\Users\zbenouze\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes\UsbFix: trouvé !
C:\Users\zbenouze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UsbFix: trouvé !
C:\Users\zbenouze\Desktop\ComboFix.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\SdFix.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\LopSD.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\Clean.zip: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\OtMoveIt2.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\HijackThis.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\SmitFraudFix.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\ToolBarSD.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\hijackthis.log: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\UsbFix.exe: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\UsbFix.lnk: trouvé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\SmitFraudfix: trouvé !

---------------------------------
-->- Suppression:

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Users\zbenouze\Desktop\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\SdFix.exe: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\LopSD.exe: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\Clean.zip: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\OtMoveIt2.exe: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\HijackThis.exe: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\SmitFraudFix.exe: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\ToolBarSD.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\TB.txt: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Program Files\UsbFix\UsbFix.exe: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UsbFix\UsbFix.lnk: supprimé !
C:\Users\zbenouze\AppData\Local\VirtualStore\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\hijackthis.log: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\UsbFix.exe: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\UsbFix.lnk: supprimé !
C:\SDFIX: supprimé !
C:\Combofix: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\Program Files\UsbFix: supprimé !
C:\Program Files\FindyKill: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\UsbFix: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\FindyKill: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UsbFix: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FindyKill: supprimé !
C:\Users\zbenouze\AppData\Local\VirtualStore\Program Files\Trend Micro\HijackThis: supprimé !
C:\Users\zbenouze\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes\UsbFix: ERREUR DE SUPPRESSION !!
C:\Users\zbenouze\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UsbFix: supprimé !
C:\Users\zbenouze\Desktop\NE PAS TOUCHER\SmitFraudfix: supprimé !

Corbeille vidée!
Fichiers temporaires nettoyés !

Salut !!

Tu dois lancer Toolscleaner en cliquant sur Rechercher et le laisser chercher sans toucher à la souris...

Si tu veux un meilleur antivirus qu'avast, il y a Antivir

Voici un tutoriel pour l'installer et l'utiliser correctement.

désinstalle proprement avast avant de l installer

et aussi je voudrais savoir qu'elle antivirus tu me conseillerais sachant que j'ai avast en ce moment et si aucun logiciel peu m'enlever tous les outils qui on traiter mon virus puis-je le faire manuellement

bon je fait comme tu as dit mais quand je le lance il me met ne répond plus et j'atend 15mn et apres sa me met fermer le programe donc impossible de l'executer je crois sa me l'vais dejas fait avec ce logiciel auparavan

Salut lol !!

ok si tu n as plus de problèmes tu peux faire ceci pour terminer stp :

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

▶ Va dans démarrer puis panneau de configuration
▶ Double Clique sur l'icône "Comptes d'utilisateurs"
▶ Clique ensuite sur désactiver et valide.

Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

▶ Télécharge Toolscleaner sur ton Bureau

▶ Double-clique sur ToolsCleaner2.exe et laisse le travailler
▶ Clique sur Recherche et laisse le scan se terminer.
▶ Clique sur Suppression pour finaliser.
▶ Tu peux, si tu le souhaites, te servir des Options facultatives.
▶ Clique sur Quitter, pour que le rapport puisse se créer.
▶ Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

Désactive et réactive la Restauration du système :

Voici un tutoriel qui t expliquera comment désactiver et réactiver la restauration du système.

Ensuite tu peux réactiver le controle des comptes et créer un point de restauation !! IMPORTANT

Et ensuite tu peux mettre ton sujet en résolu ;-)

mince mon fond d'ecran pas "niker" mais "nikel" lol

re bien j'ai fait tout comme tu ma dit mais il me dise que je peu pas avoir le javara.log je le chch mais impossible de trouver se raport bizarre sinon mon pc va bien mon fond d'ecran niker mes programe tourne bien j'avais des probleme quand je voulais fermer une application il me metais ne repond plus a chaque maintenant c'est fini voilà merci

Salut !!

relance hijackthis en cliquant sur scan only et coches ces lignes stp :

R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
R3 - URLSearchHook: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file)
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)

puis tu cliques sur fix checked.

ensuite :

▶ Télécharge RegCleaner

▶ Une fois installé, double-clique sur son icône pour l'exécuter

▶ Dans la barre de menu, clique sur Options puis sélectionne Language => Choose the language

▶ recherche French.rlg et double-clique dessus pour appliquer la langue

▶ Clique ensuite sur Outils dans la barre de menu

▶ Sélectionne Nettoyage du registre => Nettoyeur de registre automatique

▶ RegCleaner va alors lancer le nettoyage automatiquement

▶ Coche ensuite les entrées invalides et clique sur Supprimer sélections => Terminer => Quitter

ensuite :

▶ Télécharge JavaRa.zip

▶ Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)

▶ Double-clique sur le répertoire JavaRa obtenu.

▶ Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)

▶ Clique sur Search For Updates.

▶ Sélectionne Update Using jucheck.exe puis clique sur Search.

▶ Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.

▶ Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.

▶ Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.

▶ Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.

* Note : le rapport se trouve aussi là : ( C:\JavaRa.log )

▶ Ferme l'application et dis moi si tu as encore des problèmes.

voilà en esperan une reponse rapidement merci

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:03:40, on 18/11/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Windows\system32\conime.exe
C:\Windows\Explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Users\zbenouze\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
R3 - URLSearchHook: (no name) - {40d1c3a7-4ffb-4443-b3a0-a64b2df7fc3b} - (no file)
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O8 - Extra context menu item: &Search - ?p=ZNxmk142YYFR
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D71F9A27-723E-4B8B-B428-B725E47CBA3E} - http://imikimi.com/download/imikimi_plugin_0.5.1.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe

voici le raport combot fix ps: sa ma remis mon fond d'ecran

ComboFix 08-11-16.05 - zbenouze 2008-11-18 1:52:27.2 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Basique 6.0.6001.1.1252.1.1036.18.2245 [GMT 1:00]
Lancé depuis: c:\users\zbenouze\Desktop\ComboFix.exe
* Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\InfoSat.txt
c:\windows\system32\MSINET.oca
c:\windows\system32\wxmmin.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-10-18 au 2008-11-18 ))))))))))))))))))))))))))))))))))))
.

2008-11-18 01:48 . 2008-11-18 01:51 <REP> d-------- C:\32788R22FWJFW
2008-11-17 19:10 . 2008-11-17 19:10 <REP> d-------- c:\program files\DAEMON Tools Lite
2008-11-15 02:11 . 2008-11-15 02:11 <REP> d-------- c:\users\zbenouze\awc_ifyouwant2006
2008-11-14 02:49 . 2008-10-16 22:13 1,809,944 --a------ c:\windows\System32\wuaueng.dll
2008-11-14 02:49 . 2008-10-16 21:56 1,524,736 --a------ c:\windows\System32\wucltux.dll
2008-11-14 02:49 . 2008-10-16 22:12 561,688 --a------ c:\windows\System32\wuapi.dll
2008-11-14 02:49 . 2008-10-16 21:55 83,456 --a------ c:\windows\System32\wudriver.dll
2008-11-14 02:49 . 2008-10-16 22:09 51,224 --a------ c:\windows\System32\wuauclt.exe
2008-11-14 02:49 . 2008-10-16 22:09 43,544 --a------ c:\windows\System32\wups2.dll
2008-11-14 02:49 . 2008-10-16 22:08 34,328 --a------ c:\windows\System32\wups.dll
2008-11-14 02:48 . 2008-10-16 14:08 162,064 --a------ c:\windows\System32\wuwebv.dll
2008-11-14 02:48 . 2008-10-16 13:56 31,232 --a------ c:\windows\System32\wuapp.exe
2008-11-12 22:27 . 2008-09-05 06:14 1,191,936 --a------ c:\windows\System32\msxml3.dll
2008-11-12 22:00 . 2008-09-10 04:40 1,334,272 --a------ c:\windows\System32\msxml6.dll
2008-11-12 21:47 . 2008-08-27 02:05 212,480 --a------ c:\windows\System32\drivers\mrxsmb10.sys
2008-11-07 11:06 . 2008-11-07 11:06 236 --a------ C:\sqmdata00.sqm
2008-11-07 11:06 . 2008-11-07 11:06 200 --a------ C:\sqmnoopt00.sqm
2008-11-07 01:10 . 2008-11-17 20:00 <REP> d-------- c:\users\zbenouze\Tracing
2008-11-07 01:08 . 2008-11-07 01:08 <REP> d-------- c:\program files\Microsoft SQL Server Compact Edition
2008-11-07 01:07 . 2008-06-26 04:21 712,704 --a------ c:\windows\System32\WindowsCodecs.dll
2008-11-07 01:07 . 2008-06-26 04:21 347,648 --a------ c:\windows\System32\WindowsCodecsExt.dll
2008-11-07 01:05 . 2008-11-07 01:05 <REP> d-------- c:\program files\Microsoft
2008-11-07 01:04 . 2008-11-07 01:04 <REP> d-------- c:\program files\Common Files\Windows Live
2008-11-05 15:03 . 2008-08-12 04:39 443,392 --a------ c:\windows\System32\win32spl.dll
2008-11-03 18:44 . 1998-02-06 22:39 304,128 --a------ c:\windows\unin040c.exe
2008-11-01 22:18 . 2008-03-05 15:56 3,786,760 --a------ c:\windows\System32\D3DX9_37.dll
2008-11-01 22:18 . 2007-07-19 18:14 3,727,720 --a------ c:\windows\System32\d3dx9_35.dll
2008-11-01 22:18 . 2007-05-16 16:45 3,497,832 --a------ c:\windows\System32\d3dx9_34.dll
2008-11-01 22:18 . 2007-03-12 16:42 3,495,784 --a------ c:\windows\System32\d3dx9_33.dll
2008-11-01 22:18 . 2006-11-29 13:06 3,426,072 --a------ c:\windows\System32\d3dx9_32.dll
2008-11-01 22:18 . 2006-09-28 16:05 2,414,360 --a------ c:\windows\System32\d3dx9_31.dll
2008-11-01 22:18 . 2007-04-04 18:53 81,768 --a------ c:\windows\System32\xinput1_3.dll
2008-11-01 18:24 . 2008-11-01 18:35 <REP> d-------- c:\users\All Users\POPWWPROFILES
2008-11-01 18:24 . 2008-11-01 18:35 <REP> d-------- c:\programdata\POPWWPROFILES
2008-11-01 18:24 . 2008-11-01 18:24 <REP> d-------- c:\program files\Ubisoft
2008-10-30 02:24 . 2008-10-30 02:24 42,320 --a------ c:\windows\System32\xfcodec.dll
2008-10-24 20:40 . 2008-11-07 03:42 37,440 --a------ c:\windows\System32\drivers\pssdklbf.drv
2008-10-24 20:40 . 2008-11-07 03:42 30,272 --a------ c:\windows\System32\drivers\pssdk31.drv
2008-10-24 20:34 . 2008-10-24 20:34 93 --a------ c:\windows\WININIT.INI
2008-10-24 02:46 . 2008-10-24 02:46 <REP> d-------- c:\program files\UsbFix
2008-10-24 01:37 . 2008-10-24 02:07 <REP> d-------- c:\program files\FindyKill
2008-10-24 00:43 . 2008-10-22 01:19 <REP> d-------- C:\SDFix
2008-10-23 23:49 . 2008-10-23 23:49 <REP> d-------- C:\_OTMoveIt
2008-10-23 22:18 . 2007-09-05 23:22 289,144 --a------ c:\windows\System32\VCCLSID.exe
2008-10-23 22:18 . 2006-04-27 16:49 288,417 --a------ c:\windows\System32\SrchSTS.exe
2008-10-23 22:18 . 2008-09-08 22:38 88,576 --a------ c:\windows\System32\AntiXPVSTFix.exe
2008-10-23 22:18 . 2008-10-01 14:51 87,552 --a------ c:\windows\System32\VACFix.exe
2008-10-23 22:18 . 2008-10-10 07:58 82,944 --a------ c:\windows\System32\o4Patch.exe
2008-10-23 22:18 . 2008-05-18 20:40 82,944 --a------ c:\windows\System32\IEDFix.exe
2008-10-23 22:18 . 2008-10-10 07:58 82,944 --a------ c:\windows\System32\IEDFix.C.exe
2008-10-23 22:18 . 2008-08-18 11:19 82,432 --a------ c:\windows\System32\404Fix.exe
2008-10-23 22:18 . 2003-06-05 20:13 53,248 --a------ c:\windows\System32\Process.exe
2008-10-23 22:18 . 2004-07-31 17:50 51,200 --a------ c:\windows\System32\dumphive.exe
2008-10-23 22:18 . 2007-10-03 23:36 25,600 --a------ c:\windows\System32\WS2Fix.exe
2008-10-23 22:18 . 2008-10-23 22:18 1,194 --a------ c:\windows\System32\tmp.reg
2008-10-23 21:56 . 2008-10-24 00:36 <REP> d-------- C:\ToolBar SD
2008-10-23 20:01 . 2008-10-23 22:12 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-10-23 20:01 . 2008-10-22 15:10 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
2008-10-23 20:01 . 2008-10-22 15:10 15,504 --a------ c:\windows\System32\drivers\mbam.sys
2008-10-23 15:44 . 2008-10-23 15:51 <REP> d-------- C:\Lop SD
2008-10-23 14:29 . 2008-10-23 14:29 <REP> d-------- c:\users\zbenouze\AppData\Roaming\Malwarebytes
2008-10-23 14:29 . 2008-10-23 14:29 <REP> d-------- c:\users\All Users\Malwarebytes
2008-10-23 14:29 . 2008-10-23 14:29 <REP> d-------- c:\programdata\Malwarebytes
2008-10-23 13:58 . 2008-10-23 13:58 <REP> d-------- c:\program files\Trend Micro
2008-10-23 12:22 . 2008-10-23 12:47 <REP> d-------- c:\users\All Users\Spybot - Search & Destroy
2008-10-23 12:22 . 2008-10-23 12:47 <REP> d-------- c:\programdata\Spybot - Search & Destroy
2008-10-23 12:22 . 2008-10-23 12:22 <REP> d-------- c:\program files\Spybot - Search & Destroy
2008-10-23 07:05 . 2008-10-23 07:05 237,568 --a------ c:\windows\System32\rmc_rtspdl.dll
2008-10-23 07:05 . 2008-10-23 07:05 156,672 --a------ c:\windows\System32\rmc_fixasf.exe
2008-10-23 07:02 . 2008-10-23 07:02 <REP> d-------- c:\windows\Replay Media Catcher
2008-10-23 07:02 . 2008-10-23 10:55 323,584 --a------ c:\windows\System32\AUDIOGENIE2.DLL
2008-10-22 16:12 . 2008-10-22 16:12 <REP> d-------- c:\users\All Users\Apowersoft
2008-10-22 16:12 . 2008-10-22 16:12 <REP> d-------- c:\programdata\Apowersoft
2008-10-22 16:11 . 2008-10-22 16:11 <REP> d-------- c:\windows\Application Data
2008-10-20 20:20 . 2008-09-03 04:59 468,992 --a------ c:\windows\System32\newdev.dll
2008-10-20 20:20 . 2008-09-03 04:58 74,752 --a------ c:\windows\System32\newdev.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-17 21:11 203,272 ----a-w c:\windows\System32\PnkBstrB.exe
2008-11-17 21:11 138,520 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2008-11-17 20:53 --------- d-----w c:\users\zbenouze\AppData\Roaming\Xfire
2008-11-17 08:49 --------- d-----w c:\programdata\Google Updater
2008-11-12 23:15 --------- d-----w c:\programdata\Microsoft Help
2008-11-11 18:37 --------- d-----w c:\program files\Windows Live Safety Center
2008-11-10 00:54 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-08 00:16 --------- d-----w c:\programdata\Xfire
2008-11-08 00:16 --------- d-----w c:\program files\Xfire
2008-11-07 00:08 --------- d-----w c:\program files\Windows Live
2008-11-01 00:12 107,888 ----a-w c:\windows\System32\CmdLineExt.dll
2008-10-23 22:49 --------- d-----w c:\program files\Online_TV
2008-10-23 09:51 --------- d-----w c:\program files\Microsoft Silverlight
2008-10-23 06:44 --------- d-----w c:\users\zbenouze\AppData\Roaming\LimeWire
2008-10-20 19:20 --------- d-----w c:\program files\Windows Mail
2008-10-20 16:59 --------- d-----w c:\program files\Mozilla Firefox 3 Beta 2
2008-10-16 18:20 --------- d-----w c:\program files\SkullAndBones3D
2008-10-16 16:54 --------- d-----w c:\users\zbenouze\AppData\Roaming\ATI
2008-10-16 16:54 --------- d-----w c:\program files\ATI Technologies
2008-10-16 16:29 231,897,136 ----a-w c:\windows\DUMP4f47.tmp
2008-10-16 16:23 --------- d-----w c:\programdata\NVIDIA
2008-10-16 16:04 --------- d-----w c:\program files\Driver Cleaner Pro
2008-10-14 17:00 --------- d-----w c:\users\zbenouze\AppData\Roaming\InstallShield
2008-10-14 17:00 --------- d-----w c:\program files\THQ
2008-10-14 13:14 --------- d-----w c:\program files\MessengerDiscovery
2008-10-11 23:06 --------- d-----w c:\program files\Web Hottest Videos Personal Player
2008-10-11 22:50 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2008-10-11 22:47 1,026 ---ha-w C:\aaw7boot.cmd
2008-10-11 22:30 --------- d-----w c:\programdata\Lavasoft
2008-10-11 01:49 --------- d-----w c:\users\zbenouze\AppData\Roaming\Nero
2008-10-11 01:22 --------- d-----w c:\program files\Common Files\Nero
2008-10-11 00:53 --------- d-----w c:\program files\Nero
2008-10-11 00:41 --------- d-----w c:\programdata\Nero
2008-10-09 12:01 --------- d-----w c:\users\zbenouze\AppData\Roaming\teamspeak2
2008-10-07 23:29 --------- d-----w c:\program files\Alcohol Soft
2008-10-03 09:55 --------- d-----w c:\programdata\Electronic Arts
2008-10-02 09:21 --------- d-----w c:\users\zbenouze\AppData\Roaming\Leadertech
2008-10-02 08:07 453,152 ----a-w c:\windows\System32\nvuninst.exe
2008-10-02 03:49 827,392 ----a-w c:\windows\System32\wininet.dll
2008-10-01 22:13 --------- d-----w c:\users\zbenouze\AppData\Roaming\skypePM
2008-10-01 22:13 --------- d-----w c:\users\zbenouze\AppData\Roaming\Skype
2008-10-01 17:32 --------- d-----w c:\program files\Picasa2
2008-09-30 17:49 --------- d-----w c:\program files\Steam
2008-09-30 17:49 --------- d-----w c:\program files\Common Files\Steam
2008-09-30 17:46 --------- d-----w c:\program files\EA GAMES
2008-09-30 15:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll
2008-09-28 15:08 --------- d-----w c:\programdata\Yahoo! Companion
2008-09-26 17:25 47,360 ----a-w c:\users\zbenouze\AppData\Roaming\pcouffin.sys
2008-09-26 17:25 --------- d-----w c:\users\zbenouze\AppData\Roaming\Vso
2008-09-21 12:38 --------- d-----w c:\program files\Yahoo!
2008-09-19 18:00 56 ---ha-w c:\users\All Users\ezsidmv.dat
2008-09-19 18:00 56 ---ha-w c:\programdata\ezsidmv.dat
2008-09-19 17:57 --------- d-----w c:\programdata\Skype
2008-09-19 17:57 --------- d-----w c:\program files\Skype
2008-09-19 17:57 --------- d-----w c:\program files\Common Files\Skype
2008-09-18 05:09 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe
2008-09-18 05:09 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe
2008-09-18 02:16 2,032,640 ----a-w c:\windows\System32\win32k.sys
2008-09-08 23:03 51,712 ----a-w c:\windows\System32\sirenacm.dll
2008-09-05 15:04 288,768 ----a-w c:\windows\WLXPGSS.SCR
2008-05-21 21:42 174 --sha-w c:\program files\desktop.ini
2008-01-22 18:45 32 ----a-w c:\users\All Users\ezsid.dat
2008-01-22 18:45 32 ----a-w c:\programdata\ezsid.dat
.

((((((((((((((((((((((((((((( snapshot@2008-10-23_15.20.51.65 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-10-14 17:09:28 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2008-11-10 00:47:24 53,248 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2008-10-14 17:09:28 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2008-11-10 00:47:24 12,800 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2008-10-14 17:09:28 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2008-11-10 00:47:24 473,600 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2008-10-14 17:09:21 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:15 2,676,224 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:23 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:17 2,846,720 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:23 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:18 563,712 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:24 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:18 567,296 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:25 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:19 576,000 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:25 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:20 577,024 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:25 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:20 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:26 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:20 577,536 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:26 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:21 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:28 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2008-11-10 00:47:25 578,560 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2008-10-14 17:09:29 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2008-11-10 00:47:25 145,920 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2008-10-14 17:09:29 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2008-11-10 00:47:25 159,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2008-10-14 17:09:29 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2008-11-10 00:47:25 364,544 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2008-10-14 17:09:29 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2008-11-10 00:47:25 178,176 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2008-10-14 17:09:27 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-11-10 00:47:23 223,232 ----a-w c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2008-11-07 00:08:12 236,392 ----a-w c:\windows\assembly\GAC_MSIL\System.Data.SqlServerCe\9.0.242.0__89845dcd8080cc91\System.Data.SqlServerCe.dll
- 2005-10-20 18:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
+ 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\Hiv-backup\ERDNT.EXE
- 2000-08-31 06:00:00 89,504 ----a-w c:\windows\fdsv.exe
+ 2000-08-31 07:00:00 89,504 ----a-w c:\windows\fdsv.exe
- 2000-08-31 06:00:00 80,412 ----a-w c:\windows\grep.exe
+ 2000-08-31 07:00:00 80,412 ----a-w c:\windows\grep.exe
- 2008-10-13 23:59:59 4,369,408 ----a-r c:\windows\Installer\{2315B23D-3E21-4920-837D-AE6460934ECB}\EAregister.exe
+ 2008-11-10 00:31:58 4,369,408 ----a-r c:\windows\Installer\{2315B23D-3E21-4920-837D-AE6460934ECB}\EAregister.exe
- 2008-10-13 23:59:58 25,622 ----a-r c:\windows\Installer\{2315B23D-3E21-4920-837D-AE6460934ECB}\fifapc.exe
+ 2008-11-10 00:31:57 25,622 ----a-r c:\windows\Installer\{2315B23D-3E21-4920-837D-AE6460934ECB}\fifapc.exe
+ 2008-11-12 23:14:51 32,768 ----a-r c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
+ 2008-11-07 00:05:15 64,520 ----a-r c:\windows\Installer\{868EC13B-52DA-43B9-8C05-50CD897674DF}\IconWlc.exe
- 2008-10-15 07:13:40 20,240 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
+ 2008-11-12 23:15:17 20,240 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe
- 2008-10-15 07:13:40 184,080 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
+ 2008-11-12 23:15:16 184,080 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe
- 2008-10-15 07:13:40 217,864 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
+ 2008-11-12 23:15:17 217,864 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe
- 2008-10-15 07:13:40 18,704 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
+ 2008-11-12 23:15:17 18,704 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe
- 2008-10-15 07:13:40 35,088 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
+ 2008-11-12 23:15:17 35,088 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe
- 2008-10-15 07:13:40 922,384 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
+ 2008-11-12 23:15:16 922,384 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe
- 2008-10-15 07:13:40 888,080 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
+ 2008-11-12 23:15:17 888,080 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe
- 2008-10-15 07:13:40 1,172,240 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-11-12 23:15:16 1,172,240 ----a-r c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe
+ 2008-11-07 00:08:57 119,296 ----a-r c:\windows\Installer\{B229A0D2-F322-4A30-8E0F-F4AEA3000A14}\WLXPhotoGalleryIcon.exe
+ 2008-11-07 00:06:42 86,746 ----a-r c:\windows\Installer\{DA0FC90D-5D87-445E-90B4-B938C57FE16F}\wlmail.exe
+ 2008-11-07 00:10:47 29,926 ----a-r c:\windows\Installer\{F72F8316-91E8-4C80-9E39-EBE933E1EDFB}\MsblIco.Exe
- 2000-08-31 06:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
+ 2000-08-31 07:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
- 2000-08-31 06:00:00 98,816 ----a-w c:\windows\sed.exe
+ 2000-08-31 07:00:00 98,816 ----a-w c:\windows\sed.exe
- 2008-10-23 13:14:34 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-11-18 00:40:53 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2008-10-23 13:14:34 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2008-11-18 00:40:53 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2008-10-23 13:16:33 212,992 ----a-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2008-11-18 00:41:50 212,992 ----a-w c:\windows\ServiceProfiles\LocalService\NTUSER.DAT
- 2008-10-23 13:16:38 204,800 ----a-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2008-11-18 00:41:45 204,800 ----a-w c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT
- 2008-07-18 20:08:20 72,256 ------w c:\windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe
+ 2008-10-16 13:08:00 70,416 ------w c:\windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe
- 2000-08-31 06:00:00 161,792 ----a-w c:\windows\SWREG.exe
+ 2000-08-31 07:00:00 161,792 ----a-w c:\windows\SWREG.exe
- 2000-08-31 06:00:00 136,704 ----a-w c:\windows\SWSC.exe
+ 2000-08-31 07:00:00 136,704 ----a-w c:\windows\SWSC.exe
- 2000-08-31 06:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe
+ 2000-08-31 07:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe
- 2008-10-23 13:16:47 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-11-18 00:46:21 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-10-23 13:16:47 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-11-18 00:46:21 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-10-23 13:16:47 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-11-18 00:46:21 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-10-23 13:09:34 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
+ 2008-11-18 00:52:18 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
- 2008-10-15 07:17:43 304,296 ----a-w c:\windows\System32\FNTCACHE.DAT
+ 2008-10-24 01:03:50 304,296 ----a-w c:\windows\System32\FNTCACHE.DAT
- 2008-10-07 19:19:40 16,721,856 ----a-w c:\windows\System32\mrt.exe
+ 2008-11-04 00:10:25 17,318,336 ----a-w c:\windows\System32\mrt.exe
- 2008-01-19 07:35:35 466,944 ----a-w c:\windows\System32\netapi32.dll
+ 2008-10-16 04:47:33 466,944 ----a-w c:\windows\System32\netapi32.dll
- 2008-10-21 21:19:07 101,052 ----a-w c:\windows\System32\perfc009.dat
+ 2008-11-18 00:48:19 101,052 ----a-w c:\windows\System32\perfc009.dat
- 2008-10-21 21:19:07 123,350 ----a-w c:\windows\System32\perfc00C.dat
+ 2008-11-18 00:48:19 123,350 ----a-w c:\windows\System32\perfc00C.dat
- 2008-10-21 21:19:07 586,980 ----a-w c:\windows\System32\perfh009.dat
+ 2008-11-18 00:48:19 586,980 ----a-w c:\windows\System32\perfh009.dat
- 2008-10-21 21:19:07 669,328 ----a-w c:\windows\System32\perfh00C.dat
+ 2008-11-18 00:48:19 669,328 ----a-w c:\windows\System32\perfh00C.dat
- 2008-10-23 09:50:52 6,291,456 ----a-w c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2008-11-18 00:39:21 6,291,456 ----a-w c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2008-10-23 13:18:05 11,226 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2276965013-2953014712-681511922-1000_UserData.bin
+ 2008-11-18 00:44:38 11,708 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2276965013-2953014712-681511922-1000_UserData.bin
- 2008-10-23 13:18:04 92,812 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-11-18 00:44:38 96,202 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-09-06 17:16:44 4,344 ----a-w c:\windows\System32\WDI\ERCQueuedResolutions.dat
+ 2008-10-27 12:51:13 2,992 ----a-w c:\windows\System32\WDI\ERCQueuedResolutions.dat
- 2008-10-23 12:13:37 70,496 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-11-18 00:44:34 72,014 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
- 2008-10-16 21:16:12 254,666 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
+ 2008-10-24 00:11:47 268,740 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
- 2000-08-31 06:00:00 49,152 ----a-w c:\windows\VFIND.exe
+ 2000-08-31 07:00:00 49,152 ----a-w c:\windows\VFIND.exe
- 2008-10-20 19:20:22 147,875,304 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-11-14 01:49:29 150,247,751 ----a-w c:\windows\winsxs\ManifestCache\6.0.6001.18000_001c50b5_blobs.bin
+ 2008-09-05 04:48:28 1,194,496 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.16745_none_8661c59c99cb7ce9\msxml3.dll
+ 2008-09-05 04:45:14 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.16745_none_8661c59c99cb7ce9\msxml3r.dll
+ 2008-09-05 04:47:44 1,194,496 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.20910_none_8706d29fb2d54754\msxml3.dll
+ 2008-09-05 04:47:44 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6000.20910_none_8706d29fb2d54754\msxml3r.dll
+ 2008-09-05 05:14:05 1,191,936 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.18136_none_8853d47896e90b40\msxml3.dll
+ 2006-11-02 09:41:09 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.18136_none_8853d47896e90b40\msxml3r.dll
+ 2008-09-05 05:08:23 1,191,936 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.22258_none_88c9d1ffb015159a\msxml3.dll
+ 2008-09-05 05:04:53 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml30_31bf3856ad364e35_6.0.6001.22258_none_88c9d1ffb015159a\msxml3r.dll
+ 2008-09-10 03:25:00 1,341,440 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.16747_none_866381d899c9fc7a\msxml6.dll
+ 2008-09-10 03:21:24 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.16747_none_866381d899c9fc7a\msxml6r.dll
+ 2008-09-10 03:26:42 1,341,440 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.20913_none_87098f25b2d2e03c\msxml6.dll
+ 2008-09-10 03:26:42 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6000.20913_none_87098f25b2d2e03c\msxml6r.dll
+ 2008-09-10 03:40:14 1,334,272 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.18138_none_885590b496e78ad1\msxml6.dll
+ 2006-11-02 09:41:09 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.18138_none_885590b496e78ad1\msxml6r.dll
+ 2008-09-10 03:27:55 1,334,272 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.22261_none_88b7bbb5b023cd0d\msxml6.dll
+ 2008-09-10 03:23:55 2,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-msxml60_31bf3856ad364e35_6.0.6001.22261_none_88b7bbb5b023cd0d\msxml6r.dll
+ 2008-10-16 04:40:36 425,472 ----a-w c:\windows\winsxs\x86_microsoft-windows-netapi32_31bf3856ad364e35_6.0.6000.16764_none_8b10fff30496576a\netapi32.dll
+ 2008-10-16 04:22:27 425,984 ----a-w c:\windows\winsxs\x86_microsoft-windows-netapi32_31bf3856ad364e35_6.0.6000.20937_none_8bbe0f461d98ec8d\netapi32.dll
+ 2008-10-16 04:47:33 466,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-netapi32_31bf3856ad364e35_6.0.6001.18157_none_8d050f6301b2186f\netapi32.dll
+ 2008-10-16 04:38:26 466,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-netapi32_31bf3856ad364e35_6.0.6001.22288_none_8d6f3cb41ae72563\netapi32.dll
+ 2008-08-12 03:29:17 37,376 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6000.16728_none_377f607173cc72c2\printcom.dll
+ 2008-08-12 03:29:18 441,856 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6000.16728_none_377f607173cc72c2\win32spl.dll
+ 2008-08-12 03:17:47 37,376 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6000.20893_none_37b84c568d275770\printcom.dll
+ 2008-08-12 03:18:17 444,928 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6000.20893_none_37b84c568d275770\win32spl.dll
+ 2008-01-19 07:36:07 37,888 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18119_none_39716f4d70ea0119\printcom.dll
+ 2008-08-12 03:39:08 443,392 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.18119_none_39716f4d70ea0119\win32spl.dll
+ 2008-08-12 03:25:35 37,888 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.22241_none_39d29a048a2729fe\printcom.dll
+ 2008-08-12 03:25:37 443,392 ----a-w c:\windows\winsxs\x86_microsoft-windows-p..ooler-networkclient_31bf3856ad364e35_6.0.6001.22241_none_39d29a048a2729fe\win32spl.dll
+ 2008-08-26 01:11:59 211,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6000.16738_none_86a5e1554e593846\mrxsmb10.sys
+ 2008-08-27 00:48:36 211,968 ----a-w c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6000.20904_none_874beea267621c08\mrxsmb10.sys
+ 2008-08-27 01:05:41 212,480 ----a-w c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6001.18130_none_88841dab4b86fe7f\mrxsmb10.sys
+ 2008-08-27 00:52:38 212,480 ----a-w c:\windows\winsxs\x86_microsoft-windows-smb10-minirdr_31bf3856ad364e35_6.0.6001.22252_none_88fa1b3264b308d9\mrxsmb10.sys
+ 2008-10-16 21:12:19 561,688 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.2.6001.788_none_107673f57a433d77\wuapi.dll
+ 2008-10-16 20:55:59 83,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.2.6001.788_none_107673f57a433d77\wudriver.dll
+ 2008-10-16 21:08:57 34,328 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..owsupdateclient-aux_31bf3856ad364e35_7.2.6001.788_none_107673f57a433d77\wups.dll
+ 2008-10-16 12:56:04 31,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.2.6001.788_none_ba8134361ffa6f73\wuapp.exe
+ 2008-10-16 13:08:00 162,064 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..pdateclient-activex_31bf3856ad364e35_7.2.6001.788_none_ba8134361ffa6f73\wuwebv.dll
+ 2008-10-16 21:09:43 51,224 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.2.6001.788_none_2a6539a96682e474\wuauclt.exe
+ 2008-10-16 21:13:38 1,809,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.2.6001.788_none_2a6539a96682e474\wuaueng.dll
+ 2008-10-16 21:09:43 43,544 ----a-w c:\windows\winsxs\x86_microsoft-windows-w..wsupdateclient-core_31bf3856ad364e35_7.2.6001.788_none_2a6539a96682e474\wups2.dll
+ 2008-06-26 03:20:31 712,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.0.6000.20867_none_94eb3a03bd3f8302\WindowsCodecs.dll
+ 2008-06-26 03:21:07 712,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-windowscodec_31bf3856ad364e35_6.0.6001.22211_none_97018689ba42f034\WindowsCodecs.dll
+ 2008-06-26 03:20:31 347,648 ----a-w c:\windows\winsxs\x86_microsoft-windows-windowscodecext_31bf3856ad364e35_6.0.6000.20867_none_91fb4ef5d4c6df69\WindowsCodecsExt.dll
+ 2008-06-26 03:21:07 347,648 ----a-w c:\windows\winsxs\x86_microsoft-windows-windowscodecext_31bf3856ad364e35_6.0.6001.22211_none_94119b7bd1ca4c9b\WindowsCodecsExt.dll
+ 2008-10-16 20:56:28 1,524,736 ----a-w c:\windows\winsxs\x86_microsoft-windows-windowsupdateclient-ui_31bf3856ad364e35_7.2.6001.788_none_a8125d5406872725\wucltux.dll
+ 2008-11-12 23:14:51 1,286,152 ----a-w c:\windows\winsxs\x86_microsoft.msxml2_6bd6b9abf345378f_4.20.9870.0_none_b7e00e6c7b30b69b\msxml4.dll
+ 2008-11-12 23:14:52 91,656 ----a-w c:\windows\winsxs\x86_microsoft.msxml2r_6bd6b9abf345378f_4.1.1.0_none_365945b9da656e4d\msxml4r.dll
- 2000-08-31 06:00:00 68,096 ----a-w c:\windows\zip.exe
+ 2000-08-31 07:00:00 68,096 ----a-w c:\windows\zip.exe
.
-- Instantané actualisé --
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2008-01-19 49664]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-23 c:\windows\RtHDVCpl.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-02-15 151552]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.XFR1"= xfcodec.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Steam"="c:\program files\Steam\Steam.exe" -silent
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" /background
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe"
"Skype"="c:\program files\Skype\Phone\Skype.exe" /nosplash /minimized
"Picasa Media Detector"=c:\program files\Picasa2\PicasaMediaDetector.exe
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" -autorun
"Sidebar"=c:\program files\Windows Sidebar\sidebar.exe /autoRun

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Acer Tour Reminder"=c:\acer\AcerTour\Reminder.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_03\bin\jusched.exe"
"WarReg_PopUp"=c:\acer\WR_PopUp\WarReg_PopUp.exe
"RtHDVCpl"=RtHDVCpl.exe
"Acer Empowering Technology Monitor"=c:\acer\Empowering Technology\SysMonitor.exe
"mobiswing"=c:\progra~1\SECURE~1\secp.exe
"HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe
"Skytel"=Skytel.exe
"NeroFilterCheck"=c:\program files\Common Files\Nero\Lib\NeroCheck.exe
"hpqSRMon"=c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"MyWebSearch Plugin"=rundll32 c:\progra~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{27A992E8-3191-4058-BDC4-1321D34A3BBD}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{825364F4-5206-4106-9837-CCC9FB893293}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{7544676B-122D-44D9-B6F1-22A42CF36183}"= UDP:c:\acer\Empowering Technology\eMode\PCM\PCMService.exe:CyberLink PowerCinema Resident Program
"{1A18564B-6511-4C7F-B95E-0AD529D9AAFD}"= TCP:c:\acer\Empowering Technology\eMode\PCM\PCMService.exe:CyberLink PowerCinema Resident Program
"{9F5AEC71-ED29-449B-9488-C999843AEA4F}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{931B929F-5C13-4336-B274-08C4BD8A94D6}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule Plus
"UDP Query User{82C2595D-E106-4B61-A72E-B8FB97806CDD}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule Plus
"{B2445570-D347-42A4-AE7A-A10C60CFAD6C}"= UDP:11546:EMULE
"{CAB4A32D-8335-4046-BDC7-9A33CFDF4710}"= TCP:18917:EMUL
"TCP Query User{387A0FB4-CAE9-43F8-BCE3-57D44AAC356A}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{57A97313-0496-4170-97AC-2781DE829267}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{0BAA85B2-5288-49B3-9F4D-BA431C762EF5}c:\\program files\\xfire\\xfire.exe"= UDP:c:\program files\xfire\xfire.exe:Xfire
"UDP Query User{9BA0706F-47D6-4CD2-90AF-05897B776932}c:\\program files\\xfire\\xfire.exe"= TCP:c:\program files\xfire\xfire.exe:Xfire
"{81860BD6-83EF-4A35-B705-BE98B3C9196C}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{80C3806A-4660-4B39-B038-49832116BAC7}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{D23FB5C3-1202-4BAF-9AF1-8C068267C694}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{C823C369-A7FB-4BFB-AEC3-7B5D4CCFF4E4}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{31002FF3-D49A-4765-92A8-E1E352869D4A}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqtra08.exe:hpqtra08.exe
"{47442B6F-B7A9-4024-9D13-9F7018169EA7}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{7B56BEAA-F591-4F3E-ABC5-E6962271404F}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqste08.exe:hpqste08.exe
"{C7C382EA-5A88-435E-B7CA-AF1EFC1B052F}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{7D8F8DF5-8435-4923-83C1-20EF97B8A56A}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpofxm08.exe:hpofxm08.exe
"{34E32277-4842-4A94-8B90-BB6316A0D532}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{61FE0081-1C28-45DC-83CC-F869D8E08A0B}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hposfx08.exe:hposfx08.exe
"{1D55E872-4F3B-4545-81B9-8466FE8C0D63}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{0D0C8E2A-E6E6-4D85-AC00-12EE5488C071}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hposid01.exe:hposid01.exe
"{73DADDC9-32E4-4A5B-AAFF-DE76BA4A903F}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{FCBC63CC-7BB1-46F4-8368-5D66C7CF9A7B}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpzwiz01.exe:hpzwiz01.exe
"{404699EF-48BA-4A92-B6C7-ECF0FED4BA41}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{EE053AF6-ACEE-4D35-BA37-B1F64EED8D2F}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpoews01.exe:hpoews01.exe
"{7AAB71B1-5E72-4EA0-AECA-7E45A9E24A28}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpiscnapp.exe:hpiscnapp.exe
"{70ADB2D0-F31F-481A-8709-AC7CD468DFBE}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpiscnapp.exe:hpiscnapp.exe
"{33004149-11DC-4273-804A-F6D55F9B892B}"= Disabled:UDP:c:\program files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"{29275526-24E7-45D2-B8B0-4A7D4096A55D}"= Disabled:TCP:c:\program files\HP\Digital Imaging\bin\hpqkygrp.exe:hpqkygrp.exe
"TCP Query User{0AB86C5B-A8E4-4001-9F21-5B98D4AF946E}c:\\program files\\steam\\steamapps\\zasko30\\counter-strike\\hl.exe"= UDP:c:\program files\steam\steamapps\zasko30\counter-strike\hl.exe:Half-Life Launcher
"UDP Query User{B6E49637-862D-4826-BC7A-5670FB6C3278}c:\\program files\\steam\\steamapps\\zasko30\\counter-strike\\hl.exe"= TCP:c:\program files\steam\steamapps\zasko30\counter-strike\hl.exe:Half-Life Launcher
"TCP Query User{083FF2B0-5FC4-4F9E-9016-CE632193FB00}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{AF1B5B6A-5057-4956-ADDB-6444F89328A7}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"{E690A6F4-1272-48D3-9EC0-0755BD6AD1C8}"= UDP:c:\program files\Microsoft Games\Age of Empires III\age3.exe:Age of Empires III
"{7DD1508F-EBD7-4F71-9F2B-46D72A20674A}"= TCP:c:\program files\Microsoft Games\Age of Empires III\age3.exe:Age of Empires III
"{BA13D966-50DF-4107-929C-A99F5A87297C}"= UDP:c:\program files\Microsoft Games\Age of Empires III\age3y.exe:Age of Empires III - The Asian Dynasties
"{388D91AA-97DA-421C-8147-0F29D0BAF7DE}"= TCP:c:\program files\Microsoft Games\Age of Empires III\age3y.exe:Age of Empires III - The Asian Dynasties
"{CD170332-D8C1-4DB1-82DC-D2E91BE3C529}"= UDP:c:\program files\Microsoft Games\Age of Empires III\age3x.exe:Age of Empires III - The WarChiefs
"{993F238F-DEAA-4539-9598-D60258291CB8}"= TCP:c:\program files\Microsoft Games\Age of Empires III\age3x.exe:Age of Empires III - The WarChiefs
"TCP Query User{61EF2473-746E-478E-9FE6-3C0E765A8EE7}c:\\program files\\ea games\\battlefield 1942\\bf1942.exe"= UDP:c:\program files\ea games\battlefield 1942\bf1942.exe:BF1942.exe
"UDP Query User{62BAD5BB-0C9F-4A41-A6E4-0F222B26D76F}c:\\program files\\ea games\\battlefield 1942\\bf1942.exe"= TCP:c:\program files\ea games\battlefield 1942\bf1942.exe:BF1942.exe
"TCP Query User{409AAEDE-1F90-4A90-A3B6-784E51D89582}c:\\program files\\ea sports\\fifa 08\\fifa08.exe"= UDP:c:\program files\ea sports\fifa 08\fifa08.exe:FIFA08.exe
"UDP Query User{FAF6280A-6122-4855-92B4-2C6E43594EBB}c:\\program files\\ea sports\\fifa 08\\fifa08.exe"= TCP:c:\program files\ea sports\fifa 08\fifa08.exe:FIFA08.exe
"{36B83F5E-73EF-4A4B-AAEB-6257BAFB2549}"= UDP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter
"{97DAFACD-5256-4DB3-93B3-DDF3BB6C8279}"= TCP:c:\program files\Cyanide\GameCenter\GameCenter.exe:GameCenter
"{50F2C6F0-30AA-4887-A392-A0A85D75D8FD}"= UDP:48113:LocalSubnet:LocalSubnet:maconfig_tcp
"{F6BF0D34-A583-4CE8-A29F-EB57882413A6}"= TCP:48113:LocalSubnet:LocalSubnet:maconfig_udp
"TCP Query User{5C37FF0C-5330-48A1-BE68-3590E63D5A24}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"UDP Query User{AFF0B47E-258E-482A-A9B2-663F78EA9A35}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"TCP Query User{CBE91A09-D798-40E9-9501-DF25527F5193}c:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"UDP Query User{0ADDF484-47EF-48A4-AD01-97A918ABE3EF}c:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"TCP Query User{41A72C8A-9290-47A5-921C-EA9D3AEE7DFB}c:\\program files\\tvants\\tvants.exe"= UDP:c:\program files\tvants\tvants.exe:TVAnts
"UDP Query User{9262CDD8-D491-4DBC-BFCA-9C323DDEE630}c:\\program files\\tvants\\tvants.exe"= TCP:c:\program files\tvants\tvants.exe:TVAnts
"TCP Query User{3061F5BC-40DE-45FD-A555-408D182FD475}c:\\program files\\tvuplayer\\tvuplayer.exe"= UDP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"UDP Query User{EFBB2D42-EE9D-443C-BF93-BADA21A91FCD}c:\\program files\\tvuplayer\\tvuplayer.exe"= TCP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"{DDB56699-A377-4D8A-9FE1-920C1C2177A4}"= UDP:c:\program files\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2
"{7B93BB45-D4E0-42E2-9D7F-A42E86555CA3}"= TCP:c:\program files\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2
"{5AEF1F4D-44E6-4BD5-860C-D49B5031E593}"= UDP:c:\program files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"{D81C92ED-4F6B-4E9D-988C-3C2B22913D0B}"= TCP:c:\program files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"{FEA7006A-5748-481E-8A75-D4102884F97C}"= UDP:c:\program files\ma-config.com\maconfservice.exe:maconfservice
"{79147778-D102-45D0-8515-047F97E6F4F3}"= TCP:c:\program files\ma-config.com\maconfservice.exe:maconfservice
"{21B79AFE-60B0-4E4A-8B95-E4D18F471735}"= c:\program files\Skype\Phone\Skype.exe:Skype
"TCP Query User{7734577B-1DCE-4AE4-8F04-106F6E5F89CE}c:\\program files\\ea sports\\fifa 09\\fifa09.exe"= UDP:c:\program files\ea sports\fifa 09\fifa09.exe:FIFA09.exe
"UDP Query User{51510616-0E60-4016-AFE4-07C69273F1A8}c:\\program files\\ea sports\\fifa 09\\fifa09.exe"= TCP:c:\program files\ea sports\fifa 09\fifa09.exe:FIFA09.exe
"TCP Query User{CF2DB824-3DF7-4192-8CB2-338EC03010A5}c:\\program files\\electronic arts\\eadm\\core.exe"= UDP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager
"UDP Query User{ED80AA49-1628-4A2D-9399-8C13A1161EAE}c:\\program files\\electronic arts\\eadm\\core.exe"= TCP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager
"TCP Query User{4C0F7709-48BC-4B06-B236-D6307B0BA488}c:\\program files\\messengerdiscovery\\messengerdiscovery live.exe"= UDP:c:\program files\messengerdiscovery\messengerdiscovery live.exe:MessengerDiscovery Live the Windows Live Messenger addon
"UDP Query User{2241C7F3-47DC-4D76-8EFA-D333C31AC1F5}c:\\program files\\messengerdiscovery\\messengerdiscovery live.exe"= TCP:c:\program files\messengerdiscovery\messengerdiscovery live.exe:MessengerDiscovery Live the Windows Live Messenger addon

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Acer\\Empowering Technology\\eDataSecurity\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu
"c:\\Acer\\Empowering Technology\\eDataSecurity\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption

R0 AtiPcie;ATI PCI Express (3GIO) Filter;c:\windows\system32\DRIVERS\AtiPcie.sys [2006-10-30 7680]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-05-22 78416]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2008-05-22 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2008-05-22 51280]
R2 IJPLMSVC;PIXMA Extended Survey Program;c:\program files\Canon\IJPLM\IJPLMSVC.EXE [2008-06-10 101528]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208]
R2 UxTuneUp;TuneUp Extension de thème;c:\windows\System32\svchost.exe -k netsvcs [2008-05-21 21504]
R3 atikmdag;atikmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2008-08-01 3894272]
S3 maconfservice;Ma-Config Service;"c:\program files\ma-config.com\maconfservice.exe" [2008-09-02 191656]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;c:\windows\system32\Drivers\PCAMp50.sys [2007-11-30 28224]
S3 PCASp50;PCASp50 NDIS Protocol Driver;c:\windows\system32\Drivers\PCASp50.sys [2007-11-30 27072]
S3 PsSdk31;PsSdk31;\??\c:\windows\system32\Drivers\pssdk31.drv [2008-10-24 30272]
S3 PsSdkLBF;PsSdkLBF;\??\c:\windows\system32\Drivers\pssdklbf.drv [2008-10-24 37440]
S3 Steam Client Service;Steam Client Service;c:\program files\Common Files\Steam\SteamService.exe /RunAsService [2008-01-27 92656]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;c:\windows\System32\TuneUpDefragService.exe [2008-03-11 306432]
S3 WSVD;WSVD;\??\c:\windows\system32\drivers\WSVD.sys [2007-11-30 80744]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{79a7b84d-0760-11dd-98b8-001c252eec52}]
\shell\AutoRun\command - M:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9030ec36-daf4-11dc-a88c-001c252eec52}]
\shell\Auto\command - PegeFile.pif
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL PegeFile.pif
.
Contenu du dossier 'Tâches planifiées'

2008-11-14 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2008-01-16 13:28]
.
- - - - ORPHELINS SUPPRIMES - - - -

WebBrowser-{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - (no file)

.
------- Examen supplémentaire -------
.
FireFox -: Profile - c:\users\zbenouze\AppData\Roaming\Mozilla\Firefox\Profiles\h3wlq1a1.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://search.sweetim.com/search.asp?src=2&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://home.sweetim.com
FF -: plugin - c:\program files\Google\Google Updater\2.4.1368.5602\npCIDetect13.dll
FF -: plugin - c:\program files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - c:\program files\ma-config.com\nphardwaredetection.dll
FF -: plugin - c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.1.0.30716.0.dll
FF -: plugin - c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npLegitCheckPlugin.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\NPMyWebS.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npnul32.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\nppdf32.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npqtplugin.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npqtplugin2.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npqtplugin3.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npqtplugin4.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npqtplugin5.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npqtplugin6.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npqtplugin7.dll
FF -: plugin - c:\program files\Mozilla Firefox 3 Beta 2\plugins\npwinamp.dll
FF -: plugin - c:\program files\Picasa2\npPicasa2.dll
FF -: plugin - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
.
.
------- Associations de fichier -------
.
inifile=%SystemRoot%\System32\NOTEPAD.EXE %1"
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-18 01:55:33
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2008-11-18 1:57:21
ComboFix-quarantined-files.txt 2008-11-18 00:57:18
ComboFix2.txt 2008-10-23 13:22:17

Avant-CF: 62 474 387 456 octets libres
Après-CF: 62,651,777,024 octets libres

548 --- E O F --- 2008-11-12 23:17:02

ok ce soir je peu faire l'analyse que tu ma dit j'ai quelque probleme apres le passage de ce virus je peu pas mettre de photos en fond d'ecran quelque application fonctionne pas donc ce soir je fait ce que tu ma dit j'espere vous pourez encore me repondre car c'est la galere

salut alors je veut bien le faire mais avant je voudrais savoir pk on me demande ceci "Les utilisateurs de Windows Vista peuvent utiliser leur DVD Windows pour démarrer en mode Vista Recovery Environment (Environnement de réparation Vista). "car moi j'ai vista preinstaller dans mon pc donc s'il m'arrive quelque chose bien j'aurais plus rien voilà des que tu m'auras rep je le ferais si je risque rien merci

salut je ne peu faire ceci car j'ai des probleme avec mes operateur internet donc il font que de couper ma ligne je veut juste te dire que mon pc tourne tres bien sauf les photos que je ne peu mettre en arriere plan du bureau a mon avis le virus est gueris mais bon ... des que je serais a jour je ferais ce que tu ma dit je te remercie a bientot

Salut !!

Maintenant fais ceci stp :

▶ Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):

▶ Va dans démarrer puis panneau de configuration
▶ Double Clique sur l'icône "Comptes d'utilisateurs"
▶ Clique ensuite sur désactiver et valide.

▶ Télécharge Combofix de sUBs

(c est le numéro 5 en bas de la page)

▶ et enregistre le sur le Bureau.

▶ désactive tes protections et ferme toutes tes applications(antivirus, parefeu, garde en temps réel de l'antispyware)

Voici le tutoriel officiel de Bleeping Computer pour savoir l utiliser :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

ensuite envois le rapport et refais un nouveau rapport hijackthis stp

voilà j'ai effectuer clean mais sa ne m'ouvre aucun raport le seul truc sa me fait est ici http://upload.malekal.com/ dite moi ce qu'il faut que je fasse car la je suis perdue

ok je le fait mais pour le dernier rapport de findykill impossible de l'envoyer au moment de la confirmation du message le site beug donc voilà je fait le clean et je poste le raport encore merci

Salut !!

▶ Télécharge et enregistre Clean

(c est le numéro 9 en bas de la page)

▶ Ne double-clique pas directement sur le fichier clean.zip !! Pour cela, fais un clic droit puis dans le menu déroulant, choisis décompresser tout ou extraire tout. Ceci doit créer un nouveau dossier nommé clean.

▶ Double-clique sur le nouveau dossier clean

▶ Dans la liste, tu dois avoir clean.cmd (le .cmd peut ne pas être présent chez toi).

▶ Double-clique sur clean.cmd.

▶ Un menu s'ouvre... Choisis l'option 1 en tappant sur la touche 1 de ton clavier.

▶ Appuies sur la touche entrée pour valider.

▶ Une fois l analyse terminée.. un rapport va s'ouvrir sur le bloc-note.

▶ copier/coller le rapport dans la nouvelle réponse.

bon j'ai fait le usbfix sa fonctioner mais il ni a pas de usbfix.txt pour le rapor il est pas dans le c:/