Cheval de troie détecté par AntiVir
Bonjour,
Je pense avoir été infectée par la clé usb d'un ami, depuis que je l'ai utilisée, Antivir détecte un cheval de troie appelé TR/Buzus.cpoy, localisé dans C:\Users\...\Local\Temp\*à chaque fois un fichier .exe différent*.
Je reçois des alertes par deux ou trois, quand mon ordi se reconnecte à internet ou sort de veille. Apparemment le supprimer ou le mettre en quarantaine n'empêche pas qu'il revienne à chaque fois, c'est pénible !
Je ne m'y connais pas trop, mais j'ai utilisé CleanUp... Ca n'arrange rien jusqu'ici.
Merci pour votre aide !
Je pense avoir été infectée par la clé usb d'un ami, depuis que je l'ai utilisée, Antivir détecte un cheval de troie appelé TR/Buzus.cpoy, localisé dans C:\Users\...\Local\Temp\*à chaque fois un fichier .exe différent*.
Je reçois des alertes par deux ou trois, quand mon ordi se reconnecte à internet ou sort de veille. Apparemment le supprimer ou le mettre en quarantaine n'empêche pas qu'il revienne à chaque fois, c'est pénible !
Je ne m'y connais pas trop, mais j'ai utilisé CleanUp... Ca n'arrange rien jusqu'ici.
Merci pour votre aide !
Configuration: Windows Vista Firefox 3.5.5
5 réponses
-
ContributeurBonjour,
télécharge GenProc http://www.genproc.com/GenProc.exe
double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre -
Merci Narco, je suppose que tu veux ce rapport? Voilà ce qui s'est affiché à la fin du GenProc :
Rapport GenProc 2.652 [1] - ven. 27/11/2009 à 18:41:40
@ Windows VISTA Service Pack 1 - Acer, inc. - Mode normal
@ Mozilla Firefox 3.5.5 (fr) [Navigateur par défaut]
# Etape 1/ Télécharge :
- CCleaner https://www.ccleaner.com/ccleaner/download (FileHippo). Ce logiciel va permettre de supprimer tous les fichiers temporaires. Lance-le et clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. Ferme le programme.
- Toolbar-S&D http://eric71.geekstogo.com/tools/ToolBarSD.exe (Eric_71) sur ton Bureau.
Redémarre en mode sans échec comme indiqué ici https://www.wekyo.com/demarrer-le-pc-en-mode-sans-echec-windows-7-et-8/ ; Choisis ta session courante *** Sandrine *** (pour retrouver le rapport, clique sur le raccourci "Rapport GenProc[1]" sur ton bureau).
# Etape 2/
Lance Toolbar-S&D situé sur le Bureau. Tape sur "2" puis valide en appuyant sur "Entrée". Ne ferme pas la fenêtre lors de la suppression.
# Etape 3/
Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout.
# Etape 4/
Redémarre normalement et poste, dans la même réponse :
- Le contenu du rapport TB.txt situé dans C:\ ;
- Un nouveau rapport ZHPDiag http://www.premiumorange.com/zeb-help-process/zhpdiag.html ;
- Un nouveau rapport GenProc ;
Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
~~ Arguments de la procédure ~~
# Détections [1] GenProc 2.652 ven. 27/11/2009 à 18:41:50
Toolbar:le ven. 27/11/2009 à 18:42:39 "C:\Program Files\AskBarDis"
----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------
~~ Fin à 18:43:01 ~~ -
Contributeursuit ces manip
-
-----------\\ ToolBar S&D 1.2.9 XP/Vista
Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz )
BIOS : ZY2 v0.3636 3F36
USER : Sandrine ( Administrator )
BOOT : Fail-safe boot
C:\ (Local Disk) - NTFS - Total:226 Go (Free:106 Go)
D:\ (Local Disk) - NTFS - Total:465 Go (Free:465 Go)
E:\ (Local Disk) - NTFS - Total:226 Go (Free:226 Go)
F:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
Option : [2] ( ven. 27/11/2009|19:00 )
[ UAC => 1 ]
-----------\\ SUPPRESSION
Supprime! - C:\Program Files\AskBarDis\bar
Supprime! - C:\Program Files\AskBarDis\unins000.dat
Supprime! - C:\Program Files\AskBarDis\unins000.exe
Supprime! - C:\Program Files\AskBarDis
-----------\\ Recherche de Fichiers / Dossiers ...
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g"
"Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Url"="http://go.microsoft.com/fwlink/?LinkId=75720"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g"
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
[ UAC => 1 ]
1 - "C:\ToolBar SD\TB_1.txt" - ven. 27/11/2009|19:01 - Option : [2]
-----------\\ Fin du rapport a 19:01:18,19
Rapport de ZHPDiag v1.24.33 par Nicolas Coolman
Run by Sandrine at 27/11/2009 19:14:11
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Platform : Windows Vista (TM) Home Premium (6.0.6001) Service Pack 1
MSIE: Internet Explorer v7.0.6001.18000
MFIE: Mozilla Firefox (3.5.5)
Boot mode: Normal (Normal boot)
Total RAM: 3035 MB (63% free)
System drive C: has 103 GB (45%) free of 226 GB
---\\ Processus lancés
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Windows\PLFSetI.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Acer\WR_PopUp\ProductReg.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe
---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe
---\\ Pages de démarrage d'Internet Explorer (R0)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
---\\ Pages de recherche d'Internet Explorer (R1)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
---\\ Applications démarrées automatiquement par le registre (O4)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
O4 - HKLM\..\Run: [eAudio] C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [BkupTray] C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
O4 - HKLM\..\Run: [CLMLServer] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
O4 - HKLM\..\Run: [PlayMovie] C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
O4 - HKLM\..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
O4 - HKCU\..\Run: [ProductReg] C:\Program Files\Acer\WR_PopUp\ProductReg.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Google Update] C:\Users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Global Startup: OpenOffice.org 3.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll,103
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
---\\ Protocole additionnel et piratage de protocole (O18)
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Windows\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll
---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll
---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000Core.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000UA.job
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
O40 - ASIC: Internet Explorer - >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
O40 - ASIC: Browser Customizations - >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file)
O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\wmpdxm.dll
O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\system32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\system32\themeui.dll
O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file)
O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file)
O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file)
O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI
O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file)
O40 - ASIC: Address Book 7 - {7790769C-0471-11d2-AF11-00C04FA35D02} - (not file)
O40 - ASIC: .NET Framework - {7C028AF8-F614-47B3-82DA-BA94E41B1089} - (not file)
O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file)
O40 - ASIC: .NET Framework - {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - (not file)
O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file)
O40 - ASIC: Adobe Flash Player - {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\system32\Macromed\Flash\Flash9f.ocx
O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file)
O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file)
---\\ Logiciels installés (O42)
O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1)
O42 - Logiciel: Acer Arcade Deluxe
O42 - Logiciel: Acer Crystal Eye Webcam 2.0.8
O42 - Logiciel: Acer Empowering Technology
O42 - Logiciel: Acer GameZone Console 2.0.1.1
O42 - Logiciel: Acer GridVista
O42 - Logiciel: Acer Mobility Center Plug-In
O42 - Logiciel: Acer Product Registration
O42 - Logiciel: Acer ScreenSaver
O42 - Logiciel: Acer eAudio Management
O42 - Logiciel: Acer eDataSecurity Management
O42 - Logiciel: Acer ePower Management
O42 - Logiciel: Acer eRecovery Management
O42 - Logiciel: Acer eSettings Management
O42 - Logiciel: Adobe Flash Player 10 Plugin
O42 - Logiciel: Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Reader 9 - Français
O42 - Logiciel: Agatha Christie Death on the Nile
O42 - Logiciel: Agere Systems HDA Modem
O42 - Logiciel: Alice Greenfingers
O42 - Logiciel: Ask Toolbar
O42 - Logiciel: Assistant de connexion Windows Live
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus
O42 - Logiciel: Azada
O42 - Logiciel: Backspin Billiards
O42 - Logiciel: Big Kahuna Reef
O42 - Logiciel: Bricks of Egypt
O42 - Logiciel: Broadcom Gigabit Integrated Controller
O42 - Logiciel: CCleaner
O42 - Logiciel: Caesar 3
O42 - Logiciel: Cake Mania
O42 - Logiciel: Chicken Invaders 3
O42 - Logiciel: Choice Guard
O42 - Logiciel: CleanUp!
O42 - Logiciel: CyberLink PowerDirector
O42 - Logiciel: Diner Dash Flo on the Go
O42 - Logiciel: EA Download Manager
O42 - Logiciel: FrostWire 4.18.1
O42 - Logiciel: GIMP 2.6.7
O42 - Logiciel: Galerie de photos Windows Live
O42 - Logiciel: Google Desktop
O42 - Logiciel: Google Talk Plugin
O42 - Logiciel: Google Toolbar for Internet Explorer
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
O42 - Logiciel: ILWIS 3.2 Academic
O42 - Logiciel: Installation Windows Live
O42 - Logiciel: Intel® Matrix Storage Manager
O42 - Logiciel: JMicron JMB38X Flash Media Controller
O42 - Logiciel: Java(TM) 6 Update 16
O42 - Logiciel: Jewel Quest Solitaire
O42 - Logiciel: Junk Mail filter update
O42 - Logiciel: Kick N Rush
O42 - Logiciel: Launch Manager
O42 - Logiciel: Les Sims™ 3
O42 - Logiciel: MSVCRT
O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
O42 - Logiciel: MSXML 4.0 SP2 (KB973688)
O42 - Logiciel: Mahjong Escape Ancient China
O42 - Logiciel: Mahjongg Artifacts
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007
O42 - Logiciel: Microsoft Office Home and Student 2007
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007
O42 - Logiciel: Microsoft Office Proof (English) 2007
O42 - Logiciel: Microsoft Office Proof (French) 2007
O42 - Logiciel: Microsoft Office Proof (German) 2007
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007
O42 - Logiciel: Microsoft Office Proofing (French) 2007
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007
O42 - Logiciel: Microsoft Office Suite Activation Assistant
O42 - Logiciel: Microsoft Office Word MUI (French) 2007
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
O42 - Logiciel: Microsoft WSE 3.0 Runtime
O42 - Logiciel: Microsoft Works
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra
O42 - Logiciel: Mozilla Firefox (3.5.5)
O42 - Logiciel: Mystery Case Files - Huntsville
O42 - Logiciel: Mystery Solitaire - Secret Island
O42 - Logiciel: NTI Backup Now 5
O42 - Logiciel: NTI Media Maker 8
O42 - Logiciel: NVIDIA Drivers
O42 - Logiciel: OpenOffice.org 3.1
O42 - Logiciel: Orion
O42 - Logiciel: Outil de téléchargement Windows Live
O42 - Logiciel: PhotoNow!
O42 - Logiciel: Realtek High Definition Audio Driver
O42 - Logiciel: Synaptics Pointing Device Driver
O42 - Logiciel: Turbo Pizza
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
O42 - Logiciel: Update for Office 2007 (KB946691)
O42 - Logiciel: Utilitaires Sierra
O42 - Logiciel: VLC media player 1.0.2
O42 - Logiciel: WinRAR archiver
O42 - Logiciel: Winbond CIR Device Drivers
O42 - Logiciel: Windows Live Call
O42 - Logiciel: Windows Live Communications Platform
O42 - Logiciel: Windows Live Mail
O42 - Logiciel: Windows Live Messenger
O42 - Logiciel: Windows Live Sync
O42 - Logiciel: Windows Live Writer
O42 - Logiciel: Zuma Deluxe
O42 - Logiciel: eSobi v2
---\\ Contenu des dossiers Fichiers Communs (O43)
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Arcade Deluxe
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer GameZone
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Inc
O43 - CFD:Common File Directory ----D- C:\Program Files\Acer Incorporated
O43 - CFD:Common File Directory ----D- C:\Program Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Avira
O43 - CFD:Common File Directory ----D- C:\Program Files\Big Kahuna Reef
O43 - CFD:Common File Directory ----D- C:\Program Files\Broadcom
O43 - CFD:Common File Directory ----D- C:\Program Files\CCleaner
O43 - CFD:Common File Directory ----D- C:\Program Files\CleanUp!
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files
O43 - CFD:Common File Directory ----D- C:\Program Files\Convesoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Cyberlink
O43 - CFD:Common File Directory ----D- C:\Program Files\Electronic Arts
O43 - CFD:Common File Directory ----D- C:\Program Files\eSobi
O43 - CFD:Common File Directory -SH-D- C:\Program Files\Fichiers communs
O43 - CFD:Common File Directory ----D- C:\Program Files\FrostWire
O43 - CFD:Common File Directory ----D- C:\Program Files\GIMP-2.0
O43 - CFD:Common File Directory ----D- C:\Program Files\Google
O43 - CFD:Common File Directory ----D- C:\Program Files\ILWIS 3.2 Academic
O43 - CFD:Common File Directory --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD:Common File Directory ----D- C:\Program Files\Intel
O43 - CFD:Common File Directory ----D- C:\Program Files\Internet Explorer
O43 - CFD:Common File Directory ----D- C:\Program Files\Java
O43 - CFD:Common File Directory ----D- C:\Program Files\JRE
O43 - CFD:Common File Directory ----D- C:\Program Files\Launch Manager
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Games
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Office Suite Activation Assistant
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft Works
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft WSE
O43 - CFD:Common File Directory ----D- C:\Program Files\Microsoft.NET
O43 - CFD:Common File Directory ----D- C:\Program Files\Movie Maker
O43 - CFD:Common File Directory ----D- C:\Program Files\Mozilla Firefox
O43 - CFD:Common File Directory ----D- C:\Program Files\MSBuild
O43 - CFD:Common File Directory ----D- C:\Program Files\MSXML 4.0
O43 - CFD:Common File Directory ----D- C:\Program Files\NewTech Infosystems
O43 - CFD:Common File Directory ----D- C:\Program Files\OpenOffice.org 3
O43 - CFD:Common File Directory ----D- C:\Program Files\Realtek
O43 - CFD:Common File Directory ----D- C:\Program Files\Reference Assemblies
O43 - CFD:Common File Directory ----D- C:\Program Files\Sierra On-Line
O43 - CFD:Common File Directory ----D- C:\Program Files\Synaptics
O43 - CFD:Common File Directory --H-D- C:\Program Files\Uninstall Information
O43 - CFD:Common File Directory ----D- C:\Program Files\VideoLAN
O43 - CFD:Common File Directory ----D- C:\Program Files\Winbond Electronics Corporation
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Calendar
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Collaboration
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Defender
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Journal
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Live SkyDrive
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Mail
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Media Player
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows NT
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Photo Gallery
O43 - CFD:Common File Directory ----D- C:\Program Files\Windows Sidebar
O43 - CFD:Common File Directory ----D- C:\Program Files\WinRAR
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Adobe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\LightScribe
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\muvee Technologies
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Oberon Media
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Services
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\System
O43 - CFD:Common File Directory ----D- C:\Program Files\Common Files\Windows Live
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:Last File Created 1/11/2009 - 11:33:41 ---A- C:\Windows\System32\deploytk.dll
O44 - LFC:Last File Created 1/11/2009 - 11:33:42 ---A- C:\Windows\System32\java.exe
O44 - LFC:Last File Created 1/11/2009 - 11:33:42 ---A- C:\Windows\System32\javaw.exe
O44 - LFC:Last File Created 1/11/2009 - 11:33:42 ---A- C:\Windows\System32\javaws.exe
O44 - LFC:Last File Created 12/11/2009 - 13:52:51 ---A- C:\Windows\System32\FNTCACHE.DAT
O44 - LFC:Last File Created 27/11/2009 - 19:01:18 ---A- C:\TB.txt
O44 - LFC:Last File Created 27/11/2009 - 19:05:33 ---A- C:\Windows\ntbtlog.txt
O44 - LFC:Last File Created 27/11/2009 - 19:06:29 -S-A- C:\Windows\bootstat.dat
O44 - LFC:Last File Created 27/11/2009 - 19:06:45 ---A- C:\Windows\System32\agent.log
O44 - LFC:Last File Created 27/11/2009 - 19:07:00 ---A- C:\Windows\System32\LogConfigTemp.xml
O44 - LFC:Last File Created 27/11/2009 - 19:10:07 ---A- C:\Windows\WindowsUpdate.log
O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\PerfStringBackup.INI
O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfc009.dat
O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfc00C.dat
O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfh009.dat
O44 - LFC:Last File Created 27/11/2009 - 19:13:04 ---A- C:\Windows\System32\perfh00C.dat
O44 - LFC:Last File Created 29/10/2009 - 10:41:23 ---A- C:\Windows\System32\tzres.dll
O44 - LFC:Last File Created 7/11/2009 - 15:52:21 RSHA- C:\IO.SYS
O44 - LFC:Last File Created 7/11/2009 - 15:52:21 RSHA- C:\MSDOS.SYS
O44 - LFC:Last File Created 7/11/2009 - 16:05:06 ---A- C:\Windows\SIERRA.INI
O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\tmpcpyis.bat
O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\tmpdelis.bat
O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\wininit.ini
O44 - LFC:Last File Created 7/11/2009 - 16:12:55 ---A- C:\Windows\winstart.bat
---\\ MountPoints2 Shell Key (MPSK) (O51)
O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\AutoRun\command - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\auto_run.exe
O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\explore\command - H:\auto_run.exe
O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\open\command - H:\auto_run.exe
O51 - MPSK:{63a15c16-d2a7-11de-9c74-00269e0c71d2}\Shell\AutoPlaY\command - H:\auto_run.exe
---\\ Trojan Driver Search Data (TDSD) (O52)
O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm"
O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm"
O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll"
O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.UYVY"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.YUY2"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVYU"="msyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.IYUV"="iyuv_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.i420"="iyuv_32.dll"
O52 - TDSD:HKLM\...\Drivers32\"VIDC.YVU9"="tsbyuv.dll"
O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm"
O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll"
O52 - TDSD:HKLM\...\Drivers32\"MSVideo8"="VfWWDM32.dll"
O52 - TDSD:HKLM\...\Drivers32\"wave1"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi1"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer1"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"aux1"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll"
O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv"
O52 - TDSD:HKLM\...\Drivers32\"vidc.VP60"="C:\Windows\system32\vp6vfw.dll"
O52 - TDSD:HKLM\...\Drivers32\"vidc.VP61"="C:\Windows\system32\vp6vfw.dll"
O52 - TDSD:HKLM\...\drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec"
O52 - TDSD:HKLM\...\drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio"
O52 - TDSD:HKLM\...\drivers.desc\"vfwwdm32.dll"="WDM Video For Windows Capture Driver (Win32)"
O52 - TDSD:HKLM\...\drivers.desc\"sirenacm.dll"="Messenger Audio Codec"
O52 - TDSD:HKLM\...\drivers.desc\"vp6vfw.dll"="EA VP6 Codec"
---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\1394bus.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\acpi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adp94xx.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpahci.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpu160m.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\adpu320.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\afd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AGP440.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AGRSM.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\aliide.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\AMDAGP.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdide.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdk7.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\amdk8.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\arc.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\arcsas.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\asyncmac.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\atapi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ataport.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\avgntflt.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\avipbb.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\b57cdx.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\b57nd60x.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\battc.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bdasup.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\beep.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\blbdrive.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bowser.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrFiltLo.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrFiltUp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bridge.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrSerId.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrSerWdm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrUsbMdm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\BrUsbSer.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\bthmodem.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cdfs.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cdrom.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\circlass.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Classpnp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\CmBatt.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\cmdide.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\compbatt.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crashdmp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crcdisk.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\crusoe.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dfsc.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\disk.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Diskdump.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\djsvs.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\DKbFltr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\drmk.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\drmkaud.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Dumpata.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxapi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxg.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\dxgkrnl.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\E1G60I32.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ecache.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\elxstor.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\errdev.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\exfat.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fastfat.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fdc.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fileinfo.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\filetrace.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\flpydisk.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fltMgr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\fs_rec.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\FWPKCLNT.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\GAGP30KX.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hdaudbus.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HdAudio.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidbth.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidclass.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidir.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidparse.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\hidusb.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\HpCISSs.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\http.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i2omgmt.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i2omp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\i8042prt.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iaStor.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iaStorV.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iirsp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\int15.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\int15_64.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\intelide.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\intelppm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ipfltdrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\IPMIDrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ipnat.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\irda.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\irenum.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\isapnp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iteatapi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\iteraid.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\jmcr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\kbdclass.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\kbdhid.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ks.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ksecdd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lltdio.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_fc.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_sas.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\lsi_scsi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\luafv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mcd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\megasas.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\MegaSR.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\modem.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\monitor.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mouclass.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mouhid.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mountmgr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mpio.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mpsdrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Mraid35x.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxdav.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb10.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mrxsmb20.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msahci.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msdsm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msfs.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msisadrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msiscsi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mskssrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mspclock.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mspqm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\msrpc.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mssmbios.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mstee.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\mup.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndis.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndistapi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndisuio.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndiswan.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ndproxy.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netbios.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netbt.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\netio.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NETw5v32.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nfrd960.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\npfs.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nsiproxy.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ntfs.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NTIDrvr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ntrigdigi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\null.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvlddmkm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvraid.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nvstor.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\NV_AGP.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\nwifi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ohci1394.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pacer.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\parport.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\partmgr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\parvdm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pci.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pciide.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pciidex.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\pcmcia.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PEAuth.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\portcls.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\processr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\psdfilter.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PSDNServ.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\PSDVdisk.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ql2300.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ql40xx.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\qwavedrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rasacd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rasl2tp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\raspppoe.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\raspptp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rassstp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdbss.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RDPCDD.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdpdr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RDPENCDD.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rdpwd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rmcast.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RNDISMP.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rootmdm.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\rspndr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\RTKVHDA.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sbp2port.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\scsiport.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sdbus.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\secdrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\serenum.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\serial.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sermouse.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffdisk.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffp_mmc.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sffp_sd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sfloppy.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\SISAGP.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sisraid2.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sisraid4.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\smb.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\smclib.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\spldr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\spsys.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srv2.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\srvnet.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ssmdrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Storport.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\stream.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\swenum.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\symc8xx.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sym_hi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\sym_u3.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\SynTP.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tape.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tcpip.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tcpipreg.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdpipe.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdtcp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tdx.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\termdd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tssecsrv.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\TUNMP.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\tunnel.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\TVicPort.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\UAGP35.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\UBHelper.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\udfs.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ULIAGPKX.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\uliahci.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ulsata.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ulsata2.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\umbus.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\umpass.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usb8023.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBCAMD.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBCAMD2.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbccgp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbcir.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbehci.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbhub.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbohci.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbport.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbprint.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\USBSTOR.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbuhci.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\usbvideo.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vga.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vgapnp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\VIAAGP.SYS
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\viac7.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\viaide.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\videoprt.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volmgr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volmgrx.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\volsnap.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\vsmraid.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wacompen.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wanarp.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\watchdog.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\Wdf01000.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WdfLdr.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\winbondcir.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wmiacpi.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\wmilib.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\ws2ifsl.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WUDFPf.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\WUDFRd.sys
O58 - SDL:System Drivers List - C:\Windows\system32\drivers\zntport.sys
---\\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: GenProc
O63 - Logiciel: Toolbar SD
End of the scan: 701 lines
J'ai laissé GenProc tourner 20 minutes, je n'ai toujours pas de rapport, je fais quoi?
Merci! -
-
-
Contributeur[*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
[*] Double clique combofix.exe et suis les instructions.
[*] Installe la console de récupération si proposé et continue.
[*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
NOTE : Le rapport se trouve également ici : C:\Combofix.txt-
ComboFix 09-11-26.02 - Sandrine 27/11/2009 19:49.1.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.32.1036.18.3036.1811 [GMT 1:00]
Lancé depuis: c:\users\Sandrine\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\recycler\S-1-5-21-4402441603-5179222514-316502776-7385
c:\recycler\S-1-5-21-4402441603-5179222514-316502776-7385\Desktop.ini
c:\recycler\S-1-5-21-4402441603-5179222514-316502776-7385\ww32.exe
c:\recycler\S-1-5-21-9240272074-5233535251-016798910-4563
c:\windows\Suyin.reg
.
((((((((((((((((((((((((((((( Fichiers créés du 2009-10-27 au 2009-11-27 ))))))))))))))))))))))))))))))))))))
.
2009-11-27 19:00 . 2009-11-27 19:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-11-27 17:59 . 2009-11-27 18:01 -------- d-----w- C:\ToolBar SD
2009-11-27 17:52 . 2009-11-27 17:52 -------- d-----w- c:\program files\CCleaner
2009-11-27 17:41 . 2009-11-27 18:15 4096 d-----w- C:\GenProc
2009-11-25 23:39 . 2009-10-29 09:41 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-25 12:52 . 2009-08-10 11:01 1399296 ----a-w- c:\windows\system32\msxml6.dll
2009-11-25 12:52 . 2009-08-10 11:00 1257472 ----a-w- c:\windows\system32\msxml3.dll
2009-11-19 20:30 . 2009-11-19 20:30 4096 d-----w- c:\program files\CleanUp!
2009-11-18 20:36 . 2009-11-18 20:36 -------- d-----w- c:\users\Sandrine\AppData\Local\CyberLink
2009-11-18 20:35 . 2009-11-18 20:36 -------- d-----w- c:\users\Sandrine\AppData\Local\SoftDMA
2009-11-18 20:35 . 2009-11-18 20:35 -------- d-----w- c:\users\Sandrine\AppData\Local\Acer Arcade Deluxe
2009-11-18 20:35 . 2009-11-18 20:35 -------- d-----w- c:\users\Sandrine\AppData\Roaming\CyberLink
2009-11-13 22:47 . 2009-11-13 22:47 -------- d-----w- C:\found.000
2009-11-11 12:39 . 2009-08-14 13:53 2035712 ----a-w- c:\windows\system32\win32k.sys
2009-11-11 12:39 . 2009-08-10 13:05 351232 ----a-w- c:\windows\system32\WSDApi.dll
2009-11-10 23:28 . 2009-11-10 23:28 247280 ----a-w- c:\users\Sandrine\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
2009-11-09 18:57 . 2009-11-09 18:57 -------- d-----w- c:\windows\Sun
2009-11-07 15:12 . 2009-11-07 15:12 26 ----a-w- c:\windows\winstart.bat
2009-11-07 15:12 . 2009-11-07 15:12 144 ----a-w- c:\windows\tmpcpyis.bat
2009-11-07 15:12 . 2009-11-07 15:12 122 ----a-w- c:\windows\tmpdelis.bat
2009-11-07 15:04 . 1998-06-10 12:07 1053184 ----a-w- c:\windows\system32\SierraNW.dll
2009-11-07 15:04 . 1998-06-10 12:05 231936 ----a-w- c:\windows\system32\SNWValid.dll
2009-11-07 15:04 . 2009-11-07 15:04 -------- d-----w- c:\windows\solcache
2009-11-07 15:03 . 2009-11-07 15:05 -------- d-----w- C:\SIERRA
2009-11-07 15:03 . 2009-11-07 15:04 4096 d-----w- c:\program files\Sierra On-Line
2009-11-07 15:02 . 1998-01-23 11:20 305664 ----a-w- c:\windows\IsUn040c.exe
2009-11-06 16:24 . 2009-11-06 16:24 0 ----a-w- c:\users\Sandrine\AppData\Roaming\FrostWire\.NetworkShare\Incomplete\T-4506256-LimeWireWin4.16.6.exe
2009-11-06 16:13 . 2009-11-25 22:11 -------- d-----w- c:\users\Sandrine\AppData\Roaming\FrostWire
2009-11-06 16:12 . 2009-11-06 16:13 24576 d-----w- c:\program files\FrostWire
2009-11-05 09:31 . 2009-11-05 09:31 -------- d-----w- c:\users\Sandrine\Option
2009-11-04 10:51 . 2009-08-07 02:24 44768 ----a-w- c:\windows\system32\wups2.dll
2009-11-04 10:51 . 2009-08-07 02:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-11-04 10:51 . 2009-08-07 02:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-11-04 10:51 . 2009-08-07 01:45 2421760 ----a-w- c:\windows\system32\wucltux.dll
2009-11-04 10:51 . 2009-08-07 02:24 35552 ----a-w- c:\windows\system32\wups.dll
2009-11-04 10:51 . 2009-08-07 02:23 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-11-04 10:51 . 2009-08-07 01:44 87552 ----a-w- c:\windows\system32\wudriver.dll
2009-11-04 10:51 . 2009-08-06 18:23 171608 ----a-w- c:\windows\system32\wuwebv.dll
2009-11-04 10:51 . 2009-08-06 17:44 33792 ----a-w- c:\windows\system32\wuapp.exe
2009-11-01 10:39 . 2009-11-25 15:44 1 ----a-w- c:\users\Sandrine\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-11-01 10:39 . 2009-11-01 10:39 -------- d-----w- c:\users\Sandrine\AppData\Roaming\OpenOffice.org
2009-11-01 10:35 . 2009-11-01 10:35 -------- d-----w- c:\program files\JRE
2009-11-01 10:34 . 2009-11-01 10:35 4096 d-----w- c:\program files\OpenOffice.org 3
2009-11-01 10:33 . 2009-11-01 10:33 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-11-01 10:33 . 2009-11-01 10:33 -------- d-----w- c:\program files\Java
2009-10-28 21:08 . 2009-09-10 15:21 310784 ----a-w- c:\windows\system32\unregmp2.exe
2009-10-28 21:08 . 2009-09-10 15:21 8147456 ----a-w- c:\windows\system32\wmploc.DLL
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-27 18:13 . 2008-01-21 08:40 669566 ----a-w- c:\windows\system32\perfh00C.dat
2009-11-27 18:13 . 2008-01-21 08:40 123556 ----a-w- c:\windows\system32\perfc00C.dat
2009-11-27 18:06 . 2009-10-19 14:46 32156 ----a-w- c:\programdata\nvModes.dat
2009-11-26 18:59 . 2009-10-19 13:54 680 ----a-w- c:\users\Sandrine\AppData\Local\d3d9caps.dat
2009-11-25 23:38 . 2009-10-19 16:43 4096 d-----w- c:\users\Sandrine\AppData\Roaming\vlc
2009-11-19 15:05 . 2009-10-26 14:36 -------- d-----w- c:\users\Sandrine\AppData\Roaming\gtk-2.0
2009-11-12 12:51 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail
2009-11-08 22:54 . 2009-10-19 20:21 4096 d-----w- c:\users\Sandrine\AppData\Roaming\dvdcss
2009-11-08 12:24 . 2009-10-19 14:45 -------- d-----w- c:\programdata\NVIDIA
2009-11-01 10:50 . 2009-10-19 13:56 75456 ----a-w- c:\users\Sandrine\AppData\Local\GDIPFONTCACHEV1.DAT
2009-10-26 15:16 . 2009-01-10 15:20 8192 d--h--w- c:\program files\InstallShield Installation Information
2009-10-24 08:53 . 2009-10-24 08:53 -------- d-----w- c:\program files\GIMP-2.0
2009-10-23 08:57 . 2009-10-20 15:17 -------- d-----w- c:\program files\Electronic Arts
2009-10-20 15:44 . 2009-10-20 15:44 -------- d-----w- c:\programdata\Electronic Arts
2009-10-20 15:36 . 2009-10-20 15:36 10134 ----a-r- c:\users\Sandrine\AppData\Roaming\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-10-20 15:36 . 2009-10-20 15:36 -------- d-----w- c:\program files\Microsoft WSE
2009-10-19 18:15 . 2009-10-19 17:38 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-10-19 18:14 . 2009-10-19 18:14 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-10-19 17:38 . 2009-10-19 17:38 -------- d-----w- c:\programdata\Avira
2009-10-19 17:38 . 2009-10-19 17:38 -------- d-----w- c:\program files\Avira
2009-10-19 17:13 . 2009-01-10 15:45 4096 d-----w- c:\program files\Google
2009-10-19 17:13 . 2009-01-10 15:33 4096 d-----w- c:\programdata\McAfee
2009-10-19 16:48 . 2009-10-19 16:48 0 ----a-w- c:\windows\nsreg.dat
2009-10-19 16:42 . 2009-10-19 16:42 -------- d-----w- c:\program files\VideoLAN
2009-10-19 16:19 . 2009-10-19 16:19 -------- d-----w- c:\programdata\WindowsSearch
2009-10-19 14:37 . 2009-10-19 14:37 -------- d-----w- c:\program files\Acer Incorporated
2009-10-19 14:36 . 2009-01-10 16:30 -------- d-----w- c:\program files\Cyberlink
2009-10-19 14:29 . 2009-10-19 14:25 4096 d-----w- c:\program files\Acer Arcade Deluxe
2009-10-19 14:27 . 2009-10-19 14:27 -------- d-----w- c:\programdata\CyberLink
2009-10-19 14:22 . 2009-10-19 14:22 -------- d-----w- c:\program files\Acer Inc
2009-10-19 14:19 . 2009-10-19 14:19 4096 d-----w- c:\program files\Launch Manager
2009-10-19 14:16 . 2009-01-10 15:17 -------- d-----w- c:\program files\Intel
2009-10-19 14:15 . 2009-10-19 14:15 -------- d-----w- c:\users\Sandrine\AppData\Roaming\InstallShield
2009-10-19 13:55 . 2009-01-10 15:32 -------- d-----w- c:\program files\Acer
2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\program files\Fichiers communs
2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Modèles
2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Menu Démarrer
2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Favoris
2009-10-19 13:53 . 2009-10-19 13:53 -------- d-sh--we c:\programdata\Bureau
2009-09-14 09:44 . 2009-10-19 16:22 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-09-10 17:30 . 2009-10-19 16:25 213504 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 12:24 . 2009-10-19 16:22 61440 ----a-w- c:\windows\system32\msasn1.dll
2009-08-31 13:55 . 2009-10-19 16:28 293376 ----a-w- c:\windows\system32\psisdecd.dll
2009-08-31 13:55 . 2009-10-19 16:28 428544 ----a-w- c:\windows\system32\EncDec.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-03-04 22:38 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-11-17 135168]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-09-03 3342336]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-19 68856]
"Google Update"="c:\users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-11-24 135664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-01-18 1033512]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-01-10 24064]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-03-07 544768]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-04-23 397312]
"BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-06 34040]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-07-20 182808]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-28 13601312]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-28 92704]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-07-02 821768]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"ArcadeDeluxeAgent"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2008-05-12 147456]
"CLMLServer"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe" [2008-05-12 167936]
"PlayMovie"="c:\program files\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2008-05-12 167936]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-01 149280]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-04-28 6111232]
c:\users\Sandrine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-8-18 384000]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl [19/10/2009 15:27 61424]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [19/10/2009 18:38 108289]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [3/03/2008 13:11 16384]
R2 CLHNService;CLHNService;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [19/10/2009 15:29 81504]
R2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [10/01/2009 16:32 24576]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [6/04/2008 22:42 50424]
R2 NTIPPKernel;NTIPPKernel;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [19/10/2009 15:29 122368]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [28/03/2008 4:44 210432]
R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [10/01/2009 23:23 81296]
R3 NETw5v32;Pilote de carte Intel(R) Wireless WiFi Link pour Windows Vista 32 bits ;c:\windows\System32\drivers\NETw5v32.sys [10/01/2009 23:23 3658752]
R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [28/03/2007 7:51 43008]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [4/04/2008 3:03 131072]
S3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [10/01/2009 16:45 24064]
.
Contenu du dossier 'Tâches planifiées'
2009-11-26 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000Core.job
- c:\users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-24 22:51]
2009-11-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1803162910-3462069655-2670096420-1000UA.job
- c:\users\Sandrine\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-24 22:51]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&s=2&o=vp32&d=1009&m=aspire_7730g
mWindow Title =
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Sandrine\AppData\Roaming\Mozilla\Firefox\Profiles\8ra80007.default\
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\Sandrine\AppData\Local\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\users\Sandrine\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
.
- - - - ORPHELINS SUPPRIMES - - - -
WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - (no file)
HKLM-Run-eRecoveryService - (no file)
AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe
AddRemove-GridVista - c:\windows\GVUni.exe GridV.UNI
AddRemove-HijackThis - c:\genproc\Outil\HijackThis.exe
AddRemove-LManager - c:\windows\UnInst32.exe QtZgAcer.UNI
AddRemove-NVIDIA Drivers - c:\windows\system32\NVUNINST.EXE UninstallGUI
AddRemove-Utilitaires Sierra - c:\program files\Sierra On-Line\sutil32.exe uninstall
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-27 20:03
Windows 6.0.6001 Service Pack 1 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\PlayMovie\000.fcl"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'Explorer.exe'(3768)
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\agrsmsvc.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\acer\Mobility Center\MobilityService.exe
c:\program files\Cyberlink\Shared files\RichVideo.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\windows\system32\wbem\unsecapp.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Heure de fin: 2009-11-27 20:08 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-11-27 19:08
Avant-CF: 110.934.077.440 octets libres
Après-CF: 110.776.827.904 octets libres
- - End Of File - - 200EEBE1000B1F9B0C99FBB3F168D281 -
@sandrine99A priori Combokix semble avoir réglé mes problèmes.... :)
Si les alertes recommencent je reviens, en attendant je peux mettre ce post en résolu.
Merci Narco !
-
-
Contributeur- Un nouveau rapport GenProc ;
