Forums Zebulon.fr: [Résolu] Gros ralentissement suite infection gendarmerie ? - Forums Zebulon.fr

:OTL
SRV - File not found [Unknown | Stopped] -- -- (KMService)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@megamedia/Megakey: C:\Users\Saloon\AppData\Local\Megamedia\Megakey\npMegaPlugin.dll (Megamedia Ltd.)
O2 - BHO: (MegaIeHelperBHO Class) - {77F4E711-789B-447F-9614-96759B2F83C6} - C:\Users\Saloon\AppData\Local\Megamedia\Megakey\MegaIeHelper.dll (Megamedia Ltd.)
O2 - BHO: (IeMonitorBho Class) - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll (Megaupload Limited)
O4 - HKU\.DEFAULT\..\Run: [] File not found
O4 - HKU\S-1-5-18\..\Run: [] File not found
O4 - HKU\S-1-5-21-448811922-1820009707-2332566571-1000\..\Run: [] File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\ProgramData\Megamedia\Megakey\msadm.dll (Megamedia Ltd.)
MsConfig - StartUpReg: Bienvenue - hkey= - key= - File not found
MsConfig - StartUpReg: Megakey - hkey= - key= - C:\Users\Saloon\AppData\Local\Megamedia\Megakey\Megakey.exe (Megamedia Ltd.)
MsConfig - StartUpReg: MegakeyUpdater - hkey= - key= - C:\Users\Saloon\AppData\Local\Megamedia\Megakey\MegakeyUpdater.exe (Megamedia Ltd.)
MsConfig - StartUpReg: NokiaMServer - hkey= - key= - File not found
[2011/11/20 11:53:07 | 000,073,728 | ---- | C] () -- C:\Users\Saloon\AppData\Roaming\chrtmp
[2011/01/29 16:00:24 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2011/01/29 16:00:22 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2011/01/29 16:00:22 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2011/01/29 16:00:22 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2011/01/29 16:00:22 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2011/09/29 12:40:02 | 000,053,248 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Saloon\AppData\Roaming\Microsoft\Installer\{C96AA90C-9DE0-4C37-92F2-49CC3FE8C330}\ARPPRODUCTICON.exe
[2011/09/29 12:40:03 | 000,049,152 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Saloon\AppData\Roaming\Microsoft\Installer\{C96AA90C-9DE0-4C37-92F2-49CC3FE8C330}\NewShortcut2_1C7B7089989A424FB39D41A32581C775.exe
[2011/09/29 12:40:03 | 000,073,728 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Saloon\AppData\Roaming\Microsoft\Installer\{C96AA90C-9DE0-4C37-92F2-49CC3FE8C330}\NewShortcut46_74B9CE5DF1F4447F982DCA29A461B529.exe
[2011/09/29 12:40:03 | 000,073,728 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Saloon\AppData\Roaming\Microsoft\Installer\{C96AA90C-9DE0-4C37-92F2-49CC3FE8C330}\NewShortcut47_74B9CE5DF1F4447F982DCA29A461B529.exe
[2011/09/29 12:40:03 | 000,049,152 | R--- | M] (Flexera Software, Inc.) -- C:\Users\Saloon\AppData\Roaming\Microsoft\Installer\{C96AA90C-9DE0-4C37-92F2-49CC3FE8C330}\Uninstall_QA_OTI_H_FE5D756F71E147C4972AD6775344B40B.exe

:Files
ipconfig /flushdns /c
C:\WINDOWS\tasks\*.job
C:\*.sqm
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\*.tmp

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
""=""%1" %*"

:Commands
[EMPTYTEMP]
[EMPTYFLASH]
[createrestorepoint]
[Reboot]