bonjour
j'ai un soucis e barre des taches qui se bloque +petit gling lorsque je clique dessus avec la souris.j'ai donc fat un scan avec combofix et la barres des taches s'est débloquée suite à ce scan?....Je joins donc le log de ce scan pour savoir si vous pouviez l'analyser et me donner une solution pour réparer ce problémé recurant...j'ai aupoaravant scanner le pc avec bitdefender et antimalwyre et rootkit..rien trouvé.
merci par avance...ci dessous le log de combofix.
ComboFix 08-11-30.02 - XXXXX 2008-12-01 15:55:33.3 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.1266 [GMT 1:00]
Lancé depuis: c:\users\XXXXX\Desktop\ComboFix.exe
* Un nouveau point de restauration a été créé
* Resident AV is active
.
((((((((((((((((((((((((((((( Fichiers créés du 2008-11-01 au 2008-12-01 ))))))))))))))))))))))))))))))))))))
.
2008-11-30 23:42 . 2008-11-30 23:42 <REP> d-------- c:\program files\ashampoo
2008-11-30 23:24 . 2008-11-30 23:24 <REP> d-------- C:\sauvegarde registre
2008-11-30 22:38 . 2008-11-30 22:38 0 --ah----- c:\windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-11-30 20:32 . 2008-11-30 20:32 145 --a------ c:\windows\WININIT.INI
2008-11-30 03:34 . 2007-01-18 13:00 3,968 --a------ c:\windows\System32\drivers\AvgArCln.sys
2008-11-30 02:43 . 2008-11-30 03:27 <REP> d-------- c:\program files\Sophos
2008-11-30 02:29 . 2008-11-30 02:29 <REP> d-------- c:\users\XXXXX\AppData\Roaming\TuneUp Software
2008-11-30 02:29 . 2008-11-30 02:29 355,584 --a------ c:\windows\System32\TuneUpDefragService.exe
2008-11-30 02:29 . 2008-05-29 09:28 28,416 --a------ c:\windows\System32\uxtuneup.dll
2008-11-30 02:29 . 2008-05-29 09:28 16,640 --a------ c:\windows\System32\authuitu.dll
2008-11-30 02:28 . 2008-11-30 02:28 <REP> d-------- c:\users\All Users\TuneUp Software
2008-11-30 02:28 . 2008-11-30 02:28 <REP> d-------- c:\programdata\TuneUp Software
2008-11-30 02:28 . 2008-11-30 02:29 <REP> d-------- c:\program files\TuneUp Utilities 2008
2008-11-30 02:27 . 2008-11-30 02:27 <REP> d-------- c:\program files\Common Files\Wise Installation Wizard
2008-11-30 00:23 . 2008-04-26 09:26 891,448 --a------ c:\windows\System32\drivers\tcpip.sys
2008-11-30 00:23 . 2008-04-12 04:32 784,896 --a------ c:\windows\System32\rpcrt4.dll
2008-11-30 00:23 . 2008-08-02 02:01 625,152 --a------ c:\windows\System32\drivers\dxgkrnl.sys
2008-11-30 00:23 . 2008-06-26 04:29 565,248 --a------ c:\windows\System32\emdmgmt.dll
2008-11-30 00:23 . 2008-05-20 03:07 148,480 --a------ c:\windows\System32\drivers\nwifi.sys
2008-11-30 00:23 . 2008-09-18 05:56 147,456 --a------ c:\windows\System32\Faultrep.dll
2008-11-30 00:23 . 2008-09-18 05:56 125,952 --a------ c:\windows\System32\wersvc.dll
2008-11-30 00:23 . 2008-04-05 02:21 72,192 --a------ c:\windows\System32\drivers\pacer.sys
2008-11-30 00:23 . 2008-06-26 04:29 45,056 --a------ c:\windows\System32\dataclen.dll
2008-11-30 00:23 . 2008-08-02 04:26 36,864 --a------ c:\windows\System32\cdd.dll
2008-11-30 00:23 . 2008-04-05 04:34 15,360 --a------ c:\windows\System32\pacerprf.dll
2008-11-30 00:22 . 2008-05-08 22:59 430,080 --a------ c:\windows\System32\vbscript.dll
2008-11-30 00:22 . 2008-05-08 22:59 180,224 --a------ c:\windows\System32\scrobj.dll
2008-11-30 00:22 . 2008-05-08 22:59 172,032 --a------ c:\windows\System32\scrrun.dll
2008-11-30 00:22 . 2008-05-08 22:59 155,648 --a------ c:\windows\System32\wscript.exe
2008-11-30 00:22 . 2008-05-08 22:58 135,168 --a------ c:\windows\System32\wshom.ocx
2008-11-30 00:22 . 2008-05-08 22:58 135,168 --a------ c:\windows\System32\cscript.exe
2008-11-30 00:22 . 2008-05-08 22:59 90,112 --a------ c:\windows\System32\wshext.dll
2008-11-29 18:29 . 2008-01-19 08:33 2,623,488 --a------ c:\windows\System32\SLsvc.exe
2008-11-29 18:29 . 2008-01-19 08:36 1,541,120 --a------ c:\windows\System32\onex.dll
2008-11-29 18:29 . 2008-01-19 08:29 705,536 --a------ c:\windows\System32\imagesp1.dll
2008-11-29 18:29 . 2008-01-19 08:42 51,768 --a------ c:\windows\System32\PSHED.DLL
2008-11-29 18:27 . 2008-01-19 04:12 3,662,296 --a------ c:\windows\System32\locale.nls
2008-11-29 18:26 . 2008-01-19 08:38 4,595,712 --a------ c:\windows\System32\AuthFWSnapin.dll
2008-11-29 18:25 . 2008-01-19 08:33 8,139,264 --a------ c:\windows\System32\ssBranded.scr
2008-11-29 18:24 . 2008-01-19 08:35 3,072,000 --a------ c:\windows\System32\networkmap.dll
2008-11-29 18:23 . 2008-01-19 08:32 5,714,432 --a------ c:\windows\System32\logon.scr
2008-11-29 18:22 . 2008-01-19 07:06 8,147,456 --a------ c:\windows\System32\wmploc.DLL
2008-11-29 18:21 . 2008-01-19 08:36 357,888 --a------ c:\windows\System32\wbemcomn.dll
2008-11-29 18:20 . 2008-01-19 08:36 704,512 --a------ c:\windows\System32\SmiEngine.dll
2008-11-29 18:20 . 2008-01-19 08:36 218,624 --a------ c:\windows\System32\wdscore.dll
2008-11-29 18:20 . 2008-01-19 08:36 139,264 --a------ c:\windows\System32\SmiInstaller.dll
2008-11-29 18:20 . 2008-01-19 08:33 130,560 --a------ c:\windows\System32\PkgMgr.exe
2008-11-29 18:20 . 2008-01-19 08:36 129,536 --a------ c:\windows\System32\sqmapi.dll
2008-11-29 18:19 . 2008-01-19 08:34 305,152 --a------ c:\windows\System32\msdelta.dll
2008-11-29 18:19 . 2008-01-19 08:34 258,560 --a------ c:\windows\System32\dpx.dll
2008-11-29 18:19 . 2008-01-19 08:34 246,784 --a------ c:\windows\System32\drvstore.dll
2008-11-29 18:19 . 2008-01-19 08:35 35,328 --a------ c:\windows\System32\mspatcha.dll
2008-11-29 14:40 . 2008-11-29 14:40 <REP> d-------- C:\PerfLogs
2008-11-29 14:10 . 2008-11-29 16:04 <REP> d-------- C:\738f51755870d1eb9d129450
2008-11-26 19:10 . 2008-11-26 19:10 <REP> d-------- C:\lexmark
2008-11-26 18:33 . 2008-11-26 18:35 <REP> d-------- c:\users\XXXXX\{b129aa66-aadd-4ac3-adef-43b6ed03da48}
2008-11-26 18:33 . 2007-03-06 15:41 1,900 --a------ c:\windows\System32\lxdi.loc
2008-11-26 13:48 . 2008-11-26 13:48 <REP> d-------- c:\windows\BDOSCAN8
2008-11-26 12:27 . 2008-11-26 12:27 <REP> d-------- c:\users\All Users\Malwarebytes
2008-11-26 12:27 . 2008-11-26 12:27 <REP> d-------- c:\users\XXXXX\AppData\Roaming\Malwarebytes
2008-11-26 12:27 . 2008-11-26 12:27 <REP> d-------- c:\programdata\Malwarebytes
2008-11-26 12:27 . 2008-11-26 12:27 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-11-26 12:27 . 2008-10-22 16:10 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
2008-11-26 12:27 . 2008-10-22 16:10 15,504 --a------ c:\windows\System32\drivers\mbam.sys
2008-11-26 11:19 . 2008-10-21 06:25 1,645,568 --a------ c:\windows\System32\connect.dll
2008-11-26 11:19 . 2008-08-28 04:40 712,704 --a------ c:\windows\System32\WindowsCodecs.dll
2008-11-26 11:19 . 2008-08-28 04:40 425,472 --a------ c:\windows\System32\PhotoMetadataHandler.dll
2008-11-26 11:19 . 2008-08-28 04:40 347,136 --a------ c:\windows\System32\WindowsCodecsExt.dll
2008-11-26 11:19 . 2008-10-22 04:57 241,152 --a------ c:\windows\System32\PortableDeviceApi.dll
2008-11-26 11:19 . 2008-01-19 08:36 160,768 --a------ c:\windows\System32\PortableDeviceTypes.dll
2008-11-26 11:19 . 2008-01-19 08:36 94,720 --a------ c:\windows\System32\PortableDeviceClassExtension.dll
2008-11-26 00:09 . 2008-11-26 00:09 86,792 --a------ c:\windows\System32\drivers\bdfndisf.sys
2008-11-25 23:33 . 2008-11-30 20:40 121 --a------ c:\windows\bdagent.INI
2008-11-25 23:31 . 2008-11-25 23:31 <REP> d-------- c:\users\XXXXX\AppData\Roaming\BitDefender
2008-11-25 23:28 . 2008-11-25 23:31 <REP> d-------- c:\users\All Users\BitDefender
2008-11-25 23:28 . 2008-11-25 23:31 <REP> d-------- c:\programdata\BitDefender
2008-11-24 21:19 . 2008-10-16 22:13 1,809,944 --a------ c:\windows\System32\wuaueng.dll
2008-11-24 21:19 . 2008-10-16 21:56 1,524,736 --a------ c:\windows\System32\wucltux.dll
2008-11-24 21:19 . 2008-10-16 22:09 51,224 --a------ c:\windows\System32\wuauclt.exe
2008-11-24 21:19 . 2008-10-16 22:09 43,544 --a------ c:\windows\System32\wups2.dll
2008-11-24 21:18 . 2008-10-16 14:08 162,064 --a------ c:\windows\System32\wuwebv.dll
2008-11-24 21:18 . 2008-10-16 13:56 31,232 --a------ c:\windows\System32\wuapp.exe
2008-11-17 11:45 . 2008-09-10 04:40 1,334,272 --a------ c:\windows\System32\msxml6.dll
2008-11-17 11:45 . 2008-09-05 06:14 1,191,936 --a------ c:\windows\System32\msxml3.dll
2008-11-17 11:45 . 2008-08-27 02:05 212,480 --a------ c:\windows\System32\drivers\mrxsmb10.sys
2008-11-13 00:44 . 2008-11-13 00:44 <REP> d-------- c:\program files\Common Files\Native Instruments
2008-11-12 15:43 . 2008-11-12 15:43 <REP> d-------- c:\program files\Yahoo!
2008-11-12 15:43 . 2008-11-12 15:44 <REP> d-------- c:\program files\CCleaner
2008-11-12 02:40 . 2008-11-12 02:40 <REP> d-------- c:\program files\VS Revo Group
2008-11-11 17:07 . 2007-11-06 12:16 103 --a------ c:\windows\System32\apsett.ini
2008-11-11 15:07 . 2007-04-09 13:23 28,040 --a------ c:\windows\System32\mdimon.dll
2008-11-11 15:07 . 2008-11-11 15:07 382 --a------ c:\windows\ODBC.INI
2008-11-10 02:04 . 2008-11-10 02:04 <REP> d-------- c:\users\XXXXX\AppData\Roaming\FaxCtr
2008-11-09 17:38 . 2008-11-09 18:38 <REP> d-------- C:\sauvegarde hp
2008-11-09 17:33 . 2008-11-09 17:33 <REP> d-------- c:\users\XXXXX\AppData\Roaming\Lexmark Imaging Studio
2008-11-09 17:11 . 2008-11-26 14:42 <REP> d-------- c:\users\All Users\lx_cats
2008-11-09 17:11 . 2008-11-26 14:42 <REP> d-------- c:\programdata\lx_cats
2008-11-09 17:06 . 2008-11-09 17:06 <REP> d-------- C:\logs
2008-11-09 16:58 . 2006-05-31 20:51 339,968 --a------ c:\windows\System32\IMGMAN32.DLL
2008-11-09 16:58 . 2006-05-31 20:51 98,345 --a------ c:\windows\System32\IMHOST32.DLL
2008-11-09 16:58 . 2006-05-31 20:51 98,304 --a------ c:\windows\System32\IM31XPNG.DEL
2008-11-09 16:58 . 2006-05-31 20:51 69,632 --a------ c:\windows\System32\IM31XTIF.DEL
2008-11-09 16:58 . 2006-05-31 20:51 49,152 --a------ c:\windows\System32\IM31IMG.DIL
2008-11-09 16:58 . 2007-02-22 08:13 45,056 --a------ c:\windows\System32\LXF3PMON.DLL
2008-11-09 16:58 . 2006-11-07 16:02 36,864 --a------ c:\windows\System32\lxf3oem.dll
2008-11-09 16:58 . 2007-02-22 08:12 32,768 --a------ c:\windows\System32\LXF3FXPU.DLL
2008-11-09 16:58 . 2007-02-22 08:15 12,288 --a------ c:\windows\System32\LXF3PMRC.DLL
2008-11-09 16:57 . 2008-11-09 16:57 <REP> d-------- c:\users\All Users\FaxCtr
2008-11-09 16:57 . 2008-11-09 16:57 <REP> d-------- c:\programdata\FaxCtr
2008-11-09 16:57 . 2008-11-25 21:39 <REP> d-------- c:\program files\Lexmark Fax Solutions
2008-11-09 16:56 . 2008-11-09 16:57 <REP> d-------- c:\program files\Abbyy FineReader 6.0 Sprint
2008-11-09 16:52 . 2008-11-26 15:16 20,015 --a------ c:\windows\System32\LexFiles.ulf
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-01 14:55 3,407,872 --sha-w c:\users\Invité\ntuser.dat
2008-12-01 14:55 3,407,872 --sha-w c:\users\Invité\ntuser.dat
2008-12-01 13:14 81,984 ----a-w c:\windows\System32\bdod.bin
2008-11-30 23:01 --------- d-----w c:\program files\Native Instruments
2008-11-30 22:42 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-30 21:24 --------- d-----w c:\program files\Steinberg
2008-11-30 16:00 174 --sha-w c:\program files\desktop.ini
2008-11-30 01:54 --------- d-----w c:\program files\UDPixel
2008-11-29 18:18 --------- d-----w c:\program files\Windows Sidebar
2008-11-29 18:18 --------- d-----w c:\program files\Windows Photo Gallery
2008-11-29 18:18 --------- d-----w c:\program files\Windows Mail
2008-11-29 18:18 --------- d-----w c:\program files\Windows Journal
2008-11-29 18:18 --------- d-----w c:\program files\Windows Defender
2008-11-29 18:18 --------- d-----w c:\program files\Windows Collaboration
2008-11-29 18:18 --------- d-----w c:\program files\Windows Calendar
2008-11-29 17:56 82,432 ----a-w c:\windows\System32\axaltocm.dll
2008-11-29 17:56 101,888 ----a-w c:\windows\System32\ifxcardm.dll
2008-11-29 13:37 --------- d-----w c:\programdata\NVIDIA
2008-11-27 18:22 --------- d-----w c:\program files\Hewlett-Packard
2008-11-26 22:20 --------- d-----w c:\program files\Hp
2008-11-26 14:40 --------- d-----w c:\program files\Electronic Arts
2008-11-26 02:05 --------- d-----w c:\program files\Microsoft Works
2008-11-25 22:28 --------- d-----w c:\program files\Common Files\BitDefender
2008-11-25 20:40 --------- d-----w c:\program files\Common Files\LightScribe
2008-11-25 20:39 --------- d-----w c:\program files\Syncrosoft
2008-11-25 20:39 --------- d-----w c:\program files\Search Settings
2008-11-25 20:39 --------- d-----w c:\program files\Google
2008-11-19 21:04 --------- d-----w c:\programdata\Microsoft Help
2008-10-02 03:49 827,392 ----a-w c:\windows\System32\wininet.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll
2008-09-18 05:09 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe
2008-09-18 05:09 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe
2008-09-18 02:16 2,032,640 ----a-w c:\windows\System32\win32k.sys
2008-09-13 02:30 266,240 ----a-w c:\windows\System32\TubeFinder.exe
2008-05-07 16:53 28,285 ----a-w c:\users\XXXXX\AppData\Roaming\nvModes.dat
2008-03-06 14:14 22 --sha-w c:\windows\SMINST\HPCD.sys
.
((((((((((((((((((((((((((((( snapshot_2008-12-01_13.21.52,74 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-12-01 12:10:08 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2008-12-01 14:40:54 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2008-12-01 12:10:08 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2008-12-01 14:40:54 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2008-12-01 12:11:50 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat
+ 2008-12-01 14:42:36 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat
+ 2008-12-01 14:42:36 262,144 ---ha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
- 2008-12-01 12:12:52 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat
+ 2008-12-01 14:43:42 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat
- 2008-11-30 20:45:05 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2008-12-01 12:56:44 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2008-11-30 20:45:05 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2008-12-01 12:56:44 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2008-11-30 20:45:05 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2008-12-01 12:56:44 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2008-11-30 16:05:28 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
+ 2008-12-01 14:55:21 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
- 2008-12-01 12:17:09 100,660 ----a-w c:\windows\System32\perfc009.dat
+ 2008-12-01 14:48:15 100,838 ----a-w c:\windows\System32\perfc009.dat
- 2008-12-01 12:17:09 123,178 ----a-w c:\windows\System32\perfc00C.dat
+ 2008-12-01 14:48:15 123,178 ----a-w c:\windows\System32\perfc00C.dat
- 2008-12-01 12:17:09 586,588 ----a-w c:\windows\System32\perfh009.dat
+ 2008-12-01 14:48:15 586,766 ----a-w c:\windows\System32\perfh009.dat
- 2008-12-01 12:17:09 668,818 ----a-w c:\windows\System32\perfh00C.dat
+ 2008-12-01 14:48:15 668,818 ----a-w c:\windows\System32\perfh00C.dat
- 2008-12-01 12:12:37 12,028 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-41236917-1174933321-225472540-1000_UserData.bin
+ 2008-12-01 14:43:25 12,036 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-41236917-1174933321-225472540-1000_UserData.bin
- 2008-12-01 12:12:37 81,024 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2008-12-01 14:43:25 81,072 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2008-12-01 12:12:27 54,010 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2008-12-01 14:43:23 54,010 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
.
-- Instantané actualisé --
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"swg"="c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2008-03-07 171448]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-01 153136]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"UIWatcher"="c:\program files\ashampoo\Ashampoo UnInstaller Suite\UIWatcher.exe" [2002-04-17 585728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 102400]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-09-30 181544]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"MAFWTaskbarApp"="c:\windows\system32\MAFWTray.exe" [2007-10-24 245760]
"SearchSettings"="c:\program files\Search Settings\SearchSettings.exe" [2008-06-12 991584]
"FaxCenterServer"="c:\program files\Lexmark Fax Solutions\fm3032.exe" [2007-03-06 312240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2008\IEShow.exe" [2007-10-09 61440]
"BDAgent"="c:\program files\BitDefender\BitDefender 2008\bdagent.exe" [2008-11-26 368640]
"H2O"="c:\program files\SyncroSoft\Pos\H2O\cledx.exe" [2005-10-23 385024]
c:\users\XXXXX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
UDPixel.lnk - c:\program files\UDPixel\UDPixel_fr.exe [2006-01-25 159744]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2008-03-07 389120]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GOEC62~1.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3codecp"= l3codecp.acm
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{997EBF0C-CA0E-4411-980D-DE595BE4A63C}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{4C3ED039-FEED-42EE-82BC-483897E71969}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{7BB3BEA4-716E-44BA-BAA8-1CF39FDDC260}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{A287380F-C5E6-4E05-8F99-2E909DF62FD6}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{8FDD44D2-A5CC-4351-AA3D-7461B9D0F7DB}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{89B0258C-2F1F-40C7-B93B-993A4C873A73}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
"{C07851D4-DC05-4E14-8344-295C55578736}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{268B58E0-DA25-4DF4-AA8E-9E1C172F2546}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{F8C489E6-6C39-4C0E-8AF3-D592914D5AD1}"= UDP:c:\windows\System32\lxdicoms.exe:Lexmark Communications System
"{BA413A3B-52A7-400A-A9AC-48AEC42FEC06}"= TCP:c:\windows\System32\lxdicoms.exe:Lexmark Communications System
"{77EFBD5A-325C-4F3F-8A2D-C53CFFC41EB6}"= UDP:c:\program files\Lexmark 3500-4500 Series\lxdiamon.exe:Lexmark Device Monitor
"{691574F2-53A1-4089-9E12-07A86C0D56B9}"= TCP:c:\program files\Lexmark 3500-4500 Series\lxdiamon.exe:Lexmark Device Monitor
"{DA141620-5DA7-4402-87F7-DF07E6296F76}"= UDP:c:\program files\Lexmark 3500-4500 Series\App4R.exe:Lexmark Imaging Studio
"{E6975494-4412-43FA-A7F3-D0C813A00D81}"= TCP:c:\program files\Lexmark 3500-4500 Series\App4R.exe:Lexmark Imaging Studio
"{AE153107-95D7-40E6-A99C-24ADBAFE3DE0}"= UDP:c:\program files\Lexmark 3500-4500 Series\lxdimon.exe:
"{B2DC6E43-0554-440A-A734-7D3E6B5E4251}"= TCP:c:\program files\Lexmark 3500-4500 Series\lxdimon.exe:
"TCP Query User{2C2274D5-8EE0-4F88-B49B-F40F5C2A9065}c:\\program files\\lexmark 3500-4500 series\\lxdiamon.exe"= UDP:c:\program files\lexmark 3500-4500 series\lxdiamon.exe:Device Monitor Application
"UDP Query User{688008C2-D101-43C1-9E9D-7D17B5715BFE}c:\\program files\\lexmark 3500-4500 series\\lxdiamon.exe"= TCP:c:\program files\lexmark 3500-4500 series\lxdiamon.exe:Device Monitor Application
"TCP Query User{431EE299-9E24-4BFE-9AE0-47FD2C2DCFE4}c:\\program files\\lexmark 3500-4500 series\\lxdimon.exe"= UDP:c:\program files\lexmark 3500-4500 series\lxdimon.exe:Device Monitor
"UDP Query User{26A9F222-1CFF-4BFA-8761-D775D12EE0F3}c:\\program files\\lexmark 3500-4500 series\\lxdimon.exe"= TCP:c:\program files\lexmark 3500-4500 series\lxdimon.exe:Device Monitor
"{CC753FED-1CFD-4DA1-84B6-557EBA1A08C5}"= UDP:c:\windows\System32\spool\drivers\w32x86\3\lxdipswx.exe:
"{8BAD0CC2-1DCE-492C-9F73-6DAFDD1B9980}"= TCP:c:\windows\System32\spool\drivers\w32x86\3\lxdipswx.exe:
"{A86D7FD8-5294-4A79-92AB-EAD3F4A9E9BE}"= UDP:c:\windows\System32\spool\drivers\w32x86\3\lxdijswx.exe:
"{702C2F4E-7147-4D97-9CF2-9167A94F40AD}"= TCP:c:\windows\System32\spool\drivers\w32x86\3\lxdijswx.exe:
"{E068523B-9AF2-4B20-98F8-AD184ED16B4B}"= UDP:c:\windows\System32\spool\drivers\w32x86\3\lxditime.exe:
"{E3045214-FC10-40D8-A66E-F5E2416D256B}"= TCP:c:\windows\System32\spool\drivers\w32x86\3\lxditime.exe:
"{36B3B3B5-5A55-48DB-9810-2C61A4E04E43}"= UDP:c:\windows\System32\spool\drivers\w32x86\3\lxdiwbgw.exe:
"{E17709CC-6D23-46A4-AE89-6C937CA9F84F}"= TCP:c:\windows\System32\spool\drivers\w32x86\3\lxdiwbgw.exe:
R2 lxdi_device;lxdi_device;c:\windows\system32\lxdicoms.exe -service []
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\bdfndisf.sys [2008-11-26 86792]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\DRIVERS\cledx.sys [2008-06-12 33792]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;"c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-03-07 29744]
S3 MAFW;MAFW;c:\windows\system32\DRIVERS\mafw.sys [2008-06-07 186368]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2051fab4-ae5d-11dd-9ba1-001e6803a608}]
\shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\Info.exe protect.ed 480 480
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
Contenu du dossier 'Tâches planifiées'
2008-12-01 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2008\OneClickStarter.exe [2008-06-20 09:23]
2008-12-01 c:\windows\Tasks\User_Feed_Synchronization-{921E21D3-461B-4457-B05F-A0AEF4B658AF}.job
- c:\windows\system32\msfeedssync.exe [2008-01-19 08:33]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=laptop
IE: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 5.0\resources\fr-fr\local\search.html
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
c:\windows\bdoscandellang.ini - c:\windows\bdoscandel.exe
c:\windows\Downloaded Program Files\live.ini
c:\windows\Downloaded Program Files\scanoptions.tsi
c:\windows\Downloaded Program Files\lang.ini
c:\windows\Downloaded Program Files\ipsupd.dll
c:\windows\Downloaded Program Files\bdupd.dll
c:\windows\Downloaded Program Files\libfn.dll
c:\windows\Downloaded Program Files\bdcore.dll
c:\windows\Downloaded Program Files\oscan8.ocx
O16 -: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
hxxp://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
c:\windows\Downloaded Program Files\oscan8.inf
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-01 15:59:08
Windows 6.0.6001 Service Pack 1 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
Heure de fin: 2008-12-01 16:01:04
ComboFix-quarantined-files.txt 2008-12-01 15:00:52
ComboFix2.txt 2008-12-01 12:23:23
ComboFix3.txt 2008-11-30 16:12:16
Avant-CF: 56 964 571 136 octets libres
Après-CF: 56,930,066,432 octets libres
329 --- E O F --- 2008-12-01 02:01:06
