Bonjour,
Voici le rapport de Combofix. Mon problème: Lorsque je suis sur google et que je clic sur un lien j'ai une page pornographie qui s'ouvre. je voudrais savoir si combofix à réglé le problème et tout les autres virus qui se trouve dans ma machine. Je vous remercie d'avance pour votre aide.
Salutation.
Rapport:
ComboFix 10-08-17.04 - Ountibi 18/08/2010 19:53:28.1.3 - x86
Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.33.1036.18.3071.2049 [GMT -3:00]
Lancé depuis: c:\users\Ountibi\Desktop\ComboFix.exe
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\programdata\api-ms-win-security-lsalookup-l1-1-032.dll
c:\programdata\D3DCompiler_3332.dll
c:\programdata\SysWoW32
c:\programdata\SysWoW32\wu1243529411v0
c:\programdata\unrar.exe
c:\users\Ountibi\AppData\Roaming\020000003a612942973C.manifest
c:\users\Ountibi\AppData\Roaming\020000003a612942973O.manifest
c:\users\Ountibi\AppData\Roaming\020000003a612942973P.manifest
c:\users\Ountibi\AppData\Roaming\020000003a612942973S.manifest
c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}
c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\chrome.manifest
c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\chrome\xulcache.jar
c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\defaults\preferences\xulcache.js
c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\install.rdf
c:\users\Ountibi\AppData\Roaming\SystemProc
c:\users\Pemecou\AppData\Roaming\020000003a612942973C.manifest
c:\users\Pemecou\AppData\Roaming\020000003a612942973O.manifest
c:\users\Pemecou\AppData\Roaming\020000003a612942973P.manifest
c:\users\Pemecou\AppData\Roaming\020000003a612942973S.manifest
c:\users\Pemecou\AppData\Roaming\D4BB.tmp
c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}
c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\chrome.manifest
c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\chrome\xulcache.jar
c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\defaults\preferences\xulcache.js
c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{e59afa57-5cfe-4220-bac4-1e11829d1339}\install.rdf
c:\users\Pemecou\AppData\Roaming\SystemProc
c:\windows\system32\CERTCLI32.DLL
.
((((((((((((((((((((((((((((( Fichiers créés du 2010-07-18 au 2010-08-18 ))))))))))))))))))))))))))))))))))))
.
2010-08-18 21:47 . 2010-08-18 21:47 340456 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\avp.exe
2010-08-18 21:47 . 2010-08-18 21:47 170512 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\prloader.dll
2010-08-18 21:47 . 2010-08-18 21:47 170584 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\prloader.dll
2010-08-18 21:46 . 2010-08-18 21:46 340520 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\avp.exe
2010-08-17 19:11 . 2010-08-17 19:11 7424 ------w- C:\bootsqm.dat
2010-08-16 03:47 . 2010-08-16 03:47 -------- d-----w- c:\users\Pemecou\AppData\Roaming\ActiveState
2010-08-16 03:17 . 2010-08-16 03:17 -------- d-----w- c:\program files\Common Files\Java
2010-08-16 03:13 . 2010-08-16 21:50 -------- d-----w- c:\users\Ountibi\AppData\Roaming\ActiveState
2010-08-15 18:25 . 2010-08-15 18:25 -------- d-----w- c:\users\Pemecou\AppData\Roaming\KompoZer
2010-08-15 18:23 . 2010-08-15 18:23 -------- d-----w- c:\users\Ountibi\AppData\Roaming\KompoZer
2010-08-12 01:52 . 2010-06-14 06:12 1286016 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-08-12 01:52 . 2010-07-29 06:30 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-08-12 01:52 . 2010-07-29 06:30 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-08-12 01:41 . 2010-06-19 06:23 37376 ----a-w- c:\windows\system32\rtutils.dll
2010-08-12 01:28 . 2010-06-08 06:02 1233920 ----a-w- c:\windows\system32\msxml3.dll
2010-08-12 01:28 . 2010-06-22 02:47 310784 ----a-w- c:\windows\system32\drivers\srv.sys
2010-08-12 01:28 . 2010-06-22 02:47 307200 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-08-12 01:28 . 2010-06-22 02:47 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-07-31 23:17 . 2010-08-04 03:13 -------- d-----w- c:\users\Pemecou\Vide
2010-07-30 02:11 . 2010-07-30 02:11 346112 ----a-w- c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-07-30 02:11 . 2010-07-30 02:11 1496064 ----a-w- c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-07-30 02:11 . 2010-07-23 20:22 43008 ----a-w- c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-07-30 02:11 . 2010-07-23 20:22 338944 ----a-w- c:\users\Pemecou\AppData\Roaming\Mozilla\Firefox\Profiles\xu4k7dtj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-07-28 11:43 . 2010-07-28 11:43 -------- d-----w- c:\programdata\578223614
2010-07-25 17:09 . 2010-07-26 00:40 -------- d-----w- c:\users\Pemecou\Shared
2010-07-25 17:09 . 2010-07-26 01:15 -------- d-----w- c:\users\Pemecou\Incomplete
2010-07-25 17:09 . 2010-07-25 21:32 -------- d-----w- c:\users\Pemecou\AppData\Roaming\LimeWire
2010-07-25 15:53 . 2010-07-26 15:12 -------- d-----w- c:\users\Ountibi\Incomplete
2010-07-25 15:53 . 2010-07-25 16:12 -------- d-----w- c:\users\Ountibi\AppData\Roaming\LimeWire
2010-07-25 15:53 . 2010-07-26 15:06 -------- d-----w- c:\users\Ountibi\Shared
2010-07-25 15:52 . 2010-07-25 15:53 -------- d-----w- c:\program files\360Share Pro
2010-07-25 14:20 . 2010-08-16 18:09 -------- d-----w- c:\program files\org.manager
2010-07-23 02:53 . 2010-07-23 02:57 -------- d-----w- c:\users\Pemecou\AppData\Roaming\SmartDraw
2010-07-23 02:52 . 2010-07-23 02:59 -------- d-----w- C:\SmartDraw 2010
2010-07-21 12:27 . 2008-08-21 07:17 453152 ----a-w- c:\windows\system32\nvuninst.exe
2010-07-21 12:27 . 2008-08-24 19:22 14208 ----a-w- c:\windows\system32\drivers\nvsmu.sys
2010-07-21 12:27 . 2008-08-21 07:17 122880 ----a-w- c:\windows\system32\NVCOSMU.DLL
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-18 22:36 . 2009-12-19 23:16 -------- d-----w- c:\programdata\Kaspersky Lab
2010-08-18 22:25 . 2009-07-14 08:39 704242 ----a-w- c:\windows\system32\perfh00C.dat
2010-08-18 22:25 . 2009-07-14 08:39 130548 ----a-w- c:\windows\system32\perfc00C.dat
2010-08-16 18:09 . 2009-12-18 20:28 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-16 17:49 . 2009-12-25 14:46 -------- d-----w- c:\users\Pemecou\AppData\Roaming\Skype
2010-08-16 11:11 . 2009-12-25 14:48 -------- d-----w- c:\users\Pemecou\AppData\Roaming\skypePM
2010-08-16 03:16 . 2010-06-15 10:46 -------- d-----w- c:\program files\Java
2010-08-12 10:57 . 2009-12-18 19:38 -------- d-----w- c:\programdata\Microsoft Help
2010-08-11 01:47 . 2009-12-30 22:28 -------- d-----w- c:\users\Pemecou\AppData\Roaming\vlc
2010-08-03 10:56 . 2009-12-20 23:18 -------- d-----w- c:\program files\CCleaner
2010-07-29 19:47 . 2009-12-19 23:17 97549 ----a-w- c:\windows\system32\drivers\klick.dat
2010-07-29 19:47 . 2009-12-19 23:17 113933 ----a-w- c:\windows\system32\drivers\klin.dat
2010-07-26 15:04 . 2010-07-26 15:04 0 ----a-w- c:\users\Ountibi\AppData\Roaming\3277.tmp
2010-07-25 17:05 . 2009-12-30 19:47 -------- d-----w- c:\users\Ountibi\AppData\Roaming\vlc
2010-07-25 16:17 . 2010-06-17 05:07 -------- d-----w- c:\program files\EDraw Max
2010-07-21 14:25 . 2010-02-25 22:34 -------- d-----w- c:\programdata\NVIDIA
2010-07-17 16:54 . 2009-12-30 23:23 -------- d-----w- c:\users\Pemecou\AppData\Roaming\dvdcss
2010-07-17 08:00 . 2010-06-15 10:46 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-09 18:57 . 2010-07-09 18:57 -------- d-----w- c:\users\Pemecou\AppData\Roaming\Macrovision
2010-07-07 15:29 . 2009-12-18 13:01 86504 ----a-w- c:\users\Ountibi\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-01 22:27 . 2009-12-22 11:26 86504 ----a-w- c:\users\Pemecou\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-01 22:23 . 2009-12-18 19:41 -------- d-----w- c:\program files\Microsoft Works
2010-07-01 22:23 . 2009-07-14 04:52 -------- d-----w- c:\program files\MSBuild
2010-07-01 16:52 . 2010-07-18 04:45 1496064 ----a-w- c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-07-01 16:51 . 2010-07-18 04:45 43008 ----a-w- c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-07-01 16:51 . 2010-07-18 04:45 338944 ----a-w- c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-07-01 16:51 . 2010-07-18 04:45 346112 ----a-w- c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-06-30 06:25 . 2010-08-11 22:15 978432 ----a-w- c:\windows\system32\wininet.dll
2010-06-23 23:07 . 2009-12-18 19:40 -------- d-----w- c:\program files\Microsoft.NET
2010-06-19 06:33 . 2010-08-11 22:15 3955080 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-06-19 06:33 . 2010-08-11 22:15 3899784 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-06-19 04:07 . 2010-08-11 22:15 2326016 ----a-w- c:\windows\system32\win32k.sys
2010-06-16 05:48 . 2010-08-11 22:15 224256 ----a-w- c:\windows\system32\schannel.dll
2010-06-15 12:23 . 2010-06-15 12:23 133720 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\mmpprtc.dll
2010-05-27 07:24 . 2010-06-15 09:48 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-05-27 03:49 . 2010-06-15 09:48 293888 ----a-w- c:\windows\system32\atmfd.dll
2010-05-21 17:14 . 2009-12-18 21:54 221568 ------w- c:\windows\system32\MpSigStub.exe
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe" [2010-08-18 340520]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Welcome Center"="c:\windows\system32\OobeFldr.dll" [2009-10-26 859648]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Little transparency.exe [2009-9-9 402263]
RocketDock.lnk - c:\program files\RocketDock\RocketDock.exe [2009-10-28 495616]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
2004-03-10 14:39 40960 ----a-w- c:\program files\ScanSoft\PaperPort\IndexSearch.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nuance OmniPage 17-reminder]
2008-11-03 14:02 54560 ----a-w- c:\program files\Nuance\OmniPage17\Ereg\Ereg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
2004-03-10 14:20 57393 ----a-w- c:\program files\ScanSoft\PaperPort\pptd40nt.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDF5 Registry Controller]
2008-12-13 06:27 58656 ----a-w- c:\program files\Nuance\PDF Create 5\RegistryController.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDFHook]
2009-04-10 12:52 1277952 ----a-w- c:\program files\Nuance\PDF Create 5\PdfCreate5Hook.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2009-10-09 16:11 25623336 ----a-r- c:\program files\Skype\Phone\Skype.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate1ca98429a3e2d30;Google Update Service (gupdate1ca98429a3e2d30);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-18 135664]
R3 KMWDFILTERx86;HIDServiceDesc;c:\windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-02-25 1343400]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2009-12-18 722416]
S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-10-14 36880]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2009-09-14 21520]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]
.
Contenu du dossier 'Tâches planifiées'
2010-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-18 22:05]
2010-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-18 22:05]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
IE: Ajouter au fichier PDF existant - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Ajouter le contenu des liens sélectionnés à un fichier PDF existant - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Ajouter le contenu du lien à un fichier PDF existant - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Créer des fichiers PDF à partir des liens sélectionnés - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Créer fichier PDF - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Créer un fichier PDF depuis le contenu du lien - c:\program files\Nuance\PDF Create 5\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.fr/
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - component: c:\users\Ountibi\AppData\Roaming\Mozilla\Firefox\Profiles\len0b5ya.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
---- PARAMETRES FIREFOX ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "" );
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties" );
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties" );
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHELINS SUPPRIMES - - - -
BHO-{0DAF3CE5-E984-4CAD-AA4D-65D325D74583} - c:\windows\system32\certcli32.dll
HKCU-Run-OpAgent - OpAgent.exe
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2010-08-18 20:04:06
ComboFix-quarantined-files.txt 2010-08-18 23:04
Avant-CF: 82 186 256 384 octets libres
Après-CF: 82 955 812 864 octets libres
- - End Of File - - 917076C597B70D1AC9ED85EC4E964D65
