Problème virus

[Aemeth]

Hello tout le monde!

 

 

Je suis désolé de poster mon premier message sur ce forum comme une demande d'aide mais bon, il faut ce qu'il faut... Espérons qu'un bonne ame sera prête à me filer un petit coup de main

 

Alors voilà, j'ai installé windows 7 il y a peu et depuis j'ai déjà eu 2 virus signalés par nod 32, j'ai eu un problème avec autorun.inf et aujourd'hui un autre avec un trojan qui infectait explorer.exe. J'ai un peu cherché sur le net et j'ai lancé combofix. Il etait marqué sur le site que je pouvais demander des conseils sur ce site et me voilà donc.

 

 

Voici mon rapport combofix :

 

ComboFix 10-02-12.01 - Aemeth 16/02/2010 11:45:22.2.2 - x86

Microsoft Windows 7 Édition Intégrale 6.1.7600.0.1252.32.1036.18.3327.2385 [GMT 1:00]

Lancé depuis: c:\users\Aemeth\Downloads\ComboFix.exe

* Un antivirus résident est actif

 

.

 

((((((((((((((((((((((((((((( Fichiers créés du 2010-01-16 au 2010-02-16 ))))))))))))))))))))))))))))))))))))

.

 

2010-02-16 10:49 . 2010-02-16 10:49 -------- d-----w- c:\users\Public\AppData\Local\temp

2010-02-16 10:49 . 2010-02-16 10:49 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-02-16 09:58 . 2010-02-16 10:49 -------- d-----w- c:\users\Aemeth\AppData\Local\temp

2010-02-15 16:29 . 2010-02-15 16:29 -------- d-----w- c:\users\Aemeth\AppData\Roaming\XRay Engine

2010-02-13 13:51 . 2010-02-13 13:51 -------- d-----w- c:\users\Aemeth\AppData\Roaming\Canneverbe Limited

2010-02-13 13:51 . 2010-02-13 13:51 -------- d-----w- c:\programdata\Canneverbe Limited

2010-02-13 13:51 . 2009-11-12 12:48 7168 ----a-w- c:\windows\system32\drivers\StarOpen.sys

2010-02-13 13:51 . 2010-02-13 13:51 -------- d-----w- c:\program files\CDBurnerXP

2010-02-13 13:12 . 2010-02-13 13:20 -------- d-----w- c:\users\Aemeth\AppData\Local\Ahead

2010-02-13 13:12 . 2010-02-13 13:21 -------- d-----w- c:\users\Aemeth\AppData\Roaming\Ahead

2010-02-13 13:11 . 2010-02-13 13:11 -------- d-----w- c:\programdata\Ahead

2010-02-13 13:10 . 2010-02-13 13:11 -------- d-----w- c:\program files\Common Files\Ahead

2010-02-13 13:04 . 2010-02-13 13:04 -------- d-----w- c:\users\Aemeth\AppData\Local\ESET

2010-02-12 12:15 . 2005-05-26 14:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll

2010-02-12 12:03 . 2010-02-12 12:03 -------- d-----w- c:\program files\bitComposer Games

2010-02-10 05:18 . 2010-01-18 23:29 365568 ----a-w- c:\windows\system32\secproc_isv.dll

2010-02-10 05:18 . 2010-01-18 23:29 369152 ----a-w- c:\windows\system32\secproc.dll

2010-02-10 05:18 . 2010-01-18 23:29 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll

2010-02-10 05:18 . 2010-01-18 23:29 85504 ----a-w- c:\windows\system32\secproc_ssp.dll

2010-02-10 05:18 . 2010-01-18 23:28 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe

2010-02-10 05:18 . 2010-01-18 23:28 320512 ----a-w- c:\windows\system32\RMActivate.exe

2010-02-10 05:18 . 2010-01-18 23:28 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe

2010-02-10 05:18 . 2010-01-18 23:28 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe

2010-02-07 13:47 . 2010-02-07 13:47 -------- d-----w- c:\windows\Sun

2010-02-06 20:02 . 2010-02-13 12:06 -------- d-----w- c:\users\Aemeth\AppData\Roaming\Nero

2010-02-06 15:09 . 2010-02-13 13:10 -------- d-----w- c:\program files\Nero

2010-02-06 15:09 . 2010-02-13 13:10 -------- d-----w- c:\programdata\Nero

2010-02-06 15:09 . 2010-02-13 12:53 -------- d-----w- c:\program files\Common Files\Nero

2010-02-04 02:11 . 2010-02-04 02:11 -------- d-----w- c:\users\Aemeth\AppData\Local\WahOO

2010-02-03 23:18 . 2010-02-03 23:18 -------- d-----w- c:\users\Aemeth\.gstreamer-0.10

2010-02-03 23:18 . 2010-02-12 11:20 -------- d-----w- c:\users\Aemeth\amsn

2010-02-03 23:16 . 2010-02-03 23:16 -------- d-----w- c:\program files\aMSN

2010-02-02 16:44 . 2010-02-02 16:51 -------- d-----w- c:\program files\ESET

2010-02-02 14:26 . 2010-02-02 14:26 -------- d-----w- c:\program files\UlisesSoft

2010-02-02 14:18 . 2010-02-02 14:18 -------- d-----w- c:\program files\Microsoft IntelliType Pro

2010-02-02 14:18 . 2010-02-02 14:18 -------- d-----w- c:\windows\PCHEALTH

2010-01-31 23:18 . 2010-01-31 23:18 -------- d-----w- c:\program files\MSXML 4.0

2010-01-31 17:45 . 2010-01-31 17:45 -------- d-----w- c:\users\Aemeth\AppData\Local\MicroVision Applications

2010-01-31 11:39 . 2010-01-31 11:39 -------- d-----w- C:\Rushs

2010-01-31 11:32 . 2010-01-31 17:45 -------- d-----w- c:\program files\SureThing Express Labeler

2010-01-31 11:32 . 2010-01-31 11:32 -------- d-----w- c:\program files\Common Files\SureThing Shared

2010-01-31 11:30 . 2004-03-29 16:23 90112 ----a-w- c:\windows\unvise32.exe

2010-01-31 11:30 . 2010-01-31 11:30 -------- d-----w- c:\program files\LooksBuilderSE

2010-01-31 11:29 . 2010-01-31 11:29 29926 ----a-r- c:\users\Aemeth\AppData\Roaming\Microsoft\Installer\{6DE721A5-5E89-4D74-994C-652BB3C0672E}\ARPPRODUCTICON.exe

2010-01-31 11:29 . 2010-01-31 11:29 -------- d-----w- c:\program files\Common Files\Pinnacle

2010-01-31 11:28 . 2010-01-31 11:28 -------- d-----w- c:\users\Aemeth\AppData\Local\Downloaded Installations

2010-01-31 11:28 . 2010-02-01 18:44 -------- d-----w- c:\users\Aemeth\AppData\Local\Pinnacle

2010-01-31 11:28 . 2010-01-31 11:28 -------- d-----w- c:\programdata\Pinnacle Studio Ultimate Collection

2010-01-31 11:24 . 2010-01-31 11:24 -------- d-----w- c:\program files\Common Files\Yahoo!

2010-01-31 11:24 . 2010-01-31 11:24 -------- d-----w- c:\program files\Common Files\Pegasus Imaging

2010-01-31 11:24 . 2010-01-31 11:24 -------- d-----w- c:\programdata\Studio 14

2010-01-31 11:24 . 2010-01-31 11:24 -------- d-----w- c:\programdata\Pinnacle Studio Plus

2010-01-31 11:22 . 2010-01-31 11:30 -------- d-----w- c:\program files\Pinnacle

2010-01-31 11:20 . 2010-01-31 11:27 -------- d-----w- c:\programdata\Pinnacle

2010-01-31 11:18 . 2010-02-02 16:07 -------- d-----w- c:\users\Aemeth\AppData\Roaming\Ulead Systems

2010-01-31 01:21 . 2010-01-31 01:21 691696 ----a-w- c:\windows\system32\drivers\sptd.sys

2010-01-31 01:20 . 2010-01-31 01:21 -------- d-----w- c:\program files\DAEMON Tools Lite

2010-01-31 01:20 . 2010-01-31 11:20 -------- d-----w- c:\users\Aemeth\AppData\Roaming\DAEMON Tools Lite

2010-01-31 01:20 . 2010-01-31 01:20 -------- d-----w- c:\programdata\DAEMON Tools Lite

2010-01-31 01:15 . 2010-01-31 01:15 -------- d-----w- c:\users\Aemeth\AppData\Roaming\DAEMON Tools Pro

2010-01-31 01:15 . 2010-01-31 01:15 -------- d-----w- c:\programdata\DAEMON Tools Pro

2010-01-30 20:08 . 2010-01-30 20:09 -------- d-----w- c:\users\Aemeth\AppData\Roaming\Media Player Classic

2010-01-30 18:02 . 2010-01-30 18:02 -------- d-----w- c:\program files\Common Files\InterVideo

2010-01-30 17:57 . 2010-01-30 17:57 -------- d-----w- c:\program files\Windows Media Components

2010-01-30 17:56 . 2010-02-02 16:10 -------- d-----w- c:\programdata\Ulead Systems

2010-01-30 17:54 . 2010-02-02 16:07 -------- d-----w- c:\program files\Corel

2010-01-30 11:57 . 2010-02-07 19:53 -------- d-----w- c:\program files\JkDefrag

2010-01-30 11:31 . 2009-12-12 14:15 178176 ----a-w- c:\windows\system32\unrar.dll

2010-01-30 11:31 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll

2010-01-30 11:31 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll

2010-01-30 11:31 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll

2010-01-30 11:31 . 2010-01-05 18:00 85504 ----a-w- c:\windows\system32\ff_vfw.dll

2010-01-30 11:31 . 2010-01-30 11:33 -------- d-----w- c:\program files\K-Lite Codec Pack

2010-01-30 11:30 . 2010-01-30 11:30 -------- d-----w- c:\program files\Google

2010-01-30 00:34 . 2010-01-30 00:34 -------- d-----w- c:\windows\system32\Macromed

2010-01-30 00:31 . 2010-01-30 19:45 -------- d-----w- c:\users\Aemeth\AppData\Local\ElevatedDiagnostics

2010-01-29 23:47 . 2010-01-29 23:47 98304 ----a-w- c:\programdata\Microsoft\Windows Defender\LocalCopy\{C185760C-B5A7-F913-7CE5-F53EA7A1825A}-CLIStart.exe

2010-01-29 23:29 . 2010-02-13 08:14 -------- d-----w- c:\program files\uTorrent

2010-01-29 23:29 . 2010-02-15 14:17 -------- d-----w- c:\users\Aemeth\AppData\Roaming\uTorrent

2010-01-29 23:19 . 2009-06-16 11:05 53248 ----a-w- c:\windows\system32\CSVer.dll

2010-01-29 23:18 . 2010-01-29 23:19 -------- d-----w- c:\program files\Intel

2010-01-29 23:18 . 2010-01-29 23:18 -------- d-----w- c:\users\Aemeth\AppData\Roaming\InstallShield

2010-01-29 23:13 . 2010-01-29 23:13 53248 ----a-w- c:\programdata\Microsoft\Windows Defender\LocalCopy\{1012FB02-2899-B345-7FFA-9B35C1E27B83}-MMLoadDrv.exe

2010-01-29 23:13 . 2010-01-29 23:13 102400 ----a-w- c:\programdata\Microsoft\Windows Defender\LocalCopy\{2D9B8FC3-B4E3-3937-2CCE-F15740DAB556}-MMACEPrev.exe

2010-01-29 23:06 . 2010-01-29 23:06 -------- d-----w- c:\windows\system32\Atheros_L1e

2010-01-29 23:03 . 2007-12-17 16:14 12400 ----a-w- c:\windows\system32\drivers\AsIO.sys

2010-01-29 23:03 . 2006-01-10 15:50 24576 ----a-w- c:\windows\system32\AsIO.dll

2010-01-29 23:03 . 2010-01-29 23:27 -------- d-----w- c:\program files\ASUS

2010-01-29 23:03 . 2008-01-04 12:34 11832 ----a-w- c:\windows\system32\drivers\AsInsHelp64.sys

2010-01-29 23:03 . 2008-01-04 12:34 10216 ----a-w- c:\windows\system32\drivers\AsInsHelp32.sys

2010-01-29 23:03 . 2010-02-02 16:10 -------- d--h--w- c:\program files\InstallShield Installation Information

2010-01-29 23:02 . 2010-01-29 23:02 499712 ----a-w- c:\programdata\Microsoft\Windows Defender\LocalCopy\{76CA6F4D-B268-EB89-5FA2-3258BB11158E}-CCCPrev.exe

2010-01-29 22:51 . 2010-02-02 16:48 105184 ----a-w- c:\users\Aemeth\AppData\Local\GDIPFONTCACHEV1.DAT

2010-01-29 22:50 . 2010-01-29 22:50 -------- d-----w- c:\users\Aemeth\AppData\Roaming\ATI

2010-01-29 22:50 . 2010-01-29 22:50 -------- d-----w- c:\users\Aemeth\AppData\Local\ATI

2010-01-29 22:50 . 2010-01-29 22:50 -------- d-----w- c:\programdata\ATI

2010-01-29 22:47 . 2010-01-29 23:32 -------- d-----w- c:\program files\Common Files\InstallShield

2010-01-29 22:42 . 2010-01-29 22:42 -------- d-----w- c:\program files\Common Files\ATI Technologies

2010-01-29 22:41 . 2010-01-29 22:41 10134 ----a-r- c:\users\Aemeth\AppData\Roaming\Microsoft\Installer\{810C21DD-0E77-D5A2-25F7-F4C924C79708}\ARPPRODUCTICON.exe

2010-01-29 22:40 . 2010-02-13 13:13 -------- d-sh--w- c:\windows\Installer

2010-01-29 22:40 . 2010-01-29 22:42 -------- d-----w- c:\program files\ATI Technologies

2010-01-29 22:40 . 2010-01-29 22:42 -------- d-----w- c:\program files\ATI

2010-01-29 22:37 . 2010-01-29 22:37 -------- d-----w- c:\users\Aemeth\AppData\Local\Mozilla

2010-01-29 22:36 . 2010-01-14 10:12 181120 ------w- c:\windows\system32\MpSigStub.exe

2010-01-29 22:36 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll

2010-01-29 22:32 . 2009-10-29 07:22 2048 ----a-w- c:\windows\system32\tzres.dll

2010-01-29 22:27 . 2010-02-16 09:54 -------- d-----w- c:\windows\system32\wbem\Performance

2010-01-29 22:23 . 2010-01-29 22:23 -------- d-sh--we c:\programdata\Modèles

2010-01-29 22:23 . 2010-01-29 22:23 -------- d-sh--we c:\programdata\Menu Démarrer

2010-01-29 22:23 . 2010-01-29 22:23 -------- d-sh--we c:\programdata\Favoris

2010-01-29 21:53 . 2010-01-29 22:06 -------- d-----w- C:\Boot

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-02-16 09:54 . 2009-07-14 08:39 694766 ----a-w- c:\windows\system32\perfh00C.dat

2010-02-16 09:54 . 2009-07-14 08:39 127478 ----a-w- c:\windows\system32\perfc00C.dat

2010-02-15 15:06 . 2010-02-01 20:33 1 ----a-w- c:\users\Aemeth\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys

2010-02-02 14:10 . 2010-02-01 20:03 -------- d-----w- c:\program files\Java

2010-02-02 13:25 . 2010-02-02 13:25 -------- d-----w- c:\program files\CPUID

2010-02-01 20:32 . 2010-02-01 20:32 -------- d-----w- c:\users\Aemeth\AppData\Roaming\OpenOffice.org

2010-02-01 20:06 . 2010-02-01 20:06 -------- d-----w- c:\users\Aemeth\AppData\Roaming\Foxit

2010-02-01 20:06 . 2010-02-01 20:06 -------- d-----w- c:\program files\Foxit Software

2010-02-01 20:04 . 2010-02-01 20:04 -------- d-----w- c:\program files\JRE

2010-02-01 20:04 . 2010-02-01 20:04 -------- d-----w- c:\program files\OpenOffice.org 3

2010-01-31 20:53 . 2010-01-31 20:53 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf

2010-01-29 23:32 . 2010-01-29 23:32 -------- d-----w- c:\program files\Realtek

2010-01-29 22:23 . 2010-01-29 22:23 -------- d-sh--we c:\programdata\Modèles

2010-01-29 22:23 . 2010-01-29 22:23 -------- d-sh--we c:\programdata\Menu Démarrer

2010-01-29 22:23 . 2010-01-29 22:23 -------- d-sh--we c:\programdata\Bureau

2010-01-29 22:23 . 2010-01-29 22:23 -------- d-sh--we c:\program files\Fichiers communs

2010-01-29 22:11 . 2010-01-29 22:11 0 ----a-w- c:\windows\ativpsrm.bin

2010-01-08 03:18 . 2010-02-10 05:19 221184 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys

2010-01-08 03:17 . 2010-02-10 05:19 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2009-12-19 09:02 . 2010-01-29 22:31 977920 ----a-w- c:\windows\system32\wininet.dll

2009-12-19 09:02 . 2010-02-10 05:19 12288 ----a-w- c:\windows\system32\tsbyuv.dll

2009-12-19 09:02 . 2010-02-10 05:19 1328640 ----a-w- c:\windows\system32\quartz.dll

2009-12-19 09:02 . 2010-02-10 05:19 22016 ----a-w- c:\windows\system32\msyuv.dll

2009-12-19 09:02 . 2010-02-10 05:19 31744 ----a-w- c:\windows\system32\msvidc32.dll

2009-12-19 09:02 . 2010-02-10 05:19 13312 ----a-w- c:\windows\system32\msrle32.dll

2009-12-19 09:02 . 2010-02-10 05:19 84480 ----a-w- c:\windows\system32\mciavi32.dll

2009-12-19 09:02 . 2010-02-10 05:19 50176 ----a-w- c:\windows\system32\iyuv_32.dll

2009-12-19 09:02 . 2010-02-10 05:19 91648 ----a-w- c:\windows\system32\avifil32.dll

2009-12-11 21:03 . 2009-12-11 21:03 5188096 ----a-w- c:\windows\system32\drivers\atipmdag.sys

2009-12-11 21:03 . 2009-12-11 21:03 5188096 ----a-w- c:\windows\system32\drivers\atikmdag.sys

2009-12-11 20:45 . 2009-12-11 20:45 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll

2009-12-11 20:45 . 2009-12-11 20:45 372736 ----a-w- c:\windows\system32\atieclxx.exe

2009-12-11 20:44 . 2009-12-11 20:44 172032 ----a-w- c:\windows\system32\atiesrxx.exe

2009-12-11 20:43 . 2009-12-11 20:43 159744 ----a-w- c:\windows\system32\atitmmxx.dll

2009-12-11 20:42 . 2009-12-11 20:42 356352 ----a-w- c:\windows\system32\atipdlxx.dll

2009-12-11 20:42 . 2009-12-11 20:42 274432 ----a-w- c:\windows\system32\Oemdspif.dll

2009-12-11 20:42 . 2009-12-11 20:42 11776 ----a-w- c:\windows\system32\atimuixx.dll

2009-12-11 20:42 . 2009-12-11 20:42 43520 ----a-w- c:\windows\system32\ati2edxx.dll

2009-12-11 20:39 . 2009-07-13 22:09 3060224 ----a-w- c:\windows\system32\atidxx32.dll

2009-12-11 20:35 . 2009-12-11 20:35 400384 ----a-w- c:\windows\system32\aticfx32.dll

2009-12-11 20:26 . 2009-12-11 20:26 13383168 ----a-w- c:\windows\system32\atioglxx.dll

2009-12-11 20:22 . 2009-12-11 20:22 3601920 ----a-w- c:\windows\system32\atiumdag.dll

2009-12-11 20:11 . 2009-12-11 20:11 50176 ----a-w- c:\windows\system32\coinst.dll

2009-12-11 20:04 . 2009-12-11 20:04 53248 ----a-w- c:\windows\system32\aticalrt.dll

2009-12-11 20:04 . 2009-12-11 20:04 2912768 ----a-w- c:\windows\system32\atiumdva.dll

2009-12-11 20:04 . 2009-12-11 20:04 53248 ----a-w- c:\windows\system32\aticalcl.dll

2009-12-11 20:03 . 2009-12-11 20:03 3641344 ----a-w- c:\windows\system32\aticaldd.dll

2009-12-11 19:52 . 2009-12-11 19:52 52224 ----a-w- c:\windows\system32\atimpc32.dll

2009-12-11 19:52 . 2009-12-11 19:52 52224 ----a-w- c:\windows\system32\amdpcom32.dll

2009-12-11 19:52 . 2009-12-11 19:52 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll

2009-12-11 19:51 . 2009-12-11 19:51 225280 ----a-w- c:\windows\system32\atiadlxx.dll

2009-12-11 19:51 . 2009-12-11 19:51 12800 ----a-w- c:\windows\system32\atiglpxx.dll

2009-12-11 19:51 . 2009-12-11 19:51 15360 ----a-w- c:\windows\system32\atigktxx.dll

2009-12-11 19:50 . 2009-12-11 19:50 125440 ----a-w- c:\windows\system32\drivers\atikmpag.sys

2009-12-11 19:50 . 2009-12-11 19:50 27136 ----a-w- c:\windows\system32\atiuxpag.dll

2009-12-11 19:50 . 2009-12-11 19:50 20480 ----a-w- c:\windows\system32\atiu9pag.dll

2009-12-08 11:40 . 2010-02-10 05:19 3955288 ----a-w- c:\windows\system32\ntkrnlpa.exe

2009-12-08 11:40 . 2010-02-10 05:19 3899464 ----a-w- c:\windows\system32\ntoskrnl.exe

2009-12-08 11:32 . 2010-02-10 05:19 292864 ----a-w- c:\windows\system32\apphelp.dll

2009-12-08 08:05 . 2010-02-10 05:19 310784 ----a-w- c:\windows\system32\drivers\srv.sys

2009-12-08 08:05 . 2010-02-10 05:19 113664 ----a-w- c:\windows\system32\drivers\srvnet.sys

2009-11-18 23:25 . 2009-11-18 23:25 100352 ----a-w- c:\windows\system32\drivers\AtiHdmi.sys

2009-11-18 15:11 . 2009-11-18 15:11 197624 ----a-w- c:\windows\system32\atiicdxx.dat

2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat

2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

.

 

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-11 98304]

"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-06-14 307200]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-05-22 7514656]

"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"="c:\program files\Google\Gmail Notifier\gnotify.exe" [2005-07-15 479232]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]

"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2009-11-11 1505144]

"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-04-09 2029640]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ai Nap]

2009-07-01 19:23 1435136 ----a-w- c:\program files\ASUS\AI Suite\AiNap\AiNap.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

2008-01-22 09:13 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cpu Level Up help]

2007-11-30 19:03 881152 ----a-w- c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

2007-03-01 13:57 153136 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QFan Help]

2009-07-01 19:19 601088 ----a-w- c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBToolTip]

2007-02-20 10:07 199752 ----a-w- c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]

2010-02-11 08:10 319280 ----a-w- c:\program files\uTorrent\uTorrent.exe

 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WahOO]

2009-12-06 19:45 1841152 ----a-w- c:\users\Aemeth\AppData\Local\WahOO\WahOO.exe

 

R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [9/04/2009 15:18 107256]

R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [11/12/2009 21:44 172032]

R2 cpuz132;cpuz132;c:\windows\System32\drivers\cpuz132_x32.sys [2/02/2010 14:25 12672]

R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [9/04/2009 15:19 731840]

R2 epfwwfpr;epfwwfpr;c:\windows\System32\drivers\epfwwfpr.sys [9/04/2009 15:21 93312]

R3 amdkmdag;amdkmdag;c:\windows\System32\drivers\atipmdag.sys [11/12/2009 22:03 5188096]

R3 amdkmdap;amdkmdap;c:\windows\System32\drivers\atikmpag.sys [11/12/2009 20:50 125440]

S0 sptd;sptd;c:\windows\System32\drivers\sptd.sys [31/01/2010 02:21 691696]

.

.

------- Examen supplémentaire -------

.

FF - ProfilePath - c:\users\Aemeth\AppData\Roaming\Mozilla\Firefox\Profiles\4du0q91i.default\

FF - prefs.js: browser.startup.homepage - www.journaldugamer.com

FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll

 

---- PARAMETRES FIREFOX ----

c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);

c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);

c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);

c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");

c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);

c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

.

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Heure de fin: 2010-02-16 11:51:04

ComboFix-quarantined-files.txt 2010-02-16 10:51

ComboFix2.txt 2010-02-16 09:58

 

Avant-CF: 828.447.899.648 octets libres

Après-CF: 828.396.752.896 octets libres

 

- - End Of File - - F6B3BE85BAA3532FD6B5490DD41FD236

 

 

 

Merci à tous!

 

 

Julien