les antivirus bloquent comment faire

tinemy · le 19 décembre 2010

Bonjour et merci encore pour ta dernière réponse. je suis désolée de m'être trompée la dernière fois après avoir tenté de nombreuses fois d'executer les procédures.

Ci-dessous le rapport demandé. C'est de l'hébreu pour moi tout celà mais c'est interessant de découvrir petit à petit son PC autrement !

A bientôt et bonne soirée.

ComboFix 10-12-18.02 - misery 19/12/2010 17:41:06.1.8 - x64

Microsoft Windows 7 Édition Familiale Premium 6.1.7600.0.1252.33.1036.18.8183.6948 [GMT 1:00]

Lancé depuis: c:\users\tinemy\Desktop\ComboFix.exe

AV: ESET Smart Security 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}

FW: Pare-feu personnel d'ESET *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}

SP: ESET Smart Security 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\programdata\FullRemove.exe

c:\users\tinemy\AppData\Roaming\.#

c:\windows\system32\muzapp.exe

c:\windows\SysWow64\muzapp.exe

.

((((((((((((((((((((((((((((( Fichiers créés du 2010-11-19 au 2010-12-19 ))))))))))))))))))))))))))))))))))))

.

2010-12-19 16:44 . 2010-12-19 16:44 -------- d-----w- c:\users\misery\AppData\Local\temp

2010-12-19 16:44 . 2010-12-19 16:44 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-12-17 16:56 . 2010-11-16 11:01 8199504 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6A98BF23-5F00-471E-A870-4128BBEB54F0}\mpengine.dll

2010-12-16 14:10 . 2010-12-16 14:17 -------- d-----w- c:\program files (x86)\Unlocker

2010-12-14 17:39 . 2010-12-14 17:39 -------- d-----w- c:\windows\PCHEALTH

2010-12-14 17:37 . 2010-12-14 17:37 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services

2010-12-14 17:37 . 2010-12-14 17:37 -------- d-----r- C:\MSOCache

2010-12-14 16:21 . 2010-12-14 16:21 -------- d-----w- c:\users\tinemy\AppData\Local\ESET

2010-12-14 16:21 . 2010-12-14 16:21 -------- d-----w- c:\program files\ESET

2010-12-14 14:02 . 2010-12-14 14:02 -------- d-----w- C:\_OTL

2010-12-14 14:02 . 2009-10-31 06:34 2870272 ----a-w- c:\windows\system32\explorer.exe

2010-12-10 16:19 . 2010-12-10 16:19 -------- d-----w- c:\users\tinemy\AppData\Local\Real

2010-12-10 16:19 . 2010-12-10 16:19 11776 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nprjplug.dll

2010-12-10 16:19 . 2010-12-10 16:19 -------- d-----w- c:\program files (x86)\Common Files\xing shared

2010-12-10 16:19 . 2010-12-10 16:19 151776 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppl3260.dll

2010-12-10 16:18 . 2010-12-10 16:18 100352 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nprpjplug.dll

2010-12-09 18:07 . 2010-12-09 18:07 -------- d-----w- C:\found.003

2010-12-08 19:02 . 2010-12-08 21:52 -------- d---a-w- C:\Kaspersky Rescue Disk 10.0

2010-12-08 13:57 . 2010-12-08 13:57 -------- d-----w- c:\program files (x86)\ESET

2010-12-08 12:51 . 2010-12-08 12:51 -------- d-----w- c:\program files\CCleaner

2010-12-03 10:04 . 2010-11-29 16:42 38224 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys

2010-12-03 10:04 . 2010-12-16 15:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2010-11-30 17:46 . 2010-12-19 16:35 -------- d-----w- c:\programdata\Spybot - Search & Destroy

2010-11-30 17:46 . 2010-11-30 17:53 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy

2010-11-30 12:33 . 2010-11-30 12:33 -------- d-----w- c:\users\tinemy\AppData\Roaming\Malwarebytes

2010-11-30 12:33 . 2010-11-30 12:33 -------- d-----w- c:\programdata\Malwarebytes

2010-11-30 12:33 . 2010-11-29 16:42 24152 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-11-30 10:01 . 2010-11-30 10:01 -------- d-----w- C:\Packard Bell

2010-11-29 13:01 . 2010-11-29 13:01 -------- dc----w- c:\windows\system32\DRVSTORE

2010-11-29 13:01 . 2010-09-22 23:36 48488 ----a-w- c:\windows\system32\drivers\fssfltr.sys

2010-11-29 13:00 . 2010-11-29 13:00 -------- d-----w- c:\windows\system32\Live Remote

2010-11-29 12:59 . 2010-11-29 12:59 -------- d-----w- c:\program files (x86)\Microsoft

2010-11-29 12:59 . 2010-11-29 12:59 -------- d-----w- c:\program files (x86)\MSN Toolbar

2010-11-29 12:59 . 2010-11-29 13:00 -------- d-----w- c:\program files (x86)\Bing Bar Installer

2010-11-29 12:59 . 2010-08-11 05:19 3860992 ----a-w- c:\windows\system32\UIRibbon.dll

2010-11-29 12:59 . 2010-08-11 05:13 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll

2010-11-29 12:59 . 2010-08-11 04:44 2983424 ----a-w- c:\windows\SysWow64\UIRibbon.dll

2010-11-29 12:59 . 2010-08-11 04:35 1164800 ----a-w- c:\windows\SysWow64\UIRibbonRes.dll

2010-11-29 12:47 . 2010-11-29 12:47 2724120 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll

2010-11-29 12:47 . 2010-11-29 12:47 42776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll

2010-11-29 09:42 . 2010-11-29 09:42 -------- d--h--w- c:\windows\system32\CanonIJ Uninstaller Information

2010-11-29 09:42 . 2007-04-17 08:17 1177088 ----a-w- c:\windows\system32\CNQ2412L.DLL

2010-11-29 09:42 . 2007-03-23 15:33 1439744 ----a-w- c:\windows\system32\CNQ2412C.DLL

2010-11-29 09:42 . 2007-03-23 15:32 92672 ----a-w- c:\windows\system32\CNQ2412I.DLL

2010-11-29 09:42 . 2007-03-15 13:13 229888 ----a-w- c:\windows\system32\CNQ2412O.DLL

2010-11-29 09:42 . 2010-11-29 09:42 -------- d--h--w- c:\program files\CanonBJ

2010-11-27 16:10 . 2010-11-27 16:10 -------- d-----w- c:\users\tinemy\AppData\Roaming\NewSoft

2010-11-27 16:10 . 2010-11-27 16:10 -------- d-----w- c:\users\tinemy\AppData\Local\NewSoft

2010-11-27 15:32 . 1999-05-06 13:22 27632 ----a-w- c:\windows\SysWow64\CTL3DV2.DLL

2010-11-27 15:32 . 1997-10-14 04:19 11776 ----a-w- c:\windows\SysWow64\pmsbfn32.dll

2010-11-27 15:31 . 2010-11-27 15:32 -------- d-----w- c:\program files (x86)\Common Files\NewSoft

2010-11-27 15:30 . 2010-11-27 15:30 -------- d-----w- c:\users\tinemy\AppData\Roaming\ScanSoft

2010-11-27 15:29 . 1995-08-01 03:44 212480 ----a-w- c:\windows\PCDLIB32.DLL

2010-11-27 15:28 . 2010-11-27 15:28 -------- d-----w- c:\program files\Common Files\CANON

2010-11-26 21:26 . 2010-12-14 15:57 -------- d-----w- c:\programdata\Trend Micro

2010-11-26 19:08 . 2010-11-26 19:28 -------- d-----w- c:\program files (x86)\Windows Live Safety Center

2010-11-24 17:26 . 2010-11-30 15:00 157712 ----a-w- c:\windows\SysWow64\drivers\tmcomm.sys

2010-11-24 17:22 . 2010-11-30 15:15 -------- d-----w- c:\windows\BDOSCAN8

2010-11-24 16:17 . 2010-11-24 20:04 -------- d-----w- c:\windows\system32\%LocalAppData%

2010-11-24 12:56 . 2010-11-24 13:11 -------- d-----w- c:\users\tinemy\AppData\Roaming\Download Manager

2010-11-24 08:45 . 2010-10-19 08:47 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll

2010-11-24 08:45 . 2010-10-19 08:10 7680 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-11-12 17:53 . 2010-06-10 13:15 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll

2010-10-19 09:41 . 2010-03-18 07:49 270720 ------w- c:\windows\system32\MpSigStub.exe

2010-09-22 23:47 . 2010-09-22 23:47 49016 ----a-w- c:\windows\SysWow64\sirenacm.dll

2010-09-22 23:32 . 2010-09-22 23:32 301936 ----a-w- c:\windows\WLXPGSS.SCR

2010-09-21 13:49 . 2010-09-21 13:49 252800 ----a-w- c:\windows\system32\LIVESSP.DLL

2010-09-21 13:03 . 2010-09-21 13:03 208768 ----a-w- c:\windows\SysWow64\LIVESSP.DLL

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-28 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Packard Bell Photo Frame"="c:\program files (x86)\Packard Bell Photo Frame\ButtonMonitor.exe" [2009-07-20 124416]

"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]

"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2007-05-10 624248]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2010-12-10 274608]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Service Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-03-02 135664]

R3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]

R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1255736]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2008-06-16 55024]

S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]

S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-12-08 169312]

S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2010-07-29 168544]

S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [2010-08-12 810144]

S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2010-07-29 50624]

S2 Greg_Service;GRegService;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe [2009-08-28 1150496]

S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2009-07-04 240160]

S3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys [2009-09-23 283824]

S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [2009-08-25 25600]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2009-08-21 84512]

S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

.

Contenu du dossier 'Tâches planifiées'

2010-12-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-03-02 20:17]

2010-12-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-03-02 20:17]

.

--------- x86-64 -----------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-10-13 186904]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-28 8312352]

"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2006-09-20 20480]

"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2010-08-12 2916584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Examen supplémentaire -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.liberation.fr/

mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=040c&m=ixtreme_m5740&r=173603102016p04f5v195y44130745

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: &Envoyer à OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL

DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx

FF - ProfilePath - c:\users\tinemy\AppData\Roaming\Mozilla\Firefox\Profiles\0z0bg6io.default\

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

.

- - - - ORPHELINS SUPPRIMES - - - -

Toolbar-Locked - (no file)

Wow6432Node-HKLM-Run-UnlockerAssistant - c:\program files (x86)\Unlocker\UnlockerAssistant.exe

Toolbar-Locked - (no file)

AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"

"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"

"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Heure de fin: 2010-12-19 17:45:36

ComboFix-quarantined-files.txt 2010-12-19 16:45

Avant-CF: 436 575 952 896 octets libres

Après-CF: 438 042 910 720 octets libres

- - End Of File - - B99DE14E753950584485F990B0362F16

lance_yien · le 20 décembre 2010

Bonjour,

Un peu de ménage pour y voir plus clair.

>>> Désinstaller, depuis Ajout/ Suppression de programmes, tout ce qui se rapporte à ESET et Trend Micro.

>>> Cliquer sur "Démarrer" => "Exécuter". Saisir Notepad et cliquer sur "OK". Copier et coller ces lignes:

File::
c:\users\tinemy\AppData\Local\ESET

c:\program files\ESET

C:\_OTL

C:\found.003

c:\program files (x86)\ESET

c:\programdata\Trend Micro

FCopy::

C:\Windows\System32\explorer.exe | C:\Windows\explorer.exe

SecCenter::

AV: ESET Smart Security 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}

FW: Pare-feu personnel d'ESET *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}

SP: ESET Smart Security 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}

Cliquer sur "Fichier" => "Enregistrer". Dans "Nom du fichier", saisir ou coller CFScript.txt, cliquer sur Bureau à gauche puis sur "Enregistrer" en bas à droite.

Fermer tout et désactiver antivirus, pare-feu et antispyware pour éviter qu'ils interfèrent avec ComboFix.

Glisser le fichier CFScript.txt et le déposer sur ComboFix.exe

Ceci a pour effet de lancer ComboFix.

A la fin, si le PC ne redémarre pas automatiquement, REDEMARREZ-LE VOUS-MEME.

>>> Installer un antivirus: Antivirus

Gratuit, Avira AntiVir Personal – FREE Antivirus, AVG - FREE EDITION

Rapports demandés: ComboFix.txt

Encore des symptômes à vérifier?

tinemy · le 20 décembre 2010

Bonjour,

Je te joins le rapport ci-dessous.

Microsoft office est bizarre. Je n'arrive pas par exemple à ouvrir des fichiers Word et dans Outlock je n'arrive pas à acceder à Internet...

Toujours impossible d'épingler des raccourcis dans la barre de tache.

Dois-je réinstaller Office ?

Je vais aussi installer un des antivirus que tu me conseilles. ESET ce n'est pas bien ?

Je te remercie pour ta patience et te dis à bientôt...

J'essaie de travailler au milieu de tout ce bazar. Merci vraiment pour ton suivi.

Tinemy

ComboFix 10-12-18.02 - misery 20/12/2010 11:14:23.3.8 - x64

Microsoft Windows 7 Édition Familiale Premium 6.1.7600.0.1252.33.1036.18.8183.6808 [GMT 1:00]

Lancé depuis: c:\users\misery\Desktop\ComboFix.exe

Commutateurs utilisés :: c:\users\misery\Desktop\CFScript.txt

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FILE ::

"C:\_OTL"

"C:\found.003"

"c:\program files (x86)\ESET"

"c:\program files\ESET"

"c:\programdata\Trend Micro"

"c:\users\tinemy\AppData\Local\ESET"

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

--------------- FCopy ---------------

c:\windows\System32\explorer.exe --> c:\windows\explorer.exe

.

((((((((((((((((((((((((((((( Fichiers créés du 2010-11-20 au 2010-12-20 ))))))))))))))))))))))))))))))))))))

.

2010-12-20 10:16 . 2010-12-20 10:16 -------- d-----w- c:\users\misery\AppData\Local\temp

2010-12-20 10:16 . 2010-12-20 10:16 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-12-19 19:39 . 2010-12-19 19:39 -------- d-----w- c:\users\misery\AppData\Roaming\diginet

2010-12-19 19:39 . 2010-12-19 19:39 -------- d-----w- c:\program files (x86)\Diginet

2010-12-17 16:56 . 2010-11-16 11:01 8199504 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6A98BF23-5F00-471E-A870-4128BBEB54F0}\mpengine.dll

2010-12-16 14:10 . 2010-12-16 14:17 -------- d-----w- c:\program files (x86)\Unlocker

2010-12-14 17:39 . 2010-12-14 17:39 -------- d-----w- c:\windows\PCHEALTH

2010-12-14 17:37 . 2010-12-14 17:37 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services

2010-12-14 17:37 . 2010-12-14 17:37 -------- d-----r- C:\MSOCache

2010-12-14 16:21 . 2010-12-14 16:21 -------- d-----w- c:\users\misery\AppData\Local\ESET

2010-12-14 14:02 . 2010-12-14 14:02 -------- d-----w- C:\_OTL

2010-12-14 14:02 . 2009-10-31 06:34 2870272 ------w- c:\windows\system32\explorer.exe

2010-12-10 16:19 . 2010-12-10 16:19 -------- d-----w- c:\users\misery\AppData\Local\Real