rapport combofix

[Invité Blaise Chapuis]

Merci de m'aider, meilleures salutations:

 

 

 

 

ComboFix 11-02-26.02 - Catherine 27.02.2011 18:52:35.1.2 - x64

Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.41.1036.18.4094.2538 [GMT 1:00]

Lancé depuis: c:\users\Catherine\Downloads\Asdehi.exe

AV: Kaspersky PURE *Disabled/Updated* {AE1D740B-8F0F-D137-211D-873D44B3F4AE}

AV: Lavasoft Ad-Watch Live! Antivirus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}

FW: Kaspersky PURE *Disabled* {9626F52E-C560-D06F-0A42-2E08BA60B3D5}

SP: Kaspersky PURE *Disabled/Updated* {157C95EF-A935-DEB9-1BAD-BC4F3F34BE13}

SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

c:\programdata\xp

c:\programdata\xp\EBLib.dll

c:\programdata\xp\TPwSav.sys

 

.

((((((((((((((((((((((((((((( Fichiers créés du 2011-01-27 au 2011-02-27 ))))))))))))))))))))))))))))))))))))

.

 

2011-02-27 18:43 . 2011-02-27 18:43 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-02-27 17:43 . 2011-02-27 17:50 -------- d-----r- C:\32788R22FWJFW

2011-02-27 09:56 . 2011-01-17 11:09 197120 ----a-w- c:\windows\system32\d3d10_1.dll

2011-02-27 09:56 . 2011-01-17 05:47 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll

2011-02-27 09:20 . 2011-02-27 09:20 -------- d-----w- c:\windows\system32\SPReview

2011-02-27 09:19 . 2011-02-27 09:19 -------- d-----w- c:\windows\system32\EventProviders

2011-02-27 09:12 . 2010-11-20 13:27 3650560 ----a-w- c:\windows\system32\MSVidCtl.dll

2011-02-27 09:11 . 2010-11-20 13:27 297984 ----a-w- c:\windows\system32\ws2_32.dll

2011-02-27 09:10 . 2010-11-20 13:27 2193920 ----a-w- c:\windows\system32\themecpl.dll

2011-02-27 09:09 . 2010-11-20 13:27 249856 ----a-w- c:\program files\Common Files\System\msadc\msdarem.dll

2011-02-27 09:08 . 2010-11-20 12:18 323072 ----a-w- c:\windows\SysWow64\drvstore.dll

2011-02-27 09:08 . 2010-11-20 12:18 257024 ----a-w- c:\windows\SysWow64\dpx.dll

2011-02-27 09:08 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll

2011-02-27 09:08 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll

2011-02-27 09:05 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll

2011-02-27 09:05 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll

2011-02-27 09:05 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll

2011-02-27 09:05 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll

2011-02-27 09:05 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe

2011-02-27 09:04 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll

2011-02-27 09:04 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll

2011-02-26 20:29 . 2011-02-26 20:29 -------- d-----w- c:\users\Catherine\AppData\Roaming\pdf995

2011-02-26 20:26 . 2011-02-26 20:30 59 ----a-w- c:\windows\wpd99.drv

2011-02-26 20:26 . 2011-02-26 20:30 -------- d-----w- c:\programdata\pdf995

2011-02-26 20:26 . 2006-10-19 20:44 47616 ----a-w- c:\windows\system32\pdf995mon64.dll

2011-02-26 20:26 . 2010-10-29 07:24 320512 ----a-w- c:\windows\system32\pdfmona64.dll

2011-02-26 20:26 . 2005-06-30 14:29 11264 ----a-w- c:\windows\system32\pdf995mon64ui.dll

2011-02-26 20:26 . 2011-02-26 20:26 47616 ----a-w- c:\windows\SysWow64\pdf995mon64.dll

2011-02-26 20:25 . 2011-02-26 20:27 -------- d-----w- c:\program files (x86)\pdf995

2011-02-25 16:48 . 2011-02-11 07:30 7947600 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{00F55F3C-C64F-447B-AE50-752AF6011BC8}\mpengine.dll

2011-02-24 15:38 . 2011-02-24 15:38 -------- d-----w- c:\program files (x86)\Common Files\Adobe

2011-02-23 10:42 . 2011-01-07 12:17 1465344 ----a-w- c:\windows\system32\XpsPrint.dll

2011-02-23 10:42 . 2011-01-07 12:17 475648 ----a-w- c:\windows\system32\XpsGdiConverter.dll

2011-02-23 10:42 . 2011-01-07 07:46 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll

2011-02-23 10:42 . 2011-01-07 07:46 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll

2011-02-17 10:26 . 2011-02-17 10:26 -------- d-----w- c:\program files\Java

2011-02-10 15:38 . 2011-01-07 09:51 1638912 ----a-w- c:\windows\system32\mshtml.tlb

2011-02-10 15:38 . 2011-01-07 06:01 1638912 ----a-w- c:\windows\SysWow64\mshtml.tlb

2011-02-10 15:38 . 2011-01-05 06:56 3129344 ----a-w- c:\windows\system32\win32k.sys

2011-02-10 15:38 . 2010-12-17 11:40 715776 ----a-w- c:\windows\system32\kerberos.dll

2011-02-10 15:38 . 2010-12-17 07:07 542208 ----a-w- c:\windows\SysWow64\kerberos.dll

2011-02-10 15:37 . 2010-12-17 11:42 214016 ----a-w- c:\windows\system32\winsrv.dll

2011-02-10 15:37 . 2011-01-05 10:34 612864 ----a-w- c:\windows\system32\vbscript.dll

2011-02-10 15:37 . 2011-01-05 05:55 428032 ----a-w- c:\windows\SysWow64\vbscript.dll

2011-02-10 15:37 . 2011-01-07 12:14 46080 ----a-w- c:\windows\system32\atmlib.dll

2011-02-10 15:37 . 2011-01-07 09:20 366592 ----a-w- c:\windows\system32\atmfd.dll

2011-02-10 15:37 . 2011-01-07 07:45 34304 ----a-w- c:\windows\SysWow64\atmlib.dll

2011-02-10 15:37 . 2011-01-07 05:43 294400 ----a-w- c:\windows\SysWow64\atmfd.dll

2011-02-10 15:37 . 2010-09-30 10:41 100864 ----a-w- c:\windows\system32\fontsub.dll

2011-02-10 15:37 . 2010-09-30 06:47 70656 ----a-w- c:\windows\SysWow64\fontsub.dll

2011-01-30 15:45 . 2011-01-30 15:45 135568 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll

2011-01-29 14:36 . 2011-01-29 14:36 -------- d-----w- c:\program files (x86)\MSXML 4.0

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-02-27 09:32 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll

2011-02-27 09:32 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll

2011-02-17 10:26 . 2010-10-13 12:30 521448 ----a-w- c:\windows\system32\deployJava1.dll

2011-02-02 16:11 . 2010-03-13 08:12 270720 ------w- c:\windows\system32\MpSigStub.exe

.

 

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]

@="{dd230880-495a-11d1-b064-008048ec2fc5}"

[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]

2009-12-25 14:42 129552 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky PURE\shellex.dll

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]

@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"

[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]

2010-11-20 12:20 442880 ----a-w- c:\windows\System32\ntshrui.dll

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"TOSHIBA Online Product Information"="c:\program files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe" [2009-08-12 6203296]

"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]

"FileHippo.com"="c:\program files (x86)\FileHippo.com\UpdateChecker.exe" [2010-08-09 248832]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-29 98304]

"SVPWUTIL"="c:\program files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe" [2009-07-09 352256]

"HWSetup"="c:\program files\TOSHIBA\Utilities\HWSetup.exe" [2009-06-02 423936]

"KeNotify"="c:\program files (x86)\TOSHIBA\Utilities\KeNotify.exe" [2009-01-13 34088]

"ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2009-08-17 1294136]

"AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe" [2009-12-25 340456]

"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]

"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288]

 

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"TOSHIBA Online Product Information"="c:\program files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe" [2009-08-12 6203296]

 

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]

RocketDock.lnk - c:\program files (x86)\RocketDock\RocketDock.exe [2010-3-12 495616]

WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2010-3-12 122880]

 

c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-1 481184]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\mzvkbd3.dll c:\progra~2\KASPER~1\KASPER~1\sbhook.dll

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

@="Service"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

@="IEEE 1394 Bus host controllers"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

@="SBP2 IEEE 1394 Devices"

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

@="SecurityDevices"

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

 

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 1394ohci;Contrôleur d’hôte compatible OHCI 1394;c:\windows\system32\drivers\1394ohci.sys [2010-11-20 229888]

R3 AcpiPmi;Jauge d’alimentation ACPI;c:\windows\system32\drivers\acpipmi.sys [2010-11-20 12800]

R3 adp94xx;adp94xx;c:\windows\system32\DRIVERS\adp94xx.sys [2009-07-14 491088]

R3 adpahci;adpahci;c:\windows\system32\DRIVERS\adpahci.sys [2009-07-14 339536]

R3 amdsata;amdsata;c:\windows\system32\drivers\amdsata.sys [2010-11-20 107904]

R3 amdsbs;amdsbs;c:\windows\system32\DRIVERS\amdsbs.sys [2009-07-14 194128]

R3 AppID;Pilote AppID;c:\windows\system32\drivers\appid.sys [2010-11-20 61440]

R3 AppIDSvc;Identité de l’application;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 arcsas;arcsas;c:\windows\system32\DRIVERS\arcsas.sys [2009-07-14 97856]

R3 b06bdrv;Broadcom NetXtreme II VBD;c:\windows\system32\DRIVERS\bxvbda.sys [2009-06-10 468480]

R3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60a.sys [2009-06-10 270848]

R3 BDESVC;Service de chiffrement de lecteur BitLocker;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 BrFiltLo;Pilote de filtre inférieur de stockage de masse Brother USB;c:\windows\system32\DRIVERS\BrFiltLo.sys [2009-06-10 18432]

R3 BrFiltUp;Pilote de filtre supérieur de stockage de masse Brother USB;c:\windows\system32\DRIVERS\BrFiltUp.sys [2009-06-10 8704]

R3 Brserid;Pilote d’interface de port série Brother MFC (WDM);c:\windows\System32\Drivers\Brserid.sys [2009-07-14 286720]

R3 BrSerWdm;Pilote série WDM Brother;c:\windows\System32\Drivers\BrSerWdm.sys [2009-06-10 47104]

R3 BrUsbMdm;Brother MFC USB modem télécopieur uniquement;c:\windows\System32\Drivers\BrUsbMdm.sys [2009-06-10 14976]

R3 CertPropSvc;Propagation du certificat;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 circlass;Périphériques IR grand public;c:\windows\system32\DRIVERS\circlass.sys [2009-07-14 45568]

R3 defragsvc;Défragmenteur de disque;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;c:\windows\system32\DRIVERS\evbda.sys [2009-06-10 3286016]

R3 elxstor;elxstor;c:\windows\system32\DRIVERS\elxstor.sys [2009-07-14 530496]

R3 fdPHost;Hôte du fournisseur de découverte de fonctions;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 Filetrace;Filetrace;c:\windows\system32\drivers\filetrace.sys [2009-07-13 34304]

R3 FsDepends;File System Dependency Minifilter;c:\windows\system32\drivers\FsDepends.sys [2009-07-14 55376]

R3 hcw85cir;Hauppauge Consumer Infrared Receiver;c:\windows\system32\drivers\hcw85cir.sys [2009-06-10 31232]

R3 HomeGroupListener;Écouteur HomeGroup;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 HomeGroupProvider;Fournisseur HomeGroup;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 HpSAMD;HpSAMD;c:\windows\system32\drivers\HpSAMD.sys [2010-11-20 78720]

R3 iaStorV;Contrôleur RAID Intel Windows 7;c:\windows\system32\drivers\iaStorV.sys [2010-11-20 410496]

R3 IPBusEnum;Énumérateur de bus IP PnP-X;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 IPMIDRV;IPMIDRV;c:\windows\system32\drivers\IPMIDrv.sys [2010-11-20 78848]

R3 iScsiPrt;Pilote iScsiPort;c:\windows\system32\drivers\msiscsi.sys [2010-11-20 273792]

R3 KtmRm;Service KtmRm pour Distributed Transaction Coordinator;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-02-08 1405384]

R3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [2011-02-04 17152]

R3 lltdsvc;Mappage de découverte de topologie de la couche de liaison;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 LSI_FC;LSI_FC;c:\windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 114752]

R3 LSI_SAS;LSI_SAS;c:\windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 106560]

R3 LSI_SAS2;LSI_SAS2;c:\windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 65600]

R3 LSI_SCSI;LSI_SCSI;c:\windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 115776]

R3 megasas;megasas;c:\windows\system32\DRIVERS\megasas.sys [2009-07-14 35392]

R3 mpio;Pilote de bus à chemins d’accès multiples Microsoft;c:\windows\system32\drivers\mpio.sys [2010-11-20 155008]

R3 msdsm;Module spécifique de périphériques à chemins d’accès multiples Microsoft;c:\windows\system32\drivers\msdsm.sys [2010-11-20 140672]

R3 mshidkmdf;Pass-through HID to KMDF Filter Driver;c:\windows\System32\drivers\mshidkmdf.sys [2009-07-14 8192]

R3 MSiSCSI;Service Initiateur iSCSI de Microsoft;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 MsRPC;MsRPC; [x]

R3 MTConfig;Microsoft Input Configuration Driver;c:\windows\system32\DRIVERS\MTConfig.sys [2009-07-14 15360]

R3 NdisCap;NDIS Capture LightWeight Filter;c:\windows\system32\DRIVERS\ndiscap.sys [2009-07-14 35328]

R3 nfrd960;nfrd960;c:\windows\system32\DRIVERS\nfrd960.sys [2009-07-14 51264]

R3 nvstor;nvstor;c:\windows\system32\drivers\nvstor.sys [2010-11-20 166272]

R3 PerfHost;Hôte de DLL de compteur de performance;c:\windows\SysWow64\perfhost.exe [2009-07-14 20992]

R3 pla;Journaux & alertes de performance;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 PNRPAutoReg;Service de publication des noms d’ordinateurs PNRP;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 ql2300;ql2300;c:\windows\system32\DRIVERS\ql2300.sys [2009-07-14 1524816]

R3 ql40xx;ql40xx;c:\windows\system32\DRIVERS\ql40xx.sys [2009-07-14 128592]

R3 rdpbus;Remote Desktop Device Redirector Bus Driver;c:\windows\system32\DRIVERS\rdpbus.sys [2009-07-14 24064]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-07-30 222208]

R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]

R3 scfilter;Pilote de filtre de classe PnP de carte à puce;c:\windows\system32\DRIVERS\scfilter.sys [2010-11-20 29696]

R3 SCPolicySvc;Stratégie de retrait de la carte à puce;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 SensrSvc;Brillance adaptative;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 SessionEnv;Configuration des services Bureau à distance;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 sffp_mmc;Pilote de protocole de stockage SFF pour MMC;c:\windows\system32\drivers\sffp_mmc.sys [2009-07-14 13824]

R3 SiSRaid4;SiSRaid4;c:\windows\system32\DRIVERS\sisraid4.sys [2009-07-14 80464]

R3 Smb;Protocoles TCP/IP et TCP/IPv6 orienté messages (session SMB);c:\windows\system32\DRIVERS\smb.sys [2009-07-14 93184]

R3 sppuinotify;Service de notification SPP;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 stexstor;stexstor;c:\windows\system32\DRIVERS\stexstor.sys [2009-07-14 24656]

R3 TabletInputService;Service Panneau de saisie Tablet PC;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 TBS;Services de base de module de plateforme sécurisée;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 THREADORDER;Serveur de priorités des threads;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 tssecsrv;Remote Desktop Services Security Filter Driver;c:\windows\system32\DRIVERS\tssecsrv.sys [2010-11-20 39424]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 UI0Detect;Détection de services interactifs;c:\windows\system32\UI0Detect.exe [2009-07-14 40960]

R3 uliagpkx;Filtre de bus AGP Uli;c:\windows\system32\drivers\uliagpkx.sys [2009-07-14 64592]

R3 usbcir;Récepteur infrarouge eHome (USBCIR);c:\windows\system32\drivers\usbcir.sys [2009-07-14 100352]

R3 VaultSvc;Gestionnaire d’informations d’identification;c:\windows\system32\lsass.exe [2009-07-14 31232]

R3 vhdmp;vhdmp;c:\windows\system32\drivers\vhdmp.sys [2010-11-20 215936]

R3 vsmraid;vsmraid;c:\windows\system32\DRIVERS\vsmraid.sys [2009-07-14 161872]

R3 WacomPen;Pilote de tablette Wacom à stylet série;c:\windows\system32\DRIVERS\wacompen.sys [2009-07-14 27776]

R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-04 1255736]

R3 wbengine;Service de moteur de sauvegarde en mode bloc;c:\windows\system32\wbengine.exe [2010-11-20 1504256]

R3 WbioSrvc;Service de biométrie Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 wcncsvc;Windows Connect Now - Registre de configuration;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 WcsPlugInService;Système de couleurs Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 Wd;Wd;c:\windows\system32\DRIVERS\wd.sys [2009-07-14 21056]

R3 Wecsvc;Collecteur d’événements de Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 wercplsupport;Prise en charge de l’application Rapports et solutions aux problèmes du Panneau de configuration;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 WerSvc;Service de rapport d’erreurs Windows;c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 WIMMount;WIMMount;c:\windows\system32\drivers\wimmount.sys [2009-07-14 22096]

R3 WinRM;Gestion à distance de Windows (Gestion WSM);c:\windows\System32\svchost.exe [2009-07-14 27136]

R3 WPCSvc;Parental Controls;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 WPDBusEnum;Service Énumérateur d’appareil mobile;c:\windows\system32\svchost.exe [2009-07-14 27136]

R3 WwanSvc;Service de configuration automatique WWAN;c:\windows\system32\svchost.exe [2009-07-14 27136]

R4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]

R4 Mcx2Svc;Service Media Center Extender;c:\windows\system32\svchost.exe [2009-07-14 27136]

S0 amdxata;amdxata;c:\windows\system32\drivers\amdxata.sys [2010-11-20 27008]

S0 CLFS;Journal commun (CLFS);c:\windows\System32\CLFS.sys [2009-07-14 367696]

S0 CNG;CNG;c:\windows\System32\Drivers\cng.sys [2010-11-20 459248]

S0 CSCrySec;InfoWatch Encrypt Sector Library driver;c:\windows\system32\DRIVERS\CSCrySec.sys [2009-12-14 85048]

S0 FileInfo;File Information FS MiniFilter;c:\windows\system32\drivers\fileinfo.sys [2009-07-14 70224]

S0 fvevol;Pilote de filtre de Chiffrement de lecteur Bitlocker;c:\windows\System32\DRIVERS\fvevol.sys [2010-11-20 223248]

S0 hwpolicy;Hardware Policy Driver;c:\windows\System32\drivers\hwpolicy.sys [2010-11-20 14720]

S0 KLBG;Kaspersky Lab Boot Guard Driver;c:\windows\system32\DRIVERS\klbg.sys [2009-10-14 40464]

S0 KSecPkg;KSecPkg;c:\windows\System32\Drivers\ksecpkg.sys [2010-11-20 152960]

S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-08-12 69152]

S0 msahci;msahci;c:\windows\system32\drivers\msahci.sys [2010-11-20 31104]

S0 msisadrv;msisadrv;c:\windows\system32\drivers\msisadrv.sys [2009-07-14 15424]

S0 pcw;Performance Counters for Windows Driver;c:\windows\System32\drivers\pcw.sys [2009-07-14 50768]

S0 rdyboost;ReadyBoost;c:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

S0 spldr;Security Processor Loader Driver; [x]

S0 tos_sps64;TOSHIBA tos_sps64 Service;c:\windows\system32\DRIVERS\tos_sps64.sys [2009-07-24 482384]

S0 vdrvroot;Pilote d’énumérateur de lecteur virtuel Microsoft;c:\windows\system32\drivers\vdrvroot.sys [2009-07-14 36432]

S0 volmgr;Pilote du Gestionnaire de volume;c:\windows\system32\drivers\volmgr.sys [2010-11-20 71552]

S0 volmgrx;Gestionnaire de volumes dynamiques;c:\windows\System32\drivers\volmgrx.sys [2010-11-20 363392]

S1 blbdrive;blbdrive;c:\windows\system32\DRIVERS\blbdrive.sys [2009-07-13 45056]

S1 CSVirtualDiskDrv;InfoWatch Virtual Disk driver;c:\windows\system32\DRIVERS\CSVirtualDiskDrv.sys [2009-12-14 66104]

S1 DfsC;DFS Namespace Client Driver;c:\windows\system32\Drivers\dfsc.sys [2010-11-20 102400]

S1 discache;System Attribute Cache;c:\windows\system32\drivers\discache.sys [2009-07-13 40448]

S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2009-09-14 27152]

S1 nsiproxy;NSI proxy service driver.;c:\windows\system32\drivers\nsiproxy.sys [2009-07-13 24576]

S1 RDPENCDD;RDP Encoder Mirror Driver;c:\windows\system32\drivers\rdpencdd.sys [2009-07-14 7680]

S1 RDPREFMP;Reflector Display Driver used to gain access to graphics data;c:\windows\system32\drivers\rdprefmp.sys [2009-07-14 8192]

S1 tdx;Pilote de prise en charge TDI héritée NetIO;c:\windows\system32\DRIVERS\tdx.sys [2010-11-20 119296]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S1 Wanarpv6;Pilote ARP IPv6 d’accès à distance;c:\windows\system32\DRIVERS\wanarp.sys [2010-11-20 88576]

S1 WfpLwf;WFP Lightweight Filter;c:\windows\system32\DRIVERS\wfplwf.sys [2009-07-14 12800]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-29 203264]

S2 AudioEndpointBuilder;Générateur de points de terminaison du service Audio Windows;c:\windows\System32\svchost.exe [2009-07-14 27136]

S2 BFE;Moteur de filtrage de base;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2009-08-10 248688]

S2 ConfigFree Gadget Service;ConfigFree Gadget Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe [2009-07-14 42368]

S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]

S2 CSObjectsSrv;Service de gestion du système CryproStorage;c:\program files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [2009-12-21 743992]

S2 DPS;Service de stratégie de diagnostic;c:\windows\System32\svchost.exe [2009-07-14 27136]

S2 FDResPub;Publication des ressources de découverte de fonctions;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 FontCache;Service de cache de police Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 gpsvc;Client de stratégie de groupe;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 IKEEXT;Modules de génération de clés IKE et AuthIP;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 iphlpsvc;Assistance IP;c:\windows\System32\svchost.exe [2009-07-14 27136]

S2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;c:\windows\system32\DRIVERS\lltdio.sys [2009-07-14 60928]

S2 luafv;Virtualisation de fichier UAC;c:\windows\system32\drivers\luafv.sys [2009-07-13 113152]

S2 MMCSS;Planificateur de classes multimédias;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 MpsSvc;Pare-feu Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 NlaSvc;Connaissance des emplacements réseau;c:\windows\System32\svchost.exe [2009-07-14 27136]

S2 nsi;Service Interface du magasin réseau;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 PcaSvc;Service de l’Assistant Compatibilité des programmes;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 PEAUTH;PEAUTH;c:\windows\system32\drivers\peauth.sys [2009-07-14 651264]

S2 Power;Alimentation;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 ProfSvc;Service de profil utilisateur;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 RpcEptMapper;Mappeur de point de terminaison RPC;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 sppsvc;Protection logicielle;c:\windows\system32\sppsvc.exe [2010-11-20 3524608]

S2 SysMain;Superfetch;c:\windows\system32\svchost.exe [2009-07-14 27136]

S2 tcpipreg;TCP/IP Registry Compatibility;c:\windows\system32\drivers\tcpipreg.sys [2010-11-20 45056]

S2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe [2009-08-06 116104]

S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe [2009-08-27 251760]

S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys [2009-06-19 14472]

S2 UxSms;Gestionnaire de sessions du Gestionnaire de fenêtrage;c:\windows\System32\svchost.exe [2009-07-14 27136]

S2 WinDefend;Windows Defender;c:\windows\System32\svchost.exe [2009-07-14 27136]

S2 Wlansvc;Service de configuration automatique WLAN;c:\windows\system32\svchost.exe [2009-07-14 27136]

S3 Appinfo;Informations d’application;c:\windows\system32\svchost.exe [2009-07-14 27136]

S3 bowser;Pilote de prise en charge du navigateur;c:\windows\system32\DRIVERS\bowser.sys [2009-07-13 90624]

S3 CompositeBus;Pilote de l’énumérateur de bus composite;c:\windows\system32\drivers\CompositeBus.sys [2010-11-20 38912]

S3 DXGKrnl;LDDM Graphics Subsystem;c:\windows\System32\drivers\dxgkrnl.sys [2010-11-20 982912]

S3 KeyIso;Isolation de clé CNG;c:\windows\system32\lsass.exe [2009-07-14 31232]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-10-02 21008]

S3 monitor;Service Pilote de fonction de classe Moniteur Microsoft;c:\windows\system32\DRIVERS\monitor.sys [2009-07-13 30208]

S3 mpsdrv;Pilote d’autorisation du Pare-feu Windows;c:\windows\system32\drivers\mpsdrv.sys [2009-07-14 77312]

S3 mrxsmb10;Mini-redirecteur SMB 1.x;c:\windows\system32\DRIVERS\mrxsmb10.sys [2010-11-20 287744]

S3 mrxsmb20;Mini-redirecteur SMB 2.0;c:\windows\system32\DRIVERS\mrxsmb20.sys [2010-11-20 128000]

S3 NativeWifiP;NativeWiFi Filter;c:\windows\system32\DRIVERS\nwifi.sys [2009-07-14 318976]

S3 netprofm;Service Liste des réseaux;c:\windows\System32\svchost.exe [2009-07-14 27136]

S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008]

S3 RasAgileVpn;WAN Miniport (IKEv2);c:\windows\system32\DRIVERS\AgileVpn.sys [2009-07-14 60416]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]

S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [2010-04-26 1103904]

S3 SDRSVC;Sauvegarde Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]

S3 srv2;Pilote de serveur SMB 2.xxx;c:\windows\system32\DRIVERS\srv2.sys [2010-11-20 413184]

S3 srvnet;srvnet;c:\windows\system32\DRIVERS\srvnet.sys [2010-11-20 167936]

S3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2009-08-17 51512]

S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2009-08-03 137560]

S3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [2009-08-04 826224]

S3 TrustedInstaller;Programme d’installation pour les modules Windows;c:\windows\servicing\TrustedInstaller.exe [2010-11-20 194048]

S3 tunnel;Pilote de carte miniport Microsoft Tunnel;c:\windows\system32\DRIVERS\tunnel.sys [2010-11-20 125440]

S3 umbus;Pilote d’énumérateur UMBus;c:\windows\system32\drivers\umbus.sys [2010-11-20 48640]

S3 vwifibus;Pilote de bus WiFi virtuel;c:\windows\system32\DRIVERS\vwifibus.sys [2009-07-14 24576]

S3 WdiServiceHost;Service hôte WDIServiceHost;c:\windows\System32\svchost.exe [2009-07-14 27136]

S3 WdiSystemHost;Hôte système de diagnostics;c:\windows\System32\svchost.exe [2009-07-14 27136]

 

 

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]

LocalServiceNoNetwork REG_MULTI_SZ PLA

LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS QWAVE wcncsvc

DcomLaunch REG_MULTI_SZ Power PlugPlay DcomLaunch

wcssvc REG_MULTI_SZ WcsPlugInService

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

AeLookupSvc

CertPropSvc

SCPolicySvc

lanmanserver

gpsvc

AudioSrv

FastUserSwitchingCompatibility

Nla

NWCWorkstation

SRService

Wmi

WmdmPmSp

TermService

wuauserv

BITS

ShellHWDetection

LogonHours

PCAudit

helpsvc

uploadmgr

iphlpsvc

msiscsi

schedule

SessionEnv

winmgmt

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService

sppuinotify

 

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted

BthHFSrv

 

.

Contenu du dossier 'Tâches planifiées'

 

2011-02-27 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\program files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 12:55]

.

 

--------- x86-64 -----------

 

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\KAVOverlayIcon]

@="{dd230880-495a-11d1-b064-008048ec2fc5}"

[HKEY_CLASSES_ROOT\CLSID\{dd230880-495a-11d1-b064-008048ec2fc5}]

2009-12-25 14:43 170512 ----a-w- c:\program files (x86)\Kaspersky Lab\Kaspersky PURE\x64\ShellEx.dll

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]

@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"

[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]

2010-11-20 13:27 509952 ----a-w- c:\windows\System32\ntshrui.dll

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Toshiba TEMPRO"="c:\program files (x86)\Toshiba TEMPRO\TemproTray.exe" [2009-08-06 1050000]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-28 7982112]

"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2009-08-03 709976]

"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaReminder.exe" [2009-07-30 134032]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x1

"AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\x64\kloehk.dll c:\progra~2\KASPER~1\KASPER~1\x64\sbhook64.dll

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

AeLookupSvc

CertPropSvc

SCPolicySvc

lanmanserver

gpsvc

IKEEXT

AudioSrv

FastUserSwitchingCompatibility

Nla

NWCWorkstation

SRService

Wmi

WmdmPmSp

TermService

wuauserv

BITS

ShellHWDetection

LogonHours

PCAudit

helpsvc

uploadmgr

iphlpsvc

seclogon

AppInfo

msiscsi

MMCSS

winmgmt

SessionEnv

browser

EapHost

schedule

hkmsvc

wercplsupport

ProfSvc

Themes

BDESVC

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalSystemNetworkRestricted

homegrouplistener

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService

WdiServiceHost

sppuinotify

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetworkService

lanmanworkstation

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted

BthHFSrv

homegroupprovider

.

------- Examen supplémentaire -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSEH&bmod=TSEH

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: Ajouter à l'Anti-bannière - c:\program files (x86)\Kaspersky Lab\Kaspersky PURE\ie_banner_deny.htm

IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

FF - ProfilePath - c:\users\Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\8atti166.default\

FF - prefs.js: browser.search.selectedEngine - Portail Lexical - CNRTL

FF - prefs.js: browser.startup.homepage - hxxp://www.bluewin.ch/

FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}

FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF - Ext: HP Smart Web Printing: smartwebprinting@hp.com - c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

.

- - - - ORPHELINS SUPPRIMES - - - -

 

SafeBoot-WudfPf

SafeBoot-WudfRd

SafeBoot-mcmscsvc

SafeBoot-MCODS

SafeBoot-sacsvr

SafeBoot-vmms

HKLM-Run-TosNC - %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe

HKLM-Run-TosReelTimeMonitor - %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

HKLM-Run-SmoothView - %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

HKLM-Run-TPwrMain - %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

HKLM-Run-HSON - %ProgramFiles%\TOSHIBA\TBS\HSON.exe

HKLM-Run-00TCrdMain - %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe

HKLM-Run-SmartFaceVWatcher - %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe

HKLM-Run-Teco - %ProgramFiles%\TOSHIBA\TECO\Teco.exe

HKLM-Run-TosWaitSrv - %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe

 

 

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

 

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Autres processus actifs ------------------------

.

c:\program files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe

c:\program files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

c:\program files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

.

**************************************************************************

.

Heure de fin: 2011-02-27 19:53:53 - La machine a redémarré

ComboFix-quarantined-files.txt 2011-02-27 18:53

 

Avant-CF: 119'857'487'872 octets libres

Après-CF: 119'738'646'528 octets libres

 

- - End Of File - - 413EBAA76426545CC697197EEC7DE06C

[Gof]

Bonsoir Blaise Chapuis,

 

Les logs pour les désinfections, d'autant plus quand c'est Combofix, se traitent dans la partie "Analyses" des forums. Je ne déplace pas ton sujet, car il faut être inscrit dans cette partie du forum (pour les désinfections) pour pouvoir y poster.

 

Je t'invite donc à t'inscrire et créer ton sujet dans la bonne section, et je déplacerais ensuite ce message dans ce nouveau sujet.