Aller au contenu
  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Infection Sirefef


jgui9
 Share

Messages recommandés

---- 23.09.12 - 15h00 ----

 

rapport combofix

je suis désemparé quelqu'un peu m'aider???

 

 

ComboFix 12-09-23.02 - julien 23/09/2012 14:33:31.1.4 - x86

Microsoft Windows 7 Professionnel 6.1.7601.1.1252.33.1036.18.3317.1291 [GMT 2:00]

Lancé depuis: c:\users\Julien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X1YCXUAP\ComboFix.exe

AV: BitDefender Antivirus *Enabled/Updated* {982ADE23-275B-0766-37C5-DE01A484098E}

FW: BitDefender Pare-feu *Enabled* {A0115F06-6D34-063E-1C9A-77345A574EF5}

SP: BitDefender Antispyware *Enabled/Updated* {234B3FC7-0161-08E8-0D75-E573DF034333}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\$recycle.bin\S-1-5-18\$b8cc9d1737a94bbb38a340a3da7fa67f\n

c:\$recycle.bin\S-1-5-21-3264778301-409837951-1310877394-1112\$b8cc9d1737a94bbb38a340a3da7fa67f\n

c:\users\Julien\AppData\Local\assembly\tmp

c:\windows\assembly\GAC\Desktop.ini

.

.

((((((((((((((((((((((((((((( Fichiers créés du 2012-08-23 au 2012-09-23 ))))))))))))))))))))))))))))))))))))

.

.

2012-09-23 12:40 . 2012-09-23 12:43 -------- d-----w- c:\users\Julien\AppData\Local\temp

2012-09-23 12:40 . 2012-09-23 12:40 -------- d-----w- c:\users\sbs\AppData\Local\temp

2012-09-23 12:40 . 2012-09-23 12:40 -------- d-----w- c:\users\Guiberteau\AppData\Local\temp

2012-09-23 12:40 . 2012-09-23 12:40 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-09-23 12:12 . 2011-12-01 14:07 909728 ----a-w- c:\windows\system32\drivers\pctEFA.sys

2012-09-23 12:12 . 2011-12-01 14:07 342168 ----a-w- c:\windows\system32\drivers\pctDS.sys

2012-09-23 12:12 . 2012-02-24 08:31 107864 ----a-w- c:\windows\system32\drivers\pctwfpfilter.sys

2012-09-23 12:12 . 2012-02-24 08:31 253352 ----a-w- c:\windows\system32\drivers\pctgntdi.sys

2012-09-23 12:12 . 2011-11-14 13:12 331880 ----a-w- c:\windows\system32\drivers\PCTCore.sys

2012-09-23 12:12 . 2011-11-14 13:12 162584 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys

2012-09-23 12:12 . 2012-02-24 08:36 185560 ----a-w- c:\windows\system32\drivers\PCTSD.sys

2012-09-23 12:12 . 2012-02-24 08:35 17848 ----a-w- c:\windows\system32\drivers\pctBTFix.sys

2012-09-23 12:12 . 2012-02-24 08:37 70536 ----a-w- c:\windows\system32\drivers\pctplsg.sys

2012-09-23 12:12 . 2012-09-23 12:30 -------- d-----w- c:\program files\PC Tools Security

2012-09-23 12:12 . 2012-09-23 12:14 -------- d-----w- c:\program files\Common Files\PC Tools

2012-09-23 12:12 . 2012-09-23 12:12 -------- d-----w- c:\programdata\PC Tools

2012-09-23 12:07 . 2012-09-23 12:15 -------- d-----w- c:\users\Julien\AppData\Roaming\GetRightToGo

2012-09-23 09:19 . 2012-09-23 09:34 -------- d-----w- c:\users\Julien\AppData\Roaming\Wise Registry Cleaner

2012-09-23 09:19 . 2012-09-23 09:19 -------- d-----w- c:\program files\Wise

2012-09-23 08:19 . 2012-09-23 08:19 110080 ----a-r- c:\users\Julien\AppData\Roaming\Microsoft\Installer\{ADAFC0B4-FC15-45D9-BAB3-BC7A8829D0C4}\IconCF33A0CE.exe

2012-09-23 08:19 . 2012-09-23 08:19 110080 ----a-r- c:\users\Julien\AppData\Roaming\Microsoft\Installer\{ADAFC0B4-FC15-45D9-BAB3-BC7A8829D0C4}\IconF7A21AF7.exe

2012-09-23 08:19 . 2012-09-23 08:19 110080 ----a-r- c:\users\Julien\AppData\Roaming\Microsoft\Installer\{ADAFC0B4-FC15-45D9-BAB3-BC7A8829D0C4}\IconD7F16134.exe

2012-09-23 08:19 . 2012-09-23 08:19 -------- d-----w- C:\sh4ldr

2012-09-23 08:19 . 2012-09-23 08:19 -------- d-----w- c:\program files\Enigma Software Group

2012-09-23 08:19 . 2012-09-23 09:34 -------- d-----w- c:\windows\ADAFC0B4FC1545D9BAB3BC7A8829D0C4.TMP

2012-09-23 08:19 . 2012-09-23 09:34 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard

2012-09-23 07:30 . 2012-09-23 07:56 -------- d-----w- c:\users\Julien\AppData\Local\ElevatedDiagnostics

2012-09-22 06:15 . 2009-08-31 15:20 462848 ----a-w- c:\windows\system32\ApiCtlPlan2.ocx

2012-09-22 06:15 . 1998-07-12 22:00 89600 ----a-w- c:\windows\system32\CMCTLFR.DLL

2012-09-22 06:15 . 1997-08-22 00:02 475168 ----a-w- c:\windows\system32\sstabs32.ocx

2012-09-21 14:13 . 2012-09-23 09:34 -------- d-----w- c:\users\Julien\vp5

2012-09-21 14:13 . 2012-09-21 14:13 -------- d-----w- C:\stilog

2012-09-21 13:41 . 2012-09-21 13:41 -------- d-----w- c:\program files\Target Skills

2012-09-21 13:41 . 2012-09-21 13:41 -------- d-----w- c:\users\Julien\AppData\Roaming\InstallShield

2012-09-21 13:19 . 2012-09-22 09:16 -------- d-----w- c:\users\Julien\AppData\Roaming\Media Finder

2012-09-21 09:51 . 2012-09-21 09:51 -------- d-----w- c:\users\Julien\.PlanningForce_Portfolio_Planner

2012-09-21 09:51 . 2012-09-21 09:51 -------- d-----w- c:\users\Julien\.eclipse

2012-09-21 09:32 . 2012-09-21 09:32 -------- d-----w- c:\program files\XLS-Planning FREE

2012-09-20 09:56 . 2012-09-20 09:56 -------- d-----w- c:\users\Julien\AppData\Local\rocherdigital

2012-09-20 09:56 . 2012-09-23 07:07 -------- d-----w- c:\program files\LocationSaisonniere

2012-09-19 09:41 . 2012-09-19 09:41 -------- d-----w- c:\users\Julien\siptapi

2012-09-19 07:49 . 2012-08-21 11:01 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2012-09-19 07:48 . 2012-09-19 07:49 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1

2012-09-19 07:48 . 2012-09-19 07:48 -------- d-----w- c:\program files\iPod

2012-09-19 07:48 . 2012-09-19 07:49 -------- d-----w- c:\program files\iTunes

2012-09-13 16:43 . 2012-09-13 16:43 -------- d-----w- c:\users\Julien\AppData\Local\Microsoft Corporation

2012-09-13 16:43 . 2012-09-23 12:39 -------- d-----w- c:\users\Julien\AppData\Local\assembly

2012-09-13 07:26 . 2012-09-13 07:19 10752 ----a-w- c:\windows\system32\KOAZ8S_L.DLL

2012-09-12 16:40 . 2012-09-12 16:40 -------- d-----w- c:\users\Julien\AppData\Local\Edisys

2012-09-12 16:35 . 2011-09-22 15:18 73064 ----a-w- c:\windows\system32\perf-MSSQL$MSSMLBIZ-sqlctr10.3.5500.0.dll

2012-09-12 02:22 . 2012-08-22 17:16 712048 ----a-w- c:\windows\system32\drivers\ndis.sys

2012-09-12 02:22 . 2012-07-04 19:45 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys

2012-09-12 02:22 . 2012-08-22 17:16 1292144 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-09-12 02:22 . 2012-08-22 17:16 240496 ----a-w- c:\windows\system32\drivers\netio.sys

2012-09-12 02:22 . 2012-08-22 17:16 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

2012-09-12 02:22 . 2012-08-02 16:57 490496 ----a-w- c:\windows\system32\d3d10level9.dll

2012-09-10 16:22 . 2012-09-10 16:22 -------- d-----w- c:\program files\Microsoft Small Business

2012-09-10 16:22 . 2012-09-10 16:22 -------- d-----w- c:\program files\Microsoft Chart Controls

2012-09-10 16:21 . 2009-03-31 04:57 50200 ----a-w- c:\windows\system32\perf-SQLAgent$MSSMLBIZ-sqlagtctr10.1.2531.0.dll

2012-09-10 09:05 . 2012-09-10 09:05 -------- d-----w- C:\OutlookAttachments

2012-09-10 09:04 . 2012-09-10 09:04 -------- d-----w- c:\program files\Outlook Attachment Remover

2012-09-09 08:55 . 2012-09-14 06:06 -------- d-----w- c:\program files\Olifax

2012-09-09 08:44 . 2012-09-09 08:44 -------- d-----w- C:\Olifax

2012-09-09 08:41 . 2012-05-04 09:59 514560 ----a-w- c:\windows\system32\qdvd.dll

2012-09-05 08:59 . 2012-09-05 09:00 -------- d-----w- c:\users\Julien\AppData\Roaming\Voxmobili

2012-09-05 08:59 . 2012-09-05 08:59 -------- d-----w- c:\program files\PC Sync

2012-09-05 08:59 . 2005-04-03 21:02 753664 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll

2012-09-05 08:59 . 2005-04-03 21:02 69714 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll

2012-09-05 08:59 . 2005-04-03 21:01 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll

2012-09-05 08:59 . 2005-04-03 21:00 184320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll

2012-09-05 08:59 . 2005-04-03 20:59 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe

2012-09-05 08:58 . 2012-09-05 08:58 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll

2012-09-05 08:58 . 2012-09-05 08:58 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll

2012-09-05 08:58 . 2012-09-05 08:58 -------- d-----w- c:\users\Julien\AppData\Roaming\com.orange.widgetfax

2012-09-05 08:58 . 2012-09-05 08:58 -------- d-----w- c:\program files\Orange

2012-09-05 08:57 . 2012-09-05 09:00 -------- d-----w- c:\users\Julien\AppData\Roaming\Orange

2012-09-05 07:53 . 2012-09-05 07:53 -------- d-----w- c:\programdata\tpfmon

2012-09-05 07:53 . 2012-09-05 07:53 -------- d-----w- c:\program files\Axmapresse

2012-09-04 05:47 . 2012-09-04 05:47 -------- d-----w- c:\users\Julien\AppData\Roaming\Boole & Partners

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll

2012-08-29 09:07 . 2012-08-29 09:07 -------- d-----w- c:\program files\QuickTime

.

.

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-21 13:21 . 2012-04-05 05:31 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-09-21 13:21 . 2012-01-17 10:53 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-08-21 11:01 . 2011-07-27 08:13 106928 ----a-w- c:\windows\system32\GEARAspi.dll

2012-07-18 17:47 . 2012-08-15 17:31 2345984 ----a-w- c:\windows\system32\win32k.sys

2012-07-09 11:42 . 2012-07-09 11:42 4547984 ----a-w- c:\windows\system32\usbaaplrc.dll

2012-07-09 11:42 . 2012-07-09 11:42 44032 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2012-07-04 21:14 . 2012-08-15 17:31 41984 ----a-w- c:\windows\system32\browcli.dll

2012-07-04 21:14 . 2012-08-15 17:31 102912 ----a-w- c:\windows\system32\browser.dll

2012-06-29 13:43 . 2010-06-24 10:33 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-06-29 00:16 . 2012-08-16 01:00 1800704 ----a-w- c:\windows\system32\jscript9.dll

2012-06-29 00:09 . 2012-08-16 01:00 1129472 ----a-w- c:\windows\system32\wininet.dll

2012-06-29 00:08 . 2012-08-16 01:00 1427968 ----a-w- c:\windows\system32\inetcpl.cpl

2012-06-29 00:04 . 2012-08-16 01:00 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2012-06-29 00:00 . 2012-08-16 01:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-07-16 05:22 . 2012-06-13 12:28 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"EyeOnFiles.exe"="c:\program files\HGMB\EyeOnFiles\EyeOnFiles.exe" [2011-09-21 5319680]

"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2012-02-23 59240]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-07-27 39408]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtDCpl.exe" [2010-10-04 2697832]

"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-04 1753192]

"IAStorIcon"="c:\program files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-11-05 283160]

"IMSS"="c:\program files\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe" [2011-01-17 112152]

"RemoteControl9"="c:\program files\CyberLink\PowerDVD9\PDVD9Serv.exe" [2009-07-06 87336]

"PDVD9LanguageShortcut"="c:\program files\CyberLink\PowerDVD9\Language\Language.exe" [2010-04-29 50472]

"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

"BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2012-05-23 1200880]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-09 421776]

.

c:\users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Mes services pro.lnk - c:\program files\Orange\Mes services pro\Mes services pro.exe [2012-9-5 142336]

OneNote 2010 - Capture d’écran et lancement.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Google Calendar Sync.lnk - c:\program files\Google\Google Calendar Sync\GoogleCalendarSync.exe [2011-4-8 542264]

PC Sync.lnk - c:\program files\PC Sync\Voxsync.exe [2012-9-5 696832]

Serveur réseau.lnk - c:\program files\WIBUKEY\Server\WkSvMgr.exe [2011-7-27 3768320]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CANAL+ CANALSAT A LA DEMANDE]

2011-10-20 11:13 163992 ----a-w- c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool]

2010-11-17 09:35 514544 ----a-w- c:\program files\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileDocuments]

2012-02-23 11:30 59240 ----a-w- c:\program files\Common Files\Apple\Internet Services\ubd.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

2012-03-08 16:50 4280184 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2011-07-27 13:48 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]

R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]

R3 Arrakis3;BitDefender Serveur Arrakis;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [x]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]

R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]

R3 netvsc;netvsc;c:\windows\system32\DRIVERS\netvsc60.sys [x]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]

R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]

R3 sdAuxService;PC Tools Auxiliary Service;c:\program files\PC Tools Security\pctsAuxs.exe [x]

R3 SynthVid;SynthVid;c:\windows\system32\DRIVERS\VMBusVideoM.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [x]

R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]

R4 MSSQLServerADHelper100;Service SQL Active Directory Helper;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]

R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys [x]

R4 SQLAgent$MSSMLBIZ;Agent SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\SQLAGENT.EXE [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [x]

S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS.sys [x]

S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA.sys [x]

S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [x]

S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [x]

S1 PCTSD;PC Tools Spyware Doctor Driver;c:\windows\system32\Drivers\PCTSD.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]

S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [x]

S2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [x]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [x]

S2 jhi_service;Intel® Identity Protection Technology Host Interface Service;c:\program files\Intel\Services\IPT\jhi_service.exe [x]

S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]

S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]

S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [x]

S3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C;c:\windows\system32\DRIVERS\e1c6232.sys [x]

S3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

S3 MEI;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [x]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [x]

S3 Wibukey2;Wibukey2;c:\windows\system32\drivers\wibukey2.sys [x]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

bdx REG_MULTI_SZ scan

.

Contenu du dossier 'Tâches planifiées'

.

2012-09-23 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 13:21]

.

2012-09-23 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-07-27 07:26]

.

2012-09-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-27 13:49]

.

2012-09-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-27 13:49]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.google.fr/

uInternet Settings,ProxyOverride = *.local

IE: &Envoyer à OneNote - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105

IE: Download with &Media Finder - c:\program files\Media Finder\hook.html

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000

LSP: c:\program files\Common Files\PC Tools\Lsp\PCTLsp.dll

Trusted Zone: atos.net\*.aw

Trusted Zone: atosorigin.com\*.aw

Trusted Zone: geoportail.fr

Trusted Zone: geoportail.gouv.fr

Trusted Zone: atos.net\*.aw

Trusted Zone: atosorigin.com\*.aw

Trusted Zone: geoportail.fr

Trusted Zone: geoportail.gouv.fr

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\cc4ddfhk.default\

FF - prefs.js: browser.startup.homepage - hxxp://maps.google.fr/

.

- - - - ORPHELINS SUPPRIMES - - - -

.

Toolbar-Locked - (no file)

.

.

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

--------------------- DLLs chargées dans les processus actifs ---------------------

.

- - - - - - - > 'Explorer.exe'(5892)

c:\program files\NVIDIA Corporation\nView\nview.dll

c:\program files\NVIDIA Corporation\nView\NVWRSFR.DLL

c:\windows\system32\nvapi.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\program files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

c:\program files\BitDefender\BitDefender 2010\vsserv.exe

c:\windows\system32\nvvsvc.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\windows\system32\taskhost.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\sqlservr.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE

c:\windows\system32\conhost.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\sqlservr.exe

c:\windows\system32\conhost.exe

c:\windows\system32\rundll32.exe

c:\program files\iPod\bin\iPodService.exe

c:\program files\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe

c:\program files\Intel\Intel® Management Engine Components\LMS\LMS.exe

c:\windows\system32\sppsvc.exe

c:\windows\servicing\TrustedInstaller.exe

.

**************************************************************************

.

Heure de fin: 2012-09-23 14:49:25 - La machine a redémarré

ComboFix-quarantined-files.txt 2012-09-23 12:49

.

Avant-CF: 431 918 317 568 octets libres

Après-CF: 431 819 939 840 octets libres

.

- - End Of File - - 47F3822584E17460082F533C382E5BA0

 

---- 23.09.12 - 15h17 ----

 

Bonjour jgui9 et bienvenue sur Zébulon ! ;)

 

/!\ Ne jamais utiliser Combofix sans l'aide d'un Helper Sécurité Qualifié : cela pourrait faire plus de mal que de bien à ton PC [/b] /!\

 

fleche.gif Je transfère ton sujet dans la section Analyse et éradication des malwares.

 

Bonne continuation,

Tonton

---- 23.09.12 - 15h20 ----

 

Merci d'avance pour votre aide.

Modifié par Tonton
Regroupement des messages
  • Upvote 1
Lien vers le commentaire
Partager sur d’autres sites

Bonjour,

 

En complément du conseil que t'a donné Tonton, tu as très mal commencé, avant-même de lancer CFix. >>

 

Lancé depuis: c:\users\Julien\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X1YCXUAP\ComboFix.exe

 

Tu as exécuté l'outil depuis la boîte de dialogue de téléchargement: ce qu'il ne faut JAMAIS faire, même pour d'autres outils.

 

ComboFix n'est pas un outil banal et il peut parfois faire des dégâts quand on n'est pas au courant d'un bug ou l'autre.

 

Il va se placer dans un répertoire temporaire, or ComboFix doit toujours être enregistré sur le bureau et jamais ailleurs!

 

1)Télécharge RogueKiller (par Tigzy) sur le bureau

(A partir d'une clé USB si le Rogue empêche l'accès au net) .

RogueKiller

Quitte tous les programmes en cours

Lance RogueKiller.exe.

 

Sous Vista/Seven, faire un clic droit et choisir Exécuter en tant qu'administrateur. Clique sur scan

 

Poste le rapport stp.

 

---

2) Clique ensuite sur Suppression et poste également le rapport stp.

 

@++

  • Upvote 1
Lien vers le commentaire
Partager sur d’autres sites

je suis de retour apres le plantage de mon PC j'ai enfin réussi à le demarrer

donc j'ai restaurer le syteme et j'ai suivi le conseil d'apollon donc voici le rapport combo fix

ComboFix 12-09-24.02 - julien 24/09/2012 18:23:33.1.4 - x86

Microsoft Windows 7 Professionnel 6.1.7601.1.1252.33.1036.18.3317.1628 [GMT 2:00]

Lancé depuis: c:\users\Julien\Desktop\ComboFix.exe

AV: BitDefender Antivirus *Enabled/Updated* {982ADE23-275B-0766-37C5-DE01A484098E}

FW: BitDefender Pare-feu *Enabled* {A0115F06-6D34-063E-1C9A-77345A574EF5}

SP: BitDefender Antispyware *Enabled/Updated* {234B3FC7-0161-08E8-0D75-E573DF034333}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((( Fichiers créés du 2012-08-24 au 2012-09-24 ))))))))))))))))))))))))))))))))))))

.

.

2012-09-24 16:28 . 2012-09-24 16:30 -------- d-----w- c:\users\Julien\AppData\Local\temp

2012-09-24 16:28 . 2012-09-24 16:28 -------- d-----w- c:\users\sbs\AppData\Local\temp

2012-09-24 16:28 . 2012-09-24 16:28 -------- d-----w- c:\users\Guiberteau\AppData\Local\temp

2012-09-23 13:54 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\AppData\Roaming\Wise Care 365

2012-09-23 09:19 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\AppData\Roaming\Wise Registry Cleaner

2012-09-23 09:19 . 2012-09-23 13:54 -------- d-----w- c:\program files\Wise

2012-09-23 08:19 . 2012-09-23 08:19 -------- d-----w- c:\program files\Enigma Software Group

2012-09-21 14:13 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\vp5

2012-09-21 14:13 . 2012-09-21 14:13 -------- d-----w- C:\stilog

2012-09-21 13:41 . 2012-09-24 19:51 -------- d-----w- c:\program files\Target Skills

2012-09-21 13:19 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\AppData\Roaming\Media Finder

2012-09-21 13:19 . 2012-09-24 19:51 -------- d-----w- c:\program files\Media Finder

2012-09-21 09:51 . 2012-09-21 09:51 -------- d-----w- c:\users\Julien\.PlanningForce_Portfolio_Planner

2012-09-21 09:51 . 2012-09-21 09:51 -------- d-----w- c:\users\Julien\.eclipse

2012-09-20 09:56 . 2012-09-20 09:56 -------- d-----w- c:\users\Julien\AppData\Local\rocherdigital

2012-09-20 09:56 . 2012-09-24 11:54 -------- d-----w- c:\program files\LocationSaisonniere

2012-09-19 09:41 . 2012-09-19 09:41 -------- d-----w- c:\users\Julien\siptapi

2012-09-19 07:49 . 2012-08-21 11:01 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2012-09-19 07:48 . 2012-09-19 07:49 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1

2012-09-19 07:48 . 2012-09-19 07:48 -------- d-----w- c:\program files\iPod

2012-09-19 07:48 . 2012-09-19 07:49 -------- d-----w- c:\program files\iTunes

2012-09-13 16:43 . 2012-09-13 16:43 -------- d-----w- c:\users\Julien\AppData\Local\Microsoft Corporation

2012-09-13 16:43 . 2012-09-13 16:43 -------- d-----w- c:\users\Julien\AppData\Local\assembly

2012-09-13 07:26 . 2012-09-13 07:19 10752 ----a-w- c:\windows\system32\KOAZ8S_L.DLL

2012-09-12 16:40 . 2012-09-12 16:40 -------- d-----w- c:\users\Julien\AppData\Local\Edisys

2012-09-12 16:35 . 2011-09-22 15:18 73064 ----a-w- c:\windows\system32\perf-MSSQL$MSSMLBIZ-sqlctr10.3.5500.0.dll

2012-09-12 02:22 . 2012-08-22 17:16 712048 ----a-w- c:\windows\system32\drivers\ndis.sys

2012-09-12 02:22 . 2012-07-04 19:45 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys

2012-09-12 02:22 . 2012-08-22 17:16 1292144 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-09-12 02:22 . 2012-08-22 17:16 240496 ----a-w- c:\windows\system32\drivers\netio.sys

2012-09-12 02:22 . 2012-08-22 17:16 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

2012-09-12 02:22 . 2012-08-02 16:57 490496 ----a-w- c:\windows\system32\d3d10level9.dll

2012-09-10 16:22 . 2012-09-10 16:22 -------- d-----w- c:\program files\Microsoft Small Business

2012-09-10 16:22 . 2012-09-10 16:22 -------- d-----w- c:\program files\Microsoft Chart Controls

2012-09-10 16:21 . 2009-03-31 04:57 50200 ----a-w- c:\windows\system32\perf-SQLAgent$MSSMLBIZ-sqlagtctr10.1.2531.0.dll

2012-09-10 09:05 . 2012-09-10 09:05 -------- d-----w- C:\OutlookAttachments

2012-09-10 09:04 . 2012-09-10 09:04 -------- d-----w- c:\program files\Outlook Attachment Remover

2012-09-09 08:55 . 2012-09-14 06:06 -------- d-----w- c:\program files\Olifax

2012-09-09 08:44 . 2012-09-09 08:44 -------- d-----w- C:\Olifax

2012-09-09 08:41 . 2012-05-04 09:59 514560 ----a-w- c:\windows\system32\qdvd.dll

2012-09-05 08:59 . 2012-09-05 09:00 -------- d-----w- c:\users\Julien\AppData\Roaming\Voxmobili

2012-09-05 08:59 . 2012-09-05 08:59 -------- d-----w- c:\program files\PC Sync

2012-09-05 08:59 . 2005-04-03 21:02 753664 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll

2012-09-05 08:59 . 2005-04-03 21:02 69714 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll

2012-09-05 08:59 . 2005-04-03 21:01 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll

2012-09-05 08:59 . 2005-04-03 21:00 184320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll

2012-09-05 08:59 . 2005-04-03 20:59 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe

2012-09-05 08:58 . 2012-09-05 08:58 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll

2012-09-05 08:58 . 2012-09-05 08:58 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll

2012-09-05 08:58 . 2012-09-05 08:58 -------- d-----w- c:\users\Julien\AppData\Roaming\com.orange.widgetfax

2012-09-05 08:58 . 2012-09-05 08:58 -------- d-----w- c:\program files\Orange

2012-09-05 08:57 . 2012-09-05 09:00 -------- d-----w- c:\users\Julien\AppData\Roaming\Orange

2012-09-05 07:53 . 2012-09-05 07:53 -------- d-----w- c:\programdata\tpfmon

2012-09-05 07:53 . 2012-09-05 07:53 -------- d-----w- c:\program files\Axmapresse

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll

2012-08-29 09:07 . 2012-09-24 19:49 -------- d-----w- c:\program files\QuickTime

.

.

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-21 13:21 . 2012-04-05 05:31 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-09-21 13:21 . 2012-01-17 10:53 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-08-21 11:01 . 2011-07-27 08:13 106928 ----a-w- c:\windows\system32\GEARAspi.dll

2012-07-18 17:47 . 2012-08-15 17:31 2345984 ----a-w- c:\windows\system32\win32k.sys

2012-07-09 11:42 . 2012-07-09 11:42 4547984 ----a-w- c:\windows\system32\usbaaplrc.dll

2012-07-09 11:42 . 2012-07-09 11:42 44032 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2012-07-04 21:14 . 2012-08-15 17:31 41984 ----a-w- c:\windows\system32\browcli.dll

2012-07-04 21:14 . 2012-08-15 17:31 102912 ----a-w- c:\windows\system32\browser.dll

2012-06-29 13:43 . 2010-06-24 10:33 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-06-29 00:16 . 2012-08-16 01:00 1800704 ----a-w- c:\windows\system32\jscript9.dll

2012-06-29 00:09 . 2012-08-16 01:00 1129472 ----a-w- c:\windows\system32\wininet.dll

2012-06-29 00:08 . 2012-08-16 01:00 1427968 ----a-w- c:\windows\system32\inetcpl.cpl

2012-06-29 00:04 . 2012-08-16 01:00 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2012-06-29 00:00 . 2012-08-16 01:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-07-16 05:22 . 2012-06-13 12:28 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"EyeOnFiles.exe"="c:\program files\HGMB\EyeOnFiles\EyeOnFiles.exe" [2011-09-21 5319680]

"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2012-02-23 59240]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-07-27 39408]

"Media Finder"="c:\program files\Media Finder\Media Finder.exe" [2012-09-03 9168384]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtDCpl.exe" [2010-10-04 2697832]

"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-04 1753192]

"IAStorIcon"="c:\program files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-11-05 283160]

"IMSS"="c:\program files\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe" [2011-01-17 112152]

"RemoteControl9"="c:\program files\CyberLink\PowerDVD9\PDVD9Serv.exe" [2009-07-06 87336]

"PDVD9LanguageShortcut"="c:\program files\CyberLink\PowerDVD9\Language\Language.exe" [2010-04-29 50472]

"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

"BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2012-05-23 1200880]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-09 421776]

.

c:\users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2010 - Capture d’écran et lancement.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Google Calendar Sync.lnk - c:\program files\Google\Google Calendar Sync\GoogleCalendarSync.exe [2011-4-8 542264]

PC Sync.lnk - c:\program files\PC Sync\Voxsync.exe [2012-9-5 696832]

Serveur réseau.lnk - c:\program files\WIBUKEY\Server\WkSvMgr.exe [2011-7-27 3768320]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKLM\~\startupfolder\C:^Users^Julien^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Mes services pro.lnk]

path=c:\users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mes services pro.lnk

backup=c:\windows\pss\Mes services pro.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CANAL+ CANALSAT A LA DEMANDE]

2011-10-20 11:13 163992 ----a-w- c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool]

2010-11-17 09:35 514544 ----a-w- c:\program files\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileDocuments]

2012-02-23 11:30 59240 ----a-w- c:\program files\Common Files\Apple\Internet Services\ubd.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

2012-03-08 16:50 4280184 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2011-07-27 13:48 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]

R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]

R3 Arrakis3;BitDefender Serveur Arrakis;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [x]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]

R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]

R3 netvsc;netvsc;c:\windows\system32\DRIVERS\netvsc60.sys [x]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]

R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]

R3 SynthVid;SynthVid;c:\windows\system32\DRIVERS\VMBusVideoM.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [x]

R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]

R3 Wibukey2;Wibukey2;c:\windows\system32\drivers\wibukey2.sys [x]

R4 MSSQLServerADHelper100;Service SQL Active Directory Helper;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]

R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys [x]

R4 SQLAgent$MSSMLBIZ;Agent SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\SQLAGENT.EXE [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [x]

S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]

S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [x]

S2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [x]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [x]

S2 jhi_service;Intel® Identity Protection Technology Host Interface Service;c:\program files\Intel\Services\IPT\jhi_service.exe [x]

S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]

S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [x]

S3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C;c:\windows\system32\DRIVERS\e1c6232.sys [x]

S3 MEI;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [x]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [x]

.

.

--- Autres Services/Pilotes en mémoire ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

bdx REG_MULTI_SZ scan sysagent

.

Contenu du dossier 'Tâches planifiées'

.

2012-09-24 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 13:21]

.

2012-09-21 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-07-27 07:26]

.

2012-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-27 13:49]

.

2012-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-27 13:49]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.google.fr/

uInternet Settings,ProxyOverride = *.local

IE: &Envoyer à OneNote - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105

IE: Download with &Media Finder - c:\program files\Media Finder\hook.html

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000

Trusted Zone: atos.net\*.aw

Trusted Zone: atosorigin.com\*.aw

Trusted Zone: geoportail.fr

Trusted Zone: geoportail.gouv.fr

Trusted Zone: atos.net\*.aw

Trusted Zone: atosorigin.com\*.aw

Trusted Zone: geoportail.fr

Trusted Zone: geoportail.gouv.fr

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{D75CCF62-BDBC-4FDC-B739-4F6E67571F8D}: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\cc4ddfhk.default\

FF - prefs.js: browser.startup.homepage - hxxp://maps.google.fr/

.

- - - - ORPHELINS SUPPRIMES - - - -

.

Toolbar-Locked - (no file)

.

.

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

--------------------- DLLs chargées dans les processus actifs ---------------------

.

- - - - - - - > 'Explorer.exe'(3792)

c:\program files\NVIDIA Corporation\nView\nview.dll

c:\program files\NVIDIA Corporation\nView\NVWRSFR.DLL

c:\windows\system32\nvapi.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\program files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

c:\program files\BitDefender\BitDefender 2010\vsserv.exe

c:\windows\system32\nvvsvc.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\windows\system32\taskhost.exe

c:\program files\BitDefender\BitDefender 2010\seccenter.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\sqlservr.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE

c:\windows\system32\conhost.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\sqlservr.exe

c:\windows\system32\conhost.exe

c:\windows\system32\rundll32.exe

c:\program files\PC Sync\SyncManager.exe

c:\program files\iPod\bin\iPodService.exe

c:\program files\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe

c:\program files\Intel\Intel® Management Engine Components\LMS\LMS.exe

c:\windows\system32\sppsvc.exe

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Google\Google Toolbar\GoogleToolbarUser_32.exe

c:\program files\Microsoft Office\Office14\OUTLOOK.EXE

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Internet Explorer\iexplore.exe

c:\windows\system32\Macromed\Flash\FlashUtil32_11_4_402_278_ActiveX.exe

.

**************************************************************************

.

Heure de fin: 2012-09-24 18:32:51 - La machine a redémarré

ComboFix-quarantined-files.txt 2012-09-24 16:32

ComboFix2.txt 2012-09-23 12:49

.

Avant-CF: 432 069 251 072 octets libres

Après-CF: 431 963 635 712 octets libres

.

- - End Of File - - 93EA5D3BEAB854C3D391BBD0FC18E519

Lien vers le commentaire
Partager sur d’autres sites

j'ai du restaurer mon systeme et j'ai poster le nouveau rapport combofix

 

merci

ComboFix 12-09-24.02 - julien 24/09/2012 18:23:33.1.4 - x86

Microsoft Windows 7 Professionnel 6.1.7601.1.1252.33.1036.18.3317.1628 [GMT 2:00]

Lancé depuis: c:\users\Julien\Desktop\ComboFix.exe

AV: BitDefender Antivirus *Enabled/Updated* {982ADE23-275B-0766-37C5-DE01A484098E}

FW: BitDefender Pare-feu *Enabled* {A0115F06-6D34-063E-1C9A-77345A574EF5}

SP: BitDefender Antispyware *Enabled/Updated* {234B3FC7-0161-08E8-0D75-E573DF034333}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((( Fichiers créés du 2012-08-24 au 2012-09-24 ))))))))))))))))))))))))))))))))))))

.

.

2012-09-24 16:28 . 2012-09-24 16:30 -------- d-----w- c:\users\Julien\AppData\Local\temp

2012-09-24 16:28 . 2012-09-24 16:28 -------- d-----w- c:\users\sbs\AppData\Local\temp

2012-09-24 16:28 . 2012-09-24 16:28 -------- d-----w- c:\users\Guiberteau\AppData\Local\temp

2012-09-23 13:54 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\AppData\Roaming\Wise Care 365

2012-09-23 09:19 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\AppData\Roaming\Wise Registry Cleaner

2012-09-23 09:19 . 2012-09-23 13:54 -------- d-----w- c:\program files\Wise

2012-09-23 08:19 . 2012-09-23 08:19 -------- d-----w- c:\program files\Enigma Software Group

2012-09-21 14:13 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\vp5

2012-09-21 14:13 . 2012-09-21 14:13 -------- d-----w- C:\stilog

2012-09-21 13:41 . 2012-09-24 19:51 -------- d-----w- c:\program files\Target Skills

2012-09-21 13:19 . 2012-09-24 19:51 -------- d-----w- c:\users\Julien\AppData\Roaming\Media Finder

2012-09-21 13:19 . 2012-09-24 19:51 -------- d-----w- c:\program files\Media Finder

2012-09-21 09:51 . 2012-09-21 09:51 -------- d-----w- c:\users\Julien\.PlanningForce_Portfolio_Planner

2012-09-21 09:51 . 2012-09-21 09:51 -------- d-----w- c:\users\Julien\.eclipse

2012-09-20 09:56 . 2012-09-20 09:56 -------- d-----w- c:\users\Julien\AppData\Local\rocherdigital

2012-09-20 09:56 . 2012-09-24 11:54 -------- d-----w- c:\program files\LocationSaisonniere

2012-09-19 09:41 . 2012-09-19 09:41 -------- d-----w- c:\users\Julien\siptapi

2012-09-19 07:49 . 2012-08-21 11:01 26840 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2012-09-19 07:48 . 2012-09-19 07:49 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1

2012-09-19 07:48 . 2012-09-19 07:48 -------- d-----w- c:\program files\iPod

2012-09-19 07:48 . 2012-09-19 07:49 -------- d-----w- c:\program files\iTunes

2012-09-13 16:43 . 2012-09-13 16:43 -------- d-----w- c:\users\Julien\AppData\Local\Microsoft Corporation

2012-09-13 16:43 . 2012-09-13 16:43 -------- d-----w- c:\users\Julien\AppData\Local\assembly

2012-09-13 07:26 . 2012-09-13 07:19 10752 ----a-w- c:\windows\system32\KOAZ8S_L.DLL

2012-09-12 16:40 . 2012-09-12 16:40 -------- d-----w- c:\users\Julien\AppData\Local\Edisys

2012-09-12 16:35 . 2011-09-22 15:18 73064 ----a-w- c:\windows\system32\perf-MSSQL$MSSMLBIZ-sqlctr10.3.5500.0.dll

2012-09-12 02:22 . 2012-08-22 17:16 712048 ----a-w- c:\windows\system32\drivers\ndis.sys

2012-09-12 02:22 . 2012-07-04 19:45 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys

2012-09-12 02:22 . 2012-08-22 17:16 1292144 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-09-12 02:22 . 2012-08-22 17:16 240496 ----a-w- c:\windows\system32\drivers\netio.sys

2012-09-12 02:22 . 2012-08-22 17:16 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

2012-09-12 02:22 . 2012-08-02 16:57 490496 ----a-w- c:\windows\system32\d3d10level9.dll

2012-09-10 16:22 . 2012-09-10 16:22 -------- d-----w- c:\program files\Microsoft Small Business

2012-09-10 16:22 . 2012-09-10 16:22 -------- d-----w- c:\program files\Microsoft Chart Controls

2012-09-10 16:21 . 2009-03-31 04:57 50200 ----a-w- c:\windows\system32\perf-SQLAgent$MSSMLBIZ-sqlagtctr10.1.2531.0.dll

2012-09-10 09:05 . 2012-09-10 09:05 -------- d-----w- C:\OutlookAttachments

2012-09-10 09:04 . 2012-09-10 09:04 -------- d-----w- c:\program files\Outlook Attachment Remover

2012-09-09 08:55 . 2012-09-14 06:06 -------- d-----w- c:\program files\Olifax

2012-09-09 08:44 . 2012-09-09 08:44 -------- d-----w- C:\Olifax

2012-09-09 08:41 . 2012-05-04 09:59 514560 ----a-w- c:\windows\system32\qdvd.dll

2012-09-05 08:59 . 2012-09-05 09:00 -------- d-----w- c:\users\Julien\AppData\Roaming\Voxmobili

2012-09-05 08:59 . 2012-09-05 08:59 -------- d-----w- c:\program files\PC Sync

2012-09-05 08:59 . 2005-04-03 21:02 753664 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll

2012-09-05 08:59 . 2005-04-03 21:02 69714 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll

2012-09-05 08:59 . 2005-04-03 21:01 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll

2012-09-05 08:59 . 2005-04-03 21:00 184320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll

2012-09-05 08:59 . 2005-04-03 20:59 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe

2012-09-05 08:58 . 2012-09-05 08:58 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll

2012-09-05 08:58 . 2012-09-05 08:58 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll

2012-09-05 08:58 . 2012-09-05 08:58 -------- d-----w- c:\users\Julien\AppData\Roaming\com.orange.widgetfax

2012-09-05 08:58 . 2012-09-05 08:58 -------- d-----w- c:\program files\Orange

2012-09-05 08:57 . 2012-09-05 09:00 -------- d-----w- c:\users\Julien\AppData\Roaming\Orange

2012-09-05 07:53 . 2012-09-05 07:53 -------- d-----w- c:\programdata\tpfmon

2012-09-05 07:53 . 2012-09-05 07:53 -------- d-----w- c:\program files\Axmapresse

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll

2012-08-29 09:07 . 2012-08-29 09:07 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll

2012-08-29 09:07 . 2012-09-24 19:49 -------- d-----w- c:\program files\QuickTime

.

.

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-21 13:21 . 2012-04-05 05:31 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-09-21 13:21 . 2012-01-17 10:53 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-08-21 11:01 . 2011-07-27 08:13 106928 ----a-w- c:\windows\system32\GEARAspi.dll

2012-07-18 17:47 . 2012-08-15 17:31 2345984 ----a-w- c:\windows\system32\win32k.sys

2012-07-09 11:42 . 2012-07-09 11:42 4547984 ----a-w- c:\windows\system32\usbaaplrc.dll

2012-07-09 11:42 . 2012-07-09 11:42 44032 ----a-w- c:\windows\system32\drivers\usbaapl.sys

2012-07-04 21:14 . 2012-08-15 17:31 41984 ----a-w- c:\windows\system32\browcli.dll

2012-07-04 21:14 . 2012-08-15 17:31 102912 ----a-w- c:\windows\system32\browser.dll

2012-06-29 13:43 . 2010-06-24 10:33 19736 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2012-06-29 00:16 . 2012-08-16 01:00 1800704 ----a-w- c:\windows\system32\jscript9.dll

2012-06-29 00:09 . 2012-08-16 01:00 1129472 ----a-w- c:\windows\system32\wininet.dll

2012-06-29 00:08 . 2012-08-16 01:00 1427968 ----a-w- c:\windows\system32\inetcpl.cpl

2012-06-29 00:04 . 2012-08-16 01:00 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2012-06-29 00:00 . 2012-08-16 01:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-07-16 05:22 . 2012-06-13 12:28 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"EyeOnFiles.exe"="c:\program files\HGMB\EyeOnFiles\EyeOnFiles.exe" [2011-09-21 5319680]

"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2012-02-23 59240]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-07-27 39408]

"Media Finder"="c:\program files\Media Finder\Media Finder.exe" [2012-09-03 9168384]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtDCpl.exe" [2010-10-04 2697832]

"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-08-04 1753192]

"IAStorIcon"="c:\program files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-11-05 283160]

"IMSS"="c:\program files\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe" [2011-01-17 112152]

"RemoteControl9"="c:\program files\CyberLink\PowerDVD9\PDVD9Serv.exe" [2009-07-06 87336]

"PDVD9LanguageShortcut"="c:\program files\CyberLink\PowerDVD9\Language\Language.exe" [2010-04-29 50472]

"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

"BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2012-05-23 1200880]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-09 421776]

.

c:\users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2010 - Capture d’écran et lancement.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Google Calendar Sync.lnk - c:\program files\Google\Google Calendar Sync\GoogleCalendarSync.exe [2011-4-8 542264]

PC Sync.lnk - c:\program files\PC Sync\Voxsync.exe [2012-9-5 696832]

Serveur réseau.lnk - c:\program files\WIBUKEY\Server\WkSvMgr.exe [2011-7-27 3768320]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKLM\~\startupfolder\C:^Users^Julien^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Mes services pro.lnk]

path=c:\users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mes services pro.lnk

backup=c:\windows\pss\Mes services pro.lnk.Startup

backupExtension=.Startup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CANAL+ CANALSAT A LA DEMANDE]

2011-10-20 11:13 163992 ----a-w- c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool]

2010-11-17 09:35 514544 ----a-w- c:\program files\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileDocuments]

2012-02-23 11:30 59240 ----a-w- c:\program files\Common Files\Apple\Internet Services\ubd.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

2012-03-08 16:50 4280184 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2011-07-27 13:48 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]

R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]

R3 Arrakis3;BitDefender Serveur Arrakis;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [x]

R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [x]

R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]

R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]

R3 netvsc;netvsc;c:\windows\system32\DRIVERS\netvsc60.sys [x]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]

R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]

R3 SynthVid;SynthVid;c:\windows\system32\DRIVERS\VMBusVideoM.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys [x]

R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]

R3 Wibukey2;Wibukey2;c:\windows\system32\drivers\wibukey2.sys [x]

R4 MSSQLServerADHelper100;Service SQL Active Directory Helper;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]

R4 RsFx0105;RsFx0105 Driver;c:\windows\system32\DRIVERS\RsFx0105.sys [x]

R4 SQLAgent$MSSMLBIZ;Agent SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\SQLAGENT.EXE [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [x]

S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]

S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [x]

S2 CanalPlus.VOD;CanalPlus.VOD;c:\program files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [x]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [x]

S2 jhi_service;Intel® Identity Protection Technology Host Interface Service;c:\program files\Intel\Services\IPT\jhi_service.exe [x]

S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files\Intel\Intel® Management Engine Components\UNS\UNS.exe [x]

S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [x]

S3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C;c:\windows\system32\DRIVERS\e1c6232.sys [x]

S3 MEI;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [x]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [x]

.

.

--- Autres Services/Pilotes en mémoire ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

bdx REG_MULTI_SZ scan sysagent

.

Contenu du dossier 'Tâches planifiées'

.

2012-09-24 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 13:21]

.

2012-09-21 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-07-27 07:26]

.

2012-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-27 13:49]

.

2012-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-27 13:49]

.

.

------- Examen supplémentaire -------

.

uStart Page = hxxp://www.google.fr/

uInternet Settings,ProxyOverride = *.local

IE: &Envoyer à OneNote - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105

IE: Download with &Media Finder - c:\program files\Media Finder\hook.html

IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000

Trusted Zone: atos.net\*.aw

Trusted Zone: atosorigin.com\*.aw

Trusted Zone: geoportail.fr

Trusted Zone: geoportail.gouv.fr

Trusted Zone: atos.net\*.aw

Trusted Zone: atosorigin.com\*.aw

Trusted Zone: geoportail.fr

Trusted Zone: geoportail.gouv.fr

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{D75CCF62-BDBC-4FDC-B739-4F6E67571F8D}: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\cc4ddfhk.default\

FF - prefs.js: browser.startup.homepage - hxxp://maps.google.fr/

.

- - - - ORPHELINS SUPPRIMES - - - -

.

Toolbar-Locked - (no file)

.

.

.

--------------------- CLES DE REGISTRE BLOQUEES ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

--------------------- DLLs chargées dans les processus actifs ---------------------

.

- - - - - - - > 'Explorer.exe'(3792)

c:\program files\NVIDIA Corporation\nView\nview.dll

c:\program files\NVIDIA Corporation\nView\NVWRSFR.DLL

c:\windows\system32\nvapi.dll

.

------------------------ Autres processus actifs ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\program files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

c:\program files\BitDefender\BitDefender 2010\vsserv.exe

c:\windows\system32\nvvsvc.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\windows\system32\taskhost.exe

c:\program files\BitDefender\BitDefender 2010\seccenter.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\sqlservr.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE

c:\windows\system32\conhost.exe

c:\program files\Microsoft SQL Server\MSSQL10.MSSMLBIZ\MSSQL\Binn\sqlservr.exe

c:\windows\system32\conhost.exe

c:\windows\system32\rundll32.exe

c:\program files\PC Sync\SyncManager.exe

c:\program files\iPod\bin\iPodService.exe

c:\program files\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe

c:\program files\Intel\Intel® Management Engine Components\LMS\LMS.exe

c:\windows\system32\sppsvc.exe

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Google\Google Toolbar\GoogleToolbarUser_32.exe

c:\program files\Microsoft Office\Office14\OUTLOOK.EXE

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Internet Explorer\iexplore.exe

c:\program files\Internet Explorer\iexplore.exe

c:\windows\system32\Macromed\Flash\FlashUtil32_11_4_402_278_ActiveX.exe

.

**************************************************************************

.

Heure de fin: 2012-09-24 18:32:51 - La machine a redémarré

ComboFix-quarantined-files.txt 2012-09-24 16:32

ComboFix2.txt 2012-09-23 12:49

.

Avant-CF: 432 069 251 072 octets libres

Après-CF: 431 963 635 712 octets libres

.

- - End Of File - - 93EA5D3BEAB854C3D391BBD0FC18E519

Modifié par Tonton
Suppression citation inutile
Lien vers le commentaire
Partager sur d’autres sites

Salut,

 

Bon sang!! Ai-je demandé de repasser ComboFix? Tu as de la veine qu'il n'ait pas pulvérisé ta connexion.

 

1) Fais ce que j'ai demandé avec Rogue Killer au post #2

 

2) Télécharge AdwCleaner par Xplode: ©©chargements - Outils de Xplode - AdwCleaner

 

Enregistre-le sur le bureau (et pas ailleurs).

 

Si tu es sous XP double clique sur AdwCleaner pour lancer l'outil.

Si tu es sous Vista/Seven, clique droit sur AdwCleaner et choisis exécuter en temps qu'administrateur.

 

Clique sur Suppression et laisse travailler l'outil.

 

Le rapport va s'ouvrir en fichier texte; copie la totalité de son contenu et colle-le dans ta réponse.

 

Le rapport est en outre sauvegardé sous C:\AdwCleaner[s1]

 

NB: Si l'outil "cale" en mode normal, le lancer en mode sans échec: Comment démarrer Windows en mode sans échec : Astuces pour Dépanner Windows XP

 

-------------------------

 

++

NB: ne doivent être placés en sites de confiance, que les sites httpS, vire les non-sécurisés.

 

@+

Modifié par Apollo
Lien vers le commentaire
Partager sur d’autres sites

je vais faire à la letrre ce que tu vas me dire mais le mode sans echec,ca fait 24 heures que je galere avec! puisque je suis sous un domaine avec demande de mots de passe. j'ai trouvé la solution il ya seulemnt 1 heure l'ordi redemarer en boucle

Lien vers le commentaire
Partager sur d’autres sites

RogueKiller V8.0.5 [23/09/2012] par Tigzy

mail: tigzyRK<at>gmail<dot>com

Remontees: [RogueKiller] Remontées (1/60)

Blog: tigzy-RK

 

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 32 bits version

Demarrage : Mode normal

Utilisateur : julien [Droits d'admin]

Mode : Recherche -- Date : 24/09/2012 19:05:50

 

¤¤¤ Processus malicieux : 0 ¤¤¤

 

¤¤¤ Entrees de registre : 8 ¤¤¤

[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> TROUVÉ

[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> TROUVÉ

[HJ DESK] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ

[HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ

[HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

[HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

 

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

 

¤¤¤ Driver : [CHARGE] ¤¤¤

 

¤¤¤ Ruches Externes: ¤¤¤

 

¤¤¤ Infection : ¤¤¤

 

¤¤¤ Fichier HOSTS: ¤¤¤

--> C:\Windows\system32\drivers\etc\hosts

 

127.0.0.1 localhost

 

 

¤¤¤ MBR Verif: ¤¤¤

 

+++++ PhysicalDrive0: ST3500413AS +++++

--- User ---

[MBR] fa04604ebcc4d5ce61b9514922d86f90

[bSP] a62a75b94f5c444a76bd21667d6e36c9 : Windows Vista MBR Code

Partition table:

0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 Mo

1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 81920 | Size: 752 Mo

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1622016 | Size: 476144 Mo

User = LL1 ... OK!

User = LL2 ... OK!

 

Termine : << RKreport[1].txt >>

RKreport[1].txt

 

RogueKiller V8.0.5 [23/09/2012] par Tigzy

mail: tigzyRK<at>gmail<dot>com

Remontees: [RogueKiller] Remontées (1/60)

Blog: tigzy-RK

 

Systeme d'exploitation: Windows 7 (6.1.7601 Service Pack 1) 32 bits version

Demarrage : Mode normal

Utilisateur : julien [Droits d'admin]

Mode : Suppression -- Date : 24/09/2012 19:10:08

 

¤¤¤ Processus malicieux : 0 ¤¤¤

 

¤¤¤ Entrees de registre : 8 ¤¤¤

[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> SUPPRIMÉ

[HJ SMENU] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> REMPLACÉ (1)

[HJ DESK] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0)

[HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0)

[HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0)

[HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0)

[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0)

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0)

 

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

 

¤¤¤ Driver : [CHARGE] ¤¤¤

 

¤¤¤ Ruches Externes: ¤¤¤

 

¤¤¤ Infection : ¤¤¤

 

¤¤¤ Fichier HOSTS: ¤¤¤

--> C:\Windows\system32\drivers\etc\hosts

 

127.0.0.1 localhost

 

 

¤¤¤ MBR Verif: ¤¤¤

 

+++++ PhysicalDrive0: ST3500413AS +++++

--- User ---

[MBR] fa04604ebcc4d5ce61b9514922d86f90

[bSP] a62a75b94f5c444a76bd21667d6e36c9 : Windows Vista MBR Code

Partition table:

0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 Mo

1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 81920 | Size: 752 Mo

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1622016 | Size: 476144 Mo

User = LL1 ... OK!

User = LL2 ... OK!

 

Termine : << RKreport[2].txt >>

RKreport[1].txt ; RKreport[2].txt

Lien vers le commentaire
Partager sur d’autres sites

j'ai trouvé la solution il ya seulemnt

 

Quelle est cette solution? Tu n'as plus de mode sans échec? Je vais te filer un fichier *.reg pour le réparer, si je la retrouve dans mon capharnaüm.

Modifié par Apollo
Lien vers le commentaire
Partager sur d’autres sites

# AdwCleaner v2.003 - Rapport créé le 24/09/2012 à 19:14:04

# Mis à jour le 23/09/2012 par Xplode

# Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)

# Nom d'utilisateur : julien - POSTE01

# Mode de démarrage : Normal

# Exécuté depuis : C:\Users\Julien\Desktop\adwcleaner.exe

# Option [suppression]

 

 

***** [services] *****

 

 

***** [Fichiers / Dossiers] *****

 

Dossier Supprimé : C:\Program Files\Media Finder

Dossier Supprimé : C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel

Dossier Supprimé : C:\Users\Julien\AppData\Roaming\Media Finder

Dossier Supprimé : C:\Users\Julien\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\@themediafinder.com

Dossier Supprimé : C:\Users\Julien\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]

Fichier Supprimé : C:\Users\Public\Desktop\Media Finder.lnk

 

***** [Registre] *****

 

Clé Supprimée : HKCU\Software\MediaFinder

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CA4520F3-AE13-4FB1-A513-58E23991C86D}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA4520F3-AE13-4FB1-A513-58E23991C86D}

Clé Supprimée : HKCU\Software\Softonic

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{3F39D17D-50C7-4AC4-A63A-CDF6CDBD0C61}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\IEPlugin.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CA4520F3-AE13-4FB1-A513-58E23991C86D}

Clé Supprimée : HKLM\SOFTWARE\Classes\gencrawler_gc.GenCrawler

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AE9908C1-3400-4B10-9061-C6C04D96E3D2}

Clé Supprimée : HKLM\SOFTWARE\Classes\MF

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA4520F3-AE13-4FB1-A513-58E23991C86D}

Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Media Finder]

 

***** [Navigateurs] *****

 

-\\ Internet Explorer v9.0.8112.16421

 

Restauré : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

 

-\\ Mozilla Firefox v13.0.1 (fr)

 

Nom du profil : default

Fichier : C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\cc4ddfhk.default\prefs.js

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

-\\ Google Chrome v [impossible d'obtenir la version]

 

Fichier : C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

[OK] Le fichier ne contient aucune entrée illégitime.

 

*************************

 

AdwCleaner[R1].txt - [2542 octets] - [23/09/2012 15:22:09]

AdwCleaner[s1].txt - [3237 octets] - [24/09/2012 19:14:04]

 

########## EOF - C:\AdwCleaner[s1].txt - [3297 octets] ##########

 

non c que j'aurait apparament du choisir mode sans echec avec prise en charge réseau.

Lien vers le commentaire
Partager sur d’autres sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

 Share

  • En ligne récemment   0 membre est en ligne

    Aucun utilisateur enregistré regarde cette page.

×
×
  • Créer...