Explorer.exe ne charge pas au démarrage [Résolu]

[nardino]

Bonjour.
Pour la sauvegarde du pc, c'est une évidence qu'il faut y procéder régulièrement.
Nous allons procéder à une nouvelle vérification.

Dans le panneau de configuration, Affichage classique, Compte d'utilisateur, tu cliques sur : Activer ou désactiver le contrôle des comptes d'utilisateurs.
Dans la fenêtre suivante tu décoches la case devant : Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur et clique sur OK.
Il te sera demandé de redémarré.

Télécharge Combofix :

IMPORTANT. Enregistre ComboFix.exe sur le Bureau.
Désactive les applications antivirus et anti-malware, en général via un clic droit sur l'icône de la Zone de notification.
Sinon, elles risquent d'interférer avec l'outil.

Fais un double clic sur combofix.exe et suis les invites.
Lorsque l'outil aura terminé, il affichera un rapport.
Copie le contenu de C:\ComboFix.txt dans ta prochaine réponse.

@+

[ched78]

Et voila, encore un ^^

Code : Tout sélectionner

ComboFix 09-03-10.03 - Ched 2009-03-11 17:31:41.1 - NTFSx86
Microsoft® Windows Vista™ Édition Intégrale   6.0.6001.1.1252.1.1036.18.2524.1509 [GMT 1:00]
Lancé depuis: c:\users\Ched\Desktop\ComboFix-1.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Updated)
FW: BitDefender Firewall *disabled*
 * Un nouveau point de restauration a été créé
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\QUAD Utilities
c:\program files\QUAD Utilities\QUAD Registry Cleaner\program.log
c:\program files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner website.url
c:\program files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe
c:\program files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe
c:\program files\QUAD Utilities\QUAD Registry Cleaner\Styles\Vista.cjstyles
c:\program files\QUAD Utilities\QUAD Registry Cleaner\uninst.exe
c:\program files\QUAD Utilities\QUAD Registry Cleaner\Vista Scheduler.exe
c:\users\Ched\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QUAD Utilities
c:\users\Ched\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner website.lnk
c:\users\Ched\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.lnk
c:\users\Ched\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QUAD Utilities\QUAD Registry Cleaner\Uninstall QUAD Registry Cleaner.lnk
c:\users\Ched\AppData\Roaming\QUAD Backups
c:\users\Ched\Desktop\QUAD Registry Cleaner.lnk

.
(((((((((((((((((((((((((((((   Fichiers créés du 2009-02-11 au 2009-03-11  ))))))))))))))))))))))))))))))))))))
.

2009-03-10 21:22 . 2009-03-11 15:09	<REP>	d--------	C:\ToolBar SD
2009-03-10 21:13 . 2009-03-11 15:05	<REP>	d--------	c:\program files\Navilog1
2009-03-08 17:19 . 2009-03-10 21:03	<REP>	d-ah-----	C:\.Trashes
2009-03-08 17:19 . 2009-03-08 17:19	4,096	--ah-----	C:\._.Trashes
2009-03-08 10:58 . 2009-03-08 10:58	<REP>	d--------	c:\program files\EffectsLab DV
2009-03-07 13:48 . 2009-03-07 13:48	<REP>	d--------	c:\program files\Pop up Blocker Pro
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	c:\users\Ched\AppData\Roaming\Autodesk
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	c:\users\All Users\Autodesk
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	c:\programdata\Autodesk
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	C:\FLEXlm
2009-03-04 12:51 . 2009-03-04 12:51	<REP>	d--------	c:\program files\Common Files\Autodesk Shared
2009-03-04 12:37 . 2009-03-04 12:53	<REP>	d--------	c:\program files\Common Files\Alias Shared
2009-02-27 11:18 . 2009-02-27 11:18	76	-r-hs----	c:\windows\ICSET30.BIN
2009-02-27 11:15 . 2009-02-27 11:25	<REP>	d--------	c:\program files\Reallusion
2009-02-27 10:11 . 2009-02-27 10:11	<REP>	d--------	c:\windows\MaxTV
2009-02-27 10:11 . 2009-02-27 10:11	<REP>	d--------	c:\users\Ched\AppData\Roaming\DMV Technologies
2009-02-27 10:11 . 2009-02-27 10:11	<REP>	d--------	c:\program files\DMV
2009-02-27 09:35 . 2009-03-04 13:47	<REP>	d--------	C:\FLEXLM2
2009-02-26 18:56 . 2009-02-26 19:09	<REP>	d--------	c:\users\All Users\Reallusion
2009-02-26 18:56 . 2009-02-26 19:09	<REP>	d--------	c:\programdata\Reallusion
2009-02-26 18:49 . 2009-02-27 11:26	<REP>	d--------	c:\users\Ched\AppData\Roaming\Reallusion
2009-02-24 21:18 . 2009-02-24 21:19	<REP>	d--------	c:\program files\GeoLabo
2009-02-24 19:13 . 2009-02-24 19:13	<REP>	d--------	c:\users\Ched\AppData\Roaming\Steinberg
2009-02-23 07:04 . 2006-12-15 21:15	49,152	--a------	c:\windows\System32\wsu.dll
2009-02-22 13:46 . 2009-02-22 13:47	<REP>	d--------	C:\LM3D.CD
2009-02-22 11:47 . 2009-02-22 11:47	<REP>	d--------	c:\program files\WinHTTrack
2009-02-20 19:40 . 2009-02-20 19:40	<REP>	d--------	c:\program files\WinLemm
2009-02-18 14:19 . 2009-02-18 14:19	<REP>	d--------	c:\program files\Common Files\INCA Shared
2009-02-18 14:19 . 2003-07-16 07:17	5,174	--a------	c:\windows\System32\nppt9x.vxd
2009-02-18 14:19 . 2004-12-30 22:43	4,682	--a------	c:\windows\System32\npptNT2.sys
2009-02-18 12:46 . 2009-02-18 12:46	<REP>	d--------	c:\program files\gPotato.eu
2009-02-18 12:22 . 2009-02-18 12:22	<REP>	d--------	c:\program files\SpeedBit Video Downloader
2009-02-18 12:18 . 2009-02-18 12:19	<REP>	d-a------	c:\users\All Users\TEMP
2009-02-18 12:18 . 2009-02-18 12:18	<REP>	d--------	c:\users\All Users\SpeedBit
2009-02-18 12:18 . 2009-02-18 12:19	<REP>	d-a------	c:\programdata\TEMP
2009-02-18 12:18 . 2009-02-18 12:18	<REP>	d--------	c:\programdata\SpeedBit
2009-02-18 12:18 . 2009-02-18 12:20	<REP>	d--------	c:\program files\DAP
2009-02-18 12:18 . 2009-02-18 12:18	479,298	--a------	c:\windows\System32\wbocx.ocx
2009-02-18 12:18 . 2009-02-18 12:18	50,688	--a------	c:\windows\System32\wbhelp2.dll
2009-02-17 16:25 . 2008-12-05 05:32	428,544	--a------	c:\windows\System32\EncDec.dll
2009-02-17 16:25 . 2008-12-05 05:32	293,376	--a------	c:\windows\System32\psisdecd.dll
2009-02-17 16:25 . 2008-12-05 05:31	217,088	--a------	c:\windows\System32\psisrndr.ax
2009-02-17 16:25 . 2008-12-05 05:31	177,664	--a------	c:\windows\System32\mpg2splt.ax
2009-02-17 16:25 . 2008-12-05 05:31	80,896	--a------	c:\windows\System32\MSNP.ax
2009-02-15 19:26 . 2009-02-15 19:26	<REP>	d--------	c:\users\Ched\.javasvn
2009-02-15 19:23 . 2009-02-15 19:23	<REP>	d--------	c:\users\All Users\Trymedia
2009-02-15 19:23 . 2009-02-15 19:23	<REP>	d--------	c:\programdata\Trymedia
2009-02-15 19:22 . 2009-02-15 19:22	<REP>	d--------	c:\program files\BFG
2009-02-15 10:16 . 2009-02-15 10:16	99	--a------	c:\windows\System32\VeriFace.cfg
2009-02-14 20:07 . 1998-07-13 00:00	119,568	--a------	c:\windows\System32\VB6FR.DLL
2009-02-14 20:07 . 1998-07-13 00:00	119,568	--a------	c:\windows\system\VB6FR.DLL
2009-02-14 19:09 . 2009-02-14 19:09	<REP>	d--------	c:\program files\GrassSoft
2009-02-14 19:07 . 2009-02-14 19:09	1,492,628	--a------	c:\users\Ched\AppData\Roaming\ADVANCED_KEY_AND_MOUSE_RECORDER_WWW.SOFTARCHIVE.NET.EXE
2009-02-14 19:07 . 2009-02-14 19:09	741,376	--a------	c:\users\Ched\AppData\Roaming\SCVHOST.EXE
2009-02-14 19:07 . 2009-02-14 19:09	86,528	--a------	c:\users\Ched\AppData\Roaming\NTCOM.DLL
2009-02-14 14:16 . 2009-02-14 14:16	<REP>	d--------	c:\users\All Users\InterVideo
2009-02-14 14:16 . 2009-02-14 14:16	<REP>	d--------	c:\programdata\InterVideo

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-11 16:36	---------	d-----w	c:\users\Ched\AppData\Roaming\WTablet
2009-03-08 15:17	---------	d-----w	c:\users\Ched\AppData\Roaming\MiniLyrics
2009-03-07 21:36	---------	d-----w	c:\users\Ched\AppData\Roaming\vlc
2009-03-07 16:49	2,828	--sha-w	c:\users\All Users\KGyGaAvL.sys
2009-03-07 16:49	2,828	--sha-w	c:\programdata\KGyGaAvL.sys
2009-03-07 12:43	---------	d-----w	c:\users\Ched\AppData\Roaming\FileZilla
2009-03-06 15:52	---------	d-----w	c:\program files\Malwarebytes' Anti-Malware
2009-03-03 13:20	---------	d-----w	c:\users\Ched\AppData\Roaming\dvdcss
2009-03-03 08:23	---------	d-----w	c:\program files\Yahoo!
2009-03-03 08:21	---------	d--h--w	c:\program files\InstallShield Installation Information
2009-03-03 08:21	---------	d-----w	c:\program files\UBISOFT
2009-02-27 19:28	---------	d-----w	c:\program files\Microsoft Silverlight
2009-02-27 10:17	---------	d-----w	c:\program files\Common Files\Reallusion
2009-02-26 21:42	---------	d-----w	c:\users\Ched\AppData\Roaming\DAEMON Tools Pro
2009-02-23 07:07	---------	d-----w	c:\program files\FileZilla FTP Client
2009-02-18 11:22	---------	d-----w	c:\program files\SpeedBit Video Accelerator
2009-02-17 14:16	---------	d-----w	c:\program files\Google
2009-02-15 18:32	---------	d-----w	c:\program files\Youtube Download
2009-02-15 18:30	---------	d-----w	c:\program files\KaraFun
2009-02-15 09:17	---------	d-----w	c:\programdata\VeriFace
2009-02-13 19:00	---------	d-----w	c:\program files\Safari
2009-02-12 20:39	5,632	----a-w	c:\windows\system32\drivers\StarOpen.sys
2009-02-11 09:19	38,496	----a-w	c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 09:19	15,504	----a-w	c:\windows\system32\drivers\mbam.sys
2009-02-11 02:00	---------	d-----w	c:\program files\Windows Mail
2009-02-10 18:50	---------	d-----w	c:\program files\Cheat Engine
2009-02-10 13:58	---------	d-----w	c:\program files\Minilyrics
2009-02-06 14:46	---------	d-----w	c:\program files\Messenger Plus! Live
2009-02-04 20:21	---------	d-----w	c:\users\Ched\AppData\Roaming\DAEMON Tools Lite
2009-01-26 20:54	---------	d-----w	c:\program files\winOKE Ltd
2009-01-26 17:08	---------	d-----w	c:\program files\Audacity
2009-01-24 20:46	---------	d-----w	c:\program files\CANAL Numedia
2009-01-24 20:21	---------	d-----w	c:\program files\Bitmanagement Software
2009-01-23 15:51	---------	d-----w	c:\program files\NVIDIA nTune Performance Application
2009-01-21 18:58	---------	d-----w	c:\program files\iTunes
2009-01-21 06:48	---------	d-----w	c:\users\Ched\AppData\Roaming\Astro Gemini Software
2009-01-21 06:48	---------	d-----w	c:\program files\Astro Gemini Software
2009-01-20 21:50	---------	d-----w	c:\users\Ched\AppData\Roaming\DAEMON Tools
2009-01-20 21:49	---------	d-----w	c:\programdata\DAEMON Tools Lite
2009-01-20 21:48	---------	d-----w	c:\program files\DAEMON Tools Lite
2009-01-20 21:38	717,296	----a-w	c:\windows\system32\drivers\sptd.sys
2009-01-19 17:31	---------	d-----w	c:\program files\ConvertHelper
2009-01-19 07:23	---------	d-----w	c:\program files\AviSynth 2.5
2009-01-19 07:22	---------	d-----w	c:\program files\eRightSoft
2009-01-18 15:19	---------	d-----w	c:\program files\Common Files\BitDefender
2009-01-18 15:19	---------	d-----w	c:\program files\BitDefender
2009-01-18 15:17	81,984	----a-w	c:\windows\System32\bdod.bin
2009-01-17 20:13	---------	d-----w	c:\users\Ched\AppData\Roaming\Anuman Interactive
2009-01-17 18:27	---------	d-----w	c:\program files\TLKGAMES
2009-01-17 14:10	164,352	----a-w	c:\windows\System32\SpoonUninstall.exe
2009-01-17 14:10	---------	d-----w	c:\program files\Jardinains!
2009-01-15 06:11	827,392	----a-w	c:\windows\System32\wininet.dll
2009-01-14 12:28	---------	d-----w	c:\program files\Bonjour
2009-01-14 12:28	---------	d-----w	c:\program files\Airfoil
2009-01-13 13:57	---------	d-----w	c:\users\Ched\AppData\Roaming\DivX
2009-01-13 13:56	---------	d-----w	c:\program files\Xvid
2009-01-13 13:56	---------	d-----w	c:\program files\DivX
2009-01-13 13:56	---------	d-----w	c:\program files\Common Files\PX Storage Engine
2009-01-12 20:25	---------	d-----w	c:\users\Ched\AppData\Roaming\Samsung
2009-01-12 19:58	---------	d-----w	c:\users\Ched\AppData\Roaming\PCF-VLC
2009-01-12 19:52	---------	d-----w	c:\users\Ched\AppData\Roaming\Participatory Culture Foundation
2009-01-12 19:50	---------	d-----w	c:\program files\Participatory Culture Foundation
2009-01-12 19:44	---------	d-----w	c:\program files\Samsung
2009-01-12 18:14	---------	d-----w	c:\program files\Microsoft Games
2009-01-12 17:49	---------	d-----w	c:\users\Ched\AppData\Roaming\acccore
2009-01-12 17:48	---------	d-----w	c:\programdata\Viewpoint
2009-01-12 17:48	---------	d-----w	c:\programdata\AOL OCP
2009-01-12 17:48	---------	d-----w	c:\programdata\AOL
2009-01-12 17:48	---------	d-----w	c:\program files\Viewpoint
2009-01-12 17:48	---------	d-----w	c:\program files\AIM6
2009-01-12 17:47	---------	d-----w	c:\programdata\AOL Downloads
2009-01-12 17:47	---------	d-----w	c:\program files\Common Files\AOL
2009-01-11 15:44	0	---ha-w	c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-01-07 19:59	94,208	----a-w	c:\windows\System32\Momo.dll
2009-01-07 19:59	94,208	----a-w	c:\windows\System32\ApBlend.dll
2009-01-07 19:59	626,688	----a-w	c:\windows\System32\msvcr80.dll
2009-01-07 19:59	622,592	----a-w	c:\windows\System32\PicNotify.dll
2009-01-07 19:59	548,864	----a-w	c:\windows\System32\msvcp80.dll
2009-01-07 19:59	5,632	----a-w	c:\windows\System32\biologon.dll
2009-01-07 19:59	491,520	----a-w	c:\windows\System32\picn.dll
2009-01-07 19:59	49,152	----a-w	c:\windows\System32\DevFilt.dll
2009-01-07 19:59	208,896	----a-w	c:\windows\System32\Image.dll
2009-01-07 19:59	126,976	----a-w	c:\windows\System32\VideoOp.dll
2009-01-07 19:59	1,560,576	----a-w	c:\windows\System32\MainOp.dll
2009-01-07 19:59	1,327,104	----a-w	c:\windows\System32\ImageReog.dll
2009-01-06 13:01	174	--sha-w	c:\program files\desktop.ini
2009-01-05 21:25	82,432	----a-w	c:\windows\System32\axaltocm.dll
2009-01-05 21:25	101,888	----a-w	c:\windows\System32\ifxcardm.dll
2009-01-01 22:03	319,456	----a-w	c:\windows\DIFxAPI.dll
2009-01-01 10:34	410,984	----a-w	c:\windows\System32\deploytk.dll
2009-01-01 08:26	56	---ha-w	c:\users\All Users\ezsidmv.dat
2009-01-01 08:26	56	---ha-w	c:\programdata\ezsidmv.dat
2008-12-31 09:33	269,312	----a-w	c:\windows\System32\es.dll
2008-12-31 09:30	988,216	----a-w	c:\windows\System32\winload.exe
2008-12-31 09:30	927,288	----a-w	c:\windows\System32\winresume.exe
2008-12-31 09:30	615,992	----a-w	c:\windows\System32\ci.dll
2008-12-31 09:30	6,656	----a-w	c:\windows\System32\kbd106n.dll
2008-12-31 09:30	46,592	----a-w	c:\windows\System32\setbcdlocale.dll
2008-12-31 09:30	40,960	----a-w	c:\windows\System32\srclient.dll
2008-12-31 09:30	378,368	----a-w	c:\windows\System32\srcore.dll
2006-05-03 10:06	163,328	--sh--r	c:\windows\System32\flvDX.dll
2007-02-21 11:47	31,232	--sh--r	c:\windows\System32\msfDX.dll
2008-03-16 13:30	216,064	--sh--r	c:\windows\System32\nbDX.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2009-01-07 20:59	241752	--a------	c:\program files\Lenovo\VeriFace\IcnOvrly.dll 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPSON Stylus DX4400 Series"="c:\windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE" [2007-03-01 180736]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"DownloadAccelerator"="c:\program files\DAP\DAP.EXE" [2008-12-11 6959104]
"SpeedBitVideoAccelerator"="c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2009-02-18 2823784]
"Pop up Blocker Pro"="c:\program files\Pop up Blocker Pro\pdie.exe" [2007-01-12 1309184]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2008-01-19 49664]
"WindowsWelcomeCenter"="oobefldr.dll" [2008-01-19 c:\windows\System32\oobefldr.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IRW"="c:\windows\system32\IRW.exe" [2008-04-15 147456]
"Apple_KbdMgr"="c:\program files\Boot Camp\KbdMgr.exe" [2008-04-15 423216]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-11 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-12-30 180269]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2008-05-20 737280]
"VeriFacePassManager"="c:\program files\Lenovo\VeriFace\PManage.exe" [2009-01-07 262245]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-01 136600]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"VeriFaceTimeLock"="c:\program files\Lenovo\VeriFace\RTimeLock.exe" [2009-01-07 335872]
"RtHDVCpl"="RtHDVCpl.exe" [2008-04-15 c:\windows\RtHDVCpl.exe]

c:\users\Ched\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MaxTV.lnk - c:\program files\DMV\MaxTV4\maxtv.exe [2008-11-10 5523276]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"FilterAdministratorToken"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.i420"= i420vfw.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{326AA80D-F037-4647-B026-7DBDEB733F0E}c:\\program files\\corel\\dvd9\\windvd.exe"= UDP:c:\program files\corel\dvd9\windvd.exe:WinDVD
"UDP Query User{EBA77013-DFBB-4969-829E-97FEDD71EB09}c:\\program files\\corel\\dvd9\\windvd.exe"= TCP:c:\program files\corel\dvd9\windvd.exe:WinDVD
"{F8BDD328-16CC-4BCF-9D5C-70223C0DA6B4}"= UDP:c:\program files\AirPort\APAgent.exe:APAgent
"{DC4091C6-B109-41C5-8635-9924D5DB25DF}"= TCP:c:\program files\AirPort\APAgent.exe:APAgent
"{4A003807-33A0-4DCF-B4C9-5009F1E4CABB}"= UDP:c:\program files\Airfoil Speakers\AirfoilSpeakers.exe:Airfoil Speakers
"{F0527A20-7499-4E1E-9E39-44CF915D145B}"= TCP:c:\program files\Airfoil Speakers\AirfoilSpeakers.exe:Airfoil Speakers
"{D7EA12D5-DEA0-4478-A7F1-7F3E7263B9B0}"= UDP:c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe:VideoAccelerator
"{B1804D3D-B9D1-4238-ACED-B262A8F99E1D}"= TCP:c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe:VideoAccelerator
"{B73F7764-A6A3-4472-84D0-0CAE13E75595}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{EDBE43F2-1150-48E8-8C4F-73F67894FD94}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{B0B54635-6F26-40D9-92B5-5C1B9BC82A11}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{72490B41-D56A-4A8F-AB06-C3E39FFF796F}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{A4AD9323-B21E-4CE7-BBD4-BE6F48F39117}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{961575A9-FCD7-45A6-A559-336B7C3C356E}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"TCP Query User{01B9B582-69C2-4ED8-9D6B-84E37A7ECFB3}c:\\program files\\java\\jre6\\bin\\javaw.exe"= UDP:c:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary
"UDP Query User{9A864BF1-FF1E-47C4-B5E6-50BABB15AA07}c:\\program files\\java\\jre6\\bin\\javaw.exe"= TCP:c:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary
"TCP Query User{A33901C2-53DC-4DB7-B73F-2061579382D5}c:\\program files\\java\\jre6\\bin\\java.exe"= UDP:c:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary
"UDP Query User{337DD187-60D5-4F42-A015-77CDD33258AC}c:\\program files\\java\\jre6\\bin\\java.exe"= TCP:c:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary
"TCP Query User{7E61E9DA-A9C5-4644-BC58-674065CAAE71}c:\\program files\\ubisoft\\scrabble® interactif edition 2007\\scrabble2007.exe"= UDP:c:\program files\ubisoft\scrabble® interactif edition 2007\scrabble2007.exe:SCRABBLE® Interactif EDITION 2007
"UDP Query User{6B747EFB-3C3F-4AF9-A8ED-EAC0110CB388}c:\\program files\\ubisoft\\scrabble® interactif edition 2007\\scrabble2007.exe"= TCP:c:\program files\ubisoft\scrabble® interactif edition 2007\scrabble2007.exe:SCRABBLE® Interactif EDITION 2007
"{D53F7734-9AB4-4C87-8A60-FA7E6D8A79F1}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{76F56ACB-47D0-4AF6-88ED-956EBD684109}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{494EEE83-3CFE-46F7-AF84-BFBFAE7C56B2}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{B2A1C026-710F-4C51-8BC2-E063C05EF6D6}"= UDP:c:\program files\Airfoil\Airfoil.exe:Airfoil
"{FB0E4C8D-9E3C-4B1D-80D8-779C6E66EBCF}"= TCP:c:\program files\Airfoil\Airfoil.exe:Airfoil
"{085BAA39-8C03-4C18-B565-3E149E5E0A96}"= UDP:c:\program files\Airfoil\AirfoilSpeakers.exe:Airfoil Speakers
"{DCA8E987-9924-4CBD-BB62-55CD667B8A4F}"= TCP:c:\program files\Airfoil\AirfoilSpeakers.exe:Airfoil Speakers
"TCP Query User{AB00BD9D-AA07-4CE8-B245-13245E2492B1}c:\\program files\\safari\\safari.exe"= UDP:c:\program files\safari\safari.exe:Safari Web Browser
"UDP Query User{1FB097E6-EB90-4494-859D-55E320AD0F7E}c:\\program files\\safari\\safari.exe"= TCP:c:\program files\safari\safari.exe:Safari Web Browser
"TCP Query User{659F6EA1-72D5-442F-9491-CB791534CDF3}c:\\program files\\gpotato.eu\\street gears\\streetgear.exe"= UDP:c:\program files\gpotato.eu\street gears\streetgear.exe:StreetGear
"UDP Query User{0251E9DD-26A4-4616-A3C5-162B719F854B}c:\\program files\\gpotato.eu\\street gears\\streetgear.exe"= TCP:c:\program files\gpotato.eu\street gears\streetgear.exe:StreetGear
"TCP Query User{029AF062-145A-4A81-BAF6-E3B59A31B346}c:\\windows\\explorer.exe"= UDP:c:\windows\explorer.exe:Explorateur Windows
"UDP Query User{A50A075C-8379-4F04-9787-61CD16DFF6A0}c:\\windows\\explorer.exe"= TCP:c:\windows\explorer.exe:Explorateur Windows
"TCP Query User{4FAE590E-3800-4A8D-8627-4AF6526CA323}c:\\program files\\dmv\\maxtv4\\maxtv.exe"= UDP:c:\program files\dmv\maxtv4\maxtv.exe:maxtv
"UDP Query User{68FE7EC1-8911-41CF-910E-ABA5F12B599B}c:\\program files\\dmv\\maxtv4\\maxtv.exe"= TCP:c:\program files\dmv\maxtv4\maxtv.exe:maxtv

R2 AppleOSSMgr;Apple OS Switch Manager;c:\windows\System32\AppleOSSMgr.exe [2008-04-15 132400]
R2 AppleTimeSrv;Apple Time Service;c:\windows\System32\AppleTimeSrv.exe [2008-04-15 99632]
R2 KeyAgent;KeyAgent;c:\windows\System32\drivers\KeyAgent.sys [2008-04-15 5504]
R2 MacHALDriver;Mac HAL;c:\windows\System32\drivers\MacHALDriver.sys [2008-04-15 6528]
R2 regi;regi;c:\windows\System32\drivers\regi.sys [2007-04-17 11032]
R2 TabletServicePen;TabletServicePen;c:\windows\System32\Pen_Tablet.exe [2008-12-30 1373480]
R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\SPEEDB~1\VideoAcceleratorService.exe -start -scm --> c:\progra~1\SPEEDB~1\VideoAcceleratorService.exe -start -scm [?]
R3 aapltctp;Apple Trackpad Enabler;c:\windows\System32\drivers\aapltctp.sys [2008-12-30 4224]
R3 aapltp;Apple Trackpad;c:\windows\System32\drivers\aapltp.sys [2008-12-30 35072]
R3 applebt;Apple Built-in Bluetooth;c:\windows\System32\drivers\applebt.sys [2009-01-01 9088]
R3 IRRemoteFlt;IR Receiver Filter Driver;c:\windows\System32\drivers\IRFilter.sys [2009-01-01 16512]
R3 KeyMagic;USB Keyboard HID Filter;c:\windows\System32\drivers\KeyMagic.sys [2009-01-01 19968]
S3 BthKicker;Apple Bluetooth Device Driver;c:\windows\System32\drivers\BthKicker.sys [2008-12-30 7424]
S3 iSightUpdate;iSight Update Driver;c:\windows\System32\drivers\iSightUP.sys [2009-01-01 17664]

--- Autres Services/Pilotes en mémoire ---

*NewlyCreated* - WS2IFSL
*Deregistered* - sptd

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs	REG_MULTI_SZ   	BthServ

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{97fde4cc-e73b-11dd-b667-001e52d912be}]
\shell\AutoRun\command - E:\Autorun.exe

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}]
%SystemRoot%\system32\soundschemes.exe /AddRegistration

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24}]
%SystemRoot%\system32\soundschemes2.exe /AddRegistration
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-AnumanLive - c:\users\Ched\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe
SafeBoot-se32.sys


.
------- Examen supplémentaire -------
.
uStart Page = search.speedbit.com
mWindow Title = 
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: {{AD1EFB51-30F9-4239-A899-9C78466643CE} - c:\program files\Pop up Blocker Pro\pdie.exe
LSP: c:\progra~1\SPEEDB~1\sblsp.dll
FF - ProfilePath - c:\users\Ched\AppData\Roaming\Mozilla\Firefox\Profiles\8qbi1ael.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - search.speedbit.com
FF - prefs.js: keyword.URL - hxxp://search.speedbit.com/searchresults.asp?src=default&q=
FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npBSContact.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-11 17:36:21
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'Explorer.exe'(2728)
c:\program files\Lenovo\VeriFace\HookWnd.dll
c:\program files\Lenovo\VeriFace\IGetSkin.dll
c:\program files\Lenovo\VeriFace\FaceVerify.dll
c:\program files\Lenovo\VeriFace\MainOp.dll
c:\program files\Lenovo\VeriFace\VideoOp.dll
c:\program files\Lenovo\VeriFace\Image.dll
c:\program files\Lenovo\VeriFace\Momo.dll
c:\program files\Lenovo\VeriFace\facev.dll
c:\program files\Lenovo\VeriFace\IcnOvrly.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\System32\audiodg.exe
c:\windows\System32\wisptis.exe
c:\program files\Common Files\microsoft shared\ink\TabTip.exe
c:\windows\System32\wlanext.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\programdata\EPSON\EPW!3 SSRP\E_S40RP7.EXE
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\progra~1\SPEEDB~1\VideoAcceleratorService.exe
c:\windows\System32\wisptis.exe
c:\program files\Common Files\microsoft shared\ink\TabTip.exe
c:\windows\System32\WTablet\Pen_TabletUser.exe
c:\windows\System32\conime.exe
c:\windows\System32\igfxsrvc.exe
c:\windows\System32\wbem\unsecapp.exe
c:\program files\Common Files\microsoft shared\ink\InputPersonalization.exe
c:\program files\iPod\bin\iPodService.exe
c:\program files\DMV\MaxTV4\core\maxtv_xul.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Windows Live\Messenger\usnsvc.exe
c:\progra~1\SPEEDB~1\VideoAcceleratorEngine.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Heure de fin: 2009-03-11 17:43:42 - La machine a redémarré
ComboFix-quarantined-files.txt  2009-03-11 16:43:25

Avant-CF: 14 473 105 408 octets libres
Après-CF: 14,015,242,240 octets libres

374	--- E O F ---	2009-03-11 02:00:25

Des que mon systeme est réparé je ferai une sauvegarde complete.
En fait, ils te disent quoi tous ces rapports ?
Merci de prendre de ton temps libre pour m'aider

[nardino]

Bonsoir.

Peux-tu me préciser si tu connais ces rpogrammes et à quoi il servent :
c:\program files\Common Files\Alias Shared
c:\program files\GrassSoft

Télécharge OtMoveIt3 de OldTimer :
http://download.bleepingcomputer.com/ol ... oveIt3.exe

Enregistres-le sur le Bureau.
Double-clique sur OTMoveIt2.exe pour lancer l'outil.
Note :
Sous Vista, clic droit sur le fichier et Exécuter en tant qu'administrateur.
Copie toutes les lignes ci-dessous en citation par CTRL+C dans le presse-papier.

nettoyage

:files
:\.Trashes
C:\._.Trashes
c:\windows\ICSET30.BIN
c:\users\Ched\AppData\Roaming\ADVANCED_KEY_AND_MOUSE_RECORDER_WWW.SOFTARCHIVE.NET.EXE
c:\users\Ched\AppData\Roaming\SCVHOST.EXE
c:\users\Ched\AppData\Roaming\NTCOM.DLL

:commands
[purity]
[emptytemp]
[reboot]

Dans OtMoveIt3, place le curseur dans la la fenêtre "Paste List Of Files/Folders to Move" et tu cliques sur CTRL+V pour coller le contenu du presse-papier.
Clique sur le bouton MoveIt!, le rouge.
http://i75.servimg.com/u/f75/11/05/93/83/otmove11.jpg
Ferme l'outil.
Poste le contenu du rapport C:\_OTMoveIt\MovedFiles\********_******.log
Les * représentent Mois/Jour/Année_Heure/Minutes/Secondes

@+

[ched78]

Merci !! Explorer demarre automatiquement !
Mais niveau performances c'est pas du tout ca. Y'a un mois le systeme été globalement beaucoup plus rapide. 10 mins pour redémarrer contre 3 mins y'a 1 mois...

Voila le rapport :

Code : Tout sélectionner

Error: Unable to interpret <nettoyage> in the current context!
========== FILES ==========
Error: Unable to interpret <:\.Trashes> in the current context!
Error: Unable to interpret <C:\._.Trashes> in the current context!
Error: Unable to interpret <c:\windows\ICSET30.BIN> in the current context!
Error: Unable to interpret <c:\users\Ched\AppData\Roaming\ADVANCED_KEY_AND_MOUSE_RECORDER.EXE> in the current context!
Error: Unable to interpret <c:\users\Ched\AppData\Roaming\SCVHOST.EXE> in the current context!
Error: Unable to interpret <c:\users\Ched\AppData\Roaming\NTCOM.DLL> in the current context!
========== COMMANDS ==========
File delete failed. C:\Users\Ched\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be deleted on reboot.
File delete failed. C:\Users\Ched\AppData\Local\Temp\MaxTV Application scheduled to be deleted on reboot.
File delete failed. C:\Users\Ched\AppData\Local\Temp\~DF5234.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\Ched\AppData\Local\Temp\~DF5B5F.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\Ched\AppData\Local\Temp\~DF790C.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\Ched\AppData\Local\Temp\~DF794B.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
FireFox cache emptied.
Temp folders emptied.
 
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03112009_192821

Files moved on Reboot...
C:\Users\Ched\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Ched\AppData\Local\Temp\MaxTV Application moved successfully.
File C:\Users\Ched\AppData\Local\Temp\~DF5234.tmp not found!
File C:\Users\Ched\AppData\Local\Temp\~DF5B5F.tmp not found!
File C:\Users\Ched\AppData\Local\Temp\~DF790C.tmp not found!
File C:\Users\Ched\AppData\Local\Temp\~DF794B.tmp not found!

[nardino]

Bonsoir.
J'ai fait une erreur de copier-coller dans mon sc ript précédent.
Peux-tu recommencer avec ceci :

nettoyage

:files
C:\.Trashes
C:\._.Trashes
c:\windows\ICSET30.BIN
c:\users\Ched\AppData\Roaming\ADVANCED_KEY_AND_MOUSE_RECORDER_WWW.SOFTARCHIVE.NET.EXE
c:\users\Ched\AppData\Roaming\SCVHOST.EXE
c:\users\Ched\AppData\Roaming\NTCOM.DLL

:commands
[purity]
[emptytemp]
[reboot]

Et poster le nouveau rapport

[ched78]

Bonsoir,
J'ai vu dans la liste ADVANCED_KEY_AND_MOUSE_RECORDER_WWW.SOFTARCHIVE.NET.EXE, j'ai jamais téléchargé ce logiciel, je voudrais savoir a quoi il sert et d'ou il vient. J'ai verifié dans mon historique de 1 mois, j'ai pas été sur ce site. Quand j'essaye d'y aller ca me met que le site peut etre dangereux pour mon ordinateur, donc je ferme le navigateur...

Code : Tout sélectionner

Error: Unable to interpret <nettoyage> in the current context!
========== FILES ==========
Folder move failed. C:\.Trashes scheduled to be moved on reboot.
File move failed. C:\._.Trashes scheduled to be moved on reboot.
File move failed. c:\windows\ICSET30.BIN scheduled to be moved on reboot.
c:\users\Ched\AppData\Roaming\ADVANCED_KEY_AND_MOUSE_RECORDER_WWW.SOFTARCHIVE.NET.EXE moved successfully.
c:\users\Ched\AppData\Roaming\SCVHOST.EXE moved successfully.
DllUnregisterServer procedure not found in c:\users\Ched\AppData\Roaming\NTCOM.DLL
c:\users\Ched\AppData\Roaming\NTCOM.DLL NOT unregistered.
c:\users\Ched\AppData\Roaming\NTCOM.DLL moved successfully.
========== COMMANDS ==========
File delete failed. C:\Users\Ched\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\Windows\temp\fwtsqmfile00.sqm scheduled to be deleted on reboot.
File delete failed. C:\Windows\temp\fwtsqmfile01.sqm scheduled to be deleted on reboot.
File delete failed. C:\Windows\temp\fwtsqmfile02.sqm scheduled to be deleted on reboot.
File delete failed. C:\Windows\temp\MpCmdRun.log scheduled to be deleted on reboot.
File delete failed. C:\Windows\temp\PNGPNGPNGPNG20090909PNG.PNG scheduled to be deleted on reboot.
Windows Temp folder emptied.
FireFox cache emptied.
Temp folders emptied.
 
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03122009_210529

[nardino]

Bonsoir.
As-tu redémarré ton système ?
Comment se porte-t-il après cette manip ?
Peux-tu refaire un scan Combofix et poster le rapport.
Merci
@+

[ched78]

Bonjour,
Tout a l'air de fonctionner corectement depuis une journée maintenant. Je te post quand meme le rapport, mais je pense que le probleme est résolu

Code : Tout sélectionner

ComboFix 09-03-12.01 - Ched 2009-03-13 21:39:19.3 - NTFSx86
Microsoft® Windows Vista™ Édition Intégrale   6.0.6001.1.1252.1.1036.18.2524.1233 [GMT 1:00]
Lancé depuis: c:\users\Ched\Desktop\ComboFix-1.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Updated)
FW: BitDefender Firewall *disabled*
 * Un nouveau point de restauration a été créé
.

(((((((((((((((((((((((((((((   Fichiers créés du 2009-02-13 au 2009-03-13  ))))))))))))))))))))))))))))))))))))
.

2009-03-11 19:28 . 2009-03-11 19:28	<REP>	d--------	C:\_OTMoveIt
2009-03-11 04:53 . 2008-12-16 04:29	8,147,456	--a------	c:\windows\System32\wmploc.DLL
2009-03-11 04:53 . 2009-02-09 04:10	2,033,152	--a------	c:\windows\System32\win32k.sys
2009-03-11 04:53 . 2008-11-27 05:43	268,288	--a------	c:\windows\System32\schannel.dll
2009-03-11 04:53 . 2008-12-16 06:31	7,680	--a------	c:\windows\System32\spwmp.dll
2009-03-11 04:53 . 2008-12-16 06:31	4,096	--a------	c:\windows\System32\msdxm.ocx
2009-03-11 04:53 . 2008-12-16 06:31	4,096	--a------	c:\windows\System32\dxmasf.dll
2009-03-10 21:22 . 2009-03-11 15:09	<REP>	d--------	C:\ToolBar SD
2009-03-10 21:13 . 2009-03-11 15:05	<REP>	d--------	c:\program files\Navilog1
2009-03-08 17:19 . 2009-03-10 21:03	<REP>	d-ah-----	C:\.Trashes
2009-03-08 17:19 . 2009-03-08 17:19	4,096	--ah-----	C:\._.Trashes
2009-03-08 10:58 . 2009-03-08 10:58	<REP>	d--------	c:\program files\EffectsLab DV
2009-03-07 13:48 . 2009-03-07 13:48	<REP>	d--------	c:\program files\Pop up Blocker Pro
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	c:\users\Ched\AppData\Roaming\Autodesk
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	c:\users\All Users\Autodesk
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	c:\programdata\Autodesk
2009-03-04 13:48 . 2009-03-04 13:48	<REP>	d--------	C:\FLEXlm
2009-03-04 12:51 . 2009-03-04 12:51	<REP>	d--------	c:\program files\Common Files\Autodesk Shared
2009-03-04 12:37 . 2009-03-04 12:53	<REP>	d--------	c:\program files\Common Files\Alias Shared
2009-02-27 11:18 . 2009-02-27 11:18	76	-r-hs----	c:\windows\ICSET30.BIN
2009-02-27 11:15 . 2009-02-27 11:25	<REP>	d--------	c:\program files\Reallusion
2009-02-27 10:11 . 2009-02-27 10:11	<REP>	d--------	c:\windows\MaxTV
2009-02-27 10:11 . 2009-02-27 10:11	<REP>	d--------	c:\users\Ched\AppData\Roaming\DMV Technologies
2009-02-27 10:11 . 2009-02-27 10:11	<REP>	d--------	c:\program files\DMV
2009-02-27 09:35 . 2009-03-04 13:47	<REP>	d--------	C:\FLEXLM2
2009-02-26 18:56 . 2009-02-26 19:09	<REP>	d--------	c:\users\All Users\Reallusion
2009-02-26 18:56 . 2009-02-26 19:09	<REP>	d--------	c:\programdata\Reallusion
2009-02-26 18:49 . 2009-02-27 11:26	<REP>	d--------	c:\users\Ched\AppData\Roaming\Reallusion
2009-02-24 21:18 . 2009-02-24 21:19	<REP>	d--------	c:\program files\GeoLabo
2009-02-24 19:13 . 2009-02-24 19:13	<REP>	d--------	c:\users\Ched\AppData\Roaming\Steinberg
2009-02-23 07:04 . 2006-12-15 21:15	49,152	--a------	c:\windows\System32\wsu.dll
2009-02-22 13:46 . 2009-02-22 13:47	<REP>	d--------	C:\LM3D.CD
2009-02-22 11:47 . 2009-02-22 11:47	<REP>	d--------	c:\program files\WinHTTrack
2009-02-20 19:40 . 2009-02-20 19:40	<REP>	d--------	c:\program files\WinLemm
2009-02-18 14:19 . 2009-02-18 14:19	<REP>	d--------	c:\program files\Common Files\INCA Shared
2009-02-18 14:19 . 2003-07-16 07:17	5,174	--a------	c:\windows\System32\nppt9x.vxd
2009-02-18 14:19 . 2004-12-30 22:43	4,682	--a------	c:\windows\System32\npptNT2.sys
2009-02-18 12:46 . 2009-02-18 12:46	<REP>	d--------	c:\program files\gPotato.eu
2009-02-18 12:22 . 2009-02-18 12:22	<REP>	d--------	c:\program files\SpeedBit Video Downloader
2009-02-18 12:18 . 2009-02-18 12:19	<REP>	d-a------	c:\users\All Users\TEMP
2009-02-18 12:18 . 2009-02-18 12:18	<REP>	d--------	c:\users\All Users\SpeedBit
2009-02-18 12:18 . 2009-02-18 12:19	<REP>	d-a------	c:\programdata\TEMP
2009-02-18 12:18 . 2009-02-18 12:18	<REP>	d--------	c:\programdata\SpeedBit
2009-02-18 12:18 . 2009-02-18 12:20	<REP>	d--------	c:\program files\DAP
2009-02-18 12:18 . 2009-02-18 12:18	479,298	--a------	c:\windows\System32\wbocx.ocx
2009-02-18 12:18 . 2009-02-18 12:18	50,688	--a------	c:\windows\System32\wbhelp2.dll
2009-02-17 16:25 . 2008-12-05 05:32	428,544	--a------	c:\windows\System32\EncDec.dll
2009-02-17 16:25 . 2008-12-05 05:32	293,376	--a------	c:\windows\System32\psisdecd.dll
2009-02-17 16:25 . 2008-12-05 05:31	217,088	--a------	c:\windows\System32\psisrndr.ax
2009-02-17 16:25 . 2008-12-05 05:31	177,664	--a------	c:\windows\System32\mpg2splt.ax
2009-02-17 16:25 . 2008-12-05 05:31	80,896	--a------	c:\windows\System32\MSNP.ax
2009-02-15 19:26 . 2009-02-15 19:26	<REP>	d--------	c:\users\Ched\.javasvn
2009-02-15 19:23 . 2009-02-15 19:23	<REP>	d--------	c:\users\All Users\Trymedia
2009-02-15 19:23 . 2009-02-15 19:23	<REP>	d--------	c:\programdata\Trymedia
2009-02-15 19:22 . 2009-02-15 19:22	<REP>	d--------	c:\program files\BFG
2009-02-15 10:16 . 2009-02-15 10:16	99	--a------	c:\windows\System32\VeriFace.cfg
2009-02-14 20:07 . 1998-07-13 00:00	119,568	--a------	c:\windows\System32\VB6FR.DLL
2009-02-14 20:07 . 1998-07-13 00:00	119,568	--a------	c:\windows\system\VB6FR.DLL
2009-02-14 19:09 . 2009-02-14 19:09	<REP>	d--------	c:\program files\GrassSoft
2009-02-14 14:16 . 2009-02-14 14:16	<REP>	d--------	c:\users\All Users\InterVideo
2009-02-14 14:16 . 2009-02-14 14:16	<REP>	d--------	c:\programdata\InterVideo

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-13 17:28	---------	d-----w	c:\users\Ched\AppData\Roaming\MiniLyrics
2009-03-12 20:09	---------	d-----w	c:\users\Ched\AppData\Roaming\WTablet
2009-03-12 17:43	---------	d-----w	c:\users\Ched\AppData\Roaming\FileZilla
2009-03-12 02:06	---------	d-----w	c:\program files\Windows Mail
2009-03-07 21:36	---------	d-----w	c:\users\Ched\AppData\Roaming\vlc
2009-03-07 16:49	2,828	--sha-w	c:\users\All Users\KGyGaAvL.sys
2009-03-07 16:49	2,828	--sha-w	c:\programdata\KGyGaAvL.sys
2009-03-06 15:52	---------	d-----w	c:\program files\Malwarebytes' Anti-Malware
2009-03-03 13:20	---------	d-----w	c:\users\Ched\AppData\Roaming\dvdcss
2009-03-03 08:23	---------	d-----w	c:\program files\Yahoo!
2009-03-03 08:21	---------	d--h--w	c:\program files\InstallShield Installation Information
2009-03-03 08:21	---------	d-----w	c:\program files\UBISOFT
2009-02-27 19:28	---------	d-----w	c:\program files\Microsoft Silverlight
2009-02-27 10:17	---------	d-----w	c:\program files\Common Files\Reallusion
2009-02-26 21:42	---------	d-----w	c:\users\Ched\AppData\Roaming\DAEMON Tools Pro
2009-02-23 07:07	---------	d-----w	c:\program files\FileZilla FTP Client
2009-02-18 11:22	---------	d-----w	c:\program files\SpeedBit Video Accelerator
2009-02-17 14:16	---------	d-----w	c:\program files\Google
2009-02-15 18:32	---------	d-----w	c:\program files\Youtube Download
2009-02-15 18:30	---------	d-----w	c:\program files\KaraFun
2009-02-15 09:17	---------	d-----w	c:\programdata\VeriFace
2009-02-13 19:00	---------	d-----w	c:\program files\Safari
2009-02-12 20:39	5,632	----a-w	c:\windows\system32\drivers\StarOpen.sys
2009-02-11 09:19	38,496	----a-w	c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 09:19	15,504	----a-w	c:\windows\system32\drivers\mbam.sys
2009-02-10 18:50	---------	d-----w	c:\program files\Cheat Engine
2009-02-10 13:58	---------	d-----w	c:\program files\Minilyrics
2009-02-06 14:46	---------	d-----w	c:\program files\Messenger Plus! Live
2009-02-04 20:21	---------	d-----w	c:\users\Ched\AppData\Roaming\DAEMON Tools Lite
2009-01-26 20:54	---------	d-----w	c:\program files\winOKE Ltd
2009-01-26 17:08	---------	d-----w	c:\program files\Audacity
2009-01-24 20:46	---------	d-----w	c:\program files\CANAL Numedia
2009-01-24 20:21	---------	d-----w	c:\program files\Bitmanagement Software
2009-01-23 15:51	---------	d-----w	c:\program files\NVIDIA nTune Performance Application
2009-01-21 18:58	---------	d-----w	c:\program files\iTunes
2009-01-21 06:48	---------	d-----w	c:\users\Ched\AppData\Roaming\Astro Gemini Software
2009-01-21 06:48	---------	d-----w	c:\program files\Astro Gemini Software
2009-01-20 21:50	---------	d-----w	c:\users\Ched\AppData\Roaming\DAEMON Tools
2009-01-20 21:49	---------	d-----w	c:\programdata\DAEMON Tools Lite
2009-01-20 21:48	---------	d-----w	c:\program files\DAEMON Tools Lite
2009-01-20 21:38	717,296	----a-w	c:\windows\system32\drivers\sptd.sys
2009-01-19 17:31	---------	d-----w	c:\program files\ConvertHelper
2009-01-19 07:23	---------	d-----w	c:\program files\AviSynth 2.5
2009-01-19 07:22	---------	d-----w	c:\program files\eRightSoft
2009-01-18 15:19	---------	d-----w	c:\program files\Common Files\BitDefender
2009-01-18 15:19	---------	d-----w	c:\program files\BitDefender
2009-01-18 15:17	81,984	----a-w	c:\windows\System32\bdod.bin
2009-01-17 20:13	---------	d-----w	c:\users\Ched\AppData\Roaming\Anuman Interactive
2009-01-17 18:27	---------	d-----w	c:\program files\TLKGAMES
2009-01-17 14:10	164,352	----a-w	c:\windows\System32\SpoonUninstall.exe
2009-01-17 14:10	---------	d-----w	c:\program files\Jardinains!
2009-01-15 06:11	827,392	----a-w	c:\windows\System32\wininet.dll
2009-01-14 12:28	---------	d-----w	c:\program files\Bonjour
2009-01-14 12:28	---------	d-----w	c:\program files\Airfoil
2009-01-13 13:57	---------	d-----w	c:\users\Ched\AppData\Roaming\DivX
2009-01-13 13:56	---------	d-----w	c:\program files\Xvid
2009-01-13 13:56	---------	d-----w	c:\program files\DivX
2009-01-13 13:56	---------	d-----w	c:\program files\Common Files\PX Storage Engine
2009-01-07 19:59	94,208	----a-w	c:\windows\System32\Momo.dll
2009-01-07 19:59	94,208	----a-w	c:\windows\System32\ApBlend.dll
2009-01-07 19:59	626,688	----a-w	c:\windows\System32\msvcr80.dll
2009-01-07 19:59	622,592	----a-w	c:\windows\System32\PicNotify.dll
2009-01-07 19:59	548,864	----a-w	c:\windows\System32\msvcp80.dll
2009-01-07 19:59	5,632	----a-w	c:\windows\System32\biologon.dll
2009-01-07 19:59	491,520	----a-w	c:\windows\System32\picn.dll
2009-01-07 19:59	49,152	----a-w	c:\windows\System32\DevFilt.dll
2009-01-07 19:59	208,896	----a-w	c:\windows\System32\Image.dll
2009-01-07 19:59	126,976	----a-w	c:\windows\System32\VideoOp.dll
2009-01-07 19:59	1,560,576	----a-w	c:\windows\System32\MainOp.dll
2009-01-07 19:59	1,327,104	----a-w	c:\windows\System32\ImageReog.dll
2009-01-06 13:01	174	--sha-w	c:\program files\desktop.ini
2009-01-05 21:25	82,432	----a-w	c:\windows\System32\axaltocm.dll
2009-01-05 21:25	101,888	----a-w	c:\windows\System32\ifxcardm.dll
2009-01-01 22:03	319,456	----a-w	c:\windows\DIFxAPI.dll
2009-01-01 10:34	410,984	----a-w	c:\windows\System32\deploytk.dll
2009-01-01 08:26	56	---ha-w	c:\users\All Users\ezsidmv.dat
2009-01-01 08:26	56	---ha-w	c:\programdata\ezsidmv.dat
2008-12-31 09:33	269,312	----a-w	c:\windows\System32\es.dll
2008-12-31 09:30	988,216	----a-w	c:\windows\System32\winload.exe
2008-12-31 09:30	927,288	----a-w	c:\windows\System32\winresume.exe
2008-12-31 09:30	615,992	----a-w	c:\windows\System32\ci.dll
2008-12-31 09:30	6,656	----a-w	c:\windows\System32\kbd106n.dll
2008-12-31 09:30	46,592	----a-w	c:\windows\System32\setbcdlocale.dll
2008-12-31 09:30	40,960	----a-w	c:\windows\System32\srclient.dll
2008-12-31 09:30	378,368	----a-w	c:\windows\System32\srcore.dll
2008-12-31 09:30	318,464	----a-w	c:\windows\System32\rstrui.exe
2008-12-31 09:30	19,000	----a-w	c:\windows\System32\kd1394.dll
2008-12-31 09:30	14,848	----a-w	c:\windows\System32\srdelayed.exe
2008-12-30 10:37	8	--sh--r	c:\users\All Users\8E1647C8F2.sys
2008-12-30 10:37	8	--sh--r	c:\programdata\8E1647C8F2.sys
2008-12-30 09:37	61,440	----a-w	c:\windows\System32\winipsec.dll
2008-12-30 09:37	361,984	----a-w	c:\windows\System32\IPSECSVC.DLL
2008-12-30 09:37	28,672	----a-w	c:\windows\System32\FwRemoteSvr.dll
2008-12-30 09:37	272,896	----a-w	c:\windows\System32\polstore.dll
2008-12-30 09:35	94,720	----a-w	c:\windows\System32\PortableDeviceClassExtension.dll
2008-12-30 09:35	241,152	----a-w	c:\windows\System32\PortableDeviceApi.dll
2008-12-30 09:35	160,768	----a-w	c:\windows\System32\PortableDeviceTypes.dll
2008-12-30 09:30	296,960	----a-w	c:\windows\System32\gdi32.dll
2008-12-30 09:28	233,888	----a-w	c:\windows\System32\DreamScene.dll
2008-12-30 09:25	541,696	----a-w	c:\windows\AppPatch\AcLayers.dll
2006-05-03 10:06	163,328	--sh--r	c:\windows\System32\flvDX.dll
2007-02-21 11:47	31,232	--sh--r	c:\windows\System32\msfDX.dll
2008-03-16 13:30	216,064	--sh--r	c:\windows\System32\nbDX.dll
.

(((((((((((((((((((((((((((((   SnapShot@2009-03-11_17.41.32.65   )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-03-12 20:08:22	2,048	--sha-w	c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2009-03-12 20:08:22	2,048	--sha-w	c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2009-03-11 16:36:18	262,144	--sha-w	c:\windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2009-03-12 20:08:31	262,144	--sha-w	c:\windows\ServiceProfiles\LocalService\NTUSER.DAT
+ 2009-03-12 20:08:31	262,144	---ha-w	c:\windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
- 2009-01-07 12:53:42	2,665,622	-c--a-w	c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
+ 2009-03-12 06:40:59	2,665,622	-c--a-w	c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
- 2009-03-11 16:36:17	262,144	--sha-w	c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2009-03-13 20:41:41	262,144	--sha-w	c:\windows\ServiceProfiles\NetworkService\NTUSER.DAT
+ 2009-03-13 20:41:41	262,144	---ha-w	c:\windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
- 2009-01-05 06:25:21	79,248	----a-w	c:\windows\System32\config\systemprofile\AppData\Local\GDIPFONTCACHEV1.DAT
+ 2009-03-11 18:56:04	79,248	----a-w	c:\windows\System32\config\systemprofile\AppData\Local\GDIPFONTCACHEV1.DAT
- 2009-03-11 16:36:15	16,384	--sha-w	c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-03-12 20:09:18	16,384	--sha-w	c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-03-11 16:36:15	32,768	--sha-w	c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-03-12 20:09:18	32,768	--sha-w	c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-03-11 16:36:15	32,768	--sha-w	c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-03-12 20:08:27	32,768	--sha-w	c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-03-11 16:31:30	262,144	----a-w	c:\windows\System32\config\systemprofile\ntuser.dat
+ 2009-03-13 20:39:07	262,144	----a-w	c:\windows\System32\config\systemprofile\ntuser.dat
- 2009-01-06 11:57:03	286,832	----a-w	c:\windows\System32\FNTCACHE.DAT
+ 2009-03-12 05:40:04	286,832	----a-w	c:\windows\System32\FNTCACHE.DAT
- 2009-03-10 06:45:41	105,276	----a-w	c:\windows\System32\perfc009.dat
+ 2009-03-12 20:15:31	105,276	----a-w	c:\windows\System32\perfc009.dat
- 2009-03-10 06:45:41	128,418	----a-w	c:\windows\System32\perfc00C.dat
+ 2009-03-12 20:15:31	128,418	----a-w	c:\windows\System32\perfc00C.dat
- 2009-03-10 06:45:41	595,946	----a-w	c:\windows\System32\perfh009.dat
+ 2009-03-12 20:15:31	595,946	----a-w	c:\windows\System32\perfh009.dat
- 2009-03-10 06:45:41	679,418	----a-w	c:\windows\System32\perfh00C.dat
+ 2009-03-12 20:15:31	679,418	----a-w	c:\windows\System32\perfh00C.dat
- 2009-03-11 13:59:29	6,553,600	----a-w	c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
+ 2009-03-12 20:06:10	6,553,600	----a-w	c:\windows\System32\SMI\Store\Machine\SCHEMA.DAT
- 2009-03-11 14:26:36	8,940	----a-w	c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3410771430-1018225431-698016900-1000_UserData.bin
+ 2009-03-11 18:32:53	9,258	----a-w	c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3410771430-1018225431-698016900-1000_UserData.bin
- 2009-03-11 14:26:36	68,320	----a-w	c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
+ 2009-03-11 18:32:52	68,598	----a-w	c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
- 2009-03-11 16:37:44	50,008	----a-w	c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
+ 2009-03-12 20:10:44	50,614	----a-w	c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
- 2008-01-19 07:37:03	10,620,928	----a-w	c:\windows\System32\wmp.dll
+ 2008-12-16 05:31:35	10,622,976	----a-w	c:\windows\System32\wmp.dll
+ 2008-12-16 05:53:36	4,096	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16789_none_09360999522be962\dxmasf.dll
+ 2008-12-16 05:53:35	7,680	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16789_none_09360999522be962\spwmp.dll
+ 2008-12-16 05:53:36	10,619,904	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16789_none_09360999522be962\wmp.dll
+ 2008-12-16 05:53:30	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16789_none_09360999522be962\wmpconfig.exe
+ 2008-12-16 05:53:30	168,960	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16789_none_09360999522be962\wmplayer.exe
+ 2008-12-16 04:00:17	8,147,968	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16789_none_09360999522be962\wmploc.DLL
+ 2008-12-16 05:53:30	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16789_none_09360999522be962\wmpshare.exe
+ 2008-12-16 05:37:10	4,096	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20976_none_09c777586b441e5d\dxmasf.dll
+ 2008-12-16 05:36:47	7,680	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20976_none_09c777586b441e5d\spwmp.dll
+ 2008-12-16 05:37:33	10,619,904	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20976_none_09c777586b441e5d\wmp.dll
+ 2008-12-16 03:49:51	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20976_none_09c777586b441e5d\wmpconfig.exe
+ 2008-12-16 03:49:38	168,960	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20976_none_09c777586b441e5d\wmplayer.exe
+ 2008-12-16 03:49:52	8,147,968	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20976_none_09c777586b441e5d\wmploc.DLL
+ 2008-12-16 03:49:20	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.20976_none_09c777586b441e5d\wmpshare.exe
+ 2008-12-16 05:31:31	4,096	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18185_none_0b1847174f5614f7\dxmasf.dll
+ 2008-12-16 05:31:30	7,680	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18185_none_0b1847174f5614f7\spwmp.dll
+ 2008-12-16 05:31:35	10,622,976	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18185_none_0b1847174f5614f7\wmp.dll
+ 2008-12-16 05:31:19	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18185_none_0b1847174f5614f7\wmpconfig.exe
+ 2008-12-16 05:31:19	168,960	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18185_none_0b1847174f5614f7\wmplayer.exe
+ 2008-12-16 03:29:44	8,147,456	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18185_none_0b1847174f5614f7\wmploc.DLL
+ 2008-12-16 05:31:19	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18185_none_0b1847174f5614f7\wmpshare.exe
+ 2008-12-16 04:32:10	4,096	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22331_none_0bd3f43c684ec0d7\dxmasf.dll
+ 2008-12-16 04:31:29	7,680	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22331_none_0bd3f43c684ec0d7\spwmp.dll
+ 2008-12-16 04:32:38	10,624,512	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22331_none_0bd3f43c684ec0d7\wmp.dll
+ 2008-12-16 02:38:46	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22331_none_0bd3f43c684ec0d7\wmpconfig.exe
+ 2008-12-16 02:38:29	168,960	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22331_none_0bd3f43c684ec0d7\wmplayer.exe
+ 2008-12-16 02:39:20	8,147,456	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22331_none_0bd3f43c684ec0d7\wmploc.DLL
+ 2008-12-16 02:38:10	107,520	----a-w	c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22331_none_0bd3f43c684ec0d7\wmpshare.exe
+ 2009-02-11 23:29:35	2,409,784	----a-w	c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16819_none_f0a011f86e53bc84\OESpamFilter.dat
+ 2009-02-11 23:29:48	2,409,784	----a-w	c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21009_none_f13456d18769739f\OESpamFilter.dat
+ 2009-02-12 00:40:03	2,409,784	----a-w	c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18214_none_f2814f2c6b7ecec2\OESpamFilter.dat
+ 2009-02-12 00:28:19	2,409,784	----a-w	c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22375_none_f2cb0cb984cc2f89\OESpamFilter.dat
+ 2008-11-27 04:42:05	269,824	----a-w	c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16782_none_1fdb8f82585b552d\schannel.dll
+ 2008-12-02 04:25:38	269,824	----a-w	c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.20967_none_207fcf7d716438ef\schannel.dll
+ 2008-11-27 04:43:25	268,288	----a-w	c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18175_none_21cf9ef255771632\schannel.dll
+ 2008-12-02 04:36:39	268,288	----a-w	c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22320_none_228a4bcd6e70a8bb\schannel.dll
+ 2009-02-09 01:59:26	2,028,032	----a-w	c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.16816_none_b70870b09d62e718\win32k.sys
+ 2009-02-09 01:54:23	2,030,080	----a-w	c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6000.21006_none_b79cb589b6789e33\win32k.sys
+ 2009-02-09 03:10:34	2,033,152	----a-w	c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.18211_none_b8e9ade49a8df956\win32k.sys
+ 2009-02-09 02:54:45	2,033,664	----a-w	c:\windows\winsxs\x86_microsoft-windows-win32k_31bf3856ad364e35_6.0.6001.22372_none_b9336b71b3db5a1d\win32k.sys
.
-- Instantané actualisé --
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2009-01-07 20:59	241752	--a------	c:\program files\Lenovo\VeriFace\IcnOvrly.dll 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPSON Stylus DX4400 Series"="c:\windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE" [2007-03-01 180736]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"DownloadAccelerator"="c:\program files\DAP\DAP.EXE" [2008-12-11 6959104]
"SpeedBitVideoAccelerator"="c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe" [2009-02-18 2823784]
"Pop up Blocker Pro"="c:\program files\Pop up Blocker Pro\pdie.exe" [2007-01-12 1309184]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2008-01-19 49664]
"WindowsWelcomeCenter"="oobefldr.dll" [2008-01-19 c:\windows\System32\oobefldr.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IRW"="c:\windows\system32\IRW.exe" [2008-04-15 147456]
"Apple_KbdMgr"="c:\program files\Boot Camp\KbdMgr.exe" [2008-04-15 423216]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-11 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-12-30 180269]
"AirPort Base Station Agent"="c:\program files\AirPort\APAgent.exe" [2008-05-20 737280]
"VeriFacePassManager"="c:\program files\Lenovo\VeriFace\PManage.exe" [2009-01-07 262245]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-01 136600]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"VeriFaceTimeLock"="c:\program files\Lenovo\VeriFace\RTimeLock.exe" [2009-01-07 335872]
"RtHDVCpl"="RtHDVCpl.exe" [2008-04-15 c:\windows\RtHDVCpl.exe]

c:\users\Ched\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
MaxTV.lnk - c:\program files\DMV\MaxTV4\maxtv.exe [2008-11-10 5523276]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"FilterAdministratorToken"= 1 (0x1)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.i420"= i420vfw.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{326AA80D-F037-4647-B026-7DBDEB733F0E}c:\\program files\\corel\\dvd9\\windvd.exe"= UDP:c:\program files\corel\dvd9\windvd.exe:WinDVD
"UDP Query User{EBA77013-DFBB-4969-829E-97FEDD71EB09}c:\\program files\\corel\\dvd9\\windvd.exe"= TCP:c:\program files\corel\dvd9\windvd.exe:WinDVD
"{F8BDD328-16CC-4BCF-9D5C-70223C0DA6B4}"= UDP:c:\program files\AirPort\APAgent.exe:APAgent
"{DC4091C6-B109-41C5-8635-9924D5DB25DF}"= TCP:c:\program files\AirPort\APAgent.exe:APAgent
"{4A003807-33A0-4DCF-B4C9-5009F1E4CABB}"= UDP:c:\program files\Airfoil Speakers\AirfoilSpeakers.exe:Airfoil Speakers
"{F0527A20-7499-4E1E-9E39-44CF915D145B}"= TCP:c:\program files\Airfoil Speakers\AirfoilSpeakers.exe:Airfoil Speakers
"{D7EA12D5-DEA0-4478-A7F1-7F3E7263B9B0}"= UDP:c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe:VideoAccelerator
"{B1804D3D-B9D1-4238-ACED-B262A8F99E1D}"= TCP:c:\program files\SpeedBit Video Accelerator\VideoAccelerator.exe:VideoAccelerator
"{B73F7764-A6A3-4472-84D0-0CAE13E75595}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{EDBE43F2-1150-48E8-8C4F-73F67894FD94}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{B0B54635-6F26-40D9-92B5-5C1B9BC82A11}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{72490B41-D56A-4A8F-AB06-C3E39FFF796F}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{A4AD9323-B21E-4CE7-BBD4-BE6F48F39117}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{961575A9-FCD7-45A6-A559-336B7C3C356E}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"TCP Query User{01B9B582-69C2-4ED8-9D6B-84E37A7ECFB3}c:\\program files\\java\\jre6\\bin\\javaw.exe"= UDP:c:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary
"UDP Query User{9A864BF1-FF1E-47C4-B5E6-50BABB15AA07}c:\\program files\\java\\jre6\\bin\\javaw.exe"= TCP:c:\program files\java\jre6\bin\javaw.exe:Java(TM) Platform SE binary
"TCP Query User{A33901C2-53DC-4DB7-B73F-2061579382D5}c:\\program files\\java\\jre6\\bin\\java.exe"= UDP:c:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary
"UDP Query User{337DD187-60D5-4F42-A015-77CDD33258AC}c:\\program files\\java\\jre6\\bin\\java.exe"= TCP:c:\program files\java\jre6\bin\java.exe:Java(TM) Platform SE binary
"TCP Query User{7E61E9DA-A9C5-4644-BC58-674065CAAE71}c:\\program files\\ubisoft\\scrabble® interactif edition 2007\\scrabble2007.exe"= UDP:c:\program files\ubisoft\scrabble® interactif edition 2007\scrabble2007.exe:SCRABBLE® Interactif EDITION 2007
"UDP Query User{6B747EFB-3C3F-4AF9-A8ED-EAC0110CB388}c:\\program files\\ubisoft\\scrabble® interactif edition 2007\\scrabble2007.exe"= TCP:c:\program files\ubisoft\scrabble® interactif edition 2007\scrabble2007.exe:SCRABBLE® Interactif EDITION 2007
"{D53F7734-9AB4-4C87-8A60-FA7E6D8A79F1}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{76F56ACB-47D0-4AF6-88ED-956EBD684109}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{494EEE83-3CFE-46F7-AF84-BFBFAE7C56B2}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{B2A1C026-710F-4C51-8BC2-E063C05EF6D6}"= UDP:c:\program files\Airfoil\Airfoil.exe:Airfoil
"{FB0E4C8D-9E3C-4B1D-80D8-779C6E66EBCF}"= TCP:c:\program files\Airfoil\Airfoil.exe:Airfoil
"{085BAA39-8C03-4C18-B565-3E149E5E0A96}"= UDP:c:\program files\Airfoil\AirfoilSpeakers.exe:Airfoil Speakers
"{DCA8E987-9924-4CBD-BB62-55CD667B8A4F}"= TCP:c:\program files\Airfoil\AirfoilSpeakers.exe:Airfoil Speakers
"TCP Query User{AB00BD9D-AA07-4CE8-B245-13245E2492B1}c:\\program files\\safari\\safari.exe"= UDP:c:\program files\safari\safari.exe:Safari Web Browser
"UDP Query User{1FB097E6-EB90-4494-859D-55E320AD0F7E}c:\\program files\\safari\\safari.exe"= TCP:c:\program files\safari\safari.exe:Safari Web Browser
"TCP Query User{659F6EA1-72D5-442F-9491-CB791534CDF3}c:\\program files\\gpotato.eu\\street gears\\streetgear.exe"= UDP:c:\program files\gpotato.eu\street gears\streetgear.exe:StreetGear
"UDP Query User{0251E9DD-26A4-4616-A3C5-162B719F854B}c:\\program files\\gpotato.eu\\street gears\\streetgear.exe"= TCP:c:\program files\gpotato.eu\street gears\streetgear.exe:StreetGear
"TCP Query User{029AF062-145A-4A81-BAF6-E3B59A31B346}c:\\windows\\explorer.exe"= UDP:c:\windows\explorer.exe:Explorateur Windows
"UDP Query User{A50A075C-8379-4F04-9787-61CD16DFF6A0}c:\\windows\\explorer.exe"= TCP:c:\windows\explorer.exe:Explorateur Windows
"TCP Query User{4FAE590E-3800-4A8D-8627-4AF6526CA323}c:\\program files\\dmv\\maxtv4\\maxtv.exe"= UDP:c:\program files\dmv\maxtv4\maxtv.exe:maxtv
"UDP Query User{68FE7EC1-8911-41CF-910E-ABA5F12B599B}c:\\program files\\dmv\\maxtv4\\maxtv.exe"= TCP:c:\program files\dmv\maxtv4\maxtv.exe:maxtv

R2 AppleOSSMgr;Apple OS Switch Manager;c:\windows\System32\AppleOSSMgr.exe [2008-04-15 132400]
R2 AppleTimeSrv;Apple Time Service;c:\windows\System32\AppleTimeSrv.exe [2008-04-15 99632]
R2 KeyAgent;KeyAgent;c:\windows\System32\drivers\KeyAgent.sys [2008-04-15 5504]
R2 MacHALDriver;Mac HAL;c:\windows\System32\drivers\MacHALDriver.sys [2008-04-15 6528]
R2 regi;regi;c:\windows\System32\drivers\regi.sys [2007-04-17 11032]
R2 TabletServicePen;TabletServicePen;c:\windows\System32\Pen_Tablet.exe [2008-12-30 1373480]
R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\SPEEDB~1\VideoAcceleratorService.exe -start -scm --> c:\progra~1\SPEEDB~1\VideoAcceleratorService.exe -start -scm [?]
R3 aapltctp;Apple Trackpad Enabler;c:\windows\System32\drivers\aapltctp.sys [2008-12-30 4224]
R3 aapltp;Apple Trackpad;c:\windows\System32\drivers\aapltp.sys [2008-12-30 35072]
R3 applebt;Apple Built-in Bluetooth;c:\windows\System32\drivers\applebt.sys [2009-01-01 9088]
R3 IRRemoteFlt;IR Receiver Filter Driver;c:\windows\System32\drivers\IRFilter.sys [2009-01-01 16512]
R3 KeyMagic;USB Keyboard HID Filter;c:\windows\System32\drivers\KeyMagic.sys [2009-01-01 19968]
S3 BthKicker;Apple Bluetooth Device Driver;c:\windows\System32\drivers\BthKicker.sys [2008-12-30 7424]
S3 iSightUpdate;iSight Update Driver;c:\windows\System32\drivers\iSightUP.sys [2009-01-01 17664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs	REG_MULTI_SZ   	BthServ

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{97fde4cc-e73b-11dd-b667-001e52d912be}]
\shell\AutoRun\command - E:\Autorun.exe

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}]
%SystemRoot%\system32\soundschemes.exe /AddRegistration

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24}]
%SystemRoot%\system32\soundschemes2.exe /AddRegistration
.
.
------- Examen supplémentaire -------
.
uStart Page = search.speedbit.com
mWindow Title = 
IE: &Clean Traces - c:\program files\DAP\Privacy Package\dapcleanerie.htm
IE: &Download with &DAP - c:\program files\DAP\dapextie.htm
IE: Download &all with DAP - c:\program files\DAP\dapextie2.htm
IE: {{AD1EFB51-30F9-4239-A899-9C78466643CE} - c:\program files\Pop up Blocker Pro\pdie.exe
LSP: c:\progra~1\SPEEDB~1\sblsp.dll
Name-Space Handler: ftp\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\DAP\dapie.dll
Name-Space Handler: http\ZDA - {5BFA1DAF-5EDC-11D2-959E-00C00C02DA5E} - c:\progra~1\DAP\dapie.dll
FF - ProfilePath - c:\users\Ched\AppData\Roaming\Mozilla\Firefox\Profiles\8qbi1ael.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - search.speedbit.com
FF - prefs.js: keyword.URL - hxxp://search.speedbit.com/searchresults.asp?src=default&q=
FF - component: c:\program files\DAP\DAPFireFox\components\DAPFireFox.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npBSContact.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-13 21:41:49
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'lsass.exe'(716)
c:\progra~1\SPEEDB~1\sblsp.dll
c:\program files\SpeedBit Video Accelerator\ConfigDB.dll
c:\program files\SpeedBit Video Accelerator\Accelerator.dll
c:\program files\SpeedBit Video Accelerator\CommPipe.dll
c:\program files\SpeedBit Video Accelerator\Collector.dll
c:\program files\Bonjour\mdnsNSP.dll

- - - - - - - > 'Explorer.exe'(4392)
c:\program files\Lenovo\VeriFace\IcnOvrly.dll
.
Heure de fin: 2009-03-13 21:43:31
ComboFix-quarantined-files.txt  2009-03-13 20:43:28
ComboFix2.txt  2009-03-11 16:43:43

Avant-CF: 11,032,453,120 octets libres
Après-CF: 10,793,730,048 octets libres

414	--- E O F ---	2009-03-13 02:00:28

Merci beaucoup pour ton aide

[nardino]

Bonsoir.
Merci pour le rapport mais tu ne me donnes pas de nouvelles sur l'évolution des problèmes ?
@+

[ched78]

Bonjour,
Tout a l'air de fonctionner corectement depuis une journée maintenant. Je te post quand meme le rapport, mais je pense que le probleme est résolu

Code : Tout sélectionner

le rapport

Merci beaucoup pour ton aide

lol, je t'en ai donné

Bonne journée

[nardino]

Bonjour,
Au temps pour moi, reste à supprimer :
Combofix.exe (sur le bureau)
C:\Combofix
C:\Combofix.txt
C:\Qoobox
Et à conserver le pc propre.
Clique sur l'image de ma signature "Dites-lui NON" et lis l'article.
@+

[ched78]

Voila, c'est supprimé, ca fait du bien de retrouver un bureau plus propre pck la ca commencait a faire beaucoup de petit logiciels ^^
J'ai investi pour proteger mon PC pourtant...
Je prendrai le temps de lire ton PDF ce week-end

@+ et merci =) Heuresement qu'il reste encore des gens qui aident sans rien attendre en retour...