Trop de processus problèmeFermé

Question

Bonjour,

J'ai checké il y a peu mon gestionnaire des tâches et je me suis rendu compte que j'avais environ 130 processus, j'ai commencé à les supprimer un à un puis en en supprimant un mon pc m'a dit qu'il allait devoir redémarrer et les 130 processus se sont rouvert,

Merci de m'aider à en supprimer au moins la moitié qui doivent être inutiles.

Syria456 · Answer

Je veux bien t'aider à supprimer mais tout d'abord, merci de me donne la liste des processus:

___________________________________________________________ Appuie sur la touche Windows + R et entre cmd.exe
Ensuite tu devrait arriver dans l'invite de commandes: Ici, entre 
"tasklist > désinfection.txt" 
Ouvre le fichier sauvegarder dans C:\Utilisateurs\[TON NOM D'UTILISATEUR]/désinfection.txt
__________________________________________________________
Bonne chance!

zdexter65 · Answer

Nom de l'image                 PID Nom de la sessio Num'ro de s Utilisation 
========================= ======== ================ =========== ============
System Idle Process              0 Services                   0        24 Ko
System                           4 Services                   0     1ÿ128 Ko
smss.exe                       368 Services                   0     1ÿ192 Ko
csrss.exe                      548 Services                   0     5ÿ696 Ko
csrss.exe                      664 Console                    1    58ÿ412 Ko
wininit.exe                    672 Services                   0     4ÿ820 Ko
winlogon.exe                   708 Console                    1     8ÿ008 Ko
services.exe                   768 Services                   0    12ÿ732 Ko
lsass.exe                      776 Services                   0    12ÿ400 Ko
lsm.exe                        784 Services                   0     4ÿ968 Ko
svchost.exe                    876 Services                   0    13ÿ444 Ko
nvvsvc.exe                     940 Services                   0     7ÿ876 Ko
svchost.exe                    980 Services                   0    13ÿ208 Ko
MsMpEng.exe                    400 Services                   0    49ÿ540 Ko
svchost.exe                    492 Services                   0    24ÿ844 Ko
svchost.exe                    412 Services                   0   165ÿ280 Ko
svchost.exe                    964 Services                   0    21ÿ196 Ko
svchost.exe                   1036 Services                   0    63ÿ860 Ko
svchost.exe                   1260 Services                   0    23ÿ352 Ko
nvxdsync.exe                  1396 Console                    1    20ÿ528 Ko
nvvsvc.exe                    1404 Console                    1    15ÿ392 Ko
wisptis.exe                   1412 Console                    1     8ÿ672 Ko
FBAgent.exe                   1456 Services                   0    13ÿ840 Ko
wlanext.exe                   1464 Services                   0    15ÿ360 Ko
conhost.exe                   1472 Services                   0     3ÿ192 Ko
AsLdrSrv.exe                  1528 Services                   0     3ÿ160 Ko
GFNEXSrv.exe                  1624 Services                   0     2ÿ604 Ko
HControl.exe                  1792 Console                    1     8ÿ352 Ko
dwm.exe                       1832 Console                    1    65ÿ500 Ko
spoolsv.exe                   1840 Services                   0    15ÿ604 Ko
wisptis.exe                   1848 Console                    1    11ÿ340 Ko
TabTip.exe                    1888 Console                    1    19ÿ032 Ko
explorer.exe                  1924 Console                    1   164ÿ208 Ko
TabTip32.exe                  1984 Console                    1     3ÿ164 Ko
svchost.exe                   1208 Services                   0    18ÿ748 Ko
svchost.exe                   1284 Services                   0    19ÿ104 Ko
taskhost.exe                  1588 Console                    1    15ÿ956 Ko
NetworkLicenseServer.exe      2188 Services                   0     9ÿ016 Ko
taskeng.exe                   2284 Console                    1     8ÿ268 Ko
ATKOSD2.exe                   2348 Console                    1       616 Ko
QuickGesture64.exe            2364 Console                    1       528 Ko
QuickGesture.exe              2372 Console                    1       636 Ko
BatteryLife.exe               2380 Console                    1       528 Ko
USBChargerPlus.exe            2388 Console                    1     1ÿ328 Ko
sensorsrv.exe                 2404 Console                    1       684 Ko
ACMON.exe                     2412 Console                    1     7ÿ332 Ko
armsvc.exe                    2432 Services                   0     4ÿ100 Ko
AsScrPro.exe                  2444 Console                    1     8ÿ588 Ko
AppleMobileDeviceService.     2592 Services                   0     9ÿ532 Ko
CLMLSvc.exe                   2632 Console                    1     8ÿ240 Ko
RAVCpl64.exe                  2676 Console                    1    11ÿ380 Ko
ACEngSvr.exe                  2720 Console                    1     6ÿ864 Ko
nvtray.exe                    2736 Console                    1    14ÿ636 Ko
GoogleCrashHandler.exe        2852 Services                   0     1ÿ256 Ko
GoogleCrashHandler64.exe      2864 Services                   0       528 Ko
InsOnSrv.exe                  2924 Services                   0     5ÿ676 Ko
devmonsrv.exe                 2960 Services                   0     7ÿ236 Ko
hkcmd.exe                     2996 Console                    1     7ÿ312 Ko
InsOnWMI.exe                  3004 Console                    1    10ÿ820 Ko
rundll32.exe                  3060 Console                    1    10ÿ176 Ko
ETDCtrl.exe                   2112 Console                    1    16ÿ524 Ko
msseces.exe                   1296 Console                    1    16ÿ712 Ko
NvTmru.exe                     480 Console                    1     9ÿ244 Ko
sidebar.exe                    384 Console                    1    72ÿ080 Ko
Kies.exe                      1592 Console                    1    29ÿ848 Ko
mDNSResponder.exe             2620 Services                   0     6ÿ460 Ko
svchost.exe                   3024 Services                   0    12ÿ264 Ko
Skype.exe                     3092 Console                    1   124ÿ548 Ko
EvtEng.exe                    3176 Services                   0    14ÿ440 Ko
installclick.exe              3332 Services                   0     3ÿ252 Ko
HeciServer.exe                3372 Services                   0     5ÿ800 Ko
IntelMeFWService.exe          3476 Services                   0     4ÿ288 Ko
Jhi_service.exe               3524 Services                   0     5ÿ720 Ko
Dropbox.exe                   3536 Console                    1    83ÿ444 Ko
nvstreamsvc.exe               3832 Services                   0     9ÿ372 Ko
ETDCtrlHelper.exe             3988 Console                    1     9ÿ088 Ko
ETDGesture.exe                4048 Console                    1     9ÿ448 Ko
rundll32.exe                  3192 Services                   0     9ÿ128 Ko
daemonu.exe                   3936 Services                   0    30ÿ036 Ko
iusb3mon.exe                  4120 Console                    1     6ÿ392 Ko
DMedia.exe                    4140 Console                    1     5ÿ496 Ko
HControlUser.exe              4152 Console                    1     4ÿ120 Ko
wcourier.exe                  4176 Console                    1    14ÿ908 Ko
PDVD10Serv.exe                4184 Console                    1     6ÿ068 Ko
brs.exe                       4196 Console                    1     4ÿ532 Ko
RegSrvc.exe                   4216 Services                   0     7ÿ328 Ko
iTunesHelper.exe              4272 Console                    1    11ÿ900 Ko
jusched.exe                   4336 Console                    1     7ÿ728 Ko
olycamdetect.exe              4344 Console                    1     8ÿ308 Ko
svchost.exe                   4356 Services                   0     8ÿ864 Ko
WLIDSVC.EXE                   4408 Services                   0    12ÿ368 Ko
KiesTrayAgent.exe             4428 Console                    1    15ÿ632 Ko
ZeroConfigService.exe         4540 Services                   0    14ÿ260 Ko
nvstreamsvc.exe               4628 Console                    1    10ÿ752 Ko
conhost.exe                   4640 Console                    1     4ÿ960 Ko
obexsrv.exe                   4688 Services                   0     7ÿ552 Ko
WLIDSVCM.EXE                  4768 Services                   0     3ÿ692 Ko
InputPersonalization.exe      5552 Console                    1       528 Ko
mediasrv.exe                  4400 Services                   0     8ÿ364 Ko
iPodService.exe               1684 Services                   0     7ÿ376 Ko
SearchIndexer.exe             5608 Services                   0    25ÿ360 Ko
svchost.exe                   3920 Services                   0     8ÿ676 Ko
btplayerctrl.exe              4072 Console                    1     6ÿ292 Ko
BTHSAmpPalService.exe          540 Services                   0     4ÿ888 Ko
BTHSSecurityMgr.exe           3112 Services                   0     9ÿ240 Ko
LMS.exe                       4652 Services                   0     5ÿ848 Ko
wmpnetwk.exe                  5876 Services                   0     8ÿ724 Ko
unsecapp.exe                  4996 Services                   0     5ÿ652 Ko
WmiPrvSE.exe                  6068 Services                   0    11ÿ560 Ko
ATKOSD.exe                    6444 Console                    1     6ÿ260 Ko
KBFiltr.exe                   6884 Console                    1     4ÿ488 Ko
WDC.exe                       6892 Console                    1     5ÿ656 Ko
UNS.exe                       6952 Services                   0    10ÿ592 Ko
installclick-connector.ex     1052 Services                   0     5ÿ828 Ko
conhost.exe                   7792 Services                   0     3ÿ412 Ko
Azureus.exe                   5540 Console                    1   170ÿ688 Ko
vlc.exe                       2712 Console                    1    28ÿ608 Ko
audiodg.exe                   4160 Services                   0    21ÿ220 Ko
taskmgr.exe                   6228 Console                    1    12ÿ776 Ko
chrome.exe                    2916 Console                    1    90ÿ600 Ko
chrome.exe                    6476 Console                    1   120ÿ960 Ko
chrome.exe                    1304 Console                    1    96ÿ640 Ko
chrome.exe                    7084 Console                    1    24ÿ432 Ko
chrome.exe                    2128 Console                    1    68ÿ424 Ko
chrome.exe                    6876 Console                    1   121ÿ312 Ko
cmd.exe                       5168 Console                    1     3ÿ456 Ko
conhost.exe                   1100 Console                    1     6ÿ656 Ko
SearchProtocolHost.exe        7884 Services                   0     8ÿ280 Ko
SearchFilterHost.exe          3560 Services                   0     6ÿ940 Ko
tasklist.exe                  1320 Console                    1     6ÿ820 Ko
WmiPrvSE.exe                  8048 Services                   0     6ÿ624 Ko

Syria456 · Answer

Tu as l'air drôlement infecté ^^ 

Bon, continuons, maintenant on va scanner ton pc et le désinfecter.

________________________________________________________________
Télécharge AdwCleaner: 
https://www.clubic.com/telecharger-fiche430277-adwcleaner.html

Ensuite, lance un examen (environ 5min) et poste moi le rapport dans ta prochaine réponse 
________________________________________________________________

zdexter65 · Answer

# AdwCleaner v3.023 - Rapport créé le 20/04/2014 à 11:26:24
# Mis à jour le 01/04/2014 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Thomas - THOMAS-PC
# Exécuté depuis : C:\Users\Thomas\Downloads\adwcleaner_3-023_fr_430277.exe
# Option : Scanner

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Présent C:\Program Files (x86)\Vuze
Dossier Présent C:\Users\Thomas\AppData\Roaming\pdfforge
Fichier Présent : C:\END

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Présente : HKCU\Software\Conduit
Clé Présente : [x64] HKCU\Software\Conduit
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Clé Présente : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{A0B10EBE-4E51-4CAE-949B-E6B9E7D68CEA}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Clé Présente : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Clé Présente : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Clé Présente : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

***** [ Navigateurs ] *****

-\ Internet Explorer v11.0.9600.16521


-\ Mozilla Firefox v28.0 (fr)

[ Fichier : C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\dappv45b.default-1382740369424\prefs.js ]


-\ Google Chrome v34.0.1847.116

[ Fichier : C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [2438 octets] - [20/04/2014 11:26:24]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2498 octets] ##########

Syria456 · Answer

Bon, maintenant clique sur Nettoyer (dans Adwcleaner)

Tu n'était qu'un peu infecté au niveau du registre.

Tu possède un Asus n'est-ce pas? C'est Asus qui rajoute plein de processus (dont 1 qui était vérolé)

lilidurhone · Answer

Hello

@Syria

Asus qui refourgue des processus infecté Allo quoi


Y a du p2p qui tourne aussi
Et faire un diagnostic serait pas de refus

Alléger le démarrage aussi

zdexter65 · Answer

Alors oui j'ai un Asus, il y avait du P2P qui tournait mais vraiment pas grand chose. Si j'avais voulu le cacher je l'aurais fait.

Ensuite j'ai fait des diagnostics avec MBAM et autres et ça n'a rien trouvé.


J'ai toujours autant de processus...


Que me proposez vous ?

Merci,

Syria456 · Answer

Re, dsl pour cette absence.

Tu télécharge souvent des logiciels en pear-to-pear (P2P)?

En tout cas, au niveau des processus qui tournent, je me suis renseigné et plus de la moitié vienne de windows et de Asus  donc impossible à enlever.

Par contre un ou deux programmes me paraissent inutile.

PS: Tu as un antivirus permanent?

lilidurhone · Answer

Hello

@Syria

Bien sûr qu'on peut les supprimer au démarrage avec Ccleaner

Mais pour cela il faudrait faire un diagnostic avec zhpdiag

Ce que je veux dire on enlève le programme au démarrage de Windows mais il est toujours présent dans la liste des programmes ;)

zdexter65 · Answer

et tu saurais analyser mon zhpdiag ?

Merci,

lilidurhone · Answer

Oui :)

zdexter65 · Answer

~ Rapport de ZHPDiag v2014.4.19.35 - Nicolas Coolman (19/04/2014) ~ Lancé par Thomas (21/04/2014 14:17:53) ~ Adresse du Site Web https://nicolascoolman.webs.com/ ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by user ---\ Navigateurs Internet MSIE: Internet Explorer v11.0.9600.16659 MFIE: Mozilla Firefox 28.0 GCIE: Google Chrome v34.0.1847.116 (Defaut) ---\ Informations sur les produits Windows ~ Langage: Français Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows Operating System - Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 9YQTR Windows License : OK ~ Windows Remaining Initializations Number : 1 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ Logiciels de protection du système Malwarebytes Anti-Malware version 1.75.0.1300 Microsoft Security Client v4.5.0216.0 Windows Defender W7 ---\ Logiciels d'optimisation du système CCleaner v3.23 =>.Piriform Ltd ---\ Logiciels de partage PeerToPeer Vuze v5.3.0.0 =>P2P.Azureus ---\ Surveillance de Logiciels Adobe Flash Player 13 Plugin Adobe Reader XI Java 7 Update 21 ---\ Informations sur le système ~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 6030 MB (56% free) System Restore: Activé (Enable) System drive C: has 550 GB (60%) free of 906 GB ---\ Mode de connexion au système ~ Computer Name: THOMAS-PC ~ User Name: Thomas ~ All Users Names: UpdatusUser, Thomas, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Thomas\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Thomas\AppData\Roaming\ ~ %Desktop% : C:\Users\Thomas\Desktop\ ~ %Favorites% : C:\Users\Thomas\Favorites\ ~ %LocalAppData% : C:\Users\Thomas\AppData\Local\ ~ %StartMenu% : C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 550 Go of 906 Go) D: CD-ROM drive (Free 0 Go of 6 Go) E: CD-ROM drive (Not Inserted) ---\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified ~ Security Center: 46 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.23/02/2012 - 19:55:29.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.13/07/2009 - 20:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.DF79CE9B950C62677D232154E93A81C7] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.28/02/2014 - 22:10:28.) -- C:\Windows\System32\wininet.dll [2334208] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 08:25:32.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 08:27:28.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.27/09/2013 - 20:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.13/07/2009 - 20:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/07/2009 - 18:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 04:19:22.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 04:26:34.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 05:43:44.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.13/07/2009 - 18:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.13/07/2009 - 19:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.23/02/2012 - 20:02:21.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 04:23:22.) -- C:\Windows\system32\Drivers etBT.sys [261632] [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.23/01/2014 - 21:37:55.) -- C:\Windows\system32\Drivers tfs.sys [1684928] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/07/2009 - 19:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 05:52:36.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.13/07/2009 - 19:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 04:21:58.) -- C:\Windows\system32\Drivers dx.sys [119296] [MD5.DF8126BD41180351A093A3AD2FC8903B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.23/02/2012 - 19:35:34.) -- C:\Windows\system32\Drivers\volsnap.sys [296320] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/59 ~ Mes musiques (My Musics) : 1/304 ~ Mes Videos (My Videos) : 1/140 ~ Mes Favoris (My Favorites) : 1/6 ~ Mes Documents (My Documents) : 1/12073 ~ Mon Bureau (My Desktop) : 0/8438 ~ Menu demarrer (Programs) : 1/43 ~ Hidden Files: Scanned in 00mn 14s ---\ Processus lancés [MD5.A3626C6D3F2DC95497F3F61842D7FD89] - (.ASUS - ASLDR Service.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [80512] [PID.1676] [MD5.DBC598E47E7A382E60E2A4745D41FEF9] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.1756] [MD5.20DDC9CED8BC8390138F3187E0FF7411] - (.ASUSTek Computer Inc. - HControl.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe [174720] [PID.2112] [MD5.6B3BA5BB455D7A4FD16B697B8F73858F] - (.ASUSTek Computer Inc. - ASUS FaceLogon Application.) -- C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [473728] [PID.2360] [MD5.5AC92ABC3A201B79A73B1011B078EAE0] - (.ASUSTeK Computer Inc. - ASUS Quick Gesture Exe.) -- C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe [17872] [PID.2368] [MD5.D9AB754613208112B840C75B6762B909] - (.ASUSTek Computer Inc. - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322176] [PID.2380] [MD5.ED759B7FD51466447CC31CBE79B99050] - (.ASUSTek Computer Inc. - ASUS USB Charger Plus.) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [1121448] [PID.2400] [MD5.2DC64A3446C8C6E020E781456B46573D] - (.Microsoft Corporation - Tablet PC Input Panel Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe [10240] [PID.2424] [MD5.B362181ED3771DC03B4141927C80F801] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65432] [PID.2432] [MD5.7E6B107120108B3A15BFECE0DE3201DB] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe [228744] [PID.2824] [MD5.6A122B4F0E5293CACFA8A5F2CBA9B356] - (.ASUS - ASUS InstantOn Program.) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120] [PID.2844] [MD5.64A7C84C0A8C79B22033F92D43919062] - (.ASUS - ACMON.) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [102568] [PID.2864] [MD5.A52EA1D8C2900055323C93DDB252A3DA] - (.Intel Corporation - Bluetooth Device Monitor.) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [1014096] [PID.2884] [MD5.3CF87D0243C7D37FAA1A79C013FD3FB5] - (.ASUS - ASUS InstantOn Program.) -- C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe [309888] [PID.2908] [MD5.37DEB76A2CF005841C4E45DE2B94D84F] - (.ASUS - AsScrPro.) -- C:\Windows\AsScrPro.exe [3058304] [PID.2940] [MD5.98CADC34741738CFC24F5CDFDAA408FA] - (.ASUSTeK - ACEngSvr Module.) -- C:\Windows\SysWOW64\ACEngSvr.exe [162456] [PID.3024] [MD5.35048D8E8A0BF7A797CD5757ACD7EED0] - (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816] [PID.2716] [MD5.88D586E3D6EE17D5C7B8540F72F49148] - (...) -- C:\Program Files (x86)\RIFT Technologies\InstallClick Connector\installclick.exe [149872] [PID.3088] [MD5.896AA2F1D79662B17D5DBBE588E24E30] - (...) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280] [PID.3196] [MD5.3C6630473DD42FFC57D9F5564F533127] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560] [PID.3260] [MD5.1775BDBEF28FD1B0F0AC43F10F483E08] - (.NVIDIA Corporation - NVIDIA NvTmru Application.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028896] [PID.3696] [MD5.801F7511D25FDDB3544BD724A8D775C2] - (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528] [PID.3752] [MD5.EC20BA40219E7267AE1453676F869D0A] - (.Samsung - KiesPDLR.) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168] [PID.3860] [MD5.9D4A0ECBF734E2EECDD5B473A2D705FE] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016] [PID.3968] [MD5.005E474630A7AA05A617C574B702FEED] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2155296] [PID.1380] [MD5.58FC1B36032F03342E4C02813F80DAC1] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Thomas\AppData\Roaming\Dropbox\bin\Dropbox.exe [30714328] [PID.3940] [MD5.392450754E17FF778CBC5B9D20583AD1] - (.Intel Corporation - Bluetooth OBEX Service.) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [1104208] [PID.4156] [MD5.4D1DA8CE5E364D22B4FF00F163194514] - (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608] [PID.4876] [MD5.BC31B27061F27E8968CD0435C038F712] - (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720] [PID.4896] [MD5.5AEBF6FA9805C9101220AA4FB4FA17E7] - (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016] [PID.4904] [MD5.B9BF29CC884BDD499803C3ED1F97FA41] - (.ASUSTeK Computer Inc. - A program that manage wireless devices in s.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321072] [PID.4916] [MD5.99ECAF298145F950B1326656167FBFDF] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336] [PID.4924] [MD5.90B142C67907BCC2A5D2CDFDC008BE8E] - (.cyberlink - brs.) -- C:\Program Files (x86)\CyberLink\Shared files\brs.exe [75048] [PID.4932] [MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.4972] [MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816] [PID.4988] [MD5.DAE282BA9BFD5283A21761F1EE73F6A3] - (.OLYMPUS IMAGING CORP. - OLYMPUS ib Resident Program.) -- C:\Program Files (x86)\OLYMPUS\ib\olycamdetect.exe [96128] [PID.4996] [MD5.6ED26E255607F4BA8812E62E496C35ED] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152] [PID.5052] [MD5.149126216A694E6BA84E92ECA77AAE3B] - (.ASUS - ATKOSD.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe [2488888] [PID.6504] [MD5.091210450CA7CED08F360D9D7FEC5D11] - (.Intel Corporation - Bluetooth Media Service.) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1304912] [PID.5336] [MD5.CA1DC0FFE7DD4D633421B8BC39ED5FFD] - (.Intel Corporation - Bluetooth Media Player Controller.) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe [936272] [PID.6744] [MD5.AA11E1368EEB237DD100BAC6AFFE1C57] - (.ASUS - KBFiltr.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe [113208] [PID.6196] [MD5.4A7C441D99D86704D194E7678873B95D] - (.ASUS - WDC.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe [174648] [PID.6852] [MD5.2B23FAA39D8F949ED5EEE03ECA50BCD5] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [277784] [PID.6564] [MD5.3C5405EF78576E8E4D791EB18F6856A8] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [363800] [PID.6716] [MD5.173F13CDEBF8E067629462E9D6E481CB] - (...) -- C:\Program Files (x86)\RIFT Technologies\InstallClick Connector\installclick-connector.exe [769392] [PID.7008] [MD5.2EBBBFC120593C683796092F2DDA0EFC] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032] [PID.1188] [MD5.A2CB714DCF8F0E134F2429AF673C7C08] - (.Oracle Corporation - Java(TM) Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [506744] [PID.4232] [MD5.A1C1669580EF1D8F54D7EAFF527AB6A9] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8219648] [PID.7196] ~ Processes Running: Scanned in 00mn 01s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Activé) G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] GoogleÂ Wallet v.0.0.6.1 (Activé) G2 - GCE: Preference [User Data\Default] [pafkbggdmjlpgkdkcbjmhmfcdpncadgh] Google Now v.1.2.0.1 (Activé) ---\ Liste des dossiers d'extension Google Chrome ~ Google Lines Browser: 11 Legitimates Filtered in 02mn 07s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\ Autres liens utilisateurs (O4) O4 - GS\Program [Public]: Intel(R) WiDi.lnk . (.Intel Corporation - WiDiApp.) -- C:\Program Files (x86)\Intel Corporation\Intel WiDi\WiDiApp.exe O4 - GS\Program [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\Program [Public]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus O4 - GS\QuickLaunch [UpdatusUser]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\Desktop [UpdatusUser]: ib.lnk . (.OLYMPUS IMAGING CORP. - OLYMPUS ib Main Program.) -- C:\Program Files (x86)\OLYMPUS\ib\ib.exe O4 - GS\Desktop [UpdatusUser]: SopCast.lnk . (.www.sopcast.com - SopCast Main Application.) -- C:\Program Files (x86)\SopCast\SopCast.exe O4 - GS\QuickLaunch [Thomas]: bwin Poker.lnk . (...) -- C:\Programs\bwincom\bwincom.exe O4 - GS\QuickLaunch [Thomas]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch [Thomas]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch [Thomas]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\QuickLaunch [Thomas]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus O4 - GS\TaskBar [Thomas]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar [Thomas]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\TaskBar [Thomas]: Neave Pac-Man.lnk . (.Macromedia, Inc. - Neave Pac-Man.) -- C:\Users\Thomas\Documents\aaathomas\Documents\Fun\pacman.exe O4 - GS\Program [Thomas]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\SystemTools [Thomas]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe ~ Global Startup: 73 Legitimates Filtered in 00mn 02s ---\ Applications lancées au démarrage du système (O4) O4 - GS\Startup [Public]: AsusVibeLauncher.lnk . (.ASUSTeK Computer Inc. - AsusVibe Application.) -- C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe O4 - GS\Startup [Thomas]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) -- C:\Users\Thomas\AppData\Roaming\Dropbox\bin\Dropbox.exe =>.Dropbox O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [BTMTrayAgent] . (.Intel Corporation - Bluetooth Shell Extension.) -- C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.) O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [Nvtmru] . (.NVIDIA Corporation - NVIDIA NvTmru Application.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core vtmru.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O4 - HKCU\..\Run: [Ypsuvi] C:\Users\Thomas\AppData\Local\Temp\Ixal\ypsuvi.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [ASUSWebStorage] . (.ecareme - AsusWebStorage.) -- C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe O4 - HKLM\..\Wow6432Node\Run: [USB3MON] . (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe O4 - HKLM\..\Wow6432Node\Run: [ATKOSD2] . (.ASUSTek Computer Inc. - ATKOSD2.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Wow6432Node\Run: [ATKMEDIA] . (.ASUS - ATK Media.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe O4 - HKLM\..\Wow6432Node\Run: [HControlUser] . (.ASUS - HControlUser.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Wow6432Node\Run: [Wireless Console 3] . (.ASUSTeK Computer Inc. - A program that manage wireless devices in s.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe O4 - HKLM\..\Wow6432Node\Run: [RemoteControl10] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe O4 - HKLM\..\Wow6432Node\Run: [BDRegion] . (.cyberlink - brs.) -- C:\Program Files (x86)\Cyberlink\Shared files\brs.exe O4 - HKLM\..\Wow6432Node\Run: [GrooveMonitor] . (.Microsoft Corporation - GrooveMonitor Utility.) -- C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O4 - HKLM\..\Wow6432Node\Run: [Olympus ib] . (.OLYMPUS IMAGING CORP. - OLYMPUS ib Resident Program.) -- C:\Program Files (x86)\Olympus\ib\olycamdetect.exe O4 - HKLM\..\Wow6432Node\Run: [MDS_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Wow6432Node\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe =>.Samsung Electronics Co O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2928597961-290028026-3132575262-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2928597961-290028026-3132575262-1000\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation ~ Application: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{0689CDA6-D857-40E3-9CED-21052F906597}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{EAD58691-870A-4E05-AB32-0FE652656028}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{0689CDA6-D857-40E3-9CED-21052F906597}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{EAD58691-870A-4E05-AB32-0FE652656028}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{0689CDA6-D857-40E3-9CED-21052F906597}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{EAD58691-870A-4E05-AB32-0FE652656028}: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll ~ Winlogon: Scanned in 00mn 00s ---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 327.) - C:\Windows\system32 vinitx.dll ~ AppInit DLL: Scanned in 00mn 00s ---\ Logiciels installés (O42) O42 - Logiciel: PokerStars - (.PokerStars.) [HKLM][64Bits] -- PokerStars O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr ~ Logic: 29 Legitimates Filtered in 00mn 00s ---\ HKCU & HKLM Software Keys [HKCU\Software\SOG] ~ Key Software: 320 Legitimates Filtered in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 19/04/2014 - 19:48:36 - [] ----D C:\Program Files (x86)\PokerStars O43 - CFD: 25/12/2012 - 13:23:11 - [] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 07/04/2014 - 20:23:51 - [] ----D C:\Users\Thomas\AppData\Roaming\cef-cache O43 - CFD: 15/06/2013 - 05:02:57 - [] ----D C:\Users\Thomas\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1 O43 - CFD: 20/04/2014 - 07:32:26 - [] ----D C:\Users\Thomas\AppData\Local\PokerStars O43 - CFD: 19/04/2014 - 11:11:09 - [] ----D C:\Users\Thomas\AppData\Local\PokerStars.FR O43 - CFD: 12/04/2014 - 01:49:01 - [] ----D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars O43 - CFD: 13/12/2012 - 16:10:32 - [] ----D C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PokerStars.FR ~ 4 Dossier CLSID vide (CLSID Empty Folder) ~ Program Folder: 193 Legitimates Filtered in 00mn 00s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.3194BBAA641D3D2D1D201E6F30082464] - 20/04/2014 - 10:36:59 ---A- . (...) -- C:\log2.txt [115] O44 - LFC:[MD5.E3012BDBB99F7E9DCECEA71EB4DEBC8A] - 21/04/2014 - 09:11:05 ---A- . (...) -- C:\IFRToolLog.txt [2532339] ~ Files: 25 Legitimates Filtered in 00mn 02s ---\ Clé de registre Shell MountPoints2 (MPKS) (O51) O51 - MPSK:{2c2143b4-16e9-11e2-bd4f-685d43626fd2}\AutoRun\command. (.RELOADED - OriginInstaller.) -- D:\Installer.exe ~ Keys: Scanned in 00mn 00s ---\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Legitimates Filtered in 00mn 00s ---\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s ---\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.1C591C1A0CB8ABE215FF66F9A1D8E955] - 09/01/2012 - 07:13:12 ---A- . (.Windows (R) Win 7 DDK provider - Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapt.) -- C:\Windows\System32\Drivers\AmpPal.sys [195584] O58 - SDL:[MD5.CBF4C9263F35A9E80E4AD5CBBAE6049C] - 11/04/2012 - 17:49:00 ---A- . (.Windows (R) Win 7 DDK provider - ASUS Virtual Bus.) -- C:\Windows\System32\Drivers\AsusVBus.sys [35968] O58 - SDL:[MD5.C951F6F1D909E1AAD7160D9EE860A3F1] - 11/04/2012 - 17:48:58 ---A- . (.Windows (R) Win 7 DDK provider - ASUS HID mini driver for Virtual Touch Device.) -- C:\Windows\System32\Drivers\AsusVTouch.sys [16512] O58 - SDL:[MD5.46571ED73AE84469DCA53081D33CF3C8] - 15/10/2012 - 12:36:34 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [283200] O58 - SDL:[MD5.0E5DA5369A0FCAEA12456DD852545184] - 13/07/2009 - 20:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:[MD5.42B4D3D746B3625EF42233C3897E1F68] - 19/02/2012 - 13:16:24 ---A- . (.ELAN Microelectronics Corp. - ETD Kernel Center.) -- C:\Windows\System32\Drivers\ETD.sys [200488] O58 - SDL:[MD5.F2523EF6460FC42405B12248338AB2F0] - 10/06/2009 - 15:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:[MD5.E63EF8C3271D014F14E2469CE75FECB4] - 20/07/2009 - 04:29:40 ---A- . (.Pas de propriétaire - Keyboard Filter Driver.) -- C:\Windows\System32\Drivers\kbfiltr.sys [15416] O58 - SDL:[MD5.E428DFFA96FAD07D8CA3C9082563A225] - 20/08/2013 - 23:31:40 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [103576] O58 - SDL:[MD5.AAF6F247F1DC370C593B4430974EAD9C] - 20/08/2013 - 23:31:40 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [204568] O58 - SDL:[MD5.F3817967ED533D08327DC73BC4D5542A] - 13/07/2009 - 20:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] ~ Drivers: 16 Legitimates Filtered in 00mn 05s ---\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s ---\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {7DE57179-E4F9-4C59-B01D-778D96978736} - (Google) - https://www.google.com/?gws_rd=ssl ~ Keys: Scanned in 00mn 00s ---\ Recherche particulière à la racine du système (SPRF) (O84) [MD5.0D3B680986310AE5540578C0E481C6A0] [SPRF][06/10/2010] (...) -- C:\ProgramData\FullRemove.exe [131984] [MD5.4CB993D7AE09426AE415E40EC9345098] [SPRF][20/04/2014] (...) -- C:\Users\Thomas\AppData\Roaming\sp_data.sys [380] ~ Files: 2 Legitimates Filtered in 00mn 00s ---\ Recherche de clés de registre Tracing (O100) HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Azureus_RASAPI32 =>P2P.Azureus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Azureus_RASMANCS =>P2P.Azureus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32 =>Toolbar.Bing HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASAPI32 =>P2P.µTorrent HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASMANCS =>P2P.µTorrent HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Vuze_Installer_RASAPI32 =>P2P.Azureus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Vuze_Installer_RASMANCS =>P2P.Azureus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooDesktop_RASAPI32 =>Adware.Yontoo HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\YontooDesktop_RASMANCS =>Adware.Yontoo ~ BTK: 189 Legitimates Filtered in 00mn 00s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 06/12/2007 660768 | (ABBYY.Licensing.FineReader.Professional.9.0) . (.ABBYY (BIT Software).) - C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe SS - | Demand 12/04/2014 257712 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SS - | Demand 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Auto 20/04/2011 241648 | (CLKMSVC10_38F51D56) . (.CyberLink.) - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe SS - | Demand 06/03/2012 276248 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe SS - | Auto 23/02/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 23/02/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 02/04/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - | Demand 08/12/2011 273168 | (MyWiFiDHCPDNS) . (...) - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 13/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 21/12/2013 65432 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Auto 03/03/2011 379520 | (AFBAgent) . (.ASUSTeK Computer Inc..) - C:\Windows\system32\FBAgent.exe SR - | Auto 09/01/2012 659968 | (AMPPALR3) . (.Intel Corporation.) - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe SR - | Auto 21/11/2011 80512 | (ASLDRService) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe SR - | Auto 13/04/2012 277120 | (ASUS InstantOn) . (.ASUS.) - C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe SR - | Auto 21/11/2011 96896 | (ATKGFNEXSrv) . (.ASUS.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe SR - | Auto 21/02/2012 1014096 | (Bluetooth Device Monitor) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe SR - | Demand 21/02/2012 1304912 | (Bluetooth Media Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe SR - | Auto 21/02/2012 1104208 | (Bluetooth OBEX Service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe SR - | Auto 11/01/2012 135952 | (BTHSSecurityMgr) . (.Intel(R) Corporation.) - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe SR - | Auto 08/12/2011 618256 | (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe SR - | Auto 06/06/2012 149872 | (InstallClick) . (...) - C:\Program Files (x86)\RIFT Technologies\InstallClick Connector\installclick.exe SR - | Auto 03/02/2012 628448 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe SR - | Auto 20/02/2012 128280 | (Intel(R) ME Service) . (...) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe SR - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 20/02/2012 161560 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe SR - | Auto 28/02/2012 277784 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 11/03/2014 23808 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe SR - | Auto 27/08/2013 14997280 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv vstreamsvc.exe SR - | Auto 12/09/2013 920864 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32 vvsvc.exe SR - | Auto 27/08/2013 2155296 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe SR - | Auto 08/12/2011 148752 | (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe SR - | Auto 28/02/2012 363800 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SR - | Auto 13/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 08/12/2011 594704 | (ZeroConfigService) . (.Intel® Corporation.) - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe ~ Services: Scanned in 00mn 06s ---\ Scan Additionnel (O88) Database Version : 13044 - (19/04/2014) Clés trouvées (Keys found) : 2 Valeurs trouvées (Values found) : 2 Dossiers trouvés (Folders found) : 2 Fichiers trouvés (Files found) : 0 [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ C:\ProgramData\Software =>Adware.Boxore C:\Users\Thomas\AppData\Local\Software =>Adware.Boxore ~ Additionnel Scan: 349179 Items scanned in 00mn 37s ---\ Récapitulatif des détections trouvées sur votre station http://nicolascoolman.webs.com/apps/blog/show/26811836-adware-yontoo =>Adware.Yontoo http://nicolascoolman.webs.com/apps/blog/show/26626977-adware-boxore =>Adware.Boxore ~ MSI: 2 link(s) detected in 00mn 00s ~ 1345 Legitimates filtered by white list End of the scan (494 lines in 04mn 06s)(0)

zdexter65 · Answer

Merci beaucoup !!

lilidurhone · Answer

:)

 * Télécharge sur le bureau RogueKiller

* Quitte tous tes programmes en cours.

* Sous Vista/Seven et windows 8 , clique droit -> lancer en tant qu'administrateur

* Sinon lance simplement RogueKiller.exe

* Patiente pendant le pre-scan, puis clique sur le bouton Scan

* Un rapport RKreport.txt a du se créer sur le bureau, poste-le.

Note : Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois.

zdexter65 · Answer

RogueKiller V8.8.15 [Mar 27 2014] par Adlice Software mail : https://www.adlice.com/contact/ Remontees : https://forum.adlice.com/ Site Web : http://www.surlatoile.org/RogueKiller/ Blog : https://www.adlice.com/ Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version Demarrage : Mode normal Utilisateur : Thomas [Droits d'admin] Mode : Recherche -- Date : 04/21/2014 15:11:57 | ARK || FAK || MBR | ¤¤¤ Processus malicieux : 0 ¤¤¤ ¤¤¤ Entrees de registre : 8 ¤¤¤ [RUN][SUSP PATH] HKCU\[...]\Run : Ypsuvi (C:\Users\Thomas\AppData\Local\Temp\Ixal\ypsuvi.exe [x]) -> TROUVÉ [RUN][SUSP PATH] HKUS\S-1-5-21-2928597961-290028026-3132575262-1001\[...]\Run : Ypsuvi (C:\Users\Thomas\AppData\Local\Temp\Ixal\ypsuvi.exe [x]) -> TROUVÉ [HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ [HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> TROUVÉ [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> TROUVÉ [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ ¤¤¤ Tâches planifiées : 0 ¤¤¤ ¤¤¤ Entrées Startup : 0 ¤¤¤ ¤¤¤ Navigateurs web : 0 ¤¤¤ ¤¤¤ Addons navigateur : 0 ¤¤¤ ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤ ¤¤¤ Ruches Externes: ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ Fichier HOSTS: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) ST1000LM024 HN-M101MBB +++++ --- User --- [MBR] f4ef23d1ee596ef6ea36439ca10da566 [BSP] e871e7c545d356df06f352e18478370a : Empty MBR Code Partition table: 0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 953869 MB User = LL1 ... OK! User = LL2 ... OK! Termine : << RKreport[0]_S_04212014_151157.txt >>

zdexter65 · Answer

Je pensais que le ypsuvi avait été entièrement supprimé par malekal_morte il y a 3 semaines...

lilidurhone · Answer

Fais suppression

zdexter65 · Answer

RogueKiller V8.8.15 [Mar 27 2014] par Adlice Software mail : https://www.adlice.com/contact/ Remontees : https://forum.adlice.com/ Site Web : http://www.surlatoile.org/RogueKiller/ Blog : https://www.adlice.com/ Systeme d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version Demarrage : Mode normal Utilisateur : Thomas [Droits d'admin] Mode : Suppression -- Date : 04/21/2014 15:21:54 | ARK || FAK || MBR | ¤¤¤ Processus malicieux : 0 ¤¤¤ ¤¤¤ Entrees de registre : 8 ¤¤¤ [RUN][SUSP PATH] HKCU\[...]\Run : Ypsuvi (C:\Users\Thomas\AppData\Local\Temp\Ixal\ypsuvi.exe [x]) -> SUPPRIMÉ [RUN][SUSP PATH] HKUS\S-1-5-21-2928597961-290028026-3132575262-1001\[...]\Run : Ypsuvi (C:\Users\Thomas\AppData\Local\Temp\Ixal\ypsuvi.exe [x]) -> [0x2] Le fichier spécifié est introuvable. [HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> REMPLACÉ (2) [HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> REMPLACÉ (1) [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> REMPLACÉ (2) [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> REMPLACÉ (1) [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REMPLACÉ (0) [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REMPLACÉ (0) ¤¤¤ Tâches planifiées : 0 ¤¤¤ ¤¤¤ Entrées Startup : 0 ¤¤¤ ¤¤¤ Navigateurs web : 0 ¤¤¤ ¤¤¤ Addons navigateur : 0 ¤¤¤ ¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤ ¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤ ¤¤¤ Ruches Externes: ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ Fichier HOSTS: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts ¤¤¤ MBR Verif: ¤¤¤ +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) ST1000LM024 HN-M101MBB +++++ --- User --- [MBR] f4ef23d1ee596ef6ea36439ca10da566 [BSP] e871e7c545d356df06f352e18478370a : Empty MBR Code Partition table: 0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 953869 MB User = LL1 ... OK! User = LL2 ... OK! Termine : << RKreport[0]_D_04212014_152154.txt >> RKreport[0]_S_04212014_151157.txt Et maintenant ?

lilidurhone · Answer

Mets à jour java adobe reader et flash player

Trop de processus problème

19 réponses

Discussions similaires

Newsletters