Pages de publicités intempestives sur PC

sibern · le 02 Juil 2010 19:05

Bonjour à tous,

moi aussi j'ai des problèmes d'affichage de pub et j'ai mis votre logiciel pour scruter tout le PC.

Voici le rapport ci-dessous, merci pour la réponse

.

Ah... J'ai oublié de vous dire que j'ai un PC portable Toshiba

.

Code: Tout sélectionner: ======= RAPPORT D'AD-REMOVER 2.0.0.1,C | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par C_XX le 23/06/10 à 19:20 Contact: AdRemover.contact@gmail.com Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 19:55:00 le 02/07/2010, Mode normal Microsoft Windows 7 Édition Familiale Premium (X64) Bernard@BERNARDTOSH (TOSHIBA SATELLITE P500) ============== ACTION(S) ============== (!) -- Fichiers temporaires supprimés. ============== SCAN ADDITIONNEL ============== ** Internet Explorer Version [8.0.7600.16385] ** [HKCU\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: no Local Page: C:\Windows\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\Windows\SysWOW64\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 125 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 17 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 02/07/2010 (6256 Octet(s)) C:\Ad-Report-CLEAN[2].txt - 02/07/2010 (1864 Octet(s)) C:\Ad-Report-SCAN[1].txt - 02/07/2010 (6003 Octet(s)) Fin à: 19:56:29, 02/07/2010 ============== E.O.F ==============

EDIT Skynet : balises [code] ajoutées et topic divisé.

EDIT Skynet bis : texte revu.

Skynet · le 02 Juil 2010 19:12

Bonjour,

inutile de te greffer sur un autre sujet, j'ai divisé ton message.

Et merci de lire les consignes en haut de cette section du forum.

Et comme déjà dit ici : viewtopic.php?f=20&t=51007&p=377234#p377234

Prends ton temps avant de poster !

Ca sent les vacances scolaires...

sibern · le 02 Juil 2010 20:52

ok la prochaine fois je prenderai mon temps donc pour mon probleme de virus vous pouvez pas me repondre meme avec le raport

Skynet · le 02 Juil 2010 20:57

Je ne m'occupe pas de cette section, c'est un choix, sauf en ce qui concerne la modération.

Cependant, suis ce topic : preparer-demande-aide-desinfection-vt-51456.html

Et mets les rapports ici.

sibern · le 02 Juil 2010 21:35

voici le nouveaux raport ci desous

Code: Tout sélectionner: Utilisateur: Bernard (Administrateur) # BERNARDTOSH [TOSHIBA SATELLITE P500] Mis à jour le 01/07/10 par El Desaparecido / C_XX Lancé à 22:29:53 | 02/07/2010 Site Web: http://pagesperso-orange.fr/NosTools/index.html Contact: FindyKill.Contact@gmail.com CPU: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz CPU 2: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz Microsoft Windows 7 Édition Familiale Premium (6.1.7600 64-Bit) # Internet Explorer 8.0.7600.16385 Pare-feu Windows: Activé RAM -> 3956 Mo C:\ (%systemdrive%) -> Disque fixe # 233 Go (189 Go libre(s) - 81%) [WINDOWS] # NTFS D:\ -> Disque fixe # 232 Go (218 Go libre(s) - 94%) [Data] # NTFS E:\ -> CD-ROM ################## | Éléments infectieux | ################## | Registre | ################## | Mountpoints2 | ################## | Vaccin | (!) Cet ordinateur n'est pas vacciné! ################## | E.O.F |

EDIT Skynet : balises [code] ajoutées.

bernard53 · le 03 Juil 2010 09:58

Bonjour à tous.

sibern mets le rapport OTL s.t.p

sibern · le 03 Juil 2010 10:50

voici le raport

Code: Tout sélectionner: ======= RAPPORT D'AD-REMOVER 2.0.0.1,C | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par C_XX le 23/06/10 à 19:20 Contact: AdRemover.contact@gmail.com Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 11:45:33 le 03/07/2010, Mode normal Microsoft Windows 7 Édition Familiale Premium (X64) Bernard@BERNARDTOSH (TOSHIBA SATELLITE P500) ============== RECHERCHE ============== ============== SCAN ADDITIONNEL ============== ** Internet Explorer Version [8.0.7600.16385] ** [HKCU\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: no Local Page: C:\Windows\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\Windows\SysWOW64\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 125 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 18 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 02/07/2010 (6256 Octet(s)) C:\Ad-Report-CLEAN[2].txt - 02/07/2010 (2050 Octet(s)) C:\Ad-Report-SCAN[1].txt - 02/07/2010 (6003 Octet(s)) C:\Ad-Report-SCAN[2].txt - 03/07/2010 (1932 Octet(s)) Fin à: 11:46:46, 03/07/2010 ============== E.O.F ==============

EDIT Skynet : balises [code] ajoutées.

bernard53 · le 03 Juil 2010 12:24

sibern tu as mis le rapport AD-Remover et non celui de OTL

Deuxième étape comme signalé par Skynet sur ce lien

preparer-demande-aide-desinfection-vt-51456.html

sibern · le 03 Juil 2010 19:01

ok bernard merci a toi met je prefere vaciner avec spybot car ces moin risquet bonne soiret a toi

bernard53 · le 03 Juil 2010 19:47

sibern a écrit:ok bernard merci a toi met je prefere vaciner avec spybot car ces moin risquet bonne soiret a toi

Ok pas de soucis

Bonne soirée

sibern · le 03 Juil 2010 19:49

met ces pareiil que spylbot ce logiciel la de vacination?

bernard53 · le 03 Juil 2010 20:02

la vaccination est du même genre, mais cela ne vas en aucun cas résoudre ton soucis de pub si l'intrus est logé ailleurs que sur un périphérique.

sibern · le 03 Juil 2010 20:13

donc je prend celuis de skynet?

Ask to Old Man · le 03 Juil 2010 22:16

sibern a écrit:donc je prend celuis de skynet?

Oui, Rappel: Tu fais exactement ce qui est écrit & bernard en feras l'analyse... ..C'est clair non??

Deuxième étape
Générer un rapport OTL qui permettra aux helpers du forum de vous préparer une procédure de désinfection personnalisée.

Téléchargez >> OTL << sur votre bureau.
Faites un double-clic sur l'icône d'OTL pour le lancer.
Assurez vous d'avoir fermé toutes les applications en court de fonctionnement.
Quand la fenêtre d'OTL apparaît, cochez les cases situées devant "Tous les utilisateurs", "Recherche LOP" et "Recherche Purity".
Faites un copier/coller du contenu de cette citation dans la partie inférieure d'OTL "Personnalisation"

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
Sfloppy.sys
Changer.sys
cdrom.sys
disk.sys
ndis.sys
usbscan.sys
usbprint.sys
tdtcp.sys
tdpipe.sys
swmidi.sys
splitter.sys
rdpwd.sys
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
RASACD.SYS
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

Cliquez sur l'icône "Analyse" (en haut à gauche) .
Laissez le scan aller à son terme sans te servir du PC.
A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et "Extras.Txt"(qui sera réduit dans la barre des taches).
Fermez ces deux rapports et la fenêtre de commande d'OTL.

sibern · le 05 Juil 2010 18:39

voila ask voici le raport et pardon pour mon retard voici le raport ci dessous er ancore merci ask

Code: Tout sélectionner: OTL logfile created on: 05/07/2010 19:34:38 - Run 2 OTL by OldTimer - Version 3.2.7.1 Folder = C:\Users\Bernard\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 61,00% Memory free 8,00 Gb Paging File | 6,00 Gb Available in Paging File | 76,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 232,94 Gb Total Space | 189,90 Gb Free Space | 81,52% Space Free | Partition Type: NTFS Drive D: | 232,43 Gb Total Space | 218,18 Gb Free Space | 93,87% Space Free | Partition Type: NTFS Drive E: | 610,97 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: BERNARDTOSH Current User Name: Bernard Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Include 64bit Scans Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Standard [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - File not found -- C:\Windows\SysWow64\DRIVERS\o2flash.exe PRC - File not found -- C:\Windows\SysWow64\nvvsvc.exe PRC - [2010/07/05 19:22:38 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Bernard\Desktop\OTL.exe PRC - [2010/03/16 23:22:26 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Users\Bernard\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe PRC - [2010/02/16 13:11:40 | 000,696,320 | ---- | M] () -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe PRC - [2010/01/15 14:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe PRC - [2009/10/28 12:15:10 | 000,304,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe PRC - [2009/10/02 14:26:12 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2009/09/30 21:01:32 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2009/09/30 21:01:30 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2009/09/05 17:29:50 | 000,319,488 | ---- | M] (Orange) -- C:\Program Files (x86)\Orange\Media Player\Media Player.exe PRC - [2009/07/29 17:42:06 | 000,705,880 | ---- | M] (TOSHIBA Corporation.) -- C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe PRC - [2009/07/28 21:26:42 | 000,062,848 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe PRC - [2009/07/26 17:44:52 | 003,883,856 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe PRC - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe PRC - [2009/02/06 18:07:48 | 000,027,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe PRC - [2007/01/04 20:48:50 | 000,112,152 | ---- | M] (InterVideo) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010/07/05 19:22:38 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Bernard\Desktop\OTL.exe MOD - [2009/07/14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009/07/14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010/03/25 23:48:42 | 000,017,424 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Essentials\MsMpEng.exe -- (MsMpSvc) SRV:[b]64bit:[/b] - [2010/02/05 17:53:08 | 000,824,688 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe -- (TPCHSrv) SRV:[b]64bit:[/b] - [2010/02/05 17:44:48 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service) SRV:[b]64bit:[/b] - [2009/11/05 23:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv) SRV:[b]64bit:[/b] - [2009/10/21 10:30:36 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv) SRV:[b]64bit:[/b] - [2009/09/28 15:46:02 | 000,251,760 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\TECO\TecoService.exe -- (TOSHIBA eco Utility Service) SRV:[b]64bit:[/b] - [2009/07/28 15:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv) SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2007/02/12 17:43:00 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Running] -- C:\Windows\SysNative\drivers\o2flash.exe -- (O2FLASH) SRV - [2010/06/03 19:48:28 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2010/01/15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009/10/27 21:12:14 | 000,252,784 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService) SRV - [2009/10/15 17:49:56 | 000,116,104 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService) Notebook Performance Tuning Service (TEMPRO) SRV - [2009/10/06 10:21:50 | 000,051,512 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo) SRV - [2009/10/02 14:26:12 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R) SRV - [2009/09/30 21:01:32 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009/09/30 21:01:30 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009/03/10 19:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service) SRV - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2007/09/25 20:27:50 | 000,065,536 | ---- | M] (France Telecom SA) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe -- (FTRTSVC) SRV - [2007/01/04 20:48:50 | 000,112,152 | ---- | M] (InterVideo) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\PCASp50a64.sys -- (PCASp50a64) DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\PCAMp50a64.sys -- (PCAMp50a64) DRV:[b]64bit:[/b] - [2009/11/13 18:47:36 | 000,067,072 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2009/11/04 03:58:42 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (HID) DRV:[b]64bit:[/b] - [2009/11/03 10:21:18 | 000,074,016 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\o2mdgx64.sys -- (O2MDGRDR) DRV:[b]64bit:[/b] - [2009/10/23 14:27:12 | 000,307,760 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009/10/16 15:56:40 | 000,701,952 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2009/10/02 14:33:48 | 000,946,688 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se) DRV:[b]64bit:[/b] - [2009/10/02 13:58:58 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009/09/17 13:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009/08/31 16:36:18 | 000,006,656 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidshim.sys -- (hidshim) DRV:[b]64bit:[/b] - [2009/08/31 16:36:16 | 000,026,624 | ---- | M] (Nuvoton Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nuvotonhidcir.sys -- (nuvotonhidcir) DRV:[b]64bit:[/b] - [2009/08/31 13:42:04 | 000,048,128 | ---- | M] (Nuvoton Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nuvotoncir.sys -- (nuvotoncir) DRV:[b]64bit:[/b] - [2009/08/21 14:24:04 | 000,084,512 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2009/08/18 19:41:06 | 000,049,568 | ---- | M] (O2Micro ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\o2sdgx64.sys -- (O2SDGRDR) DRV:[b]64bit:[/b] - [2009/07/30 20:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst) DRV:[b]64bit:[/b] - [2009/07/24 16:57:08 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64) DRV:[b]64bit:[/b] - [2009/07/14 17:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ) DRV:[b]64bit:[/b] - [2009/07/14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009/07/14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009/07/14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009/06/29 17:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm) DRV:[b]64bit:[/b] - [2009/06/29 11:25:22 | 000,034,880 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv) DRV:[b]64bit:[/b] - [2009/06/22 18:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect) DRV:[b]64bit:[/b] - [2009/06/19 20:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL) DRV:[b]64bit:[/b] - [2009/06/15 14:58:50 | 000,012,800 | ---- | M] (TOSHIBA) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\QIOMem.sys -- (QIOMem) DRV:[b]64bit:[/b] - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009/05/09 02:14:20 | 000,015,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr) DRV:[b]64bit:[/b] - [2007/04/16 21:51:50 | 000,014,112 | R--- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3590599004-1073918711-644637972-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ IE - HKU\S-1-5-21-3590599004-1073918711-644637972-1000\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files (x86)\Orange\SearchURLHook\SearchPageURL.dll () IE - HKU\S-1-5-21-3590599004-1073918711-644637972-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\Extensions\\freetvradio@spointer.com: C:\Program Files (x86)\freeTVRadio\spointer\extensions\freetvradio@spointer.com [2010/06/18 20:44:12 | 000,000,000 | ---D | M] O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Interest recogniser for Freetvradio (powered by Spointer)) - {4C4AD71D-52E1-4402-9E5B-CBFC295EC9BA} - C:\Program Files (x86)\freeTVRadio\spointer\extensions\freetvradio_air_ie.dll (Freetvradio) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (OfferBox) - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files (x86)\OfferBox\OfferBoxBHO.dll (Secure Digital Services Limited) O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe (TOSHIBA Corporation.) O4:[b]64bit:[/b] - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [MSSE] C:\Program Files\Microsoft Security Essentials\msseces.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe () O4:[b]64bit:[/b] - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [ThpSrv] C:\Windows\SysNative\thpsrv.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Toshiba TEMPRO] C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (Toshiba Europe GmbH) O4:[b]64bit:[/b] - HKLM..\Run: [TosNC] C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [TosReelTimeMonitor] C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [TosWaitSrv] C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE (TOSHIBA Corporation) O4 - HKU\.DEFAULT..\Run: [OrangePlayer] C:\Program Files (x86)\Orange\Media Player\Media Player.exe (Orange) O4 - HKU\.DEFAULT..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe (TOSHIBA) O4 - HKU\S-1-5-18..\Run: [OrangePlayer] C:\Program Files (x86)\Orange\Media Player\Media Player.exe (Orange) O4 - HKU\S-1-5-18..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe (TOSHIBA) O4 - HKU\S-1-5-19..\Run: [OrangePlayer] C:\Program Files (x86)\Orange\Media Player\Media Player.exe (Orange) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [OrangePlayer] C:\Program Files (x86)\Orange\Media Player\Media Player.exe (Orange) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3590599004-1073918711-644637972-1000..\Run: [MailNotifier] C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe () O4 - HKU\S-1-5-21-3590599004-1073918711-644637972-1000..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3590599004-1073918711-644637972-1000..\Run: [OrangePlayer] C:\Program Files (x86)\Orange\Media Player\Media Player.exe (Orange) O4 - HKU\S-1-5-21-3590599004-1073918711-644637972-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found O4 - Startup: C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Notification de cadeaux MSN.lnk = C:\Users\Bernard\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe (Microsoft Corporation) O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-3590599004-1073918711-644637972-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O7 - HKU\S-1-5-21-3590599004-1073918711-644637972-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O9 - Extra Button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {5A779DC0-837B-4590-AC42-C7C0847478C5} http://logicielsgratuits.orange.fr/download_service/Install/OrangeInstaller.cab (OrangeInstaller_ModuleIE Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {99FE5072-78AA-4FEE-89BA-69A5FA55343F} http://download.microsoft.com/download/B/3/A/B3A2EA73-793D-4ABE-992D-C81140384044/igdtoolx.cab (IGDTester Class) O16 - DPF: {9DF1C00D-8426-4337-972C-DC042D19A916} http://webtv.guidetv.orange.fr/resources/OCS_9418.cab (FTMediaPlayer Class) O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab (NsvPlayX Control) O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab (Java Plug-in 1.6.0_14) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab (IWinAmpActiveX Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/07/05 19:22:35 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Bernard\Desktop\OTL.exe [2010/07/03 21:19:07 | 000,000,000 | ---D | C] -- C:\Users\Bernard\AppData\Local\Conexant [2010/07/02 22:29:23 | 000,000,000 | ---D | C] -- C:\UsbFix [2010/07/02 19:47:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ad-Remover [2010/06/24 20:49:15 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010/06/24 20:49:15 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010/06/24 20:49:14 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010/06/24 20:49:14 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010/06/24 20:49:14 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010/06/24 20:49:14 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010/06/24 20:49:14 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010/06/24 20:49:14 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010/06/24 20:28:14 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2010/06/24 20:28:03 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010/06/24 20:28:03 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010/06/24 20:28:02 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010/06/24 20:28:02 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010/06/24 20:28:02 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010/06/24 20:28:02 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010/06/24 20:28:01 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010/06/21 17:38:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games [2010/06/21 17:24:04 | 000,565,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSVCP50.DLL [2010/06/21 17:23:36 | 000,308,224 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUn040c.exe [2010/06/18 20:44:24 | 000,000,000 | ---D | C] -- C:\Users\Bernard\AppData\Local\freetvradio Air [2010/06/18 20:44:20 | 000,000,000 | ---D | C] -- C:\Users\Bernard\AppData\Roaming\freeTVRadio [2010/06/18 20:44:13 | 000,000,000 | ---D | C] -- C:\Users\Bernard\AppData\Roaming\FissaSearch [2010/06/18 20:44:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\freeTVRadio [2010/06/18 20:43:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OfferBox [2010/06/11 21:27:46 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010/06/11 21:27:46 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010/06/11 21:27:46 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010/06/11 21:27:46 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010/06/07 17:30:28 | 000,000,000 | ---D | C] -- C:\Users\Bernard\AppData\Local\Apps [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/07/05 19:35:06 | 006,029,312 | -HS- | M] () -- C:\Users\Bernard\ntuser.dat [2010/07/05 19:22:38 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Bernard\Desktop\OTL.exe [2010/07/05 19:22:20 | 000,016,304 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010/07/05 19:22:20 | 000,016,304 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010/07/05 19:15:15 | 000,001,064 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2010/07/05 19:14:44 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010/07/05 19:14:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010/07/05 19:14:26 | 3111,493,632 | -HS- | M] () -- C:\hiberfil.sys [2010/07/03 22:31:43 | 004,198,003 | -H-- | M] () -- C:\Users\Bernard\AppData\Local\IconCache.db [2010/07/03 22:27:38 | 000,000,000 | ---- | M] () -- C:\Users\Bernard\AppData\Roaming\FileOut.cns [2010/07/03 22:27:38 | 000,000,000 | ---- | M] () -- C:\Users\Bernard\AppData\Roaming\FileIn.cns [2010/07/03 21:47:00 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2010/07/03 20:25:21 | 004,847,104 | ---- | M] () -- C:\Users\Bernard\Desktop\cfakepathnatureisafoxxylady-091013185416-phpapp01.pps [2010/07/02 20:06:33 | 000,411,730 | ---- | M] () -- C:\Users\Bernard\Desktop\sos virus pages de publicités intempestives sur PC.mht [2010/07/02 19:47:53 | 000,001,898 | ---- | M] () -- C:\Users\Bernard\Desktop\AD-R.lnk [2010/07/02 19:39:59 | 001,053,428 | ---- | M] () -- C:\Users\Bernard\Desktop\Les vrais faux logiciels Antivirus • page 10.mht [2010/06/30 18:55:43 | 000,001,048 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Security Essentials.lnk [2010/06/23 20:12:54 | 004,289,024 | ---- | M] () -- C:\Users\Bernard\Desktop\2010-chats.pps [2010/06/23 20:12:41 | 003,568,640 | ---- | M] () -- C:\Users\Bernard\Desktop\2010 - Made in Marseille (FILEminimizer).pps [2010/06/23 20:12:24 | 004,191,744 | ---- | M] () -- C:\Users\Bernard\Desktop\DANUBE.pps [2010/06/22 19:28:50 | 001,524,562 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010/06/22 19:28:50 | 000,695,004 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat [2010/06/22 19:28:50 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010/06/22 19:28:50 | 000,127,684 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat [2010/06/22 19:28:50 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010/06/21 17:59:36 | 000,094,424 | ---- | M] () -- C:\Users\Bernard\AppData\Local\GDIPFONTCACHEV1.DAT [2010/06/21 17:58:51 | 000,374,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010/06/21 17:56:42 | 000,002,185 | ---- | M] () -- C:\Users\Public\Desktop\Train Simulator.lnk [2010/06/18 20:44:09 | 000,001,918 | ---- | M] () -- C:\Users\Public\Desktop\freeTVRadio.lnk [2010/06/14 22:30:20 | 000,002,246 | ---- | M] () -- C:\Users\Bernard\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2010/06/14 22:30:03 | 000,002,291 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/07/03 20:25:20 | 004,847,104 | ---- | C] () -- C:\Users\Bernard\Desktop\cfakepathnatureisafoxxylady-091013185416-phpapp01.pps [2010/07/02 20:06:30 | 000,411,730 | ---- | C] () -- C:\Users\Bernard\Desktop\sos virus pages de publicités intempestives sur PC.mht [2010/07/02 19:47:53 | 000,001,898 | ---- | C] () -- C:\Users\Bernard\Desktop\AD-R.lnk [2010/07/02 19:39:56 | 001,053,428 | ---- | C] () -- C:\Users\Bernard\Desktop\Les vrais faux logiciels Antivirus • page 10.mht [2010/06/23 20:12:52 | 004,289,024 | ---- | C] () -- C:\Users\Bernard\Desktop\2010-chats.pps [2010/06/23 20:12:39 | 003,568,640 | ---- | C] () -- C:\Users\Bernard\Desktop\2010 - Made in Marseille (FILEminimizer).pps [2010/06/23 20:12:24 | 004,191,744 | ---- | C] () -- C:\Users\Bernard\Desktop\DANUBE.pps [2010/06/21 18:01:18 | 000,000,000 | ---- | C] () -- C:\Users\Bernard\AppData\Roaming\FileOut.cns [2010/06/21 18:01:18 | 000,000,000 | ---- | C] () -- C:\Users\Bernard\AppData\Roaming\FileIn.cns [2010/06/21 17:56:42 | 000,002,185 | ---- | C] () -- C:\Users\Public\Desktop\Train Simulator.lnk [2010/06/18 20:44:09 | 000,001,918 | ---- | C] () -- C:\Users\Public\Desktop\freeTVRadio.lnk [2010/06/14 22:30:20 | 000,002,246 | ---- | C] () -- C:\Users\Bernard\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2010/06/14 22:30:03 | 000,002,291 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk [2010/01/24 14:01:54 | 000,000,000 | ---- | C] () -- C:\Windows\NDSTray.INI [2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [color=#E56717]========== LOP Check ==========[/color] [2010/04/02 21:19:19 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Anuman Interactive [2010/04/29 21:43:41 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Artogon [2010/05/04 21:44:00 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Best-Softs [2010/04/02 20:40:18 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\BlamGames [2010/04/10 19:20:24 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Farm Mania [2010/06/18 20:44:13 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\FissaSearch [2010/03/07 21:21:17 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\FloodLightGames [2010/06/18 20:48:05 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\freeTVRadio [2010/05/11 17:58:37 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\GetRightToGo [2010/05/12 19:08:39 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Media Player [2010/05/12 18:51:40 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Meridian93 [2010/06/18 20:43:57 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\OfferBox [2010/03/10 18:08:15 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\PlayFirst [2010/03/24 21:22:32 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\ShinyTales [2010/05/14 17:48:39 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Template [2010/03/20 17:55:18 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Toshiba [2010/03/06 20:17:48 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Ulead Systems [2010/03/30 21:07:41 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Voxmobili [2010/03/07 21:17:55 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\WildTangent [2010/04/24 16:53:38 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\WinBatch [2010/03/06 19:26:20 | 000,000,000 | ---D | M] -- C:\Users\Bernard\AppData\Roaming\Windows Live Writer [2010/04/14 20:14:56 | 000,032,506 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 151 bytes -> C:\ProgramData\TEMP:3FBB88CF @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:3965C4E8 < End of report >

EDIT Skynet : balises [code] ajoutées.

Pages de publicités intempestives sur PC

Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Re: Pages de publicités intempestives sur PC

Sujets similaires

Qui est en ligne