API tools faq
paste
Guest User

Untitled

a guest
Jan 8th, 2012
382
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 29.00 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 12-01-07.03 - ASUS 2012-01-08 14:11:48.3.4 - x64
  2. Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.2.1036.18.3949.2498 [GMT -5:00]
  3. Lancé depuis: c:\users\ASUS\Downloads\ComboFix.exe
  4. Commutateurs utilisés :: c:\users\ASUS\Desktop\CFscript.txt
  5. AV: Kaspersky Internet Security *Disabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
  6. FW: Kaspersky Internet Security *Disabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
  7. SP: Kaspersky Internet Security *Disabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
  8. SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  9. .
  10. FILE ::
  11. "c:\users\ASUS\AppData\Local\Temp\005DF8.tmp"
  12. .
  13. .
  14. (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  15. .
  16. .
  17. .
  18. ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
  19. .
  20. .
  21. -------\Legacy_X6VA005
  22. -------\Service_X6va005
  23. .
  24. .
  25. ((((((((((((((((((((((((((((( Fichiers créés du 2011-12-08 au 2012-01-08 ))))))))))))))))))))))))))))))))))))
  26. .
  27. .
  28. 2012-01-08 19:20 . 2012-01-08 19:20 -------- d-----w- c:\users\Public\AppData\Local\temp
  29. 2012-01-08 19:20 . 2012-01-08 19:20 -------- d-----w- c:\users\Default\AppData\Local\temp
  30. 2012-01-07 04:25 . 2012-01-07 04:25 -------- d-----w- c:\program files (x86)\Lionhead Studios
  31. 2012-01-07 00:50 . 2011-12-19 18:45 224048 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
  32. 2012-01-07 00:50 . 2011-12-19 18:45 130864 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
  33. 2012-01-06 19:34 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D54D740D-6952-48A4-A75E-045F93D2E99C}\mpengine.dll
  34. 2012-01-03 22:43 . 2012-01-03 22:43 -------- d-----w- c:\program files (x86)\Microsoft Games
  35. 2011-12-30 00:25 . 2011-12-30 00:25 -------- d-----w- c:\users\ASUS\AppData\Local\Nokia
  36. 2011-12-30 00:07 . 2011-12-30 00:36 -------- d-----w- C:\QtSDK
  37. 2011-12-29 22:50 . 2011-12-30 02:55 -------- d-----w- c:\users\ASUS\.designer
  38. 2011-12-29 22:41 . 2011-12-30 04:20 -------- d-----w- c:\users\ASUS\AppData\Roaming\Nokia
  39. 2011-12-29 19:57 . 2011-12-29 19:57 -------- d-----w- c:\program files (x86)\Common Files\Java
  40. 2011-12-24 04:09 . 2011-12-24 04:09 -------- d-----w- C:\Games
  41. 2011-12-24 04:07 . 2011-12-24 04:07 -------- d-----w- c:\users\ASUS\AppData\Local\Black_Tree_Gaming
  42. 2011-12-24 04:07 . 2011-12-24 04:07 -------- d-----w- c:\program files\Nexus Mod Manager
  43. 2011-12-22 00:51 . 2011-12-23 02:39 43992 ----a-w- c:\program files (x86)\Mozilla Firefox\mozutils.dll
  44. 2011-12-22 00:51 . 2011-12-22 00:51 626688 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr80.dll
  45. 2011-12-22 00:51 . 2011-12-22 00:51 548864 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp80.dll
  46. 2011-12-22 00:51 . 2011-12-22 00:51 479232 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcm80.dll
  47. 2011-12-19 18:45 . 2011-12-19 18:45 146736 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
  48. 2011-12-19 18:43 . 2011-12-19 18:43 320816 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
  49. 2011-12-19 18:43 . 2011-12-19 18:43 165680 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
  50. 2011-12-19 03:38 . 2011-12-19 03:38 -------- d-----w- c:\users\ASUS\AppData\Roaming\AnvSoft
  51. 2011-12-19 02:32 . 2012-01-03 03:53 -------- d-----w- C:\UsbFix
  52. 2011-12-17 06:57 . 2011-12-17 06:57 -------- d-----w- c:\programdata\ATI
  53. 2011-12-17 06:57 . 2011-12-17 06:57 -------- d-----w- c:\program files (x86)\AMD APP
  54. 2011-12-17 06:57 . 2011-12-17 06:57 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
  55. 2011-12-17 06:34 . 2012-01-03 03:53 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
  56. 2011-12-17 06:24 . 2011-12-17 06:24 750488 ----a-w- c:\windows\system32\npdeployJava1.dll
  57. 2011-12-17 02:02 . 2011-12-17 02:02 -------- d-----w- c:\program files (x86)\Wing IDE 4.1
  58. 2011-12-15 21:33 . 2011-12-15 21:33 -------- d-----w- c:\program files\iPod
  59. 2011-12-15 21:33 . 2011-12-15 21:34 -------- d-----w- c:\program files\iTunes
  60. 2011-12-14 22:48 . 2011-11-24 04:52 3145216 ----a-w- c:\windows\system32\win32k.sys
  61. 2011-12-14 22:48 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
  62. 2011-12-14 22:48 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
  63. 2011-12-14 22:48 . 2011-10-26 05:21 43520 ----a-w- c:\windows\system32\csrsrv.dll
  64. 2011-12-14 22:48 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
  65. 2011-12-14 22:48 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
  66. 2011-12-13 03:04 . 2011-12-13 03:04 -------- d-----w- c:\users\ASUS\AppData\Roaming\No Company Name
  67. 2011-12-10 18:06 . 2011-12-10 18:06 -------- d-----w- c:\program files\NTCore
  68. 2011-12-10 16:32 . 2011-12-10 16:46 -------- d-----w- c:\program files (x86)\Intelore
  69. 2011-12-10 05:11 . 2011-12-10 05:11 -------- d-----w- c:\users\ASUS\AppData\Roaming\Mozart 11
  70. 2011-12-10 03:53 . 2011-12-10 04:47 -------- d-----w- c:\users\ASUS\AppData\Roaming\Synthesia
  71. 2011-12-10 03:52 . 2011-12-10 03:53 -------- d-----w- c:\program files (x86)\Synthesia
  72. 2011-12-09 23:15 . 2011-12-15 00:15 -------- d-----w- c:\users\ASUS\AppData\Roaming\Download Manager
  73. 2011-12-09 23:08 . 2012-01-06 22:58 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
  74. 2011-12-09 23:00 . 2011-12-09 23:00 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
  75. 2011-12-09 22:55 . 2011-12-21 22:02 -------- d-----w- c:\program files\Common Files\Adobe
  76. .
  77. .
  78. .
  79. (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  80. .
  81. 2011-12-29 19:56 . 2011-06-13 03:13 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
  82. 2011-12-17 06:24 . 2011-06-10 01:24 660368 ----a-w- c:\windows\system32\deployJava1.dll
  83. 2011-12-07 22:51 . 2011-10-30 16:21 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
  84. 2011-12-04 16:28 . 2011-10-30 16:21 573776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
  85. 2011-11-25 21:28 . 2011-10-10 00:39 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
  86. 2011-11-25 21:28 . 2011-10-10 00:39 573760 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
  87. 2011-11-22 00:04 . 2011-11-22 00:04 53248 ----a-r- c:\users\ASUS\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
  88. 2011-11-22 00:04 . 2011-07-15 07:21 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
  89. 2011-11-17 23:54 . 2011-11-17 21:04 279616 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
  90. 2011-11-17 22:11 . 2011-12-07 22:02 145424 ----a-w- c:\windows\system32\drivers\JME.sys
  91. 2011-11-14 21:18 . 2011-07-07 16:35 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  92. 2011-11-10 03:45 . 2011-11-10 03:45 10567680 ----a-w- c:\windows\system32\drivers\atikmdag.sys
  93. 2011-11-10 03:39 . 2011-11-10 03:39 69632 ----a-w- c:\windows\system32\OpenVideo64.dll
  94. 2011-11-10 03:39 . 2011-11-10 03:39 59904 ----a-w- c:\windows\SysWow64\OpenVideo.dll
  95. 2011-11-10 03:39 . 2011-11-10 03:39 61952 ----a-w- c:\windows\system32\OVDecode64.dll
  96. 2011-11-10 03:39 . 2011-11-10 03:39 54784 ----a-w- c:\windows\SysWow64\OVDecode.dll
  97. 2011-11-10 03:39 . 2011-11-10 03:39 17442304 ----a-w- c:\windows\system32\amdocl64.dll
  98. 2011-11-10 03:38 . 2011-11-10 03:38 14375936 ----a-w- c:\windows\SysWow64\amdocl.dll
  99. 2011-11-10 03:37 . 2011-11-10 03:37 51200 ----a-w- c:\windows\system32\OpenCL.dll
  100. 2011-11-10 03:37 . 2011-11-10 03:37 44032 ----a-w- c:\windows\SysWow64\OpenCL.dll
  101. 2011-11-10 03:20 . 2011-11-10 03:20 25218048 ----a-w- c:\windows\system32\atio6axx.dll
  102. 2011-11-10 03:17 . 2011-11-10 03:17 159744 ----a-w- c:\windows\system32\atiapfxx.exe
  103. 2011-11-10 03:16 . 2011-04-20 02:09 774656 ----a-w- c:\windows\SysWow64\aticfx32.dll
  104. 2011-11-10 03:15 . 2011-04-20 02:07 927232 ----a-w- c:\windows\system32\aticfx64.dll
  105. 2011-11-10 03:12 . 2011-07-28 21:36 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll
  106. 2011-11-10 03:12 . 2011-11-10 03:12 516608 ----a-w- c:\windows\system32\atieclxx.exe
  107. 2011-11-10 03:11 . 2011-11-10 03:11 204288 ----a-w- c:\windows\system32\atiesrxx.exe
  108. 2011-11-10 03:10 . 2011-11-10 03:10 120320 ----a-w- c:\windows\system32\atitmm64.dll
  109. 2011-11-10 03:09 . 2011-11-10 03:09 423424 ----a-w- c:\windows\system32\atipdl64.dll
  110. 2011-11-10 03:09 . 2011-11-10 03:09 360448 ----a-w- c:\windows\SysWow64\atipdlxx.dll
  111. 2011-11-10 03:09 . 2011-11-10 03:09 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
  112. 2011-11-10 03:09 . 2011-11-10 03:09 21504 ----a-w- c:\windows\system32\atimuixx.dll
  113. 2011-11-10 03:09 . 2011-11-10 03:09 59392 ----a-w- c:\windows\system32\atiedu64.dll
  114. 2011-11-10 03:09 . 2011-11-10 03:09 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
  115. 2011-11-10 03:06 . 2011-04-20 01:59 6077952 ----a-w- c:\windows\SysWow64\atidxx32.dll
  116. 2011-11-10 02:58 . 2011-11-10 02:58 18996224 ----a-w- c:\windows\SysWow64\atioglxx.dll
  117. 2011-11-10 02:51 . 2009-12-17 09:05 7405056 ----a-w- c:\windows\system32\atidxx64.dll
  118. 2011-11-10 02:40 . 2011-11-10 02:40 1113088 ----a-w- c:\windows\system32\atiumd6v.dll
  119. 2011-11-10 02:40 . 2011-11-10 02:40 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll
  120. 2011-11-10 02:40 . 2011-07-28 21:11 4061696 ----a-w- c:\windows\system32\atiumd6a.dll
  121. 2011-11-10 02:34 . 2011-11-10 02:34 51200 ----a-w- c:\windows\system32\aticalrt64.dll
  122. 2011-11-10 02:34 . 2011-11-10 02:34 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
  123. 2011-11-10 02:34 . 2011-11-10 02:34 44544 ----a-w- c:\windows\system32\aticalcl64.dll
  124. 2011-11-10 02:34 . 2011-11-10 02:34 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
  125. 2011-11-10 02:34 . 2011-11-10 02:34 13552640 ----a-w- c:\windows\system32\aticaldd64.dll
  126. 2011-11-10 02:33 . 2011-11-10 02:33 5852672 ----a-w- c:\windows\SysWow64\atiumdag.dll
  127. 2011-11-10 02:29 . 2011-11-10 02:29 11300864 ----a-w- c:\windows\SysWow64\aticaldd.dll
  128. 2011-11-10 02:29 . 2011-11-10 02:29 4200960 ----a-w- c:\windows\SysWow64\atiumdva.dll
  129. 2011-11-10 02:24 . 2011-07-28 21:02 7439360 ----a-w- c:\windows\system32\atiumd64.dll
  130. 2011-11-10 02:18 . 2011-04-20 01:27 58880 ----a-w- c:\windows\system32\coinst.dll
  131. 2011-11-10 02:13 . 2011-07-28 20:54 494592 ----a-w- c:\windows\system32\atiadlxx.dll
  132. 2011-11-10 02:13 . 2011-11-10 02:13 348160 ----a-w- c:\windows\SysWow64\atiadlxy.dll
  133. 2011-11-10 02:13 . 2011-11-10 02:13 17408 ----a-w- c:\windows\system32\atig6pxx.dll
  134. 2011-11-10 02:13 . 2011-11-10 02:13 14336 ----a-w- c:\windows\SysWow64\atiglpxx.dll
  135. 2011-11-10 02:13 . 2011-11-10 02:13 14336 ----a-w- c:\windows\system32\atiglpxx.dll
  136. 2011-11-10 02:13 . 2011-11-10 02:13 39936 ----a-w- c:\windows\system32\atig6txx.dll
  137. 2011-11-10 02:12 . 2011-11-10 02:12 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
  138. 2011-11-10 02:12 . 2011-11-10 02:12 325632 ----a-w- c:\windows\system32\drivers\atikmpag.sys
  139. 2011-11-10 02:11 . 2011-04-20 01:21 41984 ----a-w- c:\windows\system32\atiuxp64.dll
  140. 2011-11-10 02:11 . 2011-04-20 01:21 32256 ----a-w- c:\windows\SysWow64\atiuxpag.dll
  141. 2011-11-10 02:11 . 2011-07-28 20:53 39424 ----a-w- c:\windows\system32\atiu9p64.dll
  142. 2011-11-10 02:11 . 2011-11-10 02:11 54784 ----a-w- c:\windows\system32\atimpc64.dll
  143. 2011-11-10 02:11 . 2011-11-10 02:11 54784 ----a-w- c:\windows\system32\amdpcom64.dll
  144. 2011-11-10 02:11 . 2011-07-08 02:45 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
  145. 2011-11-10 02:11 . 2011-11-10 02:11 53760 ----a-w- c:\windows\SysWow64\atimpc32.dll
  146. 2011-11-10 02:11 . 2011-11-10 02:11 53760 ----a-w- c:\windows\SysWow64\amdpcom32.dll
  147. 2011-11-10 02:10 . 2011-11-10 02:10 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
  148. 2011-10-26 02:21 . 2011-10-26 02:21 66560 ----a-w- c:\windows\system32\OVDecoder64.dll
  149. 2011-10-26 02:21 . 2011-10-26 02:21 56832 ----a-w- c:\windows\SysWow64\OVDecoder.dll
  150. 2011-10-24 18:29 . 2011-10-24 18:29 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
  151. 2011-10-24 18:29 . 2011-10-24 18:29 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
  152. 2011-10-22 11:05 . 2011-10-22 11:05 71680 ----a-w- c:\windows\system32\frapsv64.dll
  153. 2011-10-22 11:05 . 2011-10-22 11:05 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
  154. 2011-10-22 01:16 . 2011-10-22 01:16 1843200 ----a-w- c:\windows\SysWow64\SlotMaximizerBe.dll
  155. 2011-10-22 01:15 . 2011-10-22 01:15 104448 ----a-w- c:\windows\SysWow64\SlotMaximizerAg.dll
  156. 2011-10-22 01:12 . 2011-10-22 01:12 2763264 ----a-w- c:\windows\system32\SlotMaximizerBe.dll
  157. 2011-10-22 01:07 . 2011-10-22 01:07 125440 ----a-w- c:\windows\system32\SlotMaximizerAg.dll
  158. 2011-10-17 19:55 . 2011-12-07 03:08 559384 ----a-w- c:\windows\system32\drivers\iaStor.sys
  159. .
  160. .
  161. ((((((((((((((((((((((((((((( SnapShot@2012-01-07_20.10.44 )))))))))))))))))))))))))))))))))))))))))
  162. .
  163. - 2009-07-14 04:54 . 2012-01-07 20:09 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  164. + 2009-07-14 04:54 . 2012-01-08 19:22 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  165. + 2009-07-14 04:54 . 2012-01-08 19:22 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  166. - 2009-07-14 04:54 . 2012-01-07 20:09 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  167. - 2009-07-14 04:54 . 2012-01-07 20:09 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  168. + 2009-07-14 04:54 . 2012-01-08 19:22 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  169. + 2010-03-20 04:56 . 2012-01-07 23:02 44262 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
  170. + 2009-07-14 05:10 . 2012-01-08 19:23 37708 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
  171. + 2011-05-09 19:33 . 2012-01-08 19:23 11288 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3927676143-1492199802-2699246584-1000_UserData.bin
  172. + 2011-05-09 22:07 . 2012-01-07 20:31 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  173. - 2011-05-09 22:07 . 2012-01-07 04:26 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  174. + 2011-05-09 22:07 . 2012-01-07 20:31 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  175. - 2011-05-09 22:07 . 2012-01-07 04:26 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  176. + 2009-07-14 04:54 . 2012-01-07 20:31 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  177. - 2009-07-14 04:54 . 2012-01-07 04:26 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  178. - 2011-05-27 04:28 . 2012-01-07 20:07 3440 c:\windows\system32\wdi\ERCQueuedResolutions.dat
  179. + 2011-05-27 04:28 . 2012-01-08 19:20 3440 c:\windows\system32\wdi\ERCQueuedResolutions.dat
  180. - 2012-01-07 20:08 . 2012-01-07 20:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  181. + 2012-01-08 19:21 . 2012-01-08 19:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  182. + 2012-01-08 19:21 . 2012-01-08 19:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  183. - 2012-01-07 20:08 . 2012-01-07 20:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  184. + 2011-05-23 05:35 . 2012-01-08 19:07 355158 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin
  185. + 2009-07-14 05:01 . 2012-01-08 19:20 433396 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  186. - 2009-07-14 05:01 . 2012-01-07 20:07 433396 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  187. + 2011-05-24 00:31 . 2012-01-08 19:20 3172856 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
  188. - 2011-05-24 00:31 . 2012-01-07 20:07 3172856 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
  189. + 2011-05-10 18:23 . 2012-01-08 19:20 40630868 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3927676143-1492199802-2699246584-1000-8192.dat
  190. .
  191. ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  192. .
  193. .
  194. *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  195. REGEDIT4
  196. .
  197. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  198. "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
  199. .
  200. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  201. "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2009-10-27 6998656]
  202. "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2009-08-20 170624]
  203. "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
  204. "AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" [2011-05-21 365336]
  205. "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
  206. "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-03-20 3054136]
  207. "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]
  208. "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-10-17 284440]
  209. "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-11-10 343168]
  210. "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
  211. .
  212. c:\users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  213. Stardock ObjectDock.lnk - c:\program files (x86)\Stardock\ObjectDockPlus2\ObjectDock.exe [2011-5-20 4142448]
  214. .
  215. c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
  216. SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-3-19 156952]
  217. .
  218. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  219. "ConsentPromptBehaviorAdmin"= 5 (0x5)
  220. "ConsentPromptBehaviorUser"= 3 (0x3)
  221. "EnableUIADesktopToggle"= 0 (0x0)
  222. .
  223. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  224. "AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\sbhook.dll
  225. .
  226. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
  227. "aux2"=wdmaud.drv
  228. .
  229. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
  230. Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
  231. .
  232. [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
  233. "DisableMonitoring"=dword:00000001
  234. .
  235. R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  236. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  237. R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys [x]
  238. R3 dc3d;Pilote de détection des périphériques Microsoft Hardware;c:\windows\system32\DRIVERS\dc3d.sys [x]
  239. R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files\ma-config.com\Drivers\driverhardwarev2x64.sys [2011-07-22 16640]
  240. R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\x64\maconfservice.exe [2011-11-14 427640]
  241. R3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
  242. R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [x]
  243. R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [x]
  244. R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
  245. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
  246. R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
  247. R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
  248. R3 WSDPrintDevice;Prise en charge de l’impression WSD via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
  249. S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
  250. S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [x]
  251. S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [x]
  252. S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [x]
  253. S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [x]
  254. S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
  255. S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
  256. S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
  257. S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
  258. S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 2329480]
  259. S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-10-17 13592]
  260. S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832]
  261. S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
  262. S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
  263. S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
  264. S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
  265. S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
  266. S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
  267. S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]
  268. S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys [x]
  269. S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
  270. S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
  271. S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
  272. S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
  273. .
  274. .
  275. Contenu du dossier 'Tâches planifiées'
  276. .
  277. 2012-01-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3927676143-1492199802-2699246584-1000Core.job
  278. - c:\users\ASUS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-02 02:37]
  279. .
  280. 2012-01-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3927676143-1492199802-2699246584-1000UA.job
  281. - c:\users\ASUS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-02 02:37]
  282. .
  283. .
  284. --------- x86-64 -----------
  285. .
  286. .
  287. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  288. "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]
  289. "SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2009-11-19 307768]
  290. "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
  291. "combofix"="c:\combofix\CF29580.3XE" [2010-11-20 345088]
  292. .
  293. [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
  294. "{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll" [2010-03-24 633200]
  295. .
  296. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  297. "AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\x64\sbhook64.dll c:\progra~2\KASPER~1\KASPER~1\x64\kloehk.dll
  298. .
  299. ------- Examen supplémentaire -------
  300. .
  301. uLocal Page = c:\windows\system32\blank.htm
  302. mLocal Page = c:\windows\system32\blank.htm
  303. uInternet Settings,ProxyOverride = *.local
  304. IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
  305. FF - ProfilePath - c:\users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\5c7kgx2e.default\
  306. FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/
  307. .
  308. - - - - ORPHELINS SUPPRIMES - - - -
  309. .
  310. Toolbar-Locked - (no file)
  311. .
  312. .
  313. .
  314. --------------------- CLES DE REGISTRE BLOQUEES ---------------------
  315. .
  316. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  317. @Denied: (A 2) (Everyone)
  318. @="FlashBroker"
  319. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
  320. .
  321. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  322. "Enabled"=dword:00000001
  323. .
  324. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  325. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
  326. .
  327. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  328. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  329. .
  330. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  331. @Denied: (A 2) (Everyone)
  332. @="Shockwave Flash Object"
  333. .
  334. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  335. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
  336. "ThreadingModel"="Apartment"
  337. .
  338. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  339. @="0"
  340. .
  341. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  342. @="ShockwaveFlash.ShockwaveFlash.10"
  343. .
  344. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  345. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
  346. .
  347. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  348. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  349. .
  350. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  351. @="1.0"
  352. .
  353. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  354. @="ShockwaveFlash.ShockwaveFlash"
  355. .
  356. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  357. @Denied: (A 2) (Everyone)
  358. @="Macromedia Flash Factory Object"
  359. .
  360. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  361. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
  362. "ThreadingModel"="Apartment"
  363. .
  364. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  365. @="FlashFactory.FlashFactory.1"
  366. .
  367. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  368. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
  369. .
  370. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  371. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  372. .
  373. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  374. @="1.0"
  375. .
  376. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  377. @="FlashFactory.FlashFactory"
  378. .
  379. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  380. @Denied: (A 2) (Everyone)
  381. @="IFlashBroker4"
  382. .
  383. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  384. @="{00020424-0000-0000-C000-000000000046}"
  385. .
  386. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  387. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  388. "Version"="1.0"
  389. .
  390. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  391. @Denied: (Full) (Everyone)
  392. .
  393. ------------------------ Autres processus actifs ------------------------
  394. .
  395. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
  396. c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
  397. c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  398. c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
  399. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
  400. c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  401. c:\windows\SysWOW64\PnkBstrA.exe
  402. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
  403. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
  404. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
  405. .
  406. **************************************************************************
  407. .
  408. Heure de fin: 2012-01-08 14:30:16 - La machine a redémarré
  409. ComboFix-quarantined-files.txt 2012-01-08 19:30
  410. ComboFix2.txt 2012-01-07 21:43
  411. ComboFix3.txt 2012-01-07 20:18
  412. .
  413. Avant-CF: 368 948 523 008 octets libres
  414. Après-CF: 368 673 574 912 octets libres
  415. .
  416. - - End Of File - - 3202601CA55EE2F8040CF2E5745F3ECE
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!