API tools faq
paste
Guest User

Untitled

a guest
Jan 7th, 2012
236
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 29.27 KB | None | 0 0
raw download clone embed print report
  1. ComboFix 12-01-07.02 - ASUS 2012-01-07 16:25:53.2.4 - x64
  2. Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.2.1036.18.3949.2373 [GMT -5:00]
  3. Lancé depuis: c:\users\ASUS\Downloads\ComboFix.exe
  4. Commutateurs utilisés :: c:\users\ASUS\Desktop\CFscript.txt
  5. AV: Kaspersky Internet Security *Disabled/Updated* {56547CC9-C9B2-849D-8FEF-A496150D6A06}
  6. FW: Kaspersky Internet Security *Disabled* {6E6FFDEC-83DD-85C5-A4B0-0DA3EBDE2D7D}
  7. SP: Kaspersky Internet Security *Disabled/Updated* {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
  8. SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  9. .
  10. FILE ::
  11. "c:\programdata\regid.1986-12.com.adobe"
  12. .
  13. .
  14. (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  15. .
  16. .
  17. c:\programdata\Trymedia
  18. c:\programdata\Trymedia\data\{3BEF345D-6B01-E987-804D-CB5DDDE132C4}
  19. c:\programdata\Trymedia\data\{44E56412-7A7E-7164-BA7E-02583FF632DB}
  20. c:\programdata\Trymedia\data\{56164C7B-4B51-723C-85EA-F44907583490}
  21. c:\programdata\Trymedia\data\{885FF911-099A-584C-040E-B036D384609C}
  22. .
  23. .
  24. ((((((((((((((((((((((((((((( Fichiers créés du 2011-12-07 au 2012-01-07 ))))))))))))))))))))))))))))))))))))
  25. .
  26. .
  27. 2012-01-07 21:33 . 2012-01-07 21:33 -------- d-----w- c:\users\Public\AppData\Local\temp
  28. 2012-01-07 21:33 . 2012-01-07 21:33 -------- d-----w- c:\users\Default\AppData\Local\temp
  29. 2012-01-07 04:25 . 2012-01-07 04:25 -------- d-----w- c:\program files (x86)\Lionhead Studios
  30. 2012-01-07 00:50 . 2011-12-19 18:45 224048 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
  31. 2012-01-07 00:50 . 2011-12-19 18:45 130864 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
  32. 2012-01-06 19:34 . 2011-11-21 11:40 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D54D740D-6952-48A4-A75E-045F93D2E99C}\mpengine.dll
  33. 2012-01-03 22:43 . 2012-01-03 22:43 -------- d-----w- c:\program files (x86)\Microsoft Games
  34. 2011-12-30 00:25 . 2011-12-30 00:25 -------- d-----w- c:\users\ASUS\AppData\Local\Nokia
  35. 2011-12-30 00:07 . 2011-12-30 00:36 -------- d-----w- C:\QtSDK
  36. 2011-12-29 22:50 . 2011-12-30 02:55 -------- d-----w- c:\users\ASUS\.designer
  37. 2011-12-29 22:41 . 2011-12-30 04:20 -------- d-----w- c:\users\ASUS\AppData\Roaming\Nokia
  38. 2011-12-29 19:57 . 2011-12-29 19:57 -------- d-----w- c:\program files (x86)\Common Files\Java
  39. 2011-12-24 04:09 . 2011-12-24 04:09 -------- d-----w- C:\Games
  40. 2011-12-24 04:07 . 2011-12-24 04:07 -------- d-----w- c:\users\ASUS\AppData\Local\Black_Tree_Gaming
  41. 2011-12-24 04:07 . 2011-12-24 04:07 -------- d-----w- c:\program files\Nexus Mod Manager
  42. 2011-12-22 00:51 . 2011-12-23 02:39 43992 ----a-w- c:\program files (x86)\Mozilla Firefox\mozutils.dll
  43. 2011-12-22 00:51 . 2011-12-22 00:51 626688 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcr80.dll
  44. 2011-12-22 00:51 . 2011-12-22 00:51 548864 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcp80.dll
  45. 2011-12-22 00:51 . 2011-12-22 00:51 479232 ----a-w- c:\program files (x86)\Mozilla Firefox\msvcm80.dll
  46. 2011-12-19 18:45 . 2011-12-19 18:45 146736 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
  47. 2011-12-19 18:43 . 2011-12-19 18:43 320816 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
  48. 2011-12-19 18:43 . 2011-12-19 18:43 165680 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
  49. 2011-12-19 03:38 . 2011-12-19 03:38 -------- d-----w- c:\users\ASUS\AppData\Roaming\AnvSoft
  50. 2011-12-19 02:32 . 2012-01-03 03:53 -------- d-----w- C:\UsbFix
  51. 2011-12-17 06:57 . 2011-12-17 06:57 -------- d-----w- c:\programdata\ATI
  52. 2011-12-17 06:57 . 2011-12-17 06:57 -------- d-----w- c:\program files (x86)\AMD APP
  53. 2011-12-17 06:57 . 2011-12-17 06:57 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies
  54. 2011-12-17 06:34 . 2012-01-03 03:53 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim
  55. 2011-12-17 06:24 . 2011-12-17 06:24 750488 ----a-w- c:\windows\system32\npdeployJava1.dll
  56. 2011-12-17 02:02 . 2011-12-17 02:02 -------- d-----w- c:\program files (x86)\Wing IDE 4.1
  57. 2011-12-15 21:33 . 2011-12-15 21:33 -------- d-----w- c:\program files\iPod
  58. 2011-12-15 21:33 . 2011-12-15 21:34 -------- d-----w- c:\program files\iTunes
  59. 2011-12-14 22:48 . 2011-11-24 04:52 3145216 ----a-w- c:\windows\system32\win32k.sys
  60. 2011-12-14 22:48 . 2011-11-05 05:32 2048 ----a-w- c:\windows\system32\tzres.dll
  61. 2011-12-14 22:48 . 2011-11-05 04:26 2048 ----a-w- c:\windows\SysWow64\tzres.dll
  62. 2011-12-14 22:48 . 2011-10-26 05:21 43520 ----a-w- c:\windows\system32\csrsrv.dll
  63. 2011-12-14 22:48 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
  64. 2011-12-14 22:48 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
  65. 2011-12-13 03:04 . 2011-12-13 03:04 -------- d-----w- c:\users\ASUS\AppData\Roaming\No Company Name
  66. 2011-12-10 18:06 . 2011-12-10 18:06 -------- d-----w- c:\program files\NTCore
  67. 2011-12-10 16:32 . 2011-12-10 16:46 -------- d-----w- c:\program files (x86)\Intelore
  68. 2011-12-10 05:11 . 2011-12-10 05:11 -------- d-----w- c:\users\ASUS\AppData\Roaming\Mozart 11
  69. 2011-12-10 03:53 . 2011-12-10 04:47 -------- d-----w- c:\users\ASUS\AppData\Roaming\Synthesia
  70. 2011-12-10 03:52 . 2011-12-10 03:53 -------- d-----w- c:\program files (x86)\Synthesia
  71. 2011-12-09 23:15 . 2011-12-15 00:15 -------- d-----w- c:\users\ASUS\AppData\Roaming\Download Manager
  72. 2011-12-09 23:08 . 2012-01-06 22:58 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
  73. 2011-12-09 23:00 . 2011-12-09 23:00 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR
  74. 2011-12-09 22:55 . 2011-12-21 22:02 -------- d-----w- c:\program files\Common Files\Adobe
  75. .
  76. .
  77. .
  78. (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  79. .
  80. 2011-12-29 19:56 . 2011-06-13 03:13 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
  81. 2011-12-17 06:24 . 2011-06-10 01:24 660368 ----a-w- c:\windows\system32\deployJava1.dll
  82. 2011-12-07 22:51 . 2011-10-30 16:21 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
  83. 2011-12-04 16:28 . 2011-10-30 16:21 573776 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
  84. 2011-11-25 21:28 . 2011-10-10 00:39 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
  85. 2011-11-25 21:28 . 2011-10-10 00:39 573760 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
  86. 2011-11-22 00:04 . 2011-11-22 00:04 53248 ----a-r- c:\users\ASUS\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
  87. 2011-11-22 00:04 . 2011-07-15 07:21 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
  88. 2011-11-17 23:54 . 2011-11-17 21:04 279616 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
  89. 2011-11-17 22:11 . 2011-12-07 22:02 145424 ----a-w- c:\windows\system32\drivers\JME.sys
  90. 2011-11-14 21:18 . 2011-07-07 16:35 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
  91. 2011-11-10 03:45 . 2011-11-10 03:45 10567680 ----a-w- c:\windows\system32\drivers\atikmdag.sys
  92. 2011-11-10 03:39 . 2011-11-10 03:39 69632 ----a-w- c:\windows\system32\OpenVideo64.dll
  93. 2011-11-10 03:39 . 2011-11-10 03:39 59904 ----a-w- c:\windows\SysWow64\OpenVideo.dll
  94. 2011-11-10 03:39 . 2011-11-10 03:39 61952 ----a-w- c:\windows\system32\OVDecode64.dll
  95. 2011-11-10 03:39 . 2011-11-10 03:39 54784 ----a-w- c:\windows\SysWow64\OVDecode.dll
  96. 2011-11-10 03:39 . 2011-11-10 03:39 17442304 ----a-w- c:\windows\system32\amdocl64.dll
  97. 2011-11-10 03:38 . 2011-11-10 03:38 14375936 ----a-w- c:\windows\SysWow64\amdocl.dll
  98. 2011-11-10 03:37 . 2011-11-10 03:37 51200 ----a-w- c:\windows\system32\OpenCL.dll
  99. 2011-11-10 03:37 . 2011-11-10 03:37 44032 ----a-w- c:\windows\SysWow64\OpenCL.dll
  100. 2011-11-10 03:20 . 2011-11-10 03:20 25218048 ----a-w- c:\windows\system32\atio6axx.dll
  101. 2011-11-10 03:17 . 2011-11-10 03:17 159744 ----a-w- c:\windows\system32\atiapfxx.exe
  102. 2011-11-10 03:16 . 2011-04-20 02:09 774656 ----a-w- c:\windows\SysWow64\aticfx32.dll
  103. 2011-11-10 03:15 . 2011-04-20 02:07 927232 ----a-w- c:\windows\system32\aticfx64.dll
  104. 2011-11-10 03:12 . 2011-07-28 21:36 466944 ----a-w- c:\windows\system32\ATIDEMGX.dll
  105. 2011-11-10 03:12 . 2011-11-10 03:12 516608 ----a-w- c:\windows\system32\atieclxx.exe
  106. 2011-11-10 03:11 . 2011-11-10 03:11 204288 ----a-w- c:\windows\system32\atiesrxx.exe
  107. 2011-11-10 03:10 . 2011-11-10 03:10 120320 ----a-w- c:\windows\system32\atitmm64.dll
  108. 2011-11-10 03:09 . 2011-11-10 03:09 423424 ----a-w- c:\windows\system32\atipdl64.dll
  109. 2011-11-10 03:09 . 2011-11-10 03:09 360448 ----a-w- c:\windows\SysWow64\atipdlxx.dll
  110. 2011-11-10 03:09 . 2011-11-10 03:09 278528 ----a-w- c:\windows\SysWow64\Oemdspif.dll
  111. 2011-11-10 03:09 . 2011-11-10 03:09 21504 ----a-w- c:\windows\system32\atimuixx.dll
  112. 2011-11-10 03:09 . 2011-11-10 03:09 59392 ----a-w- c:\windows\system32\atiedu64.dll
  113. 2011-11-10 03:09 . 2011-11-10 03:09 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll
  114. 2011-11-10 03:06 . 2011-04-20 01:59 6077952 ----a-w- c:\windows\SysWow64\atidxx32.dll
  115. 2011-11-10 02:58 . 2011-11-10 02:58 18996224 ----a-w- c:\windows\SysWow64\atioglxx.dll
  116. 2011-11-10 02:51 . 2009-12-17 09:05 7405056 ----a-w- c:\windows\system32\atidxx64.dll
  117. 2011-11-10 02:40 . 2011-11-10 02:40 1113088 ----a-w- c:\windows\system32\atiumd6v.dll
  118. 2011-11-10 02:40 . 2011-11-10 02:40 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll
  119. 2011-11-10 02:40 . 2011-07-28 21:11 4061696 ----a-w- c:\windows\system32\atiumd6a.dll
  120. 2011-11-10 02:34 . 2011-11-10 02:34 51200 ----a-w- c:\windows\system32\aticalrt64.dll
  121. 2011-11-10 02:34 . 2011-11-10 02:34 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll
  122. 2011-11-10 02:34 . 2011-11-10 02:34 44544 ----a-w- c:\windows\system32\aticalcl64.dll
  123. 2011-11-10 02:34 . 2011-11-10 02:34 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll
  124. 2011-11-10 02:34 . 2011-11-10 02:34 13552640 ----a-w- c:\windows\system32\aticaldd64.dll
  125. 2011-11-10 02:33 . 2011-11-10 02:33 5852672 ----a-w- c:\windows\SysWow64\atiumdag.dll
  126. 2011-11-10 02:29 . 2011-11-10 02:29 11300864 ----a-w- c:\windows\SysWow64\aticaldd.dll
  127. 2011-11-10 02:29 . 2011-11-10 02:29 4200960 ----a-w- c:\windows\SysWow64\atiumdva.dll
  128. 2011-11-10 02:24 . 2011-07-28 21:02 7439360 ----a-w- c:\windows\system32\atiumd64.dll
  129. 2011-11-10 02:18 . 2011-04-20 01:27 58880 ----a-w- c:\windows\system32\coinst.dll
  130. 2011-11-10 02:13 . 2011-07-28 20:54 494592 ----a-w- c:\windows\system32\atiadlxx.dll
  131. 2011-11-10 02:13 . 2011-11-10 02:13 348160 ----a-w- c:\windows\SysWow64\atiadlxy.dll
  132. 2011-11-10 02:13 . 2011-11-10 02:13 17408 ----a-w- c:\windows\system32\atig6pxx.dll
  133. 2011-11-10 02:13 . 2011-11-10 02:13 14336 ----a-w- c:\windows\SysWow64\atiglpxx.dll
  134. 2011-11-10 02:13 . 2011-11-10 02:13 14336 ----a-w- c:\windows\system32\atiglpxx.dll
  135. 2011-11-10 02:13 . 2011-11-10 02:13 39936 ----a-w- c:\windows\system32\atig6txx.dll
  136. 2011-11-10 02:12 . 2011-11-10 02:12 32768 ----a-w- c:\windows\SysWow64\atigktxx.dll
  137. 2011-11-10 02:12 . 2011-11-10 02:12 325632 ----a-w- c:\windows\system32\drivers\atikmpag.sys
  138. 2011-11-10 02:11 . 2011-04-20 01:21 41984 ----a-w- c:\windows\system32\atiuxp64.dll
  139. 2011-11-10 02:11 . 2011-04-20 01:21 32256 ----a-w- c:\windows\SysWow64\atiuxpag.dll
  140. 2011-11-10 02:11 . 2011-07-28 20:53 39424 ----a-w- c:\windows\system32\atiu9p64.dll
  141. 2011-11-10 02:11 . 2011-11-10 02:11 54784 ----a-w- c:\windows\system32\atimpc64.dll
  142. 2011-11-10 02:11 . 2011-11-10 02:11 54784 ----a-w- c:\windows\system32\amdpcom64.dll
  143. 2011-11-10 02:11 . 2011-07-08 02:45 29184 ----a-w- c:\windows\SysWow64\atiu9pag.dll
  144. 2011-11-10 02:11 . 2011-11-10 02:11 53760 ----a-w- c:\windows\SysWow64\atimpc32.dll
  145. 2011-11-10 02:11 . 2011-11-10 02:11 53760 ----a-w- c:\windows\SysWow64\amdpcom32.dll
  146. 2011-11-10 02:10 . 2011-11-10 02:10 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
  147. 2011-10-26 02:21 . 2011-10-26 02:21 66560 ----a-w- c:\windows\system32\OVDecoder64.dll
  148. 2011-10-26 02:21 . 2011-10-26 02:21 56832 ----a-w- c:\windows\SysWow64\OVDecoder.dll
  149. 2011-10-24 18:29 . 2011-10-24 18:29 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
  150. 2011-10-24 18:29 . 2011-10-24 18:29 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
  151. 2011-10-22 11:05 . 2011-10-22 11:05 71680 ----a-w- c:\windows\system32\frapsv64.dll
  152. 2011-10-22 11:05 . 2011-10-22 11:05 65536 ----a-w- c:\windows\SysWow64\frapsvid.dll
  153. 2011-10-22 01:16 . 2011-10-22 01:16 1843200 ----a-w- c:\windows\SysWow64\SlotMaximizerBe.dll
  154. 2011-10-22 01:15 . 2011-10-22 01:15 104448 ----a-w- c:\windows\SysWow64\SlotMaximizerAg.dll
  155. 2011-10-22 01:12 . 2011-10-22 01:12 2763264 ----a-w- c:\windows\system32\SlotMaximizerBe.dll
  156. 2011-10-22 01:07 . 2011-10-22 01:07 125440 ----a-w- c:\windows\system32\SlotMaximizerAg.dll
  157. 2011-10-17 19:55 . 2011-12-07 03:08 559384 ----a-w- c:\windows\system32\drivers\iaStor.sys
  158. .
  159. .
  160. ((((((((((((((((((((((((((((( SnapShot@2012-01-07_20.10.44 )))))))))))))))))))))))))))))))))))))))))
  161. .
  162. - 2009-07-14 04:54 . 2012-01-07 20:09 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  163. + 2009-07-14 04:54 . 2012-01-07 21:34 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  164. - 2009-07-14 04:54 . 2012-01-07 20:09 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  165. + 2009-07-14 04:54 . 2012-01-07 21:34 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  166. - 2009-07-14 04:54 . 2012-01-07 20:09 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  167. + 2009-07-14 04:54 . 2012-01-07 21:34 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  168. + 2010-03-20 04:56 . 2012-01-07 21:36 44086 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
  169. + 2009-07-14 05:10 . 2012-01-07 21:36 37668 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
  170. + 2011-05-09 19:33 . 2012-01-07 21:36 11106 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3927676143-1492199802-2699246584-1000_UserData.bin
  171. - 2011-05-09 22:07 . 2012-01-07 04:26 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  172. + 2011-05-09 22:07 . 2012-01-07 20:31 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  173. + 2011-05-09 22:07 . 2012-01-07 20:31 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  174. - 2011-05-09 22:07 . 2012-01-07 04:26 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  175. - 2009-07-14 04:54 . 2012-01-07 04:26 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  176. + 2009-07-14 04:54 . 2012-01-07 20:31 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  177. + 2011-05-27 04:28 . 2012-01-07 21:33 3440 c:\windows\system32\wdi\ERCQueuedResolutions.dat
  178. - 2011-05-27 04:28 . 2012-01-07 20:07 3440 c:\windows\system32\wdi\ERCQueuedResolutions.dat
  179. + 2012-01-07 21:34 . 2012-01-07 21:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  180. - 2012-01-07 20:08 . 2012-01-07 20:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
  181. - 2012-01-07 20:08 . 2012-01-07 20:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  182. + 2012-01-07 21:34 . 2012-01-07 21:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
  183. + 2009-07-14 05:01 . 2012-01-07 21:33 433396 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  184. - 2009-07-14 05:01 . 2012-01-07 20:07 433396 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
  185. + 2011-05-24 00:31 . 2012-01-07 21:33 3172856 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
  186. - 2011-05-24 00:31 . 2012-01-07 20:07 3172856 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
  187. - 2011-05-10 18:23 . 2012-01-07 20:07 40101492 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3927676143-1492199802-2699246584-1000-8192.dat
  188. + 2011-05-10 18:23 . 2012-01-07 21:33 40101492 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3927676143-1492199802-2699246584-1000-8192.dat
  189. .
  190. ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  191. .
  192. .
  193. *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  194. REGEDIT4
  195. .
  196. [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  197. "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-11-10 3514176]
  198. .
  199. [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  200. "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2009-10-27 6998656]
  201. "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2009-08-20 170624]
  202. "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
  203. "AVP"="c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" [2011-05-21 365336]
  204. "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
  205. "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-03-20 3054136]
  206. "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]
  207. "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-10-17 284440]
  208. "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-11-10 343168]
  209. "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
  210. .
  211. c:\users\ASUS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  212. Stardock ObjectDock.lnk - c:\program files (x86)\Stardock\ObjectDockPlus2\ObjectDock.exe [2011-5-20 4142448]
  213. .
  214. c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
  215. SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-3-19 156952]
  216. .
  217. [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  218. "ConsentPromptBehaviorAdmin"= 5 (0x5)
  219. "ConsentPromptBehaviorUser"= 3 (0x3)
  220. "EnableUIADesktopToggle"= 0 (0x0)
  221. .
  222. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
  223. "AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\sbhook.dll
  224. .
  225. [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
  226. "aux2"=wdmaud.drv
  227. .
  228. [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
  229. Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
  230. .
  231. [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
  232. "DisableMonitoring"=dword:00000001
  233. .
  234. R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  235. R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
  236. R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys [x]
  237. R3 dc3d;Pilote de détection des périphériques Microsoft Hardware;c:\windows\system32\DRIVERS\dc3d.sys [x]
  238. R3 driverhardwarev2x64;driverhardwarev2x64;c:\program files\ma-config.com\Drivers\driverhardwarev2x64.sys [2011-07-22 16640]
  239. R3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\x64\maconfservice.exe [2011-11-14 427640]
  240. R3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [x]
  241. R3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [x]
  242. R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [x]
  243. R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
  244. R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
  245. R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
  246. R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
  247. R3 WSDPrintDevice;Prise en charge de l’impression WSD via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
  248. R3 X6va005;X6va005;c:\users\ASUS\AppData\Local\Temp\005DF8.tmp [x]
  249. S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
  250. S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [x]
  251. S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [x]
  252. S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [x]
  253. S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [x]
  254. S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
  255. S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
  256. S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
  257. S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
  258. S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 2329480]
  259. S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-10-17 13592]
  260. S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832]
  261. S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
  262. S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
  263. S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
  264. S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]
  265. S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
  266. S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
  267. S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]
  268. S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys [x]
  269. S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [x]
  270. S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [x]
  271. S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x]
  272. S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
  273. .
  274. .
  275. Contenu du dossier 'Tâches planifiées'
  276. .
  277. 2012-01-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3927676143-1492199802-2699246584-1000Core.job
  278. - c:\users\ASUS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-02 02:37]
  279. .
  280. 2012-01-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3927676143-1492199802-2699246584-1000UA.job
  281. - c:\users\ASUS\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-02 02:37]
  282. .
  283. .
  284. --------- x86-64 -----------
  285. .
  286. .
  287. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  288. "ETDWare"="c:\program files\Elantech\ETDCtrl.exe" [2009-09-30 621440]
  289. "SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2009-11-19 307768]
  290. "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1744152]
  291. .
  292. [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
  293. "{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\program files (x86)\Stardock\ObjectDockPlus2\ODMenu64.dll" [2010-03-24 633200]
  294. .
  295. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
  296. "AppInit_DLLs"=c:\progra~2\KASPER~1\KASPER~1\x64\sbhook64.dll c:\progra~2\KASPER~1\KASPER~1\x64\kloehk.dll
  297. .
  298. ------- Examen supplémentaire -------
  299. .
  300. uLocal Page = c:\windows\system32\blank.htm
  301. mLocal Page = c:\windows\system32\blank.htm
  302. uInternet Settings,ProxyOverride = *.local
  303. IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
  304. FF - ProfilePath - c:\users\ASUS\AppData\Roaming\Mozilla\Firefox\Profiles\5c7kgx2e.default\
  305. FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/
  306. .
  307. - - - - ORPHELINS SUPPRIMES - - - -
  308. .
  309. Toolbar-Locked - (no file)
  310. .
  311. .
  312. .
  313. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va005]
  314. "ImagePath"="\??\c:\users\ASUS\AppData\Local\Temp\005DF8.tmp"
  315. .
  316. --------------------- CLES DE REGISTRE BLOQUEES ---------------------
  317. .
  318. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
  319. @Denied: (A 2) (Everyone)
  320. @="FlashBroker"
  321. "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"
  322. .
  323. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
  324. "Enabled"=dword:00000001
  325. .
  326. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
  327. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"
  328. .
  329. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
  330. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  331. .
  332. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  333. @Denied: (A 2) (Everyone)
  334. @="Shockwave Flash Object"
  335. .
  336. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  337. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
  338. "ThreadingModel"="Apartment"
  339. .
  340. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  341. @="0"
  342. .
  343. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  344. @="ShockwaveFlash.ShockwaveFlash.10"
  345. .
  346. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  347. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
  348. .
  349. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  350. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  351. .
  352. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  353. @="1.0"
  354. .
  355. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  356. @="ShockwaveFlash.ShockwaveFlash"
  357. .
  358. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  359. @Denied: (A 2) (Everyone)
  360. @="Macromedia Flash Factory Object"
  361. .
  362. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  363. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"
  364. "ThreadingModel"="Apartment"
  365. .
  366. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  367. @="FlashFactory.FlashFactory.1"
  368. .
  369. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  370. @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"
  371. .
  372. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  373. @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
  374. .
  375. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  376. @="1.0"
  377. .
  378. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  379. @="FlashFactory.FlashFactory"
  380. .
  381. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
  382. @Denied: (A 2) (Everyone)
  383. @="IFlashBroker4"
  384. .
  385. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
  386. @="{00020424-0000-0000-C000-000000000046}"
  387. .
  388. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
  389. @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
  390. "Version"="1.0"
  391. .
  392. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
  393. @Denied: (Full) (Everyone)
  394. .
  395. ------------------------ Autres processus actifs ------------------------
  396. .
  397. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
  398. c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
  399. c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
  400. c:\program files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
  401. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
  402. c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  403. c:\windows\SysWOW64\PnkBstrA.exe
  404. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
  405. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
  406. c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
  407. .
  408. **************************************************************************
  409. .
  410. Heure de fin: 2012-01-07 16:43:06 - La machine a redémarré
  411. ComboFix-quarantined-files.txt 2012-01-07 21:43
  412. ComboFix2.txt 2012-01-07 20:18
  413. .
  414. Avant-CF: 370 032 287 744 octets libres
  415. Après-CF: 369 772 826 624 octets libres
  416. .
  417. - - End Of File - - 0AE3721A851E88401173F6B78B0A5089
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!