Supprimer qove8

[claudius]

Bonjour ,
Apres avoir fait une mise a jour sur internet,je me suis rendu compte que google chrome s'ouvrait avec start qove8 J'ai lancé différents scans : AdwCleaner, RogueKiller, , Malwarebytes... tous m'ont donnés des résultats positifs ne sachant comment supprimer les dossiers infectés j'ai lancé Combofix.Je vous joins ci apres le rapport, en espérant que vous pourrez faire quelque chose car je suis nulle en informatique. J'ai quand même reussi a supprimer start qove8, en tous cas je ne le vois plus. Un grand merci pour ce que vous ferais.
ComboFix 13-10-03.03 - claude 04/10/2013 0:45.1.4 - x64
Microsoft Windows 7 Édition Intégrale 6.1.7601.1.1252.33.1036.18.3950.2000 [GMT 2:00]
Lancé depuis: c:\users\claude\Downloads\ComboFix.exe
AV: Lavasoft Ad-Aware *Disabled/Updated* {E0D97DD4-42BA-B3F2-A5A7-22E9ACE81FC7}
FW: Lavasoft Ad-Aware *Disabled* {D8E2FCF1-08D5-B2AA-8EF8-8BDC523B58BC}
SP: Lavasoft Ad-Aware *Disabled/Updated* {5BB89C30-6480-BC7C-9F17-199BD76F557A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2013-09-03 au 2013-10-03 ))))))))))))))))))))))))))))))))))))
.
.
2013-10-03 22:50 . 2013-10-03 22:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-10-03 22:04 . 2013-10-03 22:04 -------- d-s---w- c:\windows\SysWow64\Microsoft
2013-10-03 19:35 . 2013-10-03 19:35 388096 ----a-r- c:\users\claude\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-10-03 19:35 . 2013-10-03 19:35 -------- d-----w- c:\program files (x86)\Trend Micro
2013-10-03 14:37 . 2013-10-03 22:09 -------- d-----w- c:\programdata\Avira
2013-10-02 22:43 . 2013-04-11 09:06 39504 ----a-w- c:\windows\system32\drivers\gfiark.sys
2013-10-02 22:35 . 2013-10-03 14:09 -------- d-----w- c:\users\claude\AppData\Roaming\Ad-Aware Antivirus
2013-10-02 22:34 . 2013-10-02 23:13 -------- d-----w- c:\programdata\Ad-Aware Antivirus
2013-10-02 22:33 . 2012-09-20 03:40 47496 ----a-w- c:\windows\system32\sbbd.exe
2013-10-02 22:33 . 2013-10-02 22:33 -------- d-----w- c:\programdata\Lavasoft
2013-10-02 22:33 . 2013-10-02 22:43 -------- d-----w- c:\program files (x86)\Ad-Aware Antivirus
2013-10-02 10:26 . 2013-10-02 10:29 -------- d-----w- c:\users\claude\AppData\Roaming\HOSTS Anti-Adwares
2013-10-02 10:26 . 2013-10-03 20:18 -------- d-----w- c:\program files (x86)\Hosts_Anti_Adwares_PUPs
2013-10-01 13:04 . 2013-09-05 05:32 9694160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F55A2BE-16EA-41A2-B7E8-14233331F5CB}\mpengine.dll
2013-10-01 12:51 . 2013-10-01 22:32 -------- d-----w- c:\programdata\Uniblue
2013-10-01 12:47 . 2013-10-01 12:47 -------- d-----w- c:\users\claude\AppData\Local\Software
2013-10-01 12:47 . 2013-10-01 12:47 -------- d-----w- c:\users\claude\AppData\Local\avgchrome
2013-10-01 12:44 . 2013-10-01 12:44 -------- d-----w- c:\windows\SysWow64\Extensions
2013-10-01 12:44 . 2013-10-01 12:44 -------- d-----w- c:\windows\SysWow64\searchplugins
2013-09-19 19:12 . 2013-09-19 19:12 312744 ----a-w- c:\windows\system32\javaws.exe
2013-09-19 19:12 . 2013-09-19 19:12 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-09-19 19:12 . 2013-09-19 19:12 189352 ----a-w- c:\windows\system32\javaw.exe
2013-09-19 19:12 . 2013-09-19 19:12 189352 ----a-w- c:\windows\system32\java.exe
2013-09-19 19:12 . 2013-09-19 19:12 -------- d-----w- c:\program files\Java
2013-09-19 19:06 . 2013-09-19 19:06 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-09-19 19:06 . 2013-09-19 19:06 -------- d-----w- c:\programdata\Oracle
2013-09-19 19:06 . 2013-09-19 19:06 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-09-19 19:06 . 2013-09-19 19:06 -------- d-----w- c:\program files (x86)\Java
2013-09-13 19:15 . 2013-09-13 19:15 -------- d-----w- c:\users\claude\AppData\Local\Sony Corporation
2013-09-11 23:13 . 2013-08-10 05:20 701952 ----a-w- c:\program files\Internet Explorer\ieproxy.dll
2013-09-11 22:17 . 2013-08-05 02:25 155584 ----a-w- c:\windows\system32\drivers\ataport.sys
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-19 19:12 . 2013-08-05 09:59 973736 ----a-w- c:\windows\system32\deployJava1.dll
2013-09-19 19:12 . 2013-08-05 09:59 1095080 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-09-19 19:06 . 2013-08-05 09:59 868264 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-09-19 19:06 . 2013-08-05 09:59 790440 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-09-19 18:57 . 2013-08-05 12:24 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-19 18:57 . 2013-08-05 12:24 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-11 23:12 . 2013-08-05 18:29 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-08-30 07:47 . 2013-08-05 10:10 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-08-07 02:22 . 2013-06-06 17:15 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-08-05 20:36 . 2013-08-05 20:36 74703 ----a-w- c:\windows\SysWow64\mfc45.dll
2013-08-05 18:12 . 2013-08-05 18:12 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-08-05 18:12 . 2013-08-05 18:12 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-08-05 18:12 . 2013-08-05 18:12 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-08-05 18:12 . 2013-08-05 18:12 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-08-05 18:12 . 2013-08-05 18:12 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-08-05 18:12 . 2013-08-05 18:12 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-08-05 18:12 . 2013-08-05 18:12 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-08-05 18:12 . 2013-08-05 18:12 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-08-05 18:12 . 2013-08-05 18:12 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-08-05 18:12 . 2013-08-05 18:12 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-08-05 18:12 . 2013-08-05 18:12 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-08-05 18:12 . 2013-08-05 18:12 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-08-05 18:12 . 2013-08-05 18:12 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-08-05 18:12 . 2013-08-05 18:12 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-08-05 18:12 . 2013-08-05 18:12 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-08-05 18:12 . 2013-08-05 18:12 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-08-05 18:12 . 2013-08-05 18:12 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-08-05 18:12 . 2013-08-05 18:12 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-08-05 18:12 . 2013-08-05 18:12 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-08-05 18:12 . 2013-08-05 18:12 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-08-05 18:12 . 2013-08-05 18:12 81408 ----a-w- c:\windows\system32\icardie.dll
2013-08-05 18:12 . 2013-08-05 18:12 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-08-05 18:12 . 2013-08-05 18:12 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-08-05 18:12 . 2013-08-05 18:12 441856 ----a-w- c:\windows\system32\html.iec
2013-08-05 18:12 . 2013-08-05 18:12 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-08-05 18:12 . 2013-08-05 18:12 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-08-05 18:12 . 2013-08-05 18:12 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-08-05 18:12 . 2013-08-05 18:12 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-08-05 18:12 . 2013-08-05 18:12 235008 ----a-w- c:\windows\system32\url.dll
2013-08-05 18:12 . 2013-08-05 18:12 216064 ----a-w- c:\windows\system32\msls31.dll
2013-08-05 18:12 . 2013-08-05 18:12 197120 ----a-w- c:\windows\system32\msrating.dll
2013-08-05 18:12 . 2013-08-05 18:12 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-08-05 18:12 . 2013-08-05 18:12 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-08-05 18:12 . 2013-08-05 18:12 102912 ----a-w- c:\windows\system32\inseng.dll
2013-08-05 18:12 . 2013-08-05 18:12 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-08-05 18:12 . 2013-08-05 18:12 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-08-05 18:12 . 2013-08-05 18:12 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-08-05 18:12 . 2013-08-05 18:12 144896 ----a-w- c:\windows\system32\wextract.exe
2013-08-05 18:12 . 2013-08-05 18:12 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-08-05 18:12 . 2013-08-05 18:12 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-08-05 18:12 . 2013-08-05 18:12 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-08-05 18:12 . 2013-08-05 18:12 149504 ----a-w- c:\windows\system32\occache.dll
2013-08-05 18:12 . 2013-08-05 18:12 13824 ----a-w- c:\windows\system32\mshta.exe
2013-08-05 18:12 . 2013-08-05 18:12 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-08-05 18:12 . 2013-08-05 18:12 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-08-05 18:12 . 2013-08-05 18:12 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-08-05 18:12 . 2013-08-05 18:12 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-08-05 18:12 . 2013-08-05 18:12 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-08-05 18:12 . 2013-08-05 18:12 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-08-05 18:05 . 2013-08-05 18:05 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2013-08-05 18:05 . 2013-08-05 18:05 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-08-05 18:05 . 2013-08-05 18:05 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2013-08-05 18:05 . 2013-08-05 18:05 648192 ----a-w- c:\windows\system32\d3d10level9.dll
2013-08-05 18:05 . 2013-08-05 18:05 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2013-08-05 18:05 . 2013-08-05 18:05 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-08-05 18:05 . 2013-08-05 18:05 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-08-05 18:05 . 2013-08-05 18:05 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-08-05 18:05 . 2013-08-05 18:05 3928064 ----a-w- c:\windows\system32\d2d1.dll
2013-08-05 18:05 . 2013-08-05 18:05 363008 ----a-w- c:\windows\system32\dxgi.dll
2013-08-05 18:05 . 2013-08-05 18:05 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2013-08-05 18:05 . 2013-08-05 18:05 333312 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-08-05 18:05 . 2013-08-05 18:05 296960 ----a-w- c:\windows\system32\d3d10core.dll
2013-08-05 18:05 . 2013-08-05 18:05 293376 ----a-w- c:\windows\SysWow64\dxgi.dll
2013-08-05 18:05 . 2013-08-05 18:05 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-08-05 18:05 . 2013-08-05 18:05 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2013-08-05 18:05 . 2013-08-05 18:05 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll
2013-08-05 18:05 . 2013-08-05 18:05 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-08-05 18:05 . 2013-08-05 18:05 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2013-08-05 18:05 . 2013-08-05 18:05 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll
2013-08-05 18:05 . 2013-08-05 18:05 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll
2013-08-05 18:05 . 2013-08-05 18:05 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2013-08-05 18:05 . 2013-08-05 18:05 194560 ----a-w- c:\windows\system32\d3d10_1.dll
2013-08-05 18:05 . 2013-08-05 18:05 1682432 ----a-w- c:\windows\system32\XpsPrint.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Ad-Aware Antivirus"="c:\program files (x86)\Ad-Aware Antivirus\AdAwareLauncher --windows-run" [X]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ad-Aware Service]
@="Ad-Aware Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\DRIVERS\dmvsc.sys;c:\windows\SYSNATIVE\DRIVERS\dmvsc.sys [x]
R3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys;c:\windows\SYSNATIVE\drivers\gfiark.sys [x]
R3 McComponentHostServiceSony;McAfee Security Scan Component Host Service for Sony;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\DRIVERS\terminpt.sys;c:\windows\SYSNATIVE\DRIVERS\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\DRIVERS\TsUsbGD.sys;c:\windows\SYSNATIVE\DRIVERS\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S2 Ad-Aware Service;Ad-Aware Service;c:\program files (x86)\Ad-Aware Antivirus\AdAwareService.exe;c:\program files (x86)\Ad-Aware Antivirus\AdAwareService.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x]
S2 SBAMSvc;Ad-Aware;c:\program files (x86)\Ad-Aware Antivirus\SBAMSvc.exe;c:\program files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [x]
S2 sbapifs;sbapifs;c:\windows\system32\DRIVERS\sbapifs.sys;c:\windows\SYSNATIVE\DRIVERS\sbapifs.sys [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys;c:\windows\SYSNATIVE\DRIVERS\SFEP.sys [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-10-03 21:16 1185744 ----a-w- c:\program files (x86)\Google\Chrome\Application\30.0.1599.69\Installer\chrmstp.exe
.
Contenu du dossier 'Tâches planifiées'
.
2013-10-03 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-05 18:57]
.
2013-10-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-05 09:57]
.
2013-10-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-08-05 09:57]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HOSTS Anti Adwares"="schtasks.exe" [2011-01-19 285696]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.fr/
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.0.254
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=10000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1\" \"/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"&\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\%C3 & Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2013-10-04 00:52:53
ComboFix-quarantined-files.txt 2013-10-03 22:52
.
Avant-CF: 85 013 897 216 octets libres
Après-CF: 84 776 140 800 octets libres
.
- - End Of File - - 6F1E0CB8A9117D9AABBC1B6164E1BA6F
A36C5E4F47E84449FF07ED3517B43A31
claudius

[Malekal_morte]

Salut,


Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
Lance AdwCleaner, clique sur [Scanner].
Le scan peux durer plusieurs minutes, patienter.
Clic ensuite sur le bouton [Nettoyer] pour lancer le nettoyage.

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

Reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :
* Internet Explorer et modules complémentaires / moteurs de recherche : http://forum.malekal.com/
* Firefox : http://forum.malekal.com/firefox-extens ... 36057.html
* Google Chrome : http://forum.malekal.com/google-chrome- ... 35837.html

NOTE : Pour Firefox et Google Chrome - si rien ne va, il y a la possibilité de les désinstaller/réinstaller, voir liens explicatifs ci-dessus.

puis : il faut nettoyer les raccourcis (icones) de lancement des navigateurs WEB.
Comme expliqué dans les liens précédents, faire un clic droit sur les icones de raccourcis de lancement des navigateurs puis propriétés.
Dans cible, à la fin, une adresse http a été ajoutée (exemple https://www.malekal.com/fichiers/forum/ ... find_7.png ) pour que le site s'ouvre au démarrage du navigateur, supprimer cette adresse http ET SEULEMENT cette adresse http.

[claudius]

J'ai lancé adwcleaner et voici le rapport. Je vous remercie pour votre aide.Est ce que vous pouvez en même temps me dire comment supprimer les programmes qui ne servent a rien et qui ralentisse l'ordinateur??
Merçi

# AdwCleaner v3.006 - Rapport créé le 04/10/2013 à 11:13:05
# Mis à jour le 01/10/2013 par Xplode
# Système d'exploitation : Windows 7 Ultimate Service Pack 1 (64 bits)
# Nom d'utilisateur : claude - CLAUDE-PC
# Exécuté depuis : C:\Users\claude\Downloads\adwcleaner-3.006.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****


***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.16686


-\\ Google Chrome v30.0.1599.69

[ Fichier : C:\Users\claude\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R8].txt - [800 octets] - [04/10/2013 02:14:22]
AdwCleaner[R9].txt - [865 octets] - [04/10/2013 11:12:32]
AdwCleaner[S7].txt - [787 octets] - [04/10/2013 11:13:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S7].txt - [846 octets] ##########

[Malekal_morte]

Regarde là : http://forum.malekal.com/desinstaller-d ... 44774.html
Si doute sur un programme, donne le nom.

As-tu reparamétré les navigateurs et corrigé les raccourcis pour supprimer qove8