problème system security Fermé

Question

Bonjour,

depuis hier, j'ai System Security qui est installé sur mon ordinateur, me disant que mon pc est infecté par des virus et des spywares et je n'arrive pas à le désinstaller. Des fenêtres s'ouvrent toutes les 10 minutes. J'ai essayé ccleaner, AVG antispyware et malwarebytes' anti-malware mais rien ne fonctionnent.

Est-ce que quelqu'un saurait ce qu'il faut faire?
Merci d'avance pour toute aide.

g!rly · Answer

salut, 

Télécharge combofix.exe (par sUBs) sur ton Bureau.

-> http://download.bleepingcomputer.com/sUBs/ComboFix.exe     

-> Double clique combofix.exe.
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent géner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe.

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.

- En fin de scan il est possible que ComboFix ait besoin de redemarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

-> Tutoriel https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

@+

manu08 · Answer

c'est normal que la préparation du rapport soit aussi longue?

g!rly · Answer

tout depend de l´heure à laquelle tu a lancé le scan...

manu08 · Answer

j'ai lancé le scan vers 18h, ça a été assez rapide. Mais c'est la préparation du rapport qui est long.

g!rly · Answer

oui effectivement...
il tourne encore ?

manu08 · Answer

y a eu le scan, il a redémarré le pc. Et là y a une page ouverte Find 3M où c'est écrit Compte-rendu en cours de préparation. Ne lancez aucun programme tant que combofix n'est pas fini.

g!rly · Answer

bon arrête le... post ce rapport stp > Télécharge random's system information tool (RSIT) : http://images.malwareremoval.com/random/RSIT.exe - Enregistre le programme sur ton bureau. - Double clique sur RSIT.exe - Clique sur à l'écran "Disclaimer". - Choisis lors de l'option : 3 months - Si HiJackThis n'est pas détecté sur ton PC, RSIT le téléchargera ; accepte alors la licence. - Une fois le scanne terminé tu obtiendras un rapport log.txt. Poste le sur le forum. NB : Il se peut que tu obtiennes un second rapport nommé info.txt. Dans ce cas poste le aussi. @+

manu08 · Answer

Ok merci je vais essayer.

Par contre Combofix m'as changer la date de l'horloge je voudrais savoir comment la remettre comme avant ?
Et qu'entend tu par "post ce rapport stp " ?

g!rly · Answer

c´est dommage pour combofix, tu as pu voir si il a supprimé des fichiers, dans la fentre noir (cmd)

pour la date : tu click sur l´horloge et dans la fenêtre fais le réglage adéquate...

pour rsit tu l´exécute, à la fin il va produire un rapport; post le ici.

@+

manu08 · Answer

oui combofix a supprimé des fichiers.
Pour rsit, le lien ne marche pas.
Et maintenant la date est écrite de cette manière 2008-12-28.

g!rly · Answer

Combofix a la particularité de remettre la configuration a zéro, si tu avais une configuration particulière il faut que tu la refasses...

a defaut de rsit :

Télécharge DDS.scr de sUBs
https://download.bleepingcomputer.com/sUBs/dds.scr
Sur le bureau.
L'outil ne nécessite pas d'installation.

Lances-le en cliquant sur l'icône dds.scr

Cette fenêtre DOS va apparaitre:
https://i75.servimg.com/u/f75/11/05/93/83/ddsdos10.jpg

Le scan ne doit pas dépasser trois minutes.
Un premier rapport va s'ouvrir que tu enregistreras sous DDS.txt par défaut sur le bureau.
Il te sera demandé si tu veux faire le scan optionnel.
Accepte par Oui
Un nouveau rapport s'ouvre que tu enregistres sous Attach.txt sur le bureau.
Tu ne le fourniras que si nécessaire.
Poste le rapport DDS.txt

@+

manu08 · Answer

ca ne veut pas marcher non plus. je réessayerais demain.

Merci

g!rly · Answer

Tu as un message d´erreur ?
@+

manu08 · Answer

ca me met adresse introuvable

g!rly · Answer

Essaie de le prendre ici
dezip le sur ton bureau et suis les indications que je t´ai donnés...
@+

nahta · Answer

j'ai le même souci que toi moi aussi depuis hier soir c'est à dire le 28.12.08. system sécurity s'est installé tout seul  pourtant mes anti virus fonctionnent correctement .
quelle galère comment en sortir . merci.

g!rly · Answer

nahta, 

On a pas fini alors, 

Il serait préférable que tu fasses ton message personnel, cela rendra les postes plus compréhensibles et la réponse à ton problème sera plus efficace
Procèdes comme ceci :
http://pageperso.aol.fr/balltrap34/demofairesontmessage.htm

manu08 · Answer

bonjour,

j'ai utilisé rsit. Voila ce que j'obtiens:
LOG:
Logfile of random's system information tool 1.05 (written by random/random)
Run by emmanuelle paulin at 2008-12-29 17:28:08
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 6 GB (10%) free of 54 GB
Total RAM: 1022 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:28, on 29/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\admServ.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Documents and Settings\All Users\Application Data\2075680151\359573831.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\emmanuelle paulin\Bureau\RSIT.exe
C:\Program Files	rend micro\emmanuelle paulin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.divx.com/en/software/download/installed/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /normal-run1
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [359573831] "C:\Documents and Settings\All Users\Application Data\2075680151\359573831.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\emmanuelle paulin\Application Data\Dealio\kb127es\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

g!rly · Answer

Salut manu08, 

Bon et bien tu as fini par pouvoir le télécharger :)

Télécharges OTMoveIt3 (de Old_Timer) sur ton Bureau.

http://oldtimer.geekstogo.com/OTMoveIt3.exe

Double cliques sur "OTMoveIt3.exe" pour ouvrir le prg .
Puis copies ce qui se trouve en citation ci-dessous,

:Processes
explorer.exe

:Files
C:\Program Files\Search Settings
C:\Documents and Settings\All Users\Application Data\2075680151

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SearchSettings"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"359573831"=-

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

et colles le dans le cadre de gauche de OTMoveIt3 :
Paste Instructions for items to be moved.
(ne touche à rien d'autre !)

-> cliques sur MoveIt! pour lancer la suppression.
-> laisses travailler l'outil ...

( Note : ton bureau va disparaitre puis réapparaitre, c'est normal .)

-> une fois finis , un petite fenêtre s'ouvre : cliques sur " Yes " .

Ton PC va redémarrer de lui même ...

-->Postes le contenu du rapport qui se trouve dans le dossier "C:\_OTMoveIt\MovedFiles"
( " xxxx2008_xxxxxx.log " où les "x" correspondent au jour et à l'heure de l'utilisation ). 

@+

manu08 · Answer

voici ce que j'ai obtenu:

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\Program Files\Search Settings\kb127	emp moved successfully.
C:\Program Files\Search Settings\kb127es moved successfully.
C:\Program Files\Search Settings\kb127 moved successfully.
C:\Program Files\Search Settings moved successfully.
C:\Documents and Settings\All Users\Application Data\2075680151\Languages moved successfully.
C:\Documents and Settings\All Users\Application Data\2075680151 moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SearchSettings deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\359573831 deleted successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\RtkBtMnt.exe scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\hpodvd09.log scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\etilqs_IPiFBJ3CDZYaSSSzDQaA scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS	emp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS	emp\Perflib_Perfdata_5fc.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
File delete failed. C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
 
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 12292008_194851

Files moved on Reboot...
C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\RtkBtMnt.exe moved successfully.
C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\hpodvd09.log moved successfully.
File C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\etilqs_IPiFBJ3CDZYaSSSzDQaA not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File C:\WINDOWS	emp\_avast4_\Webshlock.txt not found!
File C:\WINDOWS	emp\Perflib_Perfdata_5fc.dat not found!
C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\emmanuelle paulin\Local Settings\Application Data\Mozilla\Firefox\Profiles\z7i7p8rp.default\XUL.mfl moved successfully.

g!rly · Answer

ok manu08

peux tu faire un sacn avec malwarebytes et poster le rapport stp

@+

manu08 · Answer

voici le rapport:
Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1550
Windows 5.1.2600 Service Pack 2

29/12/2008 20:50:06
mbam-log-2008-12-29 (20-49-59).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 113336
Temps écoulé: 17 minute(s), 27 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\emmanuelle paulin\Bureau\System Security.lnk (Rogue.SystemSecurity) -> No action taken.

g!rly · Answer

tu as supprimé ce qu´il a trouvé ?

comment ca va de ton coté ?

post un nouveau rapport hijack this stp

@+

manu08 · Answer

non je l'ai pas encore supprimé. Je peux le faire?

manu08 · Answer

et pour hijackthis il faut que je relance rsit???

g!rly · Answer

ha oui c´est vrai c´est rsit qui te l´a installé...

Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

double click sur l´icone hijack this pour le lancer et post le rapport comme indiqué dans la video

@+

manu08 · Answer

l'icone d'hijackthis????

manu08 · Answer

je n'ai pas d'icone.

g!rly · Answer

utilise ceci pour supprimer les outils utilisés 

Télécharge ToolsCleaner sur ton bureau.
--> http://www.commentcamarche.net/telecharger/telechargement 34055291 toolsclean(...)
# Clique sur Recherche et laisse le scan agir ...
# Clique sur Suppression pour finaliser.
# Tu peux, si tu le souhaites, te servir des Options facultatives.
# Clique sur Quitter pour obtenir le rapport.
# Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 

et retelecharge hijack this

Télécharge HijackThis ici : 

-> http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

Post le rapport généré ici stp...


@+

manu08 · Answer

voici le rapport de toolsCleaner
[ Rapport ToolsCleaner version 2.2.9 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\Combofix: trouvé !
C:\Qoobox: trouvé !
C:\_OtMoveIt: trouvé !
C:\Rsit: trouvé !
C:\WINDOWS\NIRCMD.exe: trouvé !
C:\Documents and Settings\emmanuelle paulin\Bureau\ComboFix.exe: trouvé !
C:\Documents and Settings\emmanuelle paulin\Bureau\OTMoveIt3.exe: trouvé !
C:\Documents and Settings\emmanuelle paulin\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\emmanuelle paulin\Bureau\dds.scr: trouvé !
C:\Program Files	rend micro\HijackThis.exe: trouvé !
C:\Program Files	rend micro\hijackthis.log: trouvé !
C:\ComboFix\Combofix.txt: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\emmanuelle paulin\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\Program Files	rend micro\HijackThis.exe: supprimé !
C:\WINDOWS\NIRCMD.exe: supprimé !
C:\Documents and Settings\emmanuelle paulin\Bureau\OTMoveIt3.exe: supprimé !
C:\Documents and Settings\emmanuelle paulin\Bureau\Rsit.exe: supprimé !
C:\Documents and Settings\emmanuelle paulin\Bureau\dds.scr: supprimé !
C:\Program Files	rend micro\hijackthis.log: supprimé !
C:\ComboFix\Combofix.txt: supprimé !
C:\Combofix: supprimé !
C:\Qoobox: supprimé !
C:\_OtMoveIt: supprimé !
C:\Rsit: supprimé !

g!rly · Answer

ok

manu08 · Answer

voici le rapport:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:55, on 29/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\admServ.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.divx.com/en/software/download/installed/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe /normal-run1
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\emmanuelle paulin\Application Data\Dealio\kb127es\DealioSearch.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcappcapd.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

g!rly · Answer

prochaine étape :

tu surf avec internet explorer 6.0 = failles de securitées importantes

alors fais les mises a jour windows : tu veux la version 8.0 

https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70

puis

pour vérifier que tout est ok :

regarde ceci concernant avast :

antivir vs avast :

-> http://forum.malekal.com/ftopic3528.php

alors je te conseille de le desinstaller et d´installer antivir a la place

Telecharge et instales l'antivirus Antivir Personal Edition Classic :

->https://www.malekal.com/avira-free-security-antivirus-gratuit/

https://www.avira.com/en/prime

En francais :( si tu le télécharge en francais tu ne pourras suivre mes instruction pour la configuration...)

https://www.avira.com/

Reglages :

en image :

http://speedweb1.free.fr/frames2.php?page=tuto5

mes explications :

une fois antivir ouvert click surconfiguration et coche la case "expert mode" puis sur l´onglet scanner dans la fenetre du dessous tu va voir : rootkit search click sur le petit + pour deployer et coche la case a coté de ton disk dur
ceux qui ne voie pas root kit search : clcik sur le parapluie dans ta barre des tache > dans la fenetre d´antivir click sur local protection click en suite sur scanner
dans la fenetre de droite : tu a rootkit search vers le bas > tu developpe en appuyant sur le petit +
et coche tes disques...
puis click sur configuration en haut a droite; dans la nouvelle fenetre a gauche >scanner > coche "scan all files" et en dessous >scanner priority = High
coche : allow stopping the scanner, comme cela tu peux faire une pause pendant le scan si tu le desir.
puis sur la droite coche les case suivantes : 
scan boot sectors of selected drives
scan master boot sectors
scan memory
search foe rootkit before scan
decoche :
ignore off line files
toujours a gauche > scan > deploie > heuristique > macrovirus heuristic = coché et en dessous > win32 heuristic la case coché et high detection level

Je te dis tous ca car j´aimerais que tu performes un scan entier de ta machine a l´aide d´antivir avec les reglages stipulés ci dessus et que tu post le rapport généré ici stp

ps : effectue le scan en mode sans echec :

Comment redémarrer en mode sans echec? 

   Tu redemarre le pc et tapote la touche F8 des le début de l allumage sans t´arrêter.
   Une fenêtre sur fond noir va s’ouvrir, tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
   Une fois sur le bureau si il n y a pas toutes les couleurs et autres c´est normal!
   Ps : si F8 ne marche pas utilise la touche F5.

Bonne fin de soirée

@demain`

g!rly · Answer

ps : je sais que tu surf avec firefox mais cependant ie n´est pas a jour et les failles sont bien présentent...

manu08 · Answer

j'ai une question: j'ai un problème avec google. Dès que je recherche n'importe quoi, google ne donne que des sites de pub

g!rly · Answer

salut manu08, 

a l´aide de hijack this coche et fix :

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.divx.com/en/software/download/installed/ 

comment fixer :

Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

-> http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

encore de la pub ?

@+

manu08 · Answer

oui ça me fait toujours la même chose. 
Par ex, si je tape "facebook", je vais obtenir des sites qui en apparence semble etre facebook mais quand on regarde l'adresse c'est un site de pub.

g!rly · Answer

salut, 

passe ceci :

télécharges smitfraudfix de S!Ri, balltrap34 et moe31 

En image :
http://siri.urz.free.fr/Fix/SmitfraudFix.php

tu doubles cliques sur smitfraudfix.cmd et tu choisi l option 1
cela vas générer un rapport.

Copie/colle le rapport sur le forum stp.

@+

manu08 · Answer

VOICI le rapport:
SmitFraudFix v2.387

Rapport fait à 15:49:29.32, 30/12/2008
Executé à partir de C:\Program Files\Mozilla Firefox\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est FAT32
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\admServ.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\WANADOO\TaskBarIcon.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\DOCUME~1\EMMANU~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

g!rly · Answer

le rapport n´est pas entier, repost le stp
@+

manu08 · Answer

C'est la seule chose que j'obtiens

manu08 · Answer

et j'ai une fenêtre qui est toujours ouverte "C:\WINDOWS\system32\cmd.exe avec écrit à l'intérieur: smitFraudFix v2.387
Recherche Process...
Recherche Hosts...

g!rly · Answer

bizarre...

utilise ce logiciel :

http://siri.urz.free.fr/RHosts.php

retente google

@+

manu08 · Answer

j'ai toujours le même problème

g!rly · Answer

passe ceci voir :

1- Télécharge Rooter de l'équipe IDN sur ton bureau :
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/Rooter.exe?attachauth=ANoY7cpzQksLcJt-e1z30LGu7t4JjUhh8amzWs_oSPSJpXbXp8ythGbW2WF8ysioh5NNlarrn7zMnYCRfsT5rCwNrfw5_CZYELApylTiY_MGu0G6uKzWpLEF2YXM3tF7nKZZAWj0JSAajXlZhd8dIyI3MrZ-lAIT5ZrAdcrct9_7bshwVpaZRPizuMTv9SDvmvY31BX4Vvvh2F2Brp1cy_K0jtTTfjttEA%3D%3D&attredirects=2

! Déconnecte toi d'internet et ferme toutes applications en cours !


* Exécute Rooter et laisse travailler l'outil .

* Une fois terminé, poste le rapport obtenu pour analyse ...

g!rly · Answer

j´avais pas vu ton message 42, 

peux tu repasser smitfraud fix option 1 stp

patiente jusqu´a la fin !

manu08 · Answer

j'ai lancé rooter et depuis 10min ca me marque HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\..\Interfaces

g!rly · Answer

il y a un problème certain mais vu que je ne voie aucun rapport cela m´est difficile de faire quoi que ce soit, tu comprends.

passe antivir comme je te l´avais demandé hier en mode sans échec avec les réglages que je t´ai indiqués 

Comment redémarrer en mode sans echec? 

   Tu redemarre le pc et tapote la touche F8 des le début de l allumage sans t´arrêter.
   Une fenêtre sur fond noir va s’ouvrir, tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
   Une fois sur le bureau si il n y a pas toutes les couleurs et autres c´est normal!
   Ps : si F8 ne marche pas utilise la touche F5.

post son rapport stp

@+

manu08 · Answer

voici le rapport: Avira AntiVir Personal Report file date: 2008-12-30 22:25 Scanning for 1136798 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Boot mode: Save mode Username: emmanuelle paulin Computer name: EMMANUELLE Version information: BUILD.DAT : 8.2.0.337 16934 Bytes 18/11/2008 13:05:00 AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:28 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:42 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:20 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:54 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:38 ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24/12/2008 21:11:14 ANTIVIR2.VDF : 7.1.1.34 2048 Bytes 24/12/2008 21:11:14 ANTIVIR3.VDF : 7.1.1.54 248832 Bytes 30/12/2008 21:11:14 Engineversion : 8.2.0.45 AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:58 AESCRIPT.DLL : 8.1.1.19 336252 Bytes 30/12/2008 21:11:24 AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 15:06:42 AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 13:58:40 AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 09:41:40 AEOFFICE.DLL : 8.1.0.33 196987 Bytes 30/12/2008 21:11:22 AEHEUR.DLL : 8.1.0.75 1524087 Bytes 30/12/2008 21:11:22 AEHELP.DLL : 8.1.2.0 119159 Bytes 30/12/2008 21:11:14 AEGEN.DLL : 8.1.1.8 323956 Bytes 30/12/2008 21:11:14 AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:58 AECORE.DLL : 8.1.5.2 172405 Bytes 30/12/2008 21:11:14 AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:58 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:06 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:02 AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:16 AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:42 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:24 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:50 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:04 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:42 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:12 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:08 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:38 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, D:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: on Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: high Start of the scan: 2008-12-30 22:25 Starting search for hidden objects. The driver could not be initialized. The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 11 processes with 11 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'D:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '88' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\WINDOWS\system32\Agent.OMZ.Fix.exe [DETECTION] Contains HEUR/Crypted.E suspicious code [NOTE] The file was moved to '49bf95be.qua'! C:\Documents and Settings\emmanuelle paulin\Bureau\SmitfraudFix.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Agent.OMZ.Fix.exe [DETECTION] Contains HEUR/Crypted.E suspicious code [NOTE] The file was deleted! C:\Documents and Settings\emmanuelle paulin\Bureau\SmitfraudFix\Agent.OMZ.Fix.exe [DETECTION] Contains HEUR/Crypted.E suspicious code [NOTE] The file was deleted! C:\Program Files\Free FLV Converter\FLVToX.exe [DETECTION] Contains HEUR/Malware suspicious code [NOTE] The detection was classified as suspicious. [NOTE] The file was moved to '49b0a5bd.qua'! C:\Program Files\Mozilla Firefox\SmitfraudFix\Agent.OMZ.Fix.exe [DETECTION] Contains HEUR/Crypted.E suspicious code [NOTE] The file was deleted! C:\System Volume Information\_restore{FE9DB679-8B9F-4569-9471-BFCEFDF23881}\RP283\A0059975.sys [DETECTION] Contains recognition pattern of the RKIT/Agent.fwt.1 root kit [NOTE] The file was moved to '498aa7d4.qua'! C:\System Volume Information\_restore{FE9DB679-8B9F-4569-9471-BFCEFDF23881}\RP283\A0059980.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Agent.OMZ.Fix.exe [DETECTION] Contains HEUR/Crypted.E suspicious code [NOTE] The file was moved to '498aa7f5.qua'! C:\System Volume Information\_restore{FE9DB679-8B9F-4569-9471-BFCEFDF23881}\RP283\A0059982.exe [DETECTION] Contains HEUR/Malware suspicious code [NOTE] The detection was classified as suspicious. [NOTE] The file was moved to '498aa7fc.qua'! Begin scan in 'D:\' End of the scan: 2008-12-30 23:59 Used time: 1:33:31 Hour(s) The scan has been done completely. 5150 Scanning directories 417770 Files were scanned 1 viruses and/or unwanted programs were found 7 Files were classified as suspicious: 3 files were deleted 0 files were repaired 5 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 417761 Files not concerned 7893 Archives were scanned 1 Warnings 8 Notes

manu08 · Answer

j'ai eu ce rapport là qui était apparu plutôt dans la journée:
NTI Backup NOW! for Windows 98/ME/NT/2000/XP
With Burner Database File Version 465

Table of Contents
-----------------
A. List of Supported CD-R/RW and DVD+/-R/RW/RAM Drives
B. Emergency Recovery


A. List of Supported CD-R/RW and DVD+/-R/RW/RAM Drives
----------------------------------------------------------------------
001. 1394 (Acer): CD-R/RW 12X8X32.
002. 2.4X2.4X8 (LITE-ON): 121032.
003. 48X24 (AccessTek): COMBO.
004. 52X24 (MSI): CDRW.
005. 52X32 (MSI): CDRW.
006. AccessTek: CD-RW CW0801, CW1601, CW1601A, CW3201, CW4001, CW4002, CW4801, CW4802, CW5201, CW5202, CW5205, CW5207, TCW5201, COMBO DC4801.
007. ACER: CB5224-QA0, CD-RW 52X32-B0, 52X32-L0, 52X32-M0, COMBO 48X24-B0, 48X24-H0, 48X24-L0, 48X24-M0, DVD Du 4X/24X-A0, 4X/24X-B0, 4X/24X-H0, 4X/24X-L0, 4X/24X-M0, 4X/24X-P0, 8X/48X-A0, 8X/48X-B0, 8X/48X-H0, 8X/48X-L0, 8X/48X-M0, 8X/48X-P0, DVD DUAL 4XMax, DVD RW 16XMax, 4XMax, 8XMax, DVD+RW 4X/40X-A0, 4X/40X-B0, 4X/40X-H0, 4X/40X-L0, 4X/40X-M0, 4X/40X-P0, 4XMax, 4XMaxA, 8X/48X-A0, 8X/48X-B0, 8X/48X-H0, 8X/48X-L0, 8X/48X-M0, 8X/48X-P0, 8XMax, DVD-RW 4XMax, 8XMax.
008. ACTIMA: ARW4420, ARW4420S, ARW4424P, ARW4432P, G44A24, G44P24, G44A32, G44P32, DVD+RW ADRW-H00P.
009. AOPEN: 16X48X24X48, 16X52X24X52COMBO, 16X52X32X52COMBO, 16X8 DVD DUAL, 20X10X40 CD-RW, 24X10X40 CD-RW, 24X10X48 CD-RW, 32X12X48 CD-RW, 40X12X48 CD-RW, 40X12X50 CD-RW, 48X12X48 CD-RW, 48X12X50 CD-RW, 48X16X48 CD-RW, 48X24X52 CD-RW, 4X IDE CD-RW, 52X24X52 CD-RW, 52X32CD-RW, 52X32COMBO, 52X32X52 CD-RW, 8X4X32 IDE CD-RW, CDRW5232, COM4824, COM4824/AAH, COM5224, COM5224/AAH, COMBO48X, CQ2440, CQ3248, CQ4048, CQ4848, CQ4852, CQ5252, CQ5252PRO, CRS446U, CRS9420, CRS9624, CRW5232/AAO, CRW5232/BKS, CRW620, CRW622, CRW8432, CRW8832, CRW9420, CRW9420S, CRW9624, CRW9624S, CRW9632, CRW9832, CRW1232, DRW4410, DRW4416, DRW4624, DRW8120, DUW1608/ARR, DUW1616/ARR, DVRW2412PRO, IDE4016CO, IDE4816CO, 12X10X32 CD-RW, A, P, 16X10X32 CD-RW, A, 4X4X20 IDE CD-RW, SCSI CDRW, SLIM CDRW, 4X4X8 241040, 241640, 6X4X24 IDE CD-RW, SCSI CDRW, SLIM CDRW, 8X DVD Dual ABB, ABG, ACC, ACG, 8X8 DVD Dual AAG, AAN, ACC, ACG, APG, APP, CD-RW CRW1232 A, CRW1232PRO, CRW1632, CRW1632 A, CRW2040, CRW2440, CRW2448, CRW3248, CRW4048, CRW4050, CRW4850, CRW4852, CRW5224, CRW5232, CDRW/DVD SB2410E, COM5232/AAH, PRO, COMBO SDW-824, CRW5232/AAO PRO, DVD Du 4X/24X-A0, 8X/48X-A0, DVD DUAL SU4216E, DVD RW Drive, ISU8424E, DVD+RW 4X/40X-A0, 8X/48X-A0, DVD/RW 4X6X4X24.
010. APACHI (AOPEN): CD_1632 DRIVE, CD_2440 DRIVE, CD_4048 DRIVE.
011. ARCHOS: MiniCDRW 161024, XS4424, XS4432, XS8432.
012. ARTEC: 52Z16, BKM-48W16, BKM-52X16, BKM-52Z16, BPN-KM48W16, BPN-KM52X16, BPN-KM52Z16, VOM-12E48X, VRR-4B24R, VRR-8F32W, VRR-12J52Z, WPN-KM52X16, WPN-RR52X, PLUS, WPN-RR52Z, PLUS, II, III, IV, WPN-SM52X, WPN-SM52Z, WPN-SM52ZA, WRA-GA32, WRA-KA40, WRA-OA40, WRA-WA40, WRA-WA48, WRR-4048, WRR-4848, WRR-48W, WRR-52X, PLUS, II, III, IV, V, WRR-52Z, PLUS, II, III, IV, V, WSM-4848, WSM-52X, WSM-52Z, WSM-52ZA, WSM-YG48, WSM-YG52, WSN-52X, RW-161032, RW-201040, RW-241040,     RW-241040, RW-321040, RW-321048, RW-321248, RW-401248, RW-481248, RW-481648, RW-481648M, RW-481650M, RW-481650W, RW-482448, RW-5224, RW-522452, PLUS, II, III, IV, V, RW-522452M, RW-522452W, RW-523252, PLUS, II, III, IV, V, RW-523252M, RW-523252W, COMBO-48W16, COMBO-52X, COMBO-52XP, COMBO-52X16, COMBO-52Z16, COMBO-M48W16, COMBO-M52X16, COMBO-M52Z16, DVD+RW 448, 8812, 121216.
013. ASUS: CRW-1210R, CRW-1610A, CRW-2410A, CRW-2410S, CRW-3212A, CRW-3212U, CRW-4012A, CRW-4816A, CRW-4824A, CRW-4824AH, CRW-4832A, CRW-4832AX, CRW-5224A, CRW-5232A, CRW-5232AS, DRW-0208P, DRW-0402P, DRW-0402P/D, DRW-1604P, DRW-1608P2, DRW-1608P2S-D, SCB-1608, SCB-2408, SCB-2424.
014. ATAPI (AccessTek): CD-RW52XMAX, CRD-BPDV2, CRD-BPDV3, CD-RW 16/12/40X, 12/8/32X, 16/8/40X, 32/12/40X, 40/12/40X, 40/12/48X, 48/12/48X, 48/16/48X, 48/24/48X, 48XMax, 52XMax, 52XMaxx, CW4801, CW5201, CW5202, CW5205, CW5207, TCW5201, CDRW 482448A, 522452A, 523252A, COMBO 48XMax, DC4801, DVD DUAL 4XMax, DVD RW 12XMax, 16XMax, 4XMax, 8XMax, DD0201, DD0203, DD0401, DD0405, DD1203, DD1205, DD1603, TDD0201, DVD+/-R/RW8XMAX, DVD+RW 4XMax, 4XMaxA, 8XMax, DD0202, DD0205, DD0402, DVD-RW 4XMax, 8XMax, DD0204, DD0403, DD0404, DVD/CDRW 48Max.
015. ATAPI (BENQ): CD-R/RW CRW6206A, 2X2X6, CRW6232A, 2X2X32, CRW4232A, 4X2X32, CRW4432A, 4X4X32, 4X2X30, 4X4X30, 2X2X24, 4X4X24, 6X4X30, 6X4X32, 8X4X24, 8X4X30, 8X4X32, CRW8432A, 10X8X32, 12X8X32, 10X4X32, 4X4X6, 4X4X8, 16X10, 20X10, 24X10, 16X10X40, 20X10X40, 24X10X40, 32X10, 32X12, 32X12X40, 40X12, CRW4812A, 48X12, 48X16, 48X20, 50X16, 50X20, CRW5224P, CD-RW 16X10X40, 32X10X40, 32X12X40, 40X12, 48X12, 48X16, 48X20, 48X24, 50X16, 50X20, 52X20, 52X24, 52X32, 52X32X, 56X32, CDRW 48X16, 48X24, 52X24, 52X32, 56X32, CDRW DRIVE 48X16, 48X24, 52X24, 52X32, 56X32, COMBO 16X48X24X, 16X48X32X, 16X52X24X, 16X52X32X, 32X12, 48X24, 48X32, 52X24, 52X32, DVD DD 2X16X4X16, 2X8X4X12, 2X8X4X16, 4X16X4X16, DVD DL 16X4X16, 2X8X4X12, DVD DUAL 16X4X12, 8X4X12, DVD+RW 4X2X12, 4X4X12, 6X4X12, 8X4X12, 8X4X16, WRITER, DVD-RW 4X Max.
016. ATAPI (BTC): 2W24R, CD-Writer.
017. ATARI (LG): DVD-RW-GCA-4020B.
018. ATK (AccessTek): DVD RW DD0201, DD0203, DD0401, DD0405, DD1603, TDD0201, DVD+RW DD0202, DD0205, DD0402, DVD-RW DD0204, DD0403, DD0404.
019. AXTRATEC (BTC): CRD-RW1S, RW5120, AXT 8000.
020. BACKPACK: CD-REWRITER-2A, CD-REWRITER-4A, CD-REWRITER-4B, CD-REWRITER-4D, CD-REWRITER-4E, CD-REWRITER-4F, CD-REWRITER-4G, CD-REWRITER-4H, CD-REWRITER-8A, CD-REWRITER-8B, CD-REWRITER-8C.
021. BENQ: SC248T, CDRW 5232X, DVD DD DW1620, DW1630, DW1640, DW1650, DW880A, DW890A, EW161I, EW161U, EW162I, EW162U, EW163U, EW165U, DVD DL DW1600, DW830A, DVD DUAL DW1610, DW820A, DW822A, DW825A, DW826A, EW161I, EW161U, EW822U, SDVD TW100G, TW200G, TW200Q, TW200T.
022. BTC: BCE242IE, BCE324IE, BCE424IE, BCE5232IB, BCE832IE, BCE840IE, BCE833IE, BCE1032IE, BCE128IE, BCE1610IM, BCE1610IR, BCE2010IR, BCE2408IM, BCE2410IM, BCE2410IR, BCE3212IM, BCE3212IR, BCE4010IM, BCE4012IM, BCE4016IM, BCE4812IM, BCE4816IM, BCE4824IM, BCE4832IM, BCE5216IM, BCE5224IM, BCE5224SO, BCE5224UI, BCE5232IA, BCE5232IM, BCE5232SO, BCO1212IM, BCO1612IM, BCO2408SM, BCO2408SM+, BCO2408SU, BCO4008UI, BCO4012IM, BCO4016IM, BCO4816IM, BCP8000U, BDE5224UI, BDW0810SE, BDW0810SI, CBD620E, DRW1004IM, DRW1008IM, DRW1012IM, DRW1016IM, DRW1104IM, DRW1108IM, DRW1112IM, DRW1116IM, ED5220, RW5120, AXT 8200, 8300, BCE 62IE, BCP 8000, 8000+, 8200, 8300, CD-RW 52X24-B0, 52X32-B0, COMBO 48X24-B0, DRW 1004IB, 1008IB, DVD Du 4X/24X-B0, 8X/48X-B0, DVD+RW 4X/40X-B0, 8X/48X-B0, GEN 8200, 8300.
023. BurnMAX (BTC): PDRW-4D-IN.
024. CalOptic: W1210F, W1210FB.
025. CARAVELL (SANYO): CD-R CDR-N820S.
026. CD-R/RW (CyberDrv): CW078D CD-R/RW, CW079D CD-R/RW, CW088D CD-R/RW, CW089D CD-R/RW, CW098D CD-R/RW, CW099D CD-R/RW, EW058U CD-R/RW, EW068U CD-R/RW, EW078U CD-R/RW, EW088U CD-R/RW.
027. CD-R/RW (PROVIEW): 52X24X52X.
028. CD-RW (BTC): 5232IA, 5232IB, GO-R5232B.
029. CD-RW (LITE-ON): 52X32-L0, CDR-1232DD, CDR-1232M, CDR-1232MC, CDR-1232S, CDR-1640MB, CDR-1640MC, CDR-1640MM, CDR-1640SB, CDR-2040MC, CDR-2040MM, CDR-2040SC, CDR-2440DH, CDR-2440DS, CDR-2440MB, CDR-2440MM, CDR-2440SB, CDR-2440SD, CDR-2840DH, CDR-2840DS, CDR-3240MH, CDR-3240MS, CDR-3240S, CDR-3240WD, CDR-3248MS, CDR-4048S, CDR-4048SD, CDR-4048W, CDR-4848S, CDR-5G48, CDR-5K32, CDR-5K40, CDR-5S32, CDR-5S40, CDR-5S48, CDR-5W32, CDR-5W40, CDR-5W48, CDR-6K40, CDR-6S32, CDR-6S40, CDR-6S48, CDR-6S52, CDR-7K48, CDR-8S48, CDR-8S52, CDR-9S48, CDR-9S52, CDR-9S52S, CDR-9V48, CDR-9V52, CDR-S148S, CDR-S152S, CRX-2440B, CRX-2440S, CXR-1X24, CXR-2X24, CXR-2X32, CXR-2X40, CXR-2440B, CXR-2440S, CXR-3X24, CXR-3X32, CXR-3X40, CXR-3X40B, CXR-3240, CXR-3240A, CXR-3240B, CXR-3240C, CXR-3240S, CXR-4040, CXR-4040A, CXR-4040B, CXR-4040C, JLR-3240H, LTR-24101B, LTR-24101C, LTR-24102B, LTR-24102C, MAR-241040SD, MAR-321040S, MAR-321040SD, MAR-321240WD, MAR-401248S, MAR-401248SD, MAR-401248W, MXR-241040S, MXR-2440B, MXR-321240S, SMART CLONE48, CLONE52.
030. CDRW (BTC): 5232UI.
031. CDRW (LITE-ON): 52X32X, CDR-8S52A.
032. CDWRITER (BTC): 2W24R, BCE5232IM, CD-RW5232IA, CD-RW5232IB, IDE2x2x24, IDE4x4x24, IDE4x4x32, IDE8x4x40, IDE8432, IDE8x4x32, IDE1032, IDE128, IDE1610, IDE1610IR, IDE2410, IDE2010IR, IDE2410IR, IDE3212, IDE4012, IDE 4012, IDE4812, IDE4816, IDE4824, IDE4832, IDE5224, IDE5224 V0012, IDE5224SO, IDE5232, IDE5232SO.
033. CENDYNE: 241040AA, 241040AB, 241040AL, 241040AT, 321240AA, 321240AB, 321240AL, 321240AT, 401248AA, 401248AB, 401248AL, 401248AT, 401248AX, 481248AA, 481248AB, 481248AL, 481248AT, 481648AA, 481648AB, 481648AX, 48244816AX, 482448AL, 482448AX, 522452AA, 522452AL, 522452AU, 522452AX, 523252AL, 523252AU, 523252AX, DVDR1AB, DVDR1AP, DVRW1AA, DVRW1AB, DVRW1AP, DVRW1AR, DVRW1AX.
034. CNBridge (LITE-ON): CBCO1H-48X, CBCO1K-48X, CBRW2B-24X, CBRW3S-32X, CBRW5S-32X, CBRW5S-40X, CBRW6K-40X, CBRW6K-52X, CBRW6S-32X, CBRW6S-40X, CBRW6S-48X, CBRW6S-52X, CBRW7K-48X, CBRW7K-52X, CBRW7S-48X, CBRW7S-52X, CBXRW-24X, CBXRW-40X, CBXRW-40XB.
035. COMBI (LITE-ON): COB-1K4816.
036. COMBI (PHILIPS): RW16x8/DVD, RW16x10/DVD, RW16x12/DVD, RW32/DVD.
037. COMBO (BTC): 2408SU, 4816IA, 4816UI, BCO1612IM, BCO3216IM, BCO4008UI, BCO4016IM, COMBO4816IA, IDE1612CO, IDE2408CO, IDE3216CO, IDE4008UI, IDE4016CO, IDE5216CO, IDE5224CO.
038. COMBO (CyberDrv): CB501D Combo, CB511D Combo, CB521D Combo, CB531D Combo.
039. COMBO (LITE-ON): 52X32X52X, COB-1H4816, COB-1K4012, COB-1K4816, COB-1T4816, COB-1T5216, COB-2H4816, COB-2H5216, COB-2K4816, COB-2K5216, COB-5H4816, COB-5H5216, COB-5K4816, COB-5K5216, COB-6K4816, COB-6K48S, COB-6K5216, COB-6V4816, COB-6V5216, COB-7K4816P, COB-7K4816S, COB-7K5216P, COB-7K5216S, COB-AH4816, COB-AH5216.
040. COMBO (PHILIPS): CDD5351, RW24x8/DVD, RW48/DVD, RW48/DVD16a, RW48/DVDa, RW52/DVD16a.
041. COMPAL (AccessTek): TSD80Y1 DVD RW.
042. COMPAL (TOSHIBA): TSB24H1 DVD/CDRW, TSB24H2 DVD/CDRW.
043. CoWriter (BTC): IDE12x10x40x12, IDE16x10x40x12.
044. CREATIVE: CD-RW ED5220, ED5220-A, ED5221, RW121032E, RW1210E, RW1220E, RW1260E, RW1610E, RW1611E, RW1620E, RW1650E, RW1680S, RW2024E, RW2410E, RW2410E-B, RW2450E, RW3210E, RW3260E, RW4010E, RW4020E, RW4060E, RW4224E, RW4424E, RW4810E, RW4811E, RW4820E, RW4860E, RW5220E, RW5221E, RW5260E, RW52G0E, RW6424E, RW8432E, RW8433E, RW8435E, RW8436E, RW8438E, RW8439E, COMBO CB1210328E, CB7820E, CBA020E, CBA820E, CBD620E, CBF220E, DVDRW DR8420E, DR8820E, MINICDRW RW4426U, STORAGE MC4820E.
045. Cyam (LITE-ON): CLW-224A, CLW-232A, CLW-240A.
046. CyberDrv: CB501D Combo, CB511D Combo, CB521D Combo, CB531D Combo, CW018D CD-R/RW, CW028D CD-R/RW, CW038D CD-R/RW, CW048D CD-R/RW, CW058D CD-R/RW, CW059D CD-R/RW, CW068D CD-R/RW, CW069D CD-R/RW, CW078D CD-R/RW, CW079D CD-R/RW, CW088D CD-R/RW, CW089D CD-R/RW, CW098D CD-R/RW, CW099D CD-R/RW, DX042D DVD+RW, DX081D DVD+RW, DX082D DVD+RW, EW058U CD-R/RW, EW068U CD-R/RW, EW078U CD-R/RW, EW088U CD-R/RW, EX042U DVD+RW, EX081U DVD+RW, EX082U DVD+RW, SX042D DVD+RW, SX082D DVD+RW.
047. DAEWOO (AOPEN): CD-RW RW5224.
048. DELTA: CDE6121, CRW-ES4420, ODE-6121, ODR-6121, OME-W141, OIP-PW2004A, OIP-RW2004/B, OIP-RW2004A.
049. DGMaster (LITE-ON): DGM-241040,DGM-321240, DGM-401248, DGM-481248, DGM-482448.
050. DIAMOND: DATA 40X16X10, 40X20X10, 40X24X10.
051. DIXALL (BTC): IDE5224.
052. DPL: R130, R210, R310, R320, R350, R810.
053. DRW (BTC): IDE1004, IDE1108.
054. DVD (PHILIPS): DVDRW6002.
055. DVD Dual (BTC): GO-W0404A.
056. DVD+RW (CyberDrv): DX042D DVD+RW, DX081D DVD+RW, DX082D DVD+RW, EX042U DVD+RW, EX081U DVD+RW, EX082U DVD+RW, SX042D DVD+RW, SX082D DVD+RW.
057. DVDR/RW (AccessTek): DD1601.
058. DVDRW (BTC): 1004IB, 1004IM, 1008IB, 1008IM, 1012IM, 1016IM, DUALS801E, DUALS801I, IDE1004, IDE1008, IDE1012, IDE1016, IDE1104, IDE1108, IDE1112, IDE1116, IDE H16X, 16X, USB 16X.
059. DVDRW (LITE-ON): 16X16X, DRW-1S40, DRW-1S41, DRW-1S61, DRW-1S65, DRW-1S66, DRW-1S81, DRW-1S85, DRW-2S80, DRW-2S81, DRW-2S83, DRW-2S85, DRW-3S120, DRW-3S121, DRW-3S125, DRW-3S161, DRW-3S163, DRW-3S165, DRW-3S167, DRW-3S169, DRW-3S189, DRW-3S83, DRW-3Y161, DRW-5S161, DRW-5S163, DRW-5S165, DRW-5S16H, DRW-5S16HS, DRW-5S185, DRW-6S160H, DRW-6S160P, DRW-6S160P6S, DRW-6S160S, DXW-5X89, DXW-6X169, S200DX, SOHW-1653S.
060. DYSAN: CRW-1622, CRW-426, CRW-1426, CRW-2216e, CRW-2216, CDRW-2216, CRW-4216, CRW-4216e, CDRW-4216, CDRW-4416, CDRW-2224, CDRW-4424, CDRW-4432, CDRW 4424, CDRW 4432.
061. EMC (PROVIEW): 52X24X52X.
062. EMPREX (BTC): EDW4020, IDE1108.
063. FEDELIA (ARTEC): 9RA-OA40, 9RA-OA48, 9RR-4048, 9RR-4848, 9RR-48W, 9RR-YO48, 9SM-4848, 9SM-52X, 9SM-52Z, 9SM-52ZA, 9SM-YG48, 9SM-YG52.
064. FREECOM (BTC): CDRW52K, DVD+/-RW8K1.
065. FREECOM_ (BTC): Combo48K, DVD+/-RW16B9, DVD+/-RW4K, DVD+/-RW8B.
066. FREECOM_ (NEC): DVD+/-RW16B8.
067. GENERIC (AccessTek): CRD-BPDV2, CRD-BPDV3, CD-RW 48/24/48X, 52/24/52X, 52/24/52X2, 52/32/52X, DVD DUAL 4XMax, DVD RW 12XMax, 16XMax, 4XMax, 8XMax, DVD+RW 4XMax, 4XMaxA, 8XMax, DVD-RW 4XMax, 8XMax, DVD/CDRW 48Max.
068. GENERIC (BTC): GEN 8000.
069. GENERIC (MATSUSHITA): CDRCB03, CDRCB04, CDRCB05, DVD-RAM MLT01, MLT02, MLT03.
070. GENERIC (PHILIPS): FREECOM24B, FREECOM24B USB, FREECOM24D, FREECOM24E, FREECOM32A, FREECOM52I.
071. GENERIC (SANYO): CD-R CRD-R800S (firmware version 1.23 or later), CRD-RW1 (firmware version 1.09 or later), CRD-RW2, CRD-RW800P, CDRCB01, CDRRW03, CDRRW06, CDRRW08, CRD-BP2, CRD-BP3, CRD-BP4, CRD-BP5, CRD-BP6, CRD-BP900P, CRD-BP1300P, CRD-BP1400P, CRD-BP1500P, CRD-BP1600P, CRD-BP1700P.
072. GENERICP (MATSUSHITA): UJ-820P, UJ-820P DVD/CDRW, UJ-822P, UJ-822P DVD/CDRW, UJ-830P, UJ-830P DVD/CDRW, UJ-831P, UJ-831P DVD/CDRW.
073. GIGABYTE (LITE-ON): GO-B5232A, GO-B5232C, GO-R5232A, GO-R5232E, GO-W0804A, GO-W0808A, GO-W1608A, GO-W160A, GO-W160B, GO-W1616A, GO-W161A, GO-W161B, GO-W1623A.
074. Goldstar (LG): CD-RW CED-8041B, CED-8042B, CED-8043B, CED-8045B, CED-8060B, CED-8080B, CED-8081B, CED-8082B, CED-8083B, CED-8120B, CED-8121B, CED-8122B, CED-8123B, CED-8124B, CED-8125B, CED-8160B, CED-8161B, CED-8162B, CED-8163B, CED-8164B, CED-8165B, CEN-8080B, CEN-8081B, CEN-8082B, CEN-8083B, CEN-8084B, CEN-8085B, CCD-8080B, CCD-8081B, CCD-8082B, CCD-8083B, CCD-8120B, CCD-8121B, CCD-8122B, CCD-8123B, CCN-8080B, CCN-8081B, CCN-8082B, CCN-8083B.
075. HI-VAL: H2242, H161040A.
076. HL-DT-ST (LG): CD-RW_GCE-8487B, DVD-RW_GSA-H11N, DVDRAM_GSA-2164D, DVDRAM_GSA-2166D, DVDRAM_GSA-4165B, DVDRAM_GSA-H10N, DVDRAM_GSA-H30L, DVDRAM_GSA-T10N, CD-RW GCE-8121B, GCE-8122B, GCE-8123B, GCE-8124B, GCE-8125B, GCE-8160B, GCE-8161B, GCE-8162B, GCE-8163B, GCE-8164B, GCE-8165B, GCE-8080N, GCE-8081N, GCE-8082N, GCE-8083N, GCE-8084N, GCE-8085N, GCE-8240B, GCE-8320B, GCE-8321B, GCE-8322B, GCE-8400B, GCE-8401B, GCE-8402B, GCE-8403B, GCE-8404B, GCE-8405B, GCE-8480B, GCE-8481B, GCE-8482B, GCE-8483B, GCE-8484B, GCE-8485B, GCE-8487B, GCE-8520B, GCE-8521B, GCE-8522B, GCE-8523B, GCE-8524B, GCE-8525B, GCE-8526B, GCE-8527B, GCC-8123B, CDRW/DVD GCC4482, Combo 48X24-H0, GCC-4080B, GCC-4080N, GCC-4081B, GCC-4081N, GCC-4082B, GCC-4082N, GCC-4083B, GCC-4120B, GCC-4121B, GCC-4122B, GCC-4123B, GCC-5240P, GCC-5241P, GCC-8080B, GCC-8080N, GCC-8081B, GCC-8081N, GCC-8082B, GCC-8082N, GCC-8083B, GCC-8083N, GCC-8120B, GCC-8121B, GCC-8122B, DVD Du 4X/24X-H0, 8X/48X-H0, DVD+-RW GWA4040N, DVD+RW 4X/40X-H0, 8X/48X-H0, GCA-4040N, DVD-RAM GSA-H30L, GSA-T10N, DVD-ROM GDR8083N, DVD-RW GCA-4020B, GCA-4080N, GRA-4083B, GRA-4120B, GSA-4080N, GSA-4081B, GSA-4082B, GWA-4040B, GWA-4040N, GWA-4080N, GWA-4082B, GWA-4082N, GWA-4083B, GWA-4084B, GWA-4161B, GWA-4162B, DVDRAM GAS-4040B, GMA-4020B, GMA-4040B, GMA-4080N, GMA-4082N, GSA-2164D, GSA-2166D, GSA-4040A, GSA-4040B, GSA-4080N, GSA-4081B, GSA-4082B, GSA-4082N, GSA-4083N, GSA-4084N, GSA-4120B, GSA-4160B, GSA-4163B, GSA-4165B, GSA-4167B, GSA-5120D, GSA-H30L, GSA-T10N, DVDRRW GWA-4164B, GWA-4166B, RW/DVD GCC-2240P, GCC-4080N, GCC-4120B, GCC-4121B, GCC-4160N, GCC-4240N, GCC-4241N, GCC-4242N, GCC-4243N, GCC-4244N, GCC-4247N, GCC-4320B, GCC-4321B, GCC-4322B, GCC-4480B, GCC-4481B, GCC-4482B, GCC-4483B, GCC-4484B, GCC-4520B, GCC-4521B, GCC-4522B, GCC-4523B, GCC-4524B, GCC-5240P, GCC-5241P, GCC-8240N, GCC-8241N, GCC-8242N, GCC-8243N, GCC-8244N.
077. HP: dvd-writer, CD Writer 52r, CD-Writer cd12d, cd12n, cd12ri, cd14f, cd16b, cd16c, cd16Ci, cd16e, cd16f, cd16mi, cd16n, cd16r, cd16ri, cd16v, cd24p, cd52e, cd52i, 1610e, CD-Writer+ 7100, 7200, 7500, 8100, 8200, 8200a, 8200F, 8290, M820, 9100, 9100b, 9100c, 9100e, 9100ei, 9200, 9300, 9310, 9400, 9410, 9500, 9500b, 9600, 9700, 9700k, 9900j,     DVD Writer, DVD Writer 100i, 100j, 200e, 200i, 200j, 300c, 300e, 300i, 300n, 400c, 400e, 400i, 420c, 420e, 420i, 420n, 500c, 530i, 530r, 550s, 550Sl, 630C, 630i, 640b, 640c, 740B, 740c, 740e, 740i, 740r.
078. IDE (PHILIPS): R/RW 24x12A, 40x12A, 40x16A, JR/RW24.
079. IDE-CD (PHILIPS): CDRW7352, JR/RW24, ReWritable-2x2x6, R/RW 2x2x24, 4x4x24, 4x4x32, 8x4x32, 12x8x32, 12x8, 12x10, 16x10A, 16x12A, 20x10, 24x10A, 24x12A, 40x12A, 40x16A, 48xA, 48xB, 48xC.
080. IDE-CMB (PHILIPS): CMB6248.
081. IDE-DVD (PHILIPS): DVDRW6001, DVDRW6002, DVDRW6003, DVDRW8301, DVDRW8401, DVDRW8412, DVDRW8421, DVDRW8431, DVDRW8601, DVDRW8631, DVDRW8651, DVDRW8701, DVDRW8801, DVDRW8851, SDVD8431, SDVDRW8041, SDVDRW8042, SDVDRW8311, SDVDRW8422.
082. IMATION: IMW121032IAB, IMW161032IA, IMW241040IAB, IMW241224DV8EA, IMW242424DV8E, IMW321248IA, IMW401248IA, IMW402440EA, IMW4222DV8E, IMW482448DV16IA, IMW482448DV81AC, IMW522452IA, IMW523252DV161, IMW523252E, IMW523252IA, IMW523252IC, IMW8844DL8E, IMWDLRW16DL84E, IMWDVRW16DL84I, IMWDVRW16DLE, IMWDVRW16DLI, IMWDVRW16LI, IMWDVDRW8DE, IMWDVRW8DI, IMWDVRW8I, CD-R IMR080020, CD-RW IMW040420, IMW080220.
083. IOMEGA: CDDVD24128E24-B, CDDVD482416E23-B, CDDVD482416E23-C, CDDVD482416INT-B, CDDVD482416INT-C, CDDVD522416E23-C, CDDVD522416INT-C, CDDVD523216E23-B, CDDVD523216INT-B, CDRW15360INT-B, CDRW15362EXT3-B, CDRW19200INT-A, CDRW19202EXT2-B, CDRW23040INT-B, CDRW23040INT-C, CDRW23042EXT-B, CDRW23042EXT2-B, CDRW23042EXT3-B, CDRW23042EXT3-C, CDRW23042FEXT-B, CDRW27648INT-B, CDRW38402EXT2-B, CDRW55292EXT, CDRW55292EXT3, CDRW55292EXT3-B, CDRW55292EXT3-C, CDRW55292INT-B, CDRW55296EXT3, CDRW55296INT-B, CDRW55296INT-C, CDRW5529DEXT1-B, CDRW5529FEXT1-B, CDRW6400INT, CDRW6400INT-B, CDRW6402EXT-B, CDRW6402EXT-C, CDRW64892EXT3-B, CDRW64892EXT3-C, CDRW64896INT-B, CDRW64896INT-C, CDRW86522EXT3-B, CDRW86522EXT3-C, CDRW86528INT-B, CDRW86528INT-C, CDRW86592EXT3-B, CDRW9600INT-B, CDRW9602EXT-B, CDRW9602EXT3-B, DVDRW12448E2D-B, DVDRW12448IND-B, DVDRW4216IND-A, DVDRW4216INP-A, DVDRW4224E2Q-D, DVDRW4224INQ-D, DVDRW8424E2Q-D, DVDRW8424INQ-D, DVDRW8440E2D-B, DVDRW8440E2X-B, DVDRW8440IND-B, DVDRW8824E2Q-D, DVDRW8824INQ-D, ZIP CD, ZIPCD 4x650, ZIPCD 650, ZIPCD 650 USB, ZIPCD1024EXT, ZIPCD1024INT-A, ZIPCDINT1536, ZIPCDINT 1536, ZIPCD3840INT, ZIPCD3840INT-A, ZIPCD3840INT-E, ZIPCD-DVDROM.
084. JASS (BTC): JAS 5224, 8200, 8300.
085. JCCOM: JCD-62RW, CDRW-622, JCD-64RW, JCD-1622RW, JCD-1642RW.
086. JLMS (LITE-ON): LTC-48161K, XJ-HC401K, XJ-HC481K, XJ-SC241M, XJ-SC242K, XJ-SC242M, XJ-SC242S, COMBO LSC-24081, LSC-24081M, LSC-24081S, LSC-24082M, LSC-24082S.
087. JUMBO (QSI): CDRW/DVD DBW-481, DBW521A, SBW242U, DVDRW DDW-081, DDW-082.
088. JVC: XR-W2080 (firmware version 2.21 or later), XR-W2082, XR-W4080 (firmware version 1.20 or later), XR-W4082, XR-W4424B, XR-W4424.
089. KHYPER (LITE-ON): KDVRWDUA.
090. LACIE: CDBP-12432A, CDBP-12432S, CDBP-121032A, CDBP-121032S, CDBP-161040A, CDBP-161040S, CDBP-241040A, CDBP-241040S, CDBP-321040A, CDBP-321240A, CDBP-401240A, CDBP-401248A, CDRW-8432A, CDRW-12432S, CDRW-BOOSTER, LTR-1240B, CD-RW BOOSTER.
091. LACIE GR: Lacie 1394-CDROM.
092. LEMEL (LITE-ON): LRW-48D16L, LRW-5224L, LRW-5232L.
093. LG: CD-RW CED-8041B, CED-8042B, CED-8043B, CED-8045B, CED-8060B, CED-8080B, CED-8081B, CED-8082B, CED-8083B, CED-8120B, CED-8121B, CED-8122B, CED-8123B, CED-8124B, CED-8125B, CED-8160B, CED-8161B, CED-8162B, CED-8163B, CED-8164B, CED-8165B, CEN-8080B, CEN-8081B, CEN-8082B, CEN-8083B, CEN-8084B, CEN-8085B, CCD-8080B, CCD-8081B, CCD-8082B, CCD-8083B, CCD-8120B, CCD-8121B, CCD-8122B, CCD-8123B, CCN-8080B, CCN-8081B, CCN-8082B, CCN-8083B, GCE-8160B, GCE-8240B, GCE-8320B.
094. Linkage (AOPEN): CDRW2440E, CDRW4048E.
095. LITE-ON: CDR-6S48, CDR-6S52, CXR-3X40B, LTC-40161, LTC-48161H, LTC-48161K, LTC-48161T, LTR-511, LTR-0841, LTR-1240, LTR-1241, LTR-12101B, LTR-12101C, LTR-12102B, LTR-12102C, LTR-16101B, LTR-16101C, LTR-16102, LTR-16102B, LTR-16102C, LTR-24101B, LTR-24101C, LTR-24102B, LTR-24102C, LTR-24102M, LTR-24102S, LTR-24102U, LTR-24103S, LTR-32102H, LTR-32102S, LTR-3248MH, LTR-32103S, LTR-32105S, LTR-32123H, LTR-32123S, LTR-32125K, LTR-32125S, LTR-32125W, LTR-40125K, LTR-40125S, LTR-40125W, LTR-40126H, LTR-40126K, LTR-40126S, LTR-40246S, LTR-48125G, LTR-48125S, LTR-48125W, LTR-48126S, LTR-48166K, LTR-48166S, LTR-48246K, LTR-48246S, LTR-48247S, LTR-48248S, LTR-48327K, LTR-48327S, LTR-48328S, LTR-52246K, LTR-52246S, LTR-52247S, LTR-52248S, LTR-52328S, LTR-52326K, LTR-52326S, LTR-52327K, LTR-52327S, LTR-52328S, LXR-322, LXR-323, LXR-402, LXR-403, LXR-24101A, LXR-24101B, LXR-24102, LXR-24102S, LXR-24102U, LXR-24103, LXR-24163, LXR-32122, LXR-32122A, LXR-32122B, LXR-32122C, LXR-32122S, LXR-32123, LXR-40122, LXR-40122A, LXR-40122B, LXR-40122C, LXR-40123, LXR-40243, WLL-52Z, CD-RW 52X32-L0, SHR-48S1S, SHR-52S1S, SHR-52S9S, SOHR-4828S, SOHR-4838S, SOHR-4839S, SOHR-4839V, SOHR-48A8S, SOHR-48S9S, SOHR-5228S, SOHR-5238S, SOHR-5239S, SOHR-5239V, SOHR-52A8S, COMBO 48X24-L0, LTC-48161H, LTC-48161K, LTC-48162H, LTC-48162K, LTC-52161T, LTC-52162H, LTC-52162K, SHC-48P7K, SHC-48S6K, SHC-48S7K, SHC-52P7K, SHC-52S7K, SHOW-4839S, SOHC-4822K, SOHC-4832K, SOHC-4835H, SOHC-4835K, SOHC-4836K, SOHC-4836V, SOHC-5222K, SOHC-5232K, SOHC-5235H, SOHC-5235K, SOHC-5236K, SOHC-5236V, SOHC-52S6K, SOHW-4839S, SOUC-2481, USC-2481, DVD Du 4X/24X-L0, 8X/40X-L0, 8X/48X-L0, DVD+RW 4X/40X-L0, 8X/48X-L0, LDW-401S, LDW-402S, LDW-461S, LDW-661S, LDW-802S, SOHW-1203, SOHW1603S, SOHW16A3S, SOHW-802S, SOHW-822S, DVDRW DRW-2S81, LDW-1213S, LDW-400D, LDW-401D, LDW-401S, LDW-411S, LDW-412S, LDW-421S, LDW-440D, LDW-451S, LDW-611S, LDW-651S, LDW-802S, LDW-811S, LDW-812S, LDW-812SX, LDW-851S, LDW-851SX, LDW-853S, LXW-1696A, LXW-1696X, LXW-895X, SH-16AH7S, SH-16AL7S, SH-16AP7S, SH-16AS7S, SH-16WP7S, SH-16WS7S, SHM-160H6S, SHM-160P6S, SHM-160S6S, SHM-165H6S, SHM-165L6S, SHM-165P6S, SHM-165PEH, SHM-165S6S, SHM-166H6S, SHM-166P7S, SHM-166PFH, SHM-166S6S SHM-166S7S, SHM-16H5S, SHOW-1635S, SHOW-1673S, SHOW-1693S, SHOW-1893S, SHOW-812S, SHW-160H6S, SHW-160P6S, SHW-160S6S, SHW-1635S, SHW-1635SX, SHW-1655S, SHW-16H5S, SHW-16H5SX, SHW-16S5S, SHW-1855S, SOHW-0833S, SOHW-1210S, SOHW-1213S, SOHW-1253S, SOHW-1613S, SOHW-1613Y, SOHW-1614S, SOHW-1615S, SOHW-1633S, SOHW-1635S, SOHW-1653S, SOHW-1673S, SOHW-1693S, SOHW-16B3S, SOHW-16S5S, SOHW-1893S, SOHW-812S, SOHW-813S, SOHW-832S, SOHW-833S, SOHW-852S, SOHW-853S, SOLW-891, SOXW-1696X, SOHW-822S VPPE.
096. LOGITEC: LCW-T1210BSU, CD-RW DRIVE.
097. M52X1 (ARTEC): VPN-RR4B24R, DVD+RW R448.
098. M52X16 (ARTEC): VPN-RR8F32W, VPN-R12J52Z, DVD+RW R8812, R121216.
099. MAD DOG (NEC): MD-16X2DVD9-8X, MD-16X3DVD9-8X, MD-16XDVD9, MD-16XDVD9A2, MD-8XDVDRW-PM.
100. MAG (PROVIEW): 52X24X52X.
101. MATSUSHITA (PANASONIC): CDRCB01, CDRRW01, CDRRW02, CDRRW03, CDRRW06, SW-9573, SW-9573D, SW-9583, SW-9583D, SW-9584D, UJ-810, UJ-811, UJ-812, DVD/CDRW, UJ-813, UJ-815A, UJ-816A, UJ-820, DVD/CDRW, UJ-820D, DVD/CDRW, UJ-822, DVD/CDRW, UJ-822D, DVD/CDRW, UJ-825, UJ-825D, UJ-830, DVD/CDRW, UJ-830CEA, UJ-830D, DVD/CDRW, UJ-831D, DVD/CDRW, UJ-835, UJ-835D, UJ-840D, DVD/CDRW, UJ-841D, DVD/CDRW, UJ-845D, DVD/CDRW, UJ-850D, DVD/CDRW, UJDA-750-II, UJDA-750-Il, UJDA-750-ll, UJDA310, UJDA320, UJDA330, UJDA330A, UJDA340, UJDA360, CDRW, UJDD420, UJDA710, UJDA710A, UJDA720, UJDB3100, UJDD410, UJDA750cDVD/CDRW, UJDA750FDVD/CDRW, UJDA750QT-A, UJDA755cDVD/CDRW, UJDA755yDVD/CDRW, UJDA755zDVD/CDRW, UJDA760cDVD/CDRW, UJDA760eDVD/CDRW, UJDA765cDVD/CDRW, BD-MLT SW-5582, UJ-210S, CD-R CW-7503, CW-7582, CD-RW CW-7585, CW-7586, CW-7122, CW-7122-B, CW-8121, CW-8122, CW-8123, CW-8124, CW-8221, CW-8571, CW-8572, CW-8572-C, CDRW/DVD UJDA740, DVD-R UJ-815, UJ-815A, UJ-816, UJ-816A, UJ-820, UJ-825, UJ-835, UJ-840, UJ-841, UJ-845, UJ-846, UJ-85J, DVD-RAM LF-D521, LF-D621, LF-M721, LF-M760, LF-M821, LF-M860, LF-P567, LF-P667, LF-P767, MLT01, SW-9571, SW-9571A, SW-9572, SW-9573, SW-9573C, SW-9573S, SW-9574, SW-9574A, SW-9574S, SW-9581, SW-9581A, SW-9581N, SW-9582, SW-9582N, SW-9583, SW-9583A, SW-9583C, SW-9583S, SW-9584, SW-9584A, SW-9585, SW-9585A, SW-9585S, SW-9586, SW-9586S, SW-9587, SW-9587A, SW-9587S, SW-9588, SW-9588A, UJ-810, UJ-811, UJ-811B, UJ-812, UJ-812B, UJ-813, UJ-815, UJ-815A, UJ-816, UJ-816A, UJ-820, UJ-820A, UJ-820B, UJ-820c, UJ-820S, UJ-822, UJ-822B, UJ-822c, UJ-822S, UJ-825, UJ-825A, UJ-825B, UJ-825S, UJ-830, UJ-830B, UJ-830c, UJ-830cc, UJ-830S, UJ-831S, UJ-832S, UJ-835, UJ-835A, UJ-835S, UJ-840A, UJ-840S, UJ-841A, UJ-841S, UJ-842B, UJ-842S, UJ-845A, UJ-845S, UJ-846, UJ-846A, UJ-846S, UJ-850S, UJ-85JA, UJ-85JS, UJDA730 DVD/CDRW, UJDA740 DVD/CDRW, UJDA740AC-A, UJDA745 DVD/CDRW, UJDA747 DVD/CDRW, UJDA750 DVD/CDRW, UJDA755 DVD/CDRW, UJDA757 DVD/CDRW, UJDA760 DVD/CDRW, UJDA765 DVD/CDRW, UJDA767 DVD/CDRW, UJDA770 DVD/CDRW.
102. MAXELL: MCDRW8X4X32, MCD-RW44-20, MCD-RW64-24, MCD-RW84-32, MCD-RW12-1032, MCD-RW16-1040, MCD-RW16-1040-L, MCD-RW24-1040-L, MCD-RW40-1248-L, MCD-RW4012-48, MCD-RW4812-48, MCD-RW4824-48, MCD-RW5224-52, MCD-RW5232-52.
103. MELCO: CRWS-SB1210.
104. MEMOREX: 16X-DDL-IN, 16X-DDL-SM-ILO, 16X-DDL-SM-IN, 24MAXX1040B1, 48MAXX1648AK, CD-RW2224, CD-RW4224, CD-RW4424, CDRW-2216, CDRW-2224, CDRW-4216, CDRW-4416, CDRW-4416S, CDRW-4420, CDRW-4420s, CDRW-4424, CDRW-4432, CDRW4420, CDRW4420S, CRW-1622, CRW-2216, CRW-2216e, CRW-2642, CRW-4216, CRW-4216e, DVD16+/-DL4RWID2, DVD16+/-DL4RWLD2, DVD16+/-DL4RWn16, DVD16+/-DL4RWnD, DVDUR/RWD16816AJ, 24MAXX 1040, 32Maxx 1240AK, 40EMAX 1240AJ, 2440AJ, 40MAXX 1240AJ, 1248AJ, 48MAX 244816AJ, 48MAXX 1248AJ, 2448AJ, 52MAX 245216AJ, 325216AJ, 325216AJ1, 52MAXX 2452AJ, 2452AK, 325216AJ, 3252AJ, 3252AJ1, 3252AJ1v2, 3252AT, CD-R 820S, CD-RW 8220S, 8432, 12432S, CDRW 4424, 4432, CDRW6424, CDRW6424S, CDRW/DVD 6424-4, DVD 16X-DDL-ILO, DVD+/-DLRWL1 F16, DVD+/-DLRWN16 D2, DVD+/-RW Dual-X1, True-8X, True8Xn, DVD+R/-R True8XI, True8Xl, DVD+R/RW 2.4x8AA, 4412AJ, 8412AJ, DVDUR/RW 12812AJ, 8412AJ, 8812AJ, DVDUR/RWD 8812AJ, SixteenMAXX 1040, TwelveMAXX 1032, 1032A, 1032P, Twelve MAXX 1032.
105. MEMUP (BTC): 1004IB, 1008IB, 4816IA, 5232IA, 5232IB, DRW1004IM, IDE1008, IDE4816, IDE5224.
106. Micro Advantage: DVDRW IDE1008.
107. MiniCDRW (ARCHOS): XS4424, XS4432, XS8432.
108. MiniRW (ACER): CD-R/RW 6X4X24, 8X8x24, 16X10, 24X10.
109. MITSUBISHI: CDRW226, CDRW226A, CDRW4420a, CDRW4420.
110. MITSUMI: CR-2600TE, CR-2801TE, CR-4801TE, CR-4802TE, CR-4804TE, CR-485FTE, CR-485GTE, CR-486ETE, CR-487ETE, CR-488ETE, CR-48X5TE, CR-48X8TE, CR-4809TE, CR-48X9TE, CR-48XATE, CR-48XCTE, CR-48XETE, CR-48XFTE, CR-48XGTE, CR-52XETE, CRS5224TE, DR-6800TE, DW-7801TE, DW-7802TE, DW-7872TE, DW-7873TE.
111. MOTOROLA (QSI): OA-X36, OA-X37, SLIM DVD/CD-RW, DVDRW.
112. MSI (AccessTek): CD-R/RW CR-48, CR-52, CD-RW 48XMAX, 52XMAX, 52X32-M0, CR-52, CR52, MS-8332, MS-8340, MS-8340S, MS-8348, MS-8348S, MS-8352M, MS-8416N, COMBO 48X24-M0, DVD Du 4X/24X-M0, 8X/48X-M0, DVD+RW 4X/40X-M0, 8X/48X-M0.
113. MTI: PLAYWRITE 8200.
114. NEC: NR-7900A, CD-RW NR-7500A, NR-7700A, NR-8500A, NR-8400A, NR-7800A, NR-7800B, NR-7900A, NR-9100A, NR-9200A, NR-9300A, DVD_RW ND-1100A, ND-1200A, ND-1300A, ND-1500A, ND-2300A, ND-2500A, ND-2500A2, ND-2510A, ND-3500A, ND-3500AD, ND-3500AG, ND-3520A, ND-3520AW, ND-3530A, ND-3540A, ND-3540B, ND-3550A, ND-3551A, ND-3650A, ND-4550A, ND-4551A, ND-5200A, ND-5300A, ND-5500A, ND-6500A, ND-6550A, ND-6750A, ND-6751A, ND-7550A, ND-7551A, DVD+-RW ND-3450A, ND-3530A, ND-6450A, ND-6500A, DVD+RW ND-1000A, ND-1100A, ND-1500A, ND-2100A, ND-2100AD, ND-3100A, ND-3100AD, ND-5000A, ND-5100A, ND-6050A, ND-6100A, DVD-RW ND-1300M, ND-1500M.
115. Norcent (LITE-ON): RWJ-321S, RWJ-401S, RWJ-481S, RWJ-482S, RWJ-483S.
116. NU (QSI): CDRW/DVD DBW-481, DBW-521, DBW-522, SBW242G, SBW242U, SBW243, UBW-241, CDRWDVD UBW-242, DVD+-RW SDW-082, SDW-082K, SDW-083, SDW-085, UDVD8042, UDW-042, DVD+RW SDW-081, SDW-081G, SDW-081L, UDW-041, DVD-RAM SDW-086, DVDRW DDW-041, DDW-061, DDW-081, DDW-082, DDW-121, DDW-122, DDW-161, DDW-162, SDW-041, SDW-042.
117. OLYMPUS (NEC): S-DVD-100.
118. OPDC (AccessTek): IDE4824CO.
119. OPTI (AccessTek): OPCRW4824, OPCRW5224, OPCRW5232, OPDC4816, DVD DUAL 4XMax, DVD RW 16XMax, 4XMax, 8XMax, DVD+RW 4XMax, 4XMaxA, 8XMax, DVD-RW 4XMax, 8XMax.
120. OPTI (BTC): IDE1612CO, IDE4016CO, IDE5216CO.
121. OPTIMUM (LITE-ON): DVDRWDUA.
122. OPTORITE (AccessTek): CRD-BPDV2, CRD-BPDV3, DD0202, CD-RW CW1601, CW3201, CW4001, CW4002, CW4801, CW4802, CW5201, CW5202, CW5205, CW5207, TCW5201, COMBO DC4801, DVD RW DD0201, DD0203, DD0401, DD0405, DD1203, DD1205, DD1601, DD1603, TDD0201, DVD+RW DD0202, DD0205, DD0402, DVD-RW DD0204, DD0403, DD0404.
123. OTI-975 (BTC): SOCRATES, SOCRATES    1.00.
124. PATRIOT: LTR-12101B, LTR-16101B, LTR-16102B, LTR-16102C.
125. PHILIPS: 241040 CDRW, 241240 CDRW, 321240 CDRW, 401240 CDRW, 401248 CDRW, 482448 CDRW, 4424 CDRW, BDD1001, CDD3610, CDD3801, CDD4201 CD-R/RW, CDD4401 CD-R/RW, CDD4801 CD-R/RW, CDD4851 CD-R/RW, CDD4911, CDD5101, CDD5251S, CDD5301, CDD5351, CDD5411, CDD5451, CDD6611, CDD6811, CDD6911, CDD6941, CDD7048, CDD7248, CDD7052, CDD7251, CDD7252, CDD7352, CDD7448, CDRW1610A, CDRW1612A, CDRW2010, CDRW2410A, CDRW2412A, CDRW3210S, CDRW4012A, CDRW4012P, CDRW4016A, CDRW4824, CDRW4832, CDRW48A, CDRW48P, CDRW5224, CDRW5232, CDRW5232L, CDRW5232P1, CDRW52P, CDRWDVD1610, CDRWDVD1612, CDRWDVD2010, CDRWDVD3210, CDRWDVD3210S, CDRWDVD3212, CDRWDVD4816, CDRWDVD4816a, CDRWDVD4816L, CDRWDVD4832, CDRWDVD52, CMB6148, CMB6248, COMB6048, COMB6248, DVD6001, DVD6002, DVD6003, DVD8301, DVD8351, DVD8401, DVD8412, DVD8421, DVD8431, DVD8601, DVD8631, DVD8651, DVD8701, DVD8731, DVD8801, DVD8900, DVD+RW-D01, DVD+RW-D28, DVD+RW-D38, DVD+RW-D48, DVD+RW-S44, DVD8851, DVDR1628P1, DVDR1640P, DVDR1648P, DVDR1648P1, DVDR1660P1, DVDR1668P1, DVDR16LS, DVDR824DP, DVDR824P, DVDR885P, DVDRW1208, DVDRW228, DVDRW248, DVDRW416, DVDRW416N, DVDRW424, DVDRW424R, DVDRW428, DVDRW448, DVDRW8301, DVDRW832, DVDRW8900, ED16DVDS, ED8DVDRW, ES8DVDRW, ES8DVDRX, JR24CDRW, JR32RWDV, JR48RWDV, JR4DVDRW, JR52CDRW, JR52RWDV, JR/RW24, PBCO4824L, PBDV1601P, PBDV1628P1, PBDV1640P, PBDV1648P, PBDV1660P1, PBDV416P, PBDV824DP, PBDV824P, PBDV885P, PBRW4824, PBRW5224, PBRW5232, PBRW5232L, PBRW5232P, PBRWDVD4816L, PCA382RW IDE, PCRW1208, PCRW1208JR, PCRW1208MR, PCRW1208UE, PCRW404, PCRW406, PCRW5232, PCRW5232P, PCRW804, RW48/DVD16a, RW52/DVD16a, RWDV4824L, RWDV5216P1, RWDV5216P2, SDVD6004, SDVD8041, SDVD8042, SDVD8311, SDVD8312, SDVD8421, SPD1400P1, SPD2300L1, SPD2400L1, SPD3000L1, SPD3200L1, SPD4000L1, SPD6000L1, SPD8003L1, SPD8004P1, BD-RE BDD1001, CD-R/RW RW7200A, CDRW/DVD CDD5211, CDD5260, CDD5262, CDD5263, COM6248, SCB5264, SCB5265, UCB5211, UCB5221, CDRWDVD SCB5266, SCB5268, UCB5231, DVD Du 4X/24X-P0, 8X/48X-P0, DVD+-RW DVD8701, SDVD8042, SDVD8431, SDVD8441, SDVD8811, SDVD8820, DVD+/-RW DVD8701, DVD8801, DVD+RW 4X/40X-P0, 8X/48X-P0, DVD8601, SDVD8041, SDVD8411, SDVD8421, SDVD8422, SDVD8423, UDVD8041, DVD-RAM SDVD8821, SDVD8822, SDVD8831, DVDRAM SDVD8821H, R/RW 48xA.
126. PIKA ONE (BTC): RIP4000P-C, RIP 8000, 8200, 8300.
127. PINE (AOPEN): 32X12X48 CDR-RW, 40X12X48 CD-RW, 40X12X48 CDR-RW.
128. PIONEER: BD-RW BDR-101, BDR-101A, DVD RW DVR-107D, DVR-A07D, DVD-RW DVR-103, DVR-104, DVR-105, DVR-106D, DVR-106RD, DVR-107D, DVR-107RD, DVR-108, DVR-108D, DVR-108RD, DVR-109, DVR-109D, DVR-109RD, DVR-110, DVR-110D, DVR-110RD, DVR-111, DVR-111D, DVR-111RD, DVR-111RF, DVR-A03, DVR-A04, DVR-A05, DVR-A06D, DVR-A06RD, DVR-A07D, DVR-A07RD, DVR-A08, DVR-A08D, DVR-A08RD, DVR-A09, DVR-A09D, DVR-A09RD, DVR-A10, DVR-A10D, DVR-A10RD, DVR-A11, DVR-A11D, DVR-A11RD, DVR-K04L, DVR-K04RA, DVR-K05, DVR-K05RA, DVR-K06RS, DVR-K11, DVR-K12D, DVR-K12RA, DVR-K13, DVR-K13D, DVR-K13RA, DVR-K14, DVR-K14D, DVR-K14L, DVR-K14RA, DVR-K15, DVR-K15RA, DVR-K16, DVR-K16RA, DVR-K16RF, DVR-K16RS, DVR-SK12D, DVR-SK13D, DVR-SK14D, DVD/CDRW DCR-111.
129. PLEXTOR: PX-504A DVD+R/RW, PX-S2410TU, CD-R PREMIUM, PX-320A, PX-R412C, PX-R820T, PX-S2410TU, PX-S88T, PX-W1210A, PX-W1210S, PX-W124TS, PX-W1610A, PX-W1610S, PX-W2410A, PX-W4012A, PX-W4012S, PX-W4220T, PX-W4824A, PX-W5224A, PX-W8220T, PX-W8432T, DVDR PX-504A, PX-708A, PX-708A2, PX-708UF, PX-708UF2, PX-712A, PX-712SA, PX-716A, PX-716AL, PX-740A, PX-760A.
130. POLAROID: 24X CD-RW DRIVE, 32X CD-RW DRIVE, 40X CD-RW DRIVE, 48X CD-RW DRIVE, BurnMax16, BURNMAX16 CB, BurnMax16EX, BURNMAX16EX CB, BURNMAX32 COMBO, BURNMAX32EX COMBO, BurnMax40, BURNMAX40 CB, BurnMax40EX, BURNMAX40EX CB, BurnMax40PX, BURNMAX48, BURNMAX48 CB, BurnMAX48CO, BURNMAX48EX, BURNMAX48EX CB, BurnMAX52, BurnMAX52CB, BurnMAX52SO, BurnMAX52EX, BurnMAX52EX SO, PROBT 5224.
131. Portable (ACER): CD-R/RW 4X4X24, CD-R/RW 6X4X24, CD-R/RW 4X4X6.
132. PROVIEW: CD-R/RW 52X24X52.
133. Q-lity (QSI): CD-R/RW ECW-043.
134. QPS: CD-W54E, CD-W58E, CD-W512EB, CD-W516EB, CD-W524E, CR-48XATE, CRD-BP1400P, CRD-BP1500P, CRD-BP1500U, CRD-BP1600P, CRD-BP1700P, CRD-BP4, LTR-16101B, LTR-20101B, LTR-24101B, RW-241040, CD-R PX-W1610A, PX-W1210A, PX-W8432T, PX-W1610S, PX-W1210S, PX-W124TS, PX-W2410A, CD-R/RW SW-408B, SW-208B, 16X10, 20X10, 24X10.
135. QSI: 12X DVDRW DRIVE, 16X DVDRW DRIVE, 24X CDRW/DVD S, US, 4X DVDRW DRIVE S, 52X CDRW/DVD, A, 8X DVDRW DRIVE, S, CD-R/RW SCW-081, CD-RW SCW-081, 8x8x24x, CDRW/DVD DBW-481, DBW-521, DBW-522, SBW-161, SBW-241, SBW-242, SBW242B, SBW242C, SBW242G, SBW242U, SBW243, SWB242U, UBW-241, UBW241G, CDRWDVD SBW-245, SBW-245T, UBW-242, Combo DBW521S, UBW241SE, DDW-161 DVD Dual, DVD+-RW SDW-082, SDW-082G, SDW-082K, SDW-082S, SDW-083, SDW-085, UDW-042, DVD+RW SDW-081, SDW-081G, SDW-081L, SDW-081S, UDW-041, DVD-RAM SDW-086, SDW-086K, SDW-086L, DVD/CDRW SBW-081, SBW-161, SBW-242, DVDRW DDW-041, DDW-061, DDW-081, DDW-082, DDW-121, DDW-122, DDW-161, DDW-162, SDW-041, SDW-042.
136. RICOH: DM-828, CD-R/RW MC104S, MP6200S, MP6201S, MP6200A, MP7040A, MP7040S, MP7060A, MP7060S, MP7063A, MP7080A, MP7080S, MP7083A, MP7120A, MP7120S, MP7125A, MP7125AP, MP7163A, MP7200A, MP7240A, MP7400A, MP8040A, MP8080A, MP9060, MP9120, MP9200, RW7040A, RW7040S, RW7060A, RW7060S, RW8040A, RW9060, RW104S, RW7080S, RW7080A, RW7063A, RW7120A, RW7120S, RW7083A, RW9120, RW7125A, RW8080A, RW7200A, RW9200, RW7163A, RW7400A, CD-RW MP7320A, MP7400A, MP7480A, MP7520A, RW7400A, RW7480A, RW7520A, DVD+RW MP5120, MP5125, MP5240, MP5240A, MP5240A24, MP5308, MP5308D, MP5308DB, MP5312DB, MP5316DA, MP5316DAD, MP5316DAG, MP5316DB, MP8160, MP8165, RW5120, RW5125, RW5240, RW5308, RW5308D, RW5308DB, RW5312DB, RW5316DA, RW5316DAD, RW5316DAG, RW5316DB, RW8160, RW8165.
137. RIDATA (AccessTek): DVD DUAL 4XMax, DVD RW 16XMax, 4XMax, 8XMax, DVD+RW 4XMax, 4XMaxA, 8XMax, DVD-RW 4XMax, 8XMax, DVDRW RDA-12042.
138. RM (BTC): CD-RW BCE5224IM, BCE5232IM, COMBO BCO5216IM.
139. RWD (JVC): RW2224, RW4224, XR-RW4424.
140. SAF: CD-R6024, CD-RW4416S, CD-R6024, CD-RW2224, CD-RW4224A, CD-R8020, CD-RW8220, CD-RW8432, CD-RW12432, CD-RW6424S, CD-RW6424A.
141. SAMSUNG: CD-R/RW SCW-230, SN-208B, SW-204B, SW-204F, SW-206, SW-207F, SW-208B, SW-208F, SW-212B, SW-216B, SW-216F, SW-220B, SW-224B, SW-224F, SW-232B, SW-240B, SW-248B, SW-248F, SW-252B, SW-252F, SW-252S, SW-252T, SW-408B, SWE-240B, CDRW/DVD SM-308B, SM-308N, SM-312B, SM316B, SM-332B, SM-352B, SM-352F, SM-352N, SM-352S, SM-408B, SN-308B, SN-324B, SN-324F, SN-324S, SN-W08B, SU-408B, COMBO SM-304B, SM-304F, DVD-MULTI SRT03B, SRT04B, SRT08B, DVD+RW SH-W08A, SH-W12A.
142. SANYO: CD-R CRD-R800S (firmware version 1.23 or later), CRD-RW1 (firmware version 1.09 or later), CRD-RW800P, CRD-RW2, CRD-BP2, CRD-BP900P, CRD-BP3, CRD-BP1300P, CRD-BP4, CRD-BP1400P, CRD-BP5, CRD-BP1500P, CRD-BP1600P, CRD-BP6, CRD-BP1700P, CRD-BP1800P.
143. SATA (BENQ): DVD DD 4X16X4X16.
144. SATA-BD (PHILIPS): BDRE1001.
145. SCSI-CD (PHILIPS): ReWritable-2x2x6.
146. SCSI-ID (PHILIPS): ReWritable-2x2x6.
147. SHARK (BTC): CDRW1610IM, CDRW2410IM, CDRW3212IM.
148. Shecom: ikebana.
149. Slimtype (LITE-ON): LSC-24081MX, LSC-24081X, LSC-24082KX, LSC-24083K, XJ-SC241, XJ-SC241M, XJ-SC242K, XJ-SC242M, XJ-SC242S, COMBI LSC-24081, LSC-24081S, LSC-24101, LSC-24101S, LSC-24121, LSC-24121S, COMBO LSC-24081, LSC-24081M, LSC-24081S, LSC-24082K, LSC-24082M, LSC-24082S, LSC-24101, LSC-24101S, LSC-24121, LSC-24121S, LSC-2485K, SOLC-2481K, SOSC-2483K, SOSW-2483K, SSC-2481K, SSC-2485K, DVD+RW SDW-421S, SOSW-822S, SOSW-842S, SOSW-862S, SOSW-872S, SOUW-861Y, DVDRW SDW-200D, SDW-421S, SDW-431S, SDW-431Z, SDW-452S, SLW-831S, SLW-831SX, SOLW-831S, SOLW-891S, SOSW-452S, SOSW-813S, SOSW-832S, SOSW-833S, SOSW-833SX, SOSW-852S, SOUW-871Y, SSM-8515S, SSM-85H5S, SSW-8015S, SSW-8515S.
150. SONY: PCGA-DVRW1, iLINK DRIVE, CD-R CDU928E, CRX110E, CD-RW CRX-850E, CRX0811, CRX0821, CRX100E, CRX10U, CRX120E, CRX140E, CRX140S, CRX145E, CRX145S, CRX155E, CRX160E, CRX160S, CRX1611, CRX1611E, CRX1621, CRX1650L, CRX168B, CRX170E, CRX1750MU, CRX1750U, CRX175A, CRX175A1, CRX175A2, CRX175E, CRX175E1, CRX175E2, CRX175M, CRX185A1, CRX185E1, CRX185E2, CRX185E3, CRX195A1, CRX195E, CRX195E1, CRX195E4, CRX205E1, CRX20MU, CRX210A1, CRX210E1, CRX215E1, CRX215E4, CRX215E5, CRX216E, CRX217E, CRX217ED, CRX217SD, CRX218E, CRX220A1, CRX220E1, CRX220E2, CRX225A, CRX225A1, CRX225AU, CRX225E, CRX225E1, CRX230E, CRX230E1, CRX230E2, CRX230E3, CRX230E4, CRX230E5, CRX230ED, CRX230EE, CRX230SD, CRX2411, CRX300E, CRX300E1, CRX305E, CRX310E, CRX310ED, CRX315E, CRX320AE, CRX320E, CRX320ED, CRX320EE, CRX331E, CRX400E, CRX500E, CRX510E, CRX700E, CRX75A, CRX75L, CRX800E, CRX810E, CRX820E, CRX821E, CRX830E, CRX835E, CRX841E, CRX85A, CRX85MA, CRX85U, CRX950E, CRXP-90MU, CRXP90MU, DRU110A, DRU120A, DRX120L, MPDAP20U, MPD-AP20U, CDRW/DVD CRX330E, CRX830E, CRX835E, CDRWDVD CRX850E, DVD RW DRU-500A, DRU-500AX, DRU-510A, DRU-530A, DRU-540A, DRU-700A, DRU-710A, DRU-720A, DRU-800A, DRU-810A, DRU-820A, DRX-5100L, DRX-510UL, DRX-530UL, DW-D18A, DW-D22A, DW-D23A, DW-D26A, DW-D56A, DW-D56AG, DW-D58A, DW-D76A, DW-G120A, DW-G120S, DW-G121A, DW-G121S, DW-G160A, DW-G160S, DW-G161A, DW-G161S, DW-G520A, DW-G521A, DW-M10A, DW-P10A, DW-Q120A, DW-Q120S, DW-Q121A, DW-Q121S, DW-Q160A, DW-Q160S, DW-Q26A, DW-Q28A, DW-Q30A, DW-Q31A, DW-Q58A, DW-Q76A, DW-Q78A, DW-S32A, DW-U10A, DW-U12A, DW-U14A, DW-U18A, DW-U20A, DW-U50A, DW-U56A, DW-U56AG, DW-U76A, DRU 500A, 510A, DW U10A, U12A, U14A, U50A, U54A, DVD+-RW DW-D56A, DW-Q58A, DVD+/-RW DW-U18A, DVD+RW DRU-120A, DRU120A, DW-P18A, DW-P50A, DW-P56A, DW-R56A, RW5120, DW P50A, P54A.
151. SUPER (LITE-ON): DSA-6S165S, DSA-6S166H, DSM-6S165H.
152. SUPERA (LITE-ON): DSM-6S165P.
153. SUPERM (LITE-ON): DSM-6S165H, DSM-6S165L, DSM-6S165P, DSM-6S165S, DSM-7S166P, DSM-7S166S, DSM-FH166P.
154. TDK: CDRW121032, CDRW121032A, CDRW161032, CDRW161040, CDRW161040X, CDRW161040XA, CDRW241040B, CDRW241040X, CDRW241040UEX, CDRW241224UPBC, CDRW321040B, CDRW321040X, CDRW321240B, CDRW321240X, CDRW401240, CDRW401240AIN, CDRW401240B, CDRW401240X, CDRW401248B, CDRW401248UEX, CDRW4800B, CDRW4800D, CDRW4800X, CDRW481248B, CDRW481648UED, CDRW48244816B, CDRW482448AID, CDRW482448B, CDRW482448BC, CDRW5200B, CDRW5201B, CDRW5210UEB, CDRW522432UED, CDRW522448UED, CDRW523252B, CDRW8432, DVDRW0404N, DVDRW1280B, DVDRW1616EX, DVDRW1616N, DVDRW1682B, DVDRW420N, DVDRW800, DVDRW840, DVDRW840G, DVDRW880B, DVDRW880N, CDRW 401240UPB.
155. TEAC: CD-224E, CD-R56S, CD-R56S4, CD-R58S, CD-W216E, CD-W224E, CD-W224EA, CD-W24E, CD-W28E, CD-W512E, CD-W512EB, CD-W512SB, CD-W516EB, CD-W516EC, CD-W524E, CD-W532E, CD-W540E, CD-W548E, CD-W54E, CD-W552E, CD-W552EL, CD-W552G, CD-W552G-A, CD-W58E, DV-W227PU, DV-W22E, DV-W22E-93, DV-W24E, DV-W24ES, DV-W24SL, DV-W50D, DV-W50E, DV-W512G, DV-W516G, DV-W516GD, DV-W58G, DV-W58G-A, DV-W58GA, DW-216E, DW-224E, DW-224E-A, DW-224E-AA, DW-224E-AA82, DW-224E-B, DW-28E, DW-548DL, DW-552G, DVD+RW DV-W58E.
156. Thats w (AOPEN): fastX24, fastX40.
157. TORiSAN: CD-RW CDW-U4424.
158. TOSHIBA: GSA-4080N, IPC5025A, SD-R2512TAX, CD-R/RW SR-C8002, SR-C8102, SR-M8102, CD/DVDW SD-R5372, SD-R6472, SD-W4072, CDRW/DVD SDR1312, SDR1412, SDR1512, SDR1612, SDR2102, SDR2212, SDR2312, SDR2412, SDR2512, SDR2612, SDR2712, SDR5112, SDR6012, SDR6112, SDR6252, SDR9012, SDR9112, CDW/DVD SD-R1612, SD-R2612, DVD-ROM SA-R2102, SD-R1002, SD-R1102, SD-R1202, SD-R1312, SD-R1412, SD-R1512, SD-R1612, SD-R2002, SD-R2102, SD-R2212, SD-R2312, SD-R2412, SD-R2512, SD-R2612, SD-R2712, SD-R5002, SD-R5112, SD-R6012, SD-R6112, SD-R6252, SD-R9012, SD-R9112, DVDW/HD TS-L802A, ODD-DVD SD-R5272, SD-R5372, SD-R6252, SD-R6372, SD-R6472, SD-R6572, SD-W3002, SD-W4072, SDR5372D, SDR6112F, SDR6472D.
159. TRAXDATA: CDRW-2410E, CDRW-4012E, CDRW-4812E, CDRW-4816E, CDRW-4824E, CDRW-5212E, CDRW-5216E, CDRW-5224E, CDRW-5224E SO, CDRW12-12-32plus, CDRW121032+, CDRW2260+, CDRW2224 PLUS, CDRW4424 PLUS, CDRW4432 PLUS, CDRW522452plus, CRW2260 PRO.
160. TSSTcorp (TOSHIBA): CD-R/RW TS-H292A, TS-H292B, TS-H292C, TS-H292D, CD-RW TS-H292B, CD/DVDW ST-H552A, ST-H552B, ST-H553B, TS-H542A, TS-H552C, TS-H552D, TS-H552F, TS-H552L, TS-H552U, TS-H553A, TS-H652A, TS-L532A, TS-L532B, TS-L532C, TS-L532L, TS-L532M, TS-L532R, TS-L532U, TS-L533C, TS-L632A, TS-L632B, TS-L632C, TS-L632D, TS-L632L, TS-L802A, TS-U522A, TS-U612A, TS-U632A, CDW/DVD TS-H492A, TS-H492B, TS-H492C, TS-H492D, TS-H493A, TS-L462A, TS-L462B, TS-L462C, TS-L462D, TS-U462A, TS-U462B, CDRW/DVD TSL462C, CDRWDVD TS-H492C, DVDW/CD ST-H552A, ST-H552B, ST-H553B, TS-H552C, TS-H552D, TS-H552F, TS-H542A, TS-H552L, TS-H552U, TS-H553A, TS-H652A, TS-L532A, TS-L532B, TS-L532C, TS-L532L, TS-L532M, TS-L532R, TS-L532U, TS-L533C, TS-L632A, TS-L632B, TS-L632C, TS-L632D, TS-L802A, TS-L632L, TS-U522A, TS-U612A, TS-U632A.
161. ULTIMA (ARTEC): WRA-GA32, WRA-KA40, WRA-OA40, WRA-WA40.
162. USB (ACER): CD-R/RW 4X4X6, 6X4X6, 8X8X8.
163. USB (BTC): USB4816, USB5232, USB 5224.
164. USB-CD (PHILIPS): CDD5451, CDD7251.
165. USB-DVD (PHILIPS): DVD8351.
166. VERBATIM: 241040AA, 241040AB, 241040AL, 241040AT, 321240AA, 321240AB, 321240AL, 321240AT, 401248AA, 401248AB, 401248AL, 401248AT, 401248AX, 481248AA, 481248AB, 481248AL, 481248AT, 481648AA, 481648AB, 481648AX, 48244816AX, 482448AL, 482448AX, 522452AA, 522452AL, 522452AU, 522452AX, 523252AL, 523252AU, 523252AX, DVDR1AB, DVDR1AP, DVRW1AA, DVRW1AB, DVRW1AP, DVRW1AR, DVRW1AX, VBT241040A, VBT321040A.
167. WAITEC: ALADAR, ALADAR/1, CD-R WT2082, WT3284, CELERUS, FRISBY, FRISBYII, MEGALUS/1, RAPTOR, RAPTOR RED, SAURUS, SFINX16, SHUTTLE, STORM24, STORM32, STORM40, STORM24/1, STORM32/1, STORM40/1, STORM48/1, STORM52/1, STORM52/2, STORM 52/3, T-REX, TITAN, WT624, WT824, WT2422EI, WT2444EI, WT3244EI.
168. WPI: CDRW-622, CDRW-642e, CDRW-1622e, CDRW-1622, CDRW-1688, CDRW-2422, CDRW-4424, CDRW-4432, CDRW-8432, CDRW-8432i, CDRW-12832.
169. YAMAHA: CDR200, CDR400, CRW2260, CRW4260, CDR401, CRW4001, CRW2261, CRW4261, CRW2216S, CRW2216E, CRW4216S, CRW4416S, CRW4216E, CRW4416E, CRW6416S, CRW8424S, CRW8424E, CRW8824S, CRW8824E, CRW2100E, CRW2100IX, CRW2100S, CRW2200E, CRW2200IX, CRW2200S, CRW-70, CRW3200E, CRW3200S, CRW-F1E, CRW-F1S.


B. Emergency Recovery - by Using Recovery CD (Bootable CD) or Diskette
----------------------------------------------------------------------

Limitation and Usage of the command-line RESTORE program:

1) The command-line RESTORE program (RESTORE.EXE) only restores Drive-Image backup files. File-level backup files are not supported in this command-line RESTORE program. Please use the restore function inside NTI Backup NOW! (the Windows application) to restore File-level backup files.

Usage of the RESTORE program (RESTORE.EXE):

1) If you are restoring from a Recovery CD (Bootable CD), then you must follow one of the following:

For IDE Drives: Set your CD-ROM drive to come first in the boot sequence (e.g. "CD-ROM, A, C") in your BIOS settings.  

For SCSI Drives: If you have a SCSI drive, in the adapter settings, select "Enable bootable CD" option if your adapter supports it, and set SCSI to come first in the boot sequence (e.g. "SCSI, A, C") in your BIOS settings.
	
2) Insert the Recovery floppy disk (Startup Disk), or the Recovery CD (Bootable CD), Reboot your computer.

3) When the command line prompt appears, type "restore" and the backup file filename at the DOS prompt with a space in between "restore" and the filename, and press Enter. This backup file is the one that contains the Drive-Image backup of your Windows NT or Windows 2000 (e.g. your C: drive).

4) After the restore is done. Remove the Recovery floppy disk (Startup Disk), or the Recovery CD (Bootable CD), Reboot your computer.

g!rly · Answer

Manu08, 

D´accord pour antivir, l´autre rapport correspond aux instructions concernant la console de récupération; il est apparu comme ça ?

On avance pas beaucoup hélas...

Peux tu réessayer de passer combofix stp

@+

manu08 · Answer

oui l'autre rapport est apparu comme ca. Je n'ai plus de problèmes sur google

g!rly · Answer

C´est une bonne nouvelle en somme pour google....

Mais bon, je ne comprends pas pourquoi aucun outil ne peut finir de scanner complètement...

Peux tu passer ceci : (essayer)

Telecharge UsbFix sur ton bureau

http://sd-1.archive-host.com/membres/up/1366464061/UsbFix.rar

dezip le sur ton bureau

--> Lance l installation avec les parametres par default

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

--> Double clic sur le raccourci UsbFix sur ton bureau

--> Le pc va redémarer

-->Apres redémarrage post le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
Note : Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

@+

g!rly · Answer

Manu, 

Je vais me coucher, je regarderais le rapport d´usbfix demain...

Bonne nuit`

@+

Problème system security

54 réponses

Discussions similaires