besoin d'aide. Trojan ou virus!!!! Résolu/Fermé

Question

Bonjour,

je suis nouveau sur le forum et j'ai besoin d'aide!
Lorsque je démarre ma session sous vista seule la fenêtre mes documents s'ouvre. Il faut alors que j'arrête explorer et que je le relance afin d'avoir accès a mon bureau.

Lors de la premiere apparition de ce probleme, antivir m'a aussi detecte des fichiers suspects (heuristics spywares or malwares). Depuis, j'ai fait plusieurs scans avec ad-aware et spyboot qui ne m'ont rien trouvé. J'ai aussi fait un scan en ligne avec f-secure qui m'a supprimer 3 fichiers malwares.
Malgré cela, j'ai toujours mon problème au démarrage mais antivir ne détecte plus rien.

J'ai fait un scan avec hijackthis que vous pouvez trouver ci-dessous. Merci beaucoup de prendre le temps de vous intéresser a mon problème.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:46:26, on 10/10/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\explorer.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32undll32.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\Synaptics\SynTP\SynAsus.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\Taskmgr.exe
C:\Users\greg\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: (no name) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NI Background Service] C:\Program Files\National Instruments\Shared\Update Service\BackgroundService.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files
ational instruments\shared\mdns responder
imdnsnsp.dll
O13 - Gopher Prefix:
O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{47B545D5-B959-44BE-B27B-8D693B407E12}: NameServer = 134.34.3.2,134.34.3.3
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Helper Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - C:\Windows\system32\lkcitdl.exe
O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments Corporation - C:\Windows\system32\lkads.exe
O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments Corporation - C:\Windows\system32\lktsrv.exe
O23 - Service: NI Configuration Manager (mxssvr) - National Instruments Corporation - C:\Program Files\National Instruments\MAX
imxs.exe
O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\Security
idmsrv.exe
O23 - Service: National Instruments LXI Discovery Service (niLXIDiscovery) - National Instruments Corporation - C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe
O23 - Service: National Instruments mDNS Responder Service (nimDNSResponder) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\mDNS Responder
imdnsResponder.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corporation - C:\Windows\system32
isvcloc.exe
O23 - Service: National Instruments Variable Engine (NITaggerService) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\Tagger	agsrv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: OpcEnum - OPC Foundation - C:\Windows\system32\OpcEnum.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
End of file - 14026 bytes

Utilisateur anonyme · Answer

(Pour ceux qui on Vista , bien désactiver l'UAC avant d'utiliser l'outil )

Télécharger WORT (de dj QUIOU) sur le Bureau.

Faire redémarrer le PC en mode sans échec :

/!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

1) Redémarrer l'ordinateur .
2) Tapoter sur la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
3) Tapoter jusqu' à l'apparition de l'écran avec les options de démarrage .
4) Choisir la première option : Sans Échec , et valider en tapant sur [Entrée] .
5) Choisir son compte habituel ( et pas Administrateur ).
Attention : pas de connexion possible en mode sans échec , donc copiez ou imprimez bien la manipe pour éviter les erreurs ...

    * Double-cliquer sur le fichier WORT.exe ( Sous Vista , cliquer droit -> "lancer en tant qu'administrateur" ) et sélectionner le bureau à l'aide du bouton "Browse".
    * Suivre les instructions et double-cliquer sur le fichier WareOut_Removal_Tool.bat (Clique droit -> "lancer en tant qu'administrateur" si sous Vista) qui vient d'être créé sur le Bureau pour lancer l'outil ...
    * Sélectionner l'option 1 et valider par [entrée] .
    * Ne toucher à rien et laisser tavailler l'outil !
* A la fin de l'analyse, un rapport va s'ouvrir, poste le moi et attends mon avis avant continuer la désinfection

gros_minet · Answer

Merci beaucoup de ton aide.

voila le rapport!

===== Rapport WareOut Removal Tool ===== 
 
version 3.6.2 
 
analyse effectuée le 11/10/2009 à 10:36:37,19 
 
Résultats de l'analyse : 
======================== 
 
~~~~ Recherche d'infections dans C:\ ~~~~ 
 
 
~~~~ Recherche d'infections dans C:\Program Files\ ~~~~ 
 
 
~~~~ Recherche d'infections dans C:\Windows\system\ ~~~~ 
 
 
~~~~ Recherche d'infections dans C:\Windows\system32\ ~~~~ 
 
 
~~~~ Recherche d'infections dans C:\Windows\system32\drivers\ ~~~~ 
 
 
~~~~ Recherche d'infections dans C:\Users\greg\AppData\Roaming\ ~~~~ 
 
 
~~~~ Recherche d'infections dans C:\Users\greg\Bureau\ ~~~~ 
 
 
~~~~ Recherche de détournement de DNS ~~~~ 
 
 
 
~~~~ Recherche de Rootkits ~~~~ 
 
_______________________________________________________________________ 
 
catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-11 10:37:05
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden files ...

scan completed successfully
hidden files: 0

_______________________________________________________________________ 


 
 
~~~~ Recherche d'infections dans C:\Users\greg\AppData\Local\Temp\ ~~~~ 
 
 
~~~~ Recherche d'infections dans C:\Users\greg\Start Menu\Programs\ ~~~~ 
 
 
~~~~ Nettoyage du registre ~~~~ 
 
 
~~~~ Tentative de réparation des entrées suivantes: ~~~~ 
 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] = "System" 
 
[HKLM\SYSTEM\CurrentControlSet\Services\Windows Tribute Service] 
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_Windows Tribute Service] 
 
~~~~ Vérification: ~~~~ 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    System    REG_SZ    

 
 
_________________________________ 
 
développé par http://pc-system.fr 
_________________________________

Utilisateur anonyme · Answer

Post un nouveau rapport rsit.a+

gros_minet · Answer

c'est quoi un rapport rsit???

Utilisateur anonyme · Answer

Excuses.


• Télécharge : http://images.malwareremoval.com/random/RSIT.exe
/!\ Important (Sous Vista) /!\
Vous devez exécuter RSIT avec les droits d'administrateur, pour cela Clique droit sur RSIT et "Lancer en tant qu'administrateur"
• Double clique sur RSIT.exe pour lancer l'outil.
• Clique sur 'Continue' à l'écran Disclaimer.
• Si l'outil Hijackthis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
• Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports.
( C:\RSIT\log.txt et C:\RSIT\info.txt )
• CTRL A pour sélectionner tout, CTRL C pour copier et puis CTRL V pour coller

gros_minet · Answer

voila les rapports

Logfile of random's system information tool 1.06 (written by random/random)
Run by greg at 2009-10-11 12:16:03
Microsoft® Windows Vista™ Ultimate  Service Pack 2
System drive C: has 44 GB (29%) free of 153 GB
Total RAM: 3070 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16:36, on 11/10/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\system32\Taskmgr.exe
C:\Windows\explorer.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32undll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Synaptics\SynTP\SynAsus.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\greg\Downloads\RSIT.exe
C:\Users\greg\Downloads\greg.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: (no name) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NI Background Service] C:\Program Files\National Instruments\Shared\Update Service\BackgroundService.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files
ational instruments\shared\mdns responder
imdnsnsp.dll
O13 - Gopher Prefix: 
O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{47B545D5-B959-44BE-B27B-8D693B407E12}: NameServer = 134.34.3.2,134.34.3.3
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Helper Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - C:\Windows\system32\lkcitdl.exe
O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments Corporation - C:\Windows\system32\lkads.exe
O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments Corporation - C:\Windows\system32\lktsrv.exe
O23 - Service: NI Configuration Manager (mxssvr) - National Instruments Corporation - C:\Program Files\National Instruments\MAX
imxs.exe
O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\Security
idmsrv.exe
O23 - Service: National Instruments LXI Discovery Service (niLXIDiscovery) - National Instruments Corporation - C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe
O23 - Service: National Instruments mDNS Responder Service (nimDNSResponder) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\mDNS Responder
imdnsResponder.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corporation - C:\Windows\system32
isvcloc.exe
O23 - Service: National Instruments Variable Engine (NITaggerService) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\Tagger	agsrv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: OpcEnum - OPC Foundation - C:\Windows\system32\OpcEnum.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

Utilisateur anonyme · Answer

•	Bonjour 

•	Télécharge et installe : Malwarebyte’s Anti-Malware
•	(NB : S'il te manque"COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
•	A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée
•	Lance MBAM et laisse les Mises à jour se télécharger (sinon fais les manuellement au lancement du programme)
•	Puis va dans l'onglet "Recherche", coche "Exécuter un examen complet" puis "Rechercher"
•	Sélectionne tes disques durs" puis clique sur "Lancer l’examen"
•	A la fin du scan, clique sur Afficher les résultats
•	Coche tous les éléments détectés puis clique sur Supprimer la sélection
•	Enregistre le rapport
•	S'il t'est demandé de redémarrer, clique sur Yes
•	Poste le rapport de scan après la suppression ici.(poste le rapport, même si rien n'est détecté.)
•	Si tu as besoin d’aide regarde ce tutorial 
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

gros_minet · Answer

voila le rapport!

Malwarebytes' Anti-Malware 1.41
Version de la base de données: 2941
Windows 6.0.6002 Service Pack 2

11/10/2009 17:38:37
mbam-log-2009-10-11 (17-38-37).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 548341
Temps écoulé: 2 hour(s), 21 minute(s), 1 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon	askman (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\RECYCLER\S-1-5-21-1078591191-9057906569-555196360-6120\dllrun32.exe (Worm.Autorun.B) -> Delete on reboot.

Utilisateur anonyme · Answer

C:\RECYCLER\S-1-5-21-1078591191-9057906569-555196360-6120\dllrun32.exe (Worm.Autorun.B) -> Delete on reboot.
Pour ce fichier il te faut redémarrer ton pc .
Un petit renseignement par rapport a ton rapport.Tu es d'amsterdam ?

gros_minet · Answer

j'ai deja redemarre mon pc.

je ne suis pas d'amsterdam mais j'ai habite 2 ans aux Pays-Bas. Comment le vois-tu?

Merci

Utilisateur anonyme · Answer

C'est cette ligne qui ma permit d'identifier amsterdam;)
O17 - HKLM\System\CCS\Services\Tcpip\..\{47B545D5-B959-44BE-B27B-8D693B407E12}: NameServer = 134.34.3.2,134.34.3.3 

•  Télécharge: ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe sur ton bureau. 
•  Double-clique sur drweb-cureit.exe et clique sur Commencer le scan. 
•  Si il trouve des processus infectés, clique sur le bouton Oui pour Tout à l'invite.
•  Lorsque le scan rapide est terminé, clique sur Options > Changer la configuration. 
•  Choisis l'onglet Scanner, et décoche Analyse heuristique. 
•  De retour à la fenêtre principale : choisis Analyse complète. 
•  Clique la flèche verte sur la droite et le scan débutera. Une publicité apparaît quelquefois, ferme-la. 
•  Clique Oui pour Tout si un fichier est détecté. 
•  A la fin du scan, si des infections sont trouvées, clique sur Tout sélectionner, puis surDésinfecter. 
•  Si la désinfection est impossible, clique sur Quarantaine.
•  Au menu principal de l'outil, en haut à gauche, clique sur le menu Fichier et choisis Enregistrer le rapport. 
•  Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv.
•  Ferme Dr.Web CureIt! 
•  /!\ Important /!\ Redémarre ton ordinateur car certains fichiers peuvent être déplacés/réparés au redémarrage. 
•  Après le redémarrage, fais un copié/collé du rapport dans ta prochaine réponse

gros_minet · Answer

il est vraiment long ce scan. Je le ferai durant la journee de demain et le posterai demain soir.

Merci encore de ton aide.

G

Utilisateur anonyme · Answer

En effet le scan de dr web est très long mais d'une efficacité redoutable.

gros_minet · Answer

Salut,

bon j'ai fait le scan et dr web a trouve 2 trojans. Cependant, lorsque j'ai voulu sauvegarder le rapport, j'ai eu droit a un joli ecran bleu et windows a redemarre donc je n'ai pas le rapport!

Dois-je recommencer pour que tu vois le rapport ou on passe a la suite?

G

Utilisateur anonyme · Answer

Post un nouveau rapport rsit pour vérifier

gros_minet · Answer

Le voila!

Logfile of random's system information tool 1.06 (written by random/random)
Run by greg at 2009-10-12 20:14:48
Microsoft® Windows Vista™ Ultimate  Service Pack 2
System drive C: has 45 GB (30%) free of 153 GB
Total RAM: 3070 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:14:57, on 12/10/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Windows\explorer.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32undll32.exe
C:\Program Files\Synaptics\SynTP\SynAsus.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\greg\Downloads\RSIT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\greg\Downloads\greg.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: (no name) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\AsScrProlog.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NI Background Service] C:\Program Files\National Instruments\Shared\Update Service\BackgroundService.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Ajouter à un fichier PDF existant - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files
ational instruments\shared\mdns responder
imdnsnsp.dll
O13 - Gopher Prefix: 
O16 - DPF: {076169AA-8C3D-4CFC-AC23-3ACA88FC21B5} (F-Secure Online Scanner Launcher) - http://download.sp.f-secure.com/ols/f-secure-rtm/resources/fslauncher.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/onlineservices/fshc/fscax.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{47B545D5-B959-44BE-B27B-8D693B407E12}: NameServer = 134.34.3.2,134.34.3.3
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Helper Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - C:\Windows\system32\lkcitdl.exe
O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments Corporation - C:\Windows\system32\lkads.exe
O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments Corporation - C:\Windows\system32\lktsrv.exe
O23 - Service: NI Configuration Manager (mxssvr) - National Instruments Corporation - C:\Program Files\National Instruments\MAX
imxs.exe
O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\Security
idmsrv.exe
O23 - Service: National Instruments LXI Discovery Service (niLXIDiscovery) - National Instruments Corporation - C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe
O23 - Service: National Instruments mDNS Responder Service (nimDNSResponder) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\mDNS Responder
imdnsResponder.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corporation - C:\Windows\system32
isvcloc.exe
O23 - Service: National Instruments Variable Engine (NITaggerService) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\Tagger	agsrv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32
vvsvc.exe
O23 - Service: OpcEnum - OPC Foundation - C:\Windows\system32\OpcEnum.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

Utilisateur anonyme · Answer

• Telecharge et install UsbFix par Chiquitine29
 (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir
• Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "éxécuter en tant qu'administrateur" .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] . 
• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée] 
• Laisse travailler l outil.
• Ensuite post le rapport UsbFix.txt qui apparaitra.
• Note : Le rapport UsbFix.txt est sauvegardé à la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 
• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 
• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html

gros_minet · Answer

############################## | UsbFix V6.041 |

User : greg (Administrators) # GMALINOWSKI
Update on 12/10/2009 by Chiquitine29, C_XX & Chimay8
Start at: 20:25:19 | 12/10/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

Intel(R) Core(TM)2 Duo CPU     P8400  @ 2.26GHz
Microsoft® Windows Vista™ Ultimate  (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 7.0.6002.18005
Windows Firewall Status : Enabled

C:\ -> Local Fixed Disk # 149,04 Go (44,16 Go free) [VistaOS] # NTFS
D:\ -> Local Fixed Disk # 139,28 Go (121,44 Go free) [DATA] # NTFS
E:\ -> CD-ROM Disc
F:\ -> CD-ROM Disc
J:\ -> Removable Disk # 1,91 Go (130,38 Mo free) [GREG] # FAT

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32
vvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Windows\system32undll32.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\Windows\system32\lkcitdl.exe
C:\Windows\system32\lkads.exe
C:\Windows\system32\lktsrv.exe
C:\Program Files\National Instruments\MAX
imxs.exe
C:\Windows\System32\svchost.exe
C:\Program Files\National Instruments\Shared\Security
idmsrv.exe
C:\Windows\system32
isvcloc.exe
C:\Program Files\National Instruments\Shared\Tagger	agsrv.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\National Instruments\Shared\mDNS Responder
imdnsResponder.exe
C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Program Files\ATK Hotkey\WDC.exe
C:\Windows\explorer.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\AsScrPro.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\System32undll32.exe
C:\Program Files\Synaptics\SynTP\SynAsus.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
\?\C:\Windows\system32\wbem\WMIADAP.EXE

################## | Fichiers # Dossiers infectieux |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{1f5022d7-8e9a-11dd-b111-806e6f6e6963}
shell\AutoRun\command =E:\setup.exe 

HKCU\..\..\Explorer\MountPoints2\{21f518c7-9a15-11dd-a0ad-002243a3d93e}
shell\AutoRun\command =F:\win32/setup.exe 

HKCU\..\..\Explorer\MountPoints2\{e5f8ec6f-b279-11de-bb3c-002215b0d5aa}
shell\AutoRun\command =G:	mp.folder/restore.exe 
shell\ExploRE\CoMmaNd =G:	mp.folder/restore.exe 
shell\OPeN\commAnd =G:	mp.folder/restore.exe 

################## | ! Fin du rapport # UsbFix V6.041 ! |

Utilisateur anonyme · Answer

(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectées sans les ouvrir
• Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "éxécuter en tant qu'administrateur" .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 2 " ( Suppression ) et tape sur [entrée]  
• Ton bureau disparaitra et le pc redémarrera .
• Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.
• Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .
• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

gros_minet · Answer

############################## | UsbFix V6.041 |

User : 
Update on 12/10/2009 by Chiquitine29, C_XX & Chimay8
Start at: 20:37:08 | 12/10/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

Intel(R) Core(TM)2 Duo CPU     P8400  @ 2.26GHz
Microsoft® Windows Vista™ Ultimate  (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 7.0.6002.18005
Windows Firewall Status : Enabled

C:\ -> Local Fixed Disk # 149,04 Go (44,02 Go free) [VistaOS] # NTFS
D:\ -> Local Fixed Disk # 139,28 Go (121,44 Go free) [DATA] # NTFS
E:\ -> CD-ROM Disc
F:\ -> CD-ROM Disc
J:\ -> Removable Disk # 1,91 Go (130,38 Mo free) [GREG] # FAT

############################## | Processus actifs |

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32
vvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32undll32.exe
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\Windows\system32\lkcitdl.exe
C:\Windows\system32\lkads.exe
C:\Windows\system32\lktsrv.exe
C:\Program Files\National Instruments\MAX
imxs.exe
C:\Windows\System32\svchost.exe
C:\Program Files\National Instruments\Shared\Security
idmsrv.exe
C:\Windows\system32
isvcloc.exe
C:\Program Files\National Instruments\Shared\Tagger	agsrv.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\National Instruments\Shared\mDNS Responder
imdnsResponder.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Program Files\ATK Hotkey\WDC.exe
C:\Windows\system32\PresentationSettings.exe
C:\Windows\system32\Taskmgr.exe
C:\Windows\explorer.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32unonce.exe

################## | Fichiers # Dossiers infectieux |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{1f5022d7-8e9a-11dd-b111-806e6f6e6963}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{21f518c7-9a15-11dd-a0ad-002243a3d93e}\Shell\AutoRun\Command  
Supprimé ! HKCU\...\Explorer\MountPoints2\{e5f8ec6f-b279-11de-bb3c-002215b0d5aa}\Shell\AutoRun\Command  

################## | Listing des fichiers présent |

[18/09/2006 23:43|--a------|24] C:\autoexec.bat 
[11/04/2009 08:36|-rahs----|333257] C:\bootmgr 
[30/09/2008 05:46|-ra-s----|8192] C:\BOOTSECT.BAK 
[04/04/2007 21:01|--a------|19] C:\CA21.txt 
[18/09/2006 23:43|--a------|10] C:\config.sys 
[06/09/2008 09:21|--a------|24069] C:\devlist.txt 
[06/09/2008 09:21|--a------|9] C:\Finish.log 
[?|?|?] C:\hiberfil.sys 
[16/01/2009 13:30|-rahs----|0] C:\IO.SYS 
[24/07/2008 15:37|-rah-----|1048576] C:\M50V.BIN 
[08/08/2008 09:48|--a------|14] C:\M50VN_L50VC_L50VM_L50VN_M50VM_M50VC_VISTA.20 
[16/01/2009 13:30|-rahs----|0] C:\MSDOS.SYS 
[08/08/2008 09:22|--a------|30] C:\NERO.LOG 
[04/07/2008 06:35|--a------|21] C:\NIS2008.TXT 
[16/03/2007 01:18|--a------|25] C:\OFFICE2007_A.TXT 
[?|?|?] C:\pagefile.sys 
[05/09/2008 20:11|--a------|105] C:\Pass.txt 
[24/07/2008 11:05|--a------|2386] C:\Patch.LOG 
[29/04/2008 16:30|--a------|20] C:\READER_A.TXT 
[08/08/2008 09:48|--a------|42] C:\RECOVERY.DAT 
[29/05/2009 09:18|--a------|1778] C:\RHDSetup.log 
[30/09/2008 06:19|--a------|159] C:\setup.log 
[16/05/2006 02:22|--a------|5] C:\store.log 
[06/09/2008 07:51|--a------|166] C:\SumHidd.txt 
[06/09/2008 07:50|--a------|98] C:\SumOS.txt 
[02/02/2009 12:24|--a------|23556] C:\swfout.txt 
[12/10/2009 20:39|--a------|5633] C:\UsbFix.txt 
[01/08/2008 00:40|--a------|21] C:\V552.txt 
[01/10/2008 12:31|--a------|367] D:\Work - Shortcut.lnk 
[07/04/2009 16:09|--a------|6148] J:\.DS_Store 

################## | Vaccination |

# C:\autorun.inf -> Folder created by UsbFix.  
# D:\autorun.inf -> Folder created by UsbFix.  
# J:\autorun.inf -> Folder created by UsbFix.  

################## | ! Fin du rapport # UsbFix V6.041 ! |

Utilisateur anonyme · Answer

• Pour naviguer sur internet plus en sécurité et à l’abri des publicités, je te conseille vivement d’installer et d'utiliser le navigateur firefox Une fois que c'est fait, lance le et installe l’ extension de sécurité suivantes : adblock plus
pour bloquer les publicités ; 

•	WOT - Extension pour ton navigateur internet : 
Voici une extension à télécharger qui te permettra, en faisant tes recherches sur google, de savoir si le site proposé lors de tes recherches est un site de confiance ou un site à éviter car il pourrait infecter ton PC : 
Pour Firefox : https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/ 
Pour internet explorer : https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp  
-------------------------------------------------------------------------------------------------------------------------

&#61656;	Je conseille de mettre a jour internet explorer  même  si vous ne l’utilisé  jamais. Les MAJ  systéme se font par le biais de IE. Par conséquent on évite les failles de sécurité.
•	Télécharger  IE8 : ici

• Si Java n'est pas à jour, c'est une faille de sécurité. 
Il faut d'abord désinstaller l'ancienne version : Ouvre le menu démarrer --> panneau de configuration --> ajout/suppression de programmes --> sélectionne toutes les versions de java présentes et désinstalle les. 
Ensuite, télécharge et installe la nouvelle version depuis le site officiel de java : https://java.com/fr/ 

• Si Adobe Reader n’est pas à jour, c’est une faille de sécurité. Désinstalle le en allant dans menu démarrer --> panneau de configuration --> ajout/suppression de programmes. Puis télécharge et installe la nouvelle version. https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html 

• Tu dois aussi mettre à jour tous tes autres programmes pour combler des failles de sécurité... Vérifie les mises disponibles à l'aide de ce petit programme (choisis la version sans installation) : Update Checker https://www.commentcamarche.net/faq/9908-filehippo-app-manager-vos-logiciels-sont-ils-a-jour 
Installe le avec les paramètres par défaut en cliquant chaques fois sur Suivant. 

 Une fois installé, patiente quelques secondes et tu verras apparaître une icône verte dans ta barre des tâches te signalant qu'il y a des mises à jour disponibles. 

Double-cliques sur l'icône pour être redirrigé sur le site de téléchargement des mises à jour. 

* Un conseil : n'installe pas les BETA 
                               ====================================================
Pour éliminer les programmes de desinfections.

• Télécharge ToolsCleaner de A.Roshtein sur ton Bureau.(sur un des 2 liens) 
http://pc-system.fr/ 
https://www.commentcamarche.net/telecharger/ 34055291 toolscleaner 
• Clique sur Recherche et laisse le scan se terminer. 
• Clique, sur Suppression pour finaliser. 
• Tu peux, si tu le souhaites, te servir des Options facultatives. 
• Clique sur Quitter, pour que le rapport puisse se créer. 
• Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).
------------------------------------------------------------------------------------------------------------------------------

Désactiver/Réactiver la restauration système de Vista
•	Après une désinfection, il est nécessaire de désactiver puis réactiver la restauration système pour la purger car les points de restauration peuvent être infectés.
•	Cliquez sur le bouton Vista, faîtes un clic droit sur "Ordinateur" puis cliquez sur "Propriétés" .
•	Cliquez ensuite sur "Protection du système" .
•	Décochez la case du ou des disque(s) pour lesquels vous souhaitez désactiver la restauration du système .
•	Une confirmation est nécessaire et vous informe que les points de restaurations existants vont être supprimés sans possibilité de retour en arrière .
•	Pour réactiver la restauration système, il suffit de cocher à nouveau les cases.
•	Pensé  a vider la corbeille.




Tu peux mettre ton problème résolu !!Comment mettre résolu ??

gros_minet · Answer

je n'ai pas trouve  java sur mon ordi ce que je trouve etrange. De plus, toolscleaner ne fonctionne pas. Des que je le lance je vois apparaitre ne reponds pas et ca ne progresse plus!

Par ailleurs, pour l'instant lorsque je redemarre j'ai toujours le meme probleme, c'est a dire une fenetre mes documents ouverte et explorer qui ne fonctionne pas...

j'attends tes conseils.

G.

Utilisateur anonyme · Answer

Supprimes les tools utilisé pour la désinfection manuellement.

Pour java utilises javara.Trés facile d'utilisation.http://www.logiciel-freeware.net/wfdownloads-singlefile.cid-94-lid-528.htm

Télécharges la maj sp3 .Peut être que cela résoudra ton problème. http://www.microsoft.com/downloads/details.aspx?familyid=2FCDE6CE-B5FB-4488-8C50-FE22559D164E&displaylang=fr

Sinon je ne vois pas comment t"aider car ton pc n'est plus infecté.Ton problème vient très certainement de ton matériel ou des pilotes.

gros_minet · Answer

je le telechargerai demain!
Encore une petite question. Que dois-je utiliser en cmplement d'antivir pour proteger mon ordi.

Merci beaucoup de ton aide, c'est vraiment sympa. 

Bonne nuit a toi.

G.

Utilisateur anonyme · Answer

Anti spyware.
Spyware terminator.Tu l’installes et tu refuses la toolbar!
Clic sur le lien .Fait les maj et lance une analyse complète. Supprime ce qu'il trouve.Post le rapport 

https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/41933.html

Pare feu.Désactive celui de vista.
Bonjour
Pour le pare feu installes pc tools firewall. 

pare-feu

gros_minet · Answer

le voila!

Logfile of Spyware Terminator v2.6.1.239 (db:3.010.012.000)
Scan Time: 13/10/2009 10:41:29  length: 3302 s
Platform: VISTA (6.0.0.6002)
User: Admin
Boot Mode: Normal
Scan type: Full_Spyware_Scan
Scanned Objects: 91338 (Critical:1)
Filter: No System items, No Safe items, No Invalid items

Running Processes
nvvsvc.exe [NVIDIA Corporation] : C:\Windows\system32
vvsvc.exe
SLsvc.exe [Microsoft Corporation] : C:\Windows\system32\SLsvc.exe
rundll32.exe [Microsoft Corporation] : C:\Windows\system32undll32.exe
ADSMSrv.exe : C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
AsLdrSrv.exe : C:\Program Files\ATK Hotkey\AsLdrSrv.exe
GFNEXSrv.exe : C:\Program Files\ATKGFNEX\GFNEXSrv.exe
agrsmsvc.exe [Agere Systems] : C:\Windows\system32\agrsmsvc.exe
AppleMobileDeviceService.exe [Apple Inc.] : C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
hsssrv.exe [AnchorFree Inc.] : C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
lkcitdl.exe [National Instruments, Inc.] : C:\Windows\system32\lkcitdl.exe
lkads.exe [National Instruments Corporation] : C:\Windows\system32\lkads.exe
lktsrv.exe [National Instruments Corporation] : C:\Windows\system32\lktsrv.exe
nimxs.exe [National Instruments Corporation] : C:\Program Files\National Instruments\MAX
imxs.exe
nidmsrv.exe [National Instruments Corporation] : C:\Program Files\National Instruments\Shared\Security
idmsrv.exe
nisvcloc.exe [National Instruments Corporation] : C:\Windows\system32
isvcloc.exe
tagsrv.exe [National Instruments Corporation] : C:\Program Files\National Instruments\Shared\Tagger	agsrv.exe
spmgr.exe : C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
nimdnsResponder.exe [National Instruments Corporation] : C:\Program Files\National Instruments\Shared\mDNS Responder
imdnsResponder.exe
niLxiDiscovery.exe [National Instruments Corporation] : C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe
sensorsrv.exe [ASUS] : C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
ALU.exe : C:\Program Files\ASUS\ASUS Live Update\ALU.exe
HControl.exe [ATK0100] : C:\Program Files\ATK Hotkey\HControl.exe
MsgTranAgt.exe : C:\Program Files\ATK Hotkey\MsgTranAgt.exe
wcourier.exe : C:\Program Files\Wireless Console 2\wcourier.exe
BatteryLife.exe [ATK] : C:\Program Files\P4G\BatteryLife.exe
ACMON.exe [ATK] : C:\Program Files\ASUS\Splendid\ACMON.exe
ASPG.exe [ASUS] : C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe
ACEngSvr.exe [ASUSTeK] : C:\Windows\system32\ACEngSvr.exe
ATKOSD.exe : C:\Program Files\ATK Hotkey\ATKOSD.exe
KBFiltr.exe : C:\Program Files\ATK Hotkey\KBFiltr.exe
WDC.exe : C:\Program Files\ATK Hotkey\WDC.exe
ATKOSD2.exe : C:\Program Files\ATKOSD2\ATKOSD2.exe
DMedia.exe : C:\Program Files\ASUS\ATK Media\DMedia.exe
AsScrPro.exe [ASUS] : C:\Windows\AsScrPro.exe
GrooveMonitor.exe [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
rundll32.exe [Microsoft Corporation] : C:\Windows\system32undll32.exe
wmpnscfg.exe [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnscfg.exe
SetPoint.exe [Logitech, Inc.] : C:\Program Files\Logitech\SetPoint\SetPoint.exe
lsnfier.exe [Microsoft Corporation] : C:\Users\greg\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe
SynAsus.exe [Synaptics, Inc.] : C:\Program Files\Synaptics\SynTP\SynAsus.exe
wmpnetwk.exe [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnetwk.exe
KHALMNPR.exe [Logitech, Inc.] : C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
iPodService.exe [Apple Inc.] : C:\Program Files\iPod\bin\iPodService.exe
SynTPHelper.exe [Synaptics, Inc.] : C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
thunderbird.exe [Mozilla Corporation] : C:\Program Files\Mozilla Thunderbird	hunderbird.exe
SkypeNames.exe [Skype Technologies S.A.] : C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe

Internet Settings
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = https://www.msn.com/fr-fr
R - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings, ProxyOverride = local
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain = 
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName = 

BHO
02 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} -  [Yahoo! Inc.] : C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
02 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} -  [RealPlayer] : C:\Program Files\Real\RealPlayerpbrowserrecordplugin.dll
02 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

Toolbars
03 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -  [Yahoo! Inc.] : C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, WMPNSCFG :  [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnscfg.exe
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, FileHippo.com :  [FileHippo.com] : C:\Program Files\FILEHIPPO.COM\UPDATECHECKER.EXE
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, DAEMON Tools Lite :  [DT Soft Ltd] : C:\Program Files\DAEMON TOOLS LITE\DAEMON.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ATKOSD2 :  : C:\Program Files\ATKOSD2\ATKOSD2.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ATKMEDIA :  : C:\Program Files\ASUS\ATK Media\DMedia.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ASUS Screen Saver Protector :  [ASUS] : C:\Windows\AsScrPro.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, ASUS Camera ScreenSaver :  : C:\Windows\AsScrProlog.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, GrooveMonitor :  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, NI Background Service :  [National Instruments] : C:\Program Files\National Instruments\Shared\Update Service\BackgroundService.exe
04 - Startup: %STARTUP%\Logitech . Enregistrement du produit.lnk [Leader Technologies/Logitech] : C:\Program Files\Common Files\Logishrd\eReg\SetPoint\eReg.exe
04 - Startup: %STARTUP%\OneNote 2007 Screen Clipper and Launcher.lnk [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
04 - Startup: %STARTUPALL%\Logitech SetPoint.lnk [Logitech, Inc.] : C:\Program Files\Logitech\SetPoint\SetPoint.exe

Shell Extensions
CLSID_PreviewMime - {92dbad9f-5025-49b0-9078-2d78f935e341} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
CLSID_PreviewEmail - {b9815375-5d7f-4ce2-9245-c9d4da436930} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
CLSID_PreviewHtml - {f8b8412b-dea3-4130-b36c-5e8be73106ac} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
Shell Message Handler - {5FA29220-36A1-40f9-89C6-F4B384B7642E} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
Microsoft Agent Character Property Sheet Handler - {143A62C8-C33B-11D1-84FE-00C04FA34A14} -  [Microsoft Corporation] : C:\Windows\MSAgent\agentpsh.dll
CompressedFolder - {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder Right Drag Handler - {BD472F60-27FA-11cf-B8B4-444553540000} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder SendTo Target - {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder Context Menu - {b8cdcb65-b1bf-4b42-9428-1dfdb7ee92af} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
Compressed (zipped) Folder DropHandler - {ed9d80b9-d157-457b-9192-0e7280313bf0} -  [Microsoft Corporation] : C:\Windows\system32\zipfldr.dll
&Windows Media Player - {0a4286ea-e355-44fb-8086-af3df7645bd9} -  [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpband.dll
 - {BB6B2374-3D79-41DB-87F4-896C91846510} -  [Microsoft Corporation] : C:\Windows\system32\emdmgmt.dll
Windows Photo Gallery Viewer Autoplay Handler - {9D687A4C-1404-41ef-A089-883B6FBECDE6} -  [Microsoft Corporation] : C:\Windows\system32undll32.exe
Portable Media Devices - {640167b4-59b0-47a6-b335-a6b3c0695aea} -  [Microsoft Corporation] : C:\Windows\system32\audiodev.dll
 - {2F603045-309F-11CF-9774-0020AFD0CFF6} -  [Synaptics, Inc.] : C:\Program Files\Synaptics\SynTP\SynTPCpl.dll
Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove Folder Synchronization - {2A541AE1-5BF6-4665-A8A3-CFA9672E4291} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove GFS Stub Icon Handler - {A449600E-1DC6-4232-B948-9BD794D62056} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove GFS Context Menu Handler - {6C467336-8281-4E60-8204-430CED96822D} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove XML Icon Handler - {387E725D-DC16-4D76-B310-2C93ED4752A0} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove Explorer Icon Overlay 3 (GFS Folder) - {16F3DD56-1AF5-4347-846D-7C10C4192619} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove Explorer Icon Overlay 2 (GFS Stub) - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove Explorer Icon Overlay 4 (GFS Unread Mark) - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove Explorer Icon Overlay 1 (GFS Unread Stub) - {99FD978C-D287-4F50-827F-B2C658EDA8E7} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) - {920E6DB1-9907-4370-B3A0-BAFC03D81399} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
Microsoft Office OneNote Namespace Extension for Windows Desktop Search - {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\ONFILTER.DLL
KbLogiExt Class - {DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C} -  [Logitech, Inc.] : C:\Program Files\Logitech\SetPoint\kbcplext.dll
LogiExt Class - {B9B9F083-2B04-452A-8691-83694AC1037B} -  [Logitech, Inc.] : C:\Program Files\Logitech\SetPoint\mcplext.dll
Enhanced Storage Data Source - {9113A02D-00A3-46B9-BC5F-9C04DADDD5D7} -  [Microsoft Corporation] : C:\Windows\system32\EhStorShell.dll
iTunes - {B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} -  [Apple Inc.] : C:\Program Files\iTunes\iTunesMiniPlayer.dll
RealOne Player Context Menu Class - {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} -  [RealNetworks, Inc.] : C:\Program Files\Real\RealPlayerpshell.dll

Shell Extecute Hooks
Groove GFS Stub Execution Hook - {{B5A7F190-DDA6-4420-B3BA-52453494E6CD}} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

Protocol Handler
Local Groove Web Services Protocol - {88FED34C-F0CA-4636-A375-3CB6248B04CD} -  [Microsoft Corporation] : C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
 - {828030A1-22C1-4009-854F-8E305202313F} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll
MHTML Asynchronous Pluggable Protocol Handler - {05300401-BCBC-11d0-85E3-00C04FD85AB4} -  [Microsoft Corporation] : C:\Windows\system32\inetcomm.dll
 - {828030A1-22C1-4009-854F-8E305202313F} -  [Microsoft Corporation] : C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll

Services
23 - : C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
23 - [Agere Systems] : C:\Windows\system32\agrsmsvc.exe
23 - [Agere Systems] : C:\Windows\system32\DRIVERS\AGRSM.sys
23 - [Apple Inc.] : C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
23 - : C:\Program Files\ATK Hotkey\AsLdrSrv.exe
23 - : C:\Program Files\ATKGFNEX\ASMMAP.sys
23 - : C:\Program Files\ATKGFNEX\GFNEXSrv.exe
23 - : C:\Windows\system32\DRIVERS\atksgt.sys
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\bowser.sys
23 - [eMPIA Technology, Inc.] : C:\Windows\system32\DRIVERS\etDevice.sys
23 - [Microsoft Corporation] : C:\Windows\system32\Drivers\dfsc.sys
23 - [eMPIA Technology Inc.] : C:\Windows\system32\DRIVERS\etFilter.sys
23 - [GEAR Software Inc.] : C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
23 - : C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys
23 - [AnchorFree Inc.] : C:\Windows\system32\DRIVERS\HssDrv.sys
23 - [AnchorFree Inc.] : C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
23 - [Intel Corporation] : C:\Windows\system32\DRIVERS\iaStor.sys
23 - [Realtek Semiconductor Corp.] : C:\Windows\system32\drivers\RTKVHDA.sys
23 - [Apple Inc.] : C:\Program Files\iPod\bin\iPodService.exe
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\msiscsi.sys
23 - [ITE Tech. Inc.] : C:\Windows\system32\DRIVERS\itecir.sys
23 - : C:\Windows\system32\DRIVERS\kbfiltr.sys
23 - : C:\Windows\system32\DRIVERS\lirsgt.sys
23 - [National Instruments, Inc.] : C:\Windows\system32\lkcitdl.exe
23 - [National Instruments Corporation] : C:\Windows\system32\lkads.exe
23 - [National Instruments Corporation] : C:\Windows\system32\lktsrv.exe
23 - [Windows (R) Codename Longhorn DDK provider] : C:\Windows\system32\DRIVERS\lullaby.sys
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\mrxsmb10.sys
23 - [Microsoft Corporation] : C:\Windows\system32\DRIVERS\mssmbios.sys
23 - [ATK0100] : C:\Windows\system32\DRIVERS\ATKACPI.sys
23 - [National Instruments Corporation] : C:\Program Files\National Instruments\MAX
imxs.exe
23 - [Intel Corporation] : C:\Windows\system32\DRIVERS\NETw5v32.sys
23 - [National Instruments Corporation] : C:\Program Files\National Instruments\Shared\Security
idmsrv.exe
23 - [National Instruments Corporation] : C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe
23 - [National Instruments Corporation] : C:\Program Files\National Instruments\Shared\mDNS Responder
imdnsResponder.exe
23 - [National Instruments Corporation] : C:\Windows\system32\drivers
ipalk.sys
23 - [National Instruments Corporation] : C:\Windows\system32\drivers
ipbcfk.sys
23 - [National Instruments Corporation] : C:\Program Files\National Instruments\Shared\Tagger	agsrv.exe
23 - [National Instruments Corporation] : C:\Windows\system32\drivers\NiViPxiKl.sys
23 - [NVIDIA Corporation] : C:\Windows\system32\drivers
vhda32v.sys
23 - [NVIDIA Corporation] : C:\Windows\system32\DRIVERS
vlddmkm.sys
23 - [NVIDIA Corporation] : C:\Windows\system32
vvsvc.exe
23 - [Microsoft Corporation] : C:\Windows\system32\driversdpencdd.sys
23 - [REDC] : C:\Windows\system32\DRIVERSimmptsk.sys
23 - [REDC] : C:\Windows\system32\DRIVERSimsptsk.sys
23 - [REDC] : C:\Windows\system32\DRIVERSixdptsk.sys
23 - [Realtek Corporation] : C:\Windows\system32\DRIVERS\Rtlh86.sys
23 - [eMPIA Technology, Inc.] : C:\Windows\system32\DRIVERS\etScan.sys
23 - [Microsoft Corporation] : C:\Windows\system32\SLsvc.exe
23 - : C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
23 - : C:\Windows\system32\Drivers\sptd.sys
23 - [Synaptics, Inc.] : C:\Windows\system32\DRIVERS\SynTP.sys
23 - [The OpenVPN Project] : C:\Windows\system32\DRIVERS	apvpn.sys
23 - [Microsoft Corporation] : C:\Program Files\Windows Media Player\wmpnetwk.exe
23 - [Crawler.com] : C:\Windows\system32\drivers\sp_rsdrv2.sys

IE URL Search Hooks
Yahoo! Toolbar - {{EF99BD32-C1FB-11D2-892F-0090271D4F88}} -  [Yahoo! Inc.] : C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

Advanced Files Report
%SYSDIR%
vvsvc.exe [NVIDIA Corporation] [NVIDIA Driver Helper Service, Version 175.97] MD5=11E1DC466C3E384C1A697B95DC5AA785 SIZE=196608
%SYSDIR%\SLsvc.exe [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=862BB4CBC05D80C5B45BE430E5EF872F SIZE=3408896
%PROGRAMFILES%\National Instruments\Shared\mDNS Responder
imdnsNSP.dll [National Instruments Corporation] [NI_ZEROCONF_NSP] MD5=6D609D1581277A730FD787AAD55B0B0A SIZE=24208
%SYSDIR%
imdnsResponder.dll [National Instruments Corporation] [NI_ZEROCONF_CLIENTLIB] MD5=F23F24104AC354D1221D3F4808576416 SIZE=28272
%SYSDIR%undll32.exe [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=4B555106290BD117334E9A08761C035A SIZE=44544
%SYSDIR%\NVSVC.DLL [NVIDIA Corporation] [NVIDIA Driver Helper Service, Version 175.97] MD5=9EFDF4A7927D66A1385F2898BEC614EA SIZE=608800
%SYSDIR%
vapi.dll [NVIDIA Corporation] [NVIDIA Windows drivers] MD5=4E6F86312C24219DF4DE949D8F2CC2DB SIZE=454656
%SYSDIR%\NVSVCR.DLL [NVIDIA Corporation] [NVIDIA Driver Helper Service Localized Resources, Version 179.28] MD5=2E1233E5F94DE816D3E8C312833DACDE SIZE=929792
%PROGRAMFILES%\ASUS\ASUS Data Security Manager\ADSMSrv.exe [ADSMSrv] MD5=609A6F49B6AF0F25837F8A0EDDDB0745 SIZE=73728
%PROGRAMFILES%\ATK Hotkey\AsLdrSrv.exe [ADSMSrv] MD5=5A055A4777CBBC8845DD598CB2EEBF69 SIZE=94208
%PROGRAMFILES%\ATKGFNEX\GFNEXSrv.exe [GFNEXSrv] MD5=7C157574A181B19B9DCF5F339E25337E SIZE=94208
%SYSDIR%\HPMPW081.DLL [Hewlett-Packard] [hpmpw081.dll] MD5=F22BFB5264E7A1EC59D71CABD530F55B SIZE=208896
%SYSDIR%\HPMPM081.DLL [Hewlett-Packard] [hpmpm081.dll] MD5=BA9CD0616460460CA26E4F4C074D0868 SIZE=241664
%SYSDIR%\hppmopjl.dll [Hewlett-Packard Company] [SNMP Proxy Agent For Direct Connect Printers] MD5=AA30EDE7CF7B394E4C60A8FC20DCD84C SIZE=18944
%SYSDIR%\OKLMON32.DLL [Oki Data Corporation] [Oki Data print monitor for Windows2000/XP] MD5=03E1FA85B177E09297F6D8B748B57A52 SIZE=40960
%SYSDIR%\spool\PRTPROCS\W32X86\hpcpp083.dll [Hewlett-Packard Corporation] [HP Print Processor] MD5=443E0321D18B7DEACCC8D8AAE357E274 SIZE=280576
%SYSDIR%\spool\PRTPROCS\W32X86\hpzpplhn.dll [Hewlett-Packard Corporation] [HP Print Processor] MD5=801DECF3A583C270E5C398FCD082E3DD SIZE=89600
%SYSDIR%\spool\PRTPROCS\W32X86\OPLAPP3.dll [Oki Data Corporation] [Windows XP/2000 Print Processor] MD5=45A9D638B15FAE7EB0935ABCE74B73A1 SIZE=31744
%SYSDIR%\spool\DRIVERS\W32X86\3\OPLV_UI.DLL [Oki Data Corporation] [OKI PCL5c UI Printer Driver] MD5=FCA2F0A09A01B7F826F0BB7D8CB5742B SIZE=430592
%SYSDIR%\spool\DRIVERS\W32X86\3\hpmdp083.dll [Hewlett-Packard] [Hewlett-Packard Universal Print Driver for Windows] MD5=C80664821019FCB800CAA203EC4242DF SIZE=581632
%SYSDIR%\agrsmsvc.exe [Agere Systems] [Agere Soft Modem Call Progress Service] MD5=EFBC44FBD75E4F80BD927AEBF6E7EADE SIZE=13312
%COMMONFILES%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [Apple Inc.] [Apple Mobile Device Service] MD5=536FCD2CEC5161BFCC91CC21726B9DB2 SIZE=144712
%PROGRAMFILES%\Hotspot Shield\HssWPR\hsssrv.exe [AnchorFree Inc.] [Hotspot Shield Helper Service] MD5=D5687C8C02DF0EB4687B044A10DF5CB4 SIZE=331824
%SYSDIR%\lkcitdl.exe [National Instruments, Inc.] [National Instruments Logos] MD5=20CDB07017497C94A0BAD253C4BAFCBC SIZE=695136
%SYSDIR%\LKDYNAM.dll [National Instruments Corporation] [LKDYNAM] MD5=9020D1F51E809E01A6D5C09D93A9CC41 SIZE=188416
%SYSDIR%\LKSOCK.dll [National Instruments Corporation] [LKSOCK] MD5=9E7192BACCC83B3DEB376A1BE7BC9F0A SIZE=333312
%SYSDIR%\LKSEC.dll [National Instruments Corporation] [LKSEC] MD5=292E42162CED846A7FBB8E2B78DA0B51 SIZE=132608
%SYSDIR%\LKOBENV.dll [National Instruments Corporation] [LKOBENV] MD5=D8165636CD693BBFB399136E7C7C912E SIZE=231424
%SYSDIR%
idscmem.dll [National Instruments Corporation] [NIDSCMEM] MD5=307639415248EEC40F14FE331FDCC370 SIZE=5632
%PROGRAMFILES%\National Instruments\Shared\Security
idm_client_thinauth.dll [National Instruments Corporation] [NIDM_CLIENT_THINAUTH] MD5=0781BB58A9CE0A0E471AE2D54924C0D2 SIZE=144896
%SYSDIR%\lkads.exe [National Instruments Corporation] [LKADS] MD5=40D66FAB9E4C9DEA0076CDEE2391E8BA SIZE=40488
%SYSDIR%\lktsrv.exe [National Instruments Corporation] [LKTSRV] MD5=F03846D3C08A2358874D0D3E5EF6E748 SIZE=50736
%SYSDIR%\LKSTIME.dll [National Instruments Corporation] [LKSTIME] MD5=334CC8584880AAE8BEDA1FE327760B3E SIZE=89088
%PROGRAMFILES%\National Instruments\MAX
imxs.exe [National Instruments Corporation] [NIPALSM] MD5=A3BA8A14490FDBF106939C37A125E82C SIZE=12696
%PROGRAMFILES%\National Instruments\MAX\mxssvr.dll [National Instruments Corporation] [SCS_MXS_SERVER] MD5=1C3665875FAEFF7C3E68280515B9F9CE SIZE=207952
%SYSDIR%
irpc.dll [National Instruments Corporation] [NI-RPC] MD5=20A4FBEBD1F592A17BB83B634E83E127 SIZE=71768
%PROGRAMFILES%\National Instruments\MAX\mxsutils.dll [National Instruments Corporation] [SCS_MXS_UTILS] MD5=C0DC8297551970E7913AB87E47011286 SIZE=207968
%PROGRAMFILES%\National Instruments\MAX
imxsimp.dll [National Instruments Corporation] [SCS_MXS_IMPL] MD5=7F8AE91BC5637D2CA3D1F4F719A6625D SIZE=78432

gros_minet · Answer

la suite...

%SYSDIR%
ismslu.dll [National Instruments Corporation] [NISMSL] MD5=96EF2D1E7B8F40E442FFD1CBCA0930F4 SIZE=22912
%PROGRAMFILES%\National Instruments\MAX\mxsin.dll [National Instruments Corporation] [SCS_MXS_IN] MD5=6816160743494570E7E845FB8B7AD57A SIZE=560224
%PROGRAMFILES%\National Instruments\MAX\mxsdb.dll [National Instruments Corporation] [SCS_MXS_DATABASE] MD5=EB51FAD9DC0846EDD6388CEF4FA9DEC4 SIZE=777320
%PROGRAMFILES%\National Instruments\MAX\Data Dictionaries\mxsdd.dll [National Instruments Corporation] [SCS_MXS_DICT] MD5=6FA18E2FBD7C7A26623081495C771936 SIZE=104528
%PROGRAMFILES%\National Instruments\MAX\Data Dictionaries
iswdd.dll [National Instruments Corporation] [SCS_PROVIDER_SOFTWARE_DICT] MD5=A716AE74B14372BEEBECCC73E224FA21 SIZE=115304
%PROGRAMFILES%\National Instruments\MAX\Data Dictionaries\TgrDD.dll [National Instruments Corporation] [TGRDD] MD5=D5D4388455CC263420406B6F628C4AAC SIZE=57344
%SYSDIR%\hpzinw12.dll [Hewlett-Packard] [Bidi User Mode] MD5=2969D26EEE289BE7422AA46FC55F4E38 SIZE=44032
%PROGRAMFILES%\National Instruments\Shared\Security
idmsrv.exe [National Instruments Corporation] [NIDMSRV] MD5=20EC1ED5FE2C5580803875E91441E435 SIZE=213552
%SYSDIR%
isvcloc.exe [National Instruments Corporation] [NISVCLOC] MD5=AEB2182AEA8E8647618ABD1CC4AF9A34 SIZE=8656
%SYSDIR%
isvcloc.dll [National Instruments Corporation] [NISVCLOCDLL] MD5=0AE70A9D6BDE205B54E7D28301D4433D SIZE=17920
%PROGRAMFILES%\National Instruments\Shared\Tagger	agsrv.exe [National Instruments Corporation] [TAGSRV] MD5=C6E663D0B4099B7B0E6B32C1FE495C4C SIZE=607848
%PROGRAMFILES%\National Instruments\Shared\Tagger	ag.mnd [National Instruments Corporation] [TAG] MD5=BEC545D277F956E742DB3598FC34E208 SIZE=389632
%PROGRAMFILES%\National Instruments\Shared\Tagger
i_tagger_plugin_LogosRTClient.dll [National Instruments Corporation] [NI_TAGGER_PLUGIN_LOGOSRTCLIENT] MD5=581DBFD1FCCA219487A6B34C61DFF3CA SIZE=94720
%SYSDIR%\LKREALT.dll [National Instruments Corporation] [LKREALT] MD5=5A8ED18CD1BCFB15AE3F2A81BCE7AAC7 SIZE=260608
%PROGRAMFILES%\National Instruments\Shared\LogosXT
ilxtcor.dll [National Instruments Corporation] [NILXTCOR] MD5=7AC6770D45C8D6073C87E48C8FE4A43E SIZE=466944
%PROGRAMFILES%\National Instruments\Shared\TraceEngine
i_traceengine.dll [National Instruments Corporation] [NI_TRACEENGINE] MD5=1B37DD35561630610B5DABA90D53F04A SIZE=73216
%PROGRAMFILES%\National Instruments\Shared\Tagger
i_tagger_plugin_LogosRTServer.dll [National Instruments Corporation] [NI_TAGGER_PLUGIN_LOGOSRTSERVER] MD5=D8F3157AC6DC8BBC9AC25EE85E79DA8E SIZE=199168
%SYSDIR%\LKPROC.dll [National Instruments Corporation] [LKPROC] MD5=F01FDD441DEAC13E11EF090B06CF985B SIZE=52224
%PROGRAMFILES%\National Instruments\Shared\LogosXT
ipspxts.dll [National Instruments Corporation] [NIPSPXTS] MD5=7969500FAB48D61CD8325CE50FF8D302 SIZE=187904
%PROGRAMFILES%\National Instruments\Shared\Tagger
i_tagger_plugin_mxs.dll [National Instruments Corporation] [NI_TAGGER_PLUGIN_MXS] MD5=EC04C30B0451EEA6C72991DBA1606CC9 SIZE=241152
%PROGRAMFILES%\National Instruments\MAX\mxs.dll [National Instruments Corporation] [SCS_MXS_LIBRARY] MD5=CF3D333B1D9E5354CF32BFB6E534DBAA SIZE=46168
%PROGRAMFILES%\National Instruments\MAX\mxsout.dll [National Instruments Corporation] [SCS_MXS_OUT] MD5=BE9116D49C31AC30A7F1455353ED5B6B SIZE=397912
%PROGRAMFILES%\National Instruments\Shared\Tagger
i_tagger_plugin_OPCServer.dll [National Instruments Corporation] [NI_TAGGER_PLUGIN_OPCSERVER] MD5=F349950E498FD418D9F977061D81FC39 SIZE=308736
%SYSDIR%\hpzipm12.dll [Hewlett-Packard] [Bidi User Mode] MD5=BAFC9706BDF425A02B66468AB2605C59 SIZE=53760
%PROGRAMFILES%\ASUS\NB Probe\SPM\spmgr.exe [spmgr Module] MD5=739DB668DBD812285ECC553E64A5E212 SIZE=125496
%PROGRAMFILES%\ASUS\NB Probe\SPM\spdiskex.dll MD5=89A3FADBE9B26453C71B3B365AB70F9B SIZE=147456
%PROGRAMFILES%\ASUS\NB Probe\SPM\spos.dll MD5=CC63071A849DAE4D7FF3D727BC0EC6D9 SIZE=135168
%PROGRAMFILES%\ASUS\NB Probe\SPM\spnbacpi.dll MD5=B8EEE72879838DE037DD2683E1F3869E SIZE=81920
%PROGRAMFILES%\ASUS\NB Probe\SPM\spdmi.dll MD5=DB029472E09F7C5DB7AB05BA2833193B SIZE=49152
%PROGRAMFILES%\ASUS\NB Probe\SPM\ghadmi.dll MD5=247BB80A929FF381808FEAB2998F8C7C SIZE=36864
%PROGRAMFILES%\ASUS\NB Probe\SPM\spmemory.dll MD5=1962D4B729CAE91A063B3306C0F44CE4 SIZE=77824
%PROGRAMFILES%\National Instruments\Shared\mDNS Responder
imdnsResponder.exe [National Instruments Corporation] [NI_ZEROCONF_SERVICE] MD5=D115386C497F99759E0E61946ADB5FB0 SIZE=192112
%PROGRAMFILES%\IVI Foundation\VISA\WinNT\NIvisa
iLxiDiscovery.exe [National Instruments Corporation] [LXI_DISCOVERY_SERVICE] MD5=A3A61F58CEC5EEB021ACBD2ACCEFD393 SIZE=129144
%PROGRAMFILES%\Logitech\SetPoint\lgscroll.dll [Logitech, Inc.] [Logitech SetPoint] MD5=4B1EB3AD2771AE8D0390ED1444B7B493 SIZE=45584
%PROGRAMFILES%\ASUS\SmartLogon\sensorsrv.exe [ASUS] [ASUS SmartLogon] MD5=38595C19227D211B5A0932F6609A6C32 SIZE=297528
%PROGRAMFILES%\ASUS\ASUS Live Update\ALU.exe [ALU] MD5=F4DCD4912B185C3AAEB92A7040832AD1 SIZE=51768
%PROGRAMFILES%\ATK Hotkey\HControl.exe [ATK0100] [ATK0100] MD5=D4309C30991984C0B86C339A5AF1724B SIZE=229376
%PROGRAMFILES%\ATK Hotkey\CMSSC.dll MD5=E3E8DC9033D9C2AD2F30F23ADA3C4BE4 SIZE=57344
%PROGRAMFILES%\ATK Hotkey\inter_f2.dll [ATK] [ATK0100] MD5=06B4C8D5D9708A7494AC7C02CD54650E SIZE=36864
%PROGRAMFILES%\ATK Hotkey\ATKWLIOC.DLL [ACTIONTEC Electronics,Inc] [PRISM Wireless LAN] MD5=388CE212A119271EEA68F42712F3F64F SIZE=80384
%PROGRAMFILES%\ATK Hotkey\SiSPkt.dll [Silicon Integrated Systems Corp.] [SiS160 Series Wireless LAN Adapter] MD5=E7C665D4AFAAB45A9086D02FFC87A4B4 SIZE=303104
%PROGRAMFILES%\ATK Hotkey\MsgTranAgt.exe [MsgTranAgt] MD5=8192CC6303ACA5BE84CBB7E7B323A0E9 SIZE=106496
%PROGRAMFILES%\Wireless Console 2\wcourier.exe [Wireless Console 2] MD5=BADBC0E13D7BD5B5E09324587041D8C9 SIZE=1040384
%PROGRAMFILES%\P4G\BatteryLife.exe [ATK] [Power4Gear eXtreme] MD5=FC0DCDD5124B94ED229A83EBCCAF3B4B SIZE=191032
%PROGRAMFILES%\ASUS\Splendid\ACMON.exe [ATK] [ATK ACMON] MD5=8060AABB3722E360BDF17867A7BF7CEA SIZE=851968
%PROGRAMFILES%\ASUS\Splendid\OVS.dll [ASUSTek] [OVS] MD5=85C57CD47F292E248E56A41E7E7A19C6 SIZE=32768
%PROGRAMFILES%\ASUS\Splendid\GLCDdll.dll [GLCDdll] MD5=4AC5C7F14B6077BF189B43276E9B6F08 SIZE=9216
%PROGRAMFILES%\ASUS\Splendid\Chameleon.dll [ASUSTeK] [ASUSTeK Chameleon Engine] MD5=98AB7A3AC4155640146F6BEC422C81E4 SIZE=53248
%PROGRAMFILES%\ASUS\ASUS CopyProtect\ASPG.exe [ASUS] [ASPG application] MD5=D142CB37F10ACF08E68D9A4A21E29059 SIZE=154168
%SYSDIR%\ACEngSvr.exe [ASUSTeK] [ACEngSvr Module] MD5=A391896CD406E6377F5CEF31FDC12019 SIZE=155648
%SYSDIR%
vd3dum.dll [NVIDIA Corporation] [NVIDIA Windows Vista WDDM driver] MD5=E20C363E7423C08EA91EAF59C4B63747 SIZE=5877760
%PROGRAMFILES%\ATK Hotkey\ATKOSD.exe [ATK0100] MD5=CAF3BADEBBD50CAC421FB09AE80B6A56 SIZE=2486272
%PROGRAMFILES%\ATK Hotkey\KBFiltr.exe [KBFiltr Application] MD5=7BBC817DDC46A9D5413CB91764E889E8 SIZE=106496
%PROGRAMFILES%\ATK Hotkey\WDC.exe [WDC Application] MD5=E7D12A03AC58B0F8BFAD52FA071119E5 SIZE=151552
%PROGRAMFILES%\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll MD5=A95209B0323131E40309207D4C2616A8 SIZE=147456
%PROGRAMFILES%\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll MD5=44CB8F8C28BC8CC2AE73740B3A1502F3 SIZE=143360
%SYSDIR%\SynCOM.dll [Synaptics, Inc.] [COM SDK] MD5=8D6DA40685B16CA7DC1441CE7DD528B7 SIZE=163840
%SYSDIR%\SynTPAPI.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=FBA27BD965D6C3E2699FE082A896F53E SIZE=147456
%PROGRAMFILES%\ASUS\ATK Media\ATKMETHOD.dll [ATKMETHOD] MD5=8217054B37CF9DF35E9D76EAEC481F30 SIZE=49152
%PROGRAMFILES%\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.DLL [Apple Inc.] [iTunes] MD5=2138F31E24DB2262CCF6048515C6B711 SIZE=48928
%PROGRAMFILES%\iTunes\iTunesHelper.Resources\iTunesHelper.DLL [Apple Inc.] [iTunes] MD5=ED7BEB464C8BD7CE443851AAC066F1B2 SIZE=47904
%PROGRAMFILES%\QuickTime\QTSystem\QuickTime.qts [Apple Inc.] [QuickTime] MD5=E2177DFEFE6DBA82E13A66F1BCBCE56B SIZE=12124160
%PROGRAMFILES%\QuickTime\QTSystem\QTCF.dll MD5=295F3F6856B4E75444039227D001B9CD SIZE=180224
%COMMONFILES%\Apple\Apple Application Support\CoreFoundation.dll [Apple Inc.] [CoreFoundation] MD5=BBFA5347CA1168AE82D3BAB95669713B SIZE=824608
%COMMONFILES%\Apple\Apple Application Support\pthreadVC2.dll [Open Source Software community project] MD5=C9680F06E51DB8B9A0772C20F3E10DB6 SIZE=53024
%COMMONFILES%\Apple\Apple Application Support\objc.dll MD5=F7E5225F9655594FB62048D29D83E6D1 SIZE=120096
%COMMONFILES%\Apple\Apple Application Support\icuin40.dll [IBM Corporation and others] [International Components for Unicode] MD5=3EC960911C99E7F1FEF081AC188603B9 SIZE=1041696
%COMMONFILES%\Apple\Apple Application Support\icuuc40.dll [IBM Corporation and others] [International Components for Unicode] MD5=81B49CBEEE971E8EF87CF4FC67D92149 SIZE=922912
%COMMONFILES%\Apple\Apple Application Support\icudt40.dll [IBM Corporation and others] [International Components for Unicode] MD5=491D57C8C0567D5B9408FA5C7F8FFC03 SIZE=14009632
%COMMONFILES%\Apple\Apple Application Support\ASL.dll MD5=985195828E487517A0B56E21E03D687C SIZE=39712
%COMMONFILES%\Apple\Apple Application Support\CFNetwork.dll [Apple, Inc.] [CFNetwork] MD5=D35BF19DB6D307647959DFB670C4087C SIZE=603424
%COMMONFILES%\Apple\Apple Application Support\SQLite3.dll [Apple Inc.] [SQLite3] MD5=9F9541640695EFF246FF06A070A5D5D5 SIZE=406816
%COMMONFILES%\Apple\Apple Application Support\zlib1.dll [zlib] MD5=BAB1EA7BED98DEA85EA3FC44EB423654 SIZE=67872
%COMMONFILES%\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll [Apple Inc.] [iTunesMobileDevice] MD5=B63A750AB385A44D4F888751DA6703AE SIZE=1352992
%PROGRAMFILES%\asus\ASUS Virtual Camera\virtualCamera.ax MD5=932A54B3A54D8DA6197793D9EC3167B5 SIZE=184320
%PROGRAMFILES%\ASUS\ASUS LifeFrame3\camera_effect.ax [ASUS] [LifeFrame] MD5=18140C8B44AC157309263410ACD460EC SIZE=602112
%PROGRAMFILES%\Logitech\SetPoint\SetPoint.exe [Logitech, Inc.] [Logitech SetPoint] MD5=B624202660474516E73AA95238FD9843 SIZE=813584
%SYSDIR%\KemXML.dll [Logitech, Inc.] [Logitech SetPoint] MD5=22AA20E24295D0D98AFF72C65BD7DBFA SIZE=84496
%SYSDIR%\kemutb.dll [Logitech, Inc.] [Logitech SetPoint] MD5=810F104256F6BCD7012545B0BEA18D23 SIZE=170512
%SYSDIR%\KemUtil.dll [Logitech, Inc.] [Logitech SetPoint] MD5=8ADAE4E00D86A8530B8176A853B4B9B9 SIZE=145936
%SYSDIR%\KemWnd.dll [Logitech, Inc.] [Logitech SetPoint] MD5=7BDCEAF13D9EC5873C43BD8063BEC871 SIZE=117264
%PROGRAMFILES%\Logitech\SetPoint\SetPointCOM.dll [Logitech, Inc.] [Logitech SetPoint] MD5=559DC15B74C66EC38C4ECF81503C7757 SIZE=32272
%PROGRAMFILES%\Logitech\SetPoint\khalwrapper.dll MD5=D20AF468FA7F09B9561C8232BB80D4BA SIZE=17936
%PROGRAMFILES%\Logitech\SetPoint\Macros\MacroCore.dll [Logitech, Inc.] [Logitech SetPoint] MD5=B736E9A31EDB4D7CE3632FFCFBD69304 SIZE=1075728
%PROGRAMFILES%\Logitech\SetPoint\IMHook.dll [Logitech, Inc.] [Logitech SetPoint] MD5=145D7CB9862D6FA5A6F068F9F8B61B39 SIZE=17424
%PROGRAMFILES%\Logitech\SetPoint\WebBrowserSupport.dll [Logitech, Inc.] [Logitech SetPoint] MD5=C0F8561D8F32926EB25165CBDC7BBA3F SIZE=178704
%PROGRAMFILES%\Logitech\SetPoint\Macros\MacroAppSwitch.dll [Logitech, Inc.] [Logitech SetPoint] MD5=2C3196C163BEF55A404A2549C7B69589 SIZE=145936
%COMMONFILES%\Logishrd\KHAL2\KhalApi.dll [Logitech, Inc.] [Logitech SetPoint] MD5=4A79F94E9A9D911D1BB525C262CCE2BA SIZE=190992
%COMMONFILES%\LogiShrd\bluetooth\LBTServ.dll [Logitech, Inc.] [Logitech SetPoint] MD5=2D3D77C6E0BFD1CEBF241F1F54D9614B SIZE=145936
%PROGRAMFILES%\Logitech\SetPoint\kgame.dll [Logitech, Inc.] [Logitech SetPoint] MD5=13710783A04D427B6F621EE697569217 SIZE=76304
%PROGRAMFILES%\Logitech\SetPoint\GameHook.dll [Logitech, Inc.] [Logitech SetPoint] MD5=8A5092AE59D6ED5B181292CDBFB22B2F SIZE=64016
%APPDATA%\Microsoft\Notification de cadeaux MSN\lsnfier.exe [Microsoft Corporation] [Notification de cadeaux MSN] MD5=BC9C9BE7BB74D629362608ACE470E7DA SIZE=135680
%PROGRAMFILES%\Synaptics\SynTP\SynAsus.exe [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=3A827ED66332CE5655A84E583380729F SIZE=172032
%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=3978704576A121A9204F8CC49A301A9B SIZE=896512
%COMMONFILES%\Logishrd\KHAL2\KHALMNPR.exe [Logitech, Inc.] [Logitech SetPoint] MD5=E96BC31E0114F0999FB0F92FC65D61CA SIZE=55824
%COMMONFILES%\Logishrd\KHAL2\KHALITCH.DLL [Logitech, Inc.] [Logitech SetPoint] MD5=D7A835DB03CFE8168574893BF7E5C886 SIZE=100880
%COMMONFILES%\Logishrd\KHAL2\KHALMW.DLL [Logitech, Inc.] [Logitech SetPoint] MD5=2BE37815B1FCA885119612C658DB8CA8 SIZE=117264
%COMMONFILES%\Logishrd\KHAL2\KHALHPP.DLL [Logitech, Inc.] [Logitech SetPoint] MD5=9DB55C2361E0974A9630EECD70C69FAB SIZE=190992
%COMMONFILES%\Logishrd\KHAL2\KHALMOU.DLL [Logitech, Inc.] [Logitech SetPoint] MD5=70D4F5E5490A8947262A0D591309CEB4 SIZE=129552
%COMMONFILES%\Logishrd\KHAL2\KHALHID.DLL [Logitech, Inc.] [Logitech SetPoint] MD5=24F2095044B9EE2AD1ED2B1D7152893E SIZE=121360
%COMMONFILES%\Logishrd\KHAL2\KHALUSB.DLL [Logitech, Inc.] [Logitech SetPoint] MD5=B02910B449EA0B5AF9D3422A9F907D8D SIZE=104976
%PROGRAMFILES%\iPod\bin\iPodService.exe [Apple Inc.] [iTunes] MD5=6E0FAEA90E71C5F1B9F3BC71B4CCA2FA SIZE=545568
%PROGRAMFILES%\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.DLL [Apple Inc.] [iTunes] MD5=875754AB791E7E0DEF5D2F6BD061428D SIZE=48928
%PROGRAMFILES%\iPod\bin\iPodService.Resources\iPodService.DLL [Apple Inc.] [iTunes] MD5=FC5AE4E71BFE1F6366A6B8F761BC8EC7 SIZE=47904
%PROGRAMFILES%\Synaptics\SynTP\SynTPHelper.exe [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=052DAE899285465593C5E39DFF3CD7C6 SIZE=95528
%PROGRAMFILES%\Mozilla Thunderbird	hunderbird.exe [Mozilla Corporation] [Thunderbird] MD5=666C77263456177D8688584F94BA233A SIZE=8318056
%PROGRAMFILES%\Mozilla Thunderbird\js3250.dll [Netscape Communications Corporation] [NETSCAPE] MD5=37ACAB54E5C61A85FD1CAD9DD06BE311 SIZE=458848
%PROGRAMFILES%\Mozilla Thunderbird
spr4.dll [Mozilla Foundation] [Netscape Portable Runtime] MD5=F155BD597E93B7167C59E13C750E2A6B SIZE=165480
%PROGRAMFILES%\Mozilla Thunderbird\xpcom_core.dll [Mozilla Foundation] [Thunderbird] MD5=A57876639000118D9B98F557CC7196BD SIZE=420456
%PROGRAMFILES%\Mozilla Thunderbird\plc4.dll [Mozilla Foundation] [Netscape Portable Runtime] MD5=141EB939EEFF0F2332B22E480A6E24A2 SIZE=34416
%PROGRAMFILES%\Mozilla Thunderbird\plds4.dll [Mozilla Foundation] [Netscape Portable Runtime] MD5=A15F593622181B1D7AD1B57B66584AA3 SIZE=30312
%PROGRAMFILES%\Mozilla Thunderbird\smime3.dll [Mozilla Foundation] [Network Security Services] MD5=68E8E12AC306F2161F5A9C6A18A6B831 SIZE=112224
%PROGRAMFILES%\Mozilla Thunderbird
ss3.dll [Mozilla Foundation] [Network Security Services] MD5=EF3774E8AD68436C84A7AD50FEE9A028 SIZE=763488
%PROGRAMFILES%\Mozilla Thunderbird
ssutil3.dll [Mozilla Foundation] [Network Security Services] MD5=418986A094C15780C2A2B7A5440A8507 SIZE=87656
%PROGRAMFILES%\Mozilla Thunderbird\ssl3.dll [Mozilla Foundation] [Network Security Services] MD5=743CF9818D179E22F78F2A9F8B965D99 SIZE=144992
%PROGRAMFILES%\Mozilla Thunderbird\NSLDAP32V50.dll MD5=7C8665633421FFCF927CB887A90FA4DB SIZE=145032
%PROGRAMFILES%\Mozilla Thunderbird\NSLDAPPR32V50.dll MD5=641DC718AAA4858ADFD51E0166CBD085 SIZE=30344
%PROGRAMFILES%\Mozilla Thunderbird\xpcom_compat.dll [Mozilla Foundation] [Thunderbird] MD5=6131E55AA22AF39D2820104DA38C1379 SIZE=73840
%PROGRAMFILES%\Mozilla Thunderbird\sqlite3.dll [Mozilla Foundation] [Thunderbird] MD5=D32C3DB0323C99E922A640FA56A5A504 SIZE=208488
%PROGRAMFILES%\Mozilla Thunderbird\components\myspell.dll [Mozilla Foundation] [Thunderbird] MD5=CE574055B3883A0CE10AD8F216E1947E SIZE=34944
%PROGRAMFILES%\Mozilla Thunderbird\components\jar50.dll [Mozilla Foundation] [Thunderbird] MD5=561FC49EC0FEE75AA5470F90FB308605 SIZE=67688
%PROGRAMFILES%\Mozilla Thunderbird\components\spellchk.dll [Mozilla Foundation] [Thunderbird] MD5=BC1E3B90C623843A52744DE833DC99F2 SIZE=46712
%APPDATA%\Thunderbird\Profiles\j1imb7o1.default\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}\components\calbscmp.dll [Mozilla Foundation] [Thunderbird] MD5=F644227D6CBECB3AD8CA6C401C5E1339 SIZE=139264
%PROGRAMFILES%\Mozilla Thunderbird\softokn3.dll [Mozilla Foundation] [Network Security Services] MD5=E92F68302C72FFEF37C27A6105AC947A SIZE=168044
%PROGRAMFILES%\Mozilla Thunderbird
ssdbm3.dll [Mozilla Foundation] [Network Security Services] MD5=E351107B68CEBC44244539D6D3C7B9F8 SIZE=120424
%PROGRAMFILES%\Mozilla Thunderbird\freebl3.dll [Mozilla Foundation] [Network Security Services] MD5=0D0BD8FD140E03BCF4674E75DF81CFDD SIZE=254077
%PROGRAMFILES%\Mozilla Thunderbird
ssckbi.dll [Mozilla Foundation] [Network Security Services] MD5=84C9A9C87B2EAD7EEA5F2890D9164D24 SIZE=337512
%PROGRAMFILES%\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\PNRComponent.dll [Skype Technologies S.A.] [Skype phone number parser helper library for FireFox browser addon] MD5=EA6D4D31CEBC1AFAADFF3F0E8D4C8856 SIZE=308520
%PROGRAMFILES%\Skype\Toolbars\Shared\SkypePnr.dll [Skype Technologies S.A.] [Skype Phone number parser] MD5=4D1D70AA343C7785D3CA5EEE34EABCF3 SIZE=2823464
%PROGRAMFILES%\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll [Skype Technologies S.A.] [Name parser helper object for Skype Firefox addon] MD5=3C250D08FC815CE1CC842FA052EEDD5D SIZE=173352
%PROGRAMFILES%\Real\RealPlayer\browserrecord\firefox\ext\components
prpffbrowserrecordext.dll [RealPlayer] MD5=D59112569B1E92C6E74E49D2F64DD48A SIZE=110592
%PROGRAMFILES%\Real\RealPlayer\browserrecordpmainbrowserrecordplugin.dll [RealPlayer] MD5=84858A69B867E0087BFBCD20C07D8843 SIZE=294912
%PROGRAMFILES%\Skype\Toolbars\Shared\SkypeNames.exe [Skype Technologies S.A.] [SkypeNames] MD5=AE82B3B6A33DC23019B604DA5920D726 SIZE=238888
%PROGRAMFILES%\Skype\Toolbars\Shared\NameParserComponent.dll [Skype Technologies S.A.] [Skype name parser component] MD5=8A50CC0C23F6F1050136E08AC720A755 SIZE=140584
%COMMONFILES%\Logishrd\eReg\SetPoint\eReg.exe [Leader Technologies/Logitech] [PowerReg] MD5=FBBF2B2A5F257AA4B597F77D65155EDF SIZE=517384
%PROGRAMFILES%\Microsoft Office\Office12\ONENOTEM.EXE [Microsoft Corporation] [Microsoft Office OneNote] MD5=A6D772AA861E673636D48B6EB452ADE3 SIZE=98696
%PROGRAMFILES%\Yahoo!\Companion\Installs\cpn\yt.dll [Yahoo! Inc.] [Yahoo! Toolbar] MD5=3374C2A0344BE49368DC342329404B49 SIZE=436288
%SYSDIR%\inetcomm.dll [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=AC9415A1AF0F49570F7515A7131AE2E1 SIZE=738816
%WINDIR%\MSAgent\agentpsh.dll [Microsoft Corporation] [Microsoft Agent Property Sheet Handler] MD5=F0B6186AEB591642784D6FFDC2D625BC SIZE=30720
%SYSDIR%\zipfldr.dll [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=7D80F287AEEDD39C03E118E0EBD3311E SIZE=342528
%PROGRAMFILES%\Windows Media Player\wmpband.dll [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=2AC2716E2083A949437CEDB2B6A2E89A SIZE=99328
%SYSDIR%\emdmgmt.dll [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=4E6B23DFC917EA39306B529B773950F4 SIZE=564224
%SYSDIR%\audiodev.dll [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=67C30FAFA58BD7E02A9DA8BE28512934 SIZE=244224
%PROGRAMFILES%\Synaptics\SynTP\SynTPCpl.dll [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=8B6F31EFEF1FD3EDF6807BA72091610F SIZE=946176
%PROGRAMFILES%\Microsoft Office\Office12\ONFILTER.DLL [Microsoft Corporation] [Microsoft Office OneNote] MD5=3C854EC543C842F15D995BE1FA1E87DC SIZE=72568
%PROGRAMFILES%\Logitech\SetPoint\kbcplext.dll [Logitech, Inc.] [Logitech SetPoint] MD5=0CB9F8D65C71B0D45EB3A4F38467E2FB SIZE=109072
%PROGRAMFILES%\Logitech\SetPoint\mcplext.dll [Logitech, Inc.] [Logitech SetPoint] MD5=67D0773927A5BEF586C7AC537F028318 SIZE=109072
%SYSDIR%\EhStorShell.dll [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=14E4470BF8ACA69A85D741BA99F75F96 SIZE=114176
%PROGRAMFILES%\iTunes\iTunesMiniPlayer.dll [Apple Inc.] [iTunes] MD5=04FEEDD7C5F127A2B11AFFB47D9BA90B SIZE=124192
%PROGRAMFILES%\Real\RealPlayerpshell.dll [RealNetworks, Inc.] [RealPlayer] MD5=FC769F8BF9DBF4952888D4D2D580EC5D SIZE=63016
%SYSDIR%\svchost.exe -k netsvcs
%SYSDIR%\DRIVERS\AGRSM.sys [Agere Systems] [Agere SoftModem Driver] MD5=1CFEBA39FC613E45B49D3EDDFBCDA289 SIZE=1203776
%PROGRAMFILES%\ATKGFNEX\ASMMAP.sys MD5=7B4D08D2017AC06689D422E06C43F0AA SIZE=13880
%SYSDIR%\DRIVERS\atksgt.sys MD5=F0D933B42CD0594048E4D5200AE9E417 SIZE=281760
%SYSDIR%\svchost.exe -k LocalSystemNetworkRestricted
%SYSDIR%\svchost.exe -k LocalServiceNetworkRestricted
%SYSDIR%\svchost.exe -k LocalServiceNoNetwork
%SYSDIR%\DRIVERS\bowser.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=74B442B2BE1260B7588C136177CEAC66 SIZE=69632
%SYSDIR%\svchost.exe -k bthsvcs
%SYSDIR%\svchost.exe -k NetworkService
%SYSDIR%\DRIVERS\etDevice.sys [eMPIA Technology, Inc.] [ET USB 28xx Video] MD5=699CE24FE6B5120AF709A0B91582A02D SIZE=474624
%SYSDIR%\svchost.exe -k DcomLaunch
%SYSDIR%\Drivers\dfsc.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=218D8AE46C88E82014F5D73D0236D9B2 SIZE=75264
%SYSDIR%\svchost.exe -k LocalService
%SYSDIR%\DRIVERS\etFilter.sys [eMPIA Technology Inc.] [EM27xx / EM28xx USB Video Convertor] MD5=E50433DFF5E6BF08693FA49A9205DEE6 SIZE=206336
%SYSDIR%\DRIVERS\GEARAspiWDM.sys [GEAR Software Inc.] [CD DVD Filter] MD5=8182FF89C65E4D38B2DE4BB0FB18564E SIZE=26600
%PROGRAMFILES%\ASUS\NB Probe\SPM\ghaio.sys MD5=31B40F40E09513ADDC460F6A297AD474 SIZE=20936
%SYSDIR%\svchost.exe -k GPSvcGroup
%SYSDIR%\DRIVERS\HssDrv.sys [AnchorFree Inc.] [Hotspot Shield® Routing Driver] MD5=6E38AC4EAE059412B80AF2263C004FD0 SIZE=33840
%SYSDIR%\DRIVERS\iaStor.sys [Intel Corporation] [Intel Matrix Storage Manager driver] MD5=80C633722DA72E97F3F5B3B11325696D SIZE=317976
%SYSDIR%\drivers\RTKVHDA.sys [Realtek Semiconductor Corp.] [Realtek(r) High Definition Audio Function Driver] MD5=80919A856693B1D1D4177F11F5BDA545 SIZE=2323680
%SYSDIR%\DRIVERS\msiscsi.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=232FA340531D940AAC623B121A595034 SIZE=180712
%SYSDIR%\DRIVERS\itecir.sys [ITE Tech. Inc.] [ITE Consumer IR Driver for eHome] MD5=8BCD857C7932AD005D5F9C89329DA2E1 SIZE=54784
%SYSDIR%\DRIVERS\kbfiltr.sys [Keyboard Filter Driver] MD5=27BD4AC228EF6C0D490617C32E86A672 SIZE=15928
%SYSDIR%\DRIVERS\lirsgt.sys MD5=F8A7212D0864EF5E9185FB95E6623F4D SIZE=25888
%SYSDIR%\DRIVERS\lullaby.sys [Windows (R) Codename Longhorn DDK provider] [Windows (R) Codename Longhorn DDK driver] MD5=8039F480C192DD99FED4EBC71FFBF795 SIZE=15416
%SYSDIR%\DRIVERS\mrxsmb10.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=05716F0203B5C774A87384A1FF7B968F SIZE=212992
%SYSDIR%\DRIVERS\mssmbios.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=E384487CB84BE41D09711C30CA79646C SIZE=31288
%SYSDIR%\DRIVERS\ATKACPI.sys [ATK0100] [ATK0100 ACPI Utility] MD5=97AFFA9D95FFE20EEE6229BC6BE166CF SIZE=7680
%SYSDIR%\svchost.exe -k HPZ12
%SYSDIR%\DRIVERS\NETw5v32.sys [Intel Corporation] [Intel® Wireless WiFi Link Adapter] MD5=0B214C6A4728F085FB64A29ED9C4DE94 SIZE=3663360
%SYSDIR%\drivers
ipalk.sys [National Instruments Corporation] [NI-PAL] MD5=FC8A790DF940D08F8D738C6225C3358B SIZE=586328
%SYSDIR%\drivers
ipbcfk.sys [National Instruments Corporation] [NIPBCF] MD5=2DDB15147E226BF2B6272FD3D5384008 SIZE=15448
%SYSDIR%
isvcloc.exe -s
%SYSDIR%\drivers\NiViPxiKl.sys [National Instruments Corporation] [NIVISA_PXI_PASSPORT_PXIK] MD5=25819DE5202F8B9953B1B2AC0D22DF8F SIZE=11360
%SYSDIR%\drivers
vhda32v.sys [NVIDIA Corporation] [NVIDIA HDMI Audio Driver] MD5=D2F4C4B22969236382CA853B8DAA2D4E SIZE=66080
%SYSDIR%\DRIVERS
vlddmkm.sys [NVIDIA Corporation] [NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 175.97] MD5=440690DA4358D9682DBCC56DA7D419AB SIZE=7522624
%SYSDIR%\svchost.exe -k NetworkServiceNetworkRestricted
%SYSDIR%\driversdpencdd.sys [Microsoft Corporation] [Microsoft® Windows® Operating System] MD5=9D91FE5286F748862ECFFA05F8A0710C SIZE=6144
%SYSDIR%\DRIVERSimmptsk.sys [REDC] [RICOH SD/MMC Driver] MD5=A5B12A4B3B774432DB9B9FA221190E59 SIZE=46592
%SYSDIR%\DRIVERSimsptsk.sys [REDC] [Ricoh Memorystick Controller] MD5=C398BCA91216755B098679A8DA8A2300 SIZE=43008
%SYSDIR%\DRIVERSixdptsk.sys [REDC] [R5C852 Ricoh xD Controller] MD5=2A2554CB24506E0A0508FC395C4A1B42 SIZE=38400
%SYSDIR%\svchost.exe -k rpcss
%SYSDIR%\DRIVERS\Rtlh86.sys [Realtek Corporation] [Realtek 8101E/8168/8169 PCI/PCIe Adapters] MD5=174B9514CD1A0C33CE4BBC02A3C81A62 SIZE=124928
%SYSDIR%\DRIVERS\etScan.sys [eMPIA Technology, Inc.] [ET USB 28xx Video] MD5=D4B6A94C007AF4E398E1B78A90F254EA SIZE=6656
%SYSDIR%\Drivers\sptd.sys SIZE=721904
%SYSDIR%\svchost.exe -k imgsvc
%SYSDIR%\DRIVERS\SynTP.sys [Synaptics, Inc.] [Synaptics Pointing Device Driver] MD5=A59457258DC236F63D6EAC759EF6C08B SIZE=195760
%SYSDIR%\DRIVERS	apvpn.sys [The OpenVPN Project] [TAP-Win32 Virtual Network Driver] MD5=27A2C318CD28CFB3EB2200FD96AF1E58 SIZE=27136
%SYSDIR%\svchost.exe -k WerSvcGroup
%SYSDIR%\svchost.exe -k secsvcs
%SYSDIR%\SearchIndexer.exe \Embedding
%SYSDIR%\drivers\sp_rsdrv2.sys [Crawler.com] [Spyware Terminator] MD5=8831252BCF05FCFB5ABD116A22E552D8 SIZE=142592
%SYSDIR%\mscoree.dll [Microsoft Corporation] [Microsoft® .NET Framework] MD5=363C34FB89B8ED269659270FB06BEC9F SIZE=278848
%PROGRAMFILES%\Microsoft Office\Office12\GrooveSystemServices.dll [Microsoft Corporation] [GrooveSystemServices Module] MD5=68747446F9D982938DB6B110F2908271 SIZE=178040
%PROGRAMFILES%\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [Microsoft Corporation] [Windows Live Messenger Protocol Handler Module] MD5=61B0C981F7C10B8861809ADC1B31E8E5 SIZE=61264

End of Report

  
    Suppression: 
  
  Préparation…
  Création d'un point de restauration
  Supprimer Invalid Startup Items 
  Suppression de la clé registre : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Malwarebytes Anti-Malware (reboot)
  Fermeture du point de restauration système
  Analyse(s) terminée(s)

Utilisateur anonyme · Answer

Spyware terminator n'a rien trouvé .Juste une clé.Pas méchant:)

gros_minet · Answer

Ok merci beaucoup!

Tu ne saurais pas par hasard a qui je pourrais m'adresser pour mon probleme au demarrage?

Utilisateur anonyme · Answer

expose ton probléme ici:https://forums.commentcamarche.net/forum/materiel-informatique-2

Besoin d'aide. Trojan ou virus!!!!

30 réponses

Discussions similaires