Petit problèmes de lenteur

Résolu
Bean147 -  
Bonjour,
Cela fait plusieurs jours que mon ordinateur est devenu 'lent' en ce qui concerne internet,
de plus j'ai 10 programmes svchost.exe qui tournent et je me demande si ils ne sont pas infectés..
Merci de m'aider,
Cordialement Bean147
Configuration: Windows XP
Firefox 3.5.7

19 réponses

  • Votes
  • Date
  • Date décroissante
  1. moment de grace Contributeur sécurité
    bonjour

    • Télécharge Random's System Information Tool (RSIT) de Random/Random.

    (outil de diagnostic)

    http://images.malwareremoval.com/random/RSIT.exe

    • Enregistre le sur ton Bureau.

    • Double clique sur RSIT.exe pour lancer l'outil.

    • Clique sur "Continue" à l'écran Disclaimer.

    • Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande)

    et tu devras accepter la licence.

    • Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés stp

    Les rapports se trouvent à cet endroit:
    C:\rsit\info.txt
    C:\rsit\log.txt
    1. Bean147
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by Quentin at 2010-01-29 13:53:21
      Microsoft Windows XP Professionnel Service Pack 3
      System drive C: has 117 GB (49%) free of 238 GB
      Total RAM: 2047 MB (58% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 13:53:34, on 29/01/2010
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.exe
      C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
      C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
      C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\EXPERTool\TBPanel.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Electronic Arts\EADM\Core.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\DNA\btdna.exe
      C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Live\Contacts\wlcomm.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Quentin\Bureau\RSIT.exe
      C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Quentin.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
      R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=%s
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - (no file)
      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\SPYBOT~1\SDHelper.dll (file missing)
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
      O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
      O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
      O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
      O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
      O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O4 - HKLM\..\Policies\Explorer\Run: [DirectX For Microsoft® Windows] C:\WINDOWS\system32\fservice.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Logitech Touch Mouse Server.lnk = C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
      O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
      O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
      O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
      1. moment de grace Contributeur sécurité
        manque le rapport info qui se trouve là

        C:\rsit\info.txt
        1. bean147
          info.txt logfile of random's system information tool 1.06 2010-01-29 13:53:37

          ======Uninstall list======

          -->MsiExec /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
          -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
          32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
          Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
          Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
          Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
          Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
          Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
          Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
          Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
          Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
          Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
          Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
          Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
          Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
          Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
          Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
          Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
          Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
          Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
          Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
          Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
          Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
          Adobe Photoshop CS3-->C:\Program Files\Fichiers communs\Adobe\Installers\32e9033392a51340b32fdc6ad893ab7\Setup.exe
          Adobe Photoshop CS3-->MsiExec.exe /I{BF794769-8875-4E01-B7BE-E00104604F4A}
          Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
          Adobe Setup-->MsiExec.exe /I{926DEB4E-2B0A-4C5C-AE4A-BF6C06949702}
          Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
          Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
          Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
          Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
          Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
          Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
          AGEIA PhysX v7.09.13-->MsiExec.exe /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
          Alien Arena 2008 7.21-->"F:\Alien Arena 2008\unins000.exe"
          AnalogX CookieWall-->C:\Program Files\AnalogX\CookieWall\cookieu.exe
          Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
          Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
          Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
          Assassin's Creed-->C:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x040c -removeonly
          Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
          BitDefender Antivirus 2008-->MsiExec.exe /I{C6E8173D-40EE-4998-B659-CA19F1F278BA}
          Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
          Call of Duty(R) - World at War(TM)-->C:\Program Files\InstallShield Installation Information\{D80A6A73-E58A-4673-AFF5-F12D7110661F}\setup.exe -runfromtemp -l0x040c
          Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c
          Call of Duty: Modern Warfare 2 - Multiplayer-->"G:\Steam\steam.exe" steam://uninstall/10190
          Call of Duty: Modern Warfare 2-->"G:\Steam\steam.exe" steam://uninstall/10180
          Call of Juarez - Bound in Blood-->C:\Program Files\InstallShield Installation Information\{FEFAF112-4DA8-479C-89E2-7DE25091711A}\setup.exe -runfromtemp -l0x040c
          Cheat Engine 5.5-->"C:\Program Files\Cheat Engine\unins000.exe"
          Counter-Strike(TM)-->MsiExec.exe /I{DF5A03CC-D5AA-43D8-B948-D9903F2AF94A}
          Dofus 1.28.0-->C:\Program Files\Dofus\uninstall.exe
          EA Download Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036
          EXPERTool 6.4-->"C:\Program Files\EXPERTool\unins000.exe"
          GUILD WARS-->"F:\Ordi-Jeux\Gw.exe" -uninstall
          HijackThis 2.0.2-->"G:\Ordi-Programmes\HijackThis\HijackThis.exe" /uninstall
          HP Deskjet All-In-One Software 9.0-->C:\Program Files\HP\Digital Imaging\{B2C61EBB-F47C-48ba-B375-27A40F8F48F7}\setup\hpzscr01.exe -datfile hposcr14.dat
          Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
          Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
          iTunes-->MsiExec.exe /I{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}
          Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
          JMB36X Raid Configurer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
          Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
          Left 4 Dead 2-->"G:\Steam\steam.exe" steam://uninstall/550
          Left 4 Dead-->"C:\WINDOWS\Left 4 Dead\uninstall.exe" "/U:C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Left 4 Dead\Uninstall\uninstall.xml"
          Les Sims Deluxe-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10798AE3-DCBB-43C3-9C93-C23512427E25}\setup.exe" -l040c
          Logiciel d'archivage WinRAR-->C:\Program Files\WinRAR\uninstall.exe
          Logitech Touch Mouse Server 1.0-->C:\Program Files\Logitech Touch Mouse Server\uninst.exe
          Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
          Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
          Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4D243BA7-9AC4-46D1-90E5-EEB88974F501}
          Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}
          Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
          Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
          Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
          Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
          Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
          Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
          Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
          Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
          Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
          Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
          Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
          Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
          Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
          Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
          Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
          Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
          Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
          Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
          Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
          Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
          Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
          Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
          Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
          Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
          MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
          Mumble and Murmur-->C:\Program Files\Mumble\Uninstall.exe
          NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
          Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly
          Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
          Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
          Painkiller Resurrection - Demo-->"G:\Steam\steam.exe" steam://uninstall/39590
          Patch Darluok-->"C:\WINDOWS\Patch Darluok\uninstall.exe" "/U:C:\Program Files\World of Warcraft\Uninstall\uninstall.xml"
          PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
          PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
          QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
          REALTEK GbE & FE Ethernet PCI NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\Setup.exe" -l0x40c -removeonly
          Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
          Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
          Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
          Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
          SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly
          Team Fortress 2-->"G:\Steam\steam.exe" steam://uninstall/440
          TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
          Transform XP to Vista 3.1-->"C:\Program Files\Transform XP to Vista\unins000.exe"
          Unreal Tournament 3-->MsiExec.exe /X{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}
          VDownloader 1.12-->"C:\Program Files\VDOWNLOADER\unins000.exe"
          VIA Platform Device Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
          Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
          Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
          Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
          Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
          Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
          World of Warcraft-->C:\Program Files\Fichiers communs\Blizzard Entertainment\World of Warcraft\Uninstall.exe

          ======Security center information======

          AV: Bitdefender Antivirus

          ======System event log======

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7036
          Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.

          Record Number: 6817
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7035
          Message: Un contrôle Démarrer a correctement été envoyé au service Connexions réseau.

          Record Number: 6816
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User: AUTORITE NT\SYSTEM

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7035
          Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

          Record Number: 6815
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User: AUTORITE NT\SYSTEM

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7036
          Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

          Record Number: 6814
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 6005
          Message: Le service d'Enregistrement d'événement a démarré.

          Record Number: 6813
          Source Name: EventLog
          Time Written: 20091220105505.000000+060
          Event Type: Informations
          User:

          =====Application event log=====

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 0
          Message:
          Record Number: 412
          Source Name: iPod Service
          Time Written: 20091003111327.000000+120
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 0
          Message:
          Record Number: 411
          Source Name: SeaPort
          Time Written: 20091003111325.000000+120
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 1
          Message:
          Record Number: 410
          Source Name: Bonjour Service
          Time Written: 20091003111325.000000+120
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 1000
          Message: Application défaillante hl2.exe, version 0.0.0.0, module défaillant datacache.dll, version 0.0.0.0, adresse de défaillance 0x0000b423.

          Record Number: 409
          Source Name: Application Error
          Time Written: 20091002213442.000000+120
          Event Type: erreur
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 1000
          Message: Application défaillante hl2.exe, version 0.0.0.0, module défaillant datacache.dll, version 0.0.0.0, adresse de défaillance 0x0000b423.

          Record Number: 408
          Source Name: Application Error
          Time Written: 20091002213332.000000+120
          Event Type: erreur
          User:

          ======Environment variables======

          "ComSpec"=%SystemRoot%\system32\cmd.exe
          "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\
          "windir"=%SystemRoot%
          "FP_NO_HOST_CHECK"=NO
          "OS"=Windows_NT
          "PROCESSOR_ARCHITECTURE"=x86
          "PROCESSOR_LEVEL"=15
          "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 1, AuthenticAMD
          "PROCESSOR_REVISION"=6b01
          "NUMBER_OF_PROCESSORS"=2
          "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
          "TEMP"=%SystemRoot%\TEMP
          "TMP"=%SystemRoot%\TEMP
          "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
          "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

          -----------------EOF-----------------
      2. moment de grace Contributeur sécurité
        ok

        à faire dans cet ordre (tu peux poster les rapports en suivant)

        1)
        Téléchargez et enregistrez le fichier d installation sur le bureau
        http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

        Double cliquez sur le fichier d'installation de AD-Remover, le programme s'installera automatiquement.
        Sous Vista : clic droit sur AD-Remover et sélectionner "Exécuter en tant qu'administrateur"
        Au menu principal choisir
        Option L Lancer le nettoyage
        et tapez sur [entrée] .
        Laissez travailler l'outil et ne touchez à rien ...
        Postez le rapport qui apparait à la fin.

        ( le rapport est sauvegardé aussi sous C:\Ad-report.log )

        (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

        Note :Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
        Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
        Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

        ....................

        2)
        Téléchargez MalwareByte's Anti-Malware

        http://www.malwarebytes.org/mbam/program/mbam-setup.exe

        . Enregistres le sur le bureau
        . Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
        . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
        . Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
        . Une fois la mise à jour terminé
        . Rend-toi dans l'onglet, Recherche
        . Sélectionnes Exécuter un examen complet (examen assez long)
        . Cliques sur Rechercher
        . Le scan démarre.
        . A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
        . Cliques sur Ok pour poursuivre.
        . Si des malwares ont été détectés, clique sur Afficher les résultats
        . Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
        . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
        . Rends toi dans l'onglet rapport/log
        . Tu cliques dessus pour l'afficher, une fois affiché
        . Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
        . Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
        . tu cliques droit dans le cadre de la reponse et coller

        Si tu as besoin d'aide regarde ces tutoriels :
        Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
        http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

        2. bean147
          .
          ======= RAPPORT D'AD-REMOVER 1.1.4.6_I | UNIQUEMENT XP/VISTA/7 =======
          .
          Mis à jour par C_XX le 28.01.2010 à 18:26
          Contact: AdRemover.contact@gmail.com
          Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
          .
          Lancé à: 14:28:29, ven. 29/01/2010 | Mode Normal | Option: CLEAN
          Exécuté de: C:\Ad-Remover\
          Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
          Nom du PC: QUENTIN-5B4E2F4 | Utilisateur actuel: Quentin
          .
          ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
          .

          C:\Program Files\Mozilla FireFox\Components\AskSearch.js
          C:\Program Files\Mozilla FireFox\extensions\search@searchsettings.com

          (!) -- Fichiers temporaires supprimés.

          .
          HKCU\software\appdatalow\AskBarDis
          HKCU\software\microsoft\internet explorer\searchscopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
          HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
          HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
          HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB}
          HKLM\software\AskBarDis
          HKLM\software\classes\AskIBar.PopSwatterBarButton
          HKLM\software\classes\AskIBar.PopSwatterBarButton.1
          HKLM\software\classes\AskIBar.PopSwatterSettingsControl
          HKLM\software\classes\AskIBar.PopSwatterSettingsControl.1
          HKLM\software\classes\AskToolBar.SettingsPlugin
          HKLM\software\classes\AskToolBar.SettingsPlugin.1
          HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
          HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
          HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
          HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
          HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
          HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
          HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
          HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
          HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
          HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
          HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
          HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
          .
          ============== Scan additionnel ==============
          .
          .
          * Mozilla FireFox Version 3.5.7 [fr] *
          .
          Nom du profil: zizkpm1c.default (Quentin)
          .
          (Quentin, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Quentin\Mes documents\Mes images
          (Quentin, prefs.js) Browser.startup.homepage, hxxp://www.google.be/\r
          (Quentin, prefs.js) Extensions.enabledItems, anycolor.pavlos256@gmail.com:0.3.1,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971,firefox-ext@youtubekeep.com:0.3.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
          .
          (Quentin, prefs.js) EFFACE - Startup.homepage_override_url, hxxp://www.ask.com/?o=13166&l=dis
          .
          .
          * Internet Explorer Version 6.0.2900.5512 *
          .
          [HKEY_CURRENT_USER\..\Internet Explorer\Main]
          .
          Do404Search: 01000000
          Local Page: C:\WINDOWS\system32\blank.htm
          Show_ToolBar: yes
          Start Page: hxxp://fr.msn.com/
          Enable Browser Extensions: yes
          Use Search Asst: no
          Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
          .
          [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
          .
          Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Delete_Temp_Files_On_Exit: yes
          Local Page: %SystemRoot%\system32\blank.htm
          Start Page: hxxp://fr.msn.com/
          Search bar: hxxp://search.msn.com/spbasic.htm
          .
          [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
          .
          Tabs: res://ieframe.dll/tabswelcome.htm
          .
          ============== Suspect (Cracks, Serials, ...) ==============
          .
          C:\Documents and Settings\Quentin\Bureau\Wakfu_Patch_0_76b_0_77b.exe
          C:\Documents and Settings\Quentin\Bureau\Fichiers.Rar\CRACK.TURKYA\LAUNCHER.EXE
          C:\Documents and Settings\Quentin\Bureau\Patch Dk\Instal PAtch(exclure).exe
          C:\Documents and Settings\Quentin\Bureau\wow-3.2.2-to-3.3.0-frFR-Win-patch\Blizzard Updater.exe
          .
          ===================================
          .
          4613 Octet(s) - C:\Ad-Report-CLEAN[1].log
          .
          125 Fichier(s) - C:\DOCUME~1\Quentin\LOCALS~1\Temp
          1031 Fichier(s) - C:\WINDOWS\Temp
          0 Fichier(s) - C:\WINDOWS\Prefetch
          .
          18 Fichier(s) - C:\Ad-Remover\BACKUP
          2 Fichier(s) - C:\Ad-Remover\QUARANTINE
          .
          Fin à: 14:32:12 | ven. 29/01/2010 - CLEAN[1]
          .
          ============== E.O.F ==============
          .
          2. bean147
            Malwarebytes' Anti-Malware 1.44
            Version de la base de données: 3657
            Windows 5.1.2600 Service Pack 3
            Internet Explorer 6.0.2900.5512

            29/01/2010 16:19:20
            mbam-log-2010-01-29 (16-19-20).txt

            Type de recherche: Examen complet (C:\|G:\|)
            Eléments examinés: 358809
            Temps écoulé: 1 hour(s), 41 minute(s), 6 second(s)

            Processus mémoire infecté(s): 0
            Module(s) mémoire infecté(s): 0
            Clé(s) du Registre infectée(s): 2
            Valeur(s) du Registre infectée(s): 1
            Elément(s) de données du Registre infecté(s): 1
            Dossier(s) infecté(s): 0
            Fichier(s) infecté(s): 3

            Processus mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Module(s) mémoire infecté(s):
            (Aucun élément nuisible détecté)

            Clé(s) du Registre infectée(s):
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5y99ae78-58tt-11dw-be53-y67078979y} (Backdoor.ProRat) -> Quarantined and deleted successfully.
            HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{5y99ae78-58tt-11dw-be53-y67078979y} (Backdoor.ProRat) -> Quarantined and deleted successfully.

            Valeur(s) du Registre infectée(s):
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\directx for microsoft® windows (Backdoor.Prorat) -> Quarantined and deleted successfully.

            Elément(s) de données du Registre infecté(s):
            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (Explorer.exe C:\WINDOWS\system32\fservice.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.

            Dossier(s) infecté(s):
            (Aucun élément nuisible détecté)

            Fichier(s) infecté(s):
            C:\Ad-Remover\pv.com (Trojan.Agent) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{FE15D0AC-7F17-4D84-B637-B0567CF2E53A}\RP1\A0001018.sys (Malware.Trace) -> Quarantined and deleted successfully.
            C:\System Volume Information\_restore{FE15D0AC-7F17-4D84-B637-B0567CF2E53A}\RP1\A0001050.com (Trojan.Agent) -> Quarantined and deleted successfully.
            1. moment de grace Contributeur sécurité
              tu peux vider la quarantaine

              Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent(car il est detecté a tort comme infection)

              ▶ Télécharge et installe List&Kill'em et enregistre le sur ton bureau
              http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem_Install.exe

              double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

              coche la case "creer une icone sur le bureau"

              une fois terminée , clic sur "terminer" et le programme se lancer seul

              choisis la langue puis choisis l'option 1 = Mode Recherche

              ▶ laisse travailler l'outil

              à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

              un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , mais ne le supprime pas pour l instant, le scan n'est pas fini.

              ▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

              tu peux supprimer le rapport catchme.log de ton bureau maintenant.
              1. bean147
                List'em by g3n-h@ckm@n 1.2.1.2
                User : Quentin (Administrateurs)
                Update on 29/01/2010 by g3n-h@ckm@n ::::: 11:50
                Start at: 17:53:37 | 29/01/2010
                Contact : g3n-h@ckm@n sur CCM

                AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
                Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
                Internet Explorer 6.0.2900.5512
                Windows Firewall Status : Enabled
                AV : Bitdefender Antivirus 8.0 [ (!) Disabled | Updated ]

                A:\ -> Lecteur de disquettes 3 ½ pouces
                C:\ -> Disque fixe local | 232,88 Go (114,07 Go free) | NTFS
                D:\ -> Disque CD-ROM
                E:\ -> Disque CD-ROM
                G:\ -> Disque fixe local | 931,51 Go (408,55 Go free) [LaCie] | NTFS

                ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\csrss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\WINDOWS\Explorer.EXE
                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                C:\Program Files\Bonjour\mDNSResponder.exe
                C:\Program Files\Java\jre6\bin\jqs.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\nvsvc32.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\PnkBstrA.exe
                C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                C:\WINDOWS\system32\svchost.exe
                C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                C:\Program Files\Java\jre6\bin\jusched.exe
                C:\WINDOWS\RTHDCPL.EXE
                C:\WINDOWS\system32\RUNDLL32.EXE
                C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                C:\Program Files\iTunes\iTunesHelper.exe
                C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                C:\Program Files\Skype\Phone\Skype.exe
                C:\Program Files\Messenger\msmsgs.exe
                C:\Program Files\EXPERTool\TBPanel.exe
                C:\WINDOWS\system32\ctfmon.exe
                C:\Program Files\DNA\btdna.exe
                C:\WINDOWS\system32\wbem\wmiapsrv.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\System32\alg.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\iPod\bin\iPodService.exe
                G:\Steam\steam.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
                C:\Program Files\iTunes\iTunes.exe
                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe
                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MDCrashReportTool.exe
                C:\Program Files\List_Kill'em\List_Kill'em.scr
                C:\WINDOWS\system32\cmd.exe
                C:\WINDOWS\system32\wbem\wmiprvse.exe
                C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp\pv.exe

                ======================
                Keys "Run"
                ======================
                [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                Skype REG_SZ "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                MSMSGS REG_SZ "C:\Program Files\Messenger\msmsgs.exe" /background
                GAINWARD REG_SZ C:\Program Files\EXPERTool\TBPanel.exe /A
                EA Core REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
                BitTorrent DNA REG_SZ "C:\Program Files\DNA\btdna.exe"
                HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater

                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
                SkyTel REG_SZ SkyTel.EXE
                RTHDCPL REG_SZ RTHDCPL.EXE
                nwiz REG_SZ nwiz.exe /install
                NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                JMB36X IDE Setup REG_SZ C:\WINDOWS\JM\JMInsIDE.exe
                BitDefender Antiphishing Helper REG_SZ "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
                BDAgent REG_SZ "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
                Alcmtr REG_SZ ALCMTR.EXE
                Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                Adobe ARM REG_SZ "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
                36X Raid Configurer REG_SZ C:\WINDOWS\system32\JMRaidSetup.exe boot
                QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"

                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

                =====================
                Other Keys
                =====================
                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                dontdisplaylastusername REG_DWORD 0 (0x0)
                legalnoticecaption REG_SZ
                legalnoticetext REG_SZ
                shutdownwithoutlogon REG_DWORD 1 (0x1)
                undockwithoutlogon REG_DWORD 1 (0x1)

                ===============
                [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                NoDriveTypeAutoRun REG_DWORD 323 (0x143)
                NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff)

                ===============
                [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff)
                NoDriveTypeAutoRun REG_DWORD 323 (0x143)

                ===============
                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

                ===============
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

                ===============
                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
                {AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ

                ===============
                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
                F:\Ordi-Jeux\Steam\SteamApps\common\doom 3 demo\Doom3.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\common\doom 3 demo\Doom3.exe:*:Enabled:Doom 3 Demo
                F:\Ordi-Jeux\Steam\SteamApps\common\alpha prime demo\AlphaPrime.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\common\alpha prime demo\AlphaPrime.exe:*:Enabled:Alpha Prime Demo
                F:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe:*:Enabled:hl2
                C:\WINDOWS\system32\sessmgr.exe REG_SZ C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019
                C:\Program Files\Bonjour\mDNSResponder.exe REG_SZ C:\Program Files\Bonjour\mDNSResponder.exe:*:Disabled:Bonjour
                C:\Program Files\Mozilla Firefox\firefox.exe REG_SZ C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox
                C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Disabled:Windows Live Messenger
                C:\Program Files\Counter-Strike\hl.exe REG_SZ C:\Program Files\Counter-Strike\hl.exe:*:Enabled:Half-Life Launcher
                F:\Ordi-Jeux\Steam\SteamApps\bean147\insurgency\hl2.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\bean147\insurgency\hl2.exe:*:Enabled:hl2
                C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe REG_SZ C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe:*:Enabled:Call of Juarez - Bound in Blood
                C:\WINDOWS\system32\PnkBstrA.exe REG_SZ C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA
                C:\WINDOWS\system32\PnkBstrB.exe REG_SZ C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB
                C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe REG_SZ C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)
                C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe REG_SZ C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)
                G:\Ordi-Jeux\Steam\steam.exe REG_SZ G:\Ordi-Jeux\Steam\steam.exe:*:Enabled:Steam
                C:\WINDOWS\system32\dpvsetup.exe REG_SZ C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test
                C:\WINDOWS\system32\rundll32.exe REG_SZ C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application
                G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe:*:Enabled:hl2
                G:\Ordi-Jeux\Steam\SteamApps\bean147\condition zero\hl.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\condition zero\hl.exe:*:Enabled:Half-Life Launcher
                G:\Ordi-Jeux\Steam\SteamApps\bean147\ricochet\hl.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\ricochet\hl.exe:*:Enabled:Half-Life Launcher
                G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike\hl.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike\hl.exe:*:Enabled:Half-Life Launcher
                C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe REG_SZ C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3
                G:\Ordi-Jeux\AssassinsCreed_Dx9.exe REG_SZ G:\Ordi-Jeux\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9
                G:\Ordi-Jeux\AssassinsCreed_Dx10.exe REG_SZ G:\Ordi-Jeux\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10
                G:\Ordi-Jeux\AssassinsCreed_Launcher.exe REG_SZ G:\Ordi-Jeux\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update
                F:\Alien Arena 2008\crx.exe REG_SZ F:\Alien Arena 2008\crx.exe:*:Disabled:crx
                C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Disabled:Windows Live Call
                C:\Program Files\Skype\Plugin Manager\skypePM.exe REG_SZ C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
                C:\Program Files\DNA\btdna.exe REG_SZ C:\Program Files\DNA\btdna.exe:*:Enabled:DNA
                C:\Program Files\Electronic Arts\EADM\Core.exe REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager
                C:\Program Files\Metin2_France\metin2client.bin REG_SZ C:\Program Files\Metin2_France\metin2client.bin:*:Enabled:metin2client
                G:\Steam\steam.exe REG_SZ G:\Steam\steam.exe:*:Enabled:Steam 732897
                G:\Steam\SteamApps\bean147\counter-strike source\hl2.exe REG_SZ G:\Steam\SteamApps\bean147\counter-strike source\hl2.exe:*:Enabled:hl2
                C:\World of Warcraft\WoW-3.2.0-frFR-downloader.exe REG_SZ C:\World of Warcraft\WoW-3.2.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader
                C:\World of Warcraft\Launcher.exe REG_SZ C:\World of Warcraft\Launcher.exe:*:Enabled:Launcher.exe
                G:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe REG_SZ G:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2
                C:\Program Files\Skype\Phone\Skype.exe REG_SZ C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype
                G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe REG_SZ G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2
                G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe REG_SZ G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer
                C:\Program Files\iTunes\iTunes.exe REG_SZ C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes
                C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE REG_SZ C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook
                C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe REG_SZ C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe:*:Enabled:Logitech

                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
                %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
                C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
                C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger

                ===============
                ActivX controls
                ===============
                HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
                HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
                HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
                HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}

                ===============
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73fa19d0-2d75-11d2-995d-00c04f98bbc9}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
                HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

                ==============
                BHO :
                ======
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{53707962-6F74-2D53-2644-206D7942484F}]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

                ================
                Internet Explorer :
                ================
                [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                Start Page REG_SZ https://www.msn.com/fr-fr

                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                Start Page REG_SZ https://www.msn.com/fr-fr

                ========
                Services
                ========
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

                Ndisuio : 0x3
                EapHost : 0x3
                SharedAccess : 0x2
                wuauserv : 0x2

                =========
                Atapi.sys
                =========

                %%%% HASHDEEP-1.0
                %%%% size,md5,sha256,filename
                ## Invoked from: C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp
                ## C:\> hashdeep C:\WINDOWS\System32\Drivers\atapi.sys
                ##
                96512,9f3a2f5aa6875c72bf062c712cfa2674,b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9,C:\WINDOWS\System32\Drivers\atapi.sys

                Sources
                =======

                C:\WINDOWS\system32\drivers\atapi.sys
                C:\WINDOWS\system32\ReinstallBackups\0013\DriverFiles\i386\atapi.sys
                C:\WINDOWS\system32\ReinstallBackups\0014\DriverFiles\i386\atapi.sys

                Référence :
                ==========

                Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
                Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
                Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
                Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
                Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
                Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
                Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C

                G:\Autorun.inf :
                ----------------
                [autorun]
                icon=.VolumeIcon.ico

                =======
                Drive :
                =======

                Défragmenteur de disque Windows
                Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

                Rapport d'analyse
                233 Go total, 114 Go libre (48%), 8% fragmenté (fragmentation du fichier 17%)

                Il ne vous est pas nécessaire de défragmenter ce volume.

                ¤¤¤¤¤¤¤¤¤¤ Files/folders :

                Present !! : C:\WINDOWS\SET3.tmp
                Present !! : C:\WINDOWS\SET4.tmp
                Present !! : C:\WINDOWS\SET8.tmp
                Present !! : C:\WINDOWS\mbr.exe
                Present !! : C:\WINDOWS\system32\x3daudio1_0.dll
                Present !! : C:\WINDOWS\system32\x3daudio1_1.dll
                Present !! : C:\WINDOWS\system32\X3DAudio1_2.dll
                Present !! : C:\WINDOWS\system32\X3DAudio1_3.dll
                Present !! : C:\WINDOWS\system32\X3DAudio1_4.dll
                Present !! : C:\WINDOWS\system32\X3DAudio1_5.dll
                Present !! : C:\WINDOWS\system32\X3DAudio1_6.dll
                Present !! : C:\WINDOWS\system32\xinput9_1_0.dll
                Present !! : C:\WINDOWS\System32\404Fix.exe
                Present !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
                Present !! : C:\WINDOWS\System32\dumphive.exe
                Present !! : C:\WINDOWS\System32\IEDFix.exe
                Present !! : C:\WINDOWS\System32\Process.exe
                Present !! : C:\WINDOWS\System32\SrchSTS.exe
                Present !! : C:\WINDOWS\System32\tmp.reg
                Present !! : C:\WINDOWS\System32\VACFix.exe
                Present !! : C:\WINDOWS\System32\VCCLSID.exe
                Present !! : C:\WINDOWS\System32\WS2Fix.exe
                Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD1.exe
                Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD2.exe
                Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD24.exe
                Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD8.exe
                Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADB.exe
                Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADC.exe

                ¤¤¤¤¤¤¤¤¤¤ Keys :

                Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr
                Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"
                Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
                Present !! : HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
                Present !! : HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}

                ============

                catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2010-01-29 18:08:50
                Windows 5.1.2600 Service Pack 3 NTFS

                scanning hidden processes ...

                scanning hidden services & system hive ...

                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
                "PendingFileRenameOperations"=str(7):"d\6\x2f30700\b\0ms\xffd8\xffffv\n\22\0\x2600?\1\0\0010DvcDs397\xfff0\xffffl\1\xeea8E\x2140&@\0x\34˜\34¸\34à\34\xda18\35ø\35\x2760\36\xe960Eø\35\x1900Frv\20\0e\0\b\0ar\xffe0\xffffLegacyDriver\0$\xffd8\xffffv\tN\08H\1\0\1aCasUD)\0\0 \xffffn \x27d8\xeddaÊ\0\0\xe898\31\1\0\0\0\xedb0E\xffff\xffff\1\0€6€;\xffff\xffff\b\0\0\0\30\0\4\0\x84\0\17\0LGC_006B¨\xffffn \x27d8\xeddaÊ\0\0\xee48E\0\0\0\0\xffff\xffff\xffff\xffff\6\0`E€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x30303F¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0ycch\0Télécharger les mises à jour BitDefender et les nouvelles signatures de codes malveillants via Internet\0\0\0@\0system32\DRIVERS\mouclass.sys\0P\0NDIS mode utilisateur E/S Protocole\0\0\0\xffe0\xffffv\a\22\05\1\0\1}Srie\xffd8\xffffv\f\4\xffe0\xffffv\6\4s0<\xfff8\xffff°E\xffd8\xffffv\t\30\0\xf2c0E\1\0\1\Hl ieoxy\xffe0\xffffPSCRIPT.HLP\0tp\xffe0\xffffv\a\2SCRIPT.NTF\0\0:\xffd8\xffffv\16\4\1\0\1HPoie\xffe8\xffffinput.inf\0\xffd8\xffffv\n\2E\xf3d8E\xf3b0E\xf428E\xf3f8E\xf488E\xf450E\xf4f0E\xf4b0E\xffe0\xffffv\6 \0\xf580E\3\0\1:Lde:\xffd8\xffff¸\6h\4\0\0\0\0¸\6h\4\31\0\2\0\x2e00:\xffe8\xffffMicrosoft\0\xffd8\xffffà\1\xa6a0\4\0\0\0\0à\1\xa6a0\4\27\0\2\0P\\xffd8\xffffh\4¸\6\0\0\0\0h\4¸\6\30\0\2\0EM\xffe0\xffffv\6 \0\xf630E\3\0\1:Lte:\xffd8\xffff\\3h\4\0\0\0\0\\3h\4\e\0\2\0\x2e00:\xffe0\xffffv\2 \0\xf6c0E\3\0\1:\x3041HP:\xffe0\xffffv\5 \0\xf698E\3\0\1sLgl7\xffd8\xffff\\3\5\0\0\0\0\\3\5\32\0\2\0\?\xffd8\xffff>\f\x23fd\22\0\0\0\0>\f\x23fd\22\35\0\2\0\x2c18:\xffe0\xffffv\2 \0\xf708E\3\0\1:A:\x2e00:\xffd8\xffff\x109e\t>\f\0\0\0\0\x109e\t>\f\36\0\2\0¸H\xffd8\xffffv\v \0\xf758E\3\0\1MLteSalro\xffd8\xffff\\3h\4\0\0\0\0\\3h\4\34\0\2\00015\xffe0\xffffv\b \0\xf7a0E\3\0\1:A ml\xffd8\xffff\x33ef\3O\4\0\0\0\0\x33ef\3O\4\37\0\2\0\x2e00:\xffe0\xffffv\2 \0\xf878E\3\0\1:AHP:\xffe0\xffffv\2 \0\xf808E\3\0\1:A:\x2a08:\xffd8\xffffó\0c\1\0\0\0\0ó\0c\1!\0\2\0\x2c90:\xffe0\xffffv\2 \0\xf850E\3\0\1:A:\x2f98:\xffd8\xffff²\0ó\0\0\0\0\0²\0ó\0"\0\2\0(H\xffd8\xffffc\1G\1\0\0\0\0c\1G\1 \0\2\00007\xffe0\xffffv\3 \0\xf8c0E\3\0\1:A0\x2b70:\xffd8\xffff™\0²\0\0\0\0\0™\0²\0#\0\2\0\x2e00:\xffe0\xffffv\6 \0¸E\3\0\1:I\x204f\x3042:\xffe0\xffffv\6 \0(E\3\0\1HI\x204fBH\xffd8\xffff—\n½\17\0\0\0\0—\n½\17%\0\2\0\x2c18:\xffe0\xffffv\6 \0pE\3\0\1:I\x204f\x3242:\xffd8\xffff®\a—\n\0\0\0\0®\a—\n&\0\2\0¸H\xffe0\xffffv\6 \0àE\3\0\1HI\x204f\x3342H\xffd8\xffff½\17-\25\0\0\0\0½\17-\25$\0\2\0002C\xffd8\xffffk\5®\a\0\0\0\0k\5®\a'\0\2\0\x2c18:\xffe0\xffffv\6 \0(E\3\0\1:I\x204fB:\xffd8\xffff\3k\5\0\0\0\0\3k\5(\0\2\0¸H\xffe0\xffffv\6 \0\xfa70E\3\0\1HI\x204fBH\xffd8\xffff¤\2\3\0\0\0\0¤\2\3)\0\2\0\x2b70:\xffe0\xffffv\6 \0\xfab8E\3\0\1:I\x204fB:\xffd8\xffff\xe7d3\1¤\2\0\0\0\0\xe7d3\1¤\2*\0\2\0P:\xffe0\xffffv\6 \0\a\x1c45\v-\0\2\0@H\xffe0\xffffv\6 \0ØE\3\0\1:J\x2053\x3342:\xffd8\xffff#\5\xdbf0\a\0\0\0\0#\5\xdbf0\a.\0\2\0\x2d40:\xffe0\xffffv\6 \0 E\3\0\1:J\x2053B:\xffd8\xffff\xec97\3#\5\0\0\0\0\xec97\3#\5/\0\2\0H\xffe0\xffffv\6 \0hE\3\0\1HJ\x2053BH\xffd8\xffff\2\xec97\3\0\0\0\0\2\xec97\0030\0\2\0\x2b70:\xffe0\xffffv\6 \0°E\3\0\1:J\x2053B:\xffd8\xffff\xf43a\1\2\0\0\0\0\xf43a\1\0021\0\2\0P:\xffe0\xffffv\2 \0øE\3\0\1H\x3043HH\xffd8\xffff…\r\23\0\0\0\0…\r\0232\0\2\0ˆH\xffe0\xffffv\2 \0\xfd40E\3\0\1:C:\x2aa0:\xffd8\xffff\xe375\t…\r\0\0\0\0\xe375\t…\r3\0\2\0\x2d40:\xffe0\xffffv\2 \0ˆE\3\0\1:\x3243:\x3070:\xffd8\xffff²\6\xe375\t\0\0\0\0²\6\xe375\t4\0\2\0H\xffe0\xffffv\2 \0\xfdd0E\3\0\1:C:\x2b70:\xffd8\xffff…\2Y\3\0\0\0\0…\2Y\0037\0\2\0\x2e00:\xffe0\xffffv\2 \0\xfe18E\3\0\1:CHP:\xffd8\xffff\1…\2\0\0\0\0\1…\28\0\2\0HH\xffe0\xffffv\6 \0\xfe60E\3\0\1HAC H\xffd8\xffff\xf3e0\r€\22\0\0\0\0\xf3e0\r€\229\0\2\00H\xffe0\xffffv\2 \0¨E\3\0\1H\x3343H¨H\xffd8\xffff\xf10a\4²\6\0\0\0\0\xf10a\4²\0065\0\2\0\x2b70:\xffe0\xffffv\2 \0ðE\3\0\1:C:\x2d40:\xffd8\xffffY\3\xf10a\4\0\0\0\0Y\3\xf10a\0046\0\2\0P:\xffe0\xffffv\6 \08E\3\0\1:AC :\xffd8\xffff@\t\xf3e0\r\0\0\0\0@\t\xf3e0\r:\0\2\0\x2e00:\xffe0\xffffv\6 \0\xff80E\3\0\1:AC :\xffd8\xffffð\6@\t\0\0\0\0ð\6@\t;\0\2\0HH\xffe0\xffffv\6 \0\xffc8E\3\0\1HAC H\xffd8\xffff\xa6a0\4ð\6\0\0\0\0\xa6a0\4ð\6<\0\2\00H\xffe0\xffffv\6 \0\20F\3\0\1:AC :\xffd8\xffffø\3\xa6a0\4\0\0\0\0ø\3\xa6a0\4=\0\2\0\x2d40:\xffe0\xffffv\4 \0XF\3\0\1:FS\x3070:\xffd8\xffff\\3\x9d8\5\0\0\0\0\\3\x9d8\5>\0\2\0H\xffe0\xffffv\3 \0\x00a0F\3\0\1:P4\x2b70:\xffd8\xffff\x33ef\3h\4\0\0\0\0\x33ef\3h\4A\0\2\0\x2e00:\xffd8\xffffv\v \0ðF\3\0\1:Oesz 2¸H\xffd8\xffffƒ\aâ\t\0\0\0\0ƒ\aâ\tB\0\2\0°H\xffd8\xffffv\v \0@F\3\0\1HOesz 1¨H\xffd8\xffffâ\t`\r\0\0\0\0â\t`\rC\0\2\0èH\xffe8\xffffl\2H+\x323e—\xfae0J‘T\xffe0\xffffv\4 \0 F\3\0\1HFS¨H\xffd8\xffff\\3\x9d8\5\0\0\0\0\\3\x9d8\5?\0\2\0èH\xffd8\xffffv\n \0ðF\3\0\1:HlLte:\x2b70:\xffd8\xffff\x21b4\2\\3\0\0\0\0\x21b4\2\\3@\0\2\0\x2e00:\xffd8\xffffv\v \0\x0240F\3\0\1:Oesz 0\x2c18:\xffd8\xffff`\r\xff19\22\0\0\0\0`\r\xff19\22D\0\2\0\x2ec8:\xffe0\xffffv\5 \0ˆF\3\0\1:\x3239x2H\xffd8\xffff\xa820#\xa820#\0\0\0\0\xa820#\xa820#E\0\2\0°H\xffe0\xffffv\6 \0\x02d0F\3\0\1HAS H\xffd8\xffff¸\6Ð\b\0\0\0\0¸\6Ð\bF\0\2\0XH\xffe0\xffffv\6 \0\x0318F\3\0\1:AS :\xffd8\xffff\xda20\nÀ\17\0\0\0\0\xda20\nÀ\17I\0\2\0\x2e00:\xffe0\xffffv\a \0\x0360F\3\0\1:AC 1\xffd8\xffff\v0\20\0\0\0\0\v0\20J\0\2\0HH\xffe0\xffffv\a \0¨F\3\0\1HAC 2\xffd8\xffff°\nP\16\0\0\0\0°\nP\16K\0\2\00H\xffe0\xffffv\a \0ðF\3\0\1HAC 3\xffd8\xffffè\n\x1d88\17\0\0\0\0è\n\x1d88\17L\0\2\0ÀH\xffe0\xffffv\6 \08F\3\0\1HAS :\xffd8\xffffÐ\b\x2d70\r\0\0\0\0Ð\b\x2d70\rG\0\2\0\x2bf0:\xffe0\xffffv\6 \0€F\3\0\1:AS :\xffd8\xffff\x2d70\r \21\0\0\0\0\x2d70\r \21H\0\2\0\xffffv\24 \0ØF\3\0\1:Sre \x3034x8\x2820V\x2941\x2bf0:\xffd8\xffffò\3u\2\0\0\0\0ò\3u\2M\0\2\0\x2f98:\xffd0\xffffv\25 \0\x0530F\3\0\1HSre \x3030x\x3030\x2820SG)H\xffd8\xffffn\4Ó\3\0\0\0\0n\4Ó\3N\0\2\0ˆH\xffd0\xffffv\22 \0\x0588F\3\0\1:T T\x2043D \x3032x8:\x2bf0:\xffd8\xffff\xe030\3u\2\0\0\0\0\xe030\3u\2Q\0\2\0\x2f98:\xffd0\xffffv\22 \0àF\3\0\1HT T\x2043D \x3032x8HH\xffd8\xffff\xe030\3º\2\0\0\0\0\xe030\3º\2R\0\2\0ˆH\xffc8\xffffv\35 \0\x0640F\3\0\1WT T\x2043D qa\x2065P\x2078\x3237050p\xffd8\xffff\xe030\3\xe824\2\0\0\0\0\xe030\3\xe824\2S\0\2\00012\xffd8\xffff\x2255\4\x19c0\3\0\0\0\0\x2255\4\x19c0\3T\0\2\0ÀH\xfff8\xffff\xe5f8E\xffd0\xffffv\25 \0ÈF\3\0\1HSre \x323047\x2038(G)H\xffd8\xffff\5\x2255\4\0\0\0\0\5\x2255\4O\0\2\0ÀH\xffd0\xffffv\27 \0 F\3\0\1:Sre 20\x30312\x2820SG)\xffd8\xffff\xe3e4\6\5\0\0\0\0\xe3e4\6\5P\0\2\0\x2e00:\xffc8\xffffv\31 \0\x0668F\3\0\1HT A qa\x2065P\x20787856HèH\xffd8\xffffv\16 \0¨F\3\0\1\0T A \x3032x7W\xffd8\xffff\xe030\3\x19c0\3\0\0\0\0\xe030\3\x19c0\3U\0\2\0xy\xffd8\xffffv\20 \0\x07f8F\3\0\0010T D\x2056\x32318x\x3032\xffd8\xffff\xe3e4\6\xe030\3\0\0\0\0\xe3e4\6\xe030\3V\0\2\0\T \xffff 9€9ð9@9È9ø9 9x9P99È9(9Ð9€9€9H9à99¨9ð9x9Ð9P9ˆ9\xf560E\xf678E\xf610E\xf730E\xf658E\xf6e8E\xf780E\xf7c8E\xf7e8E\xf830E\xf8a0E\xf8e8EEPE˜EE\xfa50E\xfa98E\xfae0E(EpE\xfbb8E:\x2bf0:\xffd8\xffffÕ\nH\5\0\0\0\0Õ\nH\5W\0\2\0\x2f98: \xffffn x\xa67eàÊ\0\0ø\26\1\0\0\0\x2a48F\xffff\xffff\1\0\x26c0F(H\xffff\xffff\n\0\0\0\f\0\32\0\3\0\n\0PFraowrp\xffe0\xffffv\6\32\0\x0a58F\1\0\1/Diel\xffe0\xffffpdfcmnnt.dll\0 ¨\xffffn ¸|àÊ\0\0\x09d8F\1\0\0\0(F\xffff\xffff\0\0\xffff\xffffÈH\xffff\xffff\26\0\0\0\0\0\0\0\0\0\5\0Prs\37 \xffffn \xa5d2\xa680àÊ\0\0\x0a78F\0\0\0\0\xffff\xffff\xffff\xffff\v\0\x0d98F(H\xffff\xffff\0\0\0\0\30\0D\0\0\0\v\0PFrao:15\xffd8\xffffv\t(\0\x0b58F\1\0\1!Agmns\0P!\xffd0\xffff-PPDFCREATORPRINTER\08 \xffe0\xffffv\aD\0¨F\1\0\1\x97cCmad¸\xffffC:\PROGRA~1\PDFCRE~1\PDFSpool.exe\0\xffe0\xffffv\5\4Lgieeu.\0\xffd8\xffffv\n\4\1?PitroDtf\xffd0\xffff0FˆF\x0bf0FF\x0c78F F\x0ce8FF\x0d70FÈFHF¨\xffffn =3Ê\0\0\xf588H\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xf6b0H€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303009@\0NT AUTHORITY\NetworkService\0\0\0\xffe0\xffffv\a\22\0È5\1\0\1vSrie\xffd8\xffffv\n$\0\xeb90F\1\0\1\0DvcDs\0\0\0\xffe8\xffffXKàK\xffffl\5X\e.\x237c¸\eÈ\1\estants. Si ce service est arrêté, ces connexions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.\0\0\0\b\0E\xffe8\xffffc59220d6\0000\xffe8\xffffc4467777\0I\xffd8\xffffv\n\22\0\xa4903\1\0\0015DvcDsc_t\xffd8\xffffv\v\4\x2198\36@\36€\36 \36\x2fc06h;\31\1\0\0\0\xffffn råÊ\0\0\xe898\31\1\0\0\0F\xffff\xffff\1\0\x2a78F€;\xffff\xffff\b\0\0\0\30\0\4\0"\0\17\0LGC_4\x33355B\xffd8\xffffv\f\4\0\0\4\0\x3030\x3030\0S\xffe0\xffffv\6\4v\n\22\0\x3198:\1\0\1NDvcDsrfm\xffe0\xffff DÀFàFFHFÈFht\x98\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A790101264779556\0\0\0 di \0lay driver\0nve\xffd8\xffffv\f\47-1-2001\0\31\xffe0\xffffv\6\4\0\26\0N\0\0\0\4\0\x3030\x303058(\0v\vÐ\0`F\1\0\1\0Dsrpin\0\0\xffe8\xfffff66a0511\0N\xffe0\xffffv\6\4\xffffv\v\4\xffffv\5\32\08I\1\0\1sCas\0\xffd8\xffffv\n\22\0\xdf80$\1\0\1\eDvcDs\34\xdae8\eX\0v\v&\0\x1b28F\1\0\1\0Dsrpinÿ\0170\0NetBIOS sur TCP/IP\0\30ÿ\17\xffe8\xffffe34607d9\0\0\xffd8\xffffv\tN\0\x2878I\1\0\1TCasUDttp\xffe0\xffffv\4Z\0¨I\1\0\1\30IoP\30\xffe0\xffffv\5\32\0ÀF\1\0\1\31Cas\0\xffe0\xffffLegacyDriver\0é\xffe0\xffffø$À8°:\xde10:¨D`FcD\xffd8\xffffv\v\4 \x2c38 \x22e8 \x2308 \x2b78 \20\0H \b\0ie\xffe0\xffffv\5\32\00F\1\0\1<Cas\0\xffc8\xffffFLEXnet Licensing Service\0\xffd8\xffffv\v\4\1aPltrDleitresok\0c\20\0.sys\0\0\xffe0\xffffv\6\4\xffffLegacyDriver\0001\xffe0\xffffp;\x2a58<x<\x1bb8F`H¸I\0\0 \xffffn (\xe278ÆÊ\0\0\xed90\b\1\0\0\0 F\xffff\xffff\1\0\xd8d08€;\xffff\xffff\b\0\0\0\30\0\4\0B\0\17\0LGC\x335f0A66\xffd8\xffffv\n\22\0€F\1\0\1$DvcDs\0\0\0\xff98\xffffn \xfe52°øÊ\0\0`\n\1\0\1\0 FØUSBSTOR#Disk&Ven_ST932032&Prod_5AS&Rev_#5D049FFFFFFF&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\08\xffffn œÓÊ\0\0T\x30450EGHA5\x3044\x3034\x2330{35\x3033\x2d64bb\x312d1\x2d309\x3266\x302d009ebb\0\0\0\xff68\xffffSTORAGE\Volume\1&30a96598&0&SignatureA8B7BEACOffset7E00Length4A85AD0400\0se¨\xffffn œÓÊ\0\0\x2140F\0\0\0\0\xffff\xffff\xffff\xffff\1\0\x2410F\0\xffff\xffff\16\0\0\0\30\0æ\0\0\0\1\0\x2323\31`\31\xffd8\xffffv\fæ\0\x2320F\1\0\1\31SmoiLnÀ\31\xff10\xffff\\?\STORAGE#Volume#1&30a96598&0&SignatureA8B7BEACOffset7E00Length4A85AD0400#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\0com\xfff8\xffff\x22f8F\xfff0\xffffl\1\x22a0F#\0\xff60\xffffn ÎÓÊ\0\0 \23\1\0\0\0\x2670F\xffff\xffff\1\0\x2540F\0\xffff\xffff\16\0\0\0\34\0F\0\3\0M\0\x2323\x233fU\x2342Vd09&i\x305f4\x2361509FFF#adb\x3031-\x3335\x2d301\x3264-\x3130\x2d66\x3030\x30634b5e}t\xffd8\xffffv\16F\0\x24f0F\1\0\1>DvcIsac>°\xffffUSB\Vid_059b&Pid_047a\5D049FFFFFFF\000320\xfff8\xffff\x24c8F¨\xffffn ÎÓÊ\0\0\x2428F\0\0\0\0\xffff\xffff\xffff\xffff\1\0\x2668F\0\xffff\xffff\16\0\0\0\30\0\x9c\0\0\0\1\0#NDO\xffd8\xffffv\f\x9c\0\x25c8F\1\0\1>SmoiLn`>\xff60\xffff\\?\USB#Vid_059b&Pid_047a#5D049FFFFFFF#{a5dcbf10-6530-11d2-901f-00c04fb951ed}\0\xfff8\xffff\x25a0F\xfff0\xffffl\1\x2548F#\0\xffe0\xffffv\a\22\0ø$\1\0\1 Srie\xffe0\xffffv\6\4\xf014ÕÓÊ\0\0H\27\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xe510;\0\xffff\xffff\0\0\0\0\b\0\2\0\5\0\f\00907\x3030\x3030\T \xffffn ÎáðÊ\0\0\xe898\31\1\0\0\0\x2f78F\xffff\xffff\1\0\x2eb0\6€;\xffff\xffff\b\0\0\0\30\0\4\0Î\0\17\0LGC_CD8F¨\xffffn ÎáðÊ\0\0\x2750F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\x2918F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030Ð \xffd8\xffffv\v\4ECC055D-047F-11D1-A537-0000F8753ED1}\0 Ð \xffd8\xffffv\n\22\0\xa7205\1\0\1rDvcDs\0ar\xffe0\xffff\x2680F\x26a0F\x2808F\x2830F\x2870F\x28f0F06\xffd8\xffffv\v\4\xffffv\tN\0\x29c8F\1\0\0017CasUD665¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000460\xffd8\xffffv\n\22\0à3\1\0\19DvcDs\C:\xfff0\xffffl\1\x0a78F|.\xffe0\xffffv\5\32\0\x2d10F\1\0\1\0Cas\\xfff8\xffff@F \xffffn ¸\xa6e2ÍÊ\0\0\xe898\31\1\0\0\0\x2b90F\xffff\xffff\1\0\x0cd86€;\xffff\xffff\b\0\0\0\30\0\4\0~\0\17\0LGC_1\x3330\x3043A¨\xffffn ¸\xa6e2ÍÊ\0\0\x2a80F\0\0\0\0\xffff\xffff\xffff\xffff\6\08€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0 Ð \xfff0\xffffl\1\x2ae0F\x2140& \xffffn j\xaa22ÍÊ\0\0\xe898\31\1\0\0\0\x2d00F\xffff\xffff\1\0>€;\xffff\xffff\b\0\0\0\30\0\4\0\xbb\0\17\0LGC_6D\x30467¨\xffffn j\xaa22ÍÊ\0\0\x2ba0F\0\0\0\0\xffff\xffff\xffff\xffff\6\0¸D€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012\xffd8\xffffv\tN\0\x2c80F\1\0\1iCasUDde ¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0812\xffd8\xffffv\n\22\03\1\0\1?DvcDsWIN\xfff0\xffffl\1\x2c00F\x2140&\xffe0\xffffLegacyDriver\0\\xffd8\xffffv\tN\0xF\1\0\1tCasUDFE9\xffd8\xffffv\n\22\0h\31\1\0\1pDvcDsobi\xfff8\xffff¨F\xff78\xffffn ¨™ÓÊ\0\0H\e\1\0\0\0\x2f68F\xffff\xffff\b\0\x2ff8F€;\xffff\xffff\16\0\0\0\30\0X\0\2\08\0\x2631\x3033a69&&intrABBAOfe7\x3030Lnt48A0\x3030\xffd8\xffffv\v\4HrwrI??\\xffd8\xffffSTORAGE\Volume\0\0tp\xffd8\xffffv\tN\0\x2eb0F\1\0\1>CasUD>ð>¨\xffff{71A27CDD-812A-11D0-BEC7-08002BE2092F}\0\36È8 \xffff{71A27CDD-812A-11D0-BEC7-08002BE2092F}\0007\08\30\xfff0\xffffl\1\x3020F\xe918H\xfff0\xffffl\1\x27b0F\x2140&\xffe0\xffffv\3\24\0À\32\1\0\1cMgse\xffd8\xffffv\n"\0\x2fd0F\1\0\1nDvcDsnd \xffd8\xffffVolume générique\0e\xffd8\xffffÈ>\x2e10F\x2e38F\x2e88F˜5X:\x2f88F\x2fa8Fht¨\xffffn ˜DÓÊ\0\0\x2d88F\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\0\0\0\0\0\0\0\0\0\0\a\0Lgof\xffd8\xffffv\f\4;\xffff\xffff\30\0\0\0\0\0\0\0\n\0\21\0Vd09&i\x305f4a668 \xffffn ÎÓÊ\0\0F\2\0\0\0\x27406\xffff\xffff\f\0àF€;\xffff\xffff"\0\0\0&\0\x90\0\0\0\f\0509FFF\0\0°\xffffPériphérique de stockage de masse USB\0\xffd8\xffffIomega Select HDD\0\xffd8\xffffv\f\4B\Class_08\0\00005\xffe0\xffffv\6X\0°F\1\0\1>Die>\xffd8\xffffv\tN\0F\1\0\1NCasUDTEM¨\xffff{36FC9E60-C465-11CF-8056-444553540000}\0WIN\xffe0\xffffv\5\b\0\xfd8\31\1\0\1tCaso\xffe0\xffffv\a\20\05\1\0\0011Srie\b\0\x0e60F \xffff{36FC9E60-C465-11CF-8056-444553540000}\0021\0 \0\xffe0\xffffv\3P\00F\1\0\1>Mg2\xff98\xffffn ÎÓÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\2\0\xdb60\32?\xffff\xffff\0\0\0\0(\0\x9a\0\0\0\21\0Dvc aaees8\0\0\xffd8\xffffv\f\x9a\0¨F\1\0\0016SmoiNm12\xff60\xffff\??\USB#Vid_059b&Pid_047a#5D049FFFFFFF#{a5dcbf10-6530-11d2-901f-00c04fb951ed}T¨\xffffn ÈÚÓÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\0\0\0\0\0\0\0\0\1\0\a\0Lgof \xffffn  àðÊ\0\0\xe898\31\1\0\0\0Ø\32\xffff\xffff\1\0ˆ7€;\xffff\xffff\b\0\0\0\30\0\4\0Â\0\17\0LGC_D6\x33316\b\0BF\xffe0\xffffLegacyDriver\0D\xfff0\xffffl\1ÐF½\xff90\xffffn \xe590ÓÊ\0\0\x2020=\1\0\0\0Ð+\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\34\0\0\0\0\0\0\0\4\0\37\0Ds&e_T\x3233\x3330\x2632Po_A&e_ \xffffn \xe91aÈÓÊ\0\08F\2\0\0\0è8\xffff\xffff\f\0XF€;\xffff\xffff"\0\0\0\32\0p\0\0\0\16\0509FFF&S\xffc8\xffffLecteur de disque\0evice\0INˆ\xffffUSBSTOR\DiskST9320325AS_________________\0USBSTOR\DiskST9320325AS_____________\0USBSTOR\DiskST932032\0USBSTOR\ST9320325AS______________\0ST9320325AS______________\0USBSTOR\GenDisk\0GenDisk\0\00005\xffd8\xffffv\r4\0àF\a\0\0016CmailIs?\xffc8\xffffUSBSTOR\Disk\0USBSTOR\RAW\0\0\xffd8\xffffv\tN\0@F\1\0\0010CasUD643¨\xffff{4D36E967-E325-11CE-BFC1-08002BE10318}\00055F\xffe0\xffffv\a\n\0ø$\1\0\1SSrie\xffd8\xffffv\v\4\xffffv\3<\0¸F\1\0\1>Mg>\b\0\xd7b8: \xffff{4D36E967-E325-11CE-BFC1-08002BE10318}\0007\0\W\xffe0\xffffv\5\24\07\1\0\1 Cast\xffd8\xffffv\v\4FinlNm #\xffc8\xffffST932032 5AS USB Device\0(L\xffc8\xffff\xaac09\xe340=:Ø>¸FF˜F¸F\xd7b8:hFàFøF06\xff98\xffffn \xe590ÓÊ\0\0¨F\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffffè>\xffff\xffff\0\0\0\0\0\0\0\0\0\0\21\0Dvc aaees\0\?¨\xffffn \xe590ÓÊ\0\0¨F\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\0\0\0\0\0\0\0\0\1\0\a\0Lgof\xffe0\xffff\x30a0F\x30c0F\x2938F\x2960F\x29a0F\x2a20Fbl\xffd8\xffffv\v\4r\0\0\xffd8\xffffv\tN\0\0\0\0\0\0\5\0Prs\37 \xffffn ¬v€Ê\0\0\xed90\b\1\0\0\0ø\31\xffff\xffff\1\089€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_\x3042B81\xffe0\xffffø=?\x1c18F?¨H@H\0e \xffffn j\x2cf0ŠÊ\0\0\xed90\b\1\0\0\00\32\xffff\xffff\1\0˜9€;\xffff\xffff\b\0\0\0\30\0\4\08\0\17\0LGC\x335f5C\x30448\b\0\0e¨\xffffn œrŒÊ\0\0€>\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xf6c0=€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0v06\xffd8\xffffv\n\22\008\1\0\0011DvcDs\0\? \xffffn ô¯ŒÊ\0\0\xed90\b\1\0\0\0¨\e\xffff\xffff\1\0(\6€;\xffff\xffff\b\0\0\0\30\0\4\0Ý\0\17\0LGC_\x3242C8B\xffd8\xffffv\f\4\xffffv\6\4\xffe0\xffff¸>˜F¸FàF F FWS\xffd8\xffffv\v\4\xffe0\xffffA\xa9c8DèFFPFÐF12 \xffffn è\xe9e7Ê\0\0\xed90\b\1\0\0\0 \32\xffff\xffff\1\0\xf1e81€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_2\x3030\x32454¨\xffffn œ\xe9ecÊ\0\0F\0\0\0\0\xffff\xffff\xffff\xffff\6\0PF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030cc\xffd8\xffffv\tN\0øF\1\0\18CasUD912¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000723\xffe0\xffffÐ8à9B09ÐFxF\0: \xffffn \xf5d4\xea98ºÊ\0\0\xed90\b\1\0\0\0H\32\xffff\xffff\1\09€;\xffff\xffff\b\0\0\0\30\0\4\0l\0\17\0LGC_AA\x3242D¨\xffffn \xf5d4\xea98ºÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\6\0€F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030cc¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0MP\\xffe0\xffff\xdc489°:\xff08:ð;à<Ð>06 \xffffn \x2214\xf0dbºÊ\0\0\xed90\b\1\0\0\0ø\32\xffff\xffff\1\0\xa708;€;\xffff\xffff\b\0\0\0\30\0\4\0>\0\17\0LGC\x335fA0CF\xfff0\xffffl\10F\x2140&¨\xffffn œrŒÊ\0\0ð>\0\0\0\0\xffff\xffff\xffff\xffff\6\0x<€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0v06 \xffffn ô¯ŒÊ\0\0\xe898\31\1\0\0\0\x1db8\31\xffff\xffff\1\0\xd9201€;\xffff\xffff\b\0\0\0\30\0\4\0Ý\0\17\0LGC_\x3242C8B¨\xffffn ô¯ŒÊ\0\0ÀF\0\0\0\0\xffff\xffff\xffff\xffff\6\0øF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030C:¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0y_s\xffd8\xffffv\n\22\0@5\1\0\0012DvcDs805\xffe0\xffff\xff10C\xff90C\x26c8F\x2a58F\x2d30FÐFro \xffffn œ\xe9ecÊ\0\0\xed90\b\1\0\0\0\xf4f8\32\xffff\xffff\1\0\xeea0\a€;\xffff\xffff\b\0\0\0\30\0\4\0s\0\17\0LGC_D7\x3043B\xffd8\xffffv\n\22\0\x2990\37\1\0\1\DvcDsNDO\xffd8\xffffv\f\4v\6\4\x3030@ \xffd8\xffffv\tN\0¸F\1\0\1$CasUD$H$\xffd8\xffffv\n\22\0È!\1\0\0017DvcDs\0\0001\xfff0\xffffl\1hF\x2140&\xffd8\xffffv\tN\0ÈF\1\0\1NCasUDTEM¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0:\W\xffd8\xffffv\n\22\0\xf8285\1\0\1\DvcDsoxy\xffe0\xffff\xf5501°5(>0< F F12 \xffffn þ\x322cŠÊ\0\0\xed90\b\1\0\0\0 \32\xffff\xffff\1\0\x27d8\6€;\xffff\xffff\b\0\0\0\30\0\4\0î\0\17\0LGC_1463\xffd8\xffffv\f\4\0\0\0\26\0N\0\0\0\4\0\x3030\x303070\xffe0\xffffv\a\22\0À1\1\0\1NSrie\xffe0\xffffv\6\4C055D-047F-11D1-A537-0000F8753ED1}\000012\xffd8\xffffv\n\22\0Ø6\1\0\1?DvcDsWIN\xffe0\xffffHFhFˆF°FðFpFro¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0E78 \xffffn \x3232w'Ê\0\0\xed90\b\1\0\0\0Ø\32\xffff\xffff\1\0Ø\a€;\xffff\xffff\b\0\0\0\30\0\4\0\x99\0\17\0LGC_4DB3\xffd8\xffffv\f\4\0`F\1\0\0012CasUD415¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000012\xffd8\xffffv\n\22\0@1\1\0\1?DvcDsWIN\xffe0\xffffXAPAðF\xd948D8F¸Fro\xffe0\xffffpdfcmnnt.dll\0 \xfff0\xffffl\1 F\x2140&\b\0\0S\xffe0\xffffv\5\32\0`H\1\0\1\31CasD\b\00\21\xffe0\xffffv\a\22\0p\37\1\0\1!Srie\xffe0\xffffv\6\4\b\0\0\0\30\0\4\08\0\17\0LGC\x335f5C\x30448¨\xffffn j\x2cf0ŠÊ\0\0øF\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xe878;€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030 ¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0:\W¨\xffffn úâðÊ\0\0 F\0\0\0\0\xffff\xffff\xffff\xffff\6\0C€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030da¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0sta\xfff0\xffffl\1¨F\x2140& \xffffn þ\x322cŠÊ\0\0\xe898\31\1\0\0\0 \e\xffff\xffff\1\0\xf640\31€;\xffff\xffff\b\0\0\0\30\0\4\0î\0\17\0LGC_1463¨\xffffn þ\x322cŠÊ\0\0ÈF\0\0\0\0\xffff\xffff\xffff\xffff\6\0\x560>€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303070¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000012\xffd8\xffffv\tN\0000F8753ED1}\0:\W\xffd8\xffffv\n\22\0°$\1\0\1\DvcDsoxy\xffe8\xffff30fad6a6\0v\xffd8\xffffv\f\4\0\1oCass\b\0r\0\xffe0\xffff\xf1281h;À<@?8D\xd7d8D\x24508\b\0P\21\xffd8\xffffv\tN\0F\1\0\1NCasUDTEM\b\0\xe020G¨\xffffn œE'Ê\0\0537-0000F8753ED1}\0E78 \xffffn \x3232w'Ê\0\0\xe898\31\1\0\0\00\30\xffff\xffff\1\0P\a€;\xffff\xffff\b\0\0\0\30\0\4\0\x99\0\17\0LGC_4DB3¨\xffffn \x3232w'Ê\0\0hF\0\0\0\0\xffff\xffff\xffff\xffff\6\0øF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303086\xfff0\xffffl\1\xe378E\xe2d0\xe465¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000012 \xffffn Öp(Ê\0\0\xed90\b\1\0\0\08\36\xffff\xffff\1\0¨<€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_6A87¨\xffffn \x1930s(Ê\0\0ˆF\0\0\0\0\xffff\xffff\xffff\xffff\6\0(F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030_s\xffe0\xffffv\5\32\0`F\1\0\0012Cas2\xffe0\xffffLegacyDriver\0N\xffd8\xffffv\tN\0¨F\1\0\1tCasUDy_s¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\ht\xffd8\xffffv\n\22\0<\x30e0FˆF@F€F\xffffv\n\22\0€5\1\0\1\DvcDsoxy \xffffn è\xe9e7Ê\0\0\xe898\31\1\0\0\0\xab60\32\xffff\xffff\1\0\xeff8\a€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_2\x3030\x32454\xffd8\xffffv\f\4\xffff\6\0¸F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030cc\xffe0\xffffv\a\22\0°3\1\0\1\0Srie\xffe0\xffffv\6\4\tN\08F\1\0\18CasUD912¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000723\xffd8\xffffv\n\22\09\1\0\1\DvcDsNDO\xffe0\xffffhFˆF¨FÐFFFro \xffffn r\xf3fdÆÊ\0\0\xed90\b\1\0\0\0¸\31\xffff\xffff\1\0\x2980\b€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_BC0C¨\xffffn r\xf3fdÆÊ\0\0ØF\0\0\0\0\xffff\xffff\xffff\xffff\6\0ˆH€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030ou\xffe0\xffffv\a\22\0 6\1\0\1sSrie\xffe0\xffffv\6\4\0\0\0\0 \xffffs?F`I\2\0D\0\1(\08\0\0\0\24\0\2\f\0\0\30?\17\0\0\x500 \0\x220\0\xa00\24?\37\0\0\x300\0\0\0\0\x500 \0#\0\xffffLegacyDriver\0\0\xffd8\xffffv\tN\0F\1\0\18CasUD5D-¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0pro\xffd8\xffffv\n\26\0F\1\0\0014DvcDs261\xffe0\xffffPROCEXP113\0:\W\xffe0\xffffFXF€F¨FèFhFtp\xffe0\xffffv\5\32\0ðF\1\0\18Cas1\xffe0\xffffLegacyDriver\0?\xffd8\xffffv\tN\08F\1\0\1SCasUD\ht¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0OWS\xffd8\xffffv\n\b\0 F\1\0\1oDvcDsv07\xffe0\xffff¸FØFøFÐFFF75Ð\xffffs?ð<F\b\0\0\1ü\0\0\0\0\24\0\2è\n\0\0\0\0\x500\22\0¸\xffffs1ØF\0\4\00\0\1\0$\0\0\0\24\0\2\0\x1a00\30\0tions quand ces informations changent.\0sf8\0\x32a8 0 p ð 8 Ø \x31f8 P $\x31d8 p ÐFèl0\0v\v\x98\0øF\1\0\1\0Dsrpin\0\0\b\0d\0\xffe8\xffffda1190bb\0\0\xffe8\xffffb114c44a\0\0\xffe0\xffffv\a\22\07\1\0\1!Srie\xfff8\xffff¸F\xffd8\xffffv\f\4\1tCnr\x206cTp_s\xffe0\xffffv\a\22\0À?\1\0\1}Srie\xffe0\xffffv\6\4êté, ces fonctions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.\0\0P\0Bouton de fonctionnalité définie ACPI\0¨\xffffn \xaad8læÊ\0\0À?\0\0\0\0\xffff\xffff\xffff\xffff\6\0˜F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030F\30\0\x27288\x29288\x24508\b\0P\21\xffd8\xffffv\v\4zæÊ\0\0\xed90\b\1\0\0\0F\xffff\xffff\1\0(F€;\xffff\xffff\b\0\0\0\30\0\4\0'\0\17\0LGC_\x3237987\xffd8\xffffv\f\4\xffffv\v\48\x22d88\x27288\x29288\x24508\x24a88P\21\xffd8\xffffv\v\4\xd9d8\31p5\31p?F \xffffn \xf8f4zæÊ\0\0\xe898\31\1\0\0\08F\xffff\xffff\1\0Ø:€;\xffff\xffff\b\0\0\0\30\0\4\0'\0\17\0LGC_\x3237987¨\xffffn \xf8f4zæÊ\0\0àF\0\0\0\0\xffff\xffff\xffff\xffff\6\0èF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303075\xffe0\xffffv\a\22\0\x9d8 \1\0\1vSrie\xffe0\xffffv\6\4\xffffv\n\22\0;\1\0\0010DvcDs476\xffe0\xffff˜F¸FØF\37 $Ð9h\37\x1db0F\x2248\34\xffe0\xffffv\4\4;\xa790;ð<\xf860=?ce\xffe8\xffffcba24068\0t\xffe8\xffff0bd85afb\0<\xffe0\xffffv\6\40\0\32\e\x1bf0\36\xfe08\36 \36 \37p\376Ø\37F\0\0\xffe0\xffffLegacyDriver\0i\xffe8\xffffDriver\0$\xa9c0:8\0\32\xf98\eÈ\36(\36P\36\36ð \x1390 \x1dd8 8 H 8F\0c\xffe0\xffff\x0e60F\x1df8F8FF`FàF\0\0\xffd8\xffffv\f\4\xffffX:È;\x2388;\x2bb8<ØFPFp\27(\0v\v:\0ÐF\1\0\1\0Dsrpin\0\0\xffe8\xffffacabbe45\0  \xffffn $\xfada#Ê\0\0@\26\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xe698;\x2088"\xffff\xffff\0\0\0\0\0\0\20\0\21\0\16\0PVytmtr8 \xffffn Ê\xfad7#Ê\0\0@\26\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xffff\1\0ˆF\x2088"\xffff\xffff\0\0\0\0\0\0\16\0+\0\r\0poep\x2e30Ss8@\0Planificateur de paquets QoS\0\0\xfff0\xffffl\1àF\x2140&\xffe0\xffffv\4J\0\xf528F\1\0\1:FlIN\xffe8\xffff29dff27d\0K \xffffC:\Program Files\Java\jre6\lib\ext\QTJava.zip\0\b\0\0\0 \xffffn þøoÊ\0\0\xe898\31\1\0\0\0àF\xffff\xffff\1\0¨6€;\xffff\xffff\b\0\0\0\30\0\4\0>\0\17\0LGC_4AA8¨\xffffn þøoÊ\0\0ÀF\0\0\0\0\xffff\xffff\xffff\xffff\6\0F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030??\xffd8\xffffv\v\4\xffffv\5\32\0ÀF\1\0\1\34Ca\x2e73<\xffe0\xffffLegacyDriver\0C\xffd8\xffffv\tN\0F\1\0\1\0CasUDC:\¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\00057\0\b\0I\0\xffe0\xffffv\5\32\00F\1\0\1vCas\0 \xffffn Ê\xfad7#Ê\0\0\0"\xffff\xffff\0\0\0\0\0\0\20\0\21\0\16\0PVytmtr8 \xffffn $\xfada#Ê\0\0P\5\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xf758;\x2088"\xffff\xffff\0\0\0\0\0\0\20\0&\0\16\0PVytmtrs\x320\0Coordonne les transactions qui comportent plusieurs gestionnaires de ressources, tels que des bases de données, des files d'attente de messages net des systèmes de fichiers. Si ce service est arrêté, ces transactions ne se produiront pas. S'il est désactivé, le démarrage de tout service qui en dépend explicitement échouera. \0\0\0\0000\0h\36 pilotes de gestion de sécurité IP et ISAKMP/Oakley (IKE).\0\0rie\xa8\0\x1a00\e°\e\36\xff10\368\36Ø\36\x3218 Ð ˆF¨Fp (\0v\v6\0˜F\1\0\1\0Dsrpin\0\0P\0x\34\xa4a8\36\xf3c0\36\xf890\37\xee30 \xf3e8\36 !\xe368$(!<(! \0MBAMSwissArmy\0\xffe8\xffff06defd87\0\0\xffe0\xffffv\6\4I\xffe8\xffff4a0bd737\08\xffe8\xfffff1bbe1bb\0\32\xffe0\xffffv\a\22\0\xa680F\1\0\1\0Srie8\0p ¨ H ` ˆ ¸ ° @ es\b\0\0c\xffd8\xffffv\nl\0F\a\0\1BHrwrI424ø\0p\32\xe348\36à À ° \x2d18\36P è h 8 ¨ ø p 0 @:\xb8\08\31\xe888\36˜\31Ø\32€\37ø\37x \37\31¸ Ø ( ¨ \32\xfe48\36h\37\x860 \26¨\26 \26\xf270\26¨\26\xf0a0\26\xf0d8\26\xf110\26\xf140\26À#Ð\26è#\26\x21b03\x21e03¸\21\b\0ø9 \xffffn \xaad8læÊ\0\0\xed90\b\1\0\0\0\xa938F\xffff\xffff\1\0\xde48F€;\xffff\xffff\b\0\0\0\30\0\4\0\x8d\0\17\0LGC_\x33439A1¨\xffffn \xaad8læÊ\0\0@F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xddb8E€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030F\20\0\x2465!\b\0\0\0\xffd8\xffffv\f\4 du protocole TCP/IP\0\0\0\0\30\0ˆ ¸ ° @ 53\xffd8\xffffv\tN\0¸N\1\0\1mCasUDbeaP\0Pilote de liaison parallèle directe\0\0\0\xffe0\xffffv\4P\0\xf6f8F\1\0\1 Flng\xffe0\xffffv\5\32\0€K\1\0\1MCast\b\0\0\0\xffe0\xffffH:\x2bd8<\x2bf8<\xea98= F€F\0\0\0NT AUTHORITY\LocalService\0x\0Fournit la configuration automatique des cartes 802.11\0s_mX\0Assure la communication efficace entre les composants BitDefender\0Ð\08\31\x9e8\320\e\x1b68\e\xf1e8\e x $˜  Fp \xa0\0v\eþ\1F\a\0\1!Pnigieeaeprtos!\20\0!p$0FX\0Windows de créer, modifier et accéder à des fichiers Internet. Si ce service est arrêté, Ces fonctions ne seront pas disponibles. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.\0\0(\0v\v\x2d4\0°F\1\0\1\0Dsrpin\0\0(\0v\r\2OjcNmI\x2d16¾0\0Pilote de port série\0\0\xffe0\xffffv\5\32\0F\1\0\1aCas\0\xffe0\xffffv\6\4s applications et des services. Si ce service est arrêté, la plupart des logiciels sur base Windows ne fonctionneront pas correctement. Si ce service est désactivé, tout service qui en dépend explicitement ne démarrera pas.\0000\0à\36\x1940!\x19c8!h5\x1b20!XFD-0\0\xa558\37\1\0\1\0OjcNm\0\0\0`\0%SystemRoot%\System32\svchost -k DComLaunch\0\0\0\xffe0\xffffLegacyDriver\0\0\xffe0\xffffv\6\4\xffffv\5\32\0XF\1\0\1}Cas1\xffe0\xffffv\6\4el\xffd8\xffffv\tN\0àN\1\0\1 CasUD\e€\e\xffe0\xffff\x2db88P8\xe920:ˆFÈF8N\0\0\xffd8\xffffv\n4\0PI\1\0\1-DvcDs11C\20\0\1\tDie\t\xffe0\xffffv\6\4!\x25e8!\x1920!\x1cb0!\x1b48!FèF \xa8\0¸\e8\36°\37è !X!0!ˆ!è!ˆ!!8!!p$Ð h\0n \xff94\x2c39øÊ\0\0`\n\0\0\0\0\xffff\xffff\xffff\xffff\6\0¸\17\xffff\xffff\xffff\xffff\0\0\0\0\30\0d\0n\0\r\0MASisryp\b\0rs\xffe0\xffffv\5\b\0P\32\1\0\1?Cas:¨\xffffn 2$Ê\0\0x\n\0\0\0\0\xffff\xffff\xffff\xffff\3\0¸\32\x2088"\xffff\xffff\0\0\0\0\30\0.\0\0\0\4\0Eu89\xffc8\xffffRoot\LEGACY_CISVC\0000\0pro¸\xffff%systemroot%\system32\imapi.exe\0IN¨\xffffn ž¬øÊ\0\0`\n\0\0\1\0\xffff\xffff\x1bf8\b\0\0\0\30\0d\0#\0\a\0cthe\xffd8\xffffv\td\0\0\0\16\0LGC_ACM_\xffd8\xffffv\f\4\0\0\4\0\1\0CniFasrt\xffe0\xffffv\5\32\0ðF\1\0\1:Cast\xffe0\xffffLegacyDriver\0\0\xffd8\xffffv\tN\08F\1\0\1`CasUD\2\0¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\x500\22\0\xffd8\xffffv\n\20\0èF\1\0\1\nDvcDs\0\1:\xffe0\xffffv\3\30\0F\1\0\1MMght \xffffn V$Ê\0\0\xed90\b\1\0\0\0è\17\xffff\xffff\1\0F€;\xffff\xffff\b\0\0\0\30\0\4\0Œ\0\n\0LGC_BT\25\0\xffd8\xffffv\f\4\1\0\xffe0\xffffv\a\b\0\xdff0\32\1\0\1?Srie\xffe0\xffffv\6\4v\f\4PF\1\0\0?¸\xffffsW°O F\4\0,\0\1\0 \0\0\0\24\0\2ü\v\0\0\0\x500 \0#\0\x1a00\30\0\xffff\1\0!€;\xffff\xffff\b\0\0\0\30\0\4\0k\0\17\0LGC_B900¨\xffffn \x1d9aæÊ\0\0 F\0\0\0\0\xffff\xffff\xffff\xffff\6\0è=€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303008\xfff0\xffffl\1€F\x2140&\xffd8\xffffv\v\4N\08F\1\0\1tCasUDycc¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0MP\\xffd8\xffffv\n\22\0¸F\1\0\1tDvcDs242\xffe8\xfffffb19e080\0006 \xffffn \xe24eêÊ\0\0\xed90\b\1\0\0\0¸F\xffff\xffff\1\0XF€;\xffff\xffff\b\0\0\0\30\0\4\0005\0\17\0LGC\x325f39\x3241F\xffd8\xffffv\f\4\4\0\18CniFas31\xffe0\xffffv\5\32\00F\1\0\1WCasO\xffe0\xffffLegacyDriver\0y\xffd8\xffffv\tN\0xF\1\0\0010CasUD182¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0807H\xffffG:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike\hl.exe:*:Enabled:Half-Life Launcher\0\0?\20\0l\0\xdf28F\xe2d0\xe465 \xffffn \xbe8~$Ê\0\0\xe898\31\1\0\0\0\xa518F\xffff\xffff\1\0À$€;\xffff\xffff\b\0\0\0\30\0\4\0\0\16\0LGC_ACM_\xffe0\xffffLegacyDriver\0!\xfff0\xffffl\1F\x2140&\xffe8\xffffcatchme\0\x20208 \0Recueille et stocke les informations de configuration et d'emplacement réseau, et notifie les applications quand ces informations changent.\0sf\xffe0\xffffv\5\32\0DD-812A-11D0-BEC7-08002BE2092F}\000190 \xffffF:\Alien Arena 2008\crx.exe:*:Disabled:crx\0sta \xffff{71A27CDD-812A-11D0-BEC7-08002BE2092F}\0002\0_tØ\0\1\x90\0\x9c\0\24\0000\0\2\34\1\0\24ÿ\17\0\0 \0\x220\0\0\24\2\0\0\x500\v\0\0\30ý\2\0\0\x500 \0#\0\0\0\x500\22\0\0\0\x500\22\0 I(\0v\f\4\0011Cas1\x220\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\0.\0\0P\xffffC:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3\0s\\x98\0%SystemRoot%\System32\svchost -k DComLaunch\0\0\08\0NT AUTHORITY\LocalService\0\xff60\xffffG:\Ordi-Jeux\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update\000354h\0n :\x2c37øÊ\0\0\xed90\b\0\0\0\0\xffff\xffff\xffff\xffff\1\0(F\xffff\xffff\xffff\xffff\0\0\0\0\30\0\4\0ED\24\0LGC_BMWSAMmp\xffe0\xffffv\a\22\0ØF\1\0\1tSrie\xfff8\xffffÀF\xffc0\xffffWD 1600BEVExternal USB Device\0\xffc8\xffff5@5 \e86È6 8à1h8\xee80 @1x3(8)\0X\0Pilote du Gestionnaire de volume\0\0\20\0l\0(F\x2140&\xfff8\xffffF\xffe0\xffffà5h= I\x618>ÈH\x1800Ish\xfff8\xffffxF0\0v\v\34\0èF\1\0\1\35Dslyae˜\36\b\0\xa880F\xfff8\xffff°F\xffe8\xffff8c195ac5\0N°\xffffv1\xa2\0F\1\0\1rC\rga ie\kp\lg\x206eMngrsye\x2e4dee le8\005(5Ø53x:\xe478:< 5¨55ˆ5\x1778=ð?\xffe8\xffffacabbe45\0002\xffe8\xffff4395f82c\0\0X\xffffC:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager\0o°\xffffv8\x8e\0hF\1\0\18G\ta\taAp\en4\one-ti\x2065suc\\x326c.x\xffe0\xffffLegacyDriver\0\0\xffc0\xffff(Lecteurs de disque standard)\0\xffe0\xffffLegacyDriver\0p\b\0˜F\xffe0\xffffv\6\4oxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\0\0v\t \0\x5b8G\2\0\1\0Iaeah\0\0\0\xffc0\xffffv!r\08F\1\0\1;C\ol \x2066Wrrf\anh\x2e72eeKpI0\0MBAMSwissArmy\0\20\0d\aF\0\0\xffe8\xffff93752439\0I\xffe8\xffffed503741\0\0\xffe0\xffffv\6\4\0\0X\xffffC:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Disabled:Windows Live Call\0\0\0¸\xffffv/\x8e\0¨F\1\0\18C\rga ie\ei2Fac\ei2le\x2e74bn\xffe0\xffffLegacyDriver\0:\xffd8\xffffv\tN\0€K\1\0\1tCasUDe\0\0à\0NT AUTHORITY\LocalService\0(\0v\vÐ\0\xe330F\1\0\1\0Dsrpin\0\0000\0x\34˜\34¸\34à\34\xda18\35ø\35ø\350F¸F0\0v\6\4\xffffLegacyDriver\0?\xffd8\xffffv\tN\0hF\1\0\1SCasUD\ht¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0OWS\xffd8\xffffv\n\b\0H\32\1\0\1oDvcDsv07\xffe0\xffff\x28308\xdbd0FØFWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\0l\30\0\0t\20\0 E\x2020G\xe020F\xffe0\xffffv\5\32\0H\1\0\0012CasS\xffc8\xffffv\e\4rie\xfff0\xffffl\1 F\x2140&Ð\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\0 \0s démarrer.\0\0\0°\xffffv2\xa2\0\x5f8G\1\0\1<C\ol \x2066Wrrf\o\x332d\x322e\x302e-r\x2d52dwlae.x=\xf7b8@\xffe0\xffffLegacyDriver\0B\xffe0\xffff\xec68E\xec88E\xeca8E\xecd0ExHøH°F\xffd0\xffffv\23H\0\xfd48F\1\0\1oLctoIfraint)\xffd8\xffffv\n\22\0F\1\0\1pDvcDs410\xff68\xffffC:\Program Files\Metin2_France\metin2client.bin:*:Enabled:metin2client\0\0\0?\x348\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\0 À\0 ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.\0\0\20\0pas.\0\0\xff10\xffffn \x30323#b056-e\x2d39\x30344-c\x2d31151f85}\0\0¨\xffffn øÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\a\0ÈF\xffff\xffff\xffff\xffff\0\0\0\0\26\0X\0as\4\0\x3030\x3030!\b\0!\xff88\xffffC:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype \0:E\30\00;8F˜8\b\0\0\0\xffe0\xffffApple, Inc.\0DB\xff88\xffffC:\World of Warcraft\Launcher.exe:*:Enabled:Launcher.exe\0\0x\0n R:øÊ
                1. bean147
                  R:øÊ\0\0`\n\0\0\0\0\xffff\xffff\xffff\xffff\b\0@\17\xffff\xffff\xffff\xffff\0\0\0\0\30\0<\0O\0\5\0fhj2 \000772062\0\0\0\0\b\0_m\xffd8\xffffv\20\4exe:*:Enabled:Steam 732897\0\xffe0\xffffv\5\32\0ØH\1\0\1<Cas\0\xffe0\xffffv\5\32\0ÀK\1\0\0011Cas1\xffe8\xffffcatchme\0(\30\xffe0\xffffv\6\4xE\xffe0\xffffLegacyDriver\0006\xffe0\xffffÀ9F\xddd8F\xd8a8FèFhFh 8\0E0FPFÀF°F˜Fè\17\30\0érie\0\0\b\0\0\0\xffe0\xffffLegacyDriver\08\xffe0\xffffv\6\4\0\b\0_t\xffc8\xffffÈ3Ð3P3à3à33¸3è3 3X3ˆ3ð6ta\xffc0\xffffv&p\0ˆF\1\0\1@C\rga ie\kp\hn\kp.x40\0v\v\4\4\0\1cNxIsacv\f\xfff0\xffffl\1K\xe918H\xfff8\xffff8F¨\xffffn ž¬øÊ\0\0\xa498F\1\0\0\0@\e\xffff\xffff\b\0H?€;\xffff\xffff\16\0\0\0\30\0X\0\0\0\4\0\x3030\x3030/R\xa8\0v\n\30\0\xff60\36\1\0\1\0OjcNm\0\0\0\x80\0Service de transfert intelligent en arrière-plan\0\0\30\0ère-plan\0\0\xffe0\xffffv\6\4sieurs gestionnaires de ressources, tels que des bases de données, des files d'attente de messages net des systèmes de fichiers. Si ce service est arrêté, ces transactions ne se produiront pas. S'il est désactivé, le démarrage de tout service qui en dépend explicitement échouera. \0\0\0\0 \xffffC:\Program Files\DNA\btdna.exe:*:Enabled:DNA\0\0\xffd8\xffffv\n\22\0\xf1a0>\1\0\1\27DvcDs\27Ø1\20\0rtos!\xff88\xffffn \x2428ß&Ê\0\0ø\23\2\0\0\0xE\xffff\xffff\0\0\xffff\xffff\0\xffff\xffff6\0\0\0\0\0\0\0*\0&\0{d21\x2d37d1-a\x2d369b\x312d1\x3235\x3332656o\20\0000\0\0s˜F\xffd8\xffffv\n\22\007\1\0\1\DvcDsNDO8\0 O E\xe020N\x2020G G D\x2020D\30\0ea\20\0rtos!\xffe0\xffffLegacyDriver\0\0\xffd8\xffffv\tN\0\x6f8G\1\0\1NCasUDTEM\30\0\x19c83\20\0H\30\b\0\x21b03\xffe0\xffffv\6\4\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x30301}\xffe0\xffffPROCEXP113\0Sys\xffe0\xffffv\6\4D-¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0pro\xffd8\xffffv\n\26\0€F\1\0\0014DvcDs261\xffe0\xffffPROCEXP113\0:\W\xffe0\xffff8$PFpF˜FØFXFp\0310\0v\5\32\0\xf8e8F\1\0\1!Ca\x1973!\20\0\x1b20!`F\x32c8 \xfff0\xffffBase\0\xe465\xffe0\xffffLegacyDriver\0\0\xffe0\xffffv\5\32\0F\1\0\1\tCas\t\xffd8\xffffv\v\4\xef70\30\xffff\xffff\1\0p5€;\xffff\xffff\b\0\0\0\30\0\4\0005\0\17\0LGC\x325f39\x3241F¨\xffffn \xe24eêÊ\0\0acyDriver\0y\xffd8\xffffv\tN\0 F\1\0\0010CasUD182¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0807\xffe0\xffffv\6\4:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager\0\0 \xffffn žýáÊ\0\0\xed90\b\1\0\0\0G\xffff\xffff\1\0c\0\xffd8\xffffv\f\4\0\1\DvcDsoxy\30\0è\30 \30 \300\30ts\xffd8\xffffv\v\4\xffff\xffff\16\0\0\0\30\0\xac\0\0\0\a\0#\x3042\x30300\xffe0\xffffv\5\32\0ˆF\1\0\1sCasA\30\0\xe7f8\30 #\xe9a8\30\b\0\xdb68\30\xffe0\xffffv\a\22\0Ð5\1\0\1 Srie\xffe0\xffffH!HF\x2848H\xa660F¸H˜Hr\0\xffe0\xffffv\6\4&\xff90\xffffCompatibilité avec le Changement rapide d'utilisateur\0 \xffffn @ãÊ\0\0\xe898\31\1\0\0\0\xd9d0\32\xffff\xffff\1\0\xf350\n€;\xffff\xffff\b\0\0\0\30\0\4\0i\0\17\0LGC_B900\xffd8\xffffv\f\4F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xdbb0F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303008\xffd8\xffffv\v\4ECC055D-047F-11D1-A537-0000F8753ED1}\0MP\\xffd8\xffffv\n\22\0à;\1\0\1tDvcDs242\xffe0\xffff\xa6509xF\xdaa0F\xdac8F\xdb08F\xdb88FD2\xffe0\xffffv\6\4v\v\4\4\0\1NCniFasEM\xffd8\xffffv\n\26\0PF\1\0\1NDvcDsspM\xffe0\xffffLegacyDriver\0005\xfff8\xffff@F\xffe0\xffff°:0FøHÀF\x2fd0I\x3068I\0\0¨\xffffn V$Ê\0\0xF\0\0\0\0\xffff\xffff\xffff\xffff\6\0èF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030\1\0 \xffffvAò\0ˆH\1\0\0013G\ta\taAp\omncl \x2066dt oe\x206ewra\x20652i4\x2e70eetmpX\0n \xe676TèÊ\0\0 F\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xe9f0E\xffff\xffff\xffff\xffff\0\0\0\0\20\0\xa8\0ED\b\0Scrt\xffe0\xffffv\5\32\0ÐG\1\0\1\0Casm\xffe0\xffffv\a\22\03\1\0\1\37Srie\xffe0\xffff\xf0601\x2140;ÈB\x22f8;èH\xf3b8Hn\0\xffe0\xffffv\6\4\xe3e0\32à\32˜\32À\32 ;¨B`D\xe0a0F\0\0000\0\xf558\t\xdec0\32\xdba8\32\xe650\32\xe020\32\xe040\32\xdf10:\xe3d8:@DðDA-0\0v\24\4\xffff¸\32h5À\ep5@5à606\xa80855¸5x5h66 \xffff{4D36E979-E325-11CE-BFC1-08002BE10318}\0000\00013¨\xffffn ¨ŠÊ\0\0\34\0\0\0\0\xffff\xffff\xffff\xffff\2\0¨\32\0\xffff\xffff\0\0\0\0 \0<\0F\0\5\0XieD\xffc0\xffffC:\WINDOWS\system32\xlive.dll\0\x5b8\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A790101264779556\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A790101264779556\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264779556\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264779556\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A5C0001264779561\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06ABF0101264779560\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AF70181264779561\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A5D0781264779564\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B1D0101264779568\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B6A0101264779572\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A670081264779576\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A6B0081264779580\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A6E0081264779584\0\0\0\X\0tproxycc_tmp08E481601264604209\0\0\0c\20\0ion\0\0o\xff98\xffffn âLúÊ\0\0\34\0\0\0\0\xffff\xffff\xffff\xffff\2\0˜\32\0\xffff\xffff\0\0\0\0 \0T\0\27\0\23\0Mcoo\x2074Ofc 212\xffd8\xffffv\20T\0\xede8F\1\0\1uEetesgFl\20\0 O E\xe020N \xffffn Z&jÊ\0\0\xe898\31\1\0\0\0\x1060G\xffff\xffff\1\0Ø=€;\xffff\xffff\b\0\0\0\30\0\4\0\xa5\0\17\0LGC_1E54¨\xffffn Z&jÊ\0\0\xe950F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xeab0F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030WS\xffd8\xffffv\tN\0\xea30F\1\0\1:CasUDOWS¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\C:\xffd8\xffffv\n\22\0Ø<\1\0\1MDvcDspro\xffe0\xffff8E0EPEðE\xea08F\xea88F25À\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0007\00038`\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0008\00007\xffd8\xffffWindows Installer\0\b\0\xeec0F \xffffn \xef22jÊ\0\0\xe898\31\1\0\0\0@G\xffff\xffff\1\0˜=€;\xffff\xffff\b\0\0\0\30\0\4\0\xf7\0\17\0LGC_9\x33379C¨\xffffn \xef22jÊ\0\0\xebc0F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xedc8F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030WS\xffe0\xffffv\a\22\0H\36\1\0\1\0Srie\xffe0\xffffv\6\4\xffffv\n\22\0¨B\1\0\19DvcDs012\xffe0\xffff\xec78F\xec98F\xecb8F\xece0F\xed20F\xeda0FP\¨\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\DW\DW20.EXE\0\xffd8\xffffv\16\4\0\0\0\0&\0`\0\31\0\a\0MDie\xffd8\xffffv\20`\0\xeee8F\1\0\1\0EetesgFl\xff98\xffffC:\PROGRA~1\FICHIE~1\SYSTEM\OLEDB~1\MSDMINE.DLL\0at\xffd0\xffffv\23`\0\xef80F\1\0\1nCtgrMsaeient\xff98\xffffC:\PROGRA~1\FICHIE~1\SYSTEM\OLEDB~1\MSDMINE.DLL\0ol\xffd8\xffffv\16\4v\20\x92\0\xf108F\1\0\1lEetesgFl\xff68\xffffC:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSSOAP30.DLL\0S\xffd0\xffffv\23\x92\0\xf1d0F\1\0\1iCtgrMsaeieAF\xff68\xffffC:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSSOAP30.DLL\0\0¨\xffffn ÂùÊ\0\0\34\0\0\0\0\xffff\xffff\xffff\xffff\3\0€\32\0\xffff\xffff\0\0\0\0 \0Z\0$\0\a\0Otok\xffd8\xffffv\20Z\0\xf2e8F\1\0\1\2EetesgFl \xffffC:\PROGRA~1\MICROS~4\Office12\1036\MAPIR.DLL\0S\xffd8\xffffv\16\4 ˆIúÊ\0\0X\34\1\0\0\0¸ \xffff\xffff\a\0\x0f10F\0\xffff\xffff>\0\0\0\36\0d\0\1\0\5\0Oig\0\xffd8\xffffv\17d\0\xf3f0F\1\0\1\xdfeeDslyaeie\xff98\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\OFFREL.DLL\0\xffd8\xffffv\r\4oft Office 12 Diagnostics\0ODiag\0\0ttp\xffd8\xffffv\r\f\0\34\1\0\1?PiayoueN\xffd8\xffffv\t\4\0 \0d\0\0\0\37\0Mcoo\x2074Ofc \x2032Dansis\xffd8\xffffv\20d\0\xf610F\1\0\1tEetesgFl\xff98\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\OFFREL.DLL\0\xffd8\xffffv\16\4\xffff8\0\0\0\36\0d\0\2\0\b\0Oeso¨\xffffC:\WINDOWS\system32\config\OSession.evt\0xy¨\xffffMicrosoft Office 12 Sessions\0OSession\0\000012\xffd8\xffffv\17d\0\xf7d0F\1\0\1BDslyaeie\xff98\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\OFFREL.DLL\0\xffd8\xffffv\r\4281&Rev_0000\0USB\Vid_05ac&Pid_1281\0\08\xffffUSB\DevClass_00&SubClass_00&Prot_00\0USB\DevClass_00&SubClass_00\0USB\DevClass_00\0USB\COMPOSITE\0\0:\W\xffd8\xffffv\tN\0\xfa78F\1\0\19CasUD812¨\xffff{36FC9E60-C465-11CF-8056-444553540000}\0v09\xffd8\xffffv\v\4E\x1960F\xfad0F\xffd8\xffffv\f\x9c\0XF\1\0\19SmoiNm12\xff60\xffff\??\USB#Vid_05ac&Pid_1281#5&f7be307&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed}°\xffffApple Recovery (iBoot) USB Driver\0)\0WS°\xffffApple Mobile Device (Recovery Mode)\0\0\0\xffd8\xffffv\f\4B\DevClass_00\0USB\COMPOSITE\0\0MP\\xffd8\xffffv\tN\0\xff70F\1\0\1tCasUD8\0\0¨\xffff{36FC9E60-C465-11CF-8056-444553540000}\0812\xffe0\xffffv\a\20\0\32\1\0\0012Srie\b\0 F \xffff{36FC9E60-C465-11CF-8056-444553540000}\0024\0\0f\xffd8\xffffv\f>\0xG\1\0\0010FinlNm24¸\xffffApple Mobile Device USB Driver\0y_s\xffd8\xffffv\v\4Pid_1281#CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]#{a5dcbf10-6530-11d2-901f-00c04fb951ed}TEM\0Apple Mobile Device USB Driver\0\0v\b\x98\0\xdb80\32Ð6È6ˆ1è6Ð686Ø5 5È68644553540000}\0012\0\xf62070\0Ð\34Ø\34\34P\34`\34\35è1BÀ$ÐB\?\xffd8\xffffQUENTIN-5B4E2F4\0005\0\xffd0\xffffÈ\34ð\34Ð\34ø\34`\34ˆ\34Ð\34AACF0636A2C042EB7AD2AFF76D37B27BDD28C\0GEARAspiWD_F475AF659D36685632E9BD97B57E9D9661FF3FFD\0\0\0x\0\??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys\0\20\0sys\0\0\0X\xffffC:\World of Warcraft\WoW-3.2.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader\0y°\xffffv6\xb4\0\x750G\1\0\1xC\rga ie\irsf fieOfc\x3231\ULO.X?\b\0 G¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0:\WH\xffffC:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook\0 \xffffvB\xac\0\x868G\1\0\1MC\rga ie\oie\x2068Tu\x2068Mu\x2065Sre\Tu\x2d68Sre-i.x\0\?P\xffffC:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe:*:Enabled:Logitech\0¨\xffffn žýáÊ\0\0°F\0\0\0\0\xffff\xffff\xffff\xffff\6\0€H€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012\xffe0\xffffv\5\32\0G\1\0\1$Cas$\xffe0\xffffLegacyDriver\0$\30\0Cardex\08€8\xff20\xffffG:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2\00050A\xff90\xffffC:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes\0Fi\xfff0\xffffl\1G\x2140&0\0Traducteur d'adresses réseau IP\0\0\0`\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0010\00038P\0BitDefender Desktop Update Service\0\0\0\08\0Assistance TCP/IP NetBIOS\0¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\0\0\0x\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\0 \31 \0MBAMSwissArmy\0è\xffff%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\\0\0\? \xffffsp°;8;\2\0H\0\1,\0<\0\0\0\24\0\2\t\0?\17\0\0\x500 \0\x220\0del_107\_1\0ACPI\FixedButton\2&daba3f\0\0\x500 \0\x220\0\0\0\x500\22\0 \xffffn \xef22jÊ\0\0\xed90\b\1\0\0\0\xa9b0\e\xffff\xffff\1\0ð<€;\xffff\xffff\b\0\0\0\30\0\4\0\xf7\0\17\0LGC_9\x33379C \xffffn Ö\xf115Ê\0\0\xe898\31\1\0\0\0€\32\xffff\xffff\1\0\x0f30F€;\xffff\xffff\b\0\0\0\30\0\4\0b\0\17\0LGC_80B1\xfff0\xffffl\1\xe9b0F\x2140&\b\0\xec78F¨\xffffn \xef22jÊ\0\0 G\0\0\0\0\xffff\xffff\xffff\xffff\6\0pG€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030WS\xffe0\xffffLegacyDriver\0s¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\ht\xffd8\xffffv\n\22\0\x33a0 \1\0\19DvcDs012\xffe0\xffff8?àFF\xdf80F@FHGC: \xffffn Z&jÊ\0\0\xed90\b\1\0\0\0\xd7b8\e\xffff\xffff\1\0X\17€;\xffff\xffff\b\0\0\0\30\0\4\0\xa5\0\17\0LGC_1E54\xffd8\xffffv\f\4WS\xffe0\xffffv\5\32\0øG\1\0\1oCass\xffe0\xffffLegacyDriver\0005\xffd8\xffffv\tN\0@G\1\0\1:CasUDOWS¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\C:\xffd8\xffffv\n\22\0\x2218!\1\0\1MDvcDspro\xffe0\xffffpGG°GØGG\x1398G12¨\xffffn Ö\xf115Ê\0\0\0\0\xffff\xffff\xffff\xffff\6\0¨F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030EM\b\0\x2020D\xfff0\xffffl\1\xec20F\x2140&¨\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0proX\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\0\0\0X\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0vco@\0NVIDIA Display Driver Service\0`\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0022\0tp\xffe0\xffffv\aN\0\xf750F\a\0\1nSucs\xff18\xffffUSB\Vid_05ac&Pid_1281\CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]\0002¸\xffff\\?\USB#Vid_05ac&Pid_1281#CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]#{b8085869-feb9-404b-8cb1-1e5c14fa8c54}\0000\0\P\xffff\\?\USB#Vid_05ac&Pid_1281#5&f7be307&0&5#{ed82a167-d61a-4af6-9ab6-11e52236c576}\IB0000\0\xff18\xffffUSB\Vid_05ac&Pid_1281\CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]\0:°\xffff\\?\USB#Vid_05ac&Pid_1281#CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]#{ed82a167-d61a-4af6-9ab6-11e52236c576}\IB0000\09F6è\xffff%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\\0\0\?¸\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067DA0881264772096\0\0\0006\0\0À\0?\C:\WINDOWS\TEMP\httproxycc_tmp067F20101264767376\0\0\0?P\0Carte de performance WMI\0?\30\0(F8?ll\b\0s\0hi\x2000Gtproxy_srv07CAE1881264781883\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0706F0101264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06FBD2181264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07BA62381264781880\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp070200101264781936\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp070200101264781936\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B1D0101264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A720801264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AC70881264781879\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B010881264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AB20081264781883\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A530081264781882\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A5C0001264781950\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A5C0001264781950\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06BE30181264781951\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06BE30181264781951\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06B000101264781961\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06B000101264781961\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp07BE50181264781963\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp07BE50181264781963\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07CA51001264781725\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A6B0081264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv070F90981264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06ADC0801264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06FE30181264781971\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07CCF2401264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06DC70181264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0720E0101264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AB30801264781950\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071BD0901264781879\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071A20181264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07BF20A81264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06BD80101264781967\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B0A0081264781975\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264781976\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264781976\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07C82FD01264781977\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06ACA0081264781980\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06ACA0081264781980\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06ACD0081264781975\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07C82FD01264781977\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B0A0081264781975\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06C110101264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07B941281264781966\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06BCD0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06EC60181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B100801264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A180281264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A5D0781264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07C9C0781264781967\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A790101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07BDA0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06ABF0101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0711D0101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0712C0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06C7E0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071BC0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071FB0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B6A0101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_"

                  scanning hidden registry entries ...

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                  "DeviceNotSelectedTimeout"="15"
                  "GDIProcessHandleQuota"=dword:00002710
                  "Spooler"="yes"
                  "swapdisk"=""
                  "TransmissionRetryTimeout"="90"
                  "USERProcessHandleQuota"=dword:00002710

                  scanning hidden files ...

                  scan completed successfully
                  hidden processes: 0
                  hidden services: 0
                  hidden files: 0

                  Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

                  device: opened successfully
                  user: MBR read successfully
                  kernel: MBR read successfully
                  user & kernel MBR OK

                  ==========
                  Programs
                  ==========

                  Activision
                  Adobe
                  AGEIA Technologies
                  AnalogX
                  Apple Software Update
                  BitDefender
                  Bonjour
                  Cheat Engine
                  CodeBlocks
                  Common Files
                  ComPlus Applications
                  DIFX
                  DNA
                  Dofus
                  DVDVideoSoft
                  Electronic Arts
                  EXPERTool
                  Fichiers communs
                  HP
                  IDoser v4
                  InstallShield Installation Information
                  Internet Explorer
                  iPod
                  iTunes
                  Java
                  List_Kill'em
                  Logitech Touch Mouse Server
                  Malwarebytes' Anti-Malware
                  Maxis
                  Messenger
                  Messenger Plus! Live
                  Metin2_France
                  Microsoft
                  microsoft frontpage
                  Microsoft Games for Windows - LIVE
                  Microsoft Office
                  Microsoft Sync Framework
                  Microsoft Visual Studio
                  Microsoft Works
                  Movie Maker
                  Mozilla Firefox
                  MSBuild
                  MSN
                  MSN Gaming Zone
                  Mumble
                  NetMeeting
                  Online Services
                  Outlook Express
                  PhotoFiltre
                  QuickTime
                  Realtek
                  Services en ligne
                  Skype
                  Spybot - Search & Destroy
                  Subagames
                  Teamspeak2_RC2
                  Transform XP to Vista
                  Ubisoft
                  Uninstall Information
                  Unreal Tournament 3
                  VDOWNLOADER
                  VIA
                  Windows Live
                  Windows Live SkyDrive
                  Windows Media Player
                  Windows NT
                  WindowsUpdate
                  WinRAR
                  xerox

                  ============
                  Drive C:
                  ============

                  Ad-Remover
                  Ad-Report-CLEAN[1].log
                  AUTOEXEC.BAT
                  boot.ini
                  Bootfont.bin
                  cmdcons
                  Config.Msi
                  CONFIG.SYS
                  Documents and Settings
                  Gw.dat
                  Gw.exe
                  Gw.tmp
                  HammerAutosave
                  IO.SYS
                  JM
                  Kill'em
                  List'em.txt
                  MSDOS.SYS
                  MSOCache
                  NTDETECT.COM
                  ntldr
                  pagefile.sys
                  Program Files
                  rapport.txt
                  RECYCLER
                  RHDSetup.log
                  rsit
                  Skills
                  System Volume Information
                  WINDOWS
                  World of Warcraft

                  ¤¤¤¤¤¤¤¤¤¤ Cracks | Keygens | Serials

                  C:\Documents and Settings\Quentin\Bureau\Patch Dk
                  C:\Documents and Settings\Quentin\Bureau\Patch Dk\Instal PAtch(exclure).exe
                  C:\Documents and Settings\Quentin\Bureau\World of Warcraft\Patch.html
                  C:\Documents and Settings\Quentin\Bureau\World of Warcraft\Patch.txt
                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\CoD4\rzn-cod4\Serial.txt
                  C:\Documents and Settings\Quentin\Recent\Serial.lnk
                  C:\Program Files\Metin2_France\PatchUpdater.exe
                  C:\WINDOWS\Patch Darluok
                  C:\WINDOWS\Patch Darluok\uninstall.exe
                  C:\World of Warcraft\Patch.html
                  C:\World of Warcraft\Patch.txt
                  G:\Alien Arena 2008\data1\textures\arena8\crackedrock1.tga
                  G:\Alien Arena 2008\data1\textures\arena8\crackedrock1_hm.tga
                  G:\Alien Arena 2008\data1\textures\arena8\crackedrock1_nm.tga
                  G:\Alien Arena 2008\data1\textures\arena8\crackedrock2.tga
                  G:\Alien Arena 2008\data1\textures\arena8\crackedrock2_hm.tga
                  G:\Alien Arena 2008\data1\textures\arena8\crackedrock2_nm.tga
                  G:\ORDI!\Bureau\Patch Dk
                  G:\ORDI!\Bureau\Patch Dk\Instal PAtch(exclure).exe
                  G:\ORDI!\Bureau\World of Warcraft-Darkluok\Patch.html
                  G:\ORDI!\Bureau\World of Warcraft-Darkluok\Patch.txt
                  G:\ORDI!\Mes documents\Téléchargements\CoD4\rzn-cod4\Serial.txt
                  G:\ORDI!\World of Warcraft-Ivalice\Patch.html
                  G:\ORDI!\World of Warcraft-Ivalice\Patch.txt
                  G:\Ordi-Jeux\FR\Patcher.exe
                  G:\Ordi-Jeux\FR\PatcherPatch.exe
                  G:\Ordi-Jeux\Warcraft III\Patch.txt
                  G:\Wow's\World of Warcraft-Darkluok\Patch.html
                  G:\Wow's\World of Warcraft-Darkluok\Patch.txt
                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Compressés\Install.exe
                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Dloads\Install.exe
                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitfraudFix\o4Patch.exe
                  C:\WINDOWS\system32\o4Patch.exe
                  G:\ORDI!\Mes documents\Téléchargements\Dloads\Install.exe
                  G:\Ordi-Jeux\FR\PatcherPatch.exe

                  ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
                  1. moment de grace Contributeur sécurité
                    vu

                    ▶ Relance List&Kill'em avec le raccourci sur ton bureau ,

                    mais cette fois-ci :

                    ▶ choisis l'option 2 = Mode Suppression

                    laisse travailler l'outil.

                    en fin de scan un rapport s'ouvre

                    ▶ colle le contenu dans ta reponse

                    Tu peux le désinstaller ensuite
                    1. bean147
                      Kill'em by g3n-h@ckm@n 1.2.1.2

                      User : Quentin (Administrateurs)
                      Update on 29/01/2010 by g3n-h@ckm@n ::::: 11:50
                      Start at: 19:53:45 | 30/01/2010
                      Contact : g3n-h@ckm@n sur CCM

                      AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
                      Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
                      Internet Explorer 6.0.2900.5512
                      Windows Firewall Status : Enabled
                      AV : Bitdefender Antivirus 8.0 [ Enabled | Updated ]

                      A:\ -> Lecteur de disquettes 3 ½ pouces
                      C:\ -> Disque fixe local | 232,88 Go (114,04 Go free) | NTFS
                      D:\ -> Disque CD-ROM
                      E:\ -> Disque CD-ROM
                      G:\ -> Disque fixe local | 931,51 Go (408,5 Go free) [LaCie] | NTFS

                      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\csrss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\Program Files\Java\jre6\bin\jusched.exe
                      C:\WINDOWS\RTHDCPL.EXE
                      C:\WINDOWS\system32\RUNDLL32.EXE
                      C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                      C:\Program Files\iTunes\iTunesHelper.exe
                      C:\Program Files\Messenger\msmsgs.exe
                      C:\Program Files\EXPERTool\TBPanel.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\DNA\btdna.exe
                      C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\Program Files\Bonjour\mDNSResponder.exe
                      C:\Program Files\Java\jre6\bin\jqs.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\nvsvc32.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\PnkBstrA.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                      C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                      C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                      C:\Program Files\iPod\bin\iPodService.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\System32\alg.exe
                      C:\WINDOWS\system32\wbem\wmiapsrv.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\AnalogX\CookieWall\cookie.exe
                      C:\Program Files\Mumble\dbus-daemon.exe
                      G:\Steam\steam.exe
                      C:\Program Files\Mumble\mumble.exe
                      G:\Ordi-Jeux\Gw.exe
                      C:\Program Files\List_Kill'em\List_Kill'em.scr
                      C:\WINDOWS\system32\cmd.exe
                      C:\WINDOWS\system32\wbem\wmiprvse.exe
                      C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\ERUNT.EXE
                      C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\pv.exe

                      Detections :
                      ==========

                      ¤¤¤¤¤¤¤¤¤¤ Files/folders :

                      Quarantined & Deleted !! : C:\WINDOWS\SET3.tmp
                      Quarantined & Deleted !! : C:\WINDOWS\SET4.tmp
                      Quarantined & Deleted !! : C:\WINDOWS\SET8.tmp
                      Quarantined & Deleted !! : C:\WINDOWS\mbr.exe

                      Quarantined & Deleted !! : C:\WINDOWS\system32\x3daudio1_0.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\x3daudio1_1.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_2.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_3.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_4.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_5.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_6.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\xinput9_1_0.dll
                      Quarantined & Deleted !! : C:\WINDOWS\system32\404Fix.exe
                      Quarantined & Deleted !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
                      Quarantined & Deleted !! : C:\WINDOWS\system32\dumphive.exe
                      Quarantined & Deleted !! : C:\WINDOWS\system32\IEDFix.exe
                      Quarantined & Deleted !! : C:\WINDOWS\system32\Process.exe
                      Quarantined & Deleted !! : C:\WINDOWS\system32\SrchSTS.exe
                      Quarantined & Deleted !! : C:\WINDOWS\system32\tmp.reg
                      Quarantined & Deleted !! : C:\WINDOWS\system32\VACFix.exe
                      Quarantined & Deleted !! : C:\WINDOWS\system32\VCCLSID.exe
                      Quarantined & Deleted !! : C:\WINDOWS\system32\WS2Fix.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD1.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD1DE.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD2.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD24.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD3.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD8.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADB.exe
                      Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADC.exe

                      ==============
                      host file OK !
                      ==============

                      ========
                      Registry
                      ========
                      Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
                      Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr

                      ============
                      Disk Cleaned
                      ============

                      ================
                      Prefetch cleaned
                      ================

                      ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
                      1. moment de grace Contributeur sécurité
                        ok

                        Téléchargez MalwareByte's Anti-Malware

                        http://www.malwarebytes.org/mbam/program/mbam-setup.exe

                        . Enregistres le sur le bureau
                        . Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
                        . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
                        . Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
                        . Une fois la mise à jour terminé
                        . Rend-toi dans l'onglet, Recherche
                        . Sélectionnes Exécuter un examen complet (examen assez long)
                        . Cliques sur Rechercher
                        . Le scan démarre.
                        . A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
                        . Cliques sur Ok pour poursuivre.
                        . Si des malwares ont été détectés, clique sur Afficher les résultats
                        . Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
                        . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
                        . Rends toi dans l'onglet rapport/log
                        . Tu cliques dessus pour l'afficher, une fois affiché
                        . Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
                        . Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
                        . tu cliques droit dans le cadre de la reponse et coller

                        Si tu as besoin d'aide regarde ces tutoriels :
                        Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
                        http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

                        1. bean147
                          Malwarebytes' Anti-Malware 1.44
                          Version de la base de données: 3657
                          Windows 5.1.2600 Service Pack 3
                          Internet Explorer 6.0.2900.5512

                          31/01/2010 15:03:20
                          mbam-log-2010-01-31 (15-03-20).txt

                          Type de recherche: Examen complet (A:\|C:\|D:\|E:\|G:\|)
                          Eléments examinés: 360071
                          Temps écoulé: 1 hour(s), 52 minute(s), 57 second(s)

                          Processus mémoire infecté(s): 0
                          Module(s) mémoire infecté(s): 0
                          Clé(s) du Registre infectée(s): 0
                          Valeur(s) du Registre infectée(s): 0
                          Elément(s) de données du Registre infecté(s): 0
                          Dossier(s) infecté(s): 0
                          Fichier(s) infecté(s): 0

                          Processus mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Module(s) mémoire infecté(s):
                          (Aucun élément nuisible détecté)

                          Clé(s) du Registre infectée(s):
                          (Aucun élément nuisible détecté)

                          Valeur(s) du Registre infectée(s):
                          (Aucun élément nuisible détecté)

                          Elément(s) de données du Registre infecté(s):
                          (Aucun élément nuisible détecté)

                          Dossier(s) infecté(s):
                          (Aucun élément nuisible détecté)

                          Fichier(s) infecté(s):
                          (Aucun élément nuisible détecté)

                          Encore merci pour votre aide .
                          1. moment de grace Contributeur sécurité
                            ok

                            comment va le pc ?

                            relances RSIT et postes juste le rapport log stp
                            1. bean147
                              Logfile of random's system information tool 1.06 (written by random/random)
                              Run by Quentin at 2010-01-31 17:12:55
                              Microsoft Windows XP Professionnel Service Pack 3
                              System drive C: has 117 GB (49%) free of 238 GB
                              Total RAM: 2047 MB (63% free)

                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 17:13:05, on 31/01/2010
                              Platform: Windows XP SP3 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                              Boot mode: Normal

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                              C:\Program Files\Bonjour\mDNSResponder.exe
                              C:\Program Files\Java\jre6\bin\jqs.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\nvsvc32.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\Java\jre6\bin\jusched.exe
                              C:\WINDOWS\system32\PnkBstrA.exe
                              C:\WINDOWS\RTHDCPL.EXE
                              C:\WINDOWS\system32\RUNDLL32.EXE
                              C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                              C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                              C:\Program Files\iTunes\iTunesHelper.exe
                              C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                              C:\Program Files\EXPERTool\TBPanel.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\DNA\btdna.exe
                              C:\WINDOWS\system32\wbem\wmiapsrv.exe
                              C:\Program Files\iPod\bin\iPodService.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\AnalogX\CookieWall\cookie.exe
                              G:\Steam\steam.exe
                              C:\Program Files\Mumble\dbus-daemon.exe
                              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Program Files\Windows Live\Contacts\wlcomm.exe
                              C:\Documents and Settings\Quentin\Bureau\RSIT.exe
                              C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Quentin.exe

                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                              R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=%s
                              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\SPYBOT~1\SDHelper.dll (file missing)
                              O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
                              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                              O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                              O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                              O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                              O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
                              O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                              O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
                              O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                              O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                              O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
                              O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
                              O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
                              O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                              O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
                              O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                              O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                              O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
                              O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                              O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
                              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                              O4 - Startup: Logitech Touch Mouse Server.lnk = C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
                              O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
                              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                              O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                              O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                              O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                              O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                              O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                              O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                              O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                              O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
                              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                              O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                              O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                              O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                              1. moment de grace Contributeur sécurité
                                ok

                                supprimes manuellement ceci

                                C:\windows\system32\tmp.txt

                                1)
                                Cherches et cliques sur C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Quentin.exe
                                Au menu principal, choisir do a scan only, puis cocher la case devant les lignes suivantes à corriger et cliquer en bas sur Fix Checked (s’il manque des lignes…pas grave)

                                R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
                                R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=%s
                                O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\SPYBOT~1\SDHelper.dll (file missing)
                                O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                                O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

                                ……………………..

                                2)
                                Mettre à jour internet explorer
                                https://support.microsoft.com/fr-fr/allproducts
                                ………….

                                3)
                                IMPORTANT

                                Purger la restauration systeme XP

                                http://www.bibou0007.com/windows-xp-f101/purger-la-restauration-du-systeme-sous-windows-xp-t151.htm

                                ……………..

                                4)
                                Télécharge ToolsCleaner2sur ton Bureau.
                                https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/

                                * Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur ToolsCleaner2.exe pour le lancer.
                                * Clique sur Recherche et laisse le scan agir.
                                * Clique sur Suppression pour finaliser.
                                * Tu peux, si tu le souhaites, te servir des Options Facultatives.
                                * Clique sur Quitter pour obtenir le rapport.
                                * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

                                Tu peux supprimer ToolCleaner ensuite

                                1. bean147
                                  [ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

                                  --> Recherche:

                                  C:\Rsit: trouvé !
                                  C:\Ad-remover: trouvé !
                                  C:\Ad-Remover\BACKUP\Ad-R.exe: trouvé !
                                  C:\Documents and Settings\Quentin\Bureau\Ad-R.exe: trouvé !
                                  C:\Documents and Settings\Quentin\Bureau\Rsit.exe: trouvé !
                                  C:\Documents and Settings\Quentin\Bureau\catchme.log: trouvé !
                                  C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp\mbr.log: trouvé !
                                  C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\catchme.exe: trouvé !
                                  C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\mbr.exe: trouvé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudFix.zip: trouvé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\HijackThis.exe: trouvé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\hijackthis.log: trouvé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudfix: trouvé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Compressés\ComboFix.exe: trouvé !

                                  ---------------------------------
                                  --> Suppression:

                                  C:\Ad-Remover\BACKUP\Ad-R.exe: supprimé !
                                  C:\Documents and Settings\Quentin\Bureau\Ad-R.exe: supprimé !
                                  C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\catchme.exe: supprimé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudFix.zip: supprimé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\HijackThis.exe: supprimé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Compressés\ComboFix.exe: ERREUR DE SUPPRESSION !!
                                  C:\Documents and Settings\Quentin\Bureau\Rsit.exe: supprimé !
                                  C:\Documents and Settings\Quentin\Bureau\catchme.log: supprimé !
                                  C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp\mbr.log: supprimé !
                                  C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\mbr.exe: supprimé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\hijackthis.log: supprimé !
                                  C:\Rsit: supprimé !
                                  C:\Ad-remover: supprimé !
                                  C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudfix: supprimé !
                                  -
                                  Voila mais apres avoir fais un scan avec hijackthis et coché et faire Fix checked,
                                  mon antivirus a détecte que le programme CTFMON.EXE voullait modifier ma base de registre, ne sachant pas vraiment que faire ,je l'ai bloqué =$

                                  Discussions similaires

                                  comment écrire des petits chiffres ?
                                  Elisa-x3

                                  9 réponses
                                  [Ecrire Exposant 12] 10² ou 10³ ok mais...
                                  tessai

                                  43 réponses
                                  Comment écrire un chiffre en petit caractè
                                  Essegnon

                                  5 réponses
                                  Dimensions L x l x H : comment lire ces infos ?
                                  Miss-Curieuse

                                  8 réponses
                                  Kman metre le "e" en exposant dans un do
                                  rachel49

                                  6 réponses