Petit problèmes de lenteur

Résolu
Bean147 -  
Bonjour,
Cela fait plusieurs jours que mon ordinateur est devenu 'lent' en ce qui concerne internet,
de plus j'ai 10 programmes svchost.exe qui tournent et je me demande si ils ne sont pas infectés..
Merci de m'aider,
Cordialement Bean147
Configuration: Windows XP
Firefox 3.5.7

19 réponses

  1.  moment de grace Contributeur sécurité
    bonjour

    • Télécharge Random's System Information Tool (RSIT) de Random/Random.

    (outil de diagnostic)

    http://images.malwareremoval.com/random/RSIT.exe

    • Enregistre le sur ton Bureau.

    • Double clique sur RSIT.exe pour lancer l'outil.

    • Clique sur "Continue" à l'écran Disclaimer.

    • Si l'outil HijackThis n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu s'il te le demande)

    et tu devras accepter la licence.

    • Une fois le scan terminé, deux rapports vont apparaître : poste les dans deux messages séparés stp

    Les rapports se trouvent à cet endroit:
    C:\rsit\info.txt
    C:\rsit\log.txt
    0
    1. Bean147
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by Quentin at 2010-01-29 13:53:21
      Microsoft Windows XP Professionnel Service Pack 3
      System drive C: has 117 GB (49%) free of 238 GB
      Total RAM: 2047 MB (58% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 13:53:34, on 29/01/2010
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.exe
      C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
      C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
      C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\EXPERTool\TBPanel.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Electronic Arts\EADM\Core.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\DNA\btdna.exe
      C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Windows Live\Contacts\wlcomm.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Quentin\Bureau\RSIT.exe
      C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Quentin.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
      R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=%s
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - (no file)
      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\SPYBOT~1\SDHelper.dll (file missing)
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
      O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
      O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
      O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
      O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
      O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
      O4 - HKLM\..\Policies\Explorer\Run: [DirectX For Microsoft® Windows] C:\WINDOWS\system32\fservice.exe
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Logitech Touch Mouse Server.lnk = C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
      O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
      O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
      O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
      0
      1. moment de grace Contributeur sécurité
        manque le rapport info qui se trouve là

        C:\rsit\info.txt
        0
        1. bean147
          info.txt logfile of random's system information tool 1.06 2010-01-29 13:53:37

          ======Uninstall list======

          -->MsiExec /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
          -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
          32 Bit HP CIO Components Installer-->MsiExec.exe /I{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}
          Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
          Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
          Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
          Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
          Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
          Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
          Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
          Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
          Adobe Color EU Recommended Settings-->MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}
          Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
          Adobe Color NA Extra Settings-->MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
          Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
          Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
          Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
          Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
          Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
          Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
          Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
          Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
          Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
          Adobe Photoshop CS3-->C:\Program Files\Fichiers communs\Adobe\Installers\32e9033392a51340b32fdc6ad893ab7\Setup.exe
          Adobe Photoshop CS3-->MsiExec.exe /I{BF794769-8875-4E01-B7BE-E00104604F4A}
          Adobe Reader 9.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A92000000001}
          Adobe Setup-->MsiExec.exe /I{926DEB4E-2B0A-4C5C-AE4A-BF6C06949702}
          Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
          Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
          Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
          Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
          Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
          Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
          AGEIA PhysX v7.09.13-->MsiExec.exe /X{45235788-142C-44BE-8A4D-DDE9A84492E5}
          Alien Arena 2008 7.21-->"F:\Alien Arena 2008\unins000.exe"
          AnalogX CookieWall-->C:\Program Files\AnalogX\CookieWall\cookieu.exe
          Apple Application Support-->MsiExec.exe /I{3FA365DF-2D68-45ED-8F83-8C8A33E65143}
          Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}
          Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
          Assassin's Creed-->C:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x040c -removeonly
          Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
          BitDefender Antivirus 2008-->MsiExec.exe /I{C6E8173D-40EE-4998-B659-CA19F1F278BA}
          Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
          Call of Duty(R) - World at War(TM)-->C:\Program Files\InstallShield Installation Information\{D80A6A73-E58A-4673-AFF5-F12D7110661F}\setup.exe -runfromtemp -l0x040c
          Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x040c
          Call of Duty: Modern Warfare 2 - Multiplayer-->"G:\Steam\steam.exe" steam://uninstall/10190
          Call of Duty: Modern Warfare 2-->"G:\Steam\steam.exe" steam://uninstall/10180
          Call of Juarez - Bound in Blood-->C:\Program Files\InstallShield Installation Information\{FEFAF112-4DA8-479C-89E2-7DE25091711A}\setup.exe -runfromtemp -l0x040c
          Cheat Engine 5.5-->"C:\Program Files\Cheat Engine\unins000.exe"
          Counter-Strike(TM)-->MsiExec.exe /I{DF5A03CC-D5AA-43D8-B948-D9903F2AF94A}
          Dofus 1.28.0-->C:\Program Files\Dofus\uninstall.exe
          EA Download Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{EF7E931D-DC84-471B-8DB6-A83358095474} /l1036
          EXPERTool 6.4-->"C:\Program Files\EXPERTool\unins000.exe"
          GUILD WARS-->"F:\Ordi-Jeux\Gw.exe" -uninstall
          HijackThis 2.0.2-->"G:\Ordi-Programmes\HijackThis\HijackThis.exe" /uninstall
          HP Deskjet All-In-One Software 9.0-->C:\Program Files\HP\Digital Imaging\{B2C61EBB-F47C-48ba-B375-27A40F8F48F7}\setup\hpzscr01.exe -datfile hposcr14.dat
          Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
          Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
          iTunes-->MsiExec.exe /I{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}
          Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}
          JMB36X Raid Configurer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}\setup.exe" -l0x40c -removeonly
          Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
          Left 4 Dead 2-->"G:\Steam\steam.exe" steam://uninstall/550
          Left 4 Dead-->"C:\WINDOWS\Left 4 Dead\uninstall.exe" "/U:C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Left 4 Dead\Uninstall\uninstall.xml"
          Les Sims Deluxe-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{10798AE3-DCBB-43C3-9C93-C23512427E25}\setup.exe" -l040c
          Logiciel d'archivage WinRAR-->C:\Program Files\WinRAR\uninstall.exe
          Logitech Touch Mouse Server 1.0-->C:\Program Files\Logitech Touch Mouse Server\uninst.exe
          Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
          Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
          Microsoft Games for Windows - LIVE -->MsiExec.exe /X{4D243BA7-9AC4-46D1-90E5-EEB88974F501}
          Microsoft Games for Windows - LIVE Redistributable-->MsiExec.exe /X{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}
          Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
          Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
          Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
          Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
          Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
          Microsoft Office Professional Plus 2007-->"C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
          Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
          Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
          Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
          Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
          Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
          Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
          Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
          Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
          Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
          Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
          Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
          Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
          Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
          Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
          Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
          Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
          Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
          Mozilla Firefox (3.5.7)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
          MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
          Mumble and Murmur-->C:\Program Files\Mumble\Uninstall.exe
          NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI
          Oblivion-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35CB6715-41F8-4F99-8881-6FC75BF054B0}\setup.exe" -l0x40c -removeonly
          Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
          Package de pilotes Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPInst.exe /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_1F9DE4E49C97F59EE9F75C34E0E91E568FC9EEB2\amdk8.inf
          Painkiller Resurrection - Demo-->"G:\Steam\steam.exe" steam://uninstall/39590
          Patch Darluok-->"C:\WINDOWS\Patch Darluok\uninstall.exe" "/U:C:\Program Files\World of Warcraft\Uninstall\uninstall.xml"
          PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
          PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
          QuickTime-->MsiExec.exe /I{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}
          REALTEK GbE & FE Ethernet PCI NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\Setup.exe" -l0x40c -removeonly
          Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
          Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
          Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}
          Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}
          SPORE™-->"C:\Program Files\InstallShield Installation Information\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}\SPORESetup.exe" -runfromtemp -l0x040c -removeonly
          Team Fortress 2-->"G:\Steam\steam.exe" steam://uninstall/440
          TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
          Transform XP to Vista 3.1-->"C:\Program Files\Transform XP to Vista\unins000.exe"
          Unreal Tournament 3-->MsiExec.exe /X{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}
          VDownloader 1.12-->"C:\Program Files\VDOWNLOADER\unins000.exe"
          VIA Platform Device Manager-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
          Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
          Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
          Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
          Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
          Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
          World of Warcraft-->C:\Program Files\Fichiers communs\Blizzard Entertainment\World of Warcraft\Uninstall.exe

          ======Security center information======

          AV: Bitdefender Antivirus

          ======System event log======

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7036
          Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.

          Record Number: 6817
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7035
          Message: Un contrôle Démarrer a correctement été envoyé au service Connexions réseau.

          Record Number: 6816
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User: AUTORITE NT\SYSTEM

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7035
          Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

          Record Number: 6815
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User: AUTORITE NT\SYSTEM

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 7036
          Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

          Record Number: 6814
          Source Name: Service Control Manager
          Time Written: 20091220105636.000000+060
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 6005
          Message: Le service d'Enregistrement d'événement a démarré.

          Record Number: 6813
          Source Name: EventLog
          Time Written: 20091220105505.000000+060
          Event Type: Informations
          User:

          =====Application event log=====

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 0
          Message:
          Record Number: 412
          Source Name: iPod Service
          Time Written: 20091003111327.000000+120
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 0
          Message:
          Record Number: 411
          Source Name: SeaPort
          Time Written: 20091003111325.000000+120
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 1
          Message:
          Record Number: 410
          Source Name: Bonjour Service
          Time Written: 20091003111325.000000+120
          Event Type: Informations
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 1000
          Message: Application défaillante hl2.exe, version 0.0.0.0, module défaillant datacache.dll, version 0.0.0.0, adresse de défaillance 0x0000b423.

          Record Number: 409
          Source Name: Application Error
          Time Written: 20091002213442.000000+120
          Event Type: erreur
          User:

          Computer Name: QUENTIN-5B4E2F4
          Event Code: 1000
          Message: Application défaillante hl2.exe, version 0.0.0.0, module défaillant datacache.dll, version 0.0.0.0, adresse de défaillance 0x0000b423.

          Record Number: 408
          Source Name: Application Error
          Time Written: 20091002213332.000000+120
          Event Type: erreur
          User:

          ======Environment variables======

          "ComSpec"=%SystemRoot%\system32\cmd.exe
          "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\
          "windir"=%SystemRoot%
          "FP_NO_HOST_CHECK"=NO
          "OS"=Windows_NT
          "PROCESSOR_ARCHITECTURE"=x86
          "PROCESSOR_LEVEL"=15
          "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 1, AuthenticAMD
          "PROCESSOR_REVISION"=6b01
          "NUMBER_OF_PROCESSORS"=2
          "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
          "TEMP"=%SystemRoot%\TEMP
          "TMP"=%SystemRoot%\TEMP
          "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
          "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

          -----------------EOF-----------------
          0
      2. moment de grace Contributeur sécurité
        ok

        à faire dans cet ordre (tu peux poster les rapports en suivant)

        1)
        Téléchargez et enregistrez le fichier d installation sur le bureau
        http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

        Double cliquez sur le fichier d'installation de AD-Remover, le programme s'installera automatiquement.
        Sous Vista : clic droit sur AD-Remover et sélectionner "Exécuter en tant qu'administrateur"
        Au menu principal choisir
        Option L Lancer le nettoyage
        et tapez sur [entrée] .
        Laissez travailler l'outil et ne touchez à rien ...
        Postez le rapport qui apparait à la fin.

        ( le rapport est sauvegardé aussi sous C:\Ad-report.log )

        (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

        Note :Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
        Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
        Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

        ....................

        2)
        Téléchargez MalwareByte's Anti-Malware

        http://www.malwarebytes.org/mbam/program/mbam-setup.exe

        . Enregistres le sur le bureau
        . Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
        . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
        . Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
        . Une fois la mise à jour terminé
        . Rend-toi dans l'onglet, Recherche
        . Sélectionnes Exécuter un examen complet (examen assez long)
        . Cliques sur Rechercher
        . Le scan démarre.
        . A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
        . Cliques sur Ok pour poursuivre.
        . Si des malwares ont été détectés, clique sur Afficher les résultats
        . Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
        . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
        . Rends toi dans l'onglet rapport/log
        . Tu cliques dessus pour l'afficher, une fois affiché
        . Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
        . Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
        . tu cliques droit dans le cadre de la reponse et coller

        Si tu as besoin d'aide regarde ces tutoriels :
        Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
        http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

        0
        2. bean147
          .
          ======= RAPPORT D'AD-REMOVER 1.1.4.6_I | UNIQUEMENT XP/VISTA/7 =======
          .
          Mis à jour par C_XX le 28.01.2010 à 18:26
          Contact: AdRemover.contact@gmail.com
          Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
          .
          Lancé à: 14:28:29, ven. 29/01/2010 | Mode Normal | Option: CLEAN
          Exécuté de: C:\Ad-Remover\
          Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
          Nom du PC: QUENTIN-5B4E2F4 | Utilisateur actuel: Quentin
          .
          ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
          .

          C:\Program Files\Mozilla FireFox\Components\AskSearch.js
          C:\Program Files\Mozilla FireFox\extensions\search@searchsettings.com

          (!) -- Fichiers temporaires supprimés.

          .
          HKCU\software\appdatalow\AskBarDis
          HKCU\software\microsoft\internet explorer\searchscopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
          HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
          HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
          HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB}
          HKLM\software\AskBarDis
          HKLM\software\classes\AskIBar.PopSwatterBarButton
          HKLM\software\classes\AskIBar.PopSwatterBarButton.1
          HKLM\software\classes\AskIBar.PopSwatterSettingsControl
          HKLM\software\classes\AskIBar.PopSwatterSettingsControl.1
          HKLM\software\classes\AskToolBar.SettingsPlugin
          HKLM\software\classes\AskToolBar.SettingsPlugin.1
          HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
          HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
          HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
          HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
          HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
          HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
          HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
          HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
          HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
          HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
          HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
          HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
          .
          ============== Scan additionnel ==============
          .
          .
          * Mozilla FireFox Version 3.5.7 [fr] *
          .
          Nom du profil: zizkpm1c.default (Quentin)
          .
          (Quentin, prefs.js) Browser.download.lastDir, C:\Documents and Settings\Quentin\Mes documents\Mes images
          (Quentin, prefs.js) Browser.startup.homepage, hxxp://www.google.be/\r
          (Quentin, prefs.js) Extensions.enabledItems, anycolor.pavlos256@gmail.com:0.3.1,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971,firefox-ext@youtubekeep.com:0.3.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
          .
          (Quentin, prefs.js) EFFACE - Startup.homepage_override_url, hxxp://www.ask.com/?o=13166&l=dis
          .
          .
          * Internet Explorer Version 6.0.2900.5512 *
          .
          [HKEY_CURRENT_USER\..\Internet Explorer\Main]
          .
          Do404Search: 01000000
          Local Page: C:\WINDOWS\system32\blank.htm
          Show_ToolBar: yes
          Start Page: hxxp://fr.msn.com/
          Enable Browser Extensions: yes
          Use Search Asst: no
          Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
          .
          [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
          .
          Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Delete_Temp_Files_On_Exit: yes
          Local Page: %SystemRoot%\system32\blank.htm
          Start Page: hxxp://fr.msn.com/
          Search bar: hxxp://search.msn.com/spbasic.htm
          .
          [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
          .
          Tabs: res://ieframe.dll/tabswelcome.htm
          .
          ============== Suspect (Cracks, Serials, ...) ==============
          .
          C:\Documents and Settings\Quentin\Bureau\Wakfu_Patch_0_76b_0_77b.exe
          C:\Documents and Settings\Quentin\Bureau\Fichiers.Rar\CRACK.TURKYA\LAUNCHER.EXE
          C:\Documents and Settings\Quentin\Bureau\Patch Dk\Instal PAtch(exclure).exe
          C:\Documents and Settings\Quentin\Bureau\wow-3.2.2-to-3.3.0-frFR-Win-patch\Blizzard Updater.exe
          .
          ===================================
          .
          4613 Octet(s) - C:\Ad-Report-CLEAN[1].log
          .
          125 Fichier(s) - C:\DOCUME~1\Quentin\LOCALS~1\Temp
          1031 Fichier(s) - C:\WINDOWS\Temp
          0 Fichier(s) - C:\WINDOWS\Prefetch
          .
          18 Fichier(s) - C:\Ad-Remover\BACKUP
          2 Fichier(s) - C:\Ad-Remover\QUARANTINE
          .
          Fin à: 14:32:12 | ven. 29/01/2010 - CLEAN[1]
          .
          ============== E.O.F ==============
          .
          0
          1. bean147
            Je fais la scan avec malwateBytes',
            Encore merci pour votre aide!
            0
            1. bean147
              Malwarebytes' Anti-Malware 1.44
              Version de la base de données: 3657
              Windows 5.1.2600 Service Pack 3
              Internet Explorer 6.0.2900.5512

              29/01/2010 16:19:20
              mbam-log-2010-01-29 (16-19-20).txt

              Type de recherche: Examen complet (C:\|G:\|)
              Eléments examinés: 358809
              Temps écoulé: 1 hour(s), 41 minute(s), 6 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 2
              Valeur(s) du Registre infectée(s): 1
              Elément(s) de données du Registre infecté(s): 1
              Dossier(s) infecté(s): 0
              Fichier(s) infecté(s): 3

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5y99ae78-58tt-11dw-be53-y67078979y} (Backdoor.ProRat) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{5y99ae78-58tt-11dw-be53-y67078979y} (Backdoor.ProRat) -> Quarantined and deleted successfully.

              Valeur(s) du Registre infectée(s):
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\directx for microsoft® windows (Backdoor.Prorat) -> Quarantined and deleted successfully.

              Elément(s) de données du Registre infecté(s):
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (Explorer.exe C:\WINDOWS\system32\fservice.exe) Good: (Explorer.exe) -> Quarantined and deleted successfully.

              Dossier(s) infecté(s):
              (Aucun élément nuisible détecté)

              Fichier(s) infecté(s):
              C:\Ad-Remover\pv.com (Trojan.Agent) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{FE15D0AC-7F17-4D84-B637-B0567CF2E53A}\RP1\A0001018.sys (Malware.Trace) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{FE15D0AC-7F17-4D84-B637-B0567CF2E53A}\RP1\A0001050.com (Trojan.Agent) -> Quarantined and deleted successfully.
              0
              1. moment de grace Contributeur sécurité
                tu peux vider la quarantaine

                Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent(car il est detecté a tort comme infection)

                ▶ Télécharge et installe List&Kill'em et enregistre le sur ton bureau
                http://sd-1.archive-host.com/membres/up/829108531491024/List_Killem_Install.exe

                double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

                coche la case "creer une icone sur le bureau"

                une fois terminée , clic sur "terminer" et le programme se lancer seul

                choisis la langue puis choisis l'option 1 = Mode Recherche

                ▶ laisse travailler l'outil

                à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

                un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , mais ne le supprime pas pour l instant, le scan n'est pas fini.

                ▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

                tu peux supprimer le rapport catchme.log de ton bureau maintenant.
                0
                1. bean147
                  List'em by g3n-h@ckm@n 1.2.1.2
                  User : Quentin (Administrateurs)
                  Update on 29/01/2010 by g3n-h@ckm@n ::::: 11:50
                  Start at: 17:53:37 | 29/01/2010
                  Contact : g3n-h@ckm@n sur CCM

                  AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
                  Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
                  Internet Explorer 6.0.2900.5512
                  Windows Firewall Status : Enabled
                  AV : Bitdefender Antivirus 8.0 [ (!) Disabled | Updated ]

                  A:\ -> Lecteur de disquettes 3 ½ pouces
                  C:\ -> Disque fixe local | 232,88 Go (114,07 Go free) | NTFS
                  D:\ -> Disque CD-ROM
                  E:\ -> Disque CD-ROM
                  G:\ -> Disque fixe local | 931,51 Go (408,55 Go free) [LaCie] | NTFS

                  ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\csrss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Program Files\Bonjour\mDNSResponder.exe
                  C:\Program Files\Java\jre6\bin\jqs.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\PnkBstrA.exe
                  C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                  C:\Program Files\Java\jre6\bin\jusched.exe
                  C:\WINDOWS\RTHDCPL.EXE
                  C:\WINDOWS\system32\RUNDLL32.EXE
                  C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                  C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                  C:\Program Files\iTunes\iTunesHelper.exe
                  C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                  C:\Program Files\Skype\Phone\Skype.exe
                  C:\Program Files\Messenger\msmsgs.exe
                  C:\Program Files\EXPERTool\TBPanel.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\DNA\btdna.exe
                  C:\WINDOWS\system32\wbem\wmiapsrv.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\System32\alg.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\iPod\bin\iPodService.exe
                  G:\Steam\steam.exe
                  C:\Program Files\Mozilla Firefox\firefox.exe
                  C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
                  C:\Program Files\iTunes\iTunes.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\distnoted.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\MDCrashReportTool.exe
                  C:\Program Files\List_Kill'em\List_Kill'em.scr
                  C:\WINDOWS\system32\cmd.exe
                  C:\WINDOWS\system32\wbem\wmiprvse.exe
                  C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp\pv.exe

                  ======================
                  Keys "Run"
                  ======================
                  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  Skype REG_SZ "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                  msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  MSMSGS REG_SZ "C:\Program Files\Messenger\msmsgs.exe" /background
                  GAINWARD REG_SZ C:\Program Files\EXPERTool\TBPanel.exe /A
                  EA Core REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                  CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
                  BitTorrent DNA REG_SZ "C:\Program Files\DNA\btdna.exe"
                  HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  NvCplDaemon REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
                  SkyTel REG_SZ SkyTel.EXE
                  RTHDCPL REG_SZ RTHDCPL.EXE
                  nwiz REG_SZ nwiz.exe /install
                  NvMediaCenter REG_SZ RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  JMB36X IDE Setup REG_SZ C:\WINDOWS\JM\JMInsIDE.exe
                  BitDefender Antiphishing Helper REG_SZ "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
                  BDAgent REG_SZ "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
                  Alcmtr REG_SZ ALCMTR.EXE
                  Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                  Adobe ARM REG_SZ "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
                  36X Raid Configurer REG_SZ C:\WINDOWS\system32\JMRaidSetup.exe boot
                  QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

                  =====================
                  Other Keys
                  =====================
                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
                  dontdisplaylastusername REG_DWORD 0 (0x0)
                  legalnoticecaption REG_SZ
                  legalnoticetext REG_SZ
                  shutdownwithoutlogon REG_DWORD 1 (0x1)
                  undockwithoutlogon REG_DWORD 1 (0x1)

                  ===============
                  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                  NoDriveTypeAutoRun REG_DWORD 323 (0x143)
                  NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff)

                  ===============
                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
                  NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff)
                  NoDriveTypeAutoRun REG_DWORD 323 (0x143)

                  ===============
                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

                  ===============
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

                  ===============
                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
                  {AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ

                  ===============
                  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                  %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
                  F:\Ordi-Jeux\Steam\SteamApps\common\doom 3 demo\Doom3.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\common\doom 3 demo\Doom3.exe:*:Enabled:Doom 3 Demo
                  F:\Ordi-Jeux\Steam\SteamApps\common\alpha prime demo\AlphaPrime.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\common\alpha prime demo\AlphaPrime.exe:*:Enabled:Alpha Prime Demo
                  F:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe:*:Enabled:hl2
                  C:\WINDOWS\system32\sessmgr.exe REG_SZ C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019
                  C:\Program Files\Bonjour\mDNSResponder.exe REG_SZ C:\Program Files\Bonjour\mDNSResponder.exe:*:Disabled:Bonjour
                  C:\Program Files\Mozilla Firefox\firefox.exe REG_SZ C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox
                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Disabled:Windows Live Messenger
                  C:\Program Files\Counter-Strike\hl.exe REG_SZ C:\Program Files\Counter-Strike\hl.exe:*:Enabled:Half-Life Launcher
                  F:\Ordi-Jeux\Steam\SteamApps\bean147\insurgency\hl2.exe REG_SZ F:\Ordi-Jeux\Steam\SteamApps\bean147\insurgency\hl2.exe:*:Enabled:hl2
                  C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe REG_SZ C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe:*:Enabled:Call of Juarez - Bound in Blood
                  C:\WINDOWS\system32\PnkBstrA.exe REG_SZ C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA
                  C:\WINDOWS\system32\PnkBstrB.exe REG_SZ C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB
                  C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe REG_SZ C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM)
                  C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe REG_SZ C:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM)
                  G:\Ordi-Jeux\Steam\steam.exe REG_SZ G:\Ordi-Jeux\Steam\steam.exe:*:Enabled:Steam
                  C:\WINDOWS\system32\dpvsetup.exe REG_SZ C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test
                  C:\WINDOWS\system32\rundll32.exe REG_SZ C:\WINDOWS\system32\rundll32.exe:*:Enabled:Exécuter une DLL en tant qu'application
                  G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike source\hl2.exe:*:Enabled:hl2
                  G:\Ordi-Jeux\Steam\SteamApps\bean147\condition zero\hl.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\condition zero\hl.exe:*:Enabled:Half-Life Launcher
                  G:\Ordi-Jeux\Steam\SteamApps\bean147\ricochet\hl.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\ricochet\hl.exe:*:Enabled:Half-Life Launcher
                  G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike\hl.exe REG_SZ G:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike\hl.exe:*:Enabled:Half-Life Launcher
                  C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe REG_SZ C:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3
                  G:\Ordi-Jeux\AssassinsCreed_Dx9.exe REG_SZ G:\Ordi-Jeux\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9
                  G:\Ordi-Jeux\AssassinsCreed_Dx10.exe REG_SZ G:\Ordi-Jeux\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10
                  G:\Ordi-Jeux\AssassinsCreed_Launcher.exe REG_SZ G:\Ordi-Jeux\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update
                  F:\Alien Arena 2008\crx.exe REG_SZ F:\Alien Arena 2008\crx.exe:*:Disabled:crx
                  C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Disabled:Windows Live Call
                  C:\Program Files\Skype\Plugin Manager\skypePM.exe REG_SZ C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
                  C:\Program Files\DNA\btdna.exe REG_SZ C:\Program Files\DNA\btdna.exe:*:Enabled:DNA
                  C:\Program Files\Electronic Arts\EADM\Core.exe REG_SZ C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager
                  C:\Program Files\Metin2_France\metin2client.bin REG_SZ C:\Program Files\Metin2_France\metin2client.bin:*:Enabled:metin2client
                  G:\Steam\steam.exe REG_SZ G:\Steam\steam.exe:*:Enabled:Steam 732897
                  G:\Steam\SteamApps\bean147\counter-strike source\hl2.exe REG_SZ G:\Steam\SteamApps\bean147\counter-strike source\hl2.exe:*:Enabled:hl2
                  C:\World of Warcraft\WoW-3.2.0-frFR-downloader.exe REG_SZ C:\World of Warcraft\WoW-3.2.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader
                  C:\World of Warcraft\Launcher.exe REG_SZ C:\World of Warcraft\Launcher.exe:*:Enabled:Launcher.exe
                  G:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe REG_SZ G:\Steam\SteamApps\common\left 4 dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2
                  C:\Program Files\Skype\Phone\Skype.exe REG_SZ C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype
                  G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe REG_SZ G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2
                  G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe REG_SZ G:\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer
                  C:\Program Files\iTunes\iTunes.exe REG_SZ C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes
                  C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE REG_SZ C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook
                  C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe REG_SZ C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe:*:Enabled:Logitech

                  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                  %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
                  %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
                  C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger

                  ===============
                  ActivX controls
                  ===============
                  HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
                  HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
                  HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
                  HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}

                  ===============
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73fa19d0-2d75-11d2-995d-00c04f98bbc9}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{ACC563BC-4266-43f0-B6ED-9D38C4202C7E}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
                  HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

                  ==============
                  BHO :
                  ======
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{53707962-6F74-2D53-2644-206D7942484F}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

                  ================
                  Internet Explorer :
                  ================
                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                  Start Page REG_SZ https://www.msn.com/fr-fr

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                  Start Page REG_SZ https://www.msn.com/fr-fr

                  ========
                  Services
                  ========
                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

                  Ndisuio : 0x3
                  EapHost : 0x3
                  SharedAccess : 0x2
                  wuauserv : 0x2

                  =========
                  Atapi.sys
                  =========

                  %%%% HASHDEEP-1.0
                  %%%% size,md5,sha256,filename
                  ## Invoked from: C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp
                  ## C:\> hashdeep C:\WINDOWS\System32\Drivers\atapi.sys
                  ##
                  96512,9f3a2f5aa6875c72bf062c712cfa2674,b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9,C:\WINDOWS\System32\Drivers\atapi.sys

                  Sources
                  =======

                  C:\WINDOWS\system32\drivers\atapi.sys
                  C:\WINDOWS\system32\ReinstallBackups\0013\DriverFiles\i386\atapi.sys
                  C:\WINDOWS\system32\ReinstallBackups\0014\DriverFiles\i386\atapi.sys

                  Référence :
                  ==========

                  Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
                  Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
                  Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
                  Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
                  Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
                  Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
                  Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C

                  G:\Autorun.inf :
                  ----------------
                  [autorun]
                  icon=.VolumeIcon.ico

                  =======
                  Drive :
                  =======

                  Défragmenteur de disque Windows
                  Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

                  Rapport d'analyse
                  233 Go total, 114 Go libre (48%), 8% fragmenté (fragmentation du fichier 17%)

                  Il ne vous est pas nécessaire de défragmenter ce volume.

                  ¤¤¤¤¤¤¤¤¤¤ Files/folders :

                  Present !! : C:\WINDOWS\SET3.tmp
                  Present !! : C:\WINDOWS\SET4.tmp
                  Present !! : C:\WINDOWS\SET8.tmp
                  Present !! : C:\WINDOWS\mbr.exe
                  Present !! : C:\WINDOWS\system32\x3daudio1_0.dll
                  Present !! : C:\WINDOWS\system32\x3daudio1_1.dll
                  Present !! : C:\WINDOWS\system32\X3DAudio1_2.dll
                  Present !! : C:\WINDOWS\system32\X3DAudio1_3.dll
                  Present !! : C:\WINDOWS\system32\X3DAudio1_4.dll
                  Present !! : C:\WINDOWS\system32\X3DAudio1_5.dll
                  Present !! : C:\WINDOWS\system32\X3DAudio1_6.dll
                  Present !! : C:\WINDOWS\system32\xinput9_1_0.dll
                  Present !! : C:\WINDOWS\System32\404Fix.exe
                  Present !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
                  Present !! : C:\WINDOWS\System32\dumphive.exe
                  Present !! : C:\WINDOWS\System32\IEDFix.exe
                  Present !! : C:\WINDOWS\System32\Process.exe
                  Present !! : C:\WINDOWS\System32\SrchSTS.exe
                  Present !! : C:\WINDOWS\System32\tmp.reg
                  Present !! : C:\WINDOWS\System32\VACFix.exe
                  Present !! : C:\WINDOWS\System32\VCCLSID.exe
                  Present !! : C:\WINDOWS\System32\WS2Fix.exe
                  Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD1.exe
                  Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD2.exe
                  Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD24.exe
                  Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD8.exe
                  Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADB.exe
                  Present !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADC.exe

                  ¤¤¤¤¤¤¤¤¤¤ Keys :

                  Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr
                  Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"
                  Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
                  Present !! : HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
                  Present !! : HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}

                  ============

                  catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2010-01-29 18:08:50
                  Windows 5.1.2600 Service Pack 3 NTFS

                  scanning hidden processes ...

                  scanning hidden services & system hive ...

                  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
                  "PendingFileRenameOperations"=str(7):"d\6\x2f30700\b\0ms\xffd8\xffffv\n\22\0\x2600?\1\0\0010DvcDs397\xfff0\xffffl\1\xeea8E\x2140&@\0x\34˜\34¸\34à\34\xda18\35ø\35\x2760\36\xe960Eø\35\x1900Frv\20\0e\0\b\0ar\xffe0\xffffLegacyDriver\0$\xffd8\xffffv\tN\08H\1\0\1aCasUD)\0\0 \xffffn \x27d8\xeddaÊ\0\0\xe898\31\1\0\0\0\xedb0E\xffff\xffff\1\0€6€;\xffff\xffff\b\0\0\0\30\0\4\0\x84\0\17\0LGC_006B¨\xffffn \x27d8\xeddaÊ\0\0\xee48E\0\0\0\0\xffff\xffff\xffff\xffff\6\0`E€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x30303F¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0ycch\0Télécharger les mises à jour BitDefender et les nouvelles signatures de codes malveillants via Internet\0\0\0@\0system32\DRIVERS\mouclass.sys\0P\0NDIS mode utilisateur E/S Protocole\0\0\0\xffe0\xffffv\a\22\05\1\0\1}Srie\xffd8\xffffv\f\4\xffe0\xffffv\6\4s0<\xfff8\xffff°E\xffd8\xffffv\t\30\0\xf2c0E\1\0\1\Hl ieoxy\xffe0\xffffPSCRIPT.HLP\0tp\xffe0\xffffv\a\2SCRIPT.NTF\0\0:\xffd8\xffffv\16\4\1\0\1HPoie\xffe8\xffffinput.inf\0\xffd8\xffffv\n\2E\xf3d8E\xf3b0E\xf428E\xf3f8E\xf488E\xf450E\xf4f0E\xf4b0E\xffe0\xffffv\6 \0\xf580E\3\0\1:Lde:\xffd8\xffff¸\6h\4\0\0\0\0¸\6h\4\31\0\2\0\x2e00:\xffe8\xffffMicrosoft\0\xffd8\xffffà\1\xa6a0\4\0\0\0\0à\1\xa6a0\4\27\0\2\0P\\xffd8\xffffh\4¸\6\0\0\0\0h\4¸\6\30\0\2\0EM\xffe0\xffffv\6 \0\xf630E\3\0\1:Lte:\xffd8\xffff\\3h\4\0\0\0\0\\3h\4\e\0\2\0\x2e00:\xffe0\xffffv\2 \0\xf6c0E\3\0\1:\x3041HP:\xffe0\xffffv\5 \0\xf698E\3\0\1sLgl7\xffd8\xffff\\3\5\0\0\0\0\\3\5\32\0\2\0\?\xffd8\xffff>\f\x23fd\22\0\0\0\0>\f\x23fd\22\35\0\2\0\x2c18:\xffe0\xffffv\2 \0\xf708E\3\0\1:A:\x2e00:\xffd8\xffff\x109e\t>\f\0\0\0\0\x109e\t>\f\36\0\2\0¸H\xffd8\xffffv\v \0\xf758E\3\0\1MLteSalro\xffd8\xffff\\3h\4\0\0\0\0\\3h\4\34\0\2\00015\xffe0\xffffv\b \0\xf7a0E\3\0\1:A ml\xffd8\xffff\x33ef\3O\4\0\0\0\0\x33ef\3O\4\37\0\2\0\x2e00:\xffe0\xffffv\2 \0\xf878E\3\0\1:AHP:\xffe0\xffffv\2 \0\xf808E\3\0\1:A:\x2a08:\xffd8\xffffó\0c\1\0\0\0\0ó\0c\1!\0\2\0\x2c90:\xffe0\xffffv\2 \0\xf850E\3\0\1:A:\x2f98:\xffd8\xffff²\0ó\0\0\0\0\0²\0ó\0"\0\2\0(H\xffd8\xffffc\1G\1\0\0\0\0c\1G\1 \0\2\00007\xffe0\xffffv\3 \0\xf8c0E\3\0\1:A0\x2b70:\xffd8\xffff™\0²\0\0\0\0\0™\0²\0#\0\2\0\x2e00:\xffe0\xffffv\6 \0¸E\3\0\1:I\x204f\x3042:\xffe0\xffffv\6 \0(E\3\0\1HI\x204fBH\xffd8\xffff—\n½\17\0\0\0\0—\n½\17%\0\2\0\x2c18:\xffe0\xffffv\6 \0pE\3\0\1:I\x204f\x3242:\xffd8\xffff®\a—\n\0\0\0\0®\a—\n&\0\2\0¸H\xffe0\xffffv\6 \0àE\3\0\1HI\x204f\x3342H\xffd8\xffff½\17-\25\0\0\0\0½\17-\25$\0\2\0002C\xffd8\xffffk\5®\a\0\0\0\0k\5®\a'\0\2\0\x2c18:\xffe0\xffffv\6 \0(E\3\0\1:I\x204fB:\xffd8\xffff\3k\5\0\0\0\0\3k\5(\0\2\0¸H\xffe0\xffffv\6 \0\xfa70E\3\0\1HI\x204fBH\xffd8\xffff¤\2\3\0\0\0\0¤\2\3)\0\2\0\x2b70:\xffe0\xffffv\6 \0\xfab8E\3\0\1:I\x204fB:\xffd8\xffff\xe7d3\1¤\2\0\0\0\0\xe7d3\1¤\2*\0\2\0P:\xffe0\xffffv\6 \0\a\x1c45\v-\0\2\0@H\xffe0\xffffv\6 \0ØE\3\0\1:J\x2053\x3342:\xffd8\xffff#\5\xdbf0\a\0\0\0\0#\5\xdbf0\a.\0\2\0\x2d40:\xffe0\xffffv\6 \0 E\3\0\1:J\x2053B:\xffd8\xffff\xec97\3#\5\0\0\0\0\xec97\3#\5/\0\2\0H\xffe0\xffffv\6 \0hE\3\0\1HJ\x2053BH\xffd8\xffff\2\xec97\3\0\0\0\0\2\xec97\0030\0\2\0\x2b70:\xffe0\xffffv\6 \0°E\3\0\1:J\x2053B:\xffd8\xffff\xf43a\1\2\0\0\0\0\xf43a\1\0021\0\2\0P:\xffe0\xffffv\2 \0øE\3\0\1H\x3043HH\xffd8\xffff…\r\23\0\0\0\0…\r\0232\0\2\0ˆH\xffe0\xffffv\2 \0\xfd40E\3\0\1:C:\x2aa0:\xffd8\xffff\xe375\t…\r\0\0\0\0\xe375\t…\r3\0\2\0\x2d40:\xffe0\xffffv\2 \0ˆE\3\0\1:\x3243:\x3070:\xffd8\xffff²\6\xe375\t\0\0\0\0²\6\xe375\t4\0\2\0H\xffe0\xffffv\2 \0\xfdd0E\3\0\1:C:\x2b70:\xffd8\xffff…\2Y\3\0\0\0\0…\2Y\0037\0\2\0\x2e00:\xffe0\xffffv\2 \0\xfe18E\3\0\1:CHP:\xffd8\xffff\1…\2\0\0\0\0\1…\28\0\2\0HH\xffe0\xffffv\6 \0\xfe60E\3\0\1HAC H\xffd8\xffff\xf3e0\r€\22\0\0\0\0\xf3e0\r€\229\0\2\00H\xffe0\xffffv\2 \0¨E\3\0\1H\x3343H¨H\xffd8\xffff\xf10a\4²\6\0\0\0\0\xf10a\4²\0065\0\2\0\x2b70:\xffe0\xffffv\2 \0ðE\3\0\1:C:\x2d40:\xffd8\xffffY\3\xf10a\4\0\0\0\0Y\3\xf10a\0046\0\2\0P:\xffe0\xffffv\6 \08E\3\0\1:AC :\xffd8\xffff@\t\xf3e0\r\0\0\0\0@\t\xf3e0\r:\0\2\0\x2e00:\xffe0\xffffv\6 \0\xff80E\3\0\1:AC :\xffd8\xffffð\6@\t\0\0\0\0ð\6@\t;\0\2\0HH\xffe0\xffffv\6 \0\xffc8E\3\0\1HAC H\xffd8\xffff\xa6a0\4ð\6\0\0\0\0\xa6a0\4ð\6<\0\2\00H\xffe0\xffffv\6 \0\20F\3\0\1:AC :\xffd8\xffffø\3\xa6a0\4\0\0\0\0ø\3\xa6a0\4=\0\2\0\x2d40:\xffe0\xffffv\4 \0XF\3\0\1:FS\x3070:\xffd8\xffff\\3\x9d8\5\0\0\0\0\\3\x9d8\5>\0\2\0H\xffe0\xffffv\3 \0\x00a0F\3\0\1:P4\x2b70:\xffd8\xffff\x33ef\3h\4\0\0\0\0\x33ef\3h\4A\0\2\0\x2e00:\xffd8\xffffv\v \0ðF\3\0\1:Oesz 2¸H\xffd8\xffffƒ\aâ\t\0\0\0\0ƒ\aâ\tB\0\2\0°H\xffd8\xffffv\v \0@F\3\0\1HOesz 1¨H\xffd8\xffffâ\t`\r\0\0\0\0â\t`\rC\0\2\0èH\xffe8\xffffl\2H+\x323e—\xfae0J‘T\xffe0\xffffv\4 \0 F\3\0\1HFS¨H\xffd8\xffff\\3\x9d8\5\0\0\0\0\\3\x9d8\5?\0\2\0èH\xffd8\xffffv\n \0ðF\3\0\1:HlLte:\x2b70:\xffd8\xffff\x21b4\2\\3\0\0\0\0\x21b4\2\\3@\0\2\0\x2e00:\xffd8\xffffv\v \0\x0240F\3\0\1:Oesz 0\x2c18:\xffd8\xffff`\r\xff19\22\0\0\0\0`\r\xff19\22D\0\2\0\x2ec8:\xffe0\xffffv\5 \0ˆF\3\0\1:\x3239x2H\xffd8\xffff\xa820#\xa820#\0\0\0\0\xa820#\xa820#E\0\2\0°H\xffe0\xffffv\6 \0\x02d0F\3\0\1HAS H\xffd8\xffff¸\6Ð\b\0\0\0\0¸\6Ð\bF\0\2\0XH\xffe0\xffffv\6 \0\x0318F\3\0\1:AS :\xffd8\xffff\xda20\nÀ\17\0\0\0\0\xda20\nÀ\17I\0\2\0\x2e00:\xffe0\xffffv\a \0\x0360F\3\0\1:AC 1\xffd8\xffff\v0\20\0\0\0\0\v0\20J\0\2\0HH\xffe0\xffffv\a \0¨F\3\0\1HAC 2\xffd8\xffff°\nP\16\0\0\0\0°\nP\16K\0\2\00H\xffe0\xffffv\a \0ðF\3\0\1HAC 3\xffd8\xffffè\n\x1d88\17\0\0\0\0è\n\x1d88\17L\0\2\0ÀH\xffe0\xffffv\6 \08F\3\0\1HAS :\xffd8\xffffÐ\b\x2d70\r\0\0\0\0Ð\b\x2d70\rG\0\2\0\x2bf0:\xffe0\xffffv\6 \0€F\3\0\1:AS :\xffd8\xffff\x2d70\r \21\0\0\0\0\x2d70\r \21H\0\2\0\xffffv\24 \0ØF\3\0\1:Sre \x3034x8\x2820V\x2941\x2bf0:\xffd8\xffffò\3u\2\0\0\0\0ò\3u\2M\0\2\0\x2f98:\xffd0\xffffv\25 \0\x0530F\3\0\1HSre \x3030x\x3030\x2820SG)H\xffd8\xffffn\4Ó\3\0\0\0\0n\4Ó\3N\0\2\0ˆH\xffd0\xffffv\22 \0\x0588F\3\0\1:T T\x2043D \x3032x8:\x2bf0:\xffd8\xffff\xe030\3u\2\0\0\0\0\xe030\3u\2Q\0\2\0\x2f98:\xffd0\xffffv\22 \0àF\3\0\1HT T\x2043D \x3032x8HH\xffd8\xffff\xe030\3º\2\0\0\0\0\xe030\3º\2R\0\2\0ˆH\xffc8\xffffv\35 \0\x0640F\3\0\1WT T\x2043D qa\x2065P\x2078\x3237050p\xffd8\xffff\xe030\3\xe824\2\0\0\0\0\xe030\3\xe824\2S\0\2\00012\xffd8\xffff\x2255\4\x19c0\3\0\0\0\0\x2255\4\x19c0\3T\0\2\0ÀH\xfff8\xffff\xe5f8E\xffd0\xffffv\25 \0ÈF\3\0\1HSre \x323047\x2038(G)H\xffd8\xffff\5\x2255\4\0\0\0\0\5\x2255\4O\0\2\0ÀH\xffd0\xffffv\27 \0 F\3\0\1:Sre 20\x30312\x2820SG)\xffd8\xffff\xe3e4\6\5\0\0\0\0\xe3e4\6\5P\0\2\0\x2e00:\xffc8\xffffv\31 \0\x0668F\3\0\1HT A qa\x2065P\x20787856HèH\xffd8\xffffv\16 \0¨F\3\0\1\0T A \x3032x7W\xffd8\xffff\xe030\3\x19c0\3\0\0\0\0\xe030\3\x19c0\3U\0\2\0xy\xffd8\xffffv\20 \0\x07f8F\3\0\0010T D\x2056\x32318x\x3032\xffd8\xffff\xe3e4\6\xe030\3\0\0\0\0\xe3e4\6\xe030\3V\0\2\0\T \xffff 9€9ð9@9È9ø9 9x9P99È9(9Ð9€9€9H9à99¨9ð9x9Ð9P9ˆ9\xf560E\xf678E\xf610E\xf730E\xf658E\xf6e8E\xf780E\xf7c8E\xf7e8E\xf830E\xf8a0E\xf8e8EEPE˜EE\xfa50E\xfa98E\xfae0E(EpE\xfbb8E:\x2bf0:\xffd8\xffffÕ\nH\5\0\0\0\0Õ\nH\5W\0\2\0\x2f98: \xffffn x\xa67eàÊ\0\0ø\26\1\0\0\0\x2a48F\xffff\xffff\1\0\x26c0F(H\xffff\xffff\n\0\0\0\f\0\32\0\3\0\n\0PFraowrp\xffe0\xffffv\6\32\0\x0a58F\1\0\1/Diel\xffe0\xffffpdfcmnnt.dll\0 ¨\xffffn ¸|àÊ\0\0\x09d8F\1\0\0\0(F\xffff\xffff\0\0\xffff\xffffÈH\xffff\xffff\26\0\0\0\0\0\0\0\0\0\5\0Prs\37 \xffffn \xa5d2\xa680àÊ\0\0\x0a78F\0\0\0\0\xffff\xffff\xffff\xffff\v\0\x0d98F(H\xffff\xffff\0\0\0\0\30\0D\0\0\0\v\0PFrao:15\xffd8\xffffv\t(\0\x0b58F\1\0\1!Agmns\0P!\xffd0\xffff-PPDFCREATORPRINTER\08 \xffe0\xffffv\aD\0¨F\1\0\1\x97cCmad¸\xffffC:\PROGRA~1\PDFCRE~1\PDFSpool.exe\0\xffe0\xffffv\5\4Lgieeu.\0\xffd8\xffffv\n\4\1?PitroDtf\xffd0\xffff0FˆF\x0bf0FF\x0c78F F\x0ce8FF\x0d70FÈFHF¨\xffffn =3Ê\0\0\xf588H\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xf6b0H€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303009@\0NT AUTHORITY\NetworkService\0\0\0\xffe0\xffffv\a\22\0È5\1\0\1vSrie\xffd8\xffffv\n$\0\xeb90F\1\0\1\0DvcDs\0\0\0\xffe8\xffffXKàK\xffffl\5X\e.\x237c¸\eÈ\1\estants. Si ce service est arrêté, ces connexions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.\0\0\0\b\0E\xffe8\xffffc59220d6\0000\xffe8\xffffc4467777\0I\xffd8\xffffv\n\22\0\xa4903\1\0\0015DvcDsc_t\xffd8\xffffv\v\4\x2198\36@\36€\36 \36\x2fc06h;\31\1\0\0\0\xffffn råÊ\0\0\xe898\31\1\0\0\0F\xffff\xffff\1\0\x2a78F€;\xffff\xffff\b\0\0\0\30\0\4\0"\0\17\0LGC_4\x33355B\xffd8\xffffv\f\4\0\0\4\0\x3030\x3030\0S\xffe0\xffffv\6\4v\n\22\0\x3198:\1\0\1NDvcDsrfm\xffe0\xffff DÀFàFFHFÈFht\x98\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A790101264779556\0\0\0 di \0lay driver\0nve\xffd8\xffffv\f\47-1-2001\0\31\xffe0\xffffv\6\4\0\26\0N\0\0\0\4\0\x3030\x303058(\0v\vÐ\0`F\1\0\1\0Dsrpin\0\0\xffe8\xfffff66a0511\0N\xffe0\xffffv\6\4\xffffv\v\4\xffffv\5\32\08I\1\0\1sCas\0\xffd8\xffffv\n\22\0\xdf80$\1\0\1\eDvcDs\34\xdae8\eX\0v\v&\0\x1b28F\1\0\1\0Dsrpinÿ\0170\0NetBIOS sur TCP/IP\0\30ÿ\17\xffe8\xffffe34607d9\0\0\xffd8\xffffv\tN\0\x2878I\1\0\1TCasUDttp\xffe0\xffffv\4Z\0¨I\1\0\1\30IoP\30\xffe0\xffffv\5\32\0ÀF\1\0\1\31Cas\0\xffe0\xffffLegacyDriver\0é\xffe0\xffffø$À8°:\xde10:¨D`FcD\xffd8\xffffv\v\4 \x2c38 \x22e8 \x2308 \x2b78 \20\0H \b\0ie\xffe0\xffffv\5\32\00F\1\0\1<Cas\0\xffc8\xffffFLEXnet Licensing Service\0\xffd8\xffffv\v\4\1aPltrDleitresok\0c\20\0.sys\0\0\xffe0\xffffv\6\4\xffffLegacyDriver\0001\xffe0\xffffp;\x2a58<x<\x1bb8F`H¸I\0\0 \xffffn (\xe278ÆÊ\0\0\xed90\b\1\0\0\0 F\xffff\xffff\1\0\xd8d08€;\xffff\xffff\b\0\0\0\30\0\4\0B\0\17\0LGC\x335f0A66\xffd8\xffffv\n\22\0€F\1\0\1$DvcDs\0\0\0\xff98\xffffn \xfe52°øÊ\0\0`\n\1\0\1\0 FØUSBSTOR#Disk&Ven_ST932032&Prod_5AS&Rev_#5D049FFFFFFF&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}\08\xffffn œÓÊ\0\0T\x30450EGHA5\x3044\x3034\x2330{35\x3033\x2d64bb\x312d1\x2d309\x3266\x302d009ebb\0\0\0\xff68\xffffSTORAGE\Volume\1&30a96598&0&SignatureA8B7BEACOffset7E00Length4A85AD0400\0se¨\xffffn œÓÊ\0\0\x2140F\0\0\0\0\xffff\xffff\xffff\xffff\1\0\x2410F\0\xffff\xffff\16\0\0\0\30\0æ\0\0\0\1\0\x2323\31`\31\xffd8\xffffv\fæ\0\x2320F\1\0\1\31SmoiLnÀ\31\xff10\xffff\\?\STORAGE#Volume#1&30a96598&0&SignatureA8B7BEACOffset7E00Length4A85AD0400#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\0com\xfff8\xffff\x22f8F\xfff0\xffffl\1\x22a0F#\0\xff60\xffffn ÎÓÊ\0\0 \23\1\0\0\0\x2670F\xffff\xffff\1\0\x2540F\0\xffff\xffff\16\0\0\0\34\0F\0\3\0M\0\x2323\x233fU\x2342Vd09&i\x305f4\x2361509FFF#adb\x3031-\x3335\x2d301\x3264-\x3130\x2d66\x3030\x30634b5e}t\xffd8\xffffv\16F\0\x24f0F\1\0\1>DvcIsac>°\xffffUSB\Vid_059b&Pid_047a\5D049FFFFFFF\000320\xfff8\xffff\x24c8F¨\xffffn ÎÓÊ\0\0\x2428F\0\0\0\0\xffff\xffff\xffff\xffff\1\0\x2668F\0\xffff\xffff\16\0\0\0\30\0\x9c\0\0\0\1\0#NDO\xffd8\xffffv\f\x9c\0\x25c8F\1\0\1>SmoiLn`>\xff60\xffff\\?\USB#Vid_059b&Pid_047a#5D049FFFFFFF#{a5dcbf10-6530-11d2-901f-00c04fb951ed}\0\xfff8\xffff\x25a0F\xfff0\xffffl\1\x2548F#\0\xffe0\xffffv\a\22\0ø$\1\0\1 Srie\xffe0\xffffv\6\4\xf014ÕÓÊ\0\0H\27\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xe510;\0\xffff\xffff\0\0\0\0\b\0\2\0\5\0\f\00907\x3030\x3030\T \xffffn ÎáðÊ\0\0\xe898\31\1\0\0\0\x2f78F\xffff\xffff\1\0\x2eb0\6€;\xffff\xffff\b\0\0\0\30\0\4\0Î\0\17\0LGC_CD8F¨\xffffn ÎáðÊ\0\0\x2750F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\x2918F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030Ð \xffd8\xffffv\v\4ECC055D-047F-11D1-A537-0000F8753ED1}\0 Ð \xffd8\xffffv\n\22\0\xa7205\1\0\1rDvcDs\0ar\xffe0\xffff\x2680F\x26a0F\x2808F\x2830F\x2870F\x28f0F06\xffd8\xffffv\v\4\xffffv\tN\0\x29c8F\1\0\0017CasUD665¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000460\xffd8\xffffv\n\22\0à3\1\0\19DvcDs\C:\xfff0\xffffl\1\x0a78F|.\xffe0\xffffv\5\32\0\x2d10F\1\0\1\0Cas\\xfff8\xffff@F \xffffn ¸\xa6e2ÍÊ\0\0\xe898\31\1\0\0\0\x2b90F\xffff\xffff\1\0\x0cd86€;\xffff\xffff\b\0\0\0\30\0\4\0~\0\17\0LGC_1\x3330\x3043A¨\xffffn ¸\xa6e2ÍÊ\0\0\x2a80F\0\0\0\0\xffff\xffff\xffff\xffff\6\08€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0 Ð \xfff0\xffffl\1\x2ae0F\x2140& \xffffn j\xaa22ÍÊ\0\0\xe898\31\1\0\0\0\x2d00F\xffff\xffff\1\0>€;\xffff\xffff\b\0\0\0\30\0\4\0\xbb\0\17\0LGC_6D\x30467¨\xffffn j\xaa22ÍÊ\0\0\x2ba0F\0\0\0\0\xffff\xffff\xffff\xffff\6\0¸D€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012\xffd8\xffffv\tN\0\x2c80F\1\0\1iCasUDde ¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0812\xffd8\xffffv\n\22\03\1\0\1?DvcDsWIN\xfff0\xffffl\1\x2c00F\x2140&\xffe0\xffffLegacyDriver\0\\xffd8\xffffv\tN\0xF\1\0\1tCasUDFE9\xffd8\xffffv\n\22\0h\31\1\0\1pDvcDsobi\xfff8\xffff¨F\xff78\xffffn ¨™ÓÊ\0\0H\e\1\0\0\0\x2f68F\xffff\xffff\b\0\x2ff8F€;\xffff\xffff\16\0\0\0\30\0X\0\2\08\0\x2631\x3033a69&&intrABBAOfe7\x3030Lnt48A0\x3030\xffd8\xffffv\v\4HrwrI??\\xffd8\xffffSTORAGE\Volume\0\0tp\xffd8\xffffv\tN\0\x2eb0F\1\0\1>CasUD>ð>¨\xffff{71A27CDD-812A-11D0-BEC7-08002BE2092F}\0\36È8 \xffff{71A27CDD-812A-11D0-BEC7-08002BE2092F}\0007\08\30\xfff0\xffffl\1\x3020F\xe918H\xfff0\xffffl\1\x27b0F\x2140&\xffe0\xffffv\3\24\0À\32\1\0\1cMgse\xffd8\xffffv\n"\0\x2fd0F\1\0\1nDvcDsnd \xffd8\xffffVolume générique\0e\xffd8\xffffÈ>\x2e10F\x2e38F\x2e88F˜5X:\x2f88F\x2fa8Fht¨\xffffn ˜DÓÊ\0\0\x2d88F\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\0\0\0\0\0\0\0\0\0\0\a\0Lgof\xffd8\xffffv\f\4;\xffff\xffff\30\0\0\0\0\0\0\0\n\0\21\0Vd09&i\x305f4a668 \xffffn ÎÓÊ\0\0F\2\0\0\0\x27406\xffff\xffff\f\0àF€;\xffff\xffff"\0\0\0&\0\x90\0\0\0\f\0509FFF\0\0°\xffffPériphérique de stockage de masse USB\0\xffd8\xffffIomega Select HDD\0\xffd8\xffffv\f\4B\Class_08\0\00005\xffe0\xffffv\6X\0°F\1\0\1>Die>\xffd8\xffffv\tN\0F\1\0\1NCasUDTEM¨\xffff{36FC9E60-C465-11CF-8056-444553540000}\0WIN\xffe0\xffffv\5\b\0\xfd8\31\1\0\1tCaso\xffe0\xffffv\a\20\05\1\0\0011Srie\b\0\x0e60F \xffff{36FC9E60-C465-11CF-8056-444553540000}\0021\0 \0\xffe0\xffffv\3P\00F\1\0\1>Mg2\xff98\xffffn ÎÓÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\2\0\xdb60\32?\xffff\xffff\0\0\0\0(\0\x9a\0\0\0\21\0Dvc aaees8\0\0\xffd8\xffffv\f\x9a\0¨F\1\0\0016SmoiNm12\xff60\xffff\??\USB#Vid_059b&Pid_047a#5D049FFFFFFF#{a5dcbf10-6530-11d2-901f-00c04fb951ed}T¨\xffffn ÈÚÓÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\0\0\0\0\0\0\0\0\1\0\a\0Lgof \xffffn  àðÊ\0\0\xe898\31\1\0\0\0Ø\32\xffff\xffff\1\0ˆ7€;\xffff\xffff\b\0\0\0\30\0\4\0Â\0\17\0LGC_D6\x33316\b\0BF\xffe0\xffffLegacyDriver\0D\xfff0\xffffl\1ÐF½\xff90\xffffn \xe590ÓÊ\0\0\x2020=\1\0\0\0Ð+\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\34\0\0\0\0\0\0\0\4\0\37\0Ds&e_T\x3233\x3330\x2632Po_A&e_ \xffffn \xe91aÈÓÊ\0\08F\2\0\0\0è8\xffff\xffff\f\0XF€;\xffff\xffff"\0\0\0\32\0p\0\0\0\16\0509FFF&S\xffc8\xffffLecteur de disque\0evice\0INˆ\xffffUSBSTOR\DiskST9320325AS_________________\0USBSTOR\DiskST9320325AS_____________\0USBSTOR\DiskST932032\0USBSTOR\ST9320325AS______________\0ST9320325AS______________\0USBSTOR\GenDisk\0GenDisk\0\00005\xffd8\xffffv\r4\0àF\a\0\0016CmailIs?\xffc8\xffffUSBSTOR\Disk\0USBSTOR\RAW\0\0\xffd8\xffffv\tN\0@F\1\0\0010CasUD643¨\xffff{4D36E967-E325-11CE-BFC1-08002BE10318}\00055F\xffe0\xffffv\a\n\0ø$\1\0\1SSrie\xffd8\xffffv\v\4\xffffv\3<\0¸F\1\0\1>Mg>\b\0\xd7b8: \xffff{4D36E967-E325-11CE-BFC1-08002BE10318}\0007\0\W\xffe0\xffffv\5\24\07\1\0\1 Cast\xffd8\xffffv\v\4FinlNm #\xffc8\xffffST932032 5AS USB Device\0(L\xffc8\xffff\xaac09\xe340=:Ø>¸FF˜F¸F\xd7b8:hFàFøF06\xff98\xffffn \xe590ÓÊ\0\0¨F\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffffè>\xffff\xffff\0\0\0\0\0\0\0\0\0\0\21\0Dvc aaees\0\?¨\xffffn \xe590ÓÊ\0\0¨F\0\0\0\0\xffff\xffff\xffff\xffff\0\0\xffff\xffff€;\xffff\xffff\0\0\0\0\0\0\0\0\1\0\a\0Lgof\xffe0\xffff\x30a0F\x30c0F\x2938F\x2960F\x29a0F\x2a20Fbl\xffd8\xffffv\v\4r\0\0\xffd8\xffffv\tN\0\0\0\0\0\0\5\0Prs\37 \xffffn ¬v€Ê\0\0\xed90\b\1\0\0\0ø\31\xffff\xffff\1\089€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_\x3042B81\xffe0\xffffø=?\x1c18F?¨H@H\0e \xffffn j\x2cf0ŠÊ\0\0\xed90\b\1\0\0\00\32\xffff\xffff\1\0˜9€;\xffff\xffff\b\0\0\0\30\0\4\08\0\17\0LGC\x335f5C\x30448\b\0\0e¨\xffffn œrŒÊ\0\0€>\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xf6c0=€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0v06\xffd8\xffffv\n\22\008\1\0\0011DvcDs\0\? \xffffn ô¯ŒÊ\0\0\xed90\b\1\0\0\0¨\e\xffff\xffff\1\0(\6€;\xffff\xffff\b\0\0\0\30\0\4\0Ý\0\17\0LGC_\x3242C8B\xffd8\xffffv\f\4\xffffv\6\4\xffe0\xffff¸>˜F¸FàF F FWS\xffd8\xffffv\v\4\xffe0\xffffA\xa9c8DèFFPFÐF12 \xffffn è\xe9e7Ê\0\0\xed90\b\1\0\0\0 \32\xffff\xffff\1\0\xf1e81€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_2\x3030\x32454¨\xffffn œ\xe9ecÊ\0\0F\0\0\0\0\xffff\xffff\xffff\xffff\6\0PF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030cc\xffd8\xffffv\tN\0øF\1\0\18CasUD912¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000723\xffe0\xffffÐ8à9B09ÐFxF\0: \xffffn \xf5d4\xea98ºÊ\0\0\xed90\b\1\0\0\0H\32\xffff\xffff\1\09€;\xffff\xffff\b\0\0\0\30\0\4\0l\0\17\0LGC_AA\x3242D¨\xffffn \xf5d4\xea98ºÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\6\0€F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030cc¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0MP\\xffe0\xffff\xdc489°:\xff08:ð;à<Ð>06 \xffffn \x2214\xf0dbºÊ\0\0\xed90\b\1\0\0\0ø\32\xffff\xffff\1\0\xa708;€;\xffff\xffff\b\0\0\0\30\0\4\0>\0\17\0LGC\x335fA0CF\xfff0\xffffl\10F\x2140&¨\xffffn œrŒÊ\0\0ð>\0\0\0\0\xffff\xffff\xffff\xffff\6\0x<€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0v06 \xffffn ô¯ŒÊ\0\0\xe898\31\1\0\0\0\x1db8\31\xffff\xffff\1\0\xd9201€;\xffff\xffff\b\0\0\0\30\0\4\0Ý\0\17\0LGC_\x3242C8B¨\xffffn ô¯ŒÊ\0\0ÀF\0\0\0\0\xffff\xffff\xffff\xffff\6\0øF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030C:¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0y_s\xffd8\xffffv\n\22\0@5\1\0\0012DvcDs805\xffe0\xffff\xff10C\xff90C\x26c8F\x2a58F\x2d30FÐFro \xffffn œ\xe9ecÊ\0\0\xed90\b\1\0\0\0\xf4f8\32\xffff\xffff\1\0\xeea0\a€;\xffff\xffff\b\0\0\0\30\0\4\0s\0\17\0LGC_D7\x3043B\xffd8\xffffv\n\22\0\x2990\37\1\0\1\DvcDsNDO\xffd8\xffffv\f\4v\6\4\x3030@ \xffd8\xffffv\tN\0¸F\1\0\1$CasUD$H$\xffd8\xffffv\n\22\0È!\1\0\0017DvcDs\0\0001\xfff0\xffffl\1hF\x2140&\xffd8\xffffv\tN\0ÈF\1\0\1NCasUDTEM¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0:\W\xffd8\xffffv\n\22\0\xf8285\1\0\1\DvcDsoxy\xffe0\xffff\xf5501°5(>0< F F12 \xffffn þ\x322cŠÊ\0\0\xed90\b\1\0\0\0 \32\xffff\xffff\1\0\x27d8\6€;\xffff\xffff\b\0\0\0\30\0\4\0î\0\17\0LGC_1463\xffd8\xffffv\f\4\0\0\0\26\0N\0\0\0\4\0\x3030\x303070\xffe0\xffffv\a\22\0À1\1\0\1NSrie\xffe0\xffffv\6\4C055D-047F-11D1-A537-0000F8753ED1}\000012\xffd8\xffffv\n\22\0Ø6\1\0\1?DvcDsWIN\xffe0\xffffHFhFˆF°FðFpFro¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0E78 \xffffn \x3232w'Ê\0\0\xed90\b\1\0\0\0Ø\32\xffff\xffff\1\0Ø\a€;\xffff\xffff\b\0\0\0\30\0\4\0\x99\0\17\0LGC_4DB3\xffd8\xffffv\f\4\0`F\1\0\0012CasUD415¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000012\xffd8\xffffv\n\22\0@1\1\0\1?DvcDsWIN\xffe0\xffffXAPAðF\xd948D8F¸Fro\xffe0\xffffpdfcmnnt.dll\0 \xfff0\xffffl\1 F\x2140&\b\0\0S\xffe0\xffffv\5\32\0`H\1\0\1\31CasD\b\00\21\xffe0\xffffv\a\22\0p\37\1\0\1!Srie\xffe0\xffffv\6\4\b\0\0\0\30\0\4\08\0\17\0LGC\x335f5C\x30448¨\xffffn j\x2cf0ŠÊ\0\0øF\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xe878;€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030 ¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0:\W¨\xffffn úâðÊ\0\0 F\0\0\0\0\xffff\xffff\xffff\xffff\6\0C€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030da¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0sta\xfff0\xffffl\1¨F\x2140& \xffffn þ\x322cŠÊ\0\0\xe898\31\1\0\0\0 \e\xffff\xffff\1\0\xf640\31€;\xffff\xffff\b\0\0\0\30\0\4\0î\0\17\0LGC_1463¨\xffffn þ\x322cŠÊ\0\0ÈF\0\0\0\0\xffff\xffff\xffff\xffff\6\0\x560>€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303070¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000012\xffd8\xffffv\tN\0000F8753ED1}\0:\W\xffd8\xffffv\n\22\0°$\1\0\1\DvcDsoxy\xffe8\xffff30fad6a6\0v\xffd8\xffffv\f\4\0\1oCass\b\0r\0\xffe0\xffff\xf1281h;À<@?8D\xd7d8D\x24508\b\0P\21\xffd8\xffffv\tN\0F\1\0\1NCasUDTEM\b\0\xe020G¨\xffffn œE'Ê\0\0537-0000F8753ED1}\0E78 \xffffn \x3232w'Ê\0\0\xe898\31\1\0\0\00\30\xffff\xffff\1\0P\a€;\xffff\xffff\b\0\0\0\30\0\4\0\x99\0\17\0LGC_4DB3¨\xffffn \x3232w'Ê\0\0hF\0\0\0\0\xffff\xffff\xffff\xffff\6\0øF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303086\xfff0\xffffl\1\xe378E\xe2d0\xe465¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000012 \xffffn Öp(Ê\0\0\xed90\b\1\0\0\08\36\xffff\xffff\1\0¨<€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_6A87¨\xffffn \x1930s(Ê\0\0ˆF\0\0\0\0\xffff\xffff\xffff\xffff\6\0(F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030_s\xffe0\xffffv\5\32\0`F\1\0\0012Cas2\xffe0\xffffLegacyDriver\0N\xffd8\xffffv\tN\0¨F\1\0\1tCasUDy_s¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\ht\xffd8\xffffv\n\22\0<\x30e0FˆF@F€F\xffffv\n\22\0€5\1\0\1\DvcDsoxy \xffffn è\xe9e7Ê\0\0\xe898\31\1\0\0\0\xab60\32\xffff\xffff\1\0\xeff8\a€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_2\x3030\x32454\xffd8\xffffv\f\4\xffff\6\0¸F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030cc\xffe0\xffffv\a\22\0°3\1\0\1\0Srie\xffe0\xffffv\6\4\tN\08F\1\0\18CasUD912¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\000723\xffd8\xffffv\n\22\09\1\0\1\DvcDsNDO\xffe0\xffffhFˆF¨FÐFFFro \xffffn r\xf3fdÆÊ\0\0\xed90\b\1\0\0\0¸\31\xffff\xffff\1\0\x2980\b€;\xffff\xffff\b\0\0\0\30\0\4\0\0\17\0LGC_BC0C¨\xffffn r\xf3fdÆÊ\0\0ØF\0\0\0\0\xffff\xffff\xffff\xffff\6\0ˆH€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030ou\xffe0\xffffv\a\22\0 6\1\0\1sSrie\xffe0\xffffv\6\4\0\0\0\0 \xffffs?F`I\2\0D\0\1(\08\0\0\0\24\0\2\f\0\0\30?\17\0\0\x500 \0\x220\0\xa00\24?\37\0\0\x300\0\0\0\0\x500 \0#\0\xffffLegacyDriver\0\0\xffd8\xffffv\tN\0F\1\0\18CasUD5D-¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0pro\xffd8\xffffv\n\26\0F\1\0\0014DvcDs261\xffe0\xffffPROCEXP113\0:\W\xffe0\xffffFXF€F¨FèFhFtp\xffe0\xffffv\5\32\0ðF\1\0\18Cas1\xffe0\xffffLegacyDriver\0?\xffd8\xffffv\tN\08F\1\0\1SCasUD\ht¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0OWS\xffd8\xffffv\n\b\0 F\1\0\1oDvcDsv07\xffe0\xffff¸FØFøFÐFFF75Ð\xffffs?ð<F\b\0\0\1ü\0\0\0\0\24\0\2è\n\0\0\0\0\x500\22\0¸\xffffs1ØF\0\4\00\0\1\0$\0\0\0\24\0\2\0\x1a00\30\0tions quand ces informations changent.\0sf8\0\x32a8 0 p ð 8 Ø \x31f8 P $\x31d8 p ÐFèl0\0v\v\x98\0øF\1\0\1\0Dsrpin\0\0\b\0d\0\xffe8\xffffda1190bb\0\0\xffe8\xffffb114c44a\0\0\xffe0\xffffv\a\22\07\1\0\1!Srie\xfff8\xffff¸F\xffd8\xffffv\f\4\1tCnr\x206cTp_s\xffe0\xffffv\a\22\0À?\1\0\1}Srie\xffe0\xffffv\6\4êté, ces fonctions ne seront pas disponibles. Si ce service est désactivé, les services qui en dépendent ne pourront pas démarrer.\0\0P\0Bouton de fonctionnalité définie ACPI\0¨\xffffn \xaad8læÊ\0\0À?\0\0\0\0\xffff\xffff\xffff\xffff\6\0˜F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030F\30\0\x27288\x29288\x24508\b\0P\21\xffd8\xffffv\v\4zæÊ\0\0\xed90\b\1\0\0\0F\xffff\xffff\1\0(F€;\xffff\xffff\b\0\0\0\30\0\4\0'\0\17\0LGC_\x3237987\xffd8\xffffv\f\4\xffffv\v\48\x22d88\x27288\x29288\x24508\x24a88P\21\xffd8\xffffv\v\4\xd9d8\31p5\31p?F \xffffn \xf8f4zæÊ\0\0\xe898\31\1\0\0\08F\xffff\xffff\1\0Ø:€;\xffff\xffff\b\0\0\0\30\0\4\0'\0\17\0LGC_\x3237987¨\xffffn \xf8f4zæÊ\0\0àF\0\0\0\0\xffff\xffff\xffff\xffff\6\0èF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303075\xffe0\xffffv\a\22\0\x9d8 \1\0\1vSrie\xffe0\xffffv\6\4\xffffv\n\22\0;\1\0\0010DvcDs476\xffe0\xffff˜F¸FØF\37 $Ð9h\37\x1db0F\x2248\34\xffe0\xffffv\4\4;\xa790;ð<\xf860=?ce\xffe8\xffffcba24068\0t\xffe8\xffff0bd85afb\0<\xffe0\xffffv\6\40\0\32\e\x1bf0\36\xfe08\36 \36 \37p\376Ø\37F\0\0\xffe0\xffffLegacyDriver\0i\xffe8\xffffDriver\0$\xa9c0:8\0\32\xf98\eÈ\36(\36P\36\36ð \x1390 \x1dd8 8 H 8F\0c\xffe0\xffff\x0e60F\x1df8F8FF`FàF\0\0\xffd8\xffffv\f\4\xffffX:È;\x2388;\x2bb8<ØFPFp\27(\0v\v:\0ÐF\1\0\1\0Dsrpin\0\0\xffe8\xffffacabbe45\0  \xffffn $\xfada#Ê\0\0@\26\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xe698;\x2088"\xffff\xffff\0\0\0\0\0\0\20\0\21\0\16\0PVytmtr8 \xffffn Ê\xfad7#Ê\0\0@\26\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xffff\1\0ˆF\x2088"\xffff\xffff\0\0\0\0\0\0\16\0+\0\r\0poep\x2e30Ss8@\0Planificateur de paquets QoS\0\0\xfff0\xffffl\1àF\x2140&\xffe0\xffffv\4J\0\xf528F\1\0\1:FlIN\xffe8\xffff29dff27d\0K \xffffC:\Program Files\Java\jre6\lib\ext\QTJava.zip\0\b\0\0\0 \xffffn þøoÊ\0\0\xe898\31\1\0\0\0àF\xffff\xffff\1\0¨6€;\xffff\xffff\b\0\0\0\30\0\4\0>\0\17\0LGC_4AA8¨\xffffn þøoÊ\0\0ÀF\0\0\0\0\xffff\xffff\xffff\xffff\6\0F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030??\xffd8\xffffv\v\4\xffffv\5\32\0ÀF\1\0\1\34Ca\x2e73<\xffe0\xffffLegacyDriver\0C\xffd8\xffffv\tN\0F\1\0\1\0CasUDC:\¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\00057\0\b\0I\0\xffe0\xffffv\5\32\00F\1\0\1vCas\0 \xffffn Ê\xfad7#Ê\0\0\0"\xffff\xffff\0\0\0\0\0\0\20\0\21\0\16\0PVytmtr8 \xffffn $\xfada#Ê\0\0P\5\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xf758;\x2088"\xffff\xffff\0\0\0\0\0\0\20\0&\0\16\0PVytmtrs\x320\0Coordonne les transactions qui comportent plusieurs gestionnaires de ressources, tels que des bases de données, des files d'attente de messages net des systèmes de fichiers. Si ce service est arrêté, ces transactions ne se produiront pas. S'il est désactivé, le démarrage de tout service qui en dépend explicitement échouera. \0\0\0\0000\0h\36 pilotes de gestion de sécurité IP et ISAKMP/Oakley (IKE).\0\0rie\xa8\0\x1a00\e°\e\36\xff10\368\36Ø\36\x3218 Ð ˆF¨Fp (\0v\v6\0˜F\1\0\1\0Dsrpin\0\0P\0x\34\xa4a8\36\xf3c0\36\xf890\37\xee30 \xf3e8\36 !\xe368$(!<(! \0MBAMSwissArmy\0\xffe8\xffff06defd87\0\0\xffe0\xffffv\6\4I\xffe8\xffff4a0bd737\08\xffe8\xfffff1bbe1bb\0\32\xffe0\xffffv\a\22\0\xa680F\1\0\1\0Srie8\0p ¨ H ` ˆ ¸ ° @ es\b\0\0c\xffd8\xffffv\nl\0F\a\0\1BHrwrI424ø\0p\32\xe348\36à À ° \x2d18\36P è h 8 ¨ ø p 0 @:\xb8\08\31\xe888\36˜\31Ø\32€\37ø\37x \37\31¸ Ø ( ¨ \32\xfe48\36h\37\x860 \26¨\26 \26\xf270\26¨\26\xf0a0\26\xf0d8\26\xf110\26\xf140\26À#Ð\26è#\26\x21b03\x21e03¸\21\b\0ø9 \xffffn \xaad8læÊ\0\0\xed90\b\1\0\0\0\xa938F\xffff\xffff\1\0\xde48F€;\xffff\xffff\b\0\0\0\30\0\4\0\x8d\0\17\0LGC_\x33439A1¨\xffffn \xaad8læÊ\0\0@F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xddb8E€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030F\20\0\x2465!\b\0\0\0\xffd8\xffffv\f\4 du protocole TCP/IP\0\0\0\0\30\0ˆ ¸ ° @ 53\xffd8\xffffv\tN\0¸N\1\0\1mCasUDbeaP\0Pilote de liaison parallèle directe\0\0\0\xffe0\xffffv\4P\0\xf6f8F\1\0\1 Flng\xffe0\xffffv\5\32\0€K\1\0\1MCast\b\0\0\0\xffe0\xffffH:\x2bd8<\x2bf8<\xea98= F€F\0\0\0NT AUTHORITY\LocalService\0x\0Fournit la configuration automatique des cartes 802.11\0s_mX\0Assure la communication efficace entre les composants BitDefender\0Ð\08\31\x9e8\320\e\x1b68\e\xf1e8\e x $˜  Fp \xa0\0v\eþ\1F\a\0\1!Pnigieeaeprtos!\20\0!p$0FX\0Windows de créer, modifier et accéder à des fichiers Internet. Si ce service est arrêté, Ces fonctions ne seront pas disponibles. Si ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.\0\0(\0v\v\x2d4\0°F\1\0\1\0Dsrpin\0\0(\0v\r\2OjcNmI\x2d16¾0\0Pilote de port série\0\0\xffe0\xffffv\5\32\0F\1\0\1aCas\0\xffe0\xffffv\6\4s applications et des services. Si ce service est arrêté, la plupart des logiciels sur base Windows ne fonctionneront pas correctement. Si ce service est désactivé, tout service qui en dépend explicitement ne démarrera pas.\0000\0à\36\x1940!\x19c8!h5\x1b20!XFD-0\0\xa558\37\1\0\1\0OjcNm\0\0\0`\0%SystemRoot%\System32\svchost -k DComLaunch\0\0\0\xffe0\xffffLegacyDriver\0\0\xffe0\xffffv\6\4\xffffv\5\32\0XF\1\0\1}Cas1\xffe0\xffffv\6\4el\xffd8\xffffv\tN\0àN\1\0\1 CasUD\e€\e\xffe0\xffff\x2db88P8\xe920:ˆFÈF8N\0\0\xffd8\xffffv\n4\0PI\1\0\1-DvcDs11C\20\0\1\tDie\t\xffe0\xffffv\6\4!\x25e8!\x1920!\x1cb0!\x1b48!FèF \xa8\0¸\e8\36°\37è !X!0!ˆ!è!ˆ!!8!!p$Ð h\0n \xff94\x2c39øÊ\0\0`\n\0\0\0\0\xffff\xffff\xffff\xffff\6\0¸\17\xffff\xffff\xffff\xffff\0\0\0\0\30\0d\0n\0\r\0MASisryp\b\0rs\xffe0\xffffv\5\b\0P\32\1\0\1?Cas:¨\xffffn 2$Ê\0\0x\n\0\0\0\0\xffff\xffff\xffff\xffff\3\0¸\32\x2088"\xffff\xffff\0\0\0\0\30\0.\0\0\0\4\0Eu89\xffc8\xffffRoot\LEGACY_CISVC\0000\0pro¸\xffff%systemroot%\system32\imapi.exe\0IN¨\xffffn ž¬øÊ\0\0`\n\0\0\1\0\xffff\xffff\x1bf8\b\0\0\0\30\0d\0#\0\a\0cthe\xffd8\xffffv\td\0\0\0\16\0LGC_ACM_\xffd8\xffffv\f\4\0\0\4\0\1\0CniFasrt\xffe0\xffffv\5\32\0ðF\1\0\1:Cast\xffe0\xffffLegacyDriver\0\0\xffd8\xffffv\tN\08F\1\0\1`CasUD\2\0¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\x500\22\0\xffd8\xffffv\n\20\0èF\1\0\1\nDvcDs\0\1:\xffe0\xffffv\3\30\0F\1\0\1MMght \xffffn V$Ê\0\0\xed90\b\1\0\0\0è\17\xffff\xffff\1\0F€;\xffff\xffff\b\0\0\0\30\0\4\0Œ\0\n\0LGC_BT\25\0\xffd8\xffffv\f\4\1\0\xffe0\xffffv\a\b\0\xdff0\32\1\0\1?Srie\xffe0\xffffv\6\4v\f\4PF\1\0\0?¸\xffffsW°O F\4\0,\0\1\0 \0\0\0\24\0\2ü\v\0\0\0\x500 \0#\0\x1a00\30\0\xffff\1\0!€;\xffff\xffff\b\0\0\0\30\0\4\0k\0\17\0LGC_B900¨\xffffn \x1d9aæÊ\0\0 F\0\0\0\0\xffff\xffff\xffff\xffff\6\0è=€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303008\xfff0\xffffl\1€F\x2140&\xffd8\xffffv\v\4N\08F\1\0\1tCasUDycc¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0MP\\xffd8\xffffv\n\22\0¸F\1\0\1tDvcDs242\xffe8\xfffffb19e080\0006 \xffffn \xe24eêÊ\0\0\xed90\b\1\0\0\0¸F\xffff\xffff\1\0XF€;\xffff\xffff\b\0\0\0\30\0\4\0005\0\17\0LGC\x325f39\x3241F\xffd8\xffffv\f\4\4\0\18CniFas31\xffe0\xffffv\5\32\00F\1\0\1WCasO\xffe0\xffffLegacyDriver\0y\xffd8\xffffv\tN\0xF\1\0\0010CasUD182¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0807H\xffffG:\Ordi-Jeux\Steam\SteamApps\bean147\counter-strike\hl.exe:*:Enabled:Half-Life Launcher\0\0?\20\0l\0\xdf28F\xe2d0\xe465 \xffffn \xbe8~$Ê\0\0\xe898\31\1\0\0\0\xa518F\xffff\xffff\1\0À$€;\xffff\xffff\b\0\0\0\30\0\4\0\0\16\0LGC_ACM_\xffe0\xffffLegacyDriver\0!\xfff0\xffffl\1F\x2140&\xffe8\xffffcatchme\0\x20208 \0Recueille et stocke les informations de configuration et d'emplacement réseau, et notifie les applications quand ces informations changent.\0sf\xffe0\xffffv\5\32\0DD-812A-11D0-BEC7-08002BE2092F}\000190 \xffffF:\Alien Arena 2008\crx.exe:*:Disabled:crx\0sta \xffff{71A27CDD-812A-11D0-BEC7-08002BE2092F}\0002\0_tØ\0\1\x90\0\x9c\0\24\0000\0\2\34\1\0\24ÿ\17\0\0 \0\x220\0\0\24\2\0\0\x500\v\0\0\30ý\2\0\0\x500 \0#\0\0\0\x500\22\0\0\0\x500\22\0 I(\0v\f\4\0011Cas1\x220\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\0.\0\0P\xffffC:\Program Files\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3\0s\\x98\0%SystemRoot%\System32\svchost -k DComLaunch\0\0\08\0NT AUTHORITY\LocalService\0\xff60\xffffG:\Ordi-Jeux\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update\000354h\0n :\x2c37øÊ\0\0\xed90\b\0\0\0\0\xffff\xffff\xffff\xffff\1\0(F\xffff\xffff\xffff\xffff\0\0\0\0\30\0\4\0ED\24\0LGC_BMWSAMmp\xffe0\xffffv\a\22\0ØF\1\0\1tSrie\xfff8\xffffÀF\xffc0\xffffWD 1600BEVExternal USB Device\0\xffc8\xffff5@5 \e86È6 8à1h8\xee80 @1x3(8)\0X\0Pilote du Gestionnaire de volume\0\0\20\0l\0(F\x2140&\xfff8\xffffF\xffe0\xffffà5h= I\x618>ÈH\x1800Ish\xfff8\xffffxF0\0v\v\34\0èF\1\0\1\35Dslyae˜\36\b\0\xa880F\xfff8\xffff°F\xffe8\xffff8c195ac5\0N°\xffffv1\xa2\0F\1\0\1rC\rga ie\kp\lg\x206eMngrsye\x2e4dee le8\005(5Ø53x:\xe478:< 5¨55ˆ5\x1778=ð?\xffe8\xffffacabbe45\0002\xffe8\xffff4395f82c\0\0X\xffffC:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager\0o°\xffffv8\x8e\0hF\1\0\18G\ta\taAp\en4\one-ti\x2065suc\\x326c.x\xffe0\xffffLegacyDriver\0\0\xffc0\xffff(Lecteurs de disque standard)\0\xffe0\xffffLegacyDriver\0p\b\0˜F\xffe0\xffffv\6\4oxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\0\0v\t \0\x5b8G\2\0\1\0Iaeah\0\0\0\xffc0\xffffv!r\08F\1\0\1;C\ol \x2066Wrrf\anh\x2e72eeKpI0\0MBAMSwissArmy\0\20\0d\aF\0\0\xffe8\xffff93752439\0I\xffe8\xffffed503741\0\0\xffe0\xffffv\6\4\0\0X\xffffC:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Disabled:Windows Live Call\0\0\0¸\xffffv/\x8e\0¨F\1\0\18C\rga ie\ei2Fac\ei2le\x2e74bn\xffe0\xffffLegacyDriver\0:\xffd8\xffffv\tN\0€K\1\0\1tCasUDe\0\0à\0NT AUTHORITY\LocalService\0(\0v\vÐ\0\xe330F\1\0\1\0Dsrpin\0\0000\0x\34˜\34¸\34à\34\xda18\35ø\35ø\350F¸F0\0v\6\4\xffffLegacyDriver\0?\xffd8\xffffv\tN\0hF\1\0\1SCasUD\ht¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0OWS\xffd8\xffffv\n\b\0H\32\1\0\1oDvcDsv07\xffe0\xffff\x28308\xdbd0FØFWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\0l\30\0\0t\20\0 E\x2020G\xe020F\xffe0\xffffv\5\32\0H\1\0\0012CasS\xffc8\xffffv\e\4rie\xfff0\xffffl\1 F\x2140&Ð\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\0 \0s démarrer.\0\0\0°\xffffv2\xa2\0\x5f8G\1\0\1<C\ol \x2066Wrrf\o\x332d\x322e\x302e-r\x2d52dwlae.x=\xf7b8@\xffe0\xffffLegacyDriver\0B\xffe0\xffff\xec68E\xec88E\xeca8E\xecd0ExHøH°F\xffd0\xffffv\23H\0\xfd48F\1\0\1oLctoIfraint)\xffd8\xffffv\n\22\0F\1\0\1pDvcDs410\xff68\xffffC:\Program Files\Metin2_France\metin2client.bin:*:Enabled:metin2client\0\0\0?\x348\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\0 À\0 ce service est désactivé, tout service en dépendant explicitement ne démarrera pas.\0\0\20\0pas.\0\0\xff10\xffffn \x30323#b056-e\x2d39\x30344-c\x2d31151f85}\0\0¨\xffffn øÊ\0\0pF\0\0\0\0\xffff\xffff\xffff\xffff\a\0ÈF\xffff\xffff\xffff\xffff\0\0\0\0\26\0X\0as\4\0\x3030\x3030!\b\0!\xff88\xffffC:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype \0:E\30\00;8F˜8\b\0\0\0\xffe0\xffffApple, Inc.\0DB\xff88\xffffC:\World of Warcraft\Launcher.exe:*:Enabled:Launcher.exe\0\0x\0n R:øÊ
                  0
                  1. bean147
                    R:øÊ\0\0`\n\0\0\0\0\xffff\xffff\xffff\xffff\b\0@\17\xffff\xffff\xffff\xffff\0\0\0\0\30\0<\0O\0\5\0fhj2 \000772062\0\0\0\0\b\0_m\xffd8\xffffv\20\4exe:*:Enabled:Steam 732897\0\xffe0\xffffv\5\32\0ØH\1\0\1<Cas\0\xffe0\xffffv\5\32\0ÀK\1\0\0011Cas1\xffe8\xffffcatchme\0(\30\xffe0\xffffv\6\4xE\xffe0\xffffLegacyDriver\0006\xffe0\xffffÀ9F\xddd8F\xd8a8FèFhFh 8\0E0FPFÀF°F˜Fè\17\30\0érie\0\0\b\0\0\0\xffe0\xffffLegacyDriver\08\xffe0\xffffv\6\4\0\b\0_t\xffc8\xffffÈ3Ð3P3à3à33¸3è3 3X3ˆ3ð6ta\xffc0\xffffv&p\0ˆF\1\0\1@C\rga ie\kp\hn\kp.x40\0v\v\4\4\0\1cNxIsacv\f\xfff0\xffffl\1K\xe918H\xfff8\xffff8F¨\xffffn ž¬øÊ\0\0\xa498F\1\0\0\0@\e\xffff\xffff\b\0H?€;\xffff\xffff\16\0\0\0\30\0X\0\0\0\4\0\x3030\x3030/R\xa8\0v\n\30\0\xff60\36\1\0\1\0OjcNm\0\0\0\x80\0Service de transfert intelligent en arrière-plan\0\0\30\0ère-plan\0\0\xffe0\xffffv\6\4sieurs gestionnaires de ressources, tels que des bases de données, des files d'attente de messages net des systèmes de fichiers. Si ce service est arrêté, ces transactions ne se produiront pas. S'il est désactivé, le démarrage de tout service qui en dépend explicitement échouera. \0\0\0\0 \xffffC:\Program Files\DNA\btdna.exe:*:Enabled:DNA\0\0\xffd8\xffffv\n\22\0\xf1a0>\1\0\1\27DvcDs\27Ø1\20\0rtos!\xff88\xffffn \x2428ß&Ê\0\0ø\23\2\0\0\0xE\xffff\xffff\0\0\xffff\xffff\0\xffff\xffff6\0\0\0\0\0\0\0*\0&\0{d21\x2d37d1-a\x2d369b\x312d1\x3235\x3332656o\20\0000\0\0s˜F\xffd8\xffffv\n\22\007\1\0\1\DvcDsNDO8\0 O E\xe020N\x2020G G D\x2020D\30\0ea\20\0rtos!\xffe0\xffffLegacyDriver\0\0\xffd8\xffffv\tN\0\x6f8G\1\0\1NCasUDTEM\30\0\x19c83\20\0H\30\b\0\x21b03\xffe0\xffffv\6\4\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x30301}\xffe0\xffffPROCEXP113\0Sys\xffe0\xffffv\6\4D-¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0pro\xffd8\xffffv\n\26\0€F\1\0\0014DvcDs261\xffe0\xffffPROCEXP113\0:\W\xffe0\xffff8$PFpF˜FØFXFp\0310\0v\5\32\0\xf8e8F\1\0\1!Ca\x1973!\20\0\x1b20!`F\x32c8 \xfff0\xffffBase\0\xe465\xffe0\xffffLegacyDriver\0\0\xffe0\xffffv\5\32\0F\1\0\1\tCas\t\xffd8\xffffv\v\4\xef70\30\xffff\xffff\1\0p5€;\xffff\xffff\b\0\0\0\30\0\4\0005\0\17\0LGC\x325f39\x3241F¨\xffffn \xe24eêÊ\0\0acyDriver\0y\xffd8\xffffv\tN\0 F\1\0\0010CasUD182¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0807\xffe0\xffffv\6\4:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager\0\0 \xffffn žýáÊ\0\0\xed90\b\1\0\0\0G\xffff\xffff\1\0c\0\xffd8\xffffv\f\4\0\1\DvcDsoxy\30\0è\30 \30 \300\30ts\xffd8\xffffv\v\4\xffff\xffff\16\0\0\0\30\0\xac\0\0\0\a\0#\x3042\x30300\xffe0\xffffv\5\32\0ˆF\1\0\1sCasA\30\0\xe7f8\30 #\xe9a8\30\b\0\xdb68\30\xffe0\xffffv\a\22\0Ð5\1\0\1 Srie\xffe0\xffffH!HF\x2848H\xa660F¸H˜Hr\0\xffe0\xffffv\6\4&\xff90\xffffCompatibilité avec le Changement rapide d'utilisateur\0 \xffffn @ãÊ\0\0\xe898\31\1\0\0\0\xd9d0\32\xffff\xffff\1\0\xf350\n€;\xffff\xffff\b\0\0\0\30\0\4\0i\0\17\0LGC_B900\xffd8\xffffv\f\4F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xdbb0F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303008\xffd8\xffffv\v\4ECC055D-047F-11D1-A537-0000F8753ED1}\0MP\\xffd8\xffffv\n\22\0à;\1\0\1tDvcDs242\xffe0\xffff\xa6509xF\xdaa0F\xdac8F\xdb08F\xdb88FD2\xffe0\xffffv\6\4v\v\4\4\0\1NCniFasEM\xffd8\xffffv\n\26\0PF\1\0\1NDvcDsspM\xffe0\xffffLegacyDriver\0005\xfff8\xffff@F\xffe0\xffff°:0FøHÀF\x2fd0I\x3068I\0\0¨\xffffn V$Ê\0\0xF\0\0\0\0\xffff\xffff\xffff\xffff\6\0èF€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030\1\0 \xffffvAò\0ˆH\1\0\0013G\ta\taAp\omncl \x2066dt oe\x206ewra\x20652i4\x2e70eetmpX\0n \xe676TèÊ\0\0 F\0\0\0\0\xffff\xffff\xffff\xffff\1\0\xe9f0E\xffff\xffff\xffff\xffff\0\0\0\0\20\0\xa8\0ED\b\0Scrt\xffe0\xffffv\5\32\0ÐG\1\0\1\0Casm\xffe0\xffffv\a\22\03\1\0\1\37Srie\xffe0\xffff\xf0601\x2140;ÈB\x22f8;èH\xf3b8Hn\0\xffe0\xffffv\6\4\xe3e0\32à\32˜\32À\32 ;¨B`D\xe0a0F\0\0000\0\xf558\t\xdec0\32\xdba8\32\xe650\32\xe020\32\xe040\32\xdf10:\xe3d8:@DðDA-0\0v\24\4\xffff¸\32h5À\ep5@5à606\xa80855¸5x5h66 \xffff{4D36E979-E325-11CE-BFC1-08002BE10318}\0000\00013¨\xffffn ¨ŠÊ\0\0\34\0\0\0\0\xffff\xffff\xffff\xffff\2\0¨\32\0\xffff\xffff\0\0\0\0 \0<\0F\0\5\0XieD\xffc0\xffffC:\WINDOWS\system32\xlive.dll\0\x5b8\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A790101264779556\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A790101264779556\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264779556\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264779556\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A5C0001264779561\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06ABF0101264779560\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AF70181264779561\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A5D0781264779564\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B1D0101264779568\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B6A0101264779572\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A670081264779576\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A6B0081264779580\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A6E0081264779584\0\0\0\X\0tproxycc_tmp08E481601264604209\0\0\0c\20\0ion\0\0o\xff98\xffffn âLúÊ\0\0\34\0\0\0\0\xffff\xffff\xffff\xffff\2\0˜\32\0\xffff\xffff\0\0\0\0 \0T\0\27\0\23\0Mcoo\x2074Ofc 212\xffd8\xffffv\20T\0\xede8F\1\0\1uEetesgFl\20\0 O E\xe020N \xffffn Z&jÊ\0\0\xe898\31\1\0\0\0\x1060G\xffff\xffff\1\0Ø=€;\xffff\xffff\b\0\0\0\30\0\4\0\xa5\0\17\0LGC_1E54¨\xffffn Z&jÊ\0\0\xe950F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xeab0F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030WS\xffd8\xffffv\tN\0\xea30F\1\0\1:CasUDOWS¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\C:\xffd8\xffffv\n\22\0Ø<\1\0\1MDvcDspro\xffe0\xffff8E0EPEðE\xea08F\xea88F25À\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0007\00038`\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0008\00007\xffd8\xffffWindows Installer\0\b\0\xeec0F \xffffn \xef22jÊ\0\0\xe898\31\1\0\0\0@G\xffff\xffff\1\0˜=€;\xffff\xffff\b\0\0\0\30\0\4\0\xf7\0\17\0LGC_9\x33379C¨\xffffn \xef22jÊ\0\0\xebc0F\0\0\0\0\xffff\xffff\xffff\xffff\6\0\xedc8F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030WS\xffe0\xffffv\a\22\0H\36\1\0\1\0Srie\xffe0\xffffv\6\4\xffffv\n\22\0¨B\1\0\19DvcDs012\xffe0\xffff\xec78F\xec98F\xecb8F\xece0F\xed20F\xeda0FP\¨\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\DW\DW20.EXE\0\xffd8\xffffv\16\4\0\0\0\0&\0`\0\31\0\a\0MDie\xffd8\xffffv\20`\0\xeee8F\1\0\1\0EetesgFl\xff98\xffffC:\PROGRA~1\FICHIE~1\SYSTEM\OLEDB~1\MSDMINE.DLL\0at\xffd0\xffffv\23`\0\xef80F\1\0\1nCtgrMsaeient\xff98\xffffC:\PROGRA~1\FICHIE~1\SYSTEM\OLEDB~1\MSDMINE.DLL\0ol\xffd8\xffffv\16\4v\20\x92\0\xf108F\1\0\1lEetesgFl\xff68\xffffC:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSSOAP30.DLL\0S\xffd0\xffffv\23\x92\0\xf1d0F\1\0\1iCtgrMsaeieAF\xff68\xffffC:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSSOAP30.DLL\0\0¨\xffffn ÂùÊ\0\0\34\0\0\0\0\xffff\xffff\xffff\xffff\3\0€\32\0\xffff\xffff\0\0\0\0 \0Z\0$\0\a\0Otok\xffd8\xffffv\20Z\0\xf2e8F\1\0\1\2EetesgFl \xffffC:\PROGRA~1\MICROS~4\Office12\1036\MAPIR.DLL\0S\xffd8\xffffv\16\4 ˆIúÊ\0\0X\34\1\0\0\0¸ \xffff\xffff\a\0\x0f10F\0\xffff\xffff>\0\0\0\36\0d\0\1\0\5\0Oig\0\xffd8\xffffv\17d\0\xf3f0F\1\0\1\xdfeeDslyaeie\xff98\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\OFFREL.DLL\0\xffd8\xffffv\r\4oft Office 12 Diagnostics\0ODiag\0\0ttp\xffd8\xffffv\r\f\0\34\1\0\1?PiayoueN\xffd8\xffffv\t\4\0 \0d\0\0\0\37\0Mcoo\x2074Ofc \x2032Dansis\xffd8\xffffv\20d\0\xf610F\1\0\1tEetesgFl\xff98\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\OFFREL.DLL\0\xffd8\xffffv\16\4\xffff8\0\0\0\36\0d\0\2\0\b\0Oeso¨\xffffC:\WINDOWS\system32\config\OSession.evt\0xy¨\xffffMicrosoft Office 12 Sessions\0OSession\0\000012\xffd8\xffffv\17d\0\xf7d0F\1\0\1BDslyaeie\xff98\xffffC:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\OFFREL.DLL\0\xffd8\xffffv\r\4281&Rev_0000\0USB\Vid_05ac&Pid_1281\0\08\xffffUSB\DevClass_00&SubClass_00&Prot_00\0USB\DevClass_00&SubClass_00\0USB\DevClass_00\0USB\COMPOSITE\0\0:\W\xffd8\xffffv\tN\0\xfa78F\1\0\19CasUD812¨\xffff{36FC9E60-C465-11CF-8056-444553540000}\0v09\xffd8\xffffv\v\4E\x1960F\xfad0F\xffd8\xffffv\f\x9c\0XF\1\0\19SmoiNm12\xff60\xffff\??\USB#Vid_05ac&Pid_1281#5&f7be307&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed}°\xffffApple Recovery (iBoot) USB Driver\0)\0WS°\xffffApple Mobile Device (Recovery Mode)\0\0\0\xffd8\xffffv\f\4B\DevClass_00\0USB\COMPOSITE\0\0MP\\xffd8\xffffv\tN\0\xff70F\1\0\1tCasUD8\0\0¨\xffff{36FC9E60-C465-11CF-8056-444553540000}\0812\xffe0\xffffv\a\20\0\32\1\0\0012Srie\b\0 F \xffff{36FC9E60-C465-11CF-8056-444553540000}\0024\0\0f\xffd8\xffffv\f>\0xG\1\0\0010FinlNm24¸\xffffApple Mobile Device USB Driver\0y_s\xffd8\xffffv\v\4Pid_1281#CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]#{a5dcbf10-6530-11d2-901f-00c04fb951ed}TEM\0Apple Mobile Device USB Driver\0\0v\b\x98\0\xdb80\32Ð6È6ˆ1è6Ð686Ø5 5È68644553540000}\0012\0\xf62070\0Ð\34Ø\34\34P\34`\34\35è1BÀ$ÐB\?\xffd8\xffffQUENTIN-5B4E2F4\0005\0\xffd0\xffffÈ\34ð\34Ð\34ø\34`\34ˆ\34Ð\34AACF0636A2C042EB7AD2AFF76D37B27BDD28C\0GEARAspiWD_F475AF659D36685632E9BD97B57E9D9661FF3FFD\0\0\0x\0\??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys\0\20\0sys\0\0\0X\xffffC:\World of Warcraft\WoW-3.2.0-frFR-downloader.exe:*:Enabled:Blizzard Downloader\0y°\xffffv6\xb4\0\x750G\1\0\1xC\rga ie\irsf fieOfc\x3231\ULO.X?\b\0 G¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0:\WH\xffffC:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook\0 \xffffvB\xac\0\x868G\1\0\1MC\rga ie\oie\x2068Tu\x2068Mu\x2065Sre\Tu\x2d68Sre-i.x\0\?P\xffffC:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe:*:Enabled:Logitech\0¨\xffffn žýáÊ\0\0°F\0\0\0\0\xffff\xffff\xffff\xffff\6\0€H€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x303012\xffe0\xffffv\5\32\0G\1\0\1$Cas$\xffe0\xffffLegacyDriver\0$\30\0Cardex\08€8\xff20\xffffG:\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2\00050A\xff90\xffffC:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes\0Fi\xfff0\xffffl\1G\x2140&0\0Traducteur d'adresses réseau IP\0\0\0`\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0010\00038P\0BitDefender Desktop Update Service\0\0\0\08\0Assistance TCP/IP NetBIOS\0¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\0\0\0x\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\0 \31 \0MBAMSwissArmy\0è\xffff%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\\0\0\? \xffffsp°;8;\2\0H\0\1,\0<\0\0\0\24\0\2\t\0?\17\0\0\x500 \0\x220\0del_107\_1\0ACPI\FixedButton\2&daba3f\0\0\x500 \0\x220\0\0\0\x500\22\0 \xffffn \xef22jÊ\0\0\xed90\b\1\0\0\0\xa9b0\e\xffff\xffff\1\0ð<€;\xffff\xffff\b\0\0\0\30\0\4\0\xf7\0\17\0LGC_9\x33379C \xffffn Ö\xf115Ê\0\0\xe898\31\1\0\0\0€\32\xffff\xffff\1\0\x0f30F€;\xffff\xffff\b\0\0\0\30\0\4\0b\0\17\0LGC_80B1\xfff0\xffffl\1\xe9b0F\x2140&\b\0\xec78F¨\xffffn \xef22jÊ\0\0 G\0\0\0\0\xffff\xffff\xffff\xffff\6\0pG€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030WS\xffe0\xffffLegacyDriver\0s¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\ht\xffd8\xffffv\n\22\0\x33a0 \1\0\19DvcDs012\xffe0\xffff8?àFF\xdf80F@FHGC: \xffffn Z&jÊ\0\0\xed90\b\1\0\0\0\xd7b8\e\xffff\xffff\1\0X\17€;\xffff\xffff\b\0\0\0\30\0\4\0\xa5\0\17\0LGC_1E54\xffd8\xffffv\f\4WS\xffe0\xffffv\5\32\0øG\1\0\1oCass\xffe0\xffffLegacyDriver\0005\xffd8\xffffv\tN\0@G\1\0\1:CasUDOWS¨\xffff{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\C:\xffd8\xffffv\n\22\0\x2218!\1\0\1MDvcDspro\xffe0\xffffpGG°GØGG\x1398G12¨\xffffn Ö\xf115Ê\0\0\0\0\xffff\xffff\xffff\xffff\6\0¨F€;\xffff\xffff\16\0\0\0\26\0N\0\0\0\4\0\x3030\x3030EM\b\0\x2020D\xfff0\xffffl\1\xec20F\x2140&¨\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0proX\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0\0\0\0X\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0vco@\0NVIDIA Display Driver Service\0`\0{8ECC055D-047F-11D1-A537-0000F8753ED1}\0022\0tp\xffe0\xffffv\aN\0\xf750F\a\0\1nSucs\xff18\xffffUSB\Vid_05ac&Pid_1281\CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]\0002¸\xffff\\?\USB#Vid_05ac&Pid_1281#CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]#{b8085869-feb9-404b-8cb1-1e5c14fa8c54}\0000\0\P\xffff\\?\USB#Vid_05ac&Pid_1281#5&f7be307&0&5#{ed82a167-d61a-4af6-9ab6-11e52236c576}\IB0000\0\xff18\xffffUSB\Vid_05ac&Pid_1281\CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]\0:°\xffff\\?\USB#Vid_05ac&Pid_1281#CPID:8720_CPRV:10_CPFM:03_SCEP:04_BDID:00_ECID:000002FAB219E577_IBFL:00_SRNM:[1A917A20203]#{ed82a167-d61a-4af6-9ab6-11e52236c576}\IB0000\09F6è\xffff%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\\0\0\?¸\0\??\C:\WINDOWS\TEMP\httproxy_srv067910081264772062\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067930F81264772066\0\0\??\C:\WINDOWS\TEMP\httproxy_srv067F20201264772086\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067D90101264772095\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp067DA0881264772096\0\0\0006\0\0À\0?\C:\WINDOWS\TEMP\httproxycc_tmp067F20101264767376\0\0\0?P\0Carte de performance WMI\0?\30\0(F8?ll\b\0s\0hi\x2000Gtproxy_srv07CAE1881264781883\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0706F0101264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06FBD2181264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07BA62381264781880\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp070200101264781936\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp070200101264781936\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B1D0101264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A720801264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AC70881264781879\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B010881264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AB20081264781883\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A530081264781882\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A5C0001264781950\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06A5C0001264781950\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06BE30181264781951\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06BE30181264781951\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06B000101264781961\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06B000101264781961\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp07BE50181264781963\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp07BE50181264781963\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07CA51001264781725\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A6B0081264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv070F90981264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06ADC0801264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06FE30181264781971\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07CCF2401264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06DC70181264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0720E0101264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06AB30801264781950\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071BD0901264781879\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071A20181264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07BF20A81264781880\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06BD80101264781967\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B0A0081264781975\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264781976\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06AD60101264781976\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07C82FD01264781977\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06ACA0081264781980\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06ACA0081264781980\0\0\??\C:\WINDOWS\TEMP\httproxycc_tmp06ACD0081264781975\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07C82FD01264781977\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B0A0081264781975\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06C110101264781973\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07B941281264781966\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06BCD0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06EC60181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B100801264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A180281264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A5D0781264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07C9C0781264781967\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06A790101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv07BDA0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06ABF0101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0711D0101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv0712C0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06C7E0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071BC0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv071FB0181264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_srv06B6A0101264781974\0\0\??\C:\WINDOWS\TEMP\httproxy_"

                    scanning hidden registry entries ...

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    "DeviceNotSelectedTimeout"="15"
                    "GDIProcessHandleQuota"=dword:00002710
                    "Spooler"="yes"
                    "swapdisk"=""
                    "TransmissionRetryTimeout"="90"
                    "USERProcessHandleQuota"=dword:00002710

                    scanning hidden files ...

                    scan completed successfully
                    hidden processes: 0
                    hidden services: 0
                    hidden files: 0

                    Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

                    device: opened successfully
                    user: MBR read successfully
                    kernel: MBR read successfully
                    user & kernel MBR OK

                    ==========
                    Programs
                    ==========

                    Activision
                    Adobe
                    AGEIA Technologies
                    AnalogX
                    Apple Software Update
                    BitDefender
                    Bonjour
                    Cheat Engine
                    CodeBlocks
                    Common Files
                    ComPlus Applications
                    DIFX
                    DNA
                    Dofus
                    DVDVideoSoft
                    Electronic Arts
                    EXPERTool
                    Fichiers communs
                    HP
                    IDoser v4
                    InstallShield Installation Information
                    Internet Explorer
                    iPod
                    iTunes
                    Java
                    List_Kill'em
                    Logitech Touch Mouse Server
                    Malwarebytes' Anti-Malware
                    Maxis
                    Messenger
                    Messenger Plus! Live
                    Metin2_France
                    Microsoft
                    microsoft frontpage
                    Microsoft Games for Windows - LIVE
                    Microsoft Office
                    Microsoft Sync Framework
                    Microsoft Visual Studio
                    Microsoft Works
                    Movie Maker
                    Mozilla Firefox
                    MSBuild
                    MSN
                    MSN Gaming Zone
                    Mumble
                    NetMeeting
                    Online Services
                    Outlook Express
                    PhotoFiltre
                    QuickTime
                    Realtek
                    Services en ligne
                    Skype
                    Spybot - Search & Destroy
                    Subagames
                    Teamspeak2_RC2
                    Transform XP to Vista
                    Ubisoft
                    Uninstall Information
                    Unreal Tournament 3
                    VDOWNLOADER
                    VIA
                    Windows Live
                    Windows Live SkyDrive
                    Windows Media Player
                    Windows NT
                    WindowsUpdate
                    WinRAR
                    xerox

                    ============
                    Drive C:
                    ============

                    Ad-Remover
                    Ad-Report-CLEAN[1].log
                    AUTOEXEC.BAT
                    boot.ini
                    Bootfont.bin
                    cmdcons
                    Config.Msi
                    CONFIG.SYS
                    Documents and Settings
                    Gw.dat
                    Gw.exe
                    Gw.tmp
                    HammerAutosave
                    IO.SYS
                    JM
                    Kill'em
                    List'em.txt
                    MSDOS.SYS
                    MSOCache
                    NTDETECT.COM
                    ntldr
                    pagefile.sys
                    Program Files
                    rapport.txt
                    RECYCLER
                    RHDSetup.log
                    rsit
                    Skills
                    System Volume Information
                    WINDOWS
                    World of Warcraft

                    ¤¤¤¤¤¤¤¤¤¤ Cracks | Keygens | Serials

                    C:\Documents and Settings\Quentin\Bureau\Patch Dk
                    C:\Documents and Settings\Quentin\Bureau\Patch Dk\Instal PAtch(exclure).exe
                    C:\Documents and Settings\Quentin\Bureau\World of Warcraft\Patch.html
                    C:\Documents and Settings\Quentin\Bureau\World of Warcraft\Patch.txt
                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\CoD4\rzn-cod4\Serial.txt
                    C:\Documents and Settings\Quentin\Recent\Serial.lnk
                    C:\Program Files\Metin2_France\PatchUpdater.exe
                    C:\WINDOWS\Patch Darluok
                    C:\WINDOWS\Patch Darluok\uninstall.exe
                    C:\World of Warcraft\Patch.html
                    C:\World of Warcraft\Patch.txt
                    G:\Alien Arena 2008\data1\textures\arena8\crackedrock1.tga
                    G:\Alien Arena 2008\data1\textures\arena8\crackedrock1_hm.tga
                    G:\Alien Arena 2008\data1\textures\arena8\crackedrock1_nm.tga
                    G:\Alien Arena 2008\data1\textures\arena8\crackedrock2.tga
                    G:\Alien Arena 2008\data1\textures\arena8\crackedrock2_hm.tga
                    G:\Alien Arena 2008\data1\textures\arena8\crackedrock2_nm.tga
                    G:\ORDI!\Bureau\Patch Dk
                    G:\ORDI!\Bureau\Patch Dk\Instal PAtch(exclure).exe
                    G:\ORDI!\Bureau\World of Warcraft-Darkluok\Patch.html
                    G:\ORDI!\Bureau\World of Warcraft-Darkluok\Patch.txt
                    G:\ORDI!\Mes documents\Téléchargements\CoD4\rzn-cod4\Serial.txt
                    G:\ORDI!\World of Warcraft-Ivalice\Patch.html
                    G:\ORDI!\World of Warcraft-Ivalice\Patch.txt
                    G:\Ordi-Jeux\FR\Patcher.exe
                    G:\Ordi-Jeux\FR\PatcherPatch.exe
                    G:\Ordi-Jeux\Warcraft III\Patch.txt
                    G:\Wow's\World of Warcraft-Darkluok\Patch.html
                    G:\Wow's\World of Warcraft-Darkluok\Patch.txt
                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Compressés\Install.exe
                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Dloads\Install.exe
                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitfraudFix\o4Patch.exe
                    C:\WINDOWS\system32\o4Patch.exe
                    G:\ORDI!\Mes documents\Téléchargements\Dloads\Install.exe
                    G:\Ordi-Jeux\FR\PatcherPatch.exe

                    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
                    0
                    1. moment de grace Contributeur sécurité
                      vu

                      ▶ Relance List&Kill'em avec le raccourci sur ton bureau ,

                      mais cette fois-ci :

                      ▶ choisis l'option 2 = Mode Suppression

                      laisse travailler l'outil.

                      en fin de scan un rapport s'ouvre

                      ▶ colle le contenu dans ta reponse

                      Tu peux le désinstaller ensuite
                      0
                      1. bean147
                        Kill'em by g3n-h@ckm@n 1.2.1.2

                        User : Quentin (Administrateurs)
                        Update on 29/01/2010 by g3n-h@ckm@n ::::: 11:50
                        Start at: 19:53:45 | 30/01/2010
                        Contact : g3n-h@ckm@n sur CCM

                        AMD Athlon(tm) 64 X2 Dual Core Processor 4000+
                        Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
                        Internet Explorer 6.0.2900.5512
                        Windows Firewall Status : Enabled
                        AV : Bitdefender Antivirus 8.0 [ Enabled | Updated ]

                        A:\ -> Lecteur de disquettes 3 ½ pouces
                        C:\ -> Disque fixe local | 232,88 Go (114,04 Go free) | NTFS
                        D:\ -> Disque CD-ROM
                        E:\ -> Disque CD-ROM
                        G:\ -> Disque fixe local | 931,51 Go (408,5 Go free) [LaCie] | NTFS

                        ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\csrss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\Program Files\Java\jre6\bin\jusched.exe
                        C:\WINDOWS\RTHDCPL.EXE
                        C:\WINDOWS\system32\RUNDLL32.EXE
                        C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                        C:\Program Files\iTunes\iTunesHelper.exe
                        C:\Program Files\Messenger\msmsgs.exe
                        C:\Program Files\EXPERTool\TBPanel.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\DNA\btdna.exe
                        C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
                        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                        C:\Program Files\Bonjour\mDNSResponder.exe
                        C:\Program Files\Java\jre6\bin\jqs.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\nvsvc32.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\PnkBstrA.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                        C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                        C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                        C:\Program Files\iPod\bin\iPodService.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\System32\alg.exe
                        C:\WINDOWS\system32\wbem\wmiapsrv.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\AnalogX\CookieWall\cookie.exe
                        C:\Program Files\Mumble\dbus-daemon.exe
                        G:\Steam\steam.exe
                        C:\Program Files\Mumble\mumble.exe
                        G:\Ordi-Jeux\Gw.exe
                        C:\Program Files\List_Kill'em\List_Kill'em.scr
                        C:\WINDOWS\system32\cmd.exe
                        C:\WINDOWS\system32\wbem\wmiprvse.exe
                        C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\ERUNT.EXE
                        C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\pv.exe

                        Detections :
                        ==========

                        ¤¤¤¤¤¤¤¤¤¤ Files/folders :

                        Quarantined & Deleted !! : C:\WINDOWS\SET3.tmp
                        Quarantined & Deleted !! : C:\WINDOWS\SET4.tmp
                        Quarantined & Deleted !! : C:\WINDOWS\SET8.tmp
                        Quarantined & Deleted !! : C:\WINDOWS\mbr.exe

                        Quarantined & Deleted !! : C:\WINDOWS\system32\x3daudio1_0.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\x3daudio1_1.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_2.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_3.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_4.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_5.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\X3DAudio1_6.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\xinput9_1_0.dll
                        Quarantined & Deleted !! : C:\WINDOWS\system32\404Fix.exe
                        Quarantined & Deleted !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
                        Quarantined & Deleted !! : C:\WINDOWS\system32\dumphive.exe
                        Quarantined & Deleted !! : C:\WINDOWS\system32\IEDFix.exe
                        Quarantined & Deleted !! : C:\WINDOWS\system32\Process.exe
                        Quarantined & Deleted !! : C:\WINDOWS\system32\SrchSTS.exe
                        Quarantined & Deleted !! : C:\WINDOWS\system32\tmp.reg
                        Quarantined & Deleted !! : C:\WINDOWS\system32\VACFix.exe
                        Quarantined & Deleted !! : C:\WINDOWS\system32\VCCLSID.exe
                        Quarantined & Deleted !! : C:\WINDOWS\system32\WS2Fix.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD1.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD1DE.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD2.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD24.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD3.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EAD8.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADB.exe
                        Quarantined & Deleted !! : C:\Documents and Settings\Quentin\LOCAL Settings\Temp\EADC.exe

                        ==============
                        host file OK !
                        ==============

                        ========
                        Registry
                        ========
                        Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
                        Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr

                        ============
                        Disk Cleaned
                        ============

                        ================
                        Prefetch cleaned
                        ================

                        ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
                        0
                        1. moment de grace Contributeur sécurité
                          ok

                          Téléchargez MalwareByte's Anti-Malware

                          http://www.malwarebytes.org/mbam/program/mbam-setup.exe

                          . Enregistres le sur le bureau
                          . Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
                          . Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour
                          . Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte
                          . Une fois la mise à jour terminé
                          . Rend-toi dans l'onglet, Recherche
                          . Sélectionnes Exécuter un examen complet (examen assez long)
                          . Cliques sur Rechercher
                          . Le scan démarre.
                          . A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
                          . Cliques sur Ok pour poursuivre.
                          . Si des malwares ont été détectés, clique sur Afficher les résultats
                          . Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
                          . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
                          . Rends toi dans l'onglet rapport/log
                          . Tu cliques dessus pour l'afficher, une fois affiché
                          . Tu cliques sur edition en haut du boc notes, et puis sur sélectionner tous
                          . Tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
                          . tu cliques droit dans le cadre de la reponse et coller

                          Si tu as besoin d'aide regarde ces tutoriels :
                          Aide: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
                          http://www.infos-du-net.com/forum/278396-11-tuto-malwarebytes-anti-malware-mbam

                          0
                          1. bean147
                            Malwarebytes' Anti-Malware 1.44
                            Version de la base de données: 3657
                            Windows 5.1.2600 Service Pack 3
                            Internet Explorer 6.0.2900.5512

                            31/01/2010 15:03:20
                            mbam-log-2010-01-31 (15-03-20).txt

                            Type de recherche: Examen complet (A:\|C:\|D:\|E:\|G:\|)
                            Eléments examinés: 360071
                            Temps écoulé: 1 hour(s), 52 minute(s), 57 second(s)

                            Processus mémoire infecté(s): 0
                            Module(s) mémoire infecté(s): 0
                            Clé(s) du Registre infectée(s): 0
                            Valeur(s) du Registre infectée(s): 0
                            Elément(s) de données du Registre infecté(s): 0
                            Dossier(s) infecté(s): 0
                            Fichier(s) infecté(s): 0

                            Processus mémoire infecté(s):
                            (Aucun élément nuisible détecté)

                            Module(s) mémoire infecté(s):
                            (Aucun élément nuisible détecté)

                            Clé(s) du Registre infectée(s):
                            (Aucun élément nuisible détecté)

                            Valeur(s) du Registre infectée(s):
                            (Aucun élément nuisible détecté)

                            Elément(s) de données du Registre infecté(s):
                            (Aucun élément nuisible détecté)

                            Dossier(s) infecté(s):
                            (Aucun élément nuisible détecté)

                            Fichier(s) infecté(s):
                            (Aucun élément nuisible détecté)

                            Encore merci pour votre aide .
                            0
                            1. moment de grace Contributeur sécurité
                              ok

                              comment va le pc ?

                              relances RSIT et postes juste le rapport log stp
                              0
                              1. bean147
                                Logfile of random's system information tool 1.06 (written by random/random)
                                Run by Quentin at 2010-01-31 17:12:55
                                Microsoft Windows XP Professionnel Service Pack 3
                                System drive C: has 117 GB (49%) free of 238 GB
                                Total RAM: 2047 MB (63% free)

                                Logfile of Trend Micro HijackThis v2.0.2
                                Scan saved at 17:13:05, on 31/01/2010
                                Platform: Windows XP SP3 (WinNT 5.01.2600)
                                MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                                Boot mode: Normal

                                Running processes:
                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\spoolsv.exe
                                C:\WINDOWS\Explorer.EXE
                                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                C:\Program Files\Bonjour\mDNSResponder.exe
                                C:\Program Files\Java\jre6\bin\jqs.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\nvsvc32.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\Program Files\Java\jre6\bin\jusched.exe
                                C:\WINDOWS\system32\PnkBstrA.exe
                                C:\WINDOWS\RTHDCPL.EXE
                                C:\WINDOWS\system32\RUNDLL32.EXE
                                C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                                C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                                C:\Program Files\iTunes\iTunesHelper.exe
                                C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                                C:\Program Files\EXPERTool\TBPanel.exe
                                C:\WINDOWS\system32\ctfmon.exe
                                C:\Program Files\DNA\btdna.exe
                                C:\WINDOWS\system32\wbem\wmiapsrv.exe
                                C:\Program Files\iPod\bin\iPodService.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\Program Files\AnalogX\CookieWall\cookie.exe
                                G:\Steam\steam.exe
                                C:\Program Files\Mumble\dbus-daemon.exe
                                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                C:\Program Files\Mozilla Firefox\firefox.exe
                                C:\Program Files\Windows Live\Contacts\wlcomm.exe
                                C:\Documents and Settings\Quentin\Bureau\RSIT.exe
                                C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Quentin.exe

                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=%s
                                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                                O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\SPYBOT~1\SDHelper.dll (file missing)
                                O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
                                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                                O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                                O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
                                O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                                O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
                                O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                                O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                                O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
                                O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
                                O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
                                O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                                O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
                                O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                                O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
                                O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
                                O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                                O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
                                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                O4 - Startup: Logitech Touch Mouse Server.lnk = C:\Program Files\Logitech Touch Mouse Server\iTouch-Server-Win.exe
                                O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
                                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
                                O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
                                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
                                O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                                O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                                O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Fichiers communs\BitDefender\BitDefender Update Service\livesrv.exe
                                O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
                                O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                                O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
                                O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Fichiers communs\BitDefender\BitDefender Communicator\xcommsvr.exe
                                0
                                1. moment de grace Contributeur sécurité
                                  ok

                                  supprimes manuellement ceci

                                  C:\windows\system32\tmp.txt

                                  1)
                                  Cherches et cliques sur C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Quentin.exe
                                  Au menu principal, choisir do a scan only, puis cocher la case devant les lignes suivantes à corriger et cliquer en bas sur Fix Checked (s’il manque des lignes…pas grave)

                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=%s
                                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\SPYBOT~1\SDHelper.dll (file missing)
                                  O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                  O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

                                  ……………………..

                                  2)
                                  Mettre à jour internet explorer
                                  https://support.microsoft.com/fr-fr/allproducts
                                  ………….

                                  3)
                                  IMPORTANT

                                  Purger la restauration systeme XP

                                  http://www.bibou0007.com/windows-xp-f101/purger-la-restauration-du-systeme-sous-windows-xp-t151.htm

                                  ……………..

                                  4)
                                  Télécharge ToolsCleaner2sur ton Bureau.
                                  https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/

                                  * Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur ToolsCleaner2.exe pour le lancer.
                                  * Clique sur Recherche et laisse le scan agir.
                                  * Clique sur Suppression pour finaliser.
                                  * Tu peux, si tu le souhaites, te servir des Options Facultatives.
                                  * Clique sur Quitter pour obtenir le rapport.
                                  * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

                                  Tu peux supprimer ToolCleaner ensuite

                                  0
                                  1. bean147
                                    [ Rapport ToolsCleaner version 2.3.11 (par A.Rothstein & dj QUIOU) ]

                                    --> Recherche:

                                    C:\Rsit: trouvé !
                                    C:\Ad-remover: trouvé !
                                    C:\Ad-Remover\BACKUP\Ad-R.exe: trouvé !
                                    C:\Documents and Settings\Quentin\Bureau\Ad-R.exe: trouvé !
                                    C:\Documents and Settings\Quentin\Bureau\Rsit.exe: trouvé !
                                    C:\Documents and Settings\Quentin\Bureau\catchme.log: trouvé !
                                    C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp\mbr.log: trouvé !
                                    C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\catchme.exe: trouvé !
                                    C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\mbr.exe: trouvé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudFix.zip: trouvé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\HijackThis.exe: trouvé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\hijackthis.log: trouvé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudfix: trouvé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Compressés\ComboFix.exe: trouvé !

                                    ---------------------------------
                                    --> Suppression:

                                    C:\Ad-Remover\BACKUP\Ad-R.exe: supprimé !
                                    C:\Documents and Settings\Quentin\Bureau\Ad-R.exe: supprimé !
                                    C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\catchme.exe: supprimé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudFix.zip: supprimé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\HijackThis.exe: supprimé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\Compressés\ComboFix.exe: ERREUR DE SUPPRESSION !!
                                    C:\Documents and Settings\Quentin\Bureau\Rsit.exe: supprimé !
                                    C:\Documents and Settings\Quentin\Bureau\catchme.log: supprimé !
                                    C:\Documents and Settings\Quentin\Local Settings\Temp\160.tmp\mbr.log: supprimé !
                                    C:\Documents and Settings\Quentin\Local Settings\Temp\3BE.tmp\mbr.exe: supprimé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\hijackthis.log: supprimé !
                                    C:\Rsit: supprimé !
                                    C:\Ad-remover: supprimé !
                                    C:\Documents and Settings\Quentin\Mes documents\Téléchargements\SmitFraudfix: supprimé !
                                    -
                                    Voila mais apres avoir fais un scan avec hijackthis et coché et faire Fix checked,
                                    mon antivirus a détecte que le programme CTFMON.EXE voullait modifier ma base de registre, ne sachant pas vraiment que faire ,je l'ai bloqué =$
                                    0

                                    Discussions similaires

                                    comment écrire des petits chiffres ?
                                    Elisa-x3

                                    9 réponses
                                    Comment écrire un chiffre en petit caractè
                                    Essegnon

                                    5 réponses
                                    [Ecrire Exposant 12] 10² ou 10³ ok mais...
                                    tessai

                                    43 réponses
                                    Dimensions L x l x H : comment lire ces infos ?
                                    Miss-Curieuse

                                    8 réponses
                                    Snapchat que veux dire le petit point vert
                                    Anna_6260

                                    2 réponses