Ouverture intempestive de page de pub

Question

Bonjour, 

je vois apparaitre de temps à autres des onglets publicitaires lorsque je navigue sur le web et ça, quelque soit le type de navigateur (chrome/IE/firefox). Pourriez vous m'aider a enlever cette cochonnerie svp. Merci.

La procédure que j'ai suivie jusqu'à présent:
J'ai nettoyé mon pc avec:
1- ccleaner (registre+fichiers temp/cookies)
2- analyse avec: ad-aware, malwarebyte, spybot et AVG (aucune infection détectée)
3- et pour finir, voici les log de hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:18:41, on 02/10/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\firefox.exe
C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\plugin-container.exe
C:\Users\Carine\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [IP Network] C:\Program Files (x86)\InstallPedia
etworker.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [FUFAXSTM] "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Epson Stylus SX610FW(Réseau)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFJE.EXE /FU "C:\Windows\TEMP\E_S2E0E.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix: 
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32
vvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\SysWOW64\ZoneLabs\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

benurrr · Answer

Bonjourrr  


Téléchargez et enregistrez Navilog1 sur le Bureau. 

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe  

Sous XP : double-cliquez sur l'icône pour lancer l'outil. 

Sous vista : faites un clic droit sur Navilog1 présent sur le Bureau et choisissez "Exécuter en tant qu'administrateur". 

Choisissez votre langue, appuyez sur F pour Français. 

Appuyez sur une touche jusqu'à ce que vous arriviez au menu des options. 

Choisissez l'option 1 (Recherche / Désinfection Automatique). 

Laissez le programme travailler, il pourrait durer une dizaine de minutes. 

Si l'outil trouve quelque chose, il sera amené à faire redémarrer l'ordinateur. 

Lorsque le message "Scan terminé le..." s'affichera, appuyez sur une touche pour faire apparaitre le rapport dans le Bloc-notes (il sera aussi enregistré automatiquement sur votre disque dur : C:\cleannavi.txt)  

Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C..,  
Mais C.. de penser que ­tu es libre...Merci a australe13

GreenDust · Answer

Merci  de m'aider  
Voici les logs de cleannavi (apparemment il ne trouve rien et j'ai tjs le meme pb) 

Fix Navipromo version 4.0.9 commencé le 02/10/2010 13:46:52,94  

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!  
!!! Postez ce rapport sur le forum pour le faire analyser !!!  

Outil exécuté depuis C:
avilog1  

Mise à jour le 17.09.2010 à 16h00 par IL-MAFIOSO  

Microsoft Windows 7 Édition Familiale Premium  ( v6.1.7600 )   
x64-based PC ( Multiprocessor Free : AMD Athlon(tm) Dual Core Processor 4050e )  
BIOS : )Phoenix - Award WorkstationBIOS v6.00PG  
USER : Carine ( Administrator )  
BOOT : Normal boot  




C:\ (Local Disk) - NTFS - Total:139 Go (Free:44 Go)  
D:\ (Local Disk) - NTFS - Total:142 Go (Free:142 Go)  
E:\ (CD or DVD)  
F:\ (USB)  
G:\ (Local Disk) - FAT32 - Total:465 Go (Free:410 Go)  


Recherche executée en mode normal   


[b]Aucune Infection Navipromo/Egdaccess trouvée/b  



*** Scan terminé 02/10/2010 13:47:18,76 ***  


"Un con debout va toujours plus loin que deux intello assis

benurrr · Answer

DÉSACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRÉSENTS !!!!!(car il est détecte a tort comme infection) 

Télécharge ici :List_Kill'em de gen-hackman  

http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/List_Killem_Install.exe 

et enregistre le sur ton bureau 

si tu as XP => double clique 
si tu as Vista ou windows 7 => clic droit "exécuter en tant que...." 

sur le raccourci sur ton bureau pour lancer l'installation 

Laisse coché : 

 Exécuter List_Kill'em 

une fois terminée , clic sur "terminer" et le programme se lancera seul 

Il commencera par télécharger et installer ses mises à jour , puis te donnera son menu 

choisis l'option Search 

laisse travailler l'outil 

il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "OK" ou "Agrée" 

à l'apparition de la fenêtre blanche , c'est un peu long , c'est normal ,c'est une recherche supplémentaire de fichiers cachés , le programme n'est pas bloqué. 

Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'écran "COMPLETED"  
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C.., 
Mais C.. de penser que ­tu es libre...Merci a australe13

GreenDust · Answer

Encore merci 
Voila les logs:

¤¤¤¤¤¤¤¤¤¤ List'em by g3n-h@ckm@n 2.1.0.9 ¤¤¤¤¤¤¤¤¤¤

User : Carine (Administrateurs) 
Update on 02/10/2010 by g3n-h@ckm@n ::::: 14.00
Start at: 15:25:27 | 02/10/2010

AMD Athlon(tm) Dual Core Processor 4050e
Microsoft Windows 7 Édition Familiale Premium  (6.1.7600 64-bit) # 
Internet Explorer 8.0.7600.16385
Windows Firewall Status : Enabled

C:\ -> Disque fixe local | 139,15 Go (44,63 Go free) [ACER] | NTFS
D:\ -> Disque fixe local | 142,93 Go (142,59 Go free) [DATA] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque amovible
G:\ -> Disque fixe local | 465,65 Go (410,31 Go free) [PACKARDBELL] | FAT32
 
Boot: Normal 

¤¤¤¤¤¤ Processes ------- Memory(Ko) ------- Priority ------ Command ------- Signer


C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe ---- 83604 Ko ---- Normal ---- "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background ---- Microsoft Corporation
C:\Program Files (x86)\RocketDock\RocketDock.exe ---- 36128 Ko ---- Normal ---- "C:\Program Files (x86)\RocketDock\RocketDock.exe"  ---- 
C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe ---- 11500 Ko ---- Normal ---- "C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe" ---- 
C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe ---- 2996 Ko ---- Normal ---- "C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe" ---- AVG Technologies
C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe ---- 13740 Ko ---- Normal ---- "C:\Program Files (x86)\NVIDIA Corporation\3D Vision
vSCPAPISvr.exe" ---- NVIDIA Corporation
C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe ---- 34608 Ko ---- Normal ---- "C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe" ---- Safer Networking Ltd.
C:\Program Files (x86)\AVG\AVG9\avgtray.exe ---- 1344 Ko ---- Normal ---- "C:\Program Files (x86)\AVG\AVG9\avgtray.exe"  ---- AVG Technologies
C:\Program Files (x86)\AVG\AVG9\avgemc.exe ---- 1880 Ko ---- Normal ---- "C:\Program Files (x86)\AVG\AVG9\avgemc.exe" ---- AVG Technologies
C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe ---- 43876 Ko ---- Normal ---- "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"  ---- 
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe ---- 35880 Ko ---- Normal ---- "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"  ---- Newsoft Technology Company
C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe ---- 14352 Ko ---- Normal ----  /pipeName=c06bd641-2a62-4074-b0ae-527ee2714439 /coreSdkOptions=0 /binaryPath="C:\Program Files (x86)\AVG\AVG9\" ---- AVG Technologies
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe ---- 28060 Ko ---- Normal ---- "C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe" -Embedding ---- Microsoft Corporation
C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\firefox.exe ---- 252336 Ko ---- Normal ---- "C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\firefox.exe"  ---- Mozilla Corporation
C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\plugin-container.exe ---- 16072 Ko ---- Normal ---- "C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\plugin-container.exe" --channel=4368.1217c660.1370966016 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" "Mozilla.Firefox.4.0b6" -omnijar C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\omni.jar 4368 plugin \.\pipe\gecko-crash-server-pipe.4368 ---- Mozilla Corporation
C:\Windows\SysWOW64\cmd.exe ---- 3772 Ko ---- Normal ---- C:\Windows\system32\cmd.exe  /K List'em.bat ---- 
C:\Program Files (x86)\List_Kill'em\pv.exe ---- 5656 Ko ---- Normal ---- pv  -o"%f ---- %m Ko ---- %p ---- %l ---- %s" ---- 


¤¤¤¤¤¤¤¤¤¤ Keys "Run" ¤¤¤¤¤¤¤¤¤¤

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Sidebar	=         	C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
msnmsgr	=         	"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
RocketDock	=         	"C:\Program Files (x86)\RocketDock\RocketDock.exe"
Epson Stylus SX610FW(Réseau)	=         	C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFJE.EXE /FU "C:\Windows\TEMP\E_S2E0E.tmp" /EF "HKCU"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
AVG9_TRAY	=         	C:\PROGRA~2\AVG\AVG9\avgtray.exe 
IP Network	=         	C:\Program Files (x86)\InstallPedia
etworker.exe 
ZoneAlarm Client	=         	"C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe" 
Adobe Reader Speed Launcher	=         	"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" 
Adobe ARM	=         	"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" 
FUFAXSTM	=  	"C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" 
EEventManager	=         	C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe 
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

¤¤¤¤¤¤¤¤¤¤ Other System Keys ¤¤¤¤¤¤¤¤¤¤

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] 
NoActiveDesktop	=      	1 (0x1) 
NoActiveDesktopChanges	=      	1 (0x1) 
ForceActiveDesktopOn	=      	0 (0x0) 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS	=         	avgrssta.dll

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 
 Shell	=         	explorer.exe 
 Userinit	=         	userinit.exe 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

¤¤¤¤¤¤¤¤¤¤ ActivX | COM ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}]

¤¤¤¤¤¤¤¤¤¤ BHO ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

¤¤¤¤¤¤¤¤¤¤ DNS ¤¤¤¤¤¤¤¤¤¤

HKLM\SYSTEM\CCS\Services\Tcpip\..\{D6D1538C-1C70-4DDD-8770-17EEC8C50C26}: DhcpNameServer=192.168.1.1 
HKLM\SYSTEM\CS1\Services\Tcpip\..\{D6D1538C-1C70-4DDD-8770-17EEC8C50C26}: DhcpNameServer=192.168.1.1 
HKLM\SYSTEM\CS2\Services\Tcpip\..\{D6D1538C-1C70-4DDD-8770-17EEC8C50C26}: DhcpNameServer=192.168.1.1 
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 


¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.msn.com/fr-fr/?ocid=iehp
Local Page	=         	C:\Windows\SysWOW64\blank.htm
Default_Search_URL	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL	=         	https://www.msn.com/fr-fr/?ocid=iehp
Search Page	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.google.fr/?gws_rd=ssl
Local Page	=         	C:\Windows\system32\blank.htm
Search Page	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

¤¤¤¤¤ Proxy Internet Explorer

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
ProxyEnable	=      	0 (0x0)


¤¤¤¤¤¤¤¤¤¤ Proxy Firefox ¤¤¤¤¤¤¤¤¤¤
 

¤¤¤¤¤¤¤¤¤¤ TaskCache ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ IFEO ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AcroRd32.exe]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\DllNXOptions]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\IEInstal.exe]

¤¤¤¤¤¤¤¤¤¤ File Protection ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Windows File Protection] 
KnownDllList	=         	nlhtml.dll

¤¤¤¤¤¤¤¤¤¤ Safemode ¤¤¤¤¤¤¤¤¤¤

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot : OK !!  
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal : OK !!  
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network : OK !!  
 
¤¤¤¤¤¤¤¤¤¤ Atapi.sys ¤¤¤¤¤¤¤¤¤¤

[MD5.02062c0b390b7729edc9e69c680a6f3c] - C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys  
[MD5.02062c0b390b7729edc9e69c680a6f3c] - C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys  
[MD5.1f05b78ab91c9075565a9d8a4b880bc4] - C:\Windows.old\Windows\System32\drivers\atapi.sys  
[MD5.1f05b78ab91c9075565a9d8a4b880bc4] - C:\Windows.old\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys  
[MD5.4f4fcb8b6ea06784fb6d475b7ec7300f] - C:\Windows.old\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys  
[MD5.2d9c903dc76a66813d350a562de40ed9] - C:\Windows.old\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys  
[MD5.2d9c903dc76a66813d350a562de40ed9] - C:\Windows.old\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys  
[MD5.1f05b78ab91c9075565a9d8a4b880bc4] - C:\Windows.old\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys  

¤¤¤¤¤ Reference 

Win 2000_SP2   : ff953a8f08ca3f822127654375786bbe
Win 2000_SP4   : 8c718aa8c77041b3285d55a0ce980867
Win XP_32b     : a64013e98426e1877cb653685c5c0009
Win XP_SP1_32b : 95b858761a00e1d4f81f79a0da019aca
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b      : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b  : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b  : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b  : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b  : 338c86357871c167a96ab976519bf59e
Windows 7_64b  : 02062C0B390B7729EDC9E69C680A6F3C
 
¤¤¤¤¤¤¤¤¤¤ Explorer ¤¤¤¤¤¤¤¤¤¤
 
[MD5.9aaaec8dac27aa17b053e6352ad233ae] - C:\Windows\explorer.exe  
[MD5.2626fc9755be22f805d3cfa0ce3ee727] - C:\Windows\System32\explorer.exe  
[MD5.2626fc9755be22f805d3cfa0ce3ee727] - C:\Windows\SysWOW64\explorer.exe  
[MD5.c235a51cb740e45ffa0ebfb9bafcda64] - C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe  
[MD5.f170b4a061c9e026437b193b4d571799] - C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe  
[MD5.9aaaec8dac27aa17b053e6352ad233ae] - C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe  
[MD5.700073016dac1c3d2e7e2ce4223334b6] - C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe  
[MD5.b8ec4bd49ce8f6fc457721bfc210b67f] - C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe  
[MD5.15bc38a7492befe831966adb477cf76f] - C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe  
[MD5.b95eeb0f4e5efbf1038a35b3351cf047] - C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe  
[MD5.2626fc9755be22f805d3cfa0ce3ee727] - C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe  
[MD5.9ff6c4c91a3711c0a3b18f87b08b518d] - C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe  
[MD5.c76153c7eca00fa852bb0c193378f917] - C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\AppData\Local\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Documents and Settings\carine\Local Settings\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\AppData\Local\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Application Data\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.311a140e03f87dc2077f1e3ab7854051] - C:\Windows.old\Users\carine\Local Settings\Temp\DWD5DD9.tmp\explorer.exe.hu.kdmp  
[MD5.d07d4c3038f3578ffce1c0237f2a1253] - C:\Windows.old\Windows\explorer.exe  
[MD5.37440d09deae0b672a04dccf7abf06be] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe  
[MD5.e7156b0b74762d9de0e66bdcde06e5fb] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe  
[MD5.ffa764631cb70a30065c12ef8e174f9f] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe  
[MD5.4f554999d7d5f05daaebba7b5ba1089d] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe  
[MD5.50ba5850147410cde89c523ad3bc606e] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe  
[MD5.d07d4c3038f3578ffce1c0237f2a1253] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe  

¤¤¤¤¤¤¤¤¤¤ Winlogon ¤¤¤¤¤¤¤¤¤¤
 
[MD5.132328df455b0028f13bf0abee51a63a] - C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe 
[MD5.da3e2a6fa9660cc75b471530ce88453a] - C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe 
[MD5.a93d41a4d4b0d91c072d11dd8af266de] - C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe 
[MD5.898e7c06a350d4a1a64a9ea264d55452] - C:\Windows.old\Windows\System32\winlogon.exe 
[MD5.c2610b6bdbefc053bbdab4f1b965cb24] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe 
[MD5.898e7c06a350d4a1a64a9ea264d55452] - C:\Windows.old\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe 

¤¤¤¤¤¤¤¤¤¤ Drive ¤¤¤¤¤¤¤¤¤¤


¤¤¤¤¤¤¤¤¤¤ Mountpoints2 ¤¤¤¤¤¤¤¤¤¤
 
 
¤¤¤¤¤¤¤¤¤¤ First Scan ¤¤¤¤¤¤¤¤¤¤
 
 

¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤
 
[HKEY_CURRENT_USER\software\ABBYY]  
[HKEY_CURRENT_USER\software\AC3Filter]  
[HKEY_CURRENT_USER\software\Adobe]  
[HKEY_CURRENT_USER\software\AppDataLow]  
[HKEY_CURRENT_USER\software\Avg]  
[HKEY_CURRENT_USER\software\BitTorrent]  
[HKEY_CURRENT_USER\software\BST]  
[HKEY_CURRENT_USER\software\Clients]  
[HKEY_CURRENT_USER\software\Conduit]  
[HKEY_CURRENT_USER\software\EPSON]  
[HKEY_CURRENT_USER\software\Google]  
[HKEY_CURRENT_USER\software\Haali]  
[HKEY_CURRENT_USER\software\HookNetwork]  
[HKEY_CURRENT_USER\software\IM Providers]  
[HKEY_CURRENT_USER\software\Lavasoft]  
[HKEY_CURRENT_USER\software\Macromedia]  
[HKEY_CURRENT_USER\software\Malwarebytes' Anti-Malware]  
[HKEY_CURRENT_USER\software\Microsoft]  
[HKEY_CURRENT_USER\software\MozillaPlugins]  
[HKEY_CURRENT_USER\software\Netscape]  
[HKEY_CURRENT_USER\software\NVIDIA Corporation]  
[HKEY_CURRENT_USER\software\ODBC]  
[HKEY_CURRENT_USER\software\Piriform]  
[HKEY_CURRENT_USER\software\Policies]  
[HKEY_CURRENT_USER\software\RocketDock]  
[HKEY_CURRENT_USER\software\Safer Networking Limited]  
[HKEY_CURRENT_USER\software\SEIKO EPSON]  
[HKEY_CURRENT_USER\software\Skype]  
[HKEY_CURRENT_USER\software\WinRAR SFX]  
[HKEY_CURRENT_USER\software\Wow6432Node]  
[HKEY_CURRENT_USER\software\Zone Labs]  
[HKEY_CURRENT_USER\software\Classes]  

[HKEY_LOCAL_MACHINE\software\ABBYY]  
[HKEY_LOCAL_MACHINE\software\Adobe]  
[HKEY_LOCAL_MACHINE\software\Apple Computer, Inc.]  
[HKEY_LOCAL_MACHINE\software\Avg]  
[HKEY_LOCAL_MACHINE\software\CCleaner]  
[HKEY_LOCAL_MACHINE\software\CheckPoint]  
[HKEY_LOCAL_MACHINE\software\Conduit]  
[HKEY_LOCAL_MACHINE\software\EPSON]  
[HKEY_LOCAL_MACHINE\software\EpsonNet]  
[HKEY_LOCAL_MACHINE\software\Google]  
[HKEY_LOCAL_MACHINE\software\InstallPedia]  
[HKEY_LOCAL_MACHINE\software\Intel]  
[HKEY_LOCAL_MACHINE\software\Khronos]  
[HKEY_LOCAL_MACHINE\software\Lavasoft]  
[HKEY_LOCAL_MACHINE\software\Macromedia]  
[HKEY_LOCAL_MACHINE\software\Malwarebytes' Anti-Malware]  
[HKEY_LOCAL_MACHINE\software\Microsoft]  
[HKEY_LOCAL_MACHINE\software\MimarSinan]  
[HKEY_LOCAL_MACHINE\software\Mindscape]  
[HKEY_LOCAL_MACHINE\software\Mozilla]  
[HKEY_LOCAL_MACHINE\software\mozilla.org]  
[HKEY_LOCAL_MACHINE\software\MozillaPlugins]  
[HKEY_LOCAL_MACHINE\software\NVIDIA Corporation]  
[HKEY_LOCAL_MACHINE\software\ODBC]  
[HKEY_LOCAL_MACHINE\software\Safer Networking Limited]  
[HKEY_LOCAL_MACHINE\software\SEIKO EPSON CORPORATION]  
[HKEY_LOCAL_MACHINE\software\Skype]  
[HKEY_LOCAL_MACHINE\software\TrendMicro]  
[HKEY_LOCAL_MACHINE\software\Webteh]  
[HKEY_LOCAL_MACHINE\software\Wow6432Node]  
[HKEY_LOCAL_MACHINE\software\Zone Labs]  
[HKEY_LOCAL_MACHINE\software\Classes]  
[HKEY_LOCAL_MACHINE\software\Clients]  
[HKEY_LOCAL_MACHINE\software\Policies]  
[HKEY_LOCAL_MACHINE\software\RegisteredApplications]  

¤¤¤¤¤¤¤¤¤¤ Files/folders ¤¤¤¤¤¤¤¤¤¤

Present !! : C:\Users\Carine\AppData\Local\GDIPFONTCACHEV1.DAT  
Present !! : C:\Users\Carine\LOCAL Settings\Temp\Uninstall.exe  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

Present !! : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoActiveDesktop  
Present !! : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoActiveDesktopChanges  
Present !! : "HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}"  
Present !! : "HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}"  
Present !! : HKCU\Software\Conduit  
Present !! : HKLM\Software\Conduit  

FEATURE_BROWSER_EMULATION | svchost : 
====================================
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

driver loading error catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-02 15:41:35
Windows 6.1.7600  WOW64 FAT NTAPI

detected NTDLL code modification:
ZwEnumerateKey 0 != 47, ZwQueryKey 0 != 19, ZwOpenKey 0 != 15, ZwClose 0 != 12, ZwEnumerateValueKey 0 != 16, ZwQueryValueKey 0 != 20, ZwOpenFile 0 != 48, ZwQueryDirectoryFile 0 != 50, ZwQuerySystemInformation 0 != 51Initialization error


Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
kernel: error reading MBR 

¤¤¤¤¤¤¤¤¤¤ Programs ¤¤¤¤¤¤¤¤¤¤

ABBYY FineReader 6.0 Sprint 6.00.1395.4512
AVG Free 9.0
Ad-Aware 8.3.0
Ad-Aware
Adobe Flash Player 10 Plugin 10.1.85.3
Adobe Reader 9.3.4 - Français 9.3.4
BS.Player FREE 2.56.1043
CCleaner 2.34
D3DX10 15.0.1166.623
EPSON Scan
Epson Easy Photo Print 2 2.1.0.0
Epson Event Manager 2.30.01
Epson FAX Utility 1.00.01
Epson PC-FAX Driver
Epson Printer Software Downloader 2.0.0
Epson Printer Software Downloader
Epson Stylus Office BX610FW_Office TX610FW_SX610FW Manuel
EpsonNet Print 2.4i
EpsonNet Setup 3.1c
HijackThis 2.0.2 2.0.2
List_Kill'em
MSVCRT 15.4.2862.0708
Malwarebytes' Anti-Malware
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Excel MUI (French) 2007 12.0.6425.1000
Microsoft Office Outlook MUI (French) 2007 12.0.6425.1000
Microsoft Office PowerPoint MUI (French) 2007 12.0.6425.1000
Microsoft Office Proof (Arabic) 2007 12.0.6425.1000
Microsoft Office Proof (Dutch) 2007 12.0.6425.1000
Microsoft Office Proof (English) 2007 12.0.6425.1000
Microsoft Office Proof (French) 2007 12.0.6425.1000
Microsoft Office Proof (German) 2007 12.0.6425.1000
Microsoft Office Proof (Spanish) 2007 12.0.6425.1000
Microsoft Office Proofing (French) 2007 12.0.4518.1014
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Shared MUI (French) 2007 12.0.6425.1000
Microsoft Office Standard 2007 12.0.6425.1000
Microsoft Office Standard 2007 12.0.6425.1000
Microsoft Office Word MUI (French) 2007 12.0.6425.1000
Microsoft Silverlight 4.0.50917.0
Microsoft Visual C++ 2005 Redistributable 8.0.59193
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)
Mise à jour Microsoft Office Outlook 2007 Help  (KB963677)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)
Mise à jour Microsoft Office Word 2007 Help  (KB963665)
Mozilla Firefox (3.6.10) 3.6.10 (fr)
Mozilla Firefox 4.0b6 (x86 fr) 4.0b6
NVIDIA Stereoscopic 3D Driver 7.17.12.5896
RocketDock 1.3.5
Security Update for 2007 Microsoft Office System (KB2277947)
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for 2007 Microsoft Office System (KB982312)
Security Update for 2007 Microsoft Office System (KB982331)
Security Update for Microsoft Office Excel 2007 (KB982308)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2251419)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Skype? 4.2 4.2.169
Spybot - Search & Destroy 1.6.2
Update for 2007 Microsoft Office System (KB2284654)
Update for 2007 Microsoft Office System (KB967642)
Update for Outlook 2007 Junk Email Filter (kb2291599)
Visual C++ 2008 x86 Runtime - (v9.0.30729) 9.0.30729
Visual C++ 2008 x86 Runtime - v9.0.30729.01 9.0.30729.01
Visual C++ 8.0 Runtime Setup Package (x64) 9.0.0.623
Windows Live Bêta 15.4.3001.0809
Windows Live Bêta 15.4.3001.0809
Windows Live Communications Platform 15.4.3001.0809
Windows Live Installer 15.4.3001.0809
Windows Live Messenger 15.4.3002.0810
Windows Live Messenger 15.4.3002.0810
Windows Live PIMT Platform 15.4.3002.0810
Windows Live Photo Common 15.4.3002.0810
Windows Live Photo Common Beta 15.4.3002.0810
Windows Live SOXE 15.4.3001.0809
Windows Live SOXE Definitions 15.4.3001.0809
Windows Live UX Platform 15.4.3001.0809
Windows Live UX Platform Language Pack 15.4.3001.0809
ZoneAlarm 9.2.057.000
µTorrent 2.0.3
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

End of scan : 15:43:02,76

benurrr · Answer

Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau. 
mais cette fois-ci : 

choisis l'option CLEAN 

laisse travailler l'outil. 

en fin de scan la fenêtre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau , 

Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C.., 
Mais C.. de penser que ­tu es libre...Merci a australe13

GreenDust · Answer

Aille .... 
- FW/AV éteints 
- List_Kill'em lancé en mode admin avec CLEAN 

une fenêtre de terminal apparait 1/10eme de sec et disparait 
aucun scan ne semble avoir eu lieu (ou alors c'est allé ultra vite) et aucun log n'apparait sur le bureau (ni meme ou est installé le soft) 


"Un con debout va toujours plus loin que deux intello assis

GreenDust · Answer

oui oui bien compris  ... 
mais tjs rien 
j'ai essayé de désinstaller/réinstaller le soft 
mais rien .... 

je suis en train de reprendre la procedure depuis le post #3


"Un con debout va toujours plus loin que deux intello assis

benurrr · Answer

ok fait sa en attendant je contacte le concepteur du fix peut-etre qu'il interviendra directement içi

Télécharge combofix :
Faire un clic droit sur le lien
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    * Choisir : "Enregistrer la cible du lien sous..."
    * Choisir le Bureau comme destination.
    * Dans le champ "Nom du fichier", renommer ComboFix.exe en CCM.exe par exemple, puis enregistrer.
    * Attention ! L'étape de renommage est obligatoire sous peine de voir afficher le message "ComboFix.exe n'est pas une application win32 valide" et de le rendre ainsi totalement inefficace. 

 Note importante :tu est sous Vista

la désactivation du Contrôle des comptes utilisateurs est obligatoire

Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac­er-l-uac

pour toute manipulation fait comme ceci( clic droit "exécuter en tant qu'administrateur" pour Vista/7 ) 

-> Double clique combofix.exe. 
-> Tape sur la touche 1 (Yes) pour démarrer le scan. 
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse. 

NOTE : Le rapport se trouve également ici : C:\Combofix.txt 

Avant d'utiliser ComboFix : 

-> Déconnecte toi d'internet et referme les fenêtres de tous les programmes en cours. 

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 

Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc. 

-Attention  Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes. risque de figer l'ordi 

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message. 

!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordi (plantage complet) 

::Si combofix detecte quelque chose et de demande a redémarrer tu accepte

GreenDust · Answer

bon ... j'ai relancé la procédure et voici les logs: Mystérieux ce fichier qui n'apparaissait pas ...m'enfin bon Je vais poursuivre avec Combofix ¤¤¤¤¤¤¤¤¤¤ More informations ¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤ DLLs ¤¤¤¤¤¤¤¤¤¤ ------------------------------------------------------------------------------ explorer.exe pid: 1524 Command line: No matching processes were found. ------------------------------------------------------------------------------ firefox.exe pid: 4352 Command line: "C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\firefox.exe" Base Size Version Path 0x012d0000 0xe0000 2.00.0000.3909 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\firefox.exe 0x77b50000 0x180000 6.01.7600.16559 C:\Windows\SysWOW64 tdll.dll 0x772f0000 0x100000 6.01.7600.16385 C:\Windows\syswow64\kernel32.dll 0x76a50000 0x46000 6.01.7600.16385 C:\Windows\syswow64\KERNELBASE.dll 0x6d000000 0xe24000 2.00.0000.3909 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\xul.dll 0x75130000 0xbe000 3.07.0001.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\mozsqlite3.dll 0x75200000 0xaf000 8.00.0000.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\MOZCRT19.dll 0x766e0000 0xac000 7.00.7600.16385 C:\Windows\syswow64\msvcrt.dll 0x75110000 0x18000 3.12.0008.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\smime3.dll 0x75070000 0x9d000 3.12.0008.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6 ss3.dll 0x75050000 0x14000 3.12.0008.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6 ssutil3.dll 0x751f0000 0x7000 4.08.0006.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\plc4.dll 0x74fd0000 0x31000 4.08.0006.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6 spr4.dll 0x76b70000 0xa0000 6.01.7600.16385 C:\Windows\syswow64\ADVAPI32.dll 0x772d0000 0x19000 6.01.7600.16385 C:\Windows\SysWOW64\sechost.dll 0x76790000 0xf0000 6.01.7600.16385 C:\Windows\syswow64\RPCRT4.dll 0x756c0000 0x60000 6.01.7600.16484 C:\Windows\syswow64\SspiCli.dll 0x756b0000 0xc000 6.01.7600.16385 C:\Windows\syswow64\CRYPTBASE.dll 0x74000000 0x7000 6.01.7600.16385 C:\Windows\system32\WSOCK32.dll 0x76fd0000 0x35000 6.01.7600.16385 C:\Windows\syswow64\WS2_32.dll 0x769c0000 0x6000 6.01.7600.16385 C:\Windows\syswow64\NSI.dll 0x73ec0000 0x32000 6.01.7600.16385 C:\Windows\system32\WINMM.dll 0x77600000 0x100000 6.01.7600.16385 C:\Windows\syswow64\USER32.dll 0x77550000 0x90000 6.01.7600.16385 C:\Windows\syswow64\GDI32.dll 0x75980000 0xa000 6.01.7600.16385 C:\Windows\syswow64\LPK.dll 0x76c10000 0x9d000 1.626.7600.16385 C:\Windows\syswow64\USP10.dll 0x75040000 0x7000 4.08.0006.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\plds4.dll 0x75010000 0x21000 3.12.0008.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\ssl3.dll 0x74fb0000 0x6000 2.00.0000.3909 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\mozalloc.dll 0x75a90000 0xc49000 6.01.7600.16644 C:\Windows\syswow64\SHELL32.dll 0x76920000 0x57000 6.01.7600.16385 C:\Windows\syswow64\SHLWAPI.dll 0x773f0000 0x15c000 6.01.7600.16385 C:\Windows\syswow64\ole32.dll 0x74150000 0x9000 6.01.7600.16385 C:\Windows\system32\VERSION.dll 0x74c80000 0x51000 6.01.7600.16385 C:\Windows\system32\WINSPOOL.DRV 0x769d0000 0x7b000 6.01.7600.16385 C:\Windows\syswow64\COMDLG32.dll 0x730d0000 0x19e000 6.10.7600.16385 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\COMCTL32.dll 0x76cb0000 0x60000 6.01.7600.16385 C:\Windows\syswow64\IMM32.dll 0x76aa0000 0xcc000 6.01.7600.16385 C:\Windows\syswow64\MSCTF.dll 0x728b0000 0x5000 6.01.7600.16385 C:\Windows\system32\MSIMG32.dll 0x769b0000 0x5000 6.01.7600.16385 C:\Windows\syswow64\PSAPI.DLL 0x76890000 0x8f000 6.01.7600.16567 C:\Windows\syswow64\OLEAUT32.dll 0x74f00000 0xaf000 8.00.0000.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\MOZCPP19.dll 0x74fc0000 0x7000 2.00.0000.3909 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\xpcom.dll 0x72d70000 0x80000 6.01.7600.16385 C:\Windows\system32\uxtheme.dll 0x726c0000 0x13000 6.01.7600.16385 C:\Windows\system32\dwmapi.dll 0x74d20000 0xeb000 6.01.7600.16385 C:\Windows\system32\dbghelp.dll 0x10000000 0x12000 C:\Program Files (x86)\RocketDock\RocketDock.dll 0x757e0000 0x19d000 6.01.7600.16385 C:\Windows\syswow64\SETUPAPI.dll 0x757b0000 0x27000 6.01.7600.16385 C:\Windows\syswow64\CFGMGR32.dll 0x775e0000 0x12000 6.01.7600.16385 C:\Windows\syswow64\DEVOBJ.dll 0x76d40000 0x83000 2001.12.8530.16385 C:\Windows\syswow64\CLBCatQ.DLL 0x754d0000 0xf5000 7.00.7600.16385 C:\Windows\system32\propsys.dll 0x73830000 0x21000 6.01.7600.16385 C:\Windows\system32 tmarta.dll 0x77700000 0x45000 6.01.7600.16385 C:\Windows\syswow64\WLDAP32.dll 0x73720000 0x3c000 6.01.7600.16385 C:\Windows\system32\mswsock.dll 0x735e0000 0x5000 6.01.7600.16385 C:\Windows\System32\wshtcpip.dll 0x73fe0000 0x1c000 6.01.7600.16385 C:\Windows\system32\iphlpapi.dll 0x73fd0000 0x7000 6.01.7600.16385 C:\Windows\system32\WINNSI.DLL 0x74ed0000 0x21000 2.00.0000.3909 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\components\browsercomps.dll 0x74ea0000 0x2e000 6.01.7600.16385 C:\Windows\system32\shdocvw.dll 0x74e70000 0x2c000 6.01.7600.16385 C:\Windows\system32\d3d10_1.dll 0x74e30000 0x3a000 6.01.7600.16385 C:\Windows\system32\d3d10_1core.dll 0x74b40000 0x83000 6.01.7600.16385 C:\Windows\system32\dxgi.dll 0x76980000 0x2d000 6.01.7600.16493 C:\Windows\syswow64\WINTRUST.dll 0x771b0000 0x11c000 6.01.7600.16385 C:\Windows\syswow64\CRYPT32.dll 0x76880000 0xc000 6.01.7600.16415 C:\Windows\syswow64\MSASN1.dll 0x721d0000 0x4e8000 8.17.0012.5896 C:\Windows\system32 vwgf2um.dll 0x74a70000 0xcf000 6.01.7600.16385 C:\Windows\system32\d2d1.dll 0x74790000 0x109000 6.01.7600.16385 C:\Windows\system32\dwrite.dll 0x74680000 0x102000 6.01.7600.16385 C:\Windows\system32\d3d10.dll 0x74ce0000 0x33000 6.01.7600.16385 C:\Windows\system32\d3d10core.dll 0x753d0000 0xfb000 6.01.7600.16385 C:\Windows\system32\WindowsCodecs.dll 0x70ec0000 0x4b000 6.01.7600.16385 C:\Windows\system32\apphelp.dll 0x74be0000 0x31000 6.01.7600.16385 C:\Windows\system32\EhStorShell.dll 0x74610000 0x6f000 6.01.7600.16385 C:\Windows\system32 tshrui.dll 0x73e70000 0x19000 6.01.7600.16385 C:\Windows\system32\srvcli.dll 0x74e20000 0xb000 6.01.7600.16385 C:\Windows\system32\cscapi.dll 0x74e10000 0xa000 6.01.7600.16385 C:\Windows\system32\slc.dll 0x73e30000 0x16000 6.01.7600.16385 C:\Windows\system32\CRYPTSP.dll 0x73df0000 0x3b000 6.01.7600.16385 C:\Windows\system32 saenh.dll 0x733a0000 0xe000 6.01.7600.16385 C:\Windows\system32\RpcRtRemote.dll 0x6fd30000 0x79000 6.01.7600.16385 C:\Windows\system32\mscms.dll 0x73360000 0x17000 6.01.7600.16385 C:\Windows\system32\USERENV.dll 0x73d40000 0xb000 6.01.7600.16385 C:\Windows\system32\profapi.dll 0x74c50000 0x9000 6.01.7600.16385 C:\Windows\system32\LINKINFO.dll 0x744a0000 0x16f000 6.01.7600.16385 C:\Windows\system32\explorerframe.dll 0x74c20000 0x2f000 6.01.7600.16385 C:\Windows\system32\DUser.dll 0x743e0000 0xb2000 6.01.7600.16385 C:\Windows\system32\DUI70.dll 0x74bd0000 0xc000 6.01.7600.16385 C:\Windows\system32\feclient.dll 0x74a40000 0x26000 3.12.0008.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\softokn3.dll 0x74a20000 0x18000 3.12.0008.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6 ssdbm3.dll 0x749d0000 0x41000 3.12.0008.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6\freebl3.dll 0x748e0000 0x50000 1.79.0000.0000 C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 6 ssckbi.dll 0x743d0000 0x6000 6.01.7600.16385 C:\Windows\System32\wship6.dll 0x736d0000 0x44000 6.01.7600.16385 C:\Windows\system32\DNSAPI.dll 0x73660000 0x27000 7.250.4204.0000 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL 0x735f0000 0x6000 6.01.7600.16385 C:\Windows\system32 asadhlp.dll 0x73600000 0x38000 6.01.7600.16385 C:\Windows\System32\fwpuclnt.dll 0x73760000 0x10000 6.01.7600.16385 C:\Windows\system32\NLAapi.dll 0x736c0000 0x8000 6.01.7600.16385 C:\Windows\System32\winrnr.dll 0x736b0000 0x10000 6.01.7600.16385 C:\Windows\system32 apinsp.dll 0x73690000 0x12000 6.01.7600.16385 C:\Windows\system32\pnrpnsp.dll No matching processes were found. No matching processes were found. No matching processes were found. ------------------------------------------------------------------------------ csrss.exe pid: 376 Command line: ------------------------------------------------------------------------------ csrss.exe pid: 456 Command line: ------------------------------------------------------------------------------ smss.exe pid: 276 Command line: ------------------------------------------------------------------------------ winlogon.exe pid: 636 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 876 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 972 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 312 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 448 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 824 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 1152 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 1304 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 1804 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 2444 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 2580 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 3904 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 4492 Command line: ------------------------------------------------------------------------------ svchost.exe pid: 4364 Command line: No matching processes were found. ¤¤¤¤¤¤¤¤¤¤¤ Ports ¤¤¤¤¤¤¤¤¤¤ Pid Process Port Proto Path ¤¤¤¤¤¤¤¤¤¤ Boot Execute ¤¤¤¤¤¤¤¤¤¤ HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute autocheck autochk * autocheck autochk * Auto Check Utility Microsoft Corporation 6.01.7600.16385 c:\windows\system32\autochk.exe lsdelete lsdelete c:\windows\system32\lsdelete.exe ¤¤¤¤¤¤¤¤¤¤ LSA | Security Providers ¤¤¤¤¤¤¤¤¤¤ HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders credssp.dll credssp.dll Credential Delegation Security Package Microsoft Corporation 6.01.7600.16385 c:\windows\system32\credssp.dll HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders credssp.dll credssp.dll Credential Delegation Security Package Microsoft Corporation 6.01.7600.16385 c:\windows\syswow64\credssp.dll HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages msv1_0 msv1_0 Microsoft Authentication Package v1.0 Microsoft Corporation 6.01.7600.16420 c:\windows\system32\msv1_0.dll HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages scecli scecli Moteur du client de l'Éditeur de configuration de sécurité Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\scecli.dll HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages kerberos kerberos Package de sécurité Kerberos Microsoft Corporation 6.01.7600.16385 c:\windows\system32\kerberos.dll msv1_0 msv1_0 Microsoft Authentication Package v1.0 Microsoft Corporation 6.01.7600.16420 c:\windows\system32\msv1_0.dll schannel schannel TLS / SSL Security Provider Microsoft Corporation 6.01.7600.16612 c:\windows\system32\schannel.dll wdigest wdigest Microsoft Digest Access Microsoft Corporation 6.01.7600.16385 c:\windows\system32\wdigest.dll tspkg tspkg Web Service Security Package Microsoft Corporation 6.01.7600.16385 c:\windows\system32 spkg.dll pku2u pku2u Pku2u Security Package Microsoft Corporation 6.01.7600.16385 c:\windows\system32\pku2u.dll livessp livessp LiveSSP Microsoft Corp. 7.250.4204.0000 c:\windows\system32\livessp.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers GenericProvider HKCR\CLSID\{25CBB996-92ED-457e-B28C-4774084BD562} Interface utilisateur d'authentification Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\authui.dll NPProvider HKCR\CLSID\{3dd6bec0-8193-4ffe-ae25-e08e39ea4063} Interface utilisateur d'authentification Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\authui.dll VaultCredProvider HKCR\CLSID\{503739d0-4c5e-4cfd-b3ba-d881334f0df2} Fournisseur d'informations d'identification Microsoft Corporation 6.01.7600.16385 c:\windows\system32\vaultcredprovider.dll PasswordProvider HKCR\CLSID\{6f45dc1e-5384-457a-bc13-2cd81b0d28ed} Interface utilisateur d'authentification Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\authui.dll Smartcard Credential Provider HKCR\CLSID\{8bf9a910-a8ff-457f-999f-a5ca10b4a885} Fournisseur d'informations d'identification de cartes à puce Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\smartcardcredentialprovider.dll Smartcard Pin Provider HKCR\CLSID\{94596c7e-3744-41ce-893e-bbf09122f76a} Fournisseur d'informations d'identification de cartes à puce Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\smartcardcredentialprovider.dll WinBio Credential Provider HKCR\CLSID\{AC3AC249-E820-4343-A65B-377AC634DC09} Fournisseur d'informations d'identification biométrique Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\biocredprov.dll CCertProvider HKCR\CLSID\{e74e57b0-6c6d-44d5-9cda-fb2df5ed7435} Fournisseur d'informations d'identification avec certificat Microsoft Corporation 6.01.7600.16385 c:\windows\system32\certcredprovider.dll WLIDCredentialProvider HKCR\CLSID\{F8A0B131-5F68-486c-8040-7E8FC3C85BB6} Microsoft® Windows Live ID Credential Provider Microsoft Corp. 7.250.4204.0000 c:\program files\common files\microsoft shared\windows live\wlidcredprov.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters GenericFilter HKCR\CLSID\{DDC0EED2-ADBE-40b6-A217-EDE16A79A0DE} Interface utilisateur d'authentification Windows Microsoft Corporation 6.01.7600.16385 c:\windows\system32\authui.dll HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\PLAP Providers CRasProvider HKCR\CLSID\{5537E283-B1E7-4EF8-9C6E-7AB0AFE5056D} Fournisseur d'informations d'identification PLAP RAS Microsoft Corporation 6.01.7600.16385 c:\windows\system32 asplap.dll ¤¤¤¤¤¤¤¤¤¤ Scheduled tasks ¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤ Programs ¤¤¤¤¤¤¤¤¤¤ ABBYY FineReader 6.0 Sprint 6.00.1395.4512 AVG Free 9.0 Ad-Aware 8.3.0 Ad-Aware Adobe Flash Player 10 Plugin 10.1.85.3 Adobe Reader 9.3.4 - Français 9.3.4 BS.Player FREE 2.56.1043 CCleaner 2.34 D3DX10 15.0.1166.623 EPSON Scan Epson Easy Photo Print 2 2.1.0.0 Epson Event Manager 2.30.01 Epson FAX Utility 1.00.01 Epson PC-FAX Driver Epson Printer Software Downloader 2.0.0 Epson Printer Software Downloader Epson Stylus Office BX610FW_Office TX610FW_SX610FW Manuel EpsonNet Print 2.4i EpsonNet Setup 3.1c HijackThis 2.0.2 2.0.2 List_Kill'em MSVCRT 15.4.2862.0708 Malwarebytes' Anti-Malware Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Excel MUI (French) 2007 12.0.6425.1000 Microsoft Office Outlook MUI (French) 2007 12.0.6425.1000 Microsoft Office PowerPoint MUI (French) 2007 12.0.6425.1000 Microsoft Office Proof (Arabic) 2007 12.0.6425.1000 Microsoft Office Proof (Dutch) 2007 12.0.6425.1000 Microsoft Office Proof (English) 2007 12.0.6425.1000 Microsoft Office Proof (French) 2007 12.0.6425.1000 Microsoft Office Proof (German) 2007 12.0.6425.1000 Microsoft Office Proof (Spanish) 2007 12.0.6425.1000 Microsoft Office Proofing (French) 2007 12.0.4518.1014 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Shared MUI (French) 2007 12.0.6425.1000 Microsoft Office Standard 2007 12.0.6425.1000 Microsoft Office Standard 2007 12.0.6425.1000 Microsoft Office Word MUI (French) 2007 12.0.6425.1000 Microsoft Silverlight 4.0.50917.0 Microsoft Visual C++ 2005 Redistributable 8.0.59193 Mise à jour Microsoft Office Excel 2007 Help (KB963678) Mise à jour Microsoft Office Outlook 2007 Help (KB963677) Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) Mise à jour Microsoft Office Word 2007 Help (KB963665) Mozilla Firefox (3.6.10) 3.6.10 (fr) Mozilla Firefox 4.0b6 (x86 fr) 4.0b6 NVIDIA Stereoscopic 3D Driver 7.17.12.5896 RocketDock 1.3.5 Security Update for 2007 Microsoft Office System (KB2277947) Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for 2007 Microsoft Office System (KB982312) Security Update for 2007 Microsoft Office System (KB982331) Security Update for Microsoft Office Excel 2007 (KB982308) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office Outlook 2007 (KB2288953) Security Update for Microsoft Office PowerPoint 2007 (KB982158) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2251419) Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Skype? 4.2 4.2.169 Spybot - Search & Destroy 1.6.2 Update for 2007 Microsoft Office System (KB2284654) Update for 2007 Microsoft Office System (KB967642) Update for Outlook 2007 Junk Email Filter (kb2291599) Visual C++ 2008 x86 Runtime - (v9.0.30729) 9.0.30729 Visual C++ 2008 x86 Runtime - v9.0.30729.01 9.0.30729.01 Visual C++ 8.0 Runtime Setup Package (x64) 9.0.0.623 Windows Live Bêta 15.4.3001.0809 Windows Live Bêta 15.4.3001.0809 Windows Live Communications Platform 15.4.3001.0809 Windows Live Installer 15.4.3001.0809 Windows Live Messenger 15.4.3002.0810 Windows Live Messenger 15.4.3002.0810 Windows Live PIMT Platform 15.4.3002.0810 Windows Live Photo Common 15.4.3002.0810 Windows Live Photo Common Beta 15.4.3002.0810 Windows Live SOXE 15.4.3001.0809 Windows Live SOXE Definitions 15.4.3001.0809 Windows Live UX Platform 15.4.3001.0809 Windows Live UX Platform Language Pack 15.4.3001.0809 ZoneAlarm 9.2.057.000 µTorrent 2.0.3 ¤¤¤¤¤¤¤¤¤¤ Drivers ¤¤¤¤¤¤¤¤¤¤ 7f29903cb8f5590d52db0c9f97049a25 c:\windows\system32\drivers\gm.dls 7111bfa692a22e4b3c07f1e6c6ff6f72 c:\windows\system32\drivers\gmreadme.txt c7dd7d9739785bd3a6b8499eec1dee7e c:\windows\system32\drivers\mbamswissarmy.sys 5cf95b35e59e2a38023836fff31be64c c:\windows\system32\drivers\wimmount.sys // // File Checksum Integrity Verifier version 2.05. // 7f29903cb8f5590d52db0c9f97049a25 c:\windows\syswow64\drivers\gm.dls 7111bfa692a22e4b3c07f1e6c6ff6f72 c:\windows\syswow64\drivers\gmreadme.txt c7dd7d9739785bd3a6b8499eec1dee7e c:\windows\syswow64\drivers\mbamswissarmy.sys 5cf95b35e59e2a38023836fff31be64c c:\windows\syswow64\drivers\wimmount.sys // // File Checksum Integrity Verifier version 2.05. // 64edd3f59db321947969fdf1dd747323 c:\windows\sysnative\drivers\1394bus.sys 1b00662092f9f9568b995902f0cc40d5 c:\windows\sysnative\drivers\1394ohci.sys 6f11e88748cdefd2f76aa215f97ddfe5 c:\windows\sysnative\drivers\acpi.sys 63b05a0420ce4bf0e4af6dcc7cada254 c:\windows\sysnative\drivers\acpipmi.sys 2f6b34b83843f0c5118b63ac634f5bf4 c:\windows\sysnative\drivers\adp94xx.sys 597f78224ee9224ea1a13d6350ced962 c:\windows\sysnative\drivers\adpahci.sys e109549c90f62fb570b9540c4b148e54 c:\windows\sysnative\drivers\adpu320.sys b9384e03479d2506bc924c16a3db87bc c:\windows\sysnative\drivers\afd.sys 7ecff9b22276b73f43a99a15a6094e90 c:\windows\sysnative\drivers\agilevpn.sys 608c14dba7299d8cb6ed035a68a15799 c:\windows\sysnative\drivers\AGP440.sys 5812713a477a3ad7363c7438ca2ee038 c:\windows\sysnative\drivers\aliide.sys 1ff8b4431c353ce385c875f194924c0c c:\windows\sysnative\drivers\amdide.sys 7024f087cff1833a806193ef9d22cda9 c:\windows\sysnative\drivers\amdk8.sys 1e56388b3fe0d031c44144eb8c4d6217 c:\windows\sysnative\drivers\amdppm.sys 7a4b413614c055935567cf88a9734d38 c:\windows\sysnative\drivers\amdsata.sys f67f933e79241ed32ff46a4f29b5120b c:\windows\sysnative\drivers\amdsbs.sys b4ad0cacbab298671dd6f6ef7e20679d c:\windows\sysnative\drivers\amdxata.sys 42fd751b27fa0e9c69bb39f39e409594 c:\windows\sysnative\drivers\appid.sys c484f8ceb1717c540242531db7845c4e c:\windows\sysnative\drivers\arc.sys 019af6924aefe7839f61c830227fe79c c:\windows\sysnative\drivers\arcsas.sys 769765ce2cc62867468cea93969b2242 c:\windows\sysnative\drivers\asyncmac.sys 02062c0b390b7729edc9e69c680a6f3c c:\windows\sysnative\drivers\atapi.sys aa2186f7944104a16d6ed176ed462cec c:\windows\sysnative\drivers\ataport.sys b447db072bf939db9e07bef2adf4ecbd c:\windows\sysnative\drivers\avgldx64.sys 405baabbb48f9176e220020b1a77c47b c:\windows\sysnative\drivers\avgmfx64.sys ce90aec358a809e7bce6bb0f1da84622 c:\windows\sysnative\drivers\avgtdia.sys b5ace6968304a3900eeb1ebfd9622df2 c:\windows\sysnative\drivers\b57nd60a.sys f4de2ae7a9e1badac70bc71ea2c17612 c:\windows\sysnative\drivers\battc.sys 16a47ce2decc9b099349a5f840654746 c:\windows\sysnative\drivers\beep.sys 61583ee3c3a17003c4acd0475646b4d3 c:\windows\sysnative\drivers\blbdrive.sys 91ce0d3dc57dd377e690a2d324022b08 c:\windows\sysnative\drivers\bowser.sys f09eee9edc320b5e1501f749fde686c8 c:\windows\sysnative\drivers\BrFiltLo.sys b114d3098e9bdb8bea8b053685831be6 c:\windows\sysnative\drivers\BrFiltUp.sys 5c2f352a4e961d72518261257aae204b c:\windows\sysnative\drivers\bridge.sys 43bea8d483bf1870f018e2d02e06a5bd c:\windows\sysnative\drivers\BrSerId.sys a6eca2151b08a09caceca35c07f05b42 c:\windows\sysnative\drivers\BrSerWdm.sys b79968002c277e869cf38bd22cd61524 c:\windows\sysnative\drivers\BrUsbMdm.sys a87528880231c54e75ea7a44943b38bf c:\windows\sysnative\drivers\BrUsbSer.sys 9da669f11d1f894ab4eb69bf546a42e8 c:\windows\sysnative\drivers\bthmodem.sys 3e5b191307609f7514148c6832bb0842 c:\windows\sysnative\drivers\bxvbda.sys b8bd2bb284668c84865658c77574381a c:\windows\sysnative\drivers\cdfs.sys 83d2d75e1efb81b3450c18131443f7db c:\windows\sysnative\drivers\cdrom.sys d7cd5c4e1b71fa62050515314cfb52cf c:\windows\sysnative\drivers\circlass.sys 62f1ed63f0cb0b5a2f65d15a6490c2fd c:\windows\sysnative\drivers\Classpnp.sys 0840155d0bddf1190f84a663c284bd33 c:\windows\sysnative\drivers\CmBatt.sys e19d3f095812725d88f9001985b94edd c:\windows\sysnative\drivers\cmdide.sys f95fd4cb7da00ba2a63ce9f6b5c053e1 c:\windows\sysnative\drivers\cng.sys 102de219c3f61415f964c88e9085ad14 c:\windows\sysnative\drivers\compbatt.sys f26b3a86f6fa87ca360b879581ab4123 c:\windows\sysnative\drivers\CompositeBus.sys 3e588b60ec061686ba05d33574a344c6 c:\windows\sysnative\drivers\crashdmp.sys 1c827878a998c18847245fe1f34ee597 c:\windows\sysnative\drivers\crcdisk.sys 3f1dc527070acb87e40afe46ef6da749 c:\windows\sysnative\drivers\dfsc.sys 13096b05847ec78f0977f2c0f79e9ab3 c:\windows\sysnative\drivers\discache.sys 9819eee8b5ea3784ec4af3b137a5244c c:\windows\sysnative\drivers\disk.sys 77a4b22c0be4568872521dd5e4279cee c:\windows\sysnative\drivers\Diskdump.sys 21d26064aedb4988f785bb4a3a2c051e c:\windows\sysnative\drivers\drmk.sys 9b19f34400d24df84c858a421c205754 c:\windows\sysnative\drivers\drmkaud.sys 839b5fe3d48e9f35b22c21a3d5103f6c c:\windows\sysnative\drivers\Dumpata.sys 814db88f2641691575a455cf25354098 c:\windows\sysnative\drivers\dumpfve.sys bf24d6f2ed97fe830bfd52b246f98e67 c:\windows\sysnative\drivers\dxapi.sys fede0629ecb23650d48989517d4914da c:\windows\sysnative\drivers\dxg.sys ebce0b0924835f635f620d19f0529dce c:\windows\sysnative\drivers\dxgkrnl.sys ddb7ad1ba01005521010db3e30adc972 c:\windows\sysnative\drivers\dxgmms1.sys 0e5da5369a0fcaea12456dd852545184 c:\windows\sysnative\drivers\elxstor.sys 34a3c54752046e79a126e15c51db409b c:\windows\sysnative\drivers\errdev.sys dc5d737f51be844d8c82c695eb17372f c:\windows\sysnative\drivers\evbda.sys a510c654ec00c1e9bdd91eeb3a59823b c:\windows\sysnative\drivers\exfat.sys 0adc83218b66a6db380c330836f3e36d c:\windows\sysnative\drivers\fastfat.sys d765d19cd8ef61f650c384f62fac00ab c:\windows\sysnative\drivers\fdc.sys 655661be46b5f5f3fd454e2c3095b930 c:\windows\sysnative\drivers\fileinfo.sys 5f671ab5bc87eea04ec38a6cd5962a47 c:\windows\sysnative\drivers\filetrace.sys c172a0f53008eaeb8ea33fe10e177af5 c:\windows\sysnative\drivers\flpydisk.sys f7866af72abbaf84b1fa5aa195378c59 c:\windows\sysnative\drivers\fltMgr.sys d43703496149971890703b4b1b723eac c:\windows\sysnative\drivers\fsdepends.sys e95ef8547de20cf0603557c0cf7a9462 c:\windows\sysnative\drivers\fs_rec.sys ae87ba80d0ec3b57126ed2cdc15b24ed c:\windows\sysnative\drivers\fvevol.sys 50555005e22a56aef10be607472d0bdc c:\windows\sysnative\drivers\FWPKCLNT.SYS 8c778d335c9d272cfd3298ab02abe3b6 c:\windows\sysnative\drivers\GAGP30KX.SYS 7f29903cb8f5590d52db0c9f97049a25 c:\windows\sysnative\drivers\gm.dls 7111bfa692a22e4b3c07f1e6c6ff6f72 c:\windows\sysnative\drivers\gmreadme.txt f2523ef6460fc42405b12248338ab2f0 c:\windows\sysnative\drivers\hcw85cir.sys 0a49913402747a0b67de940fb42cbdbb c:\windows\sysnative\drivers\hdaudbus.sys 6410f6f415b2a5a9037224c41da8bf12 c:\windows\sysnative\drivers\HdAudio.sys 78e86380454a7b10a5eb255dc44a355f c:\windows\sysnative\drivers\hidbatt.sys 7fd2a313f7afe5c4dab14798c48dd104 c:\windows\sysnative\drivers\hidbth.sys 685fec2407fc121eb937cb658b3c0f35 c:\windows\sysnative\drivers\hidclass.sys 0a77d29f311b88cfae3b13f9c1a73825 c:\windows\sysnative\drivers\hidir.sys 49ee2e52e6cd03947dad72f65367be06 c:\windows\sysnative\drivers\hidparse.sys b3bf6b5b50006def50b66306d99fcf6f c:\windows\sysnative\drivers\hidusb.sys 0886d440058f203eba0e1825e4355914 c:\windows\sysnative\drivers\HpSAMD.sys cee049cac4efa7f4e1e4ad014414a5d4 c:\windows\sysnative\drivers\http.sys f17766a19145f111856378df337a5d79 c:\windows\sysnative\drivers\hwpolicy.sys fa55c73d4affa7ee23ac4be53b4592d3 c:\windows\sysnative\drivers\i8042prt.sys d83efb6fd45df9d55e9a1afc63640d50 c:\windows\sysnative\drivers\iaStorV.sys 5c18831c61933628f5bb0ea2675b9d21 c:\windows\sysnative\drivers\iirsp.sys f00f20e70c6ec3aa366910083a0518aa c:\windows\sysnative\drivers\intelide.sys ada036632c664caa754079041cf1f8c1 c:\windows\sysnative\drivers\intelppm.sys 722dd294df62483cecaae6e094b4d695 c:\windows\sysnative\drivers\ipfltdrv.sys e2b4a4494db7cb9b89b55ca268c337c5 c:\windows\sysnative\drivers\IPMIDrv.sys af9b39a7e7b6caa203b3862582e9f2d0 c:\windows\sysnative\drivers\ipnat.sys 05360b1ea5a2abf620d1d96ebd8bd8f1 c:\windows\sysnative\drivers\irda.sys 3abf5e7213eb28966d55d58b515d5ce9 c:\windows\sysnative\drivers\irenum.sys 2f7b28dc3e1183e5eb418df55c204f38 c:\windows\sysnative\drivers\isapnp.sys bc02336f1cba7dcc7d1213bb588a68a5 c:\windows\sysnative\drivers\kbdclass.sys 6def98f8541e1b5dceb2c822a11f7323 c:\windows\sysnative\drivers\kbdhid.sys 5c7af4a20f5bf67042b2e613d123d111 c:\windows\sysnative\drivers\ks.sys e8b6fcc9c83535c67f835d407620bd27 c:\windows\sysnative\drivers\ksecdd.sys a8c63880ef6f4d3fec7b616b9c060215 c:\windows\sysnative\drivers\ksecpkg.sys 6869281e78cb31a43e969f06b57347c4 c:\windows\sysnative\drivers\ksthunk.sys 3c46290f7a5d45ba6ef32c248e22aa69 c:\windows\sysnative\drivers\Lbd.sys 1538831cf8ad2979a04c423779465827 c:\windows\sysnative\drivers\lltdio.sys 1a93e54eb0ece102495a51266dcdb6a6 c:\windows\sysnative\drivers\lsi_fc.sys 1047184a9fdc8bdbff857175875ee810 c:\windows\sysnative\drivers\lsi_sas.sys 30f5c0de1ee8b5bc9306c1f0e4a75f93 c:\windows\sysnative\drivers\lsi_sas2.sys 0504eacaff0d3c8aed161c4b0d369d4a c:\windows\sysnative\drivers\lsi_scsi.sys 43d0f98e1d56ccddb0d5254cff7b356e c:\windows\sysnative\drivers\luafv.sys e330051cce41eb4522e5dcebc15adcea c:\windows\sysnative\drivers\mbam.sys 3c9f072f9dca856b9fb7a20cbd4281ac c:\windows\sysnative\drivers\mcd.sys a55805f747c6edb6a9080d7c633bd0f4 c:\windows\sysnative\drivers\megasas.sys baf74ce0072480c3b6b7c13b2a94d6b3 c:\windows\sysnative\drivers\MegaSR.sys 800ba92f7010378b09f9ed9270f07137 c:\windows\sysnative\drivers\modem.sys b03d591dc7da45ece20b3b467e6aadaa c:\windows\sysnative\drivers\monitor.sys 7d27ea49f3c1f687d357e77a470aea99 c:\windows\sysnative\drivers\mouclass.sys d3bf052c40b0c4166d9fd86a4288c1e6 c:\windows\sysnative\drivers\mouhid.sys 791af66c4d0e7c90a3646066386fb571 c:\windows\sysnative\drivers\mountmgr.sys 609d1d87649ecc19796f4d76d4c15cea c:\windows\sysnative\drivers\mpio.sys 6c38c9e45ae0ea2fa5e551f2ed5e978f c:\windows\sysnative\drivers\mpsdrv.sys 30524261bb51d96d6fcbac20c810183c c:\windows\sysnative\drivers\mrxdav.sys 767a4c3bcf9410c286ced15a2db17108 c:\windows\sysnative\drivers\mrxsmb.sys 920ee0ff995fcfdeb08c41605a959e1c c:\windows\sysnative\drivers\mrxsmb10.sys 740d7ea9d72c981510a5292cf6adc941 c:\windows\sysnative\drivers\mrxsmb20.sys 5c37497276e3b3a5488b23a326a754b7 c:\windows\sysnative\drivers\msahci.sys 8d27b597229aed79430fb9db3bcbfbd0 c:\windows\sysnative\drivers\msdsm.sys aa3fb40e17ce1388fa1bedab50ea8f96 c:\windows\sysnative\drivers\msfs.sys 933222b19ff3e7ea5f65517ea1f7d57e c:\windows\sysnative\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf d41d8cd98f00b204e9800998ecf8427e c:\windows\sysnative\drivers\Msft_Kernel_phaudlwr_01005.Wdf d41d8cd98f00b204e9800998ecf8427e c:\windows\sysnative\drivers\Msft_User_WpdFs_01_09_00.Wdf d41d8cd98f00b204e9800998ecf8427e c:\windows\sysnative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf f9d215a46a8b9753f61767fa72a20326 c:\windows\sysnative\drivers\mshidkmdf.sys d916874bbd4f8b07bfb7fa9b3ccae29d c:\windows\sysnative\drivers\msisadrv.sys fa4d2557de56d45b0a346f93564be6e1 c:\windows\sysnative\drivers\msiscsi.sys 49ccf2c4fea34ffad8b1b59d49439366 c:\windows\sysnative\drivers\mskssrv.sys bdd71ace35a232104ddd349ee70e1ab3 c:\windows\sysnative\drivers\mspclock.sys 4ed981241db27c3383d72092b618a1d0 c:\windows\sysnative\drivers\mspqm.sys 89cb141aa8616d8c6a4610fa26c60964 c:\windows\sysnative\drivers\msrpc.sys 0eed230e37515a0eaee3c2e1bc97b288 c:\windows\sysnative\drivers\mssmbios.sys 2e66f9ecb30b4221a318c92ac2250779 c:\windows\sysnative\drivers\mstee.sys 7ea404308934e675bffde8edf0757bcd c:\windows\sysnative\drivers\MTConfig.sys f9a18612fd3526fe473c1bda678d61c8 c:\windows\sysnative\drivers\mup.sys cad515dbd07d082bb317d9928ce8962c c:\windows\sysnative\drivers dis.sys 9f9a1f53aad7da4d6fef5bb73ab811ac c:\windows\sysnative\drivers discap.sys 30639c932d9fef22b31268fe25a1b6e5 c:\windows\sysnative\drivers distapi.sys f105ba1e22bf1f2ee8f005d4305e4bec c:\windows\sysnative\drivers disuio.sys 557dfab9ca1fcb036ac77564c010dad3 c:\windows\sysnative\drivers diswan.sys 659b74fb74b86228d6338d643cd3e3cf c:\windows\sysnative\drivers dproxy.sys 86743d9f5d2b1048062b14b1d84501c4 c:\windows\sysnative\drivers etbios.sys 9162b273a44ab9dce5b44362731d062a c:\windows\sysnative\drivers etbt.sys 02903eb9d9308541d032417acdfb975c c:\windows\sysnative\drivers etio.sys 77889813be4d166cdab78ddba990da92 c:\windows\sysnative\drivers frd960.sys 1e4c4ab5c9b8dd13179bbdc75a2a01f7 c:\windows\sysnative\drivers pfs.sys e7f5ae18af4168178a642a9247c63001 c:\windows\sysnative\drivers siproxy.sys 356698a13c4630d5b31c37378d469196 c:\windows\sysnative\drivers tfs.sys 9899284589f75fa8724ff3d16aed75c1 c:\windows\sysnative\drivers ull.sys 7eaf04493a6efd2a197f26f2c5df9464 c:\windows\sysnative\drivers vBridge.kmd e55cab397f77d5208db18a78b1b7c0d5 c:\windows\sysnative\drivers vlddmkm.sys a85b4f2ef3a7304a5399ef0526423040 c:\windows\sysnative\drivers vm62x64.sys 3e38712941e9bb4ddbee00affe3fed3d c:\windows\sysnative\drivers vraid.sys 477dc4d6deb99be37084c9ac6d013da1 c:\windows\sysnative\drivers vstor.sys 270d7cd42d6e3979f6dd0146650f0e05 c:\windows\sysnative\drivers\NV_AGP.SYS 1ea3749c4114db3e3161156ffffa6b33 c:\windows\sysnative\drivers wifi.sys 3589478e4b22ce21b41fa1bfc0b8b8a0 c:\windows\sysnative\drivers\ohci1394.sys ee992183bd8eaefd9973f352e587a299 c:\windows\sysnative\drivers\pacer.sys 0086431c29c35be1dbc43f52cc273887 c:\windows\sysnative\drivers\parport.sys 7daa117143316c4a1537e074a5a9eaf0 c:\windows\sysnative\drivers\partmgr.sys f36f6504009f2fb0dfd1b17a116ad74b c:\windows\sysnative\drivers\pci.sys b5b8b5ef2e5cb34df8dcf8831e3534fa c:\windows\sysnative\drivers\pciide.sys 144497daa145ba0f7be896064146c058 c:\windows\sysnative\drivers\pciidex.sys b2e81d4e87ce48589f98cb8c05b01f2f c:\windows\sysnative\drivers\pcmcia.sys d6b9c2e1a11a3a4b26a182ffef18f603 c:\windows\sysnative\drivers\pcw.sys 68769c3356b3be5d1c732c97b9a80d6e c:\windows\sysnative\drivers\PEAuth.sys fe8af03efec0387fbbfcfd32e328db9a c:\windows\sysnative\drivers\phaudlwr.sys 32e11315b5126921ffd9074840ef13d3 c:\windows\sysnative\drivers\portcls.sys 0d922e23c041efb1c3fac2a6f943c9bf c:\windows\sysnative\drivers\processr.sys a53a15a11ebfd21077463ee2c7afeef0 c:\windows\sysnative\drivers\ql2300.sys 4f6d12b51de1aaeff7dc58c4d75423c8 c:\windows\sysnative\drivers\ql40xx.sys 76707bb36430888d9ce9d705398adb6c c:\windows\sysnative\drivers\qwavedrv.sys 5a0da8ad5762fa2d91678a8a01311704 c:\windows\sysnative\drivers asacd.sys 87a6e852a22991580d6d39adc4790463 c:\windows\sysnative\drivers asl2tp.sys 855c9b1cd4756c5e9a2aa58a15f58c25 c:\windows\sysnative\drivers aspppoe.sys 27cc19e81ba5e3403c48302127bda717 c:\windows\sysnative\drivers aspptp.sys e8b1e447b008d07ff47d016c2b0eeecb c:\windows\sysnative\drivers assstp.sys 3bac8142102c15d59a87757c1d41dce5 c:\windows\sysnative\drivers dbss.sys 302da2a0539f2cf54d7c6cc30c1f2d8d c:\windows\sysnative\drivers dpbus.sys cea6cc257fc9b7715f1c2b4849286d24 c:\windows\sysnative\drivers\RDPCDD.sys bb5971a4f00659529a5c44831af22365 c:\windows\sysnative\drivers\RDPENCDD.sys 216f3fa57533d98e1f74ded70113177a c:\windows\sysnative\drivers\RDPREFMP.sys 8a3e6bea1c53ea6177fe2b6eba2c80d7 c:\windows\sysnative\drivers dpwd.sys 634b9a2181d98f15941236886164ec8b c:\windows\sysnative\drivers dyboost.sys 77b3b747eb2413072b8e4306018d0c9b c:\windows\sysnative\drivers mcast.sys fc6d5c50d846b795335deb3fce8b33f3 c:\windows\sysnative\drivers\RNDISMP.sys 388d3dd1a6457280f3badba9f3acd6b1 c:\windows\sysnative\drivers ootmdm.sys ddc86e4f8e7456261e637e3552e804ff c:\windows\sysnative\drivers spndr.sys 945ab249d12cbe044782430c6013aa1a c:\windows\sysnative\drivers\RTL8187B.sys e3bbb89983daf5622c1d50cf49f28227 c:\windows\sysnative\drivers\sbp2port.sys c94da20c7e3ba1dca269bc8460d98387 c:\windows\sysnative\drivers\scfilter.sys ad3a6838a059d65fb55d2f61cf0a6c1f c:\windows\sysnative\drivers\scsiport.sys 3ea8a16169c26afbeb544e0e48421186 c:\windows\sysnative\drivers\secdrv.sys cb624c0035412af0debec78c41f5ca1b c:\windows\sysnative\drivers\serenum.sys c1d8e28b2c2adfaec4ba89e9fda69bd6 c:\windows\sysnative\drivers\serial.sys 1c545a7d0691cc4a027396535691c3e3 c:\windows\sysnative\drivers\sermouse.sys a554811bcd09279536440c964ae35bbf c:\windows\sysnative\drivers\sffdisk.sys ff414f0baefeba59bc6c04b3db0b87bf c:\windows\sysnative\drivers\sffp_mmc.sys 178298f767fe638c9fedcbdef58bb5e4 c:\windows\sysnative\drivers\sffp_sd.sys a9d601643a1647211a1ee2ec4e433ff4 c:\windows\sysnative\drivers\sfloppy.sys 843caf1e5fde1ffd5ff768f23a51e2e1 c:\windows\sysnative\drivers\sisraid2.sys 6a6c106d42e9ffff8b9fcb4f754f6da4 c:\windows\sysnative\drivers\sisraid4.sys 548260a7b8654e024dc30bf8a7c5baa4 c:\windows\sysnative\drivers\smb.sys a80348ba03e96c70852959655ca3e084 c:\windows\sysnative\drivers\smclib.sys e7ecfb25a1b0d49f758a86583581ffe7 c:\windows\sysnative\drivers\SPC620.sys 3846d5a674e2dbc1b5115e97fbafd194 c:\windows\sysnative\drivers\SPC620m.sys b9e31e5cacdfe584f34f730a677803f9 c:\windows\sysnative\drivers\spldr.sys fff95479c7ab1550f0750a5d01744211 c:\windows\sysnative\drivers\spsys.sys 43067a65522eaec33d31a12d6fa8e3f4 c:\windows\sysnative\drivers\srv.sys 03715cf9c30b563da35fc5f2b8f7b8e0 c:\windows\sysnative\drivers\srv2.sys fbd09635227a8026c0f7790f604343c6 c:\windows\sysnative\drivers\srvnet.sys f3817967ed533d08327dc73bc4d5542a c:\windows\sysnative\drivers\stexstor.sys 141e6f0b54da421b8de146f5ad947760 c:\windows\sysnative\drivers\storport.sys 001cc10fa5e71ae1119115e126c8750d c:\windows\sysnative\drivers\stream.sys d01ec09b6711a5f8e7e6564a4d0fbc90 c:\windows\sysnative\drivers\swenum.sys 6e316c01cba8b785fe495f5cc4f48c6f c:\windows\sysnative\drivers ape.sys 90a2d722cf64d911879d6c4a4f802a4d c:\windows\sysnative\drivers cpip.sys 76d078af6f587b162d50210f761eb9ed c:\windows\sysnative\drivers cpipreg.sys 0ca6fe26acc7ffee1bd0463f40835f32 c:\windows\sysnative\drivers di.sys 3371d21011695b16333a3934340c4e7c c:\windows\sysnative\drivers dpipe.sys e4245bda3190a582d55ed09e137401a9 c:\windows\sysnative\drivers dtcp.sys 079125c4b17b01fcaeebce0bcb290c0f c:\windows\sysnative\drivers dx.sys c448651339196c0e869a355171875522 c:\windows\sysnative\drivers ermdd.sys 61b96c26131e37b24e93327a0bd1fb95 c:\windows\sysnative\drivers ssecsrv.sys 3836171a2cdf3af8ef10856db9835a70 c:\windows\sysnative\drivers unnel.sys b4dd609bd7e282bfc683cec7eaaaad67 c:\windows\sysnative\drivers\UAGP35.SYS d47baead86c65d4f4069d7ce0a4edceb c:\windows\sysnative\drivers\udfs.sys 4bfe1bc28391222894cbf1e7d0e42320 c:\windows\sysnative\drivers\ULIAGPKX.SYS eab6c35e62b1b0db0d1b48b671d3a117 c:\windows\sysnative\drivers\umbus.sys b2e8e8cb557b156da5493bbddcc1474d c:\windows\sysnative\drivers\umpass.sys d0fe8cb5f84303e73ff0754437fad3d1 c:\windows\sysnative\drivers\usb8023.sys 77b01bc848298223a95d4ec23e1785a1 c:\windows\sysnative\drivers\USBAUDIO.sys faec06c1d24e2770ecc4f7c37659824d c:\windows\sysnative\drivers\USBCAMD2.sys b26afb54a534d634523c4fb66765b026 c:\windows\sysnative\drivers\usbccgp.sys af0892a803fdda7492f595368e3b68e7 c:\windows\sysnative\drivers\usbcir.sys 63c8d74bed9f80f4dd0aa7a3101eb639 c:\windows\sysnative\drivers\usbd.sys df9f9afc9aaabd8ed47975d44e38169a c:\windows\sysnative\drivers\usbehci.sys 372a91bc3c6603080a793880b0873785 c:\windows\sysnative\drivers\usbhub.sys 58e546bbaf87664fc57e0f6081e4f609 c:\windows\sysnative\drivers\usbohci.sys a91291136d1e70966645252f6b828711 c:\windows\sysnative\drivers\usbport.sys 73188f58fb384e75c4063d29413cee3d c:\windows\sysnative\drivers\usbprint.sys 8f0d9d2ea6cfed2730b5bafb9b5b11c2 c:\windows\sysnative\drivers\usbrpm.sys 080d3820da6c046be82fc8b45a893e83 c:\windows\sysnative\drivers\USBSTOR.SYS 81fb2216d3a60d1284455d511797db3d c:\windows\sysnative\drivers\usbuhci.sys 7cb8c573c6e4a2714402cc0a36eab4fe c:\windows\sysnative\drivers\usbvideo.sys c5c876ccfc083ff3b128f933823e87bd c:\windows\sysnative\drivers\vdrvroot.sys 53e92a310193cb3c03bea963de7d9cfc c:\windows\sysnative\drivers\vga.sys da4da3f5e02943c2dc8c6ed875de68dd c:\windows\sysnative\drivers\vgapnp.sys c82e748660f62a242b2dfac1442f22a4 c:\windows\sysnative\drivers\vhdmp.sys e5689d93ffe4e5d66c0178761240dd54 c:\windows\sysnative\drivers\viaide.sys e7353d59c9842bc7299faeb7e7e09340 c:\windows\sysnative\drivers\videoprt.sys 2b1a3dae2b4e70dbba822b7a03fbd4a3 c:\windows\sysnative\drivers\volmgr.sys 99b0cbb569ca79acaed8c91461d765fb c:\windows\sysnative\drivers\volmgrx.sys 58f82eed8ca24b461441f9c3e4f0bf5c c:\windows\sysnative\drivers\volsnap.sys fb63d15da00430bbd22c7e3af864ccb9 c:\windows\sysnative\drivers\vsconfig.xml 48bfa6276bcc0535f5f8898107ed489a c:\windows\sysnative\drivers\vsdatant.sys 5e2016ea6ebaca03c04feac5f330d997 c:\windows\sysnative\drivers\vsmraid.sys 36d4720b72b5c5d9cb2b9c29e9df67a1 c:\windows\sysnative\drivers\vwifibus.sys 6a3d66263414ff0d6fa754c646612f3f c:\windows\sysnative\drivers\vwififlt.sys 6a638fc4bfddc4d9b186c28c91bd1a01 c:\windows\sysnative\drivers\vwifimp.sys 4e9440f4f152a7b944cb1663d3935a3e c:\windows\sysnative\drivers\wacompen.sys 47ca49400643effd3f1c9a27e1d69324 c:\windows\sysnative\drivers\wanarp.sys fc438d1430b28618e2d0c7c332a710ad c:\windows\sysnative\drivers\watchdog.sys 72889e16ff12ba0f235467d6091b17dc c:\windows\sysnative\drivers\wd.sys 441bd2d7b4f98134c3a4f9fa570fd250 c:\windows\sysnative\drivers\Wdf01000.sys 1b409454d7a00110fdb06f7e0f155a88 c:\windows\sysnative\drivers\WdfLdr.sys 611b23304bf067451a9fdee01fbdd725 c:\windows\sysnative\drivers\wfplwf.sys 05ecaec3e4529a7153b3136ceb49f0ec c:\windows\sysnative\drivers\wimmount.sys 817eaff5d38674edd7713b9dfb8e9791 c:\windows\sysnative\drivers\winusb.sys f6ff8944478594d0e414d3f048f0d778 c:\windows\sysnative\drivers\wmiacpi.sys fc146f46872d4c5b529b89a5131fd1e6 c:\windows\sysnative\drivers\wmilib.sys 6bcc1d7d2fd2453957c5479a32364e52 c:\windows\sysnative\drivers\ws2ifsl.sys 8d918b1db190a4d9b1753a66fa8c96e8 c:\windows\sysnative\drivers\WSDPrint.sys 4a2a5c50dd1a63577d3aca94269fbc7f c:\windows\sysnative\drivers\WSDScan.sys 7cadc74271dd6461c452c271b30bd378 c:\windows\sysnative\drivers\WUDFPf.sys 3b197af0fff08aa66b6b2241ca538d64 c:\windows\sysnative\drivers\WUDFRd.sys 48bfa6276bcc0535f5f8898107ed489a c:\windows\sysnative\drivers\~GLH0023.TMP ¤¤¤¤¤¤¤¤¤¤ exe ¤¤¤¤¤¤¤¤¤ C:\Windows\System32\AdapterTroubleshooter.exe C:\Windows\System32\ARP.EXE C:\Windows\System32\at.exe C:\Windows\System32\AtBroker.exe C:\Windows\System32\attrib.exe C:\Windows\System32\auditpol.exe C:\Windows\System32\autochk.exe C:\Windows\System32\autoconv.exe C:\Windows\System32\autofmt.exe C:\Windows\System32\bitsadmin.exe C:\Windows\System32\bootcfg.exe C:\Windows\System32\bthudtask.exe C:\Windows\System32\cacls.exe C:\Windows\System32\calc.exe C:\Windows\System32\CertEnrollCtrl.exe C:\Windows\System32\certreq.exe C:\Windows\System32\certutil.exe C:\Windows\System32\charmap.exe C:\Windows\System32\chkdsk.exe C:\Windows\System32\chkntfs.exe C:\Windows\System32\choice.exe C:\Windows\System32\cipher.exe C:\Windows\System32\cleanmgr.exe C:\Windows\System32\cliconfg.exe C:\Windows\System32\clip.exe C:\Windows\System32\cmd.exe C:\Windows\System32\cmdkey.exe C:\Windows\System32\cmdl32.exe C:\Windows\System32\cmmon32.exe C:\Windows\System32\cmstp.exe C:\Windows\System32\colorcpl.exe C:\Windows\System32\comp.exe C:\Windows\System32\compact.exe C:\Windows\System32\ComputerDefaults.exe C:\Windows\System32\control.exe C:\Windows\System32\convert.exe C:\Windows\System32\credwiz.exe C:\Windows\System32\cscript.exe C:\Windows\System32\ctfmon.exe C:\Windows\System32\cttune.exe C:\Windows\System32\cttunesvr.exe C:\Windows\System32\dccw.exe C:\Windows\System32\dcomcnfg.exe C:\Windows\System32\ddodiag.exe C:\Windows\System32\DevicePairingWizard.exe C:\Windows\System32\DeviceProperties.exe C:\Windows\System32\dfrgui.exe C:\Windows\System32\dialer.exe C:\Windows\System32\diantz.exe C:\Windows\System32\diskpart.exe C:\Windows\System32\diskperf.exe C:\Windows\System32\diskraid.exe C:\Windows\System32\Dism.exe C:\Windows\System32\DisplaySwitch.exe C:\Windows\System32\dllhost.exe C:\Windows\System32\dllhst3g.exe C:\Windows\System32\dnscacheugc.exe C:\Windows\System32\doskey.exe C:\Windows\System32\dpapimig.exe C:\Windows\System32\DpiScaling.exe C:\Windows\System32\dplaysvr.exe C:\Windows\System32\dpnsvr.exe C:\Windows\System32\driverquery.exe C:\Windows\System32\drvinst.exe C:\Windows\System32\dvdplay.exe C:\Windows\System32\dvdupgrd.exe C:\Windows\System32\DWWIN.EXE C:\Windows\System32\dxdiag.exe C:\Windows\System32\efsui.exe C:\Windows\System32\EhStorAuthn.exe C:\Windows\System32\esentutl.exe C:\Windows\System32\eudcedit.exe C:\Windows\System32\eventcreate.exe C:\Windows\System32\eventvwr.exe C:\Windows\System32\expand.exe C:\Windows\System32\explorer.exe C:\Windows\System32\extrac32.exe C:\Windows\System32\fc.exe C:\Windows\System32\find.exe C:\Windows\System32\findstr.exe C:\Windows\System32\finger.exe C:\Windows\System32\fixmapi.exe C:\Windows\System32\fltMC.exe C:\Windows\System32\fontview.exe C:\Windows\System32\forfiles.exe C:\Windows\System32\fsutil.exe C:\Windows\System32\ftp.exe C:\Windows\System32\getmac.exe C:\Windows\System32\gpresult.exe C:\Windows\System32\gpupdate.exe C:\Windows\System32\grpconv.exe C:\Windows\System32\hdwwiz.exe C:\Windows\System32\help.exe C:\Windows\System32\hh.exe C:\Windows\System32\HOSTNAME.EXE C:\Windows\System32\icacls.exe C:\Windows\System32\icardagt.exe C:\Windows\System32\icsunattend.exe C:\Windows\System32\ie4uinit.exe C:\Windows\System32\ieUnatt.exe C:\Windows\System32\iexpress.exe C:\Windows\System32\InfDefaultInstall.exe C:\Windows\System32\instnm.exe C:\Windows\System32\ipconfig.exe C:\Windows\System32\iscsicli.exe C:\Windows\System32\iscsicpl.exe C:\Windows\System32\isoburn.exe C:\Windows\System32\ktmutil.exe C:\Windows\System32\label.exe C:\Windows\System32\LocationNotifications.exe C:\Windows\System32\lodctr.exe C:\Windows\System32\logagent.exe C:\Windows\System32\logman.exe C:\Windows\System32\Magnify.exe C:\Windows\System32\makecab.exe C:\Windows\System32\mcbuilder.exe C:\Windows\System32\mfpmp.exe C:\Windows\System32\MigAutoPlay.exe C:\Windows\System32\mmc.exe C:\Windows\System32\mobsync.exe C:\Windows\System32\mountvol.exe C:\Windows\System32\MRINFO.EXE C:\Windows\System32\msdt.exe C:\Windows\System32\msfeedssync.exe C:\Windows\System32\mshta.exe C:\Windows\System32\msiexec.exe C:\Windows\System32\msinfo32.exe C:\Windows\System32\mspaint.exe C:\Windows\System32\msra.exe C:\Windows\System32\mstsc.exe C:\Windows\System32\mtstocom.exe C:\Windows\System32\MuiUnattend.exe C:\Windows\System32\NAPSTAT.EXE C:\Windows\System32 dadmin.exe C:\Windows\System32 et.exe C:\Windows\System32 et1.exe C:\Windows\System32 etbtugc.exe C:\Windows\System32 etiougc.exe C:\Windows\System32\Netplwiz.exe C:\Windows\System32 etsh.exe C:\Windows\System32\NETSTAT.EXE C:\Windows\System32 ewdev.exe C:\Windows\System32 otepad.exe C:\Windows\System32 slookup.exe C:\Windows\System32 tkrnlpa.exe C:\Windows\System32 toskrnl.exe C:\Windows\System32 tprint.exe C:\Windows\System32\ocsetup.exe C:\Windows\System32\odbcad32.exe C:\Windows\System32\odbcconf.exe C:\Windows\System32\openfiles.exe C:\Windows\System32\OptionalFeatures.exe C:\Windows\System32\osk.exe C:\Windows\System32\PATHPING.EXE C:\Windows\System32\pcaui.exe C:\Windows\System32\perfhost.exe C:\Windows\System32\perfmon.exe C:\Windows\System32\PING.EXE C:\Windows\System32\PkgMgr.exe C:\Windows\System32\poqexec.exe C:\Windows\System32\powercfg.exe C:\Windows\System32\PresentationHost.exe C:\Windows\System32\prevhost.exe C:\Windows\System32\print.exe C:\Windows\System32\printui.exe C:\Windows\System32\proquota.exe C:\Windows\System32\psr.exe C:\Windows\System32 asautou.exe C:\Windows\System32 asdial.exe C:\Windows\System32 aserver.exe C:\Windows\System32 asphone.exe C:\Windows\System32 drleakdiag.exe C:\Windows\System32\ReAgentc.exe C:\Windows\System32 ecover.exe C:\Windows\System32 eg.exe C:\Windows\System32 egedit.exe C:\Windows\System32 egedt32.exe C:\Windows\System32 egini.exe C:\Windows\System32\RegisterIEPKEYs.exe C:\Windows\System32 egsvr32.exe C:\Windows\System32 ekeywiz.exe C:\Windows\System32 elog.exe C:\Windows\System32 eplace.exe C:\Windows\System32 esmon.exe C:\Windows\System32\RMActivate.exe C:\Windows\System32\RMActivate_isv.exe C:\Windows\System32\RMActivate_ssp.exe C:\Windows\System32\RMActivate_ssp_isv.exe C:\Windows\System32\RmClient.exe C:\Windows\System32\Robocopy.exe C:\Windows\System32\ROUTE.EXE C:\Windows\System32\RpcPing.exe C:\Windows\System32 rinstaller.exe C:\Windows\System32 unas.exe C:\Windows\System32 undll32.exe C:\Windows\System32\RunLegacyCPLElevated.exe C:\Windows\System32 unonce.exe C:\Windows\System32\sbunattend.exe C:\Windows\System32\sc.exe C:\Windows\System32\schtasks.exe C:\Windows\System32\sdbinst.exe C:\Windows\System32\sdchange.exe C:\Windows\System32\sdiagnhost.exe C:\Windows\System32\SearchFilterHost.exe C:\Windows\System32\SearchIndexer.exe C:\Windows\System32\SearchProtocolHost.exe C:\Windows\System32\SecEdit.exe C:\Windows\System32\secinit.exe C:\Windows\System32\sethc.exe C:\Windows\System32\SetIEInstalledDate.exe C:\Windows\System32\setup16.exe C:\Windows\System32\setupSNK.exe C:\Windows\System32\setupugc.exe C:\Windows\System32\setx.exe C:\Windows\System32\sfc.exe C:\Windows\System32\shrpubw.exe C:\Windows\System32\shutdown.exe C:\Windows\System32\SndVol.exe C:\Windows\System32\sort.exe C:\Windows\System32\srdelayed.exe C:\Windows\System32\subst.exe C:\Windows\System32\svchost.exe C:\Windows\System32\sxstrace.exe C:\Windows\System32\SyncHost.exe C:\Windows\System32\syskey.exe C:\Windows\System32\systeminfo.exe C:\Windows\System32\SystemPropertiesAdvanced.exe C:\Windows\System32\SystemPropertiesComputerName.exe C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe C:\Windows\System32\SystemPropertiesHardware.exe C:\Windows\System32\SystemPropertiesPerformance.exe C:\Windows\System32\SystemPropertiesProtection.exe C:\Windows\System32\SystemPropertiesRemote.exe C:\Windows\System32\systray.exe C:\Windows\System32 akeown.exe C:\Windows\System32\TapiUnattend.exe C:\Windows\System32 askeng.exe C:\Windows\System32 askkill.exe C:\Windows\System32 asklist.exe C:\Windows\System32 askmgr.exe C:\Windows\System32 cmsetup.exe C:\Windows\System32\TCPSVCS.EXE C:\Windows\System32 imeout.exe C:\Windows\System32\TpmInit.exe C:\Windows\System32 racerpt.exe C:\Windows\System32\TRACERT.EXE C:\Windows\System32\TSTheme.exe C:\Windows\System32\TsWpfWrp.exe C:\Windows\System32 ypeperf.exe C:\Windows\System32 zutil.exe C:\Windows\System32\unlodctr.exe C:\Windows\System32\unregmp2.exe C:\Windows\System32\upnpcont.exe C:\Windows\System32\user.exe C:\Windows\System32\UserAccountControlSettings.exe C:\Windows\System32\userinit.exe C:\Windows\System32\Utilman.exe C:\Windows\System32\verclsid.exe C:\Windows\System32\verifier.exe C:\Windows\System32\vssadmin.exe C:\Windows\System32\w32tm.exe C:\Windows\System32\waitfor.exe C:\Windows\System32\wecutil.exe C:\Windows\System32\WerFault.exe C:\Windows\System32\WerFaultSecure.exe C:\Windows\System32\wermgr.exe C:\Windows\System32\wevtutil.exe C:\Windows\System32\wextract.exe C:\Windows\System32\where.exe C:\Windows\System32\whoami.exe C:\Windows\System32\wiaacmgr.exe C:\Windows\System32\wimserv.exe C:\Windows\System32\wininit.exe C:\Windows\System32\winrs.exe C:\Windows\System32\winrshost.exe C:\Windows\System32\winver.exe C:\Windows\System32\WISPTIS.EXE C:\Windows\System32\wlanext.exe C:\Windows\System32\wowreg32.exe C:\Windows\System32\WPDShextAutoplay.exe C:\Windows\System32\write.exe C:\Windows\System32\wscript.exe C:\Windows\System32\WSManHTTPConfig.exe C:\Windows\System32\wsmprovhost.exe C:\Windows\System32\wuapp.exe C:\Windows\System32\wusa.exe C:\Windows\System32\xcopy.exe C:\Windows\System32\xpsrchvw.exe C:\Windows\System32\xwizard.exe C:\Windows\Syswow64\AdapterTroubleshooter.exe C:\Windows\Syswow64\ARP.EXE C:\Windows\Syswow64\at.exe C:\Windows\Syswow64\AtBroker.exe C:\Windows\Syswow64\attrib.exe C:\Windows\Syswow64\auditpol.exe C:\Windows\Syswow64\autochk.exe C:\Windows\Syswow64\autoconv.exe C:\Windows\Syswow64\autofmt.exe C:\Windows\Syswow64\bitsadmin.exe C:\Windows\Syswow64\bootcfg.exe C:\Windows\Syswow64\bthudtask.exe C:\Windows\Syswow64\cacls.exe C:\Windows\Syswow64\calc.exe C:\Windows\Syswow64\CertEnrollCtrl.exe C:\Windows\Syswow64\certreq.exe C:\Windows\Syswow64\certutil.exe C:\Windows\Syswow64\charmap.exe C:\Windows\Syswow64\chkdsk.exe C:\Windows\Syswow64\chkntfs.exe C:\Windows\Syswow64\choice.exe C:\Windows\Syswow64\cipher.exe C:\Windows\Syswow64\cleanmgr.exe C:\Windows\Syswow64\cliconfg.exe C:\Windows\Syswow64\clip.exe C:\Windows\Syswow64\cmd.exe C:\Windows\Syswow64\cmdkey.exe C:\Windows\Syswow64\cmdl32.exe C:\Windows\Syswow64\cmmon32.exe C:\Windows\Syswow64\cmstp.exe C:\Windows\Syswow64\colorcpl.exe C:\Windows\Syswow64\comp.exe C:\Windows\Syswow64\compact.exe C:\Windows\Syswow64\ComputerDefaults.exe C:\Windows\Syswow64\control.exe C:\Windows\Syswow64\convert.exe C:\Windows\Syswow64\credwiz.exe C:\Windows\Syswow64\cscript.exe C:\Windows\Syswow64\ctfmon.exe C:\Windows\Syswow64\cttune.exe C:\Windows\Syswow64\cttunesvr.exe C:\Windows\Syswow64\dccw.exe C:\Windows\Syswow64\dcomcnfg.exe C:\Windows\Syswow64\ddodiag.exe C:\Windows\Syswow64\DevicePairingWizard.exe C:\Windows\Syswow64\DeviceProperties.exe C:\Windows\Syswow64\dfrgui.exe C:\Windows\Syswow64\dialer.exe C:\Windows\Syswow64\diantz.exe C:\Windows\Syswow64\diskpart.exe C:\Windows\Syswow64\diskperf.exe C:\Windows\Syswow64\diskraid.exe C:\Windows\Syswow64\Dism.exe C:\Windows\Syswow64\DisplaySwitch.exe C:\Windows\Syswow64\dllhost.exe C:\Windows\Syswow64\dllhst3g.exe C:\Windows\Syswow64\dnscacheugc.exe C:\Windows\Syswow64\doskey.exe C:\Windows\Syswow64\dpapimig.exe C:\Windows\Syswow64\DpiScaling.exe C:\Windows\Syswow64\dplaysvr.exe C:\Windows\Syswow64\dpnsvr.exe C:\Windows\Syswow64\driverquery.exe C:\Windows\Syswow64\drvinst.exe C:\Windows\Syswow64\dvdplay.exe C:\Windows\Syswow64\dvdupgrd.exe C:\Windows\Syswow64\DWWIN.EXE C:\Windows\Syswow64\dxdiag.exe C:\Windows\Syswow64\efsui.exe C:\Windows\Syswow64\EhStorAuthn.exe C:\Windows\Syswow64\esentutl.exe C:\Windows\Syswow64\eudcedit.exe C:\Windows\Syswow64\eventcreate.exe C:\Windows\Syswow64\eventvwr.exe C:\Windows\Syswow64\expand.exe C:\Windows\Syswow64\explorer.exe C:\Windows\Syswow64\extrac32.exe C:\Windows\Syswow64\fc.exe C:\Windows\Syswow64\find.exe C:\Windows\Syswow64\findstr.exe C:\Windows\Syswow64\finger.exe C:\Windows\Syswow64\fixmapi.exe C:\Windows\Syswow64\fltMC.exe C:\Windows\Syswow64\fontview.exe C:\Windows\Syswow64\forfiles.exe C:\Windows\Syswow64\fsutil.exe C:\Windows\Syswow64\ftp.exe C:\Windows\Syswow64\getmac.exe C:\Windows\Syswow64\gpresult.exe C:\Windows\Syswow64\gpupdate.exe C:\Windows\Syswow64\grpconv.exe C:\Windows\Syswow64\hdwwiz.exe C:\Windows\Syswow64\help.exe C:\Windows\Syswow64\hh.exe C:\Windows\Syswow64\HOSTNAME.EXE C:\Windows\Syswow64\icacls.exe C:\Windows\Syswow64\icardagt.exe C:\Windows\Syswow64\icsunattend.exe C:\Windows\Syswow64\ie4uinit.exe C:\Windows\Syswow64\ieUnatt.exe C:\Windows\Syswow64\iexpress.exe C:\Windows\Syswow64\InfDefaultInstall.exe C:\Windows\Syswow64\instnm.exe C:\Windows\Syswow64\ipconfig.exe C:\Windows\Syswow64\iscsicli.exe C:\Windows\Syswow64\iscsicpl.exe C:\Windows\Syswow64\isoburn.exe C:\Windows\Syswow64\ktmutil.exe C:\Windows\Syswow64\label.exe C:\Windows\Syswow64\LocationNotifications.exe C:\Windows\Syswow64\lodctr.exe C:\Windows\Syswow64\logagent.exe C:\Windows\Syswow64\logman.exe C:\Windows\Syswow64\Magnify.exe C:\Windows\Syswow64\makecab.exe C:\Windows\Syswow64\mcbuil

GreenDust · Answer

EDIT: Combofix ne marche pas sur seven 64bits

gen-hackman · Answer

salut

pour le clean de list_kill'em s'il ne fonctionne pas :

executer clic droit en tant qu'administrateur :

C:\Program Files (X86)\List_kill'em\del_reg

benurrr · Answer

la aussi pas a jour list_kill'em n'est se pas gen ou je me trompe

gen-hackman · Answer

bonsoir je ne sais pas je n'arrive pas à lire plus haut dans la date rappot au passage de l'outil

benurrr · Answer

relance list_kill'em et clic sur update 

et refait un scan search 

poste les rapport 

more.txt et List'em.txt 

Pour nous transmettre clique sur ce lien : http://www.cijoint.fr/ 

 Clique sur Parcourir et cherche le fichier C:\List'em.txt 

 Clique sur Ouvrir. 

 Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt 

est ajouté dans la page. 

 Copie ce lien dans ta réponse. 

Fais de même avec more.txt qui se trouve sur ton bureau  

Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C.., 
Mais C.. de penser que ­tu es libre...Merci a australe13

gen-hackman · Answer

tu peux !

GreenDust · Answer

Merci pour votre aide !

"relance list_kill'em + update + scan search"
OK


"poste les rapports more.txt et List'em.txt"
ici => 
http://www.cijoint.fr/cjlink.php?file=cj201010/cijTGqPyQ9.txt
http://www.cijoint.fr/cjlink.php?file=cj201010/cijM3QMD6U.txt

benurrr · Answer

Relance List_Kill'em avec un ( clic droit "exécuter en tant qu'administrateur" pour Vista/7 ) ,avec le raccourci sur ton bureau. 
 
mais cette fois-ci :  

choisis l'option CLEAN  
 
laisse travailler l'outil.  
Par Manque De Curiosité On Risque De Mourir Ignorant;Tu es libre de penser que tu es C.., 
Mais C.. de penser que ­tu es libre...Merci a australe13

GreenDust · Answer

voici le rapport du scan clean:
http://www.cijoint.fr/cjlink.php?file=cj201010/cijMiyeoIN.txt

Pour info, le bouton CLEAN ne marche pas, seule la solution de gen-hackman m'a permis de lancer le scan:
"pour le clean de list_kill'em s'il ne fonctionne pas :
executer clic droit en tant qu'administrateur :
C:\Program Files (X86)\List_kill'em\del_reg "

benurrr · Answer

cool

gen c'est le concepteur de l'outil au moins il connait son fix lol

malwarbyte tu la lancer c'est de sa que je parle


télécharge

https://www.techspot.com/

a l'installation vérifie que mise a jour et lancer programme et scan complet sont bien cocher

Une fois a jour, le programme va se lancer; clic sur l'onglet paramètre, et coche la case : "Arrêter internet explorer pendant la suppression".

A la fin du scan clique sur Afficher les résultats

Vérifier si tout est coché et clic Supprimer la sélection

S'il t'es demandé de redémarrer >>> clique sur "Yes"

Et tu poste le rapport générer

GreenDust · Answer

dsl ton lien ne marche pas
"page not found"

GreenDust · Answer

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4735

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

03/10/2010 14:10:54
mbam-log-2010-10-03 (14-10-54).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|G:\|)
Elément(s) analysé(s): 355427
Temps écoulé: 1 heure(s), 20 minute(s), 8 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

GreenDust · Answer

.... mais tjs le mm pb

gen-hackman · Answer

et oui....64 bits....on est dans la merde........

à quand le combofix en 64 bits?????????

GreenDust · Answer

on attend ton outils :)
je dois faire quoi maintenant?

gen-hackman · Answer

mon outil n'est pas capable de restaurer les fichiers d'origine.......

Ouverture intempestive de page de pub - Page 2

Discussions similaires

Newsletters