Security Protection Defender.exe

Premièrement rien ne te force à adopter un ton si condescendant, ensuite, effectivement j'ai confondu avec un autre sujet qui traite du même virus mais qui ne donne pas cette solution, mea culpa sur ce point.

Mais dans tous les cas, avec ce que je lui ai link il n'a qu'à cliquer sur le lien, alors que sur l'autre sujet ce n'est pas la première solution proposée.

Désolé d'avoir voulu apporter mon aide.

Je crois que j'ai repondu a mes messages au lieu du tiens.
Pardon our cette erreur de lieu de reponse et bonjour.
J'ai essaye de suivre tes conseils mais je n'ai pas pu faire un scan avec malwarebytes car la bebete qui loge dans mon PC bloque de suite l'utilitaire.
Par contre j'ai reussi a faire un ZHDiag et en voici ce qu'il en ressort :



Ci joint le rapport j'ai enfin trouve le moyen de le poster.



>
> Rapport de ZHPDiag/MD5 v1.28.1346 par Nicolas Coolman, Update du 29/08/2011
> Run by REMS & JO at 30/08/2011 12:33:22
> Web site : http://www.premiumorange.com/zeb-help-process/zhpdia
>
> ---\\ Web Browser
> MSIE: Internet Explorer v7.0.6000.17037 (Defaut)
> ---\\ Windows Product Information
> Windows Vista Home Premium Edition, 32-bit (Build 6000)
> Windows Server License Manager Script : OK
> ~ Vista, OEM_SLP channel
> System Locked Preinstallation (OEM_SLP) : OK
> Windows ID Activation : OK
> ~ Windows Partial Key : 6CJ97
> Windows License : OK
> Windows Automatic Updates : OK
> ---\\ System Information
> ~ Processor: x86 Family 15 Model 72 Stepping 2, AuthenticAMD
> ~ Operating System: 32 Bits
> Boot mode: Normal (Normal boot)
> Total RAM: 2046 MB (59% free)
> System Restore: Activé (Enable)
> System drive C: has 7 GB (9%) free of 71 GB
> ---\\ Logged in mode
> ~ Computer Name: JO
> ~ User Name: REMS & JO
> ~ All Users Names: REMS & JO, Administrateur,
> ~ Unselected Option: O45,O61,O62,O65,O66,O82
> Logged in as Administrator
> ---\\ Environnement Variables
> ~ System Unit : C:\
> ~ %AppData% : C:\Users\REMS & JO\AppData\Roaming\
> ~ %Desktop% : C:\Users\REMS & JO\Pictures\Desktop\
> ~ %Favorites% : C:\Users\REMS & JO\Favorites\
> ~ %LocalAppData% : C:\Users\REMS & JO\AppData\Local\
> ~ %StartMenu% : C:\Users\REMS & JO\AppData\Roaming\Microsoft\Windows\Start Menu\
> ~ %Windir% : C:\Windows\
> ~ %System% : C:\Windows\system32\
> ---\\ DOS/Devices
> C:\ Hard drive, Flash drive, Thumb drive (Free 7 Go of 71 Go)
> D:\ Hard drive, Flash drive, Thumb drive (Free 16 Go of 71 Go)
> E:\ CD-ROM drive (Not Inserted)
>
>
> ---\\ Security Center & Tools Informations
> [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
> [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
> [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
> [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
> [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
> [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
> [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified
> [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
> [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
> [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
> [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
> [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
> [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
> [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
> [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
> [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoStartMenuSubFolder: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoClose: OK
> [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoDispScrSavPage: OK
> [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
> [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
> [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
> [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
> [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
> [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
> [HKLM\SYSTEM\CurrentControlSet\Services] wscsvc : OK
> ~ Scan Security Center in 00mn 00s
>
>
> ---\\ Recherche particulière de fichiers génériques
> [MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.11/12/2008 - 07:20:29.) -- C:\Windows\Explorer.exe [2923520]
> [MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32\rundll32.exe [44544]
> [MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.02/11/2006 - 10:45:57.) -- C:\Windows\system32\Wininit.exe [95744]
> [MD5.0F340B61FA7221DDF8B8375BC0217B71] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.02/04/2010 - 17:54:49.) -- C:\Windows\system32\wininet.dll [832512]
> [MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.02/11/2006 - 10:45:57.) -- C:\Windows\system32\Winlogon.exe [308224]
> [MD5.B35CFCEF838382AB6490B321C87EDF17] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/02/2008 - 18:09:54.) -- C:\Windows\system32\drivers\atapi.sys [21560]
> [MD5.37430AA7A66D7A63407ADC2C0D05E9F6] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.11/03/2008 - 23:50:41.) -- C:\Windows\system32\drivers\ntfs.sys [1060920]
> [MD5.FF524497A864EDF9C040E31DB29D6449] - (....) (.10/12/2006 - 20:00:05.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
> ~ Scan Generic Processes in 00mn 00s
>
>
> ---\\ Etat des fichiers cachés (Caché/Total)
> ~ Mes images (My Pictures) : 18/1593
> ~ Mes musiques (My Musics) : 4/26
> ~ Mes Videos (My Videos) : 2/4
> ~ Mes Favoris (My Favorites) : 2/187
> ~ Mes Documents (My Documents) : 64/2239
> ~ Mon Bureau (My Desktop) : 17/1580
> ~ Menu demarrer (Programs) : 6/28
> ~ Scan Hidden Files in 00mn 12s
>
>
> ---\\ Processus lancés
> [MD5.2C8D466741833D6CA430DA2B07BCB16A] - (.Microsoft Corporation - Windows Problem Reporting.) -- C:\Windows\system32\wermgr.exe [61952] [PID.2396]
> [MD5.A360F8AA95A086CB7F9D361B5485858F] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [4702208] [PID.3100]
> [MD5.DFFC976A9D802FAA434052A8EF6C34CB] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [815104] [PID.3152]
> [MD5.CBCE310C67C03FE6BD7BCD63A3DBCC12] - (.HiTRUST - eDataSecurity System Loader( Load and prepa.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [464168] [PID.3284]
> [MD5.845D876D2CEBE612272E3E28E2FDBA2B] - (.Dritek System Inc. - Acer Launch Manager Keyboard Application.) -- C:\Program Files\Launch Manager\LManager.exe [659456] [PID.3308]
> [MD5.E8B180646BAE9E688D2E6D7EA8DED794] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [959976] [PID.3384]
> [MD5.9D5E8B45BD348DF0882C69EED0E83111] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [281768] [PID.3392]
> [MD5.D22D936F9AB0DA3B8EB7537284867708] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe [148888] [PID.3400]
> [MD5.2E0953919779A44BF9DFB7B07C58535A] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125440] [PID.3416]
> [MD5.DFCB9ADE94A4F8A7C42EEF41101A30AD] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [29696] [PID.3472]
> [MD5.4B555106290BD117334E9A08761C035A] - (...) -- C:\Windows\System32\rundll32.exe [44544] [PID.3740]
> [MD5.5EF87457AB8A58694EBE35E55D093D04] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\Users\REMS&J~1\AppData\Local\Temp\RtkBtMnt.exe [208896] [PID.3772]
> [MD5.693E4C15CEE5D6487D7913A2701B5E40] - (.Microsoft Corporation - Media Center Media Status Aggregator Servic.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.3808]
> [MD5.0ADB949BF976F5ADA38519F012035CB0] - (.Acer Inc. - eNMTray.) -- C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE [724992] [PID.3884]
> [MD5.6614BB708D98A56FBC8B7421F65D2542] - (.Acer Inc. - Acer ePower Management DMC.) -- C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE [462848] [PID.3932]
> [MD5.95DEE113316CF1B60403227418131A87] - (.Acer Inc. - Acer Empowering Techonology Framework Launc.) -- C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE [319488] [PID.4052]
> [MD5.2B6E0D6C6DA433E54B706B41A936A01F] - (.Acer Inc. - eRecovery agent.) -- C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE [393216] [PID.2276]
> [MD5.05CB3DA78A4BBD9B799A5957F9D101CC] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [68608] [PID.3364]
> [MD5.7914370AAC5CDE8DCAE1C674A6C90229] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [669696] [PID.4716]
> [MD5.24A333F4F14DCFB6FF6D5A1B9E5D79DD] - (.Microsoft Corporation - Détection de services interactifs.) -- C:\Windows\system32\UI0Detect.exe [35840] [PID.]
> [MD5.A1DCD30534835CB67733AD00175125A6] - (.Microsoft Corporation - Service de gestion des licences Microsoft.) -- C:\Windows\system32\SLsvc.exe [2605568] [PID.]
> [MD5.6E2BA4B22A95B2D06C6A9A7FE86426B5] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360] [PID.]
> [MD5.1FC82B17FB5EF120CC0C6D5DD18EA207] - (.HiTRSUT - eDataSecurity Service.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512] [PID.]
> [MD5.471DCE97AB37263C5A62B8074B1644A7] - (.Acer Inc. - acer eNet Management Service.) -- C:\Acer\Empowering Technology\eNet\eNet Service.exe [126976] [PID.]
> [MD5.66C414DCBC5073FE78CC1E42DEBCD572] - (.Hewlett-Packard Company - Pas de description.) -- c:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440] [PID.]
> [MD5.9C4DBDE1822F6DAA57718397B57C3485] - (...) -- C:\Acer\Mobility Center\MobilityService.exe [108544] [PID.]
> [MD5.5B17B3445755168276F643FAC2BAE6C7] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [262247] [PID.]
> [MD5.5D34926AF5F444CCC855FB8E4F006BC2] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\system32\DRIVERS\xaudio.exe [388608] [PID.]
> [MD5.5963F0D9AE14FBF975C0D17CAF0B4396] - (.acer - WMIServi Application.) -- C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [135168] [PID.]
> [MD5.5952BB927DF91B764978032699468218] - (.Microsoft Corporation - WMI Reverse Performance Adapter Maintenance.) -- C:\Windows\system32\wbem\WMIADAP.EXE [116736] [PID.]
> [MD5.DB9FF0D08EFAC69F090E9CD441AE4EEE] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Windows\System32\ZoneLabs\vsmon.exe [79400] [PID.]
> ~ Scan Processes Running in 00mn 00s
>
>
> ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
> P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
> P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
> ~ Scan Firefox Browser in 00mn 00s
>
>
> ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr-fr.facebook.com/
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
> R0 - HKUS\S-1-5-21-553958015-3226616502-4150485298-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr-fr.facebook.com/
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = https://www.bing.com/?toHttps=1&redig=17DBE7D168544FA98200E890A8051984
> R1 - HKUS\S-1-5-21-553958015-3226616502-4150485298-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = yahoo! search
> R1 - HKUS\S-1-5-21-553958015-3226616502-4150485298-1000\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = https://search.yahoo.com/
> R1 - HKUS\S-1-5-21-553958015-3226616502-4150485298-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f
> R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (7.00.6000.16386 (vista_rtm.061101-2205)) -- C:\Windows\system32\ieframe.dll
> R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 2
> ~ Scan IE Browser in 00mn 00s
>
>
> ---\\ Redirection du fichier Hosts (O1)
> ~ Scan Hosts File in 00mn 00s
>
>
> ---\\ Browser Helper Objects de navigateur (O2)
> [MD5.4EA3A6CD9D20584FFAFDB1E47DBF0E20] - (.Adobe Systems Incorporated - Adobe Acrobat IE Helper Version 7.0 for Act.) -- C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [59032] [PID.]
> [MD5.1A82C1B9BB43385695EFC3A84F6756A2] - (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [408440] [PID.]
> [MD5.590C4454A1D36F76DA1F636FAD139771] - (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [1242504] [PID.]
> [MD5.192E39C717013A0BD532B33AC29D6E7D] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll [41368] [PID.]
> ~ Scan BHO in 00mn 00s
>
>
> ---\\ Internet Explorer Toolbars (O3)
> [MD5.A8390152301959B28A103033EDAF5061] - (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll [151552] [PID.]
> ~ Scan Toolbar in 00mn 00s
>
>
> ---\\ Applications démarrées par registre & par dossier (O4)
> ~ Scan Application in 00mn 00s
>
>
> ---\\ Autres liens utilisateurs (O4)
> [MD5.259E27152180B895DF395ED3E412B90E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634648] [PID.]
> [MD5.AE2E36868172164EAD298DFC6051E5C3] - (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe [397312] [PID.]
> [MD5.5A175C291F7C9EC48321A540CA3550D3] - (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe [168960] [PID.]
> [MD5.0D9E7D14E4238865969B22A6929C056D] - (.Pas de propriétaire - PMU MFC Application.) -- C:\Programs\PMU\PMU.exe [2878976] [PID.]
> [MD5.259E27152180B895DF395ED3E412B90E] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe [634648] [PID.]
> [MD5.0D9E7D14E4238865969B22A6929C056D] - (.Pas de propriétaire - PMU MFC Application.) -- C:\Programs\PMU\PMU.exe [2878976] [PID.]
> [MD5.50300DB943B4F1A59973DB8213AE9CFD] - (.Microsoft Corporation - Outil Capture.) -- C:\Windows\System32\SnippingTool.exe [275968] [PID.]
> [MD5.AE2E36868172164EAD298DFC6051E5C3] - (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe [397312] [PID.]
> [MD5.5A175C291F7C9EC48321A540CA3550D3] - (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe [168960] [PID.]
> ~ Scan Global Startup in 00mn 00s
>
>
> ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
> [MD5.81A5007DBCFB7AB85244CA30468D0573] - (.Microsoft Corporation - Microsoft Excel.) -- C:\PROGRA~1\MICROS~2\Office10\EXCEL.exe [9173576] [PID.]
> ~ Scan IE Menu Contextuel in 00mn 00s
>
>
> ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
> ~ Scan IE Extra Buttons in 00mn 00s
>
>
> ---\\ Winsock hijacker (Layered Service Provider) (O10)
> [MD5.FF78B8E67EDCE9FEED651D7858D77A04] - (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll [19968] [PID.]
> [MD5.5E72DCFF9FB2374642043899A1C2E446] - (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de m.) -- C:\Windows\system32\napinsp.dll [50176] [PID.]
> [MD5.C0DC476E89558242848572F9ADE1D685] - (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll [62464] [PID.]
> [MD5.C0DC476E89558242848572F9ADE1D685] - (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll [62464] [PID.]
> ~ Scan Winsock in 00mn 00s
>
>
> ---\\ Protocole additionnel (O18)
> [MD5.A01004B13E763DB42BF0F19DBEB62F51] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [3599872] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.A5944428A77CE0E5337B40F5FC12E327] - (.Microsoft Corporation - Microsoft SharePoint Portal Server Object M.) -- C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL [872448] [PID.]
> [MD5.FB6CB104D241A295DDF0071F7A5A1486] - (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll [1544704] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.528EB2A60CF99B653088A72C87306C74] - (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [141824] [PID.]
> [MD5.A01004B13E763DB42BF0F19DBEB62F51] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [3599872] [PID.]
> [MD5.74165D44075CF3D03C98530783B8610E] - (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL [61264] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.A01004B13E763DB42BF0F19DBEB62F51] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [3599872] [PID.]
> [MD5.2497E0909F2136C9F6B190FCF1E54BBD] - (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll [737792] [PID.]
> [MD5.7FB07AFC51D18CF2619F1FFD464495A9] - (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll [1168384] [PID.]
> [MD5.528EB2A60CF99B653088A72C87306C74] - (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [141824] [PID.]
> [MD5.74165D44075CF3D03C98530783B8610E] - (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL [61264] [PID.]
> [MD5.6C1F34B3609BBD42E9B4A2A25548FAF0] - (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL [7445600] [PID.]
> [MD5.A01004B13E763DB42BF0F19DBEB62F51] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [3599872] [PID.]
> [MD5.590C4454A1D36F76DA1F636FAD139771] - (.Skype Technologies S.A. - Skype add-on for IE.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [1242504] [PID.]
> [MD5.FB0A62DBDF98A5466105D19B199C83BF] - (.Skype Technologies - Skype for COM API.) -- C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL [2164104] [PID.]
> [MD5.FB6CB104D241A295DDF0071F7A5A1486] - (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll [1544704] [PID.]
> [MD5.A01004B13E763DB42BF0F19DBEB62F51] - (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll [3599872] [PID.]
> ~ Scan Protocole Additionnel in 00mn 02s
>
>
> ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
> [MD5.D1DDFF67D47BD6762A6B2282E5C354AD] - (.acer - eNMSwWatcher Dynamic Link Library.) -- C:\Windows\system32\eNetHook.dll [90112] [PID.]
> ~ Scan AppInit DLL in 00mn 00s
>
>
> ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
> [MD5.4FD45F2A2C445359482CA3F34EAB1A4D] - (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\system32\webcheck.dll [232960] [PID.]
> ~ Scan SSODL in 00mn 00s
>
>
> ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
> [MD5.EC4A360BA892320DA05BA504EA7390BC] - (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll [1321472] [PID.]
> ~ Scan STS/SSO in 00mn 00s
>
>
> ---\\ Liste des services NT non Microsoft et non désactivés (O23)
> [MD5.6E2BA4B22A95B2D06C6A9A7FE86426B5] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360] [PID.]
> [MD5.D41D8CD98F00B204E9800998ECF8427E] - (...) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480] [PID.]
> [MD5.1FC82B17FB5EF120CC0C6D5DD18EA207] - (.HiTRSUT - eDataSecurity Service.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe [457512] [PID.]
> [MD5.8DA444D4CBAA01F10CDC6A772D80C364] - (.Acer Inc. - Acer eLock Management.) -- C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [24576] [PID.]
> [MD5.471DCE97AB37263C5A62B8074B1644A7] - (.Acer Inc. - acer eNet Management Service.) -- C:\Acer\Empowering Technology\eNet\eNet Service.exe [126976] [PID.]
> [MD5.BA4CAB4B0B698A3F257D28282A92A2D8] - (.Acer Inc. - eRecoveryService.) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [49152] [PID.]
> [MD5.F6667992117045EA57E76476592D0375] - (.Pas de propriétaire - Service.) -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576] [PID.]
> [MD5.66C414DCBC5073FE78CC1E42DEBCD572] - (.Hewlett-Packard Company - Pas de description.) -- c:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440] [PID.]
> [MD5.9C4DBDE1822F6DAA57718397B57C3485] - (...) -- C:\Acer\Mobility Center\MobilityService.exe [108544] [PID.]
> [MD5.5B17B3445755168276F643FAC2BAE6C7] - (.Pas de propriétaire - RichVideo Module.) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe [262247] [PID.]
> [MD5.DB9FF0D08EFAC69F090E9CD441AE4EEE] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\Windows\System32\ZoneLabs\vsmon.exe [79400] [PID.]
> [MD5.5963F0D9AE14FBF975C0D17CAF0B4396] - (.acer - WMIServi Application.) -- C:\Acer\Empowering Technology\ePower\ePowerSvc.exe [135168] [PID.]
> [MD5.5D34926AF5F444CCC855FB8E4F006BC2] - (.Conexant Systems, Inc. - Modem Audio Service.) -- C:\Windows\system32\DRIVERS\xaudio.exe [388608] [PID.]
> ~ Scan Services in 00mn 00s
>
>
> ---\\ Enumération Active Desktop & MHTML Editor (O24)
> ~ Scan Desktop Component in 00mn 00s
>
>
> ---\\ Tâches planifiées en automatique (O39)
> [MD5.704944870EC571A8F7F8D7708337746E] - (...) -- C:\Windows\Tasks\Norton Internet Security - Analyse système complète - REMS & JO.job [532] [PID.]
> ~ Scan Scheduled Task in 00mn 02s
>
>
> ---\\ Pilotes lancés au démarrage (O41)
> ~ Scan Drivers in 00mn 00s
>
>
> ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
> O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 30/08/2011 - 11:28:29 ---A- . (...) -- C:\Windows\612570580 [0]
> O44 - LFC:[MD5.CF10A10CC9DCBDAD0E8EF814CE1BC55F] - 30/08/2011 - 11:28:27 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
> O44 - LFC:[MD5.3ABC852FAC449D81E5A281593259500F] - 30/08/2011 - 11:23:57 ---A- . (...) -- C:\Windows\ntbtlog.txt [489866]
> O44 - LFC:[MD5.33C6E7C1BDF8891999E022461C847AC5] - 30/08/2011 - 10:15:21 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [689846]
> O44 - LFC:[MD5.6CBACA685A4221B59F8D4B519FAF3FD8] - 30/08/2011 - 10:15:20 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1512256]
> O44 - LFC:[MD5.5807E9525B80461C007FF32D9886B420] - 30/08/2011 - 10:15:20 ---A- . (...) -- C:\Windows\system32\perfc009.dat [103314]
> O44 - LFC:[MD5.180CC0CD49E7FEA282478FDB3148B1BC] - 30/08/2011 - 10:15:20 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [116988]
> O44 - LFC:[MD5.A67DF33A6BEF3A3CB0F1953897661C0C] - 30/08/2011 - 10:15:20 ---A- . (...) -- C:\Windows\system32\perfh009.dat [609532]
> O44 - LFC:[MD5.2E440DEFC1D45F2D06D71770B95FA5DC] - 29/08/2011 - 23:44:12 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1089827]
> O44 - LFC:[MD5.F5D83758509D375A7F3A96D9C28F0BD9] - 29/08/2011 - 23:13:56 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [15504]
> O44 - LFC:[MD5.3FADDD373612EEB94C364A257A308978] - 29/08/2011 - 23:13:54 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38496]
> O44 - LFC:[MD5.3396A185C5007F798D69CBC906AF1A61] - 29/08/2011 - 22:22:34 ---A- . (...) -- C:\Windows\system32\qnbwvoto.dll [4194304]
> O44 - LFC:[MD5.A5BBB56EFA8A88B9A99F5A33EB55321F] - 29/08/2011 - 19:36:02 --HA- . (...) -- C:\Windows\system32\drivers\vsconfig.xml [352614]
> O44 - LFC:[MD5.B0FF61FE1C62E1FD583B7CC555D7CBE1] - 11/08/2011 - 23:16:01 ---A- . (...) -- C:\Windows\MEMORY.DMP [220825091]
> O44 - LFC:[MD5.D0F0CB37A5B99478889D8C58B06FFC6C] - 05/08/2011 - 21:59:43 ---A- . (...) -- C:\Windows\setupact.log [700]
> O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 05/08/2011 - 21:59:38 ---A- . (...) -- C:\Windows\setuperr.log [0]
> ~ Scan Files in 00mn 14s
>
>
> ---\\ Contrôle du Safe Boot (CSB) (O49)
> ~ Scan CSB in 00mn 00s
>
>
> ---\\ MountPoints2 Shell Key (O51)
> ~ Scan Keys in 00mn 00s
>
>
> ---\\ Liste des Drivers Système (O58)
> O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 02/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968]
> O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 02/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576]
> O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 02/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408]
> O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 02/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048]
> O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 02/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952]
> O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 02/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688]
> O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 02/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688]
> O58 - SDL:[MD5.6046A55F79DE9C581B8D5E9C1366CC81] - 02/11/2006 - 08:30:52 ---A- . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driver.) -- C:\Windows\system32\drivers\athr.sys [467456]
> O58 - SDL:[MD5.47B879406246FFDCED59E18D331A0E7D] - 20/07/2009 - 18:31:10 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [61960]
> O58 - SDL:[MD5.5FEDEF54757B34FB611B9EC8FB399364] - 20/07/2009 - 08:20:40 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\system32\drivers\avipbb.sys [137656]
> O58 - SDL:[MD5.746F59822A5187510471FC46889B8CC9] - 29/03/2007 - 20:18:28 ---A- . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless driver.) -- C:\Windows\system32\drivers\BCMWL6.SYS [534016]
> O58 - SDL:[MD5.D8BA0E0FFBCE2DD5DE110C5146C438B4] - 29/03/2007 - 23:20:00 ---A- . (.Bison Electronics. Inc. - Universal Serial Bus Camera Driver.) -- C:\Windows\system32\drivers\BisonC07.sys [792368]
> O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
> O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
> O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808]
> O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
> O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
> O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
> O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 02/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488]
> O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272]
> O58 - SDL:[MD5.73BAF270D24FE726B9CD7F80BB17A23D] - 29/03/2007 - 05:29:38 ---A- . (.Dritek System Inc. - Dritek PS2 Keyboard Filter Driver.) -- C:\Windows\system32\drivers\DKbFltr.sys [21264]
> O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 02/11/2006 - 08:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760]
> O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 02/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520]
> O58 - SDL:[MD5.AE8F90F4DE5746E5CB1B095701165863] - 23/09/2008 - 18:52:22 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver Filter.) -- C:\Windows\system32\drivers\ggflt.sys [13352]
> O58 - SDL:[MD5.4973D7C1C1D81D11E5E8FA974C2AE8CB] - 23/09/2008 - 18:52:22 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver.) -- C:\Windows\system32\drivers\ggsemc.sys [21672]
> O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 02/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480]
> O58 - SDL:[MD5.31F949D452201F2F0AF0C88D7DB512CD] - 18/10/2006 - 11:08:14 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\HSXHWAZL.sys [206848]
> O58 - SDL:[MD5.6D2350BB6E77E800FC4BE4E5B7A2E89A] - 18/10/2006 - 11:08:04 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\HSX_CNXT.sys [659968]
> O58 - SDL:[MD5.53229DCF431D76434816CD29251168A0] - 18/10/2006 - 11:09:26 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\HSX_DPV.sys [986624]
> O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 02/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040]
> O58 - SDL:[MD5.496DB78E6A0C4C44023D9A92B4A7AC31] - 02/11/2006 - 03:10:57 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\system32\drivers\igdkmd32.sys [1380864]
> O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576]
> O58 - SDL:[MD5.9D64201C9E5AC8D1F088762BA00FF3AB] - 29/03/2007 - 15:43:34 ---A- . (...) -- C:\Windows\system32\drivers\int15.sys [76584]
> O58 - SDL:[MD5.91B61589BB2915E81D436EFE07548507] - 29/03/2007 - 15:43:34 ---A- . (...) -- C:\Windows\system32\drivers\int15_64.sys [15656]
> O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944]
> O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944]
> O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 02/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640]
> O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640]
> O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 02/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640]
> O58 - SDL:[MD5.A3E700D78EEC390F1208098CDCA5C6B6] - 16/02/2008 - 10:07:00 ---A- . (.Pinnacle Systems GmbH - Pinnacle Marvin Discrete Bus Enumerator.) -- C:\Windows\system32\drivers\MarvinBus.sys [171520]
> O58 - SDL:[MD5.F5D83758509D375A7F3A96D9C28F0BD9] - 30/08/2011 - 15:11:28 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [15504]
> O58 - SDL:[MD5.3FADDD373612EEB94C364A257A308978] - 30/08/2011 - 15:11:32 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38496]
> O58 - SDL:[MD5.0CEA2D0D3FA284B85ED5B68365114F76] - 19/06/2006 - 14:26:58 ---A- . (.Conexant - Diagnostic Interface x86 Driver.) -- C:\Windows\system32\drivers\mdmxsdk.sys [12672]
> O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 02/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776]
> O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384]
> O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160]
> O58 - SDL:[MD5.6623E51595C0076755C29C00846C4EB2] - 28/07/2009 - 21:22:06 ---A- . (.CACE Technologies - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\system32\drivers\npf.sys [34064]
> O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 10/12/2006 - 11:17:06 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144]
> O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608]
> O58 - SDL:[MD5.DCB0F735BB78497F6076177EB7D20214] - 29/03/2007 - 21:50:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 97.55.) -- C:\Windows\system32\drivers\nvlddmkm.sys [4448160]
> O58 - SDL:[MD5.1657F3FBD9061526C14FF37E79306F98] - 02/11/2006 - 08:30:56 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\system32\drivers\nvm60x32.sys [429056]
> O58 - SDL:[MD5.D668632606D1CEBF0B6EC64C1DF7ED6F] - 18/11/2007 - 02:39:50 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\system32\drivers\nvmfdx32.sys [1040544]
> O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 02/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680]
> O58 - SDL:[MD5.ADFDD343B1D3A9E061F17C730F1E83DC] - 02/12/2006 - 17:44:18 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) SMU Microcontroller Driver.) -- C:\Windows\system32\drivers\nvsmu.sys [11520]
> O58 - SDL:[MD5.4A5FCAB82D9BF6AF8A023A66802FE9E9] - 05/01/2007 - 20:59:42 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [35920]
> O58 - SDL:[MD5.DC5F166422BEEBF195E3E4BB8AB4EE22] - 09/08/2007 - 17:12:30 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor32.sys [110624]
> O58 - SDL:[MD5.1BEBE7DE8508A02650CDCE45C664C2A2] - 16/02/2008 - 12:59:00 ---A- . (.Pinnacle Systems GmbH - PCLEPCI.) -- C:\Windows\system32\drivers\Pclepci.sys [14165]
> O58 - SDL:[MD5.671F788336DD6A129D0B3743CECE6EEF] - 29/03/2007 - 17:59:18 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [20264]
> O58 - SDL:[MD5.BE1404B19F7708A89F0F680E6F2CF110] - 29/03/2007 - 17:59:24 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16680]
> O58 - SDL:[MD5.6DE3CBB3F8C8A94CAD7716B91C4B8951] - 29/03/2007 - 17:59:20 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [60712]
> O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 02/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712]
> O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088]
> O58 - SDL:[MD5.34B8B4A442046E3D5FDD0B17926CF3F1] - 01/11/2007 - 16:30:06 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [1967576]
> O58 - SDL:[MD5.283392AF1860ECDB5E0F8EBD7F3D72DF] - 02/11/2006 - 08:30:56 ---A- . (.Realtek Corporation - Realtek 8101/8168/8169 NDIS6 32-bit Driver.) -- C:\Windows\system32\drivers\Rtlh86.sys [44544]
> O58 - SDL:[MD5.1C5C2CB892553D2CF3F45A4BB323FCD6] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 Driver.) -- C:\Windows\system32\drivers\s1018bus.sys [86824]
> O58 - SDL:[MD5.2AB45CEDAA214125501A0C7F91E105A4] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018cm.sys [12200]
> O58 - SDL:[MD5.2AB45CEDAA214125501A0C7F91E105A4] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018cmnt.sys [12200]
> O58 - SDL:[MD5.130A3049E2A66AF0877DA7E9B18DDE90] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Ericsson Mobile Platform S1018 USB WMC Extended Ethernet (WDM c.) -- C:\Windows\system32\drivers\s1018cr.sys [10792]
> O58 - SDL:[MD5.38F5EA219593F19B6B3A1B9C169E3B61] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Modem Filter Driver.) -- C:\Windows\system32\drivers\s1018mdfl.sys [15016]
> O58 - SDL:[MD5.666AF6B64FC7DF92D3CA4819EA91631D] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Modem WDM Driver.) -- C:\Windows\system32\drivers\s1018mdm.sys [114728]
> O58 - SDL:[MD5.F4CEDA6E2DDFF2AF8BD745615A7CA9C0] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Device Management Driver.) -- C:\Windows\system32\drivers\s1018mgmt.sys [106208]
> O58 - SDL:[MD5.3622D9FF2253DCBE885B10736609A4CA] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Ericsson Mobile Platform S1018 USB WMC Extended Ethernet (NDIS.) -- C:\Windows\system32\drivers\s1018nd5.sys [26024]
> O58 - SDL:[MD5.49431EFDA842B474531C29FFAE9F5D09] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC OBEX Interface Device Driver.) -- C:\Windows\system32\drivers\s1018obex.sys [104744]
> O58 - SDL:[MD5.AC6B514CB4474F4C867D7CDC9CD54F05] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB Ethernet Emulation.) -- C:\Windows\system32\drivers\s1018unic.sys [109864]
> O58 - SDL:[MD5.5DD0D936FD9E503C96B9D41A284F815E] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018wh.sys [12200]
> O58 - SDL:[MD5.5DD0D936FD9E503C96B9D41A284F815E] - 10/12/2009 - 16:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\s1018whnt.sys [12200]
> O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
> O58 - SDL:[MD5.E5B56569A9F79B70314FEDE6C953641E] - 10/12/2009 - 11:28:34 ---A- . (.Sony Ericsson Mobile Communications - seehcri Driver.) -- C:\Windows\system32\drivers\seehcri.sys [27632]
> O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 02/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504]
> O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 02/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784]
> O58 - SDL:[MD5.406776FE3C2B66796BAC1A7AFB9AC8A1] - 25/10/2010 - 08:59:24 ---A- . (.MCCI Corporation - SAMSUNG Android USB Composite Device Driver.) -- C:\Windows\system32\drivers\ssadbus.sys [96488]
> O58 - SDL:[MD5.F8A05C1197650BCAF32D08C8D3CC27C0] - 25/10/2010 - 08:59:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ssadcm.sys [10344]
> O58 - SDL:[MD5.F8A05C1197650BCAF32D08C8D3CC27C0] - 25/10/2010 - 08:59:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ssadcmnt.sys [10344]
> O58 - SDL:[MD5.B19532D015A5D295E2AA34BB521202CF] - 25/10/2010 - 08:59:24 ---A- . (.MCCI Corporation - SAMSUNG Android USB Modem Filter Driver.) -- C:\Windows\system32\drivers\ssadmdfl.sys [12776]
> O58 - SDL:[MD5.2AEBF9108E6F435458B9499C27394DA4] - 25/10/2010 - 08:59:24 ---A- . (.MCCI Corporation - SAMSUNG Android USB Modem.) -- C:\Windows\system32\drivers\ssadmdm.sys [121576]
> O58 - SDL:[MD5.97AEDC10D1739087D6D349F76F4BD7DD] - 25/10/2010 - 08:59:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ssadwh.sys [10216]
> O58 - SDL:[MD5.97AEDC10D1739087D6D349F76F4BD7DD] - 25/10/2010 - 08:59:24 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ssadwhnt.sys [10216]
> O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 20/07/2009 - 15:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [28520]
> O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944]
> O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848]
> O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920]
> O58 - SDL:[MD5.F7A4250BB3E3AFCD4AF100E551509352] - 02/12/2006 - 20:17:32 ---A- . (.Synaptics, Inc. - Synaptics Touchpad Driver.) -- C:\Windows\system32\drivers\SynTP.sys [179896]
> O58 - SDL:[MD5.0C3B2A9C4BD2DD9A6C2E4084314DD719] - 23/11/2010 - 20:19:02 ---A- . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\Windows\system32\drivers\taphss.sys [32768]
> O58 - SDL:[MD5.F779BA4CD37963AB4600C9871B7752A3] - 02/12/2006 - 22:44:00 ---A- . (.Texas Instruments - tifm21.sys.) -- C:\Windows\system32\drivers\tifm21.sys [168448]
> O58 - SDL:[MD5.97DD70FECA64FB4F63DE7BB7E66A80B1] - 29/03/2007 - 15:43:34 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort.sys [14544]
> O58 - SDL:[MD5.4E104EBC164231D2272CC9BDD1EF5C40] - 29/03/2007 - 15:43:34 ---A- . (.EnTech Taiwan - TVicPort Driver for Windows NT/2000/XP.) -- C:\Windows\system32\drivers\TVicPort64.sys [8704]
> O58 - SDL:[MD5.E0C67BE430C6DE490D6CCAECFA071F9E] - 10/12/2006 - 03:30:04 ---A- . (...) -- C:\Windows\system32\drivers\UBHelper.sys [13952]
> O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 02/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112]
> O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408]
> O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 02/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816]
> O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 02/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512]
> O58 - SDL:[MD5.C8F5455F43977580D489CE31178F4166] - 19/03/2008 - 14:06:04 ---A- . (.Check Point Software Technologies LTD - ZoneAlarm Firewalling Driver.) -- C:\Windows\system32\drivers\vsdatant.sys [279440]
> O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 02/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232]
> O58 - SDL:[MD5.46D67209550973257601A533E2AC5785] - 02/11/2006 - 08:41:49 ---A- . (.Conexant Systems, Inc. - HSF_HWAZL WDM driver.) -- C:\Windows\system32\drivers\VSTAZL3.SYS [200704]
> O58 - SDL:[MD5.5C7BDCF5864DB00323FE2D90FA26A8A2] - 02/11/2006 - 08:41:48 ---A- . (.Conexant Systems, Inc. - HSF_CNXT driver.) -- C:\Windows\system32\drivers\VSTCNXT3.SYS [654336]
> O58 - SDL:[MD5.EC36F1D542ED4252390D446BF6D4DFD0] - 02/11/2006 - 08:41:50 ---A- . (.Conexant Systems, Inc. - HSF_DP driver.) -- C:\Windows\system32\drivers\VSTDPV3.SYS [987648]
> O58 - SDL:[MD5.5A7FF9A18FF6D7E0527FE3ABF9204EF8] - 04/08/2006 - 17:39:10 ---A- . (.Conexant Systems, Inc. - Modem Audio Device Driver.) -- C:\Windows\system32\drivers\XAudio.sys [8192]
> O58 - SDL:[MD5.40AC8590CC9006DBB99FFCB37879D4C6] - 29/03/2007 - 15:43:34 ---A- . (.Zeal SoftStudio - zntport.) -- C:\Windows\system32\drivers\zntport.sys [6080]
> O58 - SDL:[MD5.F2F291F29B4ECE0394F9A28F8E829AFA] - 29/03/2007 - 15:43:34 ---A- . (.Zeal SoftStudio - NTPort Library kernel driver.) -- C:\Windows\system32\drivers\zntport64.sys [6144]
> O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029]
> O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097]
> O58 - SDL:[MD5.CBE5F69A5E5B918225F420BA748F3742] - 25/10/2010 - 07:25:04 ---A- . (...) -- C:\Windows\system32\FsUsbExDisk.Sys [36608]
> O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768]
> O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809]
> O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537]
> O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866]
> O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146]
> O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370]
> O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274]
> O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146]
> O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952]
> O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672]
> O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776]
> O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536]
> O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672]
> ~ Scan Drivers in 00mn 09s
>
>
> End of the scan (474 lines in 01mn 09s)(0)

Merci pour ta contribution, et en fait j'ai le Cd de mise a niveau de mon window vista mais pas de de reinstallation du Pc. Sachant que c'est un ordinateur portable Acer, il y a plein de chose de pre-installe d'usine.
On peut faire des Cd de restauration du systeme a partir du Pc mais vu qu'il est infecte...
De plus j'ai des fichiers important sur la deuxieme partition du disque tel que des photos...etc.
Y a t il un moyen de copier ca sur un disque dur externe sans se trainer la bebete ?
Par avance, merci...

Bon... Relance Combofix, des fois au second passage il trouve des backups de fichiers

J'ai relance Combofix, et ensuite je ne sais pas si j'ai bien fais j'ai vire Antivir qui reste ferme et qui faisait ch...

Voici le log :
ComboFix 11-08-31.04 - REMS & JO 2011-09-02 8:26.5.2 - x86 NETWORK
Lancé depuis: c:\users\REMS & JO\Pictures\Desktop\ComboFix.exe
* Un nouveau point de restauration a été créé
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\assembly\GAC_MSIL\desktop.ini
.
c:\program files\Avira\AntiVir Desktop\sched.exe . . . est infecté!!
.
c:\acer\Empowering Technology\eDataSecurity\eDSService.exe . . . est infecté!!
.
c:\program files\Google\Update\GoogleUpdate.exe . . . est infecté!!
.
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_d4158324
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2011-08-02 au 2011-09-02 ))))))))))))))))))))))))))))))))))))
.
.
2011-09-02 06:35 . 2011-09-02 06:39 -------- d-----w- c:\users\REMS & JO\AppData\Local\temp
2011-09-02 06:35 . 2011-09-02 06:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-30 22:14 . 2011-08-30 22:14 -------- d-----w- c:\program files\CCleaner
2011-08-30 22:13 . 2011-08-31 21:41 -------- d-----w- c:\program files\Google
2011-08-30 21:50 . 2011-08-30 21:52 -------- d-----w- C:\FyK
2011-08-30 21:39 . 2009-01-14 14:11 15504 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-08-30 21:39 . 2009-01-14 14:11 38496 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-08-30 21:39 . 2011-08-30 21:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-08-30 20:31 . 2011-08-12 02:44 7152464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{92095575-2A40-48AD-A0ED-8030267A87EA}\mpengine.dll
2011-08-30 20:27 . 2011-08-30 20:27 -------- d-----w- C:\MyHosts
2011-08-30 09:22 . 2011-08-30 10:34 -------- d-----w- C:\ZHP
2011-08-30 09:22 . 2011-08-30 10:32 -------- d-----w- c:\program files\ZHPDiag
2011-08-29 22:12 . 2011-08-29 22:12 -------- d-----w- C:\ToolBar SD
2011-08-29 21:22 . 2011-08-29 21:22 4194304 ----a-w- c:\windows\system32\qnbwvoto.dll
2011-08-25 19:32 . 2011-08-29 18:49 -------- d-----w- c:\programdata\tmp
2011-08-25 19:12 . 2011-08-25 19:30 -------- d-----w- c:\program files\Snapfish
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-08 1232896]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
"LaunchList"="c:\program files\Pinnacle\Studio 11\LaunchList2.exe" [2007-03-21 145496]
"updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-10-01 4702208]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-23 815104]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2006-12-20 90191]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-12-20 7766016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-12-20 81920]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-01-02 464168]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2006-12-21 659456]
"Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-01-14 151552]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-08-17 281768]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-28 148888]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-4-23 29696]
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2006-12-10 528384]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [x]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2010-05-28 36608]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2008-09-23 13352]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 lgusbsmodem;LGE Mobile USB Modem;c:\windows\system32\DRIVERS\lgusbsmodem.sys [x]
R3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-11-06 34064]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2010-05-25 96488]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2010-05-25 12776]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2010-05-25 121576]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Contenu du dossier 'Tâches planifiées'
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://fr-fr.facebook.com/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://fr.fr.acer.yahoo.com
uInternet Settings,ProxyOverride = local
uSearchURL,(Default) = hxxp://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: {{06568ceb-5721-47d4-9d93-7e604fcbaeab} - c:\programs\PMU\PMUPoker\RunApp.exe
LSP: mswsock.dll
Trusted Zone: secuser.com\www
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-02 08:37
Windows 6.0.6000 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
.
c:\windows\612570580:736787675.exe 816 bytes executable
.
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.0.6000 Disk: Hitachi_ rev.SB4O -> Harddisk0\DR0 ->
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x87753530]<<
_asm { MOV EAX, [ESP+0x4]; MOV ECX, [EAX+0x28]; PUSH EBP; MOV EBP, [ECX+0x4]; PUSH ESI; MOV ESI, [ESP+0x10]; PUSH EDI; MOV EDI, [ESI+0x60]; MOV AL, [EDI]; CMP AL, 0x16; JNZ 0x36; PUSH ESI; }
1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x858BB950]
3 nt[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x877F95C0]
\Driver\00001085[0x877F9718] -> IRP_MJ_CREATE -> 0x87753530
error: Read Un périphérique attaché au système ne fonctionne pas correctement.
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV DI, 0x5; XOR AX, AX; MOV DL, 0x80; INT 0x13; JAE 0x2d; DEC DI; }
detected disk devices:
\Device\00000061 -> \??\SCSI#Disk&Ven_Hitachi&Prod_HTS541616J9S#4&25ee9058&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} device not found
detected hooks:
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-553958015-3226616502-4150485298-1000\Software\Local AppWizard-Generated Applications\LaunchApp]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-553958015-3226616502-4150485298-1000\Software\Macromedia\FlashPlayer]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-553958015-3226616502-4150485298-1000\Software\stevengould.org\CleanUp!]
@DACL=(02 0000)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\612570580:736787675.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\program files\Launch Manager\LManager.exe
c:\windows\System32\rundll32.exe
c:\windows\ehome\ehmsas.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\wbem\unsecapp.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Heure de fin: 2011-09-02 08:44:31 - La machine a redémarré
ComboFix-quarantined-files.txt 2011-09-02 06:44
ComboFix2.txt 2011-08-31 22:36
ComboFix3.txt 2009-02-09 22:57
.
Avant-CF: 8,321,626,112 octets libres
Après-CF: 8,302,403,584 octets libres
.
- - End Of File - - 97C290F75E244E27250D2251A519398B

Au fait je pars en week-end je me reconnecterai dimanche soir pour voir ta réponse suite à ce nouveau Log.
Merci

J'ai essayé une derniere action avant de partir et reussi a lancer malwarebytes en mode sans echec apres avoir fais une mise en jour en mode normal sans le lancer.
Il m'a trouve un fichier et une cle de registre infecte qu'il a supprime.
Par contre pas le temps de copier le log pour l'envoyer car il m'a a nouveau bloque.
De memoire il s'appelle ....backdoor.0access.... un truc comme ca.
Ensuite j'ai reessaye le roguekiller et il me semble de visu qu'il est alle un peu plus loin que d'habitude avant d'etre à nouveau bloque.

Sinon j'ai essayé de reinstaller le systeme via les fichiers de restaurations sur la partition sauf que la bebete m'empeche d'acceder à un fichier dll.
Je suis alle le telecharger sur le net pour le remplacer mais impossible, donc je vais tenter dimanche soir ou lundi de le faire via le dos... Qu'est ce que tu en penses ?

Voila des dernieres nouvelles, la je dois partir....Merci de ton aide

re

De toute façon avec ZAccess, il est clair qu'à l'heure actuelle c'est plus rapide de formater...

bonsoir Tigzy
à titre de curiosité , je vois depûis quelques jours que beaucoup sont infectés par ZAcess
quels sont les sites qui distribuent cette saloperie

Salut
Je sais pas trop, j'imagine que comme d'hab ça vient par des exploits et des bannières publicité

java dirait-on ^^

Tu fais quoi du driver patché? hein? :)
Les outils, ont sait la confiance qu'on peut leur porter

et puis console de recuperation sur Vista.....;mouarf !

Merci, mais j'ai décidé de ré-installer la machine voir message de réponse

-> Tigzy
Qui a parlé de "driver patché" ? Pas moi : ça n'est pas parce qu'un fichier s'appelle quelquechose.sys et se trouve C:\Windows\Sytem32\drivers que c'est un pilote. En l'occurrence, ce fichier n'est que le virus. Par ailleurs, si je me permets d'indiquer un mode opératoire ici, c'est que je l'ai validé sur des postes. Qui n'ont pas eu de problème de redémarrage.

Quand à la confiance à porter en ces outils, non, justement, on ne sait pas. Il s'en trouve d'ailleurs certains qui s'avèrent être des outils d'infection. Alors croire en leur bonne réputation sur Internet ?
Oui, jusqu'à ce que quelqu'un prouve le contraire... Enfin, chacun sa méthode ! ;-)

-> g3n-h@ckm@n
Vis-quoi ? Ca a seulement le droit de booter, ça ? ;-)

-> rems34
Radical comme solution, mais efficace.
Par contre, tu peux oublier Avast pour te protéger du machin s'il se représente, il n'y voit que du feu. Au moins jusqu'à ce vendredi, en tous cas.

Cordialement.

re

je ne suis pas d'accord avec ca :

Il s'en trouve d'ailleurs certains qui s'avèrent être des outils d'infection

sauf si tu les telecharges pas sur les sites officiels et t'amuses à les telecharger chez softonic , là c'est sur tu vas de ramasser une toolbar et autres adwares au choix de ce que tu coches :)