très lent surtout lors de démarrage

Question

mon pc est lent lors d'ouverture d'une page internet et lors de démarrage 
merci de me répondre



Configuration: Windows XP / Safari 535.1

2011N2 · Answer

Salut,

Bienvenue sur Comment Ça Marche. On va essayer de résoudre ton problème ensemble. Voici quelques régles ==>

-Ici, les helpers sont volontaires, et nous avons également une vie de famille, du travail, comme tout le monde. En conséquences, sois patient en attendant tes réponses de la part du helper.

-Suis la procédure jusqu'au bout, sinon ça ne servira à rien.

-Ne panique pas, n'hésite pas à poser des questions si tu as des doutes, car c'est beaucoup mieux que de planter ton PC si tu ne sais pas quoi faire.

-Avant d'effectuer des manipulations, lis la procédure jusqu'au bout, afin de ne pas faire d'erreur.

-Lors de la désinfection, désactive ton antivirus, afin que la désinfection puisse s'effectuer normalement.

-Si tu es sous Vista/7, éxécute un programme toujours en faisant un clic droit puis ==> Éxécuter en tant qu'administrateur

-Si tu crack (Emule, BiTorrent, etc...) arrête tout de suite, c'est une source d'infection, et la désinfection sera donc inutile.

-N'ouvre pas d'autres sujets pour le même problème (que ce soit sur ce forum ou sur un autre).

Si tu es prêt, c'est partit ==>



On va faire un diagnostic de ton PC pour plus de renseignements ==>

=> Télécharge ZHPDiag (de Nicolas Coolman) sur ton bureau : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

ou : 

http://www.premiumorange.com/zeb-help-process/zhpdiag.html

ou :
 
https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/


=> Laisse toi guider lors de l'installation, coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag". 

/!\Utilisateur de Vista et Seven/!\ : Clic droit sur le logo de ZHPdiag (parchemin) puis « Exécuter en tant qu'Administrateur » 

=> Clique sur l'icône, en haut à gauche, représentant une loupe : « Lancer le diagnostic ».  
=> Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette.  
=> Héberge le rapport ZHPDiag.txt sur un des sites ci-dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
 
https://www.cjoint.com/  

ou


http://www.cijoint.fr/ 

ou : 

http://ww38.toofiles.com/fr/documents-upload.html 

ou :
 

http://pjjoint.malekal.com/ 

ou : 

https://www.casimages.com/ 



Si tu as besoin d'aide, ou quelque chose n'est pas clair, n'hésite pas à poser la question.

@+

Gabriel.

rositaa · Answer

merci bien Gabriel voila c le lien
http://www.cijoint.fr/cjlink.php?file=cj201109/cijE2akyOa.txt

2011N2 · Answer

Re,

Tu as une infection TDL3.

- Télécharge TDSSKiller : https://support.kaspersky.com/downloads/utils/tdsskiller.zip

- Lance-le (Utilisateurs de Vista/Seven => Clic droit puis "Exécuter en tant que administrateur") 

L'outil va télécharger automatiquement la dernière version de TDSSKiller puis lancera une analyse. 

Patiente pendant le scan. À la fin de l'analyse, appuie sur une touche de ton choix. Un rapport va s'ouvrir. 

- Copie/Colle son contenu dans ta prochaine réponse sur le forum. 

N.B : Le rapport se trouve également sous C:	dsskiller.txt.


Si tu as des questions sur l'utilisation de TDSSkiller, n'hésite pas à me les poser !

@+

Gabriel.

rositaa · Answer

2011/09/17 14:44:47.0968 0364	TDSS rootkit removing tool 2.5.22.0 Sep 13 2011 15:55:17
2011/09/17 14:44:49.0250 0364	================================================================================
2011/09/17 14:44:49.0250 0364	SystemInfo:
2011/09/17 14:44:49.0250 0364	
2011/09/17 14:44:49.0250 0364	OS Version: 5.1.2600 ServicePack: 3.0
2011/09/17 14:44:49.0250 0364	Product type: Workstation
2011/09/17 14:44:49.0250 0364	ComputerName: STANDARD
2011/09/17 14:44:49.0250 0364	UserName: Administrateur
2011/09/17 14:44:49.0250 0364	Windows directory: C:\WINDOWS1
2011/09/17 14:44:49.0250 0364	System windows directory: C:\WINDOWS1
2011/09/17 14:44:49.0250 0364	Processor architecture: Intel x86
2011/09/17 14:44:49.0250 0364	Number of processors: 2
2011/09/17 14:44:49.0250 0364	Page size: 0x1000
2011/09/17 14:44:49.0250 0364	Boot type: Normal boot
2011/09/17 14:44:49.0250 0364	================================================================================
2011/09/17 14:44:50.0968 0364	Initialize success
2011/09/17 14:44:55.0718 5420	================================================================================
2011/09/17 14:44:55.0718 5420	Scan started
2011/09/17 14:44:55.0718 5420	Mode: Manual; 
2011/09/17 14:44:55.0718 5420	================================================================================
2011/09/17 14:44:57.0343 5420	ACPI            (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS1\system32\DRIVERS\ACPI.sys
2011/09/17 14:44:57.0390 5420	ACPIEC          (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS1\system32\DRIVERS\ACPIEC.sys
2011/09/17 14:44:57.0453 5420	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS1\system32\drivers\aec.sys
2011/09/17 14:44:57.0531 5420	AFD             (355556d9e580915118cd7ef736653a89) C:\WINDOWS1\System32\drivers\afd.sys
2011/09/17 14:44:57.0640 5420	AlfaFF          (4490b8bdf38750458eb9b24835fda8fe) C:\WINDOWS1\system32\Drivers\AlfaFF.sys
2011/09/17 14:44:57.0812 5420	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS1\system32\DRIVERS\asyncmac.sys
2011/09/17 14:44:57.0843 5420	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS1\system32\DRIVERS\atapi.sys
2011/09/17 14:44:58.0015 5420	ati2mtag        (63fe8e17aed89ebe77f7beb7367a92af) C:\WINDOWS1\system32\DRIVERS\ati2mtag.sys
2011/09/17 14:44:58.0078 5420	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS1\system32\DRIVERS\atmarpc.sys
2011/09/17 14:44:58.0140 5420	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS1\system32\DRIVERS\audstub.sys
2011/09/17 14:44:58.0250 5420	avgio           (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
2011/09/17 14:44:58.0281 5420	avgntflt        (14fe36d8f2c6a2435275338d061a0b66) C:\WINDOWS1\system32\DRIVERS\avgntflt.sys
2011/09/17 14:44:58.0328 5420	avipbb          (ad9bd66a862116e79cb45bb6be46055f) C:\WINDOWS1\system32\DRIVERS\avipbb.sys
2011/09/17 14:44:58.0375 5420	b57w2k          (559ddda2c88459478056174247706deb) C:\WINDOWS1\system32\DRIVERS\b57xp32.sys
2011/09/17 14:44:58.0421 5420	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS1\system32\drivers\Beep.sys
2011/09/17 14:44:58.0500 5420	btaudio         (b6e16da77eafe84a8c5bc44784feeaea) C:\WINDOWS1\system32\drivers\btaudio.sys
2011/09/17 14:44:58.0578 5420	BTDriver        (58a49bd10e08d3d4333a60dedcb1ced8) C:\WINDOWS1\system32\DRIVERS\btport.sys
2011/09/17 14:44:58.0656 5420	BTKRNL          (ef5e0de0a7ca2977a9255f36f4d915ab) C:\WINDOWS1\system32\DRIVERS\btkrnl.sys
2011/09/17 14:44:58.0718 5420	BTWDNDIS        (80f61de965c116051614ac2f04222ff7) C:\WINDOWS1\system32\DRIVERS\btwdndis.sys
2011/09/17 14:44:58.0765 5420	btwhid          (e48668b4a6a5cf68b33aecad18ee8e1e) C:\WINDOWS1\system32\DRIVERS\btwhid.sys
2011/09/17 14:44:58.0812 5420	btwmodem        (8bcd7bfe9c70a8ff7444263435b18aa1) C:\WINDOWS1\system32\DRIVERS\btwmodem.sys
2011/09/17 14:44:58.0859 5420	BTWUSB          (053dc5be74621b63bb48c2b86bafc7b0) C:\WINDOWS1\system32\Drivers\btwusb.sys
2011/09/17 14:44:58.0921 5420	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS1\system32\drivers\cbidf2k.sys
2011/09/17 14:44:58.0953 5420	CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS1\system32\DRIVERS\CCDECODE.sys
2011/09/17 14:44:59.0031 5420	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS1\system32\drivers\Cdaudio.sys
2011/09/17 14:44:59.0078 5420	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS1\system32\drivers\Cdfs.sys
2011/09/17 14:44:59.0125 5420	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS1\system32\DRIVERS\cdrom.sys
2011/09/17 14:44:59.0203 5420	CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS1\system32\DRIVERS\CmBatt.sys
2011/09/17 14:44:59.0250 5420	Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS1\system32\DRIVERS\compbatt.sys
2011/09/17 14:44:59.0375 5420	CrystalSysInfo  (f054744f67576a01139885173392502b) C:\Program Files\MediaCoder\SysInfo.sys
2011/09/17 14:44:59.0484 5420	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS1\system32\DRIVERS\disk.sys
2011/09/17 14:44:59.0515 5420	DKbFltr         (060db81dfb79c8244eb65d10b6c7873f) C:\WINDOWS1\system32\DRIVERS\DKbFltr.sys
2011/09/17 14:44:59.0593 5420	dmboot          (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS1\system32\drivers\dmboot.sys
2011/09/17 14:44:59.0656 5420	dmio            (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS1\system32\drivers\dmio.sys
2011/09/17 14:44:59.0687 5420	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS1\system32\drivers\dmload.sys
2011/09/17 14:44:59.0750 5420	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS1\system32\drivers\DMusic.sys
2011/09/17 14:44:59.0843 5420	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS1\system32\drivers\drmkaud.sys
2011/09/17 14:44:59.0921 5420	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS1\system32\drivers\Fastfat.sys
2011/09/17 14:44:59.0984 5420	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS1\system32\drivers\Fdc.sys
2011/09/17 14:45:00.0015 5420	Fips            (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS1\system32\drivers\Fips.sys
2011/09/17 14:45:00.0046 5420	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS1\system32\drivers\Flpydisk.sys
2011/09/17 14:45:00.0093 5420	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS1\system32\drivers\fltmgr.sys
2011/09/17 14:45:00.0156 5420	fssfltr         (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS1\system32\DRIVERS\fssfltr_tdi.sys
2011/09/17 14:45:00.0187 5420	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS1\system32\drivers\Fs_Rec.sys
2011/09/17 14:45:00.0218 5420	Ftdisk          (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS1\system32\DRIVERS\ftdisk.sys
2011/09/17 14:45:00.0250 5420	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS1\system32\DRIVERS\msgpc.sys
2011/09/17 14:45:00.0312 5420	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS1\system32\DRIVERS\HDAudBus.sys
2011/09/17 14:45:00.0375 5420	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS1\system32\DRIVERS\hidusb.sys
2011/09/17 14:45:00.0468 5420	HSFHWAZL        (6a5c4732d6803f84e2987edd8e4359ce) C:\WINDOWS1\system32\DRIVERS\HSFHWAZL.sys
2011/09/17 14:45:00.0531 5420	HSF_DPV         (21c31273c6cc4826e74be8ae3b09d4a8) C:\WINDOWS1\system32\DRIVERS\HSF_DPV.sys
2011/09/17 14:45:00.0609 5420	HssDrv          (4f28652ec514fa1ba473bc1a695a5c98) C:\WINDOWS1\system32\DRIVERS\HssDrv.sys
2011/09/17 14:45:00.0687 5420	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS1\system32\Drivers\HTTP.sys
2011/09/17 14:45:00.0765 5420	i8042prt        (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS1\system32\DRIVERS\i8042prt.sys
2011/09/17 14:45:00.0828 5420	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS1\system32\DRIVERS\imapi.sys
2011/09/17 14:45:00.0921 5420	Int15           (4d8d5b1c895ea0f2a721b98a7ce198f1) C:\WINDOWS1\System32\drivers\int15.sys
2011/09/17 14:45:01.0093 5420	IntcAzAudAddService (19afbb8427ce65042599555e578170df) C:\WINDOWS1\system32\drivers\RtkHDAud.sys
2011/09/17 14:45:01.0203 5420	intelppm        (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS1\system32\DRIVERS\intelppm.sys
2011/09/17 14:45:01.0250 5420	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS1\system32\drivers\ip6fw.sys
2011/09/17 14:45:01.0281 5420	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS1\system32\DRIVERS\ipfltdrv.sys
2011/09/17 14:45:01.0312 5420	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS1\system32\DRIVERS\ipinip.sys
2011/09/17 14:45:01.0359 5420	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS1\system32\DRIVERS\ipnat.sys
2011/09/17 14:45:01.0375 5420	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS1\system32\DRIVERS\ipsec.sys
2011/09/17 14:45:01.0421 5420	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS1\system32\DRIVERS\irenum.sys
2011/09/17 14:45:01.0453 5420	isapnp          (355836975a67b6554bca60328cd6cb74) C:\WINDOWS1\system32\DRIVERS\isapnp.sys
2011/09/17 14:45:01.0500 5420	Kbdclass        (16813155807c6881f4bfbf6657424659) C:\WINDOWS1\system32\DRIVERS\kbdclass.sys
2011/09/17 14:45:01.0546 5420	kbdhid          (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS1\system32\DRIVERS\kbdhid.sys
2011/09/17 14:45:01.0593 5420	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS1\system32\drivers\kmixer.sys
2011/09/17 14:45:01.0656 5420	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS1\system32\drivers\KSecDD.sys
2011/09/17 14:45:01.0734 5420	MarvinBus       (a3e700d78eec390f1208098cdca5c6b6) C:\WINDOWS1\system32\DRIVERS\MarvinBus.sys
2011/09/17 14:45:01.0765 5420	mdmxsdk         (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS1\system32\DRIVERS\mdmxsdk.sys
2011/09/17 14:45:01.0828 5420	Modem           (510ade9327fe84c10254e1902697e25f) C:\WINDOWS1\system32\drivers\Modem.sys
2011/09/17 14:45:01.0859 5420	Mouclass        (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS1\system32\DRIVERS\mouclass.sys
2011/09/17 14:45:01.0906 5420	mouhid          (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS1\system32\DRIVERS\mouhid.sys
2011/09/17 14:45:01.0921 5420	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS1\system32\drivers\MountMgr.sys
2011/09/17 14:45:01.0968 5420	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS1\system32\DRIVERS\mrxdav.sys
2011/09/17 14:45:02.0031 5420	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS1\system32\DRIVERS\mrxsmb.sys
2011/09/17 14:45:02.0078 5420	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS1\system32\drivers\Msfs.sys
2011/09/17 14:45:02.0125 5420	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS1\system32\drivers\MSKSSRV.sys
2011/09/17 14:45:02.0156 5420	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS1\system32\drivers\MSPCLOCK.sys
2011/09/17 14:45:02.0171 5420	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS1\system32\drivers\MSPQM.sys
2011/09/17 14:45:02.0218 5420	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS1\system32\DRIVERS\mssmbios.sys
2011/09/17 14:45:02.0250 5420	MSTEE           (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS1\system32\drivers\MSTEE.sys
2011/09/17 14:45:02.0281 5420	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS1\system32\drivers\Mup.sys
2011/09/17 14:45:02.0312 5420	NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS1\system32\DRIVERS\NABTSFEC.sys
2011/09/17 14:45:02.0343 5420	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS1\system32\drivers\NDIS.sys
2011/09/17 14:45:02.0421 5420	NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS1\system32\DRIVERS\NdisIP.sys
2011/09/17 14:45:02.0453 5420	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS1\system32\DRIVERS
distapi.sys
2011/09/17 14:45:02.0500 5420	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS1\system32\DRIVERS
disuio.sys
2011/09/17 14:45:02.0718 5420	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS1\system32\DRIVERS
diswan.sys
2011/09/17 14:45:02.0765 5420	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS1\system32\drivers\NDProxy.sys
2011/09/17 14:45:02.0796 5420	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS1\system32\DRIVERS
etbios.sys
2011/09/17 14:45:02.0828 5420	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS1\system32\DRIVERS
etbt.sys
2011/09/17 14:45:03.0015 5420	NETw5x32        (0888844230083ce3b47395102bca8207) C:\WINDOWS1\system32\DRIVERS\NETw5x32.sys
2011/09/17 14:45:03.0140 5420	nmwcd           (357ddb51e03cae598c096d95497373d0) C:\WINDOWS1\system32\drivers\ccdcmb.sys
2011/09/17 14:45:03.0187 5420	nmwcdc          (7cd443f9d36c80e152fadb274089577a) C:\WINDOWS1\system32\drivers\ccdcmbo.sys
2011/09/17 14:45:03.0250 5420	NPF             (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS1\system32\drivers\NPF.sys
2011/09/17 14:45:03.0296 5420	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS1\system32\drivers\Npfs.sys
2011/09/17 14:45:03.0359 5420	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS1\system32\drivers\Ntfs.sys
2011/09/17 14:45:03.0453 5420	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS1\system32\drivers\Null.sys
2011/09/17 14:45:03.0500 5420	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS1\system32\DRIVERS
wlnkflt.sys
2011/09/17 14:45:03.0531 5420	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS1\system32\DRIVERS
wlnkfwd.sys
2011/09/17 14:45:03.0578 5420	NwlnkIpx        (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS1\system32\DRIVERS
wlnkipx.sys
2011/09/17 14:45:03.0625 5420	NwlnkNb         (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS1\system32\DRIVERS
wlnknb.sys
2011/09/17 14:45:03.0640 5420	NwlnkSpx        (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS1\system32\DRIVERS
wlnkspx.sys
2011/09/17 14:45:03.0687 5420	NWRDR           (36b9b950e3d2e100970a48d8bad86740) C:\WINDOWS1\system32\DRIVERS
wrdr.sys
2011/09/17 14:45:03.0750 5420	O2MDRDR         (f1072a203fb1e246be62d736a5b88dfd) C:\WINDOWS1\system32\DRIVERS\o2media.sys
2011/09/17 14:45:03.0765 5420	O2SDRDR         (5472c48f44b49f07b16b421899e550f8) C:\WINDOWS1\system32\DRIVERS\o2sd.sys
2011/09/17 14:45:03.0828 5420	Parport         (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS1\system32\drivers\Parport.sys
2011/09/17 14:45:03.0859 5420	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS1\system32\drivers\PartMgr.sys
2011/09/17 14:45:03.0906 5420	ParVdm          (9575c5630db8fb804649a6959737154c) C:\WINDOWS1\system32\drivers\ParVdm.sys
2011/09/17 14:45:03.0953 5420	pccsmcfd        (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS1\system32\DRIVERS\pccsmcfd.sys
2011/09/17 14:45:03.0984 5420	PCI             (043410877bda580c528f45165f7125bc) C:\WINDOWS1\system32\DRIVERS\pci.sys
2011/09/17 14:45:04.0031 5420	PCIIde          (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS1\system32\DRIVERS\pciide.sys
2011/09/17 14:45:04.0078 5420	Pcmcia          (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS1\system32\DRIVERS\pcmcia.sys
2011/09/17 14:45:04.0265 5420	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS1\system32\DRIVERSaspptp.sys
2011/09/17 14:45:04.0312 5420	PRISM_A02       (d145a6e8dca4ff0a0c2fc081f45b932a) C:\WINDOWS1\system32\DRIVERS\PRISMA02.sys
2011/09/17 14:45:04.0359 5420	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS1\system32\DRIVERS\psched.sys
2011/09/17 14:45:04.0406 5420	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS1\system32\DRIVERS\ptilink.sys
2011/09/17 14:45:04.0546 5420	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS1\system32\DRIVERSasacd.sys
2011/09/17 14:45:04.0609 5420	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS1\system32\DRIVERSasl2tp.sys
2011/09/17 14:45:04.0656 5420	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS1\system32\DRIVERSaspppoe.sys
2011/09/17 14:45:04.0687 5420	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS1\system32\DRIVERSaspti.sys
2011/09/17 14:45:04.0718 5420	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS1\system32\DRIVERSdbss.sys
2011/09/17 14:45:04.0765 5420	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS1\system32\DRIVERS\RDPCDD.sys
2011/09/17 14:45:04.0812 5420	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS1\system32\DRIVERSdpdr.sys
2011/09/17 14:45:04.0890 5420	RDPWD           (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS1\system32\drivers\RDPWD.sys
2011/09/17 14:45:04.0937 5420	redbook         (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS1\system32\DRIVERSedbook.sys
2011/09/17 14:45:05.0031 5420	sdbus           (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS1\system32\DRIVERS\sdbus.sys
2011/09/17 14:45:05.0062 5420	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS1\system32\DRIVERS\secdrv.sys
2011/09/17 14:45:05.0140 5420	Serial          (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS1\system32\drivers\Serial.sys
2011/09/17 14:45:05.0203 5420	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS1\system32\drivers\Sfloppy.sys
2011/09/17 14:45:05.0250 5420	SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS1\system32\DRIVERS\SLIP.sys
2011/09/17 14:45:05.0328 5420	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS1\system32\drivers\splitter.sys
2011/09/17 14:45:05.0359 5420	sr              (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS1\system32\DRIVERS\sr.sys
2011/09/17 14:45:05.0406 5420	Srv             (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS1\system32\DRIVERS\srv.sys
2011/09/17 14:45:05.0468 5420	sscdbus         (d6870895fe46a464a19141440eb6cc1e) C:\WINDOWS1\system32\DRIVERS\sscdbus.sys
2011/09/17 14:45:05.0515 5420	sscdmdfl        (0fe167362e4689b716cdc8d93adedda8) C:\WINDOWS1\system32\DRIVERS\sscdmdfl.sys
2011/09/17 14:45:05.0562 5420	sscdmdm         (55a15707e32b6709242ad127e62ca55a) C:\WINDOWS1\system32\DRIVERS\sscdmdm.sys
2011/09/17 14:45:05.0609 5420	ssmdrv          (3ad0362cf68de3ac500e981700242cca) C:\WINDOWS1\system32\DRIVERS\ssmdrv.sys
2011/09/17 14:45:05.0671 5420	ss_bus          (5a1d0ca8a5f1e7b4ec50b9d76c001f0e) C:\WINDOWS1\system32\DRIVERS\ss_bus.sys
2011/09/17 14:45:05.0703 5420	ss_mdfl         (f0a85580e36a3a85059037d39a9cf079) C:\WINDOWS1\system32\DRIVERS\ss_mdfl.sys
2011/09/17 14:45:05.0750 5420	ss_mdm          (84c3dbfd1bfa4adc0a950b3d5506cb00) C:\WINDOWS1\system32\DRIVERS\ss_mdm.sys
2011/09/17 14:45:05.0796 5420	StarOpen        (306521935042fc0a6988d528643619b3) C:\WINDOWS1\system32\drivers\StarOpen.sys
2011/09/17 14:45:05.0843 5420	streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS1\system32\DRIVERS\StreamIP.sys
2011/09/17 14:45:05.0875 5420	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS1\system32\DRIVERS\swenum.sys
2011/09/17 14:45:05.0906 5420	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS1\system32\drivers\swmidi.sys
2011/09/17 14:45:06.0046 5420	SynTP           (0389b6b5ba4bd0ddf9e1744b6adc8c97) C:\WINDOWS1\system32\DRIVERS\SynTP.sys
2011/09/17 14:45:06.0109 5420	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS1\system32\drivers\sysaudio.sys
2011/09/17 14:45:06.0156 5420	taphss          (0c3b2a9c4bd2dd9a6c2e4084314dd719) C:\WINDOWS1\system32\DRIVERS	aphss.sys
2011/09/17 14:45:06.0203 5420	Tcpip           (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS1\system32\DRIVERS	cpip.sys
2011/09/17 14:45:06.0265 5420	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS1\system32\drivers\TDPIPE.sys
2011/09/17 14:45:06.0296 5420	TDTCP           (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS1\system32\drivers\TDTCP.sys
2011/09/17 14:45:06.0328 5420	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS1\system32\DRIVERS	ermdd.sys
2011/09/17 14:45:06.0390 5420	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS1\system32\drivers\Udfs.sys
2011/09/17 14:45:06.0421 5420	UIUSys          (7020c64a20709b39cbe4a1cf371a9cd5) C:\WINDOWS1\system32\DRIVERS\UIUSYS.SYS
2011/09/17 14:45:06.0484 5420	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS1\system32\DRIVERS\update.sys
2011/09/17 14:45:06.0546 5420	upperdev        (15629e4d65f97ab5432d6d9597cf6a33) C:\WINDOWS1\system32\DRIVERS\usbser_lowerflt.sys
2011/09/17 14:45:06.0578 5420	usbaudio        (e919708db44ed8543a7c017953148330) C:\WINDOWS1\system32\drivers\usbaudio.sys
2011/09/17 14:45:06.0640 5420	usbccgp         (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS1\system32\DRIVERS\usbccgp.sys
2011/09/17 14:45:06.0671 5420	usbehci         (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS1\system32\DRIVERS\usbehci.sys
2011/09/17 14:45:06.0703 5420	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS1\system32\DRIVERS\usbhub.sys
2011/09/17 14:45:06.0734 5420	usbscan         (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS1\system32\DRIVERS\usbscan.sys
2011/09/17 14:45:06.0765 5420	usbser          (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS1\system32\DRIVERS\usbser.sys
2011/09/17 14:45:06.0812 5420	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS1\system32\DRIVERS\USBSTOR.SYS
2011/09/17 14:45:06.0843 5420	usbuhci         (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS1\system32\DRIVERS\usbuhci.sys
2011/09/17 14:45:06.0859 5420	usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS1\system32\Drivers\usbvideo.sys
2011/09/17 14:45:06.0890 5420	Suspicious service (NoAccess): vdrv7000
2011/09/17 14:45:06.0937 5420	vdrv7000        (f22f2a67dc4136f4054ed84afe565e72) C:\WINDOWS1\system32\Drivers\VDRV7000.SYS
2011/09/17 14:45:06.0953 5420	vdrv7000 - detected LockedService.Multi.Generic (1)
2011/09/17 14:45:06.0968 5420	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS1\System32\drivers\vga.sys
2011/09/17 14:45:07.0000 5420	VolSnap         (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS1\system32\drivers\VolSnap.sys
2011/09/17 14:45:07.0062 5420	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS1\system32\DRIVERS\wanarp.sys
2011/09/17 14:45:07.0109 5420	Wdf01000        (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS1\system32\Drivers\wdf01000.sys
2011/09/17 14:45:07.0187 5420	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS1\system32\drivers\wdmaud.sys
2011/09/17 14:45:07.0234 5420	WIBUKEY         (afcea7939925378f867dde6af76f3924) C:\WINDOWS1\system32\DRIVERS\WibuKey.sys
2011/09/17 14:45:07.0296 5420	winachsf        (307d248f97835b6879bdd361086924fe) C:\WINDOWS1\system32\DRIVERS\HSF_CNXT.sys
2011/09/17 14:45:07.0406 5420	WmiAcpi         (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS1\system32\DRIVERS\wmiacpi.sys
2011/09/17 14:45:07.0484 5420	WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS1\system32\DRIVERS\wpdusb.sys
2011/09/17 14:45:07.0515 5420	WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS1\system32\DRIVERS\WSTCODEC.SYS
2011/09/17 14:45:07.0578 5420	WudfPf          (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS1\system32\DRIVERS\WudfPf.sys
2011/09/17 14:45:07.0609 5420	WudfRd          (ac13cb789d93412106b0fb6c7eb2bcb6) C:\WINDOWS1\system32\DRIVERS\wudfrd.sys
2011/09/17 14:45:07.0687 5420	MBR (0x1B8)     (c99c3199cfaa4cbdcd91493f6d113a50) \Device\Harddisk0\DR0
2011/09/17 14:45:07.0843 5420	Boot (0x1200)   (3866035717517385a2d6f2f98c6ba647) \Device\Harddisk0\DR0\Partition0
2011/09/17 14:45:07.0890 5420	Boot (0x1200)   (56e46e71187d80ad8a1e86a3309c65e8) \Device\Harddisk0\DR0\Partition1
2011/09/17 14:45:07.0906 5420	================================================================================
2011/09/17 14:45:07.0906 5420	Scan finished
2011/09/17 14:45:07.0906 5420	================================================================================
2011/09/17 14:45:07.0968 4248	Detected object count: 1
2011/09/17 14:45:07.0968 4248	Actual detected object count: 1
2011/09/17 14:45:12.0375 4248	LockedService.Multi.Generic(vdrv7000) - User select action: Skip

2011N2 · Answer

Re,

Peux-tu réeffectuer le scan de TDSSkiller en faisant Delete ?

Merci,

Gabriel.

rositaa · Answer

2011/09/17 21:58:32.0875 5308	TDSS rootkit removing tool 2.5.22.0 Sep 13 2011 15:55:17
2011/09/17 21:58:33.0515 5308	================================================================================
2011/09/17 21:58:33.0515 5308	SystemInfo:
2011/09/17 21:58:33.0515 5308	
2011/09/17 21:58:33.0515 5308	OS Version: 5.1.2600 ServicePack: 3.0
2011/09/17 21:58:33.0515 5308	Product type: Workstation
2011/09/17 21:58:33.0515 5308	ComputerName: STANDARD
2011/09/17 21:58:33.0515 5308	UserName: Administrateur
2011/09/17 21:58:33.0515 5308	Windows directory: C:\WINDOWS1
2011/09/17 21:58:33.0515 5308	System windows directory: C:\WINDOWS1
2011/09/17 21:58:33.0515 5308	Processor architecture: Intel x86
2011/09/17 21:58:33.0515 5308	Number of processors: 2
2011/09/17 21:58:33.0515 5308	Page size: 0x1000
2011/09/17 21:58:33.0515 5308	Boot type: Normal boot
2011/09/17 21:58:33.0515 5308	================================================================================
2011/09/17 21:58:33.0625 5308	Initialize success
2011/09/17 21:58:35.0781 2700	================================================================================
2011/09/17 21:58:35.0781 2700	Scan started
2011/09/17 21:58:35.0781 2700	Mode: Manual; 
2011/09/17 21:58:35.0781 2700	================================================================================
2011/09/17 21:58:36.0375 2700	03996607        (e05c17aaaa8115894c41e35bec605668) C:\WINDOWS1\system32\drivers\21258691.sys
2011/09/17 21:58:36.0468 2700	ACPI            (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS1\system32\DRIVERS\ACPI.sys
2011/09/17 21:58:36.0484 2700	ACPIEC          (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS1\system32\DRIVERS\ACPIEC.sys
2011/09/17 21:58:36.0546 2700	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS1\system32\drivers\aec.sys
2011/09/17 21:58:36.0593 2700	AFD             (355556d9e580915118cd7ef736653a89) C:\WINDOWS1\System32\drivers\afd.sys
2011/09/17 21:58:36.0671 2700	AlfaFF          (4490b8bdf38750458eb9b24835fda8fe) C:\WINDOWS1\system32\Drivers\AlfaFF.sys
2011/09/17 21:58:36.0828 2700	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS1\system32\DRIVERS\asyncmac.sys
2011/09/17 21:58:36.0859 2700	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS1\system32\DRIVERS\atapi.sys
2011/09/17 21:58:36.0984 2700	ati2mtag        (63fe8e17aed89ebe77f7beb7367a92af) C:\WINDOWS1\system32\DRIVERS\ati2mtag.sys
2011/09/17 21:58:37.0046 2700	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS1\system32\DRIVERS\atmarpc.sys
2011/09/17 21:58:37.0093 2700	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS1\system32\DRIVERS\audstub.sys
2011/09/17 21:58:37.0187 2700	avgio           (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
2011/09/17 21:58:37.0218 2700	avgntflt        (14fe36d8f2c6a2435275338d061a0b66) C:\WINDOWS1\system32\DRIVERS\avgntflt.sys
2011/09/17 21:58:37.0250 2700	avipbb          (ad9bd66a862116e79cb45bb6be46055f) C:\WINDOWS1\system32\DRIVERS\avipbb.sys
2011/09/17 21:58:37.0281 2700	b57w2k          (559ddda2c88459478056174247706deb) C:\WINDOWS1\system32\DRIVERS\b57xp32.sys
2011/09/17 21:58:37.0343 2700	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS1\system32\drivers\Beep.sys
2011/09/17 21:58:37.0406 2700	btaudio         (b6e16da77eafe84a8c5bc44784feeaea) C:\WINDOWS1\system32\drivers\btaudio.sys
2011/09/17 21:58:37.0453 2700	BTDriver        (58a49bd10e08d3d4333a60dedcb1ced8) C:\WINDOWS1\system32\DRIVERS\btport.sys
2011/09/17 21:58:37.0515 2700	BTKRNL          (ef5e0de0a7ca2977a9255f36f4d915ab) C:\WINDOWS1\system32\DRIVERS\btkrnl.sys
2011/09/17 21:58:37.0578 2700	BTWDNDIS        (80f61de965c116051614ac2f04222ff7) C:\WINDOWS1\system32\DRIVERS\btwdndis.sys
2011/09/17 21:58:37.0625 2700	btwhid          (e48668b4a6a5cf68b33aecad18ee8e1e) C:\WINDOWS1\system32\DRIVERS\btwhid.sys
2011/09/17 21:58:37.0671 2700	btwmodem        (8bcd7bfe9c70a8ff7444263435b18aa1) C:\WINDOWS1\system32\DRIVERS\btwmodem.sys
2011/09/17 21:58:37.0703 2700	BTWUSB          (053dc5be74621b63bb48c2b86bafc7b0) C:\WINDOWS1\system32\Drivers\btwusb.sys
2011/09/17 21:58:37.0750 2700	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS1\system32\drivers\cbidf2k.sys
2011/09/17 21:58:37.0812 2700	CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS1\system32\DRIVERS\CCDECODE.sys
2011/09/17 21:58:37.0859 2700	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS1\system32\drivers\Cdaudio.sys
2011/09/17 21:58:37.0906 2700	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS1\system32\drivers\Cdfs.sys
2011/09/17 21:58:37.0937 2700	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS1\system32\DRIVERS\cdrom.sys
2011/09/17 21:58:38.0000 2700	CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS1\system32\DRIVERS\CmBatt.sys
2011/09/17 21:58:38.0046 2700	Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS1\system32\DRIVERS\compbatt.sys
2011/09/17 21:58:38.0156 2700	CrystalSysInfo  (f054744f67576a01139885173392502b) C:\Program Files\MediaCoder\SysInfo.sys
2011/09/17 21:58:38.0265 2700	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS1\system32\DRIVERS\disk.sys
2011/09/17 21:58:38.0312 2700	DKbFltr         (060db81dfb79c8244eb65d10b6c7873f) C:\WINDOWS1\system32\DRIVERS\DKbFltr.sys
2011/09/17 21:58:38.0671 2700	dmboot          (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS1\system32\drivers\dmboot.sys
2011/09/17 21:58:38.0703 2700	dmio            (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS1\system32\drivers\dmio.sys
2011/09/17 21:58:38.0750 2700	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS1\system32\drivers\dmload.sys
2011/09/17 21:58:38.0796 2700	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS1\system32\drivers\DMusic.sys
2011/09/17 21:58:38.0875 2700	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS1\system32\drivers\drmkaud.sys
2011/09/17 21:58:38.0921 2700	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS1\system32\drivers\Fastfat.sys
2011/09/17 21:58:38.0953 2700	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS1\system32\drivers\Fdc.sys
2011/09/17 21:58:39.0000 2700	Fips            (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS1\system32\drivers\Fips.sys
2011/09/17 21:58:39.0031 2700	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS1\system32\drivers\Flpydisk.sys
2011/09/17 21:58:39.0062 2700	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS1\system32\drivers\fltmgr.sys
2011/09/17 21:58:39.0125 2700	fssfltr         (c6ee3a87fe609d3e1db9dbd072a248de) C:\WINDOWS1\system32\DRIVERS\fssfltr_tdi.sys
2011/09/17 21:58:39.0156 2700	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS1\system32\drivers\Fs_Rec.sys
2011/09/17 21:58:39.0171 2700	Ftdisk          (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS1\system32\DRIVERS\ftdisk.sys
2011/09/17 21:58:39.0203 2700	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS1\system32\DRIVERS\msgpc.sys
2011/09/17 21:58:39.0265 2700	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS1\system32\DRIVERS\HDAudBus.sys
2011/09/17 21:58:39.0328 2700	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS1\system32\DRIVERS\hidusb.sys
2011/09/17 21:58:39.0390 2700	HSFHWAZL        (6a5c4732d6803f84e2987edd8e4359ce) C:\WINDOWS1\system32\DRIVERS\HSFHWAZL.sys
2011/09/17 21:58:39.0453 2700	HSF_DPV         (21c31273c6cc4826e74be8ae3b09d4a8) C:\WINDOWS1\system32\DRIVERS\HSF_DPV.sys
2011/09/17 21:58:39.0515 2700	HssDrv          (4f28652ec514fa1ba473bc1a695a5c98) C:\WINDOWS1\system32\DRIVERS\HssDrv.sys
2011/09/17 21:58:39.0578 2700	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS1\system32\Drivers\HTTP.sys
2011/09/17 21:58:39.0656 2700	i8042prt        (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS1\system32\DRIVERS\i8042prt.sys
2011/09/17 21:58:39.0750 2700	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS1\system32\DRIVERS\imapi.sys
2011/09/17 21:58:39.0843 2700	Int15           (4d8d5b1c895ea0f2a721b98a7ce198f1) C:\WINDOWS1\System32\drivers\int15.sys
2011/09/17 21:58:39.0984 2700	IntcAzAudAddService (19afbb8427ce65042599555e578170df) C:\WINDOWS1\system32\drivers\RtkHDAud.sys
2011/09/17 21:58:40.0093 2700	intelppm        (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS1\system32\DRIVERS\intelppm.sys
2011/09/17 21:58:40.0125 2700	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS1\system32\drivers\ip6fw.sys
2011/09/17 21:58:40.0171 2700	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS1\system32\DRIVERS\ipfltdrv.sys
2011/09/17 21:58:40.0187 2700	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS1\system32\DRIVERS\ipinip.sys
2011/09/17 21:58:40.0234 2700	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS1\system32\DRIVERS\ipnat.sys
2011/09/17 21:58:40.0250 2700	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS1\system32\DRIVERS\ipsec.sys
2011/09/17 21:58:40.0296 2700	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS1\system32\DRIVERS\irenum.sys
2011/09/17 21:58:40.0328 2700	isapnp          (355836975a67b6554bca60328cd6cb74) C:\WINDOWS1\system32\DRIVERS\isapnp.sys
2011/09/17 21:58:40.0375 2700	Kbdclass        (16813155807c6881f4bfbf6657424659) C:\WINDOWS1\system32\DRIVERS\kbdclass.sys
2011/09/17 21:58:40.0421 2700	kbdhid          (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS1\system32\DRIVERS\kbdhid.sys
2011/09/17 21:58:40.0484 2700	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS1\system32\drivers\kmixer.sys
2011/09/17 21:58:40.0531 2700	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS1\system32\drivers\KSecDD.sys
2011/09/17 21:58:40.0625 2700	MarvinBus       (a3e700d78eec390f1208098cdca5c6b6) C:\WINDOWS1\system32\DRIVERS\MarvinBus.sys
2011/09/17 21:58:40.0640 2700	mdmxsdk         (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS1\system32\DRIVERS\mdmxsdk.sys
2011/09/17 21:58:40.0703 2700	Modem           (510ade9327fe84c10254e1902697e25f) C:\WINDOWS1\system32\drivers\Modem.sys
2011/09/17 21:58:40.0750 2700	Mouclass        (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS1\system32\DRIVERS\mouclass.sys
2011/09/17 21:58:40.0796 2700	mouhid          (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS1\system32\DRIVERS\mouhid.sys
2011/09/17 21:58:40.0812 2700	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS1\system32\drivers\MountMgr.sys
2011/09/17 21:58:40.0859 2700	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS1\system32\DRIVERS\mrxdav.sys
2011/09/17 21:58:40.0921 2700	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS1\system32\DRIVERS\mrxsmb.sys
2011/09/17 21:58:40.0968 2700	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS1\system32\drivers\Msfs.sys
2011/09/17 21:58:41.0000 2700	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS1\system32\drivers\MSKSSRV.sys
2011/09/17 21:58:41.0031 2700	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS1\system32\drivers\MSPCLOCK.sys
2011/09/17 21:58:41.0062 2700	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS1\system32\drivers\MSPQM.sys
2011/09/17 21:58:41.0109 2700	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS1\system32\DRIVERS\mssmbios.sys
2011/09/17 21:58:41.0156 2700	MSTEE           (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS1\system32\drivers\MSTEE.sys
2011/09/17 21:58:41.0187 2700	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS1\system32\drivers\Mup.sys
2011/09/17 21:58:41.0234 2700	NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS1\system32\DRIVERS\NABTSFEC.sys
2011/09/17 21:58:41.0296 2700	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS1\system32\drivers\NDIS.sys
2011/09/17 21:58:41.0656 2700	NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS1\system32\DRIVERS\NdisIP.sys
2011/09/17 21:58:41.0718 2700	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS1\system32\DRIVERS
distapi.sys
2011/09/17 21:58:41.0781 2700	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS1\system32\DRIVERS
disuio.sys
2011/09/17 21:58:41.0812 2700	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS1\system32\DRIVERS
diswan.sys
2011/09/17 21:58:41.0875 2700	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS1\system32\drivers\NDProxy.sys
2011/09/17 21:58:41.0921 2700	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS1\system32\DRIVERS
etbios.sys
2011/09/17 21:58:41.0968 2700	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS1\system32\DRIVERS
etbt.sys
2011/09/17 21:58:42.0171 2700	NETw5x32        (0888844230083ce3b47395102bca8207) C:\WINDOWS1\system32\DRIVERS\NETw5x32.sys
2011/09/17 21:58:42.0234 2700	nmwcd           (357ddb51e03cae598c096d95497373d0) C:\WINDOWS1\system32\drivers\ccdcmb.sys
2011/09/17 21:58:42.0281 2700	nmwcdc          (7cd443f9d36c80e152fadb274089577a) C:\WINDOWS1\system32\drivers\ccdcmbo.sys
2011/09/17 21:58:42.0328 2700	NPF             (b9730495e0cf674680121e34bd95a73b) C:\WINDOWS1\system32\drivers\NPF.sys
2011/09/17 21:58:42.0359 2700	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS1\system32\drivers\Npfs.sys
2011/09/17 21:58:42.0421 2700	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS1\system32\drivers\Ntfs.sys
2011/09/17 21:58:42.0546 2700	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS1\system32\drivers\Null.sys
2011/09/17 21:58:42.0734 2700	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS1\system32\DRIVERS
wlnkflt.sys
2011/09/17 21:58:42.0890 2700	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS1\system32\DRIVERS
wlnkfwd.sys
2011/09/17 21:58:42.0968 2700	NwlnkIpx        (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS1\system32\DRIVERS
wlnkipx.sys
2011/09/17 21:58:43.0000 2700	NwlnkNb         (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS1\system32\DRIVERS
wlnknb.sys
2011/09/17 21:58:43.0031 2700	NwlnkSpx        (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS1\system32\DRIVERS
wlnkspx.sys
2011/09/17 21:58:43.0062 2700	NWRDR           (36b9b950e3d2e100970a48d8bad86740) C:\WINDOWS1\system32\DRIVERS
wrdr.sys
2011/09/17 21:58:43.0125 2700	O2MDRDR         (f1072a203fb1e246be62d736a5b88dfd) C:\WINDOWS1\system32\DRIVERS\o2media.sys
2011/09/17 21:58:43.0156 2700	O2SDRDR         (5472c48f44b49f07b16b421899e550f8) C:\WINDOWS1\system32\DRIVERS\o2sd.sys
2011/09/17 21:58:43.0218 2700	Parport         (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS1\system32\drivers\Parport.sys
2011/09/17 21:58:43.0234 2700	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS1\system32\drivers\PartMgr.sys
2011/09/17 21:58:43.0281 2700	ParVdm          (9575c5630db8fb804649a6959737154c) C:\WINDOWS1\system32\drivers\ParVdm.sys
2011/09/17 21:58:43.0312 2700	pccsmcfd        (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS1\system32\DRIVERS\pccsmcfd.sys
2011/09/17 21:58:43.0343 2700	PCI             (043410877bda580c528f45165f7125bc) C:\WINDOWS1\system32\DRIVERS\pci.sys
2011/09/17 21:58:43.0390 2700	PCIIde          (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS1\system32\DRIVERS\pciide.sys
2011/09/17 21:58:43.0437 2700	Pcmcia          (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS1\system32\DRIVERS\pcmcia.sys
2011/09/17 21:58:43.0625 2700	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS1\system32\DRIVERSaspptp.sys
2011/09/17 21:58:43.0687 2700	PRISM_A02       (d145a6e8dca4ff0a0c2fc081f45b932a) C:\WINDOWS1\system32\DRIVERS\PRISMA02.sys
2011/09/17 21:58:43.0718 2700	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS1\system32\DRIVERS\psched.sys
2011/09/17 21:58:43.0765 2700	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS1\system32\DRIVERS\ptilink.sys
2011/09/17 21:58:43.0875 2700	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS1\system32\DRIVERSasacd.sys
2011/09/17 21:58:43.0937 2700	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS1\system32\DRIVERSasl2tp.sys
2011/09/17 21:58:43.0968 2700	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS1\system32\DRIVERSaspppoe.sys
2011/09/17 21:58:43.0984 2700	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS1\system32\DRIVERSaspti.sys
2011/09/17 21:58:44.0015 2700	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS1\system32\DRIVERSdbss.sys
2011/09/17 21:58:44.0062 2700	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS1\system32\DRIVERS\RDPCDD.sys
2011/09/17 21:58:44.0140 2700	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS1\system32\DRIVERSdpdr.sys
2011/09/17 21:58:44.0187 2700	RDPWD           (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS1\system32\drivers\RDPWD.sys
2011/09/17 21:58:44.0203 2700	redbook         (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS1\system32\DRIVERSedbook.sys
2011/09/17 21:58:44.0296 2700	sdbus           (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS1\system32\DRIVERS\sdbus.sys
2011/09/17 21:58:44.0312 2700	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS1\system32\DRIVERS\secdrv.sys
2011/09/17 21:58:44.0359 2700	Serial          (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS1\system32\drivers\Serial.sys
2011/09/17 21:58:44.0421 2700	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS1\system32\drivers\Sfloppy.sys
2011/09/17 21:58:44.0468 2700	SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS1\system32\DRIVERS\SLIP.sys
2011/09/17 21:58:44.0546 2700	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS1\system32\drivers\splitter.sys
2011/09/17 21:58:44.0625 2700	sr              (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS1\system32\DRIVERS\sr.sys
2011/09/17 21:58:44.0671 2700	Srv             (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS1\system32\DRIVERS\srv.sys
2011/09/17 21:58:44.0718 2700	sscdbus         (d6870895fe46a464a19141440eb6cc1e) C:\WINDOWS1\system32\DRIVERS\sscdbus.sys
2011/09/17 21:58:44.0765 2700	sscdmdfl        (0fe167362e4689b716cdc8d93adedda8) C:\WINDOWS1\system32\DRIVERS\sscdmdfl.sys
2011/09/17 21:58:44.0812 2700	sscdmdm         (55a15707e32b6709242ad127e62ca55a) C:\WINDOWS1\system32\DRIVERS\sscdmdm.sys
2011/09/17 21:58:44.0843 2700	ssmdrv          (3ad0362cf68de3ac500e981700242cca) C:\WINDOWS1\system32\DRIVERS\ssmdrv.sys
2011/09/17 21:58:44.0890 2700	ss_bus          (5a1d0ca8a5f1e7b4ec50b9d76c001f0e) C:\WINDOWS1\system32\DRIVERS\ss_bus.sys
2011/09/17 21:58:44.0937 2700	ss_mdfl         (f0a85580e36a3a85059037d39a9cf079) C:\WINDOWS1\system32\DRIVERS\ss_mdfl.sys
2011/09/17 21:58:44.0968 2700	ss_mdm          (84c3dbfd1bfa4adc0a950b3d5506cb00) C:\WINDOWS1\system32\DRIVERS\ss_mdm.sys
2011/09/17 21:58:45.0015 2700	StarOpen        (306521935042fc0a6988d528643619b3) C:\WINDOWS1\system32\drivers\StarOpen.sys
2011/09/17 21:58:45.0062 2700	streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS1\system32\DRIVERS\StreamIP.sys
2011/09/17 21:58:45.0093 2700	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS1\system32\DRIVERS\swenum.sys
2011/09/17 21:58:45.0140 2700	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS1\system32\drivers\swmidi.sys
2011/09/17 21:58:45.0265 2700	SynTP           (0389b6b5ba4bd0ddf9e1744b6adc8c97) C:\WINDOWS1\system32\DRIVERS\SynTP.sys
2011/09/17 21:58:45.0312 2700	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS1\system32\drivers\sysaudio.sys
2011/09/17 21:58:45.0375 2700	taphss          (0c3b2a9c4bd2dd9a6c2e4084314dd719) C:\WINDOWS1\system32\DRIVERS	aphss.sys
2011/09/17 21:58:45.0453 2700	Tcpip           (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS1\system32\DRIVERS	cpip.sys
2011/09/17 21:58:45.0484 2700	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS1\system32\drivers\TDPIPE.sys
2011/09/17 21:58:45.0515 2700	TDTCP           (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS1\system32\drivers\TDTCP.sys
2011/09/17 21:58:45.0531 2700	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS1\system32\DRIVERS	ermdd.sys
2011/09/17 21:58:45.0625 2700	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS1\system32\drivers\Udfs.sys
2011/09/17 21:58:45.0671 2700	UIUSys          (7020c64a20709b39cbe4a1cf371a9cd5) C:\WINDOWS1\system32\DRIVERS\UIUSYS.SYS
2011/09/17 21:58:45.0703 2700	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS1\system32\DRIVERS\update.sys
2011/09/17 21:58:45.0765 2700	upperdev        (15629e4d65f97ab5432d6d9597cf6a33) C:\WINDOWS1\system32\DRIVERS\usbser_lowerflt.sys
2011/09/17 21:58:45.0796 2700	usbaudio        (e919708db44ed8543a7c017953148330) C:\WINDOWS1\system32\drivers\usbaudio.sys
2011/09/17 21:58:45.0843 2700	usbccgp         (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS1\system32\DRIVERS\usbccgp.sys
2011/09/17 21:58:45.0875 2700	usbehci         (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS1\system32\DRIVERS\usbehci.sys
2011/09/17 21:58:45.0906 2700	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS1\system32\DRIVERS\usbhub.sys
2011/09/17 21:58:45.0953 2700	usbscan         (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS1\system32\DRIVERS\usbscan.sys
2011/09/17 21:58:45.0984 2700	usbser          (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS1\system32\DRIVERS\usbser.sys
2011/09/17 21:58:46.0031 2700	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS1\system32\DRIVERS\USBSTOR.SYS
2011/09/17 21:58:46.0062 2700	usbuhci         (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS1\system32\DRIVERS\usbuhci.sys
2011/09/17 21:58:46.0093 2700	usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS1\system32\Drivers\usbvideo.sys
2011/09/17 21:58:46.0109 2700	Suspicious service (NoAccess): vdrv7000
2011/09/17 21:58:46.0140 2700	vdrv7000        (f22f2a67dc4136f4054ed84afe565e72) C:\WINDOWS1\system32\Drivers\VDRV7000.SYS
2011/09/17 21:58:46.0140 2700	vdrv7000 - detected LockedService.Multi.Generic (1)
2011/09/17 21:58:46.0171 2700	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS1\System32\drivers\vga.sys
2011/09/17 21:58:46.0218 2700	VolSnap         (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS1\system32\drivers\VolSnap.sys
2011/09/17 21:58:46.0281 2700	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS1\system32\DRIVERS\wanarp.sys
2011/09/17 21:58:46.0343 2700	Wdf01000        (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS1\system32\Drivers\wdf01000.sys
2011/09/17 21:58:46.0421 2700	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS1\system32\drivers\wdmaud.sys
2011/09/17 21:58:46.0468 2700	WIBUKEY         (afcea7939925378f867dde6af76f3924) C:\WINDOWS1\system32\DRIVERS\WibuKey.sys
2011/09/17 21:58:46.0515 2700	winachsf        (307d248f97835b6879bdd361086924fe) C:\WINDOWS1\system32\DRIVERS\HSF_CNXT.sys
2011/09/17 21:58:46.0609 2700	WmiAcpi         (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS1\system32\DRIVERS\wmiacpi.sys
2011/09/17 21:58:46.0687 2700	WpdUsb          (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS1\system32\DRIVERS\wpdusb.sys
2011/09/17 21:58:46.0718 2700	WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS1\system32\DRIVERS\WSTCODEC.SYS
2011/09/17 21:58:46.0781 2700	WudfPf          (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS1\system32\DRIVERS\WudfPf.sys
2011/09/17 21:58:46.0796 2700	WudfRd          (ac13cb789d93412106b0fb6c7eb2bcb6) C:\WINDOWS1\system32\DRIVERS\wudfrd.sys
2011/09/17 21:58:46.0875 2700	MBR (0x1B8)     (c99c3199cfaa4cbdcd91493f6d113a50) \Device\Harddisk0\DR0
2011/09/17 21:58:47.0046 2700	Boot (0x1200)   (3866035717517385a2d6f2f98c6ba647) \Device\Harddisk0\DR0\Partition0
2011/09/17 21:58:47.0078 2700	Boot (0x1200)   (56e46e71187d80ad8a1e86a3309c65e8) \Device\Harddisk0\DR0\Partition1
2011/09/17 21:58:47.0078 2700	================================================================================
2011/09/17 21:58:47.0078 2700	Scan finished
2011/09/17 21:58:47.0078 2700	================================================================================
2011/09/17 21:58:47.0093 4296	Detected object count: 1
2011/09/17 21:58:47.0093 4296	Actual detected object count: 1
2011/09/17 21:58:52.0203 4296	HKLM\SYSTEM\ControlSet003\services\vdrv7000 - will be deleted after reboot
2011/09/17 21:58:52.0203 4296	HKLM\SYSTEM\ControlSet004\services\vdrv7000 - will be deleted after reboot
2011/09/17 21:58:52.0203 4296	HKLM\SYSTEM\ControlSet006\services\vdrv7000 - will be deleted after reboot
2011/09/17 21:58:52.0203 4296	C:\WINDOWS1\system32\Drivers\VDRV7000.SYS - will be deleted after reboot
2011/09/17 21:58:52.0203 4296	LockedService.Multi.Generic(vdrv7000) - User select action: Delete

2011N2 · Answer

Ok :)

Redémarre le PC si ce n'est déjà fait, puis refais un ZHPdiag :)

@+

Gabriel.

rositaa · Answer

Rapport de ZHPDiag v1.28.1346 par Nicolas Coolman, Update du 29/08/2011
Run by Administrateur at 20-09-2011 2:40:26
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702
MFIE: Mozilla Firefox v3.6.21 (ar)
OPIE: Opera v10.63

---\ Windows Product Information
Windows XP Professional Service Pack 3 (Build 2600)
Windows Automatic Updates : OK
Windows Genuine Advantage : KO

---\ System Information
~ Processor: x86 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3066.8 MB (68% free)
System Restore: Activé (Enable)
System drive C: has 1 GB (0%) free of 98 GB

---\ Logged in mode
~ Computer Name: STANDARD
~ User Name: Administrateur
~ All Users Names: SUPPORT_388945a0, HelpAssistant, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O82
Logged in as Administrator

---\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Documents and Settings\Administrateur.STANDARD\Application Data\
~ %Desktop% : C:\Documents and Settings\Administrateur.STANDARD\Bureau\
~ %Favorites% : C:\Documents and Settings\Administrateur.STANDARD\Favoris\
~ %LocalAppData% : C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\
~ %StartMenu% : C:\Documents and Settings\Administrateur.STANDARD\Menu Démarrer\
~ %Windir% : C:\WINDOWS\
~ %System% : C:\WINDOWS1\system32\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 1 Go of 98 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 169 Go of 200 Go)
E:\ CD-ROM drive (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: Modified
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: Modified
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc :  Modified
~ Scan Security Center in 00mn 00s



---\ Recherche particulière de fichiers génériques
[MD5.93AD0B78C7357A05F50E594EC7C22300] - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) (.20-09-2011 - 3:34:20.) -- C:\WINDOWS1\system32undll32.exe [33792]
[MD5.3008D2F793F23FF0DDBC5A1FB9F8374F] - (.Microsoft Corporation - Internet Extensions for Win32.) (.20-09-2011 - 19:31:31.) -- C:\WINDOWS1\system32\wininet.dll [916480]
[MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.20-09-2011 - 3:34:28.) -- C:\WINDOWS1\system32\Winlogon.exe [512000]
[MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.20-09-2011 - 19:40:30.) -- C:\WINDOWS1\system32\drivers\atapi.sys [96512]
[MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.20-09-2011 - 20:15:53.) -- C:\WINDOWS1\system32\drivers
tfs.sys [574976]
~ Scan Generic Processes in 00mn 00s



---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 5/144
~ Mes musiques (My Musics) : 1/17
~ Mes Videos (My Videos) : 4/119
~ Mes Favoris (My Favorites) : 2/22
~ Mes Documents (My Documents) : 75/4685
~ Mon Bureau (My Desktop) : 697/24909
~ Menu demarrer (Programs) : 7/52
~ Scan Hidden Files in 01mn 16s



---\ Processus lancés
[MD5.D02EEF0B93F0DCDE3E6F6B05319EB706] - (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) -- C:\WINDOWS1\system32\Ati2evxx.exe   [561152] [PID.]
[MD5.FAC8968CE8EFBC0E418FC978A1F174D9] - (.Broadcom Corporation. - Bluetooth Support Server.) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe   [264800] [PID.]
[MD5.9015BC03F62940527EC92D45EE89E46F] - (.Avira GmbH - Antivirus Scheduler.) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe   [108289] [PID.]
[MD5.8A1339C709026971C3949D68D89E3B67] - (.Pen - Foyer Zaps Shrank.) -- C:\WINDOWS1\system32\svdhalp.exe   [180736] [PID.836]
[MD5.B8720A787C1223492E6F319465E996CE] - (.Avira GmbH - Antivirus On-Access Service.) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe   [185089] [PID.]
[MD5.EA2D28BBE98256654397CD1F6EAEBDD8] - (.Autodesk - System Level Service Utility.) -- C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe   [85096] [PID.]
[MD5.27CB54C0346EFD7B0536B0CB610131AE] - (...) -- C:\Program Files\Hotspot Shield\bin\openvpnas.exe   [298824] [PID.]
[MD5.2CFEA9C337B699ACA38487E8A7438F35] - (.AnchorFree Inc. - Pas de description.) -- C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe   [363336] [PID.]
[MD5.564BAB77CD96CE0E3FD5BBCDDED142DF] - (...) -- C:\Program Files\Hotspot Shield\bin\hsswd.exe   [329544] [PID.]
[MD5.E70B9C83DDB6D86F9D1BDFAD04757A3F] - (...) -- C:\Program Files\Acer\Acer Bio Protection\BASVC.exe   [3566080] [PID.]
[MD5.09417134F248DFCEEA15C72BCC87F592] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe   [153376] [PID.]
[MD5.AA0C4A2C33CE075DF2C272D678734991] - (...) -- C:\Program Files\Autodesk\3ds Max 9\mentalray\satelliteaysat_3dsmax9_32server.exe   [65536] [PID.]
[MD5.D955D5DE998DB2476BF0892BE3A96C26] - (.O2Micro International - O2 Flash Memory Service.) -- C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe   [65536] [PID.]
[MD5.477E213A8DDFE762CA48B5D63C205977] - (.Atoll Trudy - Mind Third Skits.) -- C:\WINDOWS1\system32\drivers\sustools.exe   [204288] [PID.]
[MD5.3F908508F8C3A037816397D858D9545E] - (.H+H Software GmbH - Virtual CD - Management Service.) -- C:\Program Files\HHVcdV7Sys\VC7SecS.exe   [102400] [PID.]
[MD5.DD0CC1613101093AAB0E99C24B207883] - (...) -- C:\Program Files\Hotspot Shield\bin\openvpntray.exe   [129352] [PID.3148]
[MD5.E681281D9BFC9D45D3B72532717E5880] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe   [49152] [PID.2724]
[MD5.98E738292E55983D9170E2A2D0164025] - (.Arachnoid Biometrics Identification Group C - PdtWzd.exe.) -- C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe   [3724800] [PID.3812]
[MD5.D0CB073DA0C724A4ADBC64DE60999F6F] - (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe   [1032192] [PID.320]
[MD5.2AC7F8B8BF0D5D327A3A2A00453222C4] - (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\WINDOWS1\PLFSetI.exe   [200704] [PID.432]
[MD5.29680A793F690EEF4AAA68479D2A6DF8] - (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe   [209153] [PID.]
[MD5.013A269E7AF8B01FF20B384FEEBFFDA5] - (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\WINDOWS1\RTHDCPL.EXE   [16862720] [PID.1032]
[MD5.5C2DEF31326B9F873ED0B5F0272589E2] - (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe   [202256] [PID.2220]
[MD5.F9C1D3C8E9B2AC49A38DEFCB567CD494] - (.H+H Software GmbH - Virtual CD - Player.) -- C:\Program Files\HHVcdV7Sys\VC7Play.exe   [233472] [PID.2228]
[MD5.5E4C9C25D603AE46DEDCBD9674F86E21] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe   [149280] [PID.2288]
[MD5.47C1DE0A890613FFCFF1D67648EEDF90] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe   [937920] [PID.2524]
[MD5.97816FE0CB19B1F2BCC12B16C02C410E] - (.Iminent - IMBooster.) -- C:\Program Files\Iminent\IMBooster\IMBooster.exe   [1323000] [PID.2612]
[MD5.F7D68D8E70EA376713A39395664793CA] - (.Pinnacle Systems GmbH - Pinnacle USB Tip - for Multi Media eXtensio.) -- C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe   [199752] [PID.2752]
[MD5.F48123180618013816ED9375266AEFA6] - (.Iminent - Iminent Notifier.) -- C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe   [536056] [PID.2792]
[MD5.CC0D9AC0AD3AA394BBA42B0B304BCF13] - (.Nokia - Nokia Launch Application.) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe   [1451520] [PID.1592]
[MD5.87C345806EA8C572DFD17A63F3349F0F] - (.Nokia - PC Sync.) -- C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe   [753664] [PID.3112]
[MD5.A1953A905B76837B637863012E8641A9] - (.Realtek Semiconductor Corp. - Realtek HD Audio Data Rerouter.) -- C:\DOCUME~1\ADMINI~1.STA\LOCALS~1\Temp\RtkBtMnt.exe   [212992] [PID.4048]
[MD5.E13EA4860E8F2AA845B53BFD2B6FEC5B] - (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe   [1695232] [PID.1384]
[MD5.8988D1F32F56B3CD3F0F6C39F8A91A98] - (.Nokia - ServiceLayer Module.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe   [657408] [PID.]
[MD5.9D1A2E7434C3408D782837029F53FA4F] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe   [17351304] [PID.3676]
[MD5.C538021B867C129458A3E73352B8638D] - (.Nokia - USB Media Server.) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe   [132608] [PID.]
[MD5.57A6F9C77D22A01735075BEAE21BF26B] - (.Nokia Corporation - Mobile Phone API.) -- C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe   [474624] [PID.1568]
[MD5.46A9D1FCC55EC6A62FE1D2ACE79C6CA8] - (.Nokia - Serial Media Server.) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe   [120832] [PID.]
[MD5.9CAB12C645AB8BAE5D0CC1E83AC19861] - (.Broadcom Corporation. - Bluetooth Tray Application.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe   [576104] [PID.3044]
[MD5.131F884CCD172162F85210FA28D5F52D] - (...) -- C:\Program Files\CopieEcran\CopieEcran.exe   [96376] [PID.3380]
[MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - Notification de cadeaux MSN.) -- C:\Documents and Settings\Administrateur.STANDARD\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe   [135680] [PID.3400]
[MD5.25CA1677AAA3CDC99CD4FCF940886F3C] - (.ATI Technologies Inc. - Catalyst Control Centre: Host application.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe   [49152] [PID.3552]
[MD5.01804FECFF485199032AD666542E42A9] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\Google\Chrome\Application\chrome.exe   [1030200] [PID.604]
[MD5.A7696BEE78D3AAD088D5A47CC837A2AB] - (.Sony Corporation - SXNewVoice Module.) -- C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Application Data\NVIDIA Corporation\Update
vupd32.exe   [154112] [PID.]
[MD5.7914370AAC5CDE8DCAE1C674A6C90229] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [669696] [PID.3756]
[MD5.5E9A6658A2A69AE7EB195113B7A2E7A9] - (.Microsoft Corporation - Application Layer Gateway Service.) -- C:\WINDOWS1\System32\alg.exe   [44544] [PID.]
~ Scan Processes Running in 00mn 04s



---\ Opera, Plugins,Démarrage,Recherche (P1,B0,B1)
P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation (written by Digital R - Npdsplay dll.) -- C:\Program Files\Opera\Program\Plugins
pdsplay.dll
P1 - OPN:Opera Plugin Navigator . (.Microsoft Corporation - DRM Store Netscape Plugin.) -- C:\Program Files\Opera\Program\Plugins
pwmsdrm.dll
~ Scan Opera Browser in 00mn 00s



---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G0 - GCSP: Preference [User Data\Default][HomePage] https://www.google.com/?gws_rd=ssl
~ Scan Google Browser in 00mn 00s



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xydu7ji0.default\prefs.js
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xydu7ji0.default\user.js (.not file.)
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xydu7ji0.default\searchplugins\conduit.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\xydu7ji0.default\searchplugins\mywebsearch.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\amazondotcom.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\answers.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\creativecommons.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\eBay.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\google.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\privatesearch.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\wikipedia-ar.xml
M3 - MFPP: Plugins - [Administrateur] -- C:\Program Files\Mozilla FireFox\searchplugins\yahoo.xml
M0 - MFSP: prefs.js [Administrateur - xydu7ji0.default] https://hp.mywebsearch.com/mywebsearch/index.html?n=77C09F4F&ptnrS=GRfox000&ptb=RyG4CnlNjfxlLUeN1AYS9A
M2 - MFEP: prefs.js [Administrateur - xydu7ji0.default\{20a82645-c095-46ed-80e3-08825760534b}] [MicrosoftCG] Microsoft .NET Framework Assistant v1.1 (.Microsoft.)
M2 - MFEP: prefs.js [Administrateur - xydu7ji0.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] Softonic_France Toolbar v2.5.8.6 (.Conduit Ltd..)
M2 - MFEP: prefs.js [Administrateur - xydu7ji0.default\{7FF99715-3016-4381-84CE-E4E4C9673020}] [] Searchqu Toolbar v1.0 (.Discordia Ltd. Portions copyright &#169; Visicom Media. Dynamic Toolbar..)
M2 - MFEP: prefs.js [Administrateur - xydu7ji0.default\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}] [dwhelper] DownloadHelper v4.7 (.Michel Gutierrez.)
P2 - FPN:Firefox Plugin Navigator . (.Sun Microsystems, Inc. - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Mozilla Firefox\Plugins
pdeploytk.dll
P2 - FPN:Firefox Plugin Navigator . (.Pas de propriétaire - GanymedeNet.Detector.) -- C:\Program Files\Mozilla Firefox\Plugins
pganymedenet.dll
P2 - FPN:Firefox Plugin Navigator . (.Pas de propriétaire - npkimi.) -- C:\Program Files\Mozilla Firefox\Plugins
pkimi.dll
P2 - FPN:Firefox Plugin Navigator . (.mozilla.org - Default Plug-in.) -- C:\Program Files\Mozilla Firefox\Plugins
pnul32.dll
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - Office Plugin for Netscape Navigator.) -- C:\Program Files\Mozilla Firefox\Plugins\NPOFFICE.DLL
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Mozilla Firefox\Plugins
ppdf32.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Mozilla Firefox\Plugins
ppl3260.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin2.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin3.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin4.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin5.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin6.dll
P2 - FPN:Firefox Plugin Navigator . (.Apple Inc. - The QuickTime Plugin allows you to view a wide variety of multimedia c.) -- C:\Program Files\Mozilla Firefox\Plugins
pqtplugin7.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Mozilla Firefox\Plugins
prjplug.dll
P2 - FPN:Firefox Plugin Navigator . (.RealNetworks, Inc. - 6.0.12.688.) -- C:\Program Files\Mozilla Firefox\Plugins
prpjplug.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS1\system32\Macromed\Flash\NPSWF32.dll
P2 - FPN: [HKLM] [@Google.com/GoogleEarthPlugin] - (.Google - GEPlugin.) -- C:\Program Files\Google\Google Earth\plugin
pgeplugin.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60531.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60531.0
pctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8117.0416] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\WINDOWS1\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@real.com/nppl3260;version=6.0.12.688] - (.RealNetworks, Inc. - RealPlayer(tm) LiveConnect-Enabled Plug-In.) -- C:\Program Files\Real\RealPlayer\Netscape6
ppl3260.dll
P2 - FPN: [HKLM] [@real.com/nprjplug;version=1.0.3.688] - (.RealNetworks, Inc. - RealJukebox Netscape Plugin.) -- C:\Program Files\Real\RealPlayer\Netscape6
prjplug.dll
P2 - FPN: [HKLM] [@real.com/nprpjplug;version=6.0.12.688] - (.RealNetworks, Inc. - 6.0.12.688.) -- C:\Program Files\Real\RealPlayer\Netscape6
prpjplug.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (...) -- C:\Program Files\Google\Update\1.3.21.65
pGoogleUpdate3.dll (.not file.)
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (...) -- C:\Program Files\Google\Update\1.3.21.65
pGoogleUpdate3.dll (.not file.)
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape "9.4.5".) -- C:\Program Files\Adobe\Reader 9.0\Reader\AIR
ppdf32.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\Google\Update\1.3.21.69
pGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\Google\Update\1.3.21.69
pGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 00s



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.iminent.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.iminent.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = my web search
R1 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = https://hp.mywebsearch.com/mywebsearch/index.html
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 3, 1) -- C:\Program Files\Softonic_France	bSof1.dll
R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} . (.Conduit Ltd. - Conduit Toolbar.) (5, 7, 3, 1) -- C:\Program Files\myBabylon_English	bmyB1.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.19098 (longhorn_ie8_gdr.110617-1715)) -- C:\WINDOWS1\system32\ieframe.dll
R3 - URLSearchHook: Iminent.BHO.NavigationError - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} . (.Iminent - IminentNavigationBHO.) (3.27.3) -- C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} . (.Conduit Ltd. - Conduit Toolbar.) (6.2.7.3) -- C:\Program Files\uTorrentBar	buTor.dll
R3 - URLSearchHook: IMVU Inc Toolbar - {90b49673-5506-483e-b92b-ca0265bd9ca8} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\IMVU_Inc\prxtbIMVU.dll
~ Scan IE Browser in 00mn 00s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\WINDOWS1\system32\userinit.exe,
F2 - REG:system.ini: Shell=explorer.exe, svdhalp.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\ Redirection du fichier Hosts (O1)
~ Scan Hosts File in 00mn 00s



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} . (.RealPlayer - RealPlayer Download and Record Plugin.) -- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Real\RealPlayer\Brows
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France	bSof1.dll
O2 - BHO: (no name) - {57CFA3FC-9722-41A9-A1C6-EF838AA6987D} . (.Sony Corporation - SXNewVoice Module.) -- C:\WINDOWS1\system32\fastsrch.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: CHelperBHO - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} . (.Iminent - IminentNavigationBHO.) -- C:\Program Files\Iminent\SearchTheWeb\Iminent.BHO.NavigationError.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IMVU Inc - {90b49673-5506-483e-b92b-ca0265bd9ca8} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IMVU_Inc\prxtbIMVU.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} . (.Skype Technologies S.A. - Click to Call with Skype for Internet Explo.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\myBabylon_English	bmyB1.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\uTorrentBar	buTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} . (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} . (.AnchorFree Inc. - Pas de description.) -- C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
~ Scan BHO in 00mn 00s



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\uTorrentBar	buTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: IMVU Inc Toolbar - {90b49673-5506-483e-b92b-ca0265bd9ca8} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\IMVU_Inc\prxtbIMVU.dll
~ Scan Toolbar in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe 
O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] . (.Arachnoid Biometrics Identification Group C - PdtWzd.exe.) -- C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe 
O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics, Inc. - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
O4 - HKLM\..\Run: [PLFSetI] . (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\WINDOWS1\PLFSetI.exe 
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.exe 
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.exe 
O4 - HKLM\..\Run: [TkBellExe] . (.RealNetworks, Inc. - RealNetworks Scheduler.) -- C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe 
O4 - HKLM\..\Run: [VC7Player] . (.H+H Software GmbH - Virtual CD - Player.) -- C:\Program Files\HHVcdV7Sys\VC7Play.exe 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe 
O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Run: [IMBooster] . (.Iminent - IMBooster.) -- C:\Program Files\Iminent\IMBooster\IMBooster.exe 
O4 - HKLM\..\Run: [USBToolTip] . (.Pinnacle Systems GmbH - Pinnacle USB Tip - for Multi Media eXtensio.) -- C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe 
O4 - HKLM\..\Run: [Iminent.Notifier] . (.Iminent - Iminent Notifier.) -- C:\Program Files\Iminent\SearchTheWeb\Iminent.Notifier.exe 
O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS1\system32\ctfmon.exe 
O4 - HKCU\..\Run: [PC Suite Tray] . (.Nokia - Nokia Launch Application.) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe 
O4 - HKCU\..\Run: [Nokia.PCSync] . (.Nokia - PC Sync.) -- C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\Google\Update\GoogleUpdate.exe 
O4 - HKCU\..\Run: [xalij] C:\Documents and Settings\Administrateur.STANDARD\xalij.exe (.not file.) 
O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe 
O4 - HKCU\..\Run: [Sony Ericsson PC Companion] . (.Sony Ericsson - Sony Ericsson PC Companion.) -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe 
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe 
O4 - HKCU\..\RunOnce: [.IMinentUpdate] C:\DOCUME~1\ADMINI~1.STA\LOCALS~1\Temp\NotifierSetup.exe (.not file.) 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS1\system32\CTFMON.exe 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS1\system32\CTFMON.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS1\system32\CTFMON.exe 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS1\system32\CTFMON.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS1\system32\ctfmon.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [PC Suite Tray] . (.Nokia - Nokia Launch Application.) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [Nokia.PCSync] . (.Nokia - PC Sync.) -- C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\Google\Update\GoogleUpdate.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [xalij] C:\Documents and Settings\Administrateur.STANDARD\xalij.exe (.not file.) 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [Sony Ericsson PC Companion] . (.Sony Ericsson - Sony Ericsson PC Companion.) -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe 
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] C:\WINDOWS\system32	scupgrd.exe (.not file.) 
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] C:\WINDOWS\system32	scupgrd.exe (.not file.) 
O4 - HKUS\S-1-5-19\..\RunOnce: [nLite] C:\WINDOWS\inf
lite.cmd (.not file.) 
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] C:\WINDOWS\system32	scupgrd.exe (.not file.) 
O4 - HKUS\S-1-5-20\..\RunOnce: [nLite] C:\WINDOWS\inf
lite.cmd (.not file.) 
O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] C:\WINDOWS\system32	scupgrd.exe (.not file.) 
O4 - HKUS\S-1-5-21-1645522239-492894223-839522115-500\..\RunOnce: [.IMinentUpdate] C:\DOCUME~1\ADMINI~1.STA\LOCALS~1\Temp\NotifierSetup.exe (.not file.) 
~ Scan Application in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe ImageReady 7.0.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Photoshop 7.0\ImageReady.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop 7.0.lnk . (.Adobe Systems, Incorporated.)  -- C:\Program Files\Adobe\Photoshop 7.0\Photoshop.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Photoshop Album Edition Découverte 3.0.lnk . (.Adobe Systems Incorporated.)  -- C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\Photoshop Album Sta
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Adobe Reader 9.lnk . (...)  -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A93000000001}\SC_Reader.ico
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Apple Software Update.lnk . (...)  -- C:\WINDOWS1\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Favoris Bluetooth.lnk - Clé orpheline
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Microsoft Office Excel Viewer.lnk . (...)  -- C:\WINDOWS\Installer\{95120000-003F-040C-0000-0000000FF1CE}\xlvwicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Visionneuse Microsoft Office PowerPoint 2007.lnk . (...)  -- C:\WINDOWS1\Installer\{95120000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Movie Maker.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Movie Maker\moviemk.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Assistance à distance.lnk . (.Microsoft Corporation.)  -- C:\WINDOWS1\system32cimlby.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\IEXPLORE.EXE
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Lecteur Windows Media.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Documents And Settings\Administrateur\Menu Démarrer\Programmes\Outlook Express.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Outlook Express\msimn.exe
~ Scan Global Startup in 00mn 00s



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.exe
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Envoyer à Bluetooth . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
~ Scan IE Menu Contextuel in 00mn 00s



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} . (...) -- C:\Program Files\Acer\Acer Bio Protection\IETag.ico
O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} . (...) -- C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico
O9 - Extra button: Click to call with Skype - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO
O9 - Extra button: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} . (...) -- C:\Program Files\WIDCOMM\Bluetooth Software\bt_hot_icon.ico
O9 - Extra button: @btrez.dll,-12650 - {d9288080-1baa-4bc4-9cf8-a92d743db949} . (...) -- C:\Documents and Settings\Administrateur.STANDARD\Application Data\IMVUClient\imvu.ico
O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} . (...) -- C:\Documents and Settings\Administrateur.STANDARD\Application Data\IMVUClient\imvu.ico
O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- C:\Program Files\Messenger\msmsgs.exe
~ Scan IE Extra Buttons in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS1\system32\mswsock.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS1\system32\winrnr.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS1\system32\mswsock.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Service client pour le fournisseur NetWare et DLL d'authentification.) -- C:\WINDOWS1\system32
wprovau.dll
~ Scan Winsock in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F0E28F1-E633-43C0-BDF0-A1A52333AD3C}: NameServer = 213.150.176.196
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F0E28F1-E633-43C0-BDF0-A1A52333AD3C}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{40D56C05-38F1-413A-B562-D9C77935C971}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS1\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS1\system32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS1\system32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS1\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS1\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (...) -- C:\WINDOWS\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS1\system32\itss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Handler: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} . (.Microsoft Corporation - Microsoft Office XP Web Components.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
O18 - Handler: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} . (.Microsoft Corporation - Microsoft Office Web Components 2003.) -- C:\PROGRA~1\FICHIE~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS1\system32\mshtml.dll
O18 - Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} . (.Skype Technologies S.A. - Click to Call with Skype for Internet Explo.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (...) -- C:\WINDOWS\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS1\system32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS1\system32\mshtml.dll
O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS1\system32\wiascr.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS1\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS1\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS1\system32\mscoree.dll
O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS1\system32\urlmon.dll
O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (...) -- C:\WINDOWS\system32\SHELL32.dll
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: AtiExtEvent . (.ATI Technologies Inc. - ATI External Event Utility DLL Module.) -- C:\WINDOWS1\system32\Ati2evxx.dll
O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 . (.Arachnoid Biometrics Identification Group C - Pas de description.) -- C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll
O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- C:\WINDOWS1\system32\crypt32.dll
O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- C:\WINDOWS1\system32\cryptnet.dll
O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- C:\WINDOWS1\system32\cscdll.dll
O20 - Winlogon Notify: dimsntfy . (...) -- C:\WINDOWS\System32\dimsntfy.dll (.not file.)
O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS1\system32\wlnotify.dll
O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS1\system32\wlnotify.dll
O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- C:\WINDOWS1\system32\sclgntfy.dll
O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS1\system32\WlNotify.dll
O20 - Winlogon Notify: spba . (.UPEK Inc. - PS QL Logon Kernel.) -- C:\Program Files\Fichiers communs\SPBA\homefus2.dll
O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS1\system32\wlnotify.dll
O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- C:\WINDOWS1\system32\wlnotify.dll
~ Scan Winlogon in 00mn 00s



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} . (....) -- C:\WINDOWS\system32\SHELL32.dll (.not file.)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} . (....) -- C:\WINDOWS\system32\SHELL32.dll (.not file.)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS1\system32\webcheck.dll
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} . (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS1\system32\stobject.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} . (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS1\system32\WPDShServiceObj.dll
~ Scan SSODL in 00mn 00s



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {438755C2-A8BA-11D1-B96B-00A0C90312E1} . (...) -- C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: (no name) - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (...) -- C:\WINDOWS\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service:  (Ati HotKey Poller) . (...) - C:\WINDOWS\system32\Ati2evxx.exe (.not file.)
O23 - Service: Autodesk Licensing Service (Autodesk Licensing Service) . (.Autodesk - System Level Service Utility.) - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bandoo Coordinator (Bandoo Coordinator) . (...) - C:\PROGRA~1\Bandoo\Bandoo.exe (.not file.)
O23 - Service: Bluetooth Service (btwdins) . (.Broadcom Corporation. - Bluetooth Support Server.) - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Journal des événements (Eventlog) . (...) - C:\WINDOWS\system32\services.exe (.not file.)
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) . (...) - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) . (.AnchorFree Inc. - Pas de description.) - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Monitoring Service (HssWd) . (...) - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: iGroupTec Service (IGBASVC) . (...) - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) . (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) . (...) - C:\Program Files\Autodesk\3ds Max 9\mentalray\satelliteaysat_3dsmax9_32server.exe
O23 - Service: NVIDIA Update Server (NvUpdSrv) . (.Sony Corporation - SXNewVoice Module.) - C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Application Data\NVIDIA Corporation\Update
vupd32.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) . (.O2Micro International - O2 Flash Memory Service.) - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Plug-and-Play (PlugPlay) . (...) - C:\WINDOWS\system32\services.exe (.not file.)
O23 - Service: Services IPSEC (PolicyAgent) . (...) - C:\WINDOWS\system32\lsass.exe (.not file.)
O23 - Service: Emplacement protégé (ProtectedStorage) . (...) - C:\WINDOWS\system32\lsass.exe (.not file.)
O23 - Service: Spouleur d'impression (Spooler) . (...) - C:\WINDOWS\system32\spoolsv.exe (.not file.)
O23 - Service: sustools (sustools) . (.Atoll Trudy - Mind Third Skits.) - C:\WINDOWS1\system32\drivers\sustools.exe
O23 - Service: Virtual CD v7 Management Service (VC7SecS) . (.H+H Software GmbH - Virtual CD - Management Service.) - C:\Program Files\HHVcdV7Sys\VC7SecS.exe
~ Scan Services in 00mn 00s



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Microsoft Corporation - Microsoft Office Word.) - C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe
~ Scan Desktop Component in 00mn 00s



---\ Tâches planifiées en automatique (O39)
[MD5.7B43567B4C32AD7ADED537CD3B1342B9] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [At1] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At10] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At11] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At12] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At13] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At14] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At15] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At16] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At17] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At18] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At19] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At2] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At20] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At21] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At22] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At23] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At24] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At3] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At4] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At5] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At6] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At7] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At8] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.00000000000000000000000000000000] [APT] [At9] (...) -- C:\WINDOWS1\Fonts\P05KSRU2k.com  (.not file.)
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.F02A533F517EB38333CB12A9E8963773] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-1645522239-492894223-839522115-500Core] (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskUserS-1-5-21-1645522239-492894223-839522115-500UA] (...) -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Update\GoogleUpdate.exe (.not file.)
[MD5.B71102DDBC3887B309047811FF43F509] [APT] [RealUpgradeLogonTaskS-1-5-18] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgradeealupgrade.exe
[MD5.B71102DDBC3887B309047811FF43F509] [APT] [RealUpgradeLogonTaskS-1-5-21-1645522239-492894223-839522115-500] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgradeealupgrade.exe
[MD5.B71102DDBC3887B309047811FF43F509] [APT] [RealUpgradeScheduledTaskS-1-5-18] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgradeealupgrade.exe
[MD5.B71102DDBC3887B309047811FF43F509] [APT] [RealUpgradeScheduledTaskS-1-5-21-1645522239-492894223-839522115-500] (.RealNetworks, Inc..) -- C:\Program Files\Real\RealUpgradeealupgrade.exe
~ Scan Scheduled Task in 00mn 00s



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (. - .) - C:\WINDOWS\system32\drivers\afd.sys (.not file.)
O41 - Driver:  (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver:  (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\WINDOWS1\system32\DRIVERS\avipbb.sys
O41 - Driver:  (Cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\WINDOWS1\system32\DRIVERS\cdrom.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\WINDOWS1\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (Imapi) . (.Microsoft Corporation - IMAPI Kernel Driver.) - C:\WINDOWS1\system32\DRIVERS\imapi.sys
O41 - Driver:  (intelppm) . (.Microsoft Corporation - Pilote de périphérique processeur.) - C:\WINDOWS1\system32\DRIVERS\intelppm.sys
O41 - Driver:  (IPSec) . (.Microsoft Corporation - IPSec Driver.) - C:\WINDOWS1\system32\DRIVERS\ipsec.sys
O41 - Driver:  (Kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\WINDOWS1\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre souris HID.) - C:\WINDOWS1\system32\DRIVERS\kbdhid.sys
O41 - Driver:  (Mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\WINDOWS1\system32\DRIVERS\mouclass.sys
O41 - Driver:  (MRxSmb) . (.Microsoft Corporation - Windows NT SMB Minirdr.) - C:\WINDOWS1\system32\DRIVERS\mrxsmb.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\WINDOWS1\system32\DRIVERS
etbios.sys
O41 - Driver:  (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\WINDOWS1\system32\DRIVERS
etbt.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\WINDOWS1\system32\DRIVERSasacd.sys
O41 - Driver:  (Rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\WINDOWS1\system32\DRIVERSdbss.sys
O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\WINDOWS1\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (redbook) . (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) - C:\WINDOWS1\system32\DRIVERSedbook.sys
O41 - Driver:  (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\WINDOWS1\system32\DRIVERS\ssmdrv.sys
O41 - Driver:  (Tcpip) . (.Microsoft Corporation - TCP/IP Protocol Driver.) - C:\WINDOWS1\system32\DRIVERS	cpip.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\WINDOWS1\system32\DRIVERS	ermdd.sys
O41 - Driver: Carte vidéo VGA. (VgaSave) . (. - .) - C:\WINDOWS\system32\drivers\vga.sys (.not file.)
O41 - Driver:  (WmiAcpi) . (.Microsoft Corporation - Windows Management Interface for ACPI.) - C:\WINDOWS1\system32\DRIVERS\wmiacpi.sys
O41 - Driver:  (KLIF) . (. - .) - C:\WINDOWS1\system32\DRIVERS\klif.sys (.not file.)
O41 - Driver: (VgaSave) . (. - .) - C:\WINDOWS\system32\drivers\vga.sys (.not file.)
~ Scan Drivers in 00mn 00s



---\ Logiciels installés (O42)
O42 - Logiciel: 3DStudio In 13 INT - (.Pas de propriétaire.) [HKLM] -- 063FFFFFFF13FF00FF0701F00F02F000-R1
O42 - Logiciel: ATI - Utilitaire de désinstallation du logiciel - (.Pas de propriétaire.) [HKLM] -- All ATI Software
O42 - Logiciel: ATI Catalyst Control Center - (.Pas de propriétaire.) [HKLM] -- {055EE59D-217B-43A7-ABFF-507B966405D8}
O42 - Logiciel: ATI Display Driver - (.Pas de propriétaire.) [HKLM] -- ATI Display Driver
O42 - Logiciel: Accessories 13 INT - (.Pas de propriétaire.) [HKLM] -- 064FFFFFFF13FF00FF0701F00F02F000-R1
O42 - Logiciel: Acer Bio ProtectionATU 6.0.00.19 - (.Pas de propriétaire.) [HKLM] -- Acer Acer Bio Protection 6.0.00.19
O42 - Logiciel: Acer Crystal Eye webcam Ver:1.1.57.409 - (.Chicony Electronics Co.,Ltd..) [HKLM] -- {D0ACE89D-EC7F-470F-80BE-4C98ED366B32}
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Photoshop 7.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop 7.0
O42 - Logiciel: ArchiCAD 13 FRA - (.Pas de propriétaire.) [HKLM] -- 001FFF1FFF13FF00FF0501F00F02F000-R1
O42 - Logiciel: Architecture 3D 3.1 - Premium (Démonstration) - (.Anuman Interactive.) [HKLM] -- Architecture_3D_3-Premium_Demo_is1
O42 - Logiciel: Artlantis Studio 2.1 - (.Abvent R&D.) [HKLM] -- Artlantis Studio 2
O42 - Logiciel: Artlantis Studio 3.0.2 - (.Abvent R&D.) [HKLM] -- Artlantis Studio 3
O42 - Logiciel: Atheros for Acer Driver v7.6.1.184_Foxconn Installation Program - (.Atheros.) [HKLM] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: AutoCAD 2008 - English - (.Autodesk.) [HKLM] -- AutoCAD 2008 - English
O42 - Logiciel: Avanquest update - (.Avanquest Software.) [HKLM] -- {76E41F43-59D2-4F30-BA42-9A762EE1E8DE}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81}
O42 - Logiciel: Bink and Smacker - (.Pas de propriétaire.) [HKLM] -- Bink and Smacker
O42 - Logiciel: Broadcom Driver v4.170.25.12_Foxconn Installation Program - (.Broadcom.) [HKLM] -- {153F839F-0A63-41D8-890F-7324C0E13743}
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM] -- conduitEngine
O42 - Logiciel: Copie Ecran - Dectia.com - (.Pas de propriétaire.) [HKLM] -- CopieEcran
O42 - Logiciel: DebugMode Wax 2.0 - (.Pas de propriétaire.) [HKLM] -- DebugMode Wax 2.0
O42 - Logiciel: Dell Driver Download Manager - (.Dell Inc..) [HKCU] -- f031ef6ac137efc5
O42 - Logiciel: EasyBits GO - (.EasyBits Media.) [HKCU] -- Game Organizer
O42 - Logiciel: FBX Converter 2006.11.2 - (.Pas de propriétaire.) [HKLM] -- FBX Converter 2006.11.2
O42 - Logiciel: FBX Plugin 2006.08 for Max 9.0 - (.Pas de propriétaire.) [HKLM] -- FBX Plugin 2006.08 for Max 9.0
O42 - Logiciel: FormatFactory 2.30 - (.Free Time.) [HKLM] -- FormatFactory
O42 - Logiciel: GameDesire-Pool & Snooker - (.Pas de propriétaire.) [HKLM] -- GameDesire-Pool & Snooker
O42 - Logiciel: Google

2011N2 · Answer

Peux-tu l'héberger comme tu as fait ici ?

Merci,

Gabriel.

rositaa · Answer

http://www.cijoint.fr/cjlink.php?file=cj201109/cijU7JIvkZ.txt

2011N2 · Answer

Re,

>Copie les lignes "helpers" (Avec Ctrl + C) : http://dl.dropbox.com/u/32869654/Pour%20rositaa.txt

>Ouvre ZHPfix, icone seringue (Vista et 7 : "Exécuter en tant qu'administrateur").
>Colle les lignes helpers : Pour ce, clique sur la balise document, à droite de l'appareil photo. Ou alors sur le H.  
>Faire Ok. 
>Clique sur "Tous".  
>Clique sur "Nettoyer". 
>Copie le rapport, et coller-le dans la prochaine réponse sur le forum.


Si tu as des questions, n'hésite pas à me les poser !


@+

Gabriel.

rositaa · Answer

http://www.cijoint.fr/cjlink.php?file=cj201109/cijZwvJNhv.txt

2011N2 · Answer

Tu as fait deux fois ZHPfix ? :)

@+

Gabriel.

rositaa · Answer

j'ai pas compri???

2011N2 · Answer

Pas grave :) ATTENTION ! Plusieurs heures de scan sont probables ! Tu pourras brancher tes périphériques externes pour les scanner en même temps si tu le souhaites. Télécharge Malwarebytes' Anti-Malware MBAMsur ton bureau : http://www.malwarebytes.org/mbam/program/mbam-setup.exe Si problème essaie avec celui-ci : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/ . Enregistre-le sur ton bureau. . Double clique sur le fichier téléchargé pour lancer le processus d'installation. (Vista et 7 : Éxécuter en tant qu'administrateur) . Si le pare-feu demande l'autorisation de se connecter pour malwarebytes, accepte. . Dans l'onglet "Mise à jour", clique sur le bouton "Recherche de mise à jour". Fais le plusieurs fois jusqu'à ce qu'il te dise que tu as la dernière version de base de données. . Une fois la mise à jour terminée : . Rends-toi dans l'onglet "Recherche" . Sélectionne Exécuter un Examen complet. . Sélectionne Tous les disques si proposé. . Clique sur Rechercher. . Le scan démarre. Patiente, cela peut durer plusieurs heures, selon la taille de tes disques. . À la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement ou autre. Clique sur "Afficher les résultats" pour afficher tous les objets trouvés. . Cliques sur Ok pour poursuivre. . Si des malwares ont été détectés, clique sur Afficher les résultats. . Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. . Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. . Redemarre le PC si il le fait pas lui même. . Une fois redémarré double-clique sur Malwarebytes' AntiMalware. . Rends toi dans l'onglet "rapport/log". . Tu cliques sur le rapport pour l'afficher. . Tu cliques sur Edition en haut du boc notes,et puis sur Sélectionner tout. . Tu recliques sur Edition et puis sur Copier et tu reviens sur le forum et dans ta réponse, colle le rapport (CTRL + V). => Si tu as besoin d'aide regarde ce tutoriel : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ Si tu as des questions, n'hésite pas à me les poser ! @+ Gabriel.

rositaa · Answer

http://www.cijoint.fr/cjlink.php?file=cj201109/cij8QthWt2.txt

2011N2 · Answer

Ok ;)

Refais moi un dernier ZHPdiag ;)

Merci,

Gabriel.

rositaa · Answer

Merci Gabriel:))

http://www.cijoint.fr/cjlink.php?file=cj201109/cijrQJV13p.txt

2011N2 · Answer

Re,

>Copie les lignes "helpers" (Avec Ctrl + C) présentes dans le fichier texte : http://dl.dropbox.com/u/32869654/Pour%20rositaa2.txt

>Ouvre ZHPfix, icone seringue (Vista et 7 : "Exécuter en tant qu'administrateur").
>Colle les lignes helpers : Pour ce, clique sur la balise document, à droite de l'appareil photo. Ou alors sur le H.  
>Faire Ok. 
>Clique sur "Tous".  
>Clique sur "Nettoyer". 
>Copie le rapport, et coller-le dans la prochaine réponse sur le forum.

P.S. Si le bureau disparaît, fais Ctrl + Alt + Suppr afin d'ouvrir le gestionnaire des tâches puis dans Applications, clic sur Nouvelle Tache puis tape explorer.exe. Le bureau devrait normalent réapparaître.


Si tu as des questions, n'hésite pas à me les poser !


@+

Gabriel.

rositaa · Answer

un message est apparaît " l'opération de pointeur est incorrecte et puis il se bloque le zhpfix!!!!

2011N2 · Answer

Tu as fait : Exécuter en tant qu'administrateur ?

@+

Gabriel.

rositaa · Answer

non je l'ai ouvrir normal

2011N2 · Answer

Alors, tu fais clic droit, éxécuter en tant qu'admin.

@+

Gabriel.

rositaa · Answer

au cours du nettoyage un message apparaît " impossible de créer le fichier"C:\ZHP\ZHPFixQuarantine.txt". Accès refusé.

2011N2 · Answer

Mais, tu as ouvert en faisant clic droit : Exécuter en tant qu'admin ? ou pas ?

@+

Gabriel.

rositaa · Answer

oui j'ai fait ca

2011N2 · Answer

Et, toujours accès refusé ?

@+

Gabriel.

rositaa · Answer

oui malheureusement :'((

2011N2 · Answer

Essaye de retélécharger ZHPfix ici : https://www.zebulon.fr/telechargements/securite/systeme/zhpfix.html

@+

Gabriel.

Très lent surtout lors de démarrage - Page 2

Discussions similaires

Newsletters