redirection recherches google Résolu

Question

Bonjour, 

Bonjour, 


j'ai passé le week end sur ce pb ( malewarebyres, ccleaner, combofix ... ) et impossible de supprimer cette maudite redirection
Quelqu'un peut im m'aider ?
merci


Configuration: Windows XP / Internet Explorer 8.0

Malekal_morte- · Answer

Salut, 

Sauvegarde les données importantes. 


Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start= 
Lire ce qui est écrit au niveau des suppressions/réparation (delete et cure), ne pas supprimer n'importe quoi. 
Poste le rapport ici. 

~~ 

Passe un coup d'aswmbr : https://forum.malekal.com/viewtopic.php?t=31619&start= 
Poste le rapport ici. 




Like the angel you are, you laugh creating a lightness in my chest, 
Your eyes they penetrate me, 
(Your answer's always 'maybe') 
That's when I got up and left

jeronimo44 · Answer

10:46:41.0484 1736	TDSS rootkit removing tool 2.7.14.0 Feb 22 2012 16:54:49
10:46:41.0593 1736	============================================================
10:46:41.0593 1736	Current date / time: 2012/02/27 10:46:41.0593
10:46:41.0593 1736	SystemInfo:
10:46:41.0593 1736	
10:46:41.0593 1736	OS Version: 5.1.2600 ServicePack: 3.0
10:46:41.0593 1736	Product type: Workstation
10:46:41.0593 1736	ComputerName: UTILISAT-47DCFE
10:46:41.0593 1736	UserName: utilisateur
10:46:41.0593 1736	Windows directory: C:\WINDOWS
10:46:41.0593 1736	System windows directory: C:\WINDOWS
10:46:41.0593 1736	Processor architecture: Intel x86
10:46:41.0593 1736	Number of processors: 2
10:46:41.0593 1736	Page size: 0x1000
10:46:41.0593 1736	Boot type: Normal boot
10:46:41.0593 1736	============================================================
10:46:42.0093 1736	Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
10:46:42.0109 1736	\Device\Harddisk0\DR0:
10:46:42.0109 1736	MBR used
10:46:42.0109 1736	\Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xAB68A75
10:46:42.0125 1736	\Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0xAB68AF3, BlocksNum 0x123DC5AB
10:46:42.0328 1736	Initialize success
10:46:42.0328 1736	============================================================
10:46:43.0609 0864	============================================================
10:46:43.0609 0864	Scan started
10:46:43.0609 0864	Mode: Manual; 
10:46:43.0609 0864	============================================================
10:46:45.0046 0864	Abiosdsk - ok
10:46:45.0093 0864	abp480n5 - ok
10:46:45.0156 0864	Accelerometer   (a0baabb7d3549460e3f8c5ad6f778683) C:\WINDOWS\system32\DRIVERS\Accelerometer.sys
10:46:45.0156 0864	Accelerometer - ok
10:46:45.0218 0864	ACPI            (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\WINDOWS\system32\DRIVERS\ACPI.sys
10:46:45.0218 0864	ACPI - ok
10:46:45.0250 0864	ACPIEC          (e4abc1212b70bb03d35e60681c447210) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
10:46:45.0250 0864	ACPIEC - ok
10:46:45.0343 0864	ADIHdAudAddService (f0e3dd5015f5aeb3db76b0e95f67ed1c) C:\WINDOWS\system32\drivers\ADIHdAud.sys
10:46:45.0343 0864	ADIHdAudAddService - ok
10:46:45.0390 0864	adpu160m - ok
10:46:45.0406 0864	AEAudio         (fff87a9b1ab36ee4b7bec98a4cb01b79) C:\WINDOWS\system32\drivers\AEAudio.sys
10:46:45.0406 0864	AEAudio - ok
10:46:45.0437 0864	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
10:46:45.0437 0864	aec - ok
10:46:45.0500 0864	AFD             (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
10:46:45.0500 0864	AFD - ok
10:46:45.0562 0864	AgereSoftModem  (38325c6aa8eae011897d61ce48ec6435) C:\WINDOWS\system32\DRIVERS\AGRSM.sys
10:46:45.0578 0864	AgereSoftModem - ok
10:46:45.0593 0864	Aha154x - ok
10:46:45.0656 0864	aic78u2 - ok
10:46:45.0687 0864	aic78xx - ok
10:46:45.0718 0864	AliIde - ok
10:46:45.0750 0864	amsint - ok
10:46:45.0828 0864	Arp1394         (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
10:46:45.0828 0864	Arp1394 - ok
10:46:45.0843 0864	asc - ok
10:46:45.0875 0864	asc3350p - ok
10:46:45.0921 0864	asc3550 - ok
10:46:45.0984 0864	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
10:46:45.0984 0864	AsyncMac - ok
10:46:46.0031 0864	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
10:46:46.0031 0864	atapi - ok
10:46:46.0046 0864	Atdisk - ok
10:46:46.0203 0864	ati2mtag        (7e57c60cc3e819c5031020ded9cd92e0) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
10:46:46.0218 0864	ati2mtag - ok
10:46:46.0265 0864	AtiHdmiService  (41c8f0eda10da14378d304c20ba6e558) C:\WINDOWS\system32\drivers\AtiHdmi.sys
10:46:46.0265 0864	AtiHdmiService - ok
10:46:46.0328 0864	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
10:46:46.0328 0864	Atmarpc - ok
10:46:46.0421 0864	ATSwpWDF        (c74e3d37625166c8a81fc07f796bc1ac) C:\WINDOWS\system32\Drivers\ATSwpWDF.sys
10:46:46.0421 0864	ATSwpWDF - ok
10:46:46.0484 0864	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
10:46:46.0484 0864	audstub - ok
10:46:46.0515 0864	AVFSFilter - ok
10:46:46.0578 0864	avgio           (f1d43170fdd7399ee17ea32d4f868b0c) C:\Program Files\Avira\AntiVir Desktop\avgio.sys
10:46:46.0578 0864	avgio - ok
10:46:46.0640 0864	avgntflt        (14fe36d8f2c6a2435275338d061a0b66) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
10:46:46.0640 0864	avgntflt - ok
10:46:46.0718 0864	avipbb          (ad9bd66a862116e79cb45bb6be46055f) C:\WINDOWS\system32\DRIVERS\avipbb.sys
10:46:46.0718 0864	avipbb - ok
10:46:46.0781 0864	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
10:46:46.0781 0864	Beep - ok
10:46:46.0843 0864	btaudio         (5bcf6090b825def29065bdbd59691dbe) C:\WINDOWS\system32\drivers\btaudio.sys
10:46:46.0843 0864	btaudio - ok
10:46:46.0906 0864	BTDriver        (58a49bd10e08d3d4333a60dedcb1ced8) C:\WINDOWS\system32\DRIVERS\btport.sys
10:46:46.0906 0864	BTDriver - ok
10:46:46.0968 0864	BTKRNL          (ef5e0de0a7ca2977a9255f36f4d915ab) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
10:46:46.0968 0864	BTKRNL - ok
10:46:47.0000 0864	BTWUSB          (053dc5be74621b63bb48c2b86bafc7b0) C:\WINDOWS\system32\Drivers\btwusb.sys
10:46:47.0000 0864	BTWUSB - ok
10:46:47.0062 0864	BXLVCOM4USB     (4c8f5bd11771e9a04355bd0701a14e32) C:\WINDOWS\system32\DRIVERS\BXLVCOM4USB.sys
10:46:47.0062 0864	BXLVCOM4USB - ok
10:46:47.0078 0864	catchme - ok
10:46:47.0140 0864	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
10:46:47.0140 0864	cbidf2k - ok
10:46:47.0203 0864	CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
10:46:47.0203 0864	CCDECODE - ok
10:46:47.0250 0864	cd20xrnt - ok
10:46:47.0296 0864	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
10:46:47.0296 0864	Cdaudio - ok
10:46:47.0328 0864	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
10:46:47.0328 0864	Cdfs - ok
10:46:47.0359 0864	Cdrom           (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
10:46:47.0359 0864	Cdrom - ok
10:46:47.0375 0864	Changer - ok
10:46:47.0437 0864	CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
10:46:47.0437 0864	CmBatt - ok
10:46:47.0468 0864	CmdIde - ok
10:46:47.0531 0864	Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
10:46:47.0531 0864	Compbatt - ok
10:46:47.0578 0864	Cpqarray - ok
10:46:47.0609 0864	dac2w2k - ok
10:46:47.0625 0864	dac960nt - ok
10:46:47.0671 0864	DAMDrv          (8c527985b06ebb114fee21391bf58ec3) C:\WINDOWS\system32\DRIVERS\DAMDrv.sys
10:46:47.0671 0864	DAMDrv - ok
10:46:47.0765 0864	Disk            (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
10:46:47.0765 0864	Disk - ok
10:46:47.0828 0864	dmboot          (f5deadd42335fb33edca74ecb2f36cba) C:\WINDOWS\system32\drivers\dmboot.sys
10:46:47.0828 0864	dmboot - ok
10:46:47.0875 0864	dmio            (5a7c47c9b3f9fb92a66410a7509f0c71) C:\WINDOWS\system32\drivers\dmio.sys
10:46:47.0875 0864	dmio - ok
10:46:47.0906 0864	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
10:46:47.0906 0864	dmload - ok
10:46:47.0953 0864	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
10:46:47.0953 0864	DMusic - ok
10:46:47.0984 0864	dpti2o - ok
10:46:48.0046 0864	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
10:46:48.0046 0864	drmkaud - ok
10:46:48.0109 0864	e1yexpress      (96967facc0307093b9098f817a4409e6) C:\WINDOWS\system32\DRIVERS\e1y5132.sys
10:46:48.0109 0864	e1yexpress - ok
10:46:48.0156 0864	epmntdrv        (57cc1bf06c159dfbb989f5783c0e6a50) C:\WINDOWS\system32\epmntdrv.sys
10:46:48.0156 0864	epmntdrv - ok
10:46:48.0234 0864	esgiguard - ok
10:46:48.0265 0864	EuGdiDrv        (5f779f5edab787f2d090c71a9051f365) C:\WINDOWS\system32\EuGdiDrv.sys
10:46:48.0281 0864	EuGdiDrv - ok
10:46:48.0406 0864	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
10:46:48.0406 0864	Fastfat - ok
10:46:48.0437 0864	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
10:46:48.0437 0864	Fdc - ok
10:46:48.0484 0864	Fips            (31f923eb2170fc172c81abda0045d18c) C:\WINDOWS\system32\drivers\Fips.sys
10:46:48.0484 0864	Fips - ok
10:46:48.0500 0864	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
10:46:48.0500 0864	Flpydisk - ok
10:46:48.0531 0864	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
10:46:48.0531 0864	FltMgr - ok
10:46:48.0593 0864	Fs_Rec          (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
10:46:48.0593 0864	Fs_Rec - ok
10:46:48.0640 0864	Ftdisk          (a86859b77b908c18c2657f284aa29fe3) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
10:46:48.0640 0864	Ftdisk - ok
10:46:48.0703 0864	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
10:46:48.0703 0864	Gpc - ok
10:46:48.0734 0864	hamachi         (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys
10:46:48.0734 0864	hamachi - ok
10:46:48.0781 0864	HBtnKey         (407e41ddb2bfece109132aec296e0d98) C:\WINDOWS\system32\DRIVERS\cpqbttn.sys
10:46:48.0781 0864	HBtnKey - ok
10:46:48.0812 0864	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
10:46:48.0812 0864	HDAudBus - ok
10:46:48.0875 0864	HECI            (2df64415a28ce036ac6acec7645a996f) C:\WINDOWS\system32\DRIVERS\HECI.sys
10:46:48.0875 0864	HECI - ok
10:46:48.0921 0864	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
10:46:48.0921 0864	HidUsb - ok
10:46:48.0984 0864	hpdskflt        (9f620e11b80b74f4dab50a81a5df357f) C:\WINDOWS\system32\DRIVERS\hpdskflt.sys
10:46:48.0984 0864	hpdskflt - ok
10:46:49.0000 0864	hpn - ok
10:46:49.0046 0864	HpqKbFiltr      (35956140e686d53bf676cf0c778880fc) C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys
10:46:49.0046 0864	HpqKbFiltr - ok
10:46:49.0109 0864	HTTP            (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
10:46:49.0109 0864	HTTP - ok
10:46:49.0171 0864	hwdatacard      (8adf5ef39e896a65beded878494ee2b6) C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys
10:46:49.0171 0864	hwdatacard - ok
10:46:49.0234 0864	hwusbfake       (9be5caeabc6b2eb98b3a4839a55d47a0) C:\WINDOWS\system32\DRIVERS\ewusbfake.sys
10:46:49.0234 0864	hwusbfake - ok
10:46:49.0265 0864	i2omgmt - ok
10:46:49.0281 0864	i2omp - ok
10:46:49.0359 0864	i8042prt        (a09bdc4ed10e3b2e0ec27bb94af32516) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
10:46:49.0359 0864	i8042prt - ok
10:46:49.0421 0864	iaStor          (de7c12e59605ea7ea0cf6345afeb0f07) C:\WINDOWS\system32\DRIVERS\iaStor.sys
10:46:49.0421 0864	iaStor - ok
10:46:49.0484 0864	IFXTPM          (91c5e9f49f32110ced27e2f902fad607) C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS
10:46:49.0484 0864	IFXTPM - ok
10:46:49.0546 0864	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
10:46:49.0546 0864	Imapi - ok
10:46:49.0578 0864	ini910u - ok
10:46:49.0593 0864	IntelIde - ok
10:46:49.0640 0864	intelppm        (ad340800c35a42d4de1641a37feea34c) C:\WINDOWS\system32\DRIVERS\intelppm.sys
10:46:49.0656 0864	intelppm - ok
10:46:49.0687 0864	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
10:46:49.0687 0864	Ip6Fw - ok
10:46:49.0750 0864	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
10:46:49.0750 0864	IpFilterDriver - ok
10:46:49.0812 0864	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
10:46:49.0812 0864	IpInIp - ok
10:46:49.0875 0864	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
10:46:49.0875 0864	IpNat - ok
10:46:49.0906 0864	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
10:46:49.0906 0864	IPSec - ok
10:46:49.0953 0864	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
10:46:49.0953 0864	IRENUM - ok
10:46:50.0000 0864	isapnp          (355836975a67b6554bca60328cd6cb74) C:\WINDOWS\system32\DRIVERS\isapnp.sys
10:46:50.0000 0864	isapnp - ok
10:46:50.0078 0864	Kbdclass        (16813155807c6881f4bfbf6657424659) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
10:46:50.0078 0864	Kbdclass - ok
10:46:50.0125 0864	kbdhid          (94c59cb884ba010c063687c3a50dce8e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
10:46:50.0125 0864	kbdhid - ok
10:46:50.0156 0864	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
10:46:50.0156 0864	kmixer - ok
10:46:50.0187 0864	KSecDD          (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
10:46:50.0187 0864	KSecDD - ok
10:46:50.0281 0864	Lavasoft Kernexplorer (6c4a3804510ad8e0f0c07b5be3d44ddb) C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys
10:46:50.0281 0864	Lavasoft Kernexplorer - ok
10:46:50.0375 0864	Lbd             (336abe8721cbc3110f1c6426da633417) C:\WINDOWS\system32\DRIVERS\Lbd.sys
10:46:50.0375 0864	Lbd - ok
10:46:50.0390 0864	lbrtfdc - ok
10:46:50.0421 0864	LMIInfo - ok
10:46:50.0500 0864	lmimirr         (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys
10:46:50.0500 0864	lmimirr - ok
10:46:50.0515 0864	LMIRfsClientNP - ok
10:46:50.0562 0864	LMIRfsDriver    (74701f9e50292543e7c2867cdbf4c4a5) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
10:46:50.0562 0864	LMIRfsDriver - ok
10:46:50.0640 0864	MBAMProtector   (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
10:46:50.0640 0864	MBAMProtector - ok
10:46:50.0703 0864	mirrorv3        (d96ea49ab9a9174331bc023fd0cadc18) C:\WINDOWS\system32\DRIVERSminiv3.sys
10:46:50.0703 0864	mirrorv3 - ok
10:46:50.0765 0864	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
10:46:50.0765 0864	mnmdd - ok
10:46:50.0828 0864	Modem           (510ade9327fe84c10254e1902697e25f) C:\WINDOWS\system32\drivers\Modem.sys
10:46:50.0828 0864	Modem - ok
10:46:50.0890 0864	Mouclass        (027c01bd7ef3349aaebc883d8a799efb) C:\WINDOWS\system32\DRIVERS\mouclass.sys
10:46:50.0890 0864	Mouclass - ok
10:46:50.0937 0864	mouhid          (124d6846040c79b9c997f78ef4b2a4e5) C:\WINDOWS\system32\DRIVERS\mouhid.sys
10:46:50.0937 0864	mouhid - ok
10:46:50.0984 0864	MountMgr        (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
10:46:50.0984 0864	MountMgr - ok
10:46:51.0000 0864	mraid35x - ok
10:46:51.0031 0864	MRxDAV          (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
10:46:51.0031 0864	MRxDAV - ok
10:46:51.0093 0864	MRxSmb          (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
10:46:51.0093 0864	MRxSmb - ok
10:46:51.0171 0864	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
10:46:51.0171 0864	Msfs - ok
10:46:51.0234 0864	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
10:46:51.0234 0864	MSKSSRV - ok
10:46:51.0281 0864	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
10:46:51.0281 0864	MSPCLOCK - ok
10:46:51.0343 0864	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
10:46:51.0343 0864	MSPQM - ok
10:46:51.0390 0864	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
10:46:51.0390 0864	mssmbios - ok
10:46:51.0468 0864	MSTEE           (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
10:46:51.0468 0864	MSTEE - ok
10:46:51.0531 0864	Mup             (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
10:46:51.0531 0864	Mup - ok
10:46:51.0593 0864	mvusbews        (2f1d73efecc2004c8195bc9595666404) C:\WINDOWS\system32\Drivers\mvusbews.sys
10:46:51.0593 0864	mvusbews - ok
10:46:51.0640 0864	NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
10:46:51.0640 0864	NABTSFEC - ok
10:46:51.0671 0864	NDIS            (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
10:46:51.0671 0864	NDIS - ok
10:46:51.0734 0864	NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
10:46:51.0734 0864	NdisIP - ok
10:46:51.0796 0864	NdisTapi        (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS
distapi.sys
10:46:51.0796 0864	NdisTapi - ok
10:46:51.0843 0864	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS
disuio.sys
10:46:51.0843 0864	Ndisuio - ok
10:46:51.0875 0864	NdisWan         (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS
diswan.sys
10:46:51.0875 0864	NdisWan - ok
10:46:51.0921 0864	NDProxy         (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
10:46:51.0921 0864	NDProxy - ok
10:46:52.0015 0864	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS
etbios.sys
10:46:52.0015 0864	NetBIOS - ok
10:46:52.0046 0864	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS
etbt.sys
10:46:52.0046 0864	NetBT - ok
10:46:52.0218 0864	NETw5x32        (ccdb8db66acd3c0a6c8e171b79f60ac4) C:\WINDOWS\system32\DRIVERS\NETw5x32.sys
10:46:52.0234 0864	NETw5x32 - ok
10:46:52.0250 0864	NIC1394         (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS
ic1394.sys
10:46:52.0265 0864	NIC1394 - ok
10:46:52.0281 0864	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
10:46:52.0281 0864	Npfs - ok
10:46:52.0375 0864	Ntfs            (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
10:46:52.0390 0864	Ntfs - ok
10:46:52.0406 0864	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
10:46:52.0406 0864	Null - ok
10:46:52.0453 0864	nuvaudio        (7546a6c13152744a59089bcdb6df81a9) C:\WINDOWS\system32\DRIVERS
uvaudio.sys
10:46:52.0453 0864	nuvaudio - ok
10:46:52.0500 0864	NUVision        (6724ecff765d013c3bb6e0cee61509b6) C:\WINDOWS\system32\DRIVERS
uvision.sys
10:46:52.0500 0864	NUVision - ok
10:46:52.0531 0864	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS
wlnkflt.sys
10:46:52.0531 0864	NwlnkFlt - ok
10:46:52.0625 0864	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS
wlnkfwd.sys
10:46:52.0625 0864	NwlnkFwd - ok
10:46:52.0656 0864	ohci1394        (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
10:46:52.0656 0864	ohci1394 - ok
10:46:52.0687 0864	Parport         (8fd0bdbea875d06ccf6c945ca9abaf75) C:\WINDOWS\system32\DRIVERS\parport.sys
10:46:52.0687 0864	Parport - ok
10:46:52.0703 0864	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
10:46:52.0703 0864	PartMgr - ok
10:46:52.0718 0864	ParVdm          (9575c5630db8fb804649a6959737154c) C:\WINDOWS\system32\drivers\ParVdm.sys
10:46:52.0718 0864	ParVdm - ok
10:46:52.0734 0864	PCI             (043410877bda580c528f45165f7125bc) C:\WINDOWS\system32\DRIVERS\pci.sys
10:46:52.0734 0864	PCI - ok
10:46:52.0750 0864	PCIDump - ok
10:46:52.0796 0864	PCIIde          (f4bfde7209c14a07aaa61e4d6ae69eac) C:\WINDOWS\system32\DRIVERS\pciide.sys
10:46:52.0796 0864	PCIIde - ok
10:46:52.0796 0864	Pcmcia          (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
10:46:52.0796 0864	Pcmcia - ok
10:46:52.0812 0864	PDCOMP - ok
10:46:52.0828 0864	PDFRAME - ok
10:46:52.0828 0864	PDRELI - ok
10:46:52.0843 0864	PDRFRAME - ok
10:46:52.0859 0864	perc2 - ok
10:46:52.0859 0864	perc2hib - ok
10:46:52.0906 0864	PersonalSecureDrive (91f90ac06d40a9bada14047c02e6c592) C:\WINDOWS\System32\drivers\psd.sys
10:46:52.0906 0864	PersonalSecureDrive - ok
10:46:52.0937 0864	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERSaspptp.sys
10:46:52.0937 0864	PptpMiniport - ok
10:46:52.0968 0864	PSched          (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
10:46:52.0968 0864	PSched - ok
10:46:53.0015 0864	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
10:46:53.0031 0864	Ptilink - ok
10:46:53.0078 0864	PxHelp20        (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys
10:46:53.0078 0864	PxHelp20 - ok
10:46:53.0078 0864	ql1080 - ok
10:46:53.0093 0864	Ql10wnt - ok
10:46:53.0109 0864	ql12160 - ok
10:46:53.0109 0864	ql1240 - ok
10:46:53.0125 0864	ql1280 - ok
10:46:53.0125 0864	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERSasacd.sys
10:46:53.0140 0864	RasAcd - ok
10:46:53.0171 0864	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERSasl2tp.sys
10:46:53.0171 0864	Rasl2tp - ok
10:46:53.0187 0864	RasPppoe        (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERSaspppoe.sys
10:46:53.0187 0864	RasPppoe - ok
10:46:53.0218 0864	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERSaspti.sys
10:46:53.0218 0864	Raspti - ok
10:46:53.0250 0864	Rdbss           (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERSdbss.sys
10:46:53.0250 0864	Rdbss - ok
10:46:53.0265 0864	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
10:46:53.0265 0864	RDPCDD - ok
10:46:53.0312 0864	rdpdr           (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERSdpdr.sys
10:46:53.0312 0864	rdpdr - ok
10:46:53.0343 0864	RDPWD           (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
10:46:53.0359 0864	RDPWD - ok
10:46:53.0375 0864	redbook         (d8eb2a7904db6c916eb5361878ddcbae) C:\WINDOWS\system32\DRIVERSedbook.sys
10:46:53.0375 0864	redbook - ok
10:46:53.0484 0864	rimmptsk        (ded01a389926a89540b82373e4c550ee) C:\WINDOWS\system32\DRIVERSimmptsk.sys
10:46:53.0484 0864	rimmptsk - ok
10:46:53.0484 0864	rimsptsk        (c398bca91216755b098679a8da8a2300) C:\WINDOWS\system32\DRIVERSimsptsk.sys
10:46:53.0484 0864	rimsptsk - ok
10:46:53.0531 0864	RimUsb          (616eac1b0e48b236a5a9b8ae07fdb81c) C:\WINDOWS\system32\Drivers\RimUsb.sys
10:46:53.0531 0864	RimUsb - ok
10:46:53.0562 0864	RimVSerPort     (2c4fb2e9f039287767c384e46ee91030) C:\WINDOWS\system32\DRIVERS\RimSerial.sys
10:46:53.0562 0864	RimVSerPort - ok
10:46:53.0593 0864	rismc32         (7c21554942bef51cbd84fd7d4e62cb9a) C:\WINDOWS\system32\DRIVERSismc32.sys
10:46:53.0593 0864	rismc32 - ok
10:46:53.0609 0864	rismxdp         (2a2554cb24506e0a0508fc395c4a1b42) C:\WINDOWS\system32\DRIVERSixdptsk.sys
10:46:53.0609 0864	rismxdp - ok
10:46:53.0640 0864	ROOTMODEM       (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
10:46:53.0640 0864	ROOTMODEM - ok
10:46:53.0671 0864	RsvLock         (c40fe954538778bb067968f4ef90ffae) C:\WINDOWS\system32\drivers\RsvLock.sys
10:46:53.0671 0864	RsvLock - ok
10:46:53.0718 0864	s24trans        (87940243ea2ad3ebe274f5409c5e9072) C:\WINDOWS\system32\DRIVERS\s24trans.sys
10:46:53.0718 0864	s24trans - ok
10:46:53.0750 0864	SafeBoot        (1b1c533025bcc96b60ffe412a982c6bf) C:\WINDOWS\system32\drivers\SafeBoot.sys
10:46:53.0750 0864	Suspicious file (NoAccess): C:\WINDOWS\system32\drivers\SafeBoot.sys. md5: 1b1c533025bcc96b60ffe412a982c6bf
10:46:53.0750 0864	SafeBoot ( LockedFile.Multi.Generic ) - warning
10:46:53.0750 0864	SafeBoot - detected LockedFile.Multi.Generic (1)
10:46:53.0875 0864	SASDIFSV - ok
10:46:53.0890 0864	SASKUTIL - ok
10:46:53.0953 0864	SbAlg           (c0094aad6bc8a2d933eca2102d58c021) C:\WINDOWS\system32\drivers\SbAlg.sys
10:46:53.0953 0864	SbAlg - ok
10:46:53.0984 0864	SbFsLock        (5eb7979b149a2619ae97b0b91a187634) C:\WINDOWS\system32\drivers\SbFsLock.sys
10:46:53.0984 0864	SbFsLock - ok
10:46:54.0031 0864	sdbus           (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys
10:46:54.0031 0864	sdbus - ok
10:46:54.0078 0864	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
10:46:54.0093 0864	Secdrv - ok
10:46:54.0156 0864	Serenum         (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
10:46:54.0156 0864	Serenum - ok
10:46:54.0187 0864	Serial          (93d313c31f7ad9ea2b75f26075413c7c) C:\WINDOWS\system32\DRIVERS\serial.sys
10:46:54.0187 0864	Serial - ok
10:46:54.0234 0864	SFAUDIO         (b6401608579b6431994425ba7653f774) C:\WINDOWS\system32\drivers\sfaudio.sys
10:46:54.0234 0864	SFAUDIO - ok
10:46:54.0281 0864	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys
10:46:54.0281 0864	Sfloppy - ok
10:46:54.0328 0864	Simbad - ok
10:46:54.0343 0864	SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
10:46:54.0343 0864	SLIP - ok
10:46:54.0453 0864	SNP2UVC         (cf9cde12fbc19dba8de528b7511a2f4f) C:\WINDOWS\system32\DRIVERS\snp2uvc.sys
10:46:54.0453 0864	SNP2UVC - ok
10:46:54.0484 0864	Sparrow - ok
10:46:54.0546 0864	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
10:46:54.0546 0864	splitter - ok
10:46:54.0609 0864	sr              (39626e6dc1fb39434ec40c42722b660a) C:\WINDOWS\system32\DRIVERS\sr.sys
10:46:54.0609 0864	sr - ok
10:46:54.0671 0864	Srv             (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
10:46:54.0687 0864	Srv - ok
10:46:54.0734 0864	ssmdrv          (3ad0362cf68de3ac500e981700242cca) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
10:46:54.0734 0864	ssmdrv - ok
10:46:54.0781 0864	StillCam        (3f669c9fc6411bdbc0155544aa876e46) C:\WINDOWS\system32\DRIVERS\serscan.sys
10:46:54.0781 0864	StillCam - ok
10:46:54.0796 0864	streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
10:46:54.0796 0864	streamip - ok
10:46:54.0828 0864	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
10:46:54.0828 0864	swenum - ok
10:46:54.0875 0864	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
10:46:54.0875 0864	swmidi - ok
10:46:54.0890 0864	symc810 - ok
10:46:54.0906 0864	symc8xx - ok
10:46:54.0921 0864	sym_hi - ok
10:46:54.0921 0864	sym_u3 - ok
10:46:54.0968 0864	SynTP           (926e0bb4cac05d9a0c3b59dc16fe2f1c) C:\WINDOWS\system32\DRIVERS\SynTP.sys
10:46:54.0968 0864	SynTP - ok
10:46:54.0984 0864	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
10:46:54.0984 0864	sysaudio - ok
10:46:55.0062 0864	Tcpip           (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS	cpip.sys
10:46:55.0062 0864	Tcpip - ok
10:46:55.0093 0864	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
10:46:55.0093 0864	TDPIPE - ok
10:46:55.0140 0864	TDTCP           (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
10:46:55.0140 0864	TDTCP - ok
10:46:55.0171 0864	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS	ermdd.sys
10:46:55.0187 0864	TermDD - ok
10:46:55.0218 0864	TosIde - ok
10:46:55.0265 0864	TrueSight       (f69641efdb19acb4753b0155f7fdeed5) c:\windows\system32\drivers\TrueSight.sys
10:46:55.0265 0864	TrueSight - ok
10:46:55.0312 0864	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
10:46:55.0312 0864	Udfs - ok
10:46:55.0343 0864	ultra - ok
10:46:55.0390 0864	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
10:46:55.0390 0864	Update - ok
10:46:55.0437 0864	usbccgp         (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
10:46:55.0437 0864	usbccgp - ok
10:46:55.0484 0864	usbehci         (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
10:46:55.0484 0864	usbehci - ok
10:46:55.0515 0864	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
10:46:55.0515 0864	usbhub - ok
10:46:55.0578 0864	usbprint        (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
10:46:55.0578 0864	usbprint - ok
10:46:55.0640 0864	usbscan         (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
10:46:55.0640 0864	usbscan - ok
10:46:55.0718 0864	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
10:46:55.0718 0864	USBSTOR - ok
10:46:55.0781 0864	usbuhci         (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
10:46:55.0781 0864	usbuhci - ok
10:46:55.0828 0864	usbvideo        (63bbfca7f390f4c49ed4b96bfb1633e0) C:\WINDOWS\system32\Drivers\usbvideo.sys
10:46:55.0828 0864	usbvideo - ok
10:46:55.0890 0864	usb_rndisx      (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys
10:46:55.0890 0864	usb_rndisx - ok
10:46:55.0937 0864	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
10:46:55.0937 0864	VgaSave - ok
10:46:55.0968 0864	ViaIde - ok
10:46:56.0000 0864	VolSnap         (46de1126684369bace4849e4fc8c43ca) C:\WINDOWS\system32\drivers\VolSnap.sys
10:46:56.0000 0864	VolSnap - ok
10:46:56.0062 0864	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
10:46:56.0062 0864	Wanarp - ok
10:46:56.0125 0864	wceusbsh        (46a247f6617526afe38b6f12f5512120) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
10:46:56.0125 0864	wceusbsh - ok
10:46:56.0203 0864	Wdf01000        (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
10:46:56.0203 0864	Wdf01000 - ok
10:46:56.0234 0864	WDICA - ok
10:46:56.0265 0864	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
10:46:56.0265 0864	wdmaud - ok
10:46:56.0312 0864	WmiAcpi         (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
10:46:56.0312 0864	WmiAcpi - ok
10:46:56.0359 0864	WS2IFSL         (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
10:46:56.0359 0864	WS2IFSL - ok
10:46:56.0421 0864	WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
10:46:56.0421 0864	WSTCODEC - ok
10:46:56.0500 0864	WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
10:46:56.0500 0864	WudfPf - ok
10:46:56.0531 0864	WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
10:46:56.0531 0864	WudfRd - ok
10:46:56.0562 0864	MBR (0x1B8)     (c99c3199cfaa4cbdcd91493f6d113a50) \Device\Harddisk0\DR0
10:46:56.0765 0864	\Device\Harddisk0\DR0 - ok
10:46:56.0765 0864	Boot (0x1200)   (01243f31ebc31f77e1ca1deda850014e) \Device\Harddisk0\DR0\Partition0
10:46:56.0765 0864	\Device\Harddisk0\DR0\Partition0 - ok
10:46:56.0781 0864	Boot (0x1200)   (b5a74158d177fe121028a3d65fd8a6d9) \Device\Harddisk0\DR0\Partition1
10:46:56.0781 0864	\Device\Harddisk0\DR0\Partition1 - ok
10:46:56.0781 0864	============================================================
10:46:56.0781 0864	Scan finished
10:46:56.0781 0864	============================================================
10:46:56.0796 4872	Detected object count: 1
10:46:56.0796 4872	Actual detected object count: 1
10:49:05.0234 4872	SafeBoot ( LockedFile.Multi.Generic ) - skipped by user
10:49:05.0234 4872	SafeBoot ( LockedFile.Multi.Generic ) - User select action: Skip

jeronimo44 · Answer

je passe maintenant le second et te dit

jeronimo44 · Answer

comment je recupere le rapport sur aswmbr ??
j'ai une ligne jaune et un rouge ... ???
merci

Malekal_morte- · Answer

il doit y avoir un fichier log ou text dans le répertoire où tu l'as lancé.
Faut le mettre sur le bureau, ça sera plus simple.

jeronimo44 · Answer

et voila :
aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-02-27 10:53:11
-----------------------------
10:53:11.359    OS Version: Windows 5.1.2600 Service Pack 3
10:53:11.359    Number of processors: 2 586 0x1706
10:53:11.359    ComputerName: UTILISAT-47DCFE  UserName: utilisateur
10:53:12.125    Initialize success
10:55:39.734    AVAST engine defs: 12022700
10:55:56.265    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
10:55:56.265    Disk 0 Vendor: FUJITSU_ 8909 Size: 238475MB BusType: 3
10:55:56.281    Disk 0 MBR read successfully
10:55:56.281    Disk 0 MBR scan
10:55:56.296    Disk 0 Windows XP default MBR code
10:55:56.296    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS        87761 MB offset 63
10:55:56.296    Disk 0 Partition - 00     0F Extended LBA            149432 MB offset 179735220
10:55:56.328    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       149432 MB offset 179735283
10:55:56.328    Disk 0 scanning sectors +485773470
10:55:56.406    Disk 0 scanning C:\WINDOWS\system32\drivers
10:56:13.281    Service scanning
10:56:31.328    Service SafeBoot C:\WINDOWS\System32\Drivers\SafeBoot.sys **LOCKED** 32
10:56:38.156    Modules scanning
10:56:43.906    Disk 0 trace - called modules:
10:56:43.953    ntkrnlpa.exe CLASSPNP.SYS disk.sys hpdskflt.sys hal.dll ACPI.sys iaStor.sys 
10:56:43.953    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8ae202a0]
10:56:43.953    3 CLASSPNP.SYS[f74f7fd7] -> nt!IofCallDriver -> [0x8ad6c568]
10:56:43.968    5 hpdskflt.sys[f77184e6] -> nt!IofCallDriver -> \Device\000000a4[0x8ad643a8]
10:56:43.968    7 ACPI.sys[f735d620] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x8a781028]
10:56:44.687    AVAST engine scan C:\WINDOWS
10:57:05.578    AVAST engine scan C:\WINDOWS\system32
10:59:11.000    File: C:\WINDOWS\system32\racpldlgp.dll  **INFECTED** Win32:Diller-V [Trj]
11:01:50.328    AVAST engine scan C:\WINDOWS\system32\drivers
11:02:06.296    AVAST engine scan C:\Documents and Settings\utilisateur
11:05:40.390    AVAST engine scan C:\Documents and Settings\All Users
11:08:06.625    Scan finished successfully
11:12:07.406    Disk 0 MBR has been saved successfully to "C:\Documents and Settings\utilisateur\Bureau\MBR.dat"
11:12:07.421    The log file has been saved successfully to "C:\Documents and Settings\utilisateur\Bureau\aswMBR.txt"

Malekal_morte- · Answer

10:59:11.000 File: C:\WINDOWS\system32\racpldlgp.dll **INFECTED** Win32:Diller-V [Trj] 

okay... 

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/ 

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau. 
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur) 

* Lance OTL 
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous : 
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
consrv.dll
explorer.exe
winlogon.exe
wininit.exe
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
CREATERESTOREPOINT
nslookup www.google.fr /c
SAVEMBR:0
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs 
* Clique sur le bouton Analyse. 
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt), donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.

Like the angel you are, you laugh creating a lightness in my chest, 
Your eyes they penetrate me, 
(Your answer's always 'maybe') 
That's when I got up and left

jeronimo44 · Answer

pb qd je lance OTL, qd il arrive a la partie scanning modules, l'operation plante ( plus de reponse de l'appli ), jai renouvelé l'operation 3 fois avec le meme resultat ..

jeronimo44 · Answer

le programme ne reponds pas

jeronimo44 · Answer

c'est bon ca scanne

jeronimo44 · Answer

https://pjjoint.malekal.com/files.php?id=20120227_v8p9r10k14k12

jeronimo44 · Answer

https://pjjoint.malekal.com/files.php?id=20120227_t12t5p6x15z10

Malekal_morte- · Answer

Désinstalle zap et Complitly.

Relance OTL. 
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:  

:OTL
 [2012/01/31 20:27:40 | 000,000,316 | ---- | C] () -- C:\WINDOWS	asks\Cqqvjcy.job
[2012/01/31 20:27:39 | 000,126,976 | RHS- | M] () -- C:\WINDOWS\System32acpldlgp.dll 

* redemarre le pc sous windows et poste le rapport ici 


et :

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.  
Lance le, clique sur [Suppression] puis patiente le temps du scan.  
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.  

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

jeronimo44 · Answer

Désinstalle zap et Complitly ??????????????????

jeronimo44 · Answer

rapport OTL : 
 https://pjjoint.malekal.com/files.php?id=20120227_d7v14o14u5l5

jeronimo44 · Answer

rapport adwcleaner :
# AdwCleaner v1.500 - Rapport créé le 27/02/2012 à 12:46:20
# Mis à jour le 23/02/2012 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : utilisateur - UTILISAT-47DCFE
# Exécuté depuis : C:\Documents and Settings\utilisateur\Bureau\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\utilisateur\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\utilisateur\Application Data\pdfforge
Dossier Supprimé : C:\Documents and Settings\utilisateur\Application Data\Search Settings
Dossier Supprimé : C:\Documents and Settings\utilisateur\Application Data\widestream
Dossier Supprimé : C:\Documents and Settings\utilisateur\Local Settings\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\utilisateur\Local Settings\Application Data\Conduit
Dossier Supprimé : C:\Documents and Settings\utilisateur\Local Settings\Application Data\widestream6 Air
Dossier Supprimé : C:\Documents and Settings\utilisateur\Mes documents\WideStream
Dossier Supprimé : C:\Program Files\Application Updater
Dossier Supprimé : C:\Program Files\Conduit
Dossier Supprimé : C:\Program Files\pdfforge Toolbar
Dossier Supprimé : C:\Program Files\Widestream6
Dossier Supprimé : C:\Program Files\Yontoo Layers Runtime
Dossier Supprimé : C:\Program Files\Fichiers communs\spigot

***** [H. Navipromo] *****


***** [Registre] *****

[*] Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2851639
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\ConduitSearchScopes
Clé Supprimée : HKCU\Software\Complitly
Clé Supprimée : HKCU\Software\WideStream
Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\Search Settings
Clé Supprimée : HKLM\SOFTWARE\Application Updater
Clé Supprimée : HKLM\SOFTWARE\Babylon
Clé Supprimée : HKLM\SOFTWARE\Conduit
Clé Supprimée : HKLM\SOFTWARE\pdfforge
Clé Supprimée : HKLM\SOFTWARE\Search Settings
Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.DllInfo
Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDF
Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFEncryptor
Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.PDF.PDFText
Clé Supprimée : HKLM\SOFTWARE\Classes\pdfforge.Tools
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Clé Supprimée : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\PCTutoBHO.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{759F1421-4D31-4c1f-8C51-E4956A037676}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46df-B041-1E593282C7D0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44b0-A826-84C829536E93}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{0BF73E27-2734-4F7B-925A-4BBB1457F5FA}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions
iapdbllcanepiiimjjndipklodoedlc
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{42CB2906-3B4F-4A62-B2E0-132481175962}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A29B2641-9931-448A-8DE7-B2D63BDC1812}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

***** [Navigateurs] *****

-\ Internet Explorer v8.0.6001.18702

[OK] Le registre ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [5787 octets] - [27/02/2012 12:45:59]
AdwCleaner[R2].txt - [5847 octets] - [27/02/2012 12:46:16]
AdwCleaner[S1].txt - [5847 octets] - [27/02/2012 12:46:20]

########## EOF - C:\AdwCleaner[S1].txt - [5975 octets] ##########

Malekal_morte- · Answer

Pas bon pour OTL.
Faut faire correction.
Lire les instructions;

jeronimo44 · Answer

desolé ...

========== OTL ==========
C:\WINDOWS	asks\Cqqvjcy.job moved successfully.
C:\WINDOWS\system32acpldlgp.dll moved successfully.
 
OTL by OldTimer - Version 3.2.33.2 log created on 02272012_140255

Malekal_morte- · Answer

surf un peu voir ce que cela donne.

~~

Important - ton infection est venue par un exploit sur site web :   

Un exploit sur site WEB permet l'infection de ton ordinateur de manière automatiquement à la visite d'un site WEB qui a été hacké, il tire partie du fait que tu as des logiciels (Java, Adobe Reader etc) qui sont pas à jour et possèdent des vulnérabilités qui permettent l'execution de code (malicieux dans notre cas) à ton insu.  
Le fait de ne pas avoir des logiciels à jour et qui ont potentiellement des vulnérabilités permettent donc d'infecter ton système.  
Exemple avec : Exploit Java  

Il faut donc impérativement maintenir tes logiciels à jour afin de ne pas voir ces portes d'entrée sur ton système.
Tant que ces logiciels ne seront pas à jour, ton PC est vulnérable et les infections peuvent s'installer facilement.

IMPORTANT : mettre à jour tes programmes notamment Java/Adobe Reader et Flash : 
/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite     
https://forum.malekal.com/viewtopic.php?t=15960&start=  

Passe le mot à tes amis !

jeronimo44 · Answer

pb tjrs present ...
ok pour les MAJ, je vais faire tout ca qd mon pb sera reglé

jeronimo44 · Answer

je redemarre pas le PC ?

Malekal_morte- · Answer

oui fias les maj, c'est très important, sinon tu vas réinfecter l'ordi.

Bonne aprem.

jeronimo44 · Answer

Résolu
merci !!!!!

Redirection recherches google - Page 2

Discussions similaires

Newsletters