Redirection des liens

barbelle333 Messages postés 10 Statut Membre -  
barbelle333 Messages postés 10 Statut Membre -
Bonjour,
voila, depuis quelques temps sur firefox lorseque je clic sur un lien, je suis redirigé sur d'autres liens tel que des sites pour adultes ou des sites de promotion de produits .
en plus, je n'arrive pas a faire toute mes mise a jour de windows car je recoie le messade d'erreur suivant FFFFFFFE


12 réponses

Réponse 1 / 12
barbelle333 Messages postés 10 Statut Membre
 
merci malekal_morte,
voici le rapport:
07:44:20.0148 10192 TDSS rootkit removing tool 2.7.18.0 Mar 2 2012 09:40:07
07:44:20.0616 10192 ============================================================
07:44:20.0616 10192 Current date / time: 2012/03/03 07:44:20.0616
07:44:20.0616 10192 SystemInfo:
07:44:20.0616 10192
07:44:20.0616 10192 OS Version: 6.0.6002 ServicePack: 2.0
07:44:20.0616 10192 Product type: Workstation
07:44:20.0616 10192 ComputerName: FRANCE
07:44:20.0616 10192 UserName: France
07:44:20.0616 10192 Windows directory: C:\Windows
07:44:20.0616 10192 System windows directory: C:\Windows
07:44:20.0616 10192 Processor architecture: Intel x86
07:44:20.0616 10192 Number of processors: 2
07:44:20.0616 10192 Page size: 0x1000
07:44:20.0616 10192 Boot type: Normal boot
07:44:20.0616 10192 ============================================================
07:44:22.0551 10192 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
07:44:22.0597 10192 \Device\Harddisk0\DR0:
07:44:22.0597 10192 MBR used
07:44:22.0597 10192 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x124F6BF3
07:44:22.0597 10192 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x124F7000, BlocksNum 0x12F37000
07:44:23.0596 10192 Initialize success
07:44:23.0596 10192 ============================================================
07:44:37.0574 7456 ============================================================
07:44:37.0574 7456 Scan started
07:44:37.0574 7456 Mode: Manual;
07:44:37.0574 7456 ============================================================
07:44:40.0727 7456 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
07:44:40.0805 7456 ACPI - ok
07:44:40.0867 7456 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
07:44:40.0883 7456 adp94xx - ok
07:44:40.0976 7456 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
07:44:40.0992 7456 adpahci - ok
07:44:41.0054 7456 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
07:44:41.0085 7456 adpu160m - ok
07:44:41.0163 7456 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
07:44:41.0195 7456 adpu320 - ok
07:44:41.0366 7456 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
07:44:41.0429 7456 AFD - ok
07:44:41.0507 7456 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
07:44:41.0538 7456 agp440 - ok
07:44:41.0585 7456 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
07:44:41.0616 7456 aic78xx - ok
07:44:41.0647 7456 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
07:44:41.0678 7456 aliide - ok
07:44:41.0741 7456 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
07:44:41.0756 7456 amdagp - ok
07:44:41.0787 7456 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
07:44:41.0803 7456 amdide - ok
07:44:41.0834 7456 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
07:44:41.0865 7456 AmdK7 - ok
07:44:41.0897 7456 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
07:44:41.0912 7456 AmdK8 - ok
07:44:42.0037 7456 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
07:44:42.0053 7456 arc - ok
07:44:42.0084 7456 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
07:44:42.0115 7456 arcsas - ok
07:44:42.0177 7456 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
07:44:42.0177 7456 AsyncMac - ok
07:44:42.0209 7456 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
07:44:42.0240 7456 atapi - ok
07:44:42.0318 7456 avgntflt (7713e4eb0276702faa08e52a6e23f2a6) C:\Windows\system32\DRIVERS\avgntflt.sys
07:44:42.0333 7456 avgntflt - ok
07:44:42.0396 7456 avipbb (13b02b9b969dde270cd7c351203dad3c) C:\Windows\system32\DRIVERS\avipbb.sys
07:44:42.0427 7456 avipbb - ok
07:44:42.0474 7456 avkmgr (271cfd1a989209b1964e24d969552bf7) C:\Windows\system32\DRIVERS\avkmgr.sys
07:44:42.0505 7456 avkmgr - ok
07:44:42.0583 7456 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
07:44:42.0599 7456 Beep - ok
07:44:42.0661 7456 blbdrive - ok
07:44:42.0723 7456 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
07:44:42.0755 7456 bowser - ok
07:44:42.0817 7456 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
07:44:42.0848 7456 BrFiltLo - ok
07:44:42.0895 7456 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
07:44:42.0895 7456 BrFiltUp - ok
07:44:42.0926 7456 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
07:44:42.0957 7456 Brserid - ok
07:44:42.0989 7456 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
07:44:43.0004 7456 BrSerWdm - ok
07:44:43.0020 7456 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
07:44:43.0035 7456 BrUsbMdm - ok
07:44:43.0067 7456 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
07:44:43.0098 7456 BrUsbSer - ok
07:44:43.0129 7456 btaudio - ok
07:44:43.0176 7456 BTDriver - ok
07:44:43.0254 7456 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
07:44:43.0269 7456 BTHMODEM - ok
07:44:43.0316 7456 BTWDNDIS - ok
07:44:43.0363 7456 btwhid - ok
07:44:43.0394 7456 BTWUSB - ok
07:44:43.0457 7456 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
07:44:43.0488 7456 cdfs - ok
07:44:43.0550 7456 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
07:44:43.0581 7456 cdrom - ok
07:44:43.0628 7456 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys
07:44:43.0644 7456 circlass - ok
07:44:43.0691 7456 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
07:44:43.0737 7456 CLFS - ok
07:44:43.0800 7456 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
07:44:43.0831 7456 cmdide - ok
07:44:43.0862 7456 Compbatt (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\drivers\compbatt.sys
07:44:43.0893 7456 Compbatt - ok
07:44:43.0925 7456 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
07:44:43.0940 7456 crcdisk - ok
07:44:43.0971 7456 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
07:44:43.0971 7456 Crusoe - ok
07:44:44.0065 7456 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
07:44:44.0081 7456 DfsC - ok
07:44:44.0221 7456 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
07:44:44.0252 7456 disk - ok
07:44:44.0408 7456 Dot4 (4f59c172c094e1a1d46463a8dc061cbd) C:\Windows\system32\DRIVERS\Dot4.sys
07:44:44.0439 7456 Dot4 - ok
07:44:44.0502 7456 Dot4Print (80bf3ba09f6f2523c8f6b7cc6dbf7bd5) C:\Windows\system32\DRIVERS\Dot4Prt.sys
07:44:44.0517 7456 Dot4Print - ok
07:44:44.0549 7456 dot4usb (c55004ca6b419b6695970dfe849b122f) C:\Windows\system32\DRIVERS\dot4usb.sys
07:44:44.0564 7456 dot4usb - ok
07:44:44.0611 7456 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
07:44:44.0642 7456 drmkaud - ok
07:44:44.0705 7456 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
07:44:44.0720 7456 DXGKrnl - ok
07:44:44.0783 7456 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
07:44:44.0798 7456 E1G60 - ok
07:44:44.0861 7456 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
07:44:44.0892 7456 Ecache - ok
07:44:44.0954 7456 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
07:44:44.0985 7456 elxstor - ok
07:44:45.0079 7456 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
07:44:45.0095 7456 exfat - ok
07:44:45.0157 7456 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
07:44:45.0173 7456 fastfat - ok
07:44:45.0235 7456 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
07:44:45.0297 7456 fdc - ok
07:44:45.0360 7456 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
07:44:45.0391 7456 FileInfo - ok
07:44:45.0422 7456 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
07:44:45.0453 7456 Filetrace - ok
07:44:45.0547 7456 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
07:44:45.0563 7456 flpydisk - ok
07:44:45.0625 7456 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
07:44:45.0687 7456 FltMgr - ok
07:44:45.0765 7456 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\Windows\system32\DRIVERS\fssfltr.sys
07:44:45.0781 7456 fssfltr - ok
07:44:45.0859 7456 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
07:44:45.0890 7456 Fs_Rec - ok
07:44:45.0937 7456 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
07:44:45.0953 7456 gagp30kx - ok
07:44:46.0015 7456 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
07:44:46.0031 7456 GEARAspiWDM - ok
07:44:46.0140 7456 HdAudAddService (3f90e001369a07243763bd5a523d8722) C:\Windows\system32\drivers\HdAudio.sys
07:44:46.0155 7456 HdAudAddService - ok
07:44:46.0233 7456 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
07:44:46.0233 7456 HDAudBus - ok
07:44:46.0280 7456 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
07:44:46.0311 7456 HidBth - ok
07:44:46.0343 7456 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
07:44:46.0343 7456 HidIr - ok
07:44:46.0389 7456 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
07:44:46.0389 7456 HidUsb - ok
07:44:46.0436 7456 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
07:44:46.0467 7456 HpCISSs - ok
07:44:46.0577 7456 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
07:44:46.0592 7456 HTTP - ok
07:44:46.0623 7456 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
07:44:46.0639 7456 i2omp - ok
07:44:46.0701 7456 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
07:44:46.0717 7456 i8042prt - ok
07:44:46.0748 7456 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
07:44:46.0779 7456 iaStorV - ok
07:44:46.0811 7456 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
07:44:46.0826 7456 iirsp - ok
07:44:46.0873 7456 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys
07:44:46.0889 7456 intelide - ok
07:44:46.0920 7456 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
07:44:46.0951 7456 intelppm - ok
07:44:46.0998 7456 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
07:44:47.0029 7456 IpFilterDriver - ok
07:44:47.0060 7456 IpInIp - ok
07:44:47.0091 7456 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
07:44:47.0123 7456 IPMIDRV - ok
07:44:47.0169 7456 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
07:44:47.0169 7456 IPNAT - ok
07:44:47.0232 7456 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
07:44:47.0247 7456 IRENUM - ok
07:44:47.0294 7456 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
07:44:47.0294 7456 isapnp - ok
07:44:47.0341 7456 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
07:44:47.0341 7456 iScsiPrt - ok
07:44:47.0372 7456 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
07:44:47.0372 7456 iteatapi - ok
07:44:47.0403 7456 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
07:44:47.0435 7456 iteraid - ok
07:44:47.0481 7456 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
07:44:47.0513 7456 kbdclass - ok
07:44:47.0559 7456 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
07:44:47.0575 7456 kbdhid - ok
07:44:47.0622 7456 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys
07:44:47.0669 7456 KSecDD - ok
07:44:47.0809 7456 lgmdbus (54fec13b60914784aa06685f352aed70) C:\Windows\system32\DRIVERS\lgmdbus.sys
07:44:47.0825 7456 lgmdbus - ok
07:44:47.0887 7456 lgmdmdfl (97b52613f0b621fc9eae007668da7b01) C:\Windows\system32\DRIVERS\lgmdmdfl.sys
07:44:47.0918 7456 lgmdmdfl - ok
07:44:47.0965 7456 lgmdmdm (b9cc203836509083d8be07b6a5b40862) C:\Windows\system32\DRIVERS\lgmdmdm.sys
07:44:47.0996 7456 lgmdmdm - ok
07:44:48.0043 7456 lgmdmgmt (b5e3263ca8173f9619075898df5d4718) C:\Windows\system32\DRIVERS\lgmdmgmt.sys
07:44:48.0090 7456 lgmdmgmt - ok
07:44:48.0152 7456 lgmdobex (a218c22fd0c4b8ac3ce38e08d1ac9e88) C:\Windows\system32\DRIVERS\lgmdobex.sys
07:44:48.0168 7456 lgmdobex - ok
07:44:48.0230 7456 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
07:44:48.0261 7456 lltdio - ok
07:44:48.0386 7456 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
07:44:48.0402 7456 LSI_FC - ok
07:44:48.0449 7456 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
07:44:48.0464 7456 LSI_SAS - ok
07:44:48.0667 7456 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
07:44:48.0698 7456 LSI_SCSI - ok
07:44:48.0776 7456 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
07:44:48.0792 7456 luafv - ok
07:44:48.0839 7456 MBAMSwissArmy (0db7527db188c7d967a37bb51bbf3963) C:\Windows\system32\drivers\mbamswissarmy.sys
07:44:48.0870 7456 MBAMSwissArmy - ok
07:44:48.0932 7456 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
07:44:48.0963 7456 megasas - ok
07:44:49.0010 7456 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
07:44:49.0026 7456 Modem - ok
07:44:49.0057 7456 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
07:44:49.0073 7456 monitor - ok
07:44:49.0119 7456 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
07:44:49.0135 7456 mouclass - ok
07:44:49.0182 7456 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
07:44:49.0197 7456 mouhid - ok
07:44:49.0244 7456 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
07:44:49.0244 7456 MountMgr - ok
07:44:49.0275 7456 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
07:44:49.0307 7456 mpio - ok
07:44:49.0338 7456 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
07:44:49.0369 7456 mpsdrv - ok
07:44:49.0400 7456 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
07:44:49.0416 7456 Mraid35x - ok
07:44:49.0463 7456 MREMP50 - ok
07:44:49.0463 7456 MREMPR5 - ok
07:44:49.0478 7456 MRENDIS5 - ok
07:44:49.0494 7456 MRESP50 - ok
07:44:49.0541 7456 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
07:44:49.0572 7456 MRxDAV - ok
07:44:49.0619 7456 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
07:44:49.0634 7456 mrxsmb - ok
07:44:49.0712 7456 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
07:44:49.0743 7456 mrxsmb10 - ok
07:44:49.0790 7456 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
07:44:49.0806 7456 mrxsmb20 - ok
07:44:49.0868 7456 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
07:44:49.0868 7456 msahci - ok
07:44:49.0899 7456 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
07:44:49.0931 7456 msdsm - ok
07:44:49.0977 7456 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
07:44:50.0009 7456 Msfs - ok
07:44:50.0055 7456 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
07:44:50.0087 7456 msisadrv - ok
07:44:50.0165 7456 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
07:44:50.0180 7456 MSKSSRV - ok
07:44:50.0227 7456 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
07:44:50.0227 7456 MSPCLOCK - ok
07:44:50.0274 7456 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
07:44:50.0274 7456 MSPQM - ok
07:44:50.0336 7456 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
07:44:50.0367 7456 MsRPC - ok
07:44:50.0414 7456 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
07:44:50.0414 7456 mssmbios - ok
07:44:50.0445 7456 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
07:44:50.0461 7456 MSTEE - ok
07:44:50.0633 7456 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
07:44:50.0664 7456 Mup - ok
07:44:50.0757 7456 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
07:44:50.0773 7456 NativeWifiP - ok
07:44:50.0913 7456 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
07:44:50.0929 7456 NDIS - ok
07:44:50.0991 7456 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
07:44:51.0023 7456 NdisTapi - ok
07:44:51.0069 7456 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
07:44:51.0101 7456 Ndisuio - ok
07:44:51.0147 7456 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
07:44:51.0179 7456 NdisWan - ok
07:44:51.0225 7456 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
07:44:51.0241 7456 NDProxy - ok
07:44:51.0303 7456 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
07:44:51.0335 7456 NetBIOS - ok
07:44:51.0381 7456 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
07:44:51.0397 7456 netbt - ok
07:44:51.0459 7456 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
07:44:51.0475 7456 nfrd960 - ok
07:44:51.0506 7456 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
07:44:51.0537 7456 Npfs - ok
07:44:51.0600 7456 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
07:44:51.0631 7456 nsiproxy - ok
07:44:51.0693 7456 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
07:44:51.0756 7456 Ntfs - ok
07:44:51.0803 7456 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
07:44:51.0803 7456 ntrigdigi - ok
07:44:51.0834 7456 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
07:44:51.0865 7456 Null - ok
07:44:52.0099 7456 nvlddmkm (ff58c7a7da6116c1f71e883cb088d598) C:\Windows\system32\DRIVERS\nvlddmkm.sys
07:44:52.0349 7456 nvlddmkm - ok
07:44:52.0473 7456 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
07:44:52.0489 7456 nvraid - ok
07:44:52.0536 7456 nvstor (4a5fcab82d9bf6af8a023a66802fe9e9) C:\Windows\system32\drivers\nvstor.sys
07:44:52.0536 7456 nvstor - ok
07:44:52.0598 7456 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
07:44:52.0614 7456 nv_agp - ok
07:44:52.0676 7456 NwlnkFlt - ok
07:44:52.0707 7456 NwlnkFwd - ok
07:44:52.0817 7456 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
07:44:52.0817 7456 ohci1394 - ok
07:44:52.0863 7456 Parport (8a79fdf04a73428597e2caf9d0d67850) C:\Windows\system32\DRIVERS\parport.sys
07:44:52.0895 7456 Parport - ok
07:44:52.0973 7456 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
07:44:53.0004 7456 partmgr - ok
07:44:53.0066 7456 Parvdm (6c580025c81caf3ae9e3617c22cad00e) C:\Windows\system32\DRIVERS\parvdm.sys
07:44:53.0066 7456 Parvdm - ok
07:44:53.0097 7456 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
07:44:53.0113 7456 pci - ok
07:44:53.0144 7456 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
07:44:53.0144 7456 pciide - ok
07:44:53.0207 7456 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
07:44:53.0238 7456 pcmcia - ok
07:44:53.0316 7456 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\Windows\system32\Drivers\pcouffin.sys
07:44:53.0331 7456 pcouffin - ok
07:44:53.0472 7456 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
07:44:53.0534 7456 PEAUTH - ok
07:44:53.0643 7456 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
07:44:53.0675 7456 PptpMiniport - ok
07:44:53.0706 7456 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
07:44:53.0737 7456 Processor - ok
07:44:53.0815 7456 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
07:44:53.0815 7456 PSched - ok
07:44:53.0909 7456 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
07:44:53.0987 7456 ql2300 - ok
07:44:54.0049 7456 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
07:44:54.0080 7456 ql40xx - ok
07:44:54.0143 7456 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
07:44:54.0158 7456 QWAVEdrv - ok
07:44:54.0267 7456 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
07:44:54.0299 7456 RasAcd - ok
07:44:54.0330 7456 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
07:44:54.0361 7456 Rasl2tp - ok
07:44:54.0408 7456 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
07:44:54.0423 7456 RasPppoe - ok
07:44:54.0455 7456 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
07:44:54.0470 7456 RasSstp - ok
07:44:54.0501 7456 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
07:44:54.0548 7456 rdbss - ok
07:44:54.0579 7456 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
07:44:54.0611 7456 RDPCDD - ok
07:44:54.0657 7456 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
07:44:54.0689 7456 rdpdr - ok
07:44:54.0720 7456 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
07:44:54.0735 7456 RDPENCDD - ok
07:44:54.0782 7456 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
07:44:54.0813 7456 RDPWD - ok
07:44:54.0876 7456 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
07:44:54.0907 7456 rspndr - ok
07:44:54.0954 7456 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
07:44:54.0954 7456 sbp2port - ok
07:44:55.0016 7456 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
07:44:55.0032 7456 secdrv - ok
07:44:55.0079 7456 Serenum (ce9ec966638ef0b10b864ddedf62a099) C:\Windows\system32\DRIVERS\serenum.sys
07:44:55.0094 7456 Serenum - ok
07:44:55.0141 7456 Serial (6d663022db3e7058907784ae14b69898) C:\Windows\system32\DRIVERS\serial.sys
07:44:55.0172 7456 Serial - ok
07:44:55.0219 7456 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
07:44:55.0235 7456 sermouse - ok
07:44:55.0281 7456 sffdisk (103b79418da647736ee95645f305f68a) C:\Windows\system32\drivers\sffdisk.sys
07:44:55.0297 7456 sffdisk - ok
07:44:55.0328 7456 sffp_mmc (8fd08a310645fe872eeec6e08c6bf3ee) C:\Windows\system32\drivers\sffp_mmc.sys
07:44:55.0359 7456 sffp_mmc - ok
07:44:55.0391 7456 sffp_sd (9cfa05fcfcb7124e69cfc812b72f9614) C:\Windows\system32\drivers\sffp_sd.sys
07:44:55.0406 7456 sffp_sd - ok
07:44:55.0453 7456 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
07:44:55.0453 7456 sfloppy - ok
07:44:55.0515 7456 sisagp (d2a595d6eebeeaf4334f8e50efbc9931) C:\Windows\system32\drivers\sisagp.sys
07:44:55.0531 7456 sisagp - ok
07:44:55.0578 7456 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys
07:44:55.0593 7456 SiSRaid2 - ok
07:44:55.0625 7456 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys
07:44:55.0671 7456 SiSRaid4 - ok
07:44:55.0718 7456 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
07:44:55.0734 7456 Smb - ok
07:44:55.0796 7456 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
07:44:55.0796 7456 spldr - ok
07:44:55.0843 7456 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
07:44:55.0874 7456 srv - ok
07:44:55.0891 7456 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
07:44:55.0922 7456 srv2 - ok
07:44:55.0938 7456 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
07:44:55.0953 7456 srvnet - ok
07:44:55.0984 7456 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\Windows\system32\DRIVERS\ssmdrv.sys
07:44:56.0016 7456 ssmdrv - ok
07:44:56.0094 7456 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
07:44:56.0109 7456 swenum - ok
07:44:56.0187 7456 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
07:44:56.0218 7456 Symc8xx - ok
07:44:56.0250 7456 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
07:44:56.0265 7456 Sym_hi - ok
07:44:56.0281 7456 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
07:44:56.0312 7456 Sym_u3 - ok
07:44:56.0374 7456 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
07:44:56.0452 7456 Tcpip - ok
07:44:56.0484 7456 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
07:44:56.0499 7456 Tcpip6 - ok
07:44:56.0530 7456 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
07:44:56.0546 7456 tcpipreg - ok
07:44:56.0577 7456 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
07:44:56.0608 7456 TDPIPE - ok
07:44:56.0624 7456 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
07:44:56.0640 7456 TDTCP - ok
07:44:56.0686 7456 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
07:44:56.0686 7456 tdx - ok
07:44:56.0718 7456 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
07:44:56.0733 7456 TermDD - ok
07:44:56.0780 7456 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
07:44:56.0796 7456 tssecsrv - ok
07:44:56.0842 7456 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys
07:44:56.0874 7456 TuneUpUtilitiesDrv - ok
07:44:56.0936 7456 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
07:44:56.0952 7456 tunmp - ok
07:44:56.0983 7456 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
07:44:57.0014 7456 tunnel - ok
07:44:57.0045 7456 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys
07:44:57.0045 7456 uagp35 - ok
07:44:57.0123 7456 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
07:44:57.0154 7456 udfs - ok
07:44:57.0217 7456 uliagpkx (75e6890ebfce0841d3291b02e7a8bdb0) C:\Windows\system32\drivers\uliagpkx.sys
07:44:57.0264 7456 uliagpkx - ok
07:44:57.0310 7456 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys
07:44:57.0357 7456 uliahci - ok
07:44:57.0388 7456 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
07:44:57.0420 7456 UlSata - ok
07:44:57.0451 7456 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
07:44:57.0466 7456 ulsata2 - ok
07:44:57.0498 7456 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
07:44:57.0529 7456 umbus - ok
07:44:57.0560 7456 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys
07:44:57.0576 7456 USBAAPL - ok
07:44:57.0607 7456 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
07:44:57.0607 7456 usbccgp - ok
07:44:57.0638 7456 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
07:44:57.0654 7456 usbcir - ok
07:44:57.0747 7456 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
07:44:57.0763 7456 usbehci - ok
07:44:57.0810 7456 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
07:44:57.0841 7456 usbhub - ok
07:44:57.0872 7456 usbohci (ce697fee0d479290d89bec80dfe793b7) C:\Windows\system32\DRIVERS\usbohci.sys
07:44:57.0888 7456 usbohci - ok
07:44:57.0934 7456 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
07:44:57.0934 7456 usbprint - ok
07:44:57.0966 7456 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys
07:44:57.0981 7456 usbscan - ok
07:44:58.0028 7456 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
07:44:58.0044 7456 USBSTOR - ok
07:44:58.0090 7456 usbuhci (325dbbacb8a36af9988ccf40eac228cc) C:\Windows\system32\DRIVERS\usbuhci.sys
07:44:58.0122 7456 usbuhci - ok
07:44:58.0184 7456 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys
07:44:58.0184 7456 vga - ok
07:44:58.0215 7456 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
07:44:58.0246 7456 VgaSave - ok
07:44:58.0309 7456 viaagp (045d9961e591cf0674a920b6ba3ba5cb) C:\Windows\system32\drivers\viaagp.sys
07:44:58.0340 7456 viaagp - ok
07:44:58.0371 7456 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys
07:44:58.0402 7456 ViaC7 - ok
07:44:58.0434 7456 viaide (fd2e3175fcada350c7ab4521dca187ec) C:\Windows\system32\drivers\viaide.sys
07:44:58.0449 7456 viaide - ok
07:44:58.0496 7456 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
07:44:58.0527 7456 volmgr - ok
07:44:58.0558 7456 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
07:44:58.0605 7456 volmgrx - ok
07:44:58.0636 7456 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
07:44:58.0668 7456 volsnap - ok
07:44:58.0699 7456 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys
07:44:58.0730 7456 vsmraid - ok
07:44:58.0777 7456 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
07:44:58.0792 7456 WacomPen - ok
07:44:58.0824 7456 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
07:44:58.0839 7456 Wanarp - ok
07:44:58.0870 7456 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
07:44:58.0870 7456 Wanarpv6 - ok
07:44:58.0902 7456 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys
07:44:58.0933 7456 Wd - ok
07:44:58.0995 7456 WDC_SAM (d6efaf429fd30c5df613d220e344cce7) C:\Windows\system32\DRIVERS\wdcsam.sys
07:44:58.0995 7456 WDC_SAM - ok
07:44:59.0042 7456 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
07:44:59.0073 7456 Wdf01000 - ok
07:44:59.0198 7456 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys
07:44:59.0198 7456 WmiAcpi - ok
07:44:59.0260 7456 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys
07:44:59.0292 7456 WpdUsb - ok
07:44:59.0323 7456 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
07:44:59.0354 7456 ws2ifsl - ok
07:44:59.0432 7456 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
07:44:59.0463 7456 WUDFRd - ok
07:44:59.0604 7456 yukonwlh (7d1f3b131d503ef43ee594b5a2b9b427) C:\Windows\system32\DRIVERS\yk60x86.sys
07:44:59.0682 7456 yukonwlh - ok
07:44:59.0728 7456 MBR (0x1B8) (04d4350ae5fb6fc2ad3e7c26b1323c68) \Device\Harddisk0\DR0
07:44:59.0744 7456 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - infected
07:44:59.0744 7456 \Device\Harddisk0\DR0 - detected Rootkit.Win32.TDSS.tdl4 (0)
07:44:59.0744 7456 Boot (0x1200) (6a4389a22389772bf630391366d6d23c) \Device\Harddisk0\DR0\Partition0
07:44:59.0744 7456 \Device\Harddisk0\DR0\Partition0 - ok
07:44:59.0775 7456 Boot (0x1200) (e5bcb4556c57ed7f47d24d5e76c6879f) \Device\Harddisk0\DR0\Partition1
07:44:59.0775 7456 \Device\Harddisk0\DR0\Partition1 - ok
07:44:59.0775 7456 ============================================================
07:44:59.0775 7456 Scan finished
07:44:59.0775 7456 ============================================================
07:44:59.0806 5304 Detected object count: 1
07:44:59.0806 5304 Actual detected object count: 1
07:45:57.0179 5304 \Device\Harddisk0\DR0\# - copied to quarantine
07:45:57.0181 5304 \Device\Harddisk0\DR0 - copied to quarantine
07:45:57.0188 5304 \Device\Harddisk0\DR0\TDLFS\cfg.ini - copied to quarantine
07:45:57.0191 5304 \Device\Harddisk0\DR0\TDLFS\mbr - copied to quarantine
07:45:57.0225 5304 \Device\Harddisk0\DR0\TDLFS\bckfg.tmp - copied to quarantine
07:45:57.0247 5304 \Device\Harddisk0\DR0\TDLFS\cmd.dll - copied to quarantine
07:45:57.0251 5304 \Device\Harddisk0\DR0\TDLFS\ldr16 - copied to quarantine
07:45:57.0256 5304 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine
07:45:57.0262 5304 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine
07:45:57.0299 5304 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine
07:45:57.0321 5304 \Device\Harddisk0\DR0\TDLFS\cmd64.dll - copied to quarantine
07:45:57.0382 5304 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine
07:45:57.0408 5304 \Device\Harddisk0\DR0\TDLFS\keywords - copied to quarantine
07:45:57.0437 5304 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - will be cured on reboot
07:45:57.0438 5304 \Device\Harddisk0\DR0 - ok
07:45:57.0486 5304 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - User select action: Cure
07:46:05.0323 6540 Deinitialize success
0
Réponse 2 / 12
barbelle333 Messages postés 10 Statut Membre
 
salut malekal_morte,
voici le rapport mbr:

aswMBR version 0.9.9.1649 Copyright(c) 2011 AVAST Software
Run date: 2012-03-03 08:09:20
-----------------------------
08:09:20.441 OS Version: Windows 6.0.6002 Service Pack 2
08:09:20.441 Number of processors: 2 586 0x4B02
08:09:20.441 ComputerName: FRANCE UserName: France
08:09:40.284 Initialize success
08:11:01.428 AVAST engine defs: 12030300
08:11:44.040 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000059
08:11:44.040 Disk 0 Vendor: ST332082 3.AA Size: 305245MB BusType: 8
08:11:44.072 Disk 0 MBR read successfully
08:11:44.072 Disk 0 MBR scan
08:11:44.103 Disk 0 Windows VISTA default MBR code
08:11:44.103 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 149997 MB offset 63
08:11:44.134 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 155246 MB offset 307195904
08:11:44.134 Disk 0 scanning sectors +625139712
08:11:44.243 Disk 0 scanning C:\Windows\system32\drivers
08:11:55.486 Service scanning
08:12:25.653 Modules scanning
08:12:35.746 Disk 0 trace - called modules:
08:12:35.778 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll storport.sys nvstor.sys tcpip.sys NETIO.SYS ndis.sys yk60x86.sys afd.sys
08:12:35.778 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a4daac8]
08:12:35.778 3 CLASSPNP.SYS[8bda58b3] -> nt!IofCallDriver -> [0x8964f8d0]
08:12:35.793 5 acpi.sys[86e116bc] -> nt!IofCallDriver -> \Device\00000059[0x8964d8a8]
08:12:36.370 AVAST engine scan C:\Windows
08:12:41.612 AVAST engine scan C:\Windows\system32
08:18:26.786 AVAST engine scan C:\Windows\system32\drivers
08:18:44.148 AVAST engine scan C:\Users\France
08:41:45.427 AVAST engine scan C:\ProgramData
08:44:21.396 Scan finished successfully
08:45:00.802 Disk 0 MBR has been saved successfully to "C:\Users\France\Documents\MBR.dat"
08:45:00.817 The log file has been saved successfully to "C:\Users\France\Documents\aswMBR.txt"


Merci beaucoup pour ton aide
0
Réponse 3 / 12
barbelle333 Messages postés 10 Statut Membre
 
Salut,
J'ai oublié de te dire que les redirection sont seulement avec fire foc et non explorer.
Et as tu lu aussi que je n'arrive pas a faire une mise a jour windows don j'ai l'erreur FFFFFFFE
Merci
0
Réponse 4 / 12
barbelle333 Messages postés 10 Statut Membre
 
Bonne nouvelle,
J'ai reussit a faire mes mises a jours de windows ,merci .
et j'utilise explorer plutot que firefox
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 12
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
fais OTL stp
0
Réponse 6 / 12
barbelle333 Messages postés 10 Statut Membre
 
ok....
0
Réponse 7 / 12
barbelle333 Messages postés 10 Statut Membre
 
voila le rapport OTL:

OTL logfile created on: 2012-03-03 09:53:22 - Run 1
OTL by OldTimer - Version 3.2.35.0 Folder = C:\Users\France\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000c0c | Country: Canada | Language: FRC | Date Format: yyyy-MM-dd

1,75 Gb Total Physical Memory | 0,89 Gb Available Physical Memory | 50,74% Memory free
3,74 Gb Paging File | 2,63 Gb Available in Paging File | 70,12% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 146,48 Gb Total Space | 21,37 Gb Free Space | 14,59% Space Free | Partition Type: NTFS
Drive D: | 188,78 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 151,61 Gb Total Space | 77,53 Gb Free Space | 51,14% Space Free | Partition Type: NTFS

Computer Name: FRANCE | User Name: France | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2012-03-03 09:51:52 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\France\Desktop\OTL.exe
PRC - [2012-02-09 08:13:28 | 001,220,928 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
PRC - [2012-02-09 08:13:22 | 001,529,152 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
PRC - [2011-12-15 15:08:01 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011-12-15 15:07:44 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2011-12-15 15:07:35 | 000,463,824 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
PRC - [2011-12-15 15:07:33 | 000,342,480 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
PRC - [2011-12-15 15:07:32 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011-12-15 15:07:32 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011-01-28 12:22:50 | 000,632,792 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2010-11-15 15:05:30 | 000,112,600 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
PRC - [2009-04-11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2010-03-15 10:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\rarext.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - [2012-02-09 08:13:22 | 001,529,152 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2012-02-09 08:13:18 | 000,028,992 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2011-12-15 15:07:44 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011-12-15 15:07:35 | 000,463,824 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2011-12-15 15:07:33 | 000,342,480 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2011-12-15 15:07:32 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011-01-28 12:22:50 | 000,632,792 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (MRESP50)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (MRENDIS5)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (MREMPR5)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (MREMP50)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (BTWUSB)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (btwhid)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (BTWDNDIS)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (BTDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (btaudio)
DRV - [2012-02-24 19:09:49 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2012-02-15 03:55:05 | 000,137,416 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011-12-15 15:08:01 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011-12-15 15:08:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011-11-08 21:25:24 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2010-06-17 14:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009-02-13 11:02:52 | 000,011,520 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wdcsam.sys -- (WDC_SAM)
DRV - [2008-07-08 14:55:56 | 000,121,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgmdmdm.sys -- (lgmdmdm)
DRV - [2008-07-08 14:55:56 | 000,114,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgmdmgmt.sys -- (lgmdmgmt) LG Mobile USB WMC Device Management Drivers (WDM)
DRV - [2008-07-08 14:55:56 | 000,111,232 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgmdobex.sys -- (lgmdobex)
DRV - [2008-07-08 14:55:56 | 000,089,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgmdbus.sys -- (lgmdbus) LG Mobile driver (WDM)
DRV - [2008-07-08 14:55:56 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgmdmdfl.sys -- (lgmdmdfl)
DRV - [2008-06-19 23:04:00 | 007,468,128 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}: "URL" = http://www1.search-results.com/web?l=dis&q=&o=APN10653&apn_dtid=%5EIME001%5EYY%5EFR&shad=s_0043&gct=ds&apn_ptnrs=%5EAG1&d=1-0&lang=en&atb=sysid%3D1%3Auid%3De9bce71abfb26d71%3Asrc%3Dieb%3Ao%3DAPN10653%3Ab%3DiMesh%3Atg%3D&p2=%5EAG1%5EIME001%5EYY%5EFR{searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = https://www.bing.com/?scope=web&mkt=fr-FR&FORM=WLETDF&pc=WLEM{searchTerms}&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://www.search.ask.com/?l=dis{searchTerms}&locale=fr_US&apn_ptnrs=L6&apn_dtid=YYYYYYKGCA&apn_uid=C710EA4B-C0E4-43A1-8E88-344BFB182888&apn_sauid=9C09AF9C-E6E5-4C8F-8BEA-2B663B252761
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A59}: "URL" = http://www1.search-results.com/web?l=dis&q=&o=APN10653&apn_dtid=%5EIME001%5EYY%5EFR&shad=s_0043&gct=ds&apn_ptnrs=%5EAG1&d=1-0&lang=en&atb=sysid%3D1%3Auid%3De9bce71abfb26d71%3Asrc%3Dieb%3Ao%3DAPN10653%3Ab%3DiMesh%3Atg%3D&p2=%5EAG1%5EIME001%5EYY%5EFR{searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2504091
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultthis.engineName: "Google Powered Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://www.google.ca/?gws_rd=ssl"
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:5.0.31.0
FF - prefs.js..extensions.enabledItems: Subscription@helper.com:2.9
FF - prefs.js..extensions.enabledItems: {000F1EA4-5E08-4564-A29B-29076F63A37A}:1.0.3.133
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10
FF - prefs.js..keyword.URL: "https://hp.mywebsearch.com/mywebsearch/index.html"


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: File not found
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-02-17 21:18:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-03 07:52:05 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\FireFox\Extensions\\Subscription@helper.com: C:\Program Files\SM\FF [2011-09-03 20:12:19 | 000,000,000 | ---D | M]

[2011-07-10 08:33:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\France\AppData\Roaming\mozilla\Extensions
[2009-10-15 17:28:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\France\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2012-02-17 21:18:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\France\AppData\Roaming\mozilla\Firefox\Profiles\aujlpjjx.default\extensions
[2011-09-03 20:12:50 | 000,000,000 | ---D | M] () -- C:\Users\France\AppData\Roaming\mozilla\Firefox\Profiles\aujlpjjx.default\extensions\{000F1EA4-5E08-4564-A29B-29076F63A37A}
[2011-09-03 20:12:50 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\France\AppData\Roaming\mozilla\Firefox\Profiles\aujlpjjx.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012-02-17 21:18:32 | 000,000,000 | ---D | M] (Vuze Remote Community Toolbar) -- C:\Users\France\AppData\Roaming\mozilla\Firefox\Profiles\aujlpjjx.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
[2011-09-03 20:12:50 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Users\France\AppData\Roaming\mozilla\Firefox\Profiles\aujlpjjx.default\extensions\battlefieldheroespatcher@ea.com
[2010-08-22 17:02:20 | 000,002,393 | ---- | M] () -- C:\Users\France\AppData\Roaming\Mozilla\Firefox\Profiles\aujlpjjx.default\searchplugins\askcom.xml
[2010-12-24 10:50:53 | 000,001,840 | ---- | M] () -- C:\Users\France\AppData\Roaming\Mozilla\Firefox\Profiles\aujlpjjx.default\searchplugins\bing.xml
[2010-12-24 10:50:55 | 000,000,911 | ---- | M] () -- C:\Users\France\AppData\Roaming\Mozilla\Firefox\Profiles\aujlpjjx.default\searchplugins\conduit.xml
[2010-09-02 03:09:28 | 000,002,486 | ---- | M] () -- C:\Users\France\AppData\Roaming\Mozilla\Firefox\Profiles\aujlpjjx.default\searchplugins\iMeshWebSearch.xml
[2010-10-25 05:57:36 | 000,010,017 | ---- | M] () -- C:\Users\France\AppData\Roaming\Mozilla\Firefox\Profiles\aujlpjjx.default\searchplugins\mywebsearch.xml
[2012-02-17 21:18:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2012-02-17 21:18:07 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-11-10 05:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012-02-17 21:18:04 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2012-02-17 21:18:04 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012-02-17 21:18:04 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2012-02-17 21:18:04 | 000,001,154 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2010-09-02 03:09:28 | 000,002,486 | -H-- | M] () -- C:\Program Files\mozilla firefox\searchplugins\iMeshWebSearch.xml
[2012-02-17 21:18:04 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2012-02-17 21:18:04 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

Hosts file not found
O2 - BHO: (PlaySushi) - {21608B66-026F-4DCB-9244-0DACA328DCED} - Reg Error: Value error. File not found
O2 - BHO: (MediaBar) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - Reg Error: Value error. File not found
O2 - BHO: (no name) - {597A9974-8CB0-4f41-B61F-ED065738A397} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (SignatureManagerBHO) - {C6CC9344-BC12-4EA7-9E37-46D61866C771} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (MediaBar) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (PC Tools)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Go to PlaySushi web site - {EBD24BD3-E272-4FA3-A8BA-C5D709757CAB} - Reg Error: Value error. File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{946CFF75-64F9-4B1F-A1DF-F78A6EE181C7}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img31.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img31.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-10-18 11:30:08 | 000,023,857 | ---- | M] () - C:\AutoColor.png -- [ NTFS ]
O32 - AutoRun File - [2006-10-18 14:52:20 | 000,000,157 | ---- | M] () - C:\AutoColorSel.png -- [ NTFS ]
O32 - AutoRun File - [2006-09-18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007-04-23 20:11:20 | 000,001,632 | ---- | M] () - C:\AutoFix.png -- [ NTFS ]
O32 - AutoRun File - [2011-09-04 13:33:35 | 000,004,150 | ---- | M] () - C:\autopsy_prank[1].jpg -- [ NTFS ]
O32 - AutoRun File - [2011-01-09 18:27:00 | 000,000,000 | ---D | M] - E:\Autodesk Maya 2010 X86 Full Pack[h33t][Dave3737] -- [ NTFS ]
O33 - MountPoints2\{0706b0a9-e147-11de-8421-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setupSNK.exe
O33 - MountPoints2\{41d5ceee-f3fd-11de-8f18-001921eab220}\Shell\AutoRun\command - "" = F:\setupSNK.exe
O33 - MountPoints2\{5ed86fb9-a7e1-11de-ac00-001921eab220}\Shell - "" = AutoRun
O33 - MountPoints2\{5ed86fb9-a7e1-11de-ac00-001921eab220}\Shell\AutoRun\command - "" = J:\EasySuite.exe
O33 - MountPoints2\{9d33f765-0ee9-11e0-bb96-001921eab220}\Shell - "" = AutoRun
O33 - MountPoints2\{9d33f765-0ee9-11e0-bb96-001921eab220}\Shell\AutoRun\command - "" = M:\LaunchU3.exe -a
O33 - MountPoints2\{cf5b2bb1-a7d7-11de-b6ef-001921eab220}\Shell - "" = AutoRun
O33 - MountPoints2\{cf5b2bb1-a7d7-11de-b6ef-001921eab220}\Shell\AutoRun\command - "" = J:\EasySuite.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKCU\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: UxTuneUp - C:\Windows\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

MsConfig - StartUpReg: [b]BellCanada_McciTrayApp[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 2

SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - Service
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm ()
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2012-03-03 09:51:51 | 000,585,216 | ---- | C] (OldTimer Tools) -- C:\Users\France\Desktop\OTL.exe
[2012-03-03 09:41:09 | 000,000,000 | ---D | C] -- C:\Users\France\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flying Model Simulator
[2012-03-03 09:41:06 | 000,000,000 | ---D | C] -- C:\Program Files\FMS
[2012-03-03 08:08:21 | 004,730,880 | ---- | C] (AVAST Software) -- C:\Users\France\Desktop\aswMBR.exe
[2012-03-03 07:45:56 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
[2012-02-29 12:47:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flying Model Simulator
[2012-02-24 19:09:49 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012-02-18 08:40:49 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2012-02-07 16:21:42 | 000,000,000 | ---D | C] -- C:\Users\France\AppData\Roaming\Malwarebytes
[2012-02-07 16:21:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012-02-07 09:15:24 | 000,000,000 | ---D | C] -- C:\Program Files\Emsisoft Anti-Malware
[2012-02-07 09:15:24 | 000,000,000 | ---D | C] -- C:\Users\France\Documents\Anti-Malware
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\France\Documents\*.tmp files -> C:\Users\France\Documents\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2012-03-03 09:51:52 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\France\Desktop\OTL.exe
[2012-03-03 09:41:09 | 000,000,732 | ---- | M] () -- C:\Users\France\Desktop\FMS.lnk
[2012-03-03 09:38:00 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-03-03 09:18:31 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-03-03 09:17:19 | 000,003,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-03-03 09:17:19 | 000,003,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-03-03 09:17:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-03-03 08:45:00 | 000,000,512 | ---- | M] () -- C:\Users\France\Documents\MBR.dat
[2012-03-03 08:08:29 | 004,730,880 | ---- | M] (AVAST Software) -- C:\Users\France\Desktop\aswMBR.exe
[2012-02-29 12:46:40 | 000,175,104 | ---- | M] () -- C:\Users\France\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-02-24 19:09:49 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2012-02-19 11:03:00 | 000,681,560 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2012-02-19 11:03:00 | 000,598,702 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-02-19 11:03:00 | 000,127,298 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2012-02-19 11:03:00 | 000,104,716 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-02-18 08:42:23 | 000,001,875 | ---- | M] () -- C:\Users\France\Desktop\TuneUp Utilities 2012.lnk
[2012-02-15 03:55:05 | 000,137,416 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2012-02-15 03:28:51 | 000,403,544 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012-02-15 03:10:19 | 000,000,129 | ---- | M] () -- C:\Windows\System32\MRT.INI
[2012-02-09 08:13:28 | 000,031,552 | ---- | M] (TuneUp Software) -- C:\Windows\System32\TURegOpt.exe
[2012-02-09 08:13:18 | 000,028,992 | ---- | M] (TuneUp Software) -- C:\Windows\System32\uxtuneup.dll
[2012-02-09 08:13:18 | 000,021,312 | ---- | M] (TuneUp Software) -- C:\Windows\System32\authuitu.dll
[2012-02-07 11:54:25 | 182,189,532 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012-02-04 21:13:04 | 000,099,484 | ---- | M] () -- C:\Users\France\Documents\classes affaires.odt
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\France\Documents\*.tmp files -> C:\Users\France\Documents\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2075-05-04 03:58:08 | 000,007,892 | ---- | C] () -- C:\splash.gif
[2012-03-03 09:41:09 | 000,000,732 | ---- | C] () -- C:\Users\France\Desktop\FMS.lnk
[2012-03-03 08:45:00 | 000,000,512 | ---- | C] () -- C:\Users\France\Documents\MBR.dat
[2012-02-18 08:42:23 | 000,001,875 | ---- | C] () -- C:\Users\France\Desktop\TuneUp Utilities 2012.lnk
[2012-02-07 11:54:25 | 182,189,532 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012-02-04 18:00:52 | 000,099,484 | ---- | C] () -- C:\Users\France\Documents\classes affaires.odt
[2011-11-04 19:38:59 | 000,000,049 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2011-11-02 17:07:53 | 000,000,001 | ---- | C] () -- C:\ProgramData\08UkM0oV.exe_.b
[2011-11-02 17:07:53 | 000,000,001 | ---- | C] () -- C:\ProgramData\08UkM0oV.exe.b
[2011-10-29 09:25:17 | 000,000,112 | ---- | C] () -- C:\ProgramData\e2Tx3qGV.dat
[2011-10-15 02:14:36 | 000,000,129 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2011-10-08 20:46:34 | 000,037,336 | ---- | C] () -- C:\Windows\System32\CleanMFT32.exe
[2011-09-03 16:07:38 | 000,001,140 | -HS- | C] () -- C:\ProgramData\kd6qmqgj1004gq13o6n53elvlk7hr265l15352v687hv
[2011-09-02 10:10:02 | 000,000,456 | -H-- | C] () -- C:\ProgramData\P1kAlMiG2Kb7Fz
[2011-08-26 21:06:35 | 000,013,060 | -HS- | C] () -- C:\Users\France\AppData\Local\4254957553
[2011-08-26 20:54:59 | 000,012,958 | -HS- | C] () -- C:\Users\France\AppData\Local\hu5kyylf3361cn45n1p52fyalc6cb678o83278v415fl
[2011-08-26 20:54:59 | 000,012,958 | -HS- | C] () -- C:\ProgramData\hu5kyylf3361cn45n1p52fyalc6cb678o83278v415fl
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\ProgramData\wfir.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\Users\France\AppData\Local\ugfn.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\Users\France\AppData\Local\raex.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\ProgramData\qbdg.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\ProgramData\obks.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\Users\France\AppData\Local\nbvw.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\Users\France\AppData\Local\mnpg.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | C] () -- C:\ProgramData\cccw.exe
[2011-02-21 05:43:36 | 000,138,056 | ---- | C] () -- C:\Users\France\AppData\Roaming\PnkBstrK.sys
[2011-01-09 20:17:24 | 000,158,795 | ---- | C] () -- C:\Windows\hpoins15.dat
[2011-01-09 20:17:24 | 000,001,039 | ---- | C] () -- C:\Windows\hpomdl15.dat
[2011-01-09 19:22:45 | 000,119,515 | ---- | C] () -- C:\Windows\hpqins00.dat
[2010-08-03 14:34:29 | 000,000,680 | ---- | C] () -- C:\Users\France\AppData\Local\d3d9caps.dat
[2010-06-23 22:28:07 | 000,000,088 | RHS- | C] () -- C:\ProgramData\7004D65125.sys
[2010-06-23 22:28:06 | 000,005,018 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2010-06-13 12:38:51 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010-06-12 13:50:51 | 000,000,067 | ---- | C] () -- C:\Windows\DVDRegionFree.INI

[color=#E56717]========== LOP Check ==========[/color]

[2011-08-20 19:38:16 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Alawar
[2012-01-08 18:01:09 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Azureus
[2011-12-30 15:39:36 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\BeachPartyCraze
[2011-10-05 19:07:42 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Bell
[2012-01-02 16:04:32 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Boolat Games
[2012-01-04 22:53:47 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Boomzap
[2009-12-09 11:45:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\cerasus.media
[2011-09-03 20:12:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\CopyTransPhoto
[2010-02-10 05:22:01 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Druide
[2012-01-01 17:57:54 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Elephant Games
[2011-12-30 21:51:11 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Floodlight Games
[2012-01-07 17:35:00 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\GameInvest
[2011-09-03 20:12:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\GetRightToGo
[2011-09-03 20:12:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\iCloner
[2010-07-08 17:14:20 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\IrfanView
[2010-03-07 21:58:41 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Jasc
[2012-01-01 12:36:33 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\LegacyInteractive
[2011-03-01 16:46:55 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\LG Electronics
[2009-12-13 17:27:16 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\MA
[2010-12-29 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\MusicNet
[2010-12-30 10:55:55 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\NCH Swift Sound
[2009-10-30 11:41:18 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\OpenOffice.org
[2012-01-04 17:54:14 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Orneon
[2011-12-30 16:32:11 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\PlayFirst
[2009-10-12 20:22:20 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Playrix Entertainment
[2011-10-08 20:57:07 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Registry Mechanic
[2009-11-26 18:40:54 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\SanDisk
[2012-01-03 17:26:10 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Specialbit
[2011-11-26 20:27:25 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\TuneUp Software
[2011-02-01 19:17:13 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Ubisoft
[2011-07-10 07:52:49 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Ulead Systems
[2012-01-01 17:53:39 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Urban Legends The Maze Strategy Guide
[2012-02-24 11:13:15 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\uTorrent
[2011-09-03 20:12:50 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\VampireSaga
[2011-04-17 18:27:59 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Vso
[2010-01-11 21:33:27 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\WindSolutions
[2011-10-11 17:00:59 | 000,000,256 | ---- | M] () -- C:\Windows\Tasks\RMSchedule.job
[2012-03-03 09:15:24 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-10-08 20:55:00 | 000,000,424 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{533F50F1-2860-4112-8BE7-5E993945708A}.job

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]

[color=#A23BEC]< %APPDATA%\*. >[/color]
[2009-11-27 14:19:35 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Adobe
[2009-11-08 09:03:46 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Ahead
[2011-08-20 19:38:16 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Alawar
[2011-11-04 16:25:04 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Apple Computer
[2012-01-03 16:51:29 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Avira
[2011-12-31 14:45:20 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\AVS4YOU
[2012-01-08 18:01:09 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Azureus
[2011-12-30 15:39:36 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\BeachPartyCraze
[2011-10-05 19:07:42 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Bell
[2012-01-02 16:04:32 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Boolat Games
[2012-01-04 22:53:47 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Boomzap
[2009-12-09 11:45:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\cerasus.media
[2011-09-03 20:12:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\CopyTransPhoto
[2011-11-26 19:55:23 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Corel
[2010-06-13 12:15:05 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\DivX
[2010-02-10 05:22:01 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Druide
[2011-09-03 20:12:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\dvdcss
[2012-01-01 17:57:54 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Elephant Games
[2011-12-30 21:51:11 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Floodlight Games
[2012-01-07 17:35:00 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\GameInvest
[2011-09-03 20:12:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\GetRightToGo
[2010-04-23 20:14:30 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\HP
[2011-07-10 07:37:39 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\HpUpdate
[2011-09-03 20:12:48 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\iCloner
[2009-09-17 20:38:58 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Identities
[2011-11-27 12:06:09 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\InstallShield
[2010-07-08 17:14:20 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\IrfanView
[2010-03-07 21:58:41 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Jasc
[2012-01-01 12:36:33 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\LegacyInteractive
[2011-03-01 16:46:55 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\LG Electronics
[2009-12-13 17:27:16 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\MA
[2009-10-07 17:50:41 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Macromedia
[2012-02-07 16:21:42 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Malwarebytes
[2006-11-02 07:37:34 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Media Center Programs
[2011-11-19 17:21:59 | 000,000,000 | --SD | M] -- C:\Users\France\AppData\Roaming\Microsoft
[2010-07-11 19:50:40 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Motive
[2009-09-17 21:29:32 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Mozilla
[2010-12-29 18:58:13 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\MusicNet
[2010-12-30 11:05:02 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\NCH Software
[2010-12-30 10:55:55 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\NCH Swift Sound
[2009-10-30 11:41:18 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\OpenOffice.org
[2012-01-04 17:54:14 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Orneon
[2011-12-30 16:32:11 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\PlayFirst
[2009-10-12 20:22:20 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Playrix Entertainment
[2011-10-08 20:57:07 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Registry Mechanic
[2009-11-26 18:40:54 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\SanDisk
[2012-01-03 17:26:10 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Specialbit
[2011-11-26 20:27:25 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\TuneUp Software
[2011-10-16 12:03:42 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\U3
[2011-02-01 19:17:13 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Ubisoft
[2011-07-10 07:52:49 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Ulead Systems
[2012-01-01 17:53:39 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Urban Legends The Maze Strategy Guide
[2012-02-24 11:13:15 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\uTorrent
[2011-09-03 20:12:50 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\VampireSaga
[2012-02-04 11:34:52 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\vlc
[2011-04-17 18:27:59 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\Vso
[2010-01-11 21:33:27 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\WindSolutions
[2010-04-25 12:31:04 | 000,000,000 | ---D | M] -- C:\Users\France\AppData\Roaming\WinRAR

[color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
[2009-10-10 08:48:14 | 000,087,608 | ---- | M] () -- C:\Users\France\AppData\Roaming\inst.exe
[2011-12-04 09:58:53 | 000,469,304 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\cdrecord.exe
[2011-12-04 09:58:54 | 000,451,544 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\dvdauthor070.exe
[2011-12-04 09:58:54 | 000,449,720 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\mkisofs.exe
[2011-12-04 09:58:55 | 000,349,632 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\mpeg2enc.exe
[2011-12-04 09:58:55 | 000,194,496 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\mplex.exe
[2011-12-04 09:58:55 | 000,173,504 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\p2y.exe
[2011-12-04 09:58:55 | 000,368,304 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\spumux070.exe
[2011-12-04 09:58:55 | 000,051,648 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\azburn_v\bin\vzspath.exe
[2010-12-23 20:33:59 | 000,310,208 | ---- | M] (Georgia Institute of Technology) -- C:\Users\France\AppData\Roaming\Azureus\plugins\mlab\ShaperProbeC.exe
[2011-12-04 09:58:39 | 007,288,256 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\vuzexcode\ffmpeg.exe
[2011-12-04 09:58:39 | 004,146,688 | ---- | M] () -- C:\Users\France\AppData\Roaming\Azureus\plugins\vuzexcode\mediainfo.exe
[2009-07-28 07:50:00 | 000,271,600 | ---- | M] (Radialpoint Inc.) -- C:\Users\France\AppData\Roaming\Bell\Internet Service Advisor\downloads\Bell-Spa2-Vaspos-Silent_v1001.29358.zip.dir\VasposProfileUpdater.exe
[2009-12-06 14:17:08 | 000,068,608 | ---- | M] (Radialpoint Inc.) -- C:\Users\France\AppData\Roaming\Bell\Internet Service Advisor\downloads\Bell-Spa3-RpsFulfillmentActivation2.23281.zip.dir\all\tools\RpsInstallerFinder.exe
[2011-01-14 15:37:34 | 000,216,064 | ---- | M] (Radialpoint Inc.) -- C:\Users\France\AppData\Roaming\Bell\Internet Service Advisor\downloads\BellVasDetectionScripts-v6-IE-R48-T20.18467.zip.dir\CampaignEmulator\CampaignEmulator.exe
[2010-07-11 19:12:06 | 135,335,648 | ---- | M] (Bell) -- C:\Users\France\AppData\Roaming\Bell\Sympatico Security Advisor\downloads\SuiteDeSecuriteInternetDeBell.41.exe.dir\SuiteDeSecuriteInternetDeBell.exe
[2012-01-05 11:18:21 | 008,111,264 | ---- | M] (Adobe Systems, Inc.) -- C:\Users\France\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
[2011-11-04 19:42:15 | 000,025,214 | R--- | M] () -- C:\Users\France\AppData\Roaming\Microsoft\Installer\{534803A0-780C-4011-AB72-DAAB0CB82FD6}\ARPPRODUCTICON.exe
[2011-11-04 19:42:15 | 000,065,536 | R--- | M] (InstallShield Software Corp.) -- C:\Users\France\AppData\Roaming\Microsoft\Installer\{534803A0-780C-4011-AB72-DAAB0CB82FD6}\NewShortcut1_42182C8BEB0E4AD58FA011E69FA4EA3C.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | M] () -- C:\Users\France\AppData\Roaming\Microsoft\Windows\Templates\swcs.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | M] () -- C:\Users\France\AppData\Roaming\Microsoft\Windows\Templates\thtf.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | M] () -- C:\Users\France\AppData\Roaming\Microsoft\Windows\Templates\tvpa.exe
[2011-08-26 20:54:55 | 000,000,000 | ---- | M] () -- C:\Users\France\AppData\Roaming\Microsoft\Windows\Templates\vwhp.exe
[2010-08-19 23:46:28 | 001,312,120 | ---- | M] (EA Digital Illusions CE AB) -- C:\Users\France\AppData\Roaming\Mozilla\Firefox\Profiles\aujlpjjx.default\extensions\battlefieldheroespatcher@ea.com\platform\WINNT_x86-msvc\plugins\BFHUpdater.exe
[2007-08-29 15:36:00 | 000,110,592 | ---- | M] () -- C:\Users\France\AppData\Roaming\NCH Software\Components\mp3el\mp3enc.exe
[2007-10-23 08:27:20 | 000,110,592 | ---- | M] () -- C:\Users\France\AppData\Roaming\U3\4323600CB8D1D869\cleanup.exe
[2008-05-02 09:41:48 | 003,493,888 | ---- | M] (SanDisk Corporation) -- C:\Users\France\AppData\Roaming\U3\4323600CB8D1D869\Launchpad Removal.exe
[2008-05-04 15:02:26 | 004,603,904 | ---- | M] () -- C:\Users\France\AppData\Roaming\U3\4323600CB8D1D869\LaunchPad.exe
[2007-10-23 08:44:48 | 000,054,584 | ---- | M] () -- C:\Users\France\AppData\Roaming\U3\4323600CB8D1D869\U3AccessGrant.exe
[2008-05-02 09:41:48 | 003,493,888 | ---- | M] (SanDisk Corporation) -- C:\Users\France\AppData\Roaming\U3\temp\Launchpad Removal.exe

[color=#A23BEC]< %temp%\.exe /s >[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2008-01-19 02:34:08 | 000,347,136 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\dxtmsft.dll
[2008-01-19 02:34:08 | 000,214,528 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\Windows\system32\dxtrans.dll

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
[2006-11-02 05:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006-11-02 05:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006-11-02 05:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006-11-02 05:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006-11-02 05:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s >[/color]

[color=#A23BEC]< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s >[/color]
"Debug" =
"" = mnmsrvc
"Kmode" = \SystemRoot\System32\win32k.sys
"Optional" = Posix [binary data]
"Posix" = %SystemRoot%\system32\psxss.exe
"Required" = DebugWindows [binary data]
"Windows" = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\CSRSS]
"CsrSrvSharedSectionBase" = 2137980928


[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2009-09-17 22:35:12 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2009-09-17 22:35:12 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2009-09-17 22:35:11 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009-09-17 23:13:13 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
[2009-09-17 23:13:13 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
[2009-04-11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe
[2009-04-11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2009-09-17 22:35:12 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2006-11-02 04:45:07 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe
[2008-01-19 02:33:10 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2008-01-19 02:33:37 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe
[2008-01-19 02:33:37 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe
[2006-11-02 04:45:57 | 000,095,744 | ---- | M] (Microsoft Corporation) MD5=D4385B03E8CCCEE6F0EE249F827C1F3E -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_2ebbf6d3076595ce\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2009-04-11 01:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009-04-11 01:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2006-11-02 04:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe
[2008-01-19 02:33:37 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

[color=#A23BEC]< nslookup www.google.fr /c >[/color]
Serveur : mymodem
Address: 192.168.2.1
Nom : www-cctld.l.google.com
Address: 74.125.226.184
Aliases: WWW.GOOGLE.FR

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 97 bytes -> C:\ProgramData\TEMP:2F141B68
@Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:870649A4
@Alternate Data Stream - 171 bytes -> C:\ProgramData\TEMP:D1B5B4F1
@Alternate Data Stream - 159 bytes -> C:\ProgramData\TEMP:1604D047
@Alternate Data Stream - 154 bytes -> C:\ProgramData\TEMP:08D8BB20
@Alternate Data
0
Réponse 8 / 12
barbelle333 Messages postés 10 Statut Membre
 
voila c'est fait!
Merci
0
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
donne le lien pjjoint.
0
barbelle333 Messages postés 10 Statut Membre
 
oups j'ai fait comme tu as dit mais j'ai fermé la fenetre du pjjoint
0
Réponse 9 / 12
barbelle333 Messages postés 10 Statut Membre
 
maintenant je fais quoi??
0
Réponse 10 / 12
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
Salut,

Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
Lire ce qui est écrit au niveau des suppressions/réparation (delete et cure), ne pas supprimer n'importe quoi.
Poste le rapport ici.

~~

Passe un coup d'aswmbr : https://forum.malekal.com/viewtopic.php?t=31619&start=
Télécharge le et mets le sur ton bureau.
Accepte l'installation des définitions virales d'Avast! et fais un scan.
Quand c'est terminé, fais save logs, ouvre le rapport et poste le ici.
Poste le rapport ici.

-1
Réponse 11 / 12
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
Regarde si tu as encore des redirections.

et :

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

* Lance OTL
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
/md5start
explorer.exe
winlogon.exe
wininit.exe
/md5stop
nslookup www.google.fr /c
CREATERESTOREPOINT
* Clique sur le bouton Quick Scan.
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent), donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.

-1
Réponse 12 / 12
Malekal_morte- Messages postés 184347 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 689
 
rapport traonqué faut utiliser pjjoint, comme cela est indiqué.
-1

Discussions similaires

Retrouver liens copiés sur le téléphone
SAMA -
Peterson -

3 réponses
GOOGLE avertissement de redirection
RebeccaLyli -
MPMP10 -

9 réponses
Copier un lien instagram
alaurore -
LEFEUVRE -

7 réponses
FIREFOX empêche la redirection automatique vers une autre pa
dede74000 -
bazfile -

5 réponses
Avertissement de redirection Google image
Gui² -
gthfgfd,rsjthdgs -

2 réponses