Sujet Précédent Sujet Suivant

Mémoire physique qui sature

Fermé
bibi 8002 Messages postés 362 Date d'inscription mardi 26 juillet 2005 Statut Membre Dernière intervention 24 septembre 2024 - 4 mai 2013 à 11:18
bibi 8002 Messages postés 362 Date d'inscription mardi 26 juillet 2005 Statut Membre Dernière intervention 24 septembre 2024 - 9 mai 2013 à 16:23
Salut,
Comme d'autres, j'ai ma mémoire physique qui sature, bloque l'ordi, monte à 97%, et j'ai même des fenêtres >Windows (Seven) qui viennent fermer des processus.
J'ai resté ma mémoire physique, passé Spybot, Ccleaner, j'ai Avast...
Comme le problème s'est souvent passé quand j'avais une fenêtre Explorer d'ouverte, j'ai pensé à la piste mkv (car ça se passait aussi quand j'essayais de maniupuler des mkv), j'ai donc changé le logiciel vidéo par défaut en VLC et changé l'affichage en liste (plutôt que miniature).
Le problème s'est poursuivi.
Je pense qu'Explorer est lié au problème car il est toujours ouvert quand il se passe qq chose ou alors, c'est en appuyant sur "démarrer" que ça bloque.
Que dire d'autre ?

Merci de votre aide.

J'ai fait un rapport GMER

GMER 2.1.19163 - http://www.gmer.net
Rootkit scan 2013-05-04 11:09:18
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950032 rev.0010 465,76GB
Running: w1cdo332.exe; Driver: C:\Users\BS\AppData\Local\Temp\pxldqpoc.sys


---- User code sections - GMER 2.1 ----

.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77323aae]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77327a86]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77351436]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7735146e]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77351766]}
.text C:\windows\system32\wininit.exe[500] C:\windows\system32\USER32.dll!UnhookWinEvent 0000000077358550 6 bytes {JMP QWORD [RIP-0x76fe851e]}
.text C:\windows\system32\wininit.exe[500] C:\windows\system32\USER32.dll!UnhookWindowsHookEx 000000007735d440 6 bytes {JMP QWORD [RIP-0x76fed396]}
.text C:\windows\system32\wininit.exe[500] C:\windows\system32\USER32.dll!SetWindowsHookExW 000000007735f874 6 bytes {JMP QWORD [RIP-0x76fef7f2]}
.text C:\windows\system32\wininit.exe[500] C:\windows\system32\USER32.dll!SetWinEventHook + 1 0000000077364d4d 5 bytes {JMP QWORD [RIP-0x76ff4d42]}
.text C:\windows\system32\wininit.exe[500] C:\windows\system32\USER32.dll!SetWindowsHookExA 0000000077378c20 6 bytes {JMP QWORD [RIP-0x77008bc6]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\wininit.exe[500] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77363aae]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77367a86]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77391436]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7739146e]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77391766]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\services.exe[556] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\services.exe[556] C:\windows\system32\USER32.dll!UnhookWinEvent 0000000077358550 6 bytes {JMP QWORD [RIP-0x7704851e]}
.text C:\windows\system32\services.exe[556] C:\windows\system32\USER32.dll!UnhookWindowsHookEx 000000007735d440 6 bytes {JMP QWORD [RIP-0x7704d396]}
.text C:\windows\system32\services.exe[556] C:\windows\system32\USER32.dll!SetWindowsHookExW 000000007735f874 6 bytes {JMP QWORD [RIP-0x7704f7f2]}
.text C:\windows\system32\services.exe[556] C:\windows\system32\USER32.dll!SetWinEventHook + 1 0000000077364d4d 5 bytes {JMP QWORD [RIP-0x77054d42]}
.text C:\windows\system32\services.exe[556] C:\windows\system32\USER32.dll!SetWindowsHookExA 0000000077378c20 6 bytes {JMP QWORD [RIP-0x77068bc6]}
.text C:\windows\system32\lsass.exe[580] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77303aae]}
.text C:\windows\system32\lsass.exe[580] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77307a86]}
.text C:\windows\system32\lsass.exe[580] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77331436]}
.text C:\windows\system32\lsass.exe[580] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7733146e]}
.text C:\windows\system32\lsass.exe[580] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77331766]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77313aae]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77317a86]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77341436]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7734146e]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77341766]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\lsm.exe[588] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77143aae]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77147a86]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77171436]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7717146e]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77171766]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\svchost.exe[688] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77283aae]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77287a86]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x772b1436]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x772b146e]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x772b1766]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\nvvsvc.exe[764] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\ntdll.dll!NtAllocateVirtualMemory 000000007764faa0 5 bytes JMP 0000000164d069e0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\ntdll.dll!NtFreeVirtualMemory 000000007764fb38 5 bytes JMP 0000000164d06b00
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory 0000000077650018 5 bytes JMP 0000000164d06c00
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\ntdll.dll!LdrLoadDll 000000007766c45a 5 bytes JMP 0000000164d06950
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\ntdll.dll!LdrUnloadDll 0000000077671217 5 bytes JMP 0000000164d069b0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!SetServiceObjectSecurity 0000000075735181 5 bytes JMP 0000000164d09d40
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigA 0000000075735254 5 bytes JMP 0000000164d07ae0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigW 00000000757353d5 5 bytes JMP 0000000164d07ed0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2A 00000000757354c2 5 bytes JMP 0000000164d08290
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2W 00000000757355e2 5 bytes JMP 0000000164d083c0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!CreateServiceA 000000007573567c 5 bytes JMP 0000000164d06e40
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!CreateServiceW 000000007573589f 5 bytes JMP 0000000164d072b0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\SysWOW64\sechost.dll!DeleteService 0000000075735a22 5 bytes JMP 0000000164d078e0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\syswow64\USER32.dll!SetWinEventHook 000000007576ee09 5 bytes JMP 0000000164d0b720
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\syswow64\USER32.dll!UnhookWinEvent 0000000075773982 5 bytes JMP 0000000164d0b8a0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\syswow64\USER32.dll!SetWindowsHookExW 0000000075777603 5 bytes JMP 0000000164d0bb30
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\syswow64\USER32.dll!SetWindowsHookExA 000000007577835c 5 bytes JMP 0000000164d0b9b0
.text C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe[792] C:\windows\syswow64\USER32.dll!UnhookWindowsHookEx 000000007578f52b 5 bytes JMP 0000000164d0bcb0
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77313aae]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77317a86]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77341436]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7734146e]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77341766]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\svchost.exe[836] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77163aae]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77167a86]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77191436]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7719146e]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77191766]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\System32\svchost.exe[900] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77213aae]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77217a86]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77241436]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7724146e]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77241766]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\System32\svchost.exe[952] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77353aae]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77357a86]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77381436]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7738146e]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77381766]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\svchost.exe[1004] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x771c3aae]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x771c7a86]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x771f1436]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x771f146e]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x771f1766]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\svchost.exe[120] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x772f3aae]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x772f7a86]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77321436]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7732146e]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77321766]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\system32\USER32.dll!UnhookWinEvent 0000000077358550 6 bytes {JMP QWORD [RIP-0x7717851e]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\system32\USER32.dll!UnhookWindowsHookEx 000000007735d440 6 bytes {JMP QWORD [RIP-0x7717d396]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\system32\USER32.dll!SetWindowsHookExW 000000007735f874 6 bytes {JMP QWORD [RIP-0x7717f7f2]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\system32\USER32.dll!SetWinEventHook + 1 0000000077364d4d 5 bytes {JMP QWORD [RIP-0x77184d42]}
.text C:\windows\system32\winlogon.exe[584] C:\windows\system32\USER32.dll!SetWindowsHookExA 0000000077378c20 6 bytes {JMP QWORD [RIP-0x77198bc6]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77283aae]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77287a86]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x772b1436]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x772b146e]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x772b1766]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\svchost.exe[1048] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77263aae]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77267a86]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77291436]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7729146e]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77291766]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\WLANExt.exe[1176] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\conhost.exe[1184] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77333aae]}
.text C:\windows\system32\conhost.exe[1184] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77337a86]}
.text C:\windows\system32\conhost.exe[1184] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77361436]}
.text C:\windows\system32\conhost.exe[1184] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7736146e]}
.text C:\windows\system32\conhost.exe[1184] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77361766]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77033aae]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77037a86]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77061436]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7706146e]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77061766]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe[1564] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77003aae]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77007a86]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x77031436]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x7703146e]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x77031766]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\nvvsvc.exe[1600] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x771b3aae]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x771b7a86]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x771e1436]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x771e146e]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x771e1766]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\windows\system32\svchost.exe[1644] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\ntdll.dll!NtAllocateVirtualMemory 000000007764faa0 5 bytes JMP 0000000164d069e0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\ntdll.dll!NtFreeVirtualMemory 000000007764fb38 5 bytes JMP 0000000164d06b00
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory 0000000077650018 5 bytes JMP 0000000164d06c00
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\ntdll.dll!LdrLoadDll 000000007766c45a 5 bytes JMP 0000000164d06950
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\ntdll.dll!LdrUnloadDll 0000000077671217 5 bytes JMP 0000000164d069b0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\syswow64\USER32.dll!SetWinEventHook 000000007576ee09 5 bytes JMP 0000000164d0b720
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\syswow64\USER32.dll!UnhookWinEvent 0000000075773982 5 bytes JMP 0000000164d0b8a0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\syswow64\USER32.dll!SetWindowsHookExW 0000000075777603 5 bytes JMP 0000000164d0bb30
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\syswow64\USER32.dll!SetWindowsHookExA 000000007577835c 5 bytes JMP 0000000164d0b9b0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\syswow64\USER32.dll!UnhookWindowsHookEx 000000007578f52b 5 bytes JMP 0000000164d0bcb0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!SetServiceObjectSecurity 0000000075735181 5 bytes JMP 0000000164d09d40
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigA 0000000075735254 5 bytes JMP 0000000164d07ae0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigW 00000000757353d5 5 bytes JMP 0000000164d07ed0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2A 00000000757354c2 5 bytes JMP 0000000164d08290
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2W 00000000757355e2 5 bytes JMP 0000000164d083c0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!CreateServiceA 000000007573567c 5 bytes JMP 0000000164d06e40
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!CreateServiceW 000000007573589f 5 bytes JMP 0000000164d072b0
.text C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1852] C:\windows\SysWOW64\sechost.dll!DeleteService 0000000075735a22 5 bytes JMP 0000000164d078e0
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\ntdll.dll!LdrUnloadDll 0000000077473ae0 6 bytes {JMP QWORD [RIP-0x77083aae]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\ntdll.dll!LdrLoadDll 0000000077477a90 6 bytes {JMP QWORD [RIP-0x77087a86]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\ntdll.dll!NtAllocateVirtualMemory 00000000774a1490 6 bytes {JMP QWORD [RIP-0x770b1436]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\ntdll.dll!NtFreeVirtualMemory 00000000774a14f0 6 bytes {JMP QWORD [RIP-0x770b146e]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\ntdll.dll!NtProtectVirtualMemory 00000000774a1810 6 bytes {JMP QWORD [RIP-0x770b1766]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!SetServiceObjectSecurity 000007fefd736e00 6 bytes {JMP QWORD [RIP-0x7ffe6cde]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigA 000007fefd736f2c 6 bytes {JMP QWORD [RIP-0x7ffe6eaa]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfigW 000007fefd737220 6 bytes {JMP QWORD [RIP-0x7ffe7176]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2A 000007fefd73739c 6 bytes {JMP QWORD [RIP-0x7ffe72ca]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!ChangeServiceConfig2W 000007fefd737538 6 bytes {JMP QWORD [RIP-0x7ffe743e]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!CreateServiceA 000007fefd7375e8 6 bytes {JMP QWORD [RIP-0x7ffe75de]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!CreateServiceW 000007fefd73790c 6 bytes {JMP QWORD [RIP-0x7ffe78da]}
.text C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe[1876] C:\windows\SYSTEM32\sechost.dll!DeleteService 000007fefd737ab4 6 bytes {JMP QWORD [RIP-0x7ffe7a5a]}
.text C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe[1932] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000756b1465 2 bytes [6B, 75]
.text C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe[1932] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000756b14bb 2 bytes [6B, 75]
.text ... * 2
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\ntdll.dll!NtAllocateVirtualMemory 000000007764faa0 5 bytes JMP 0000000164d069e0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\ntdll.dll!NtFreeVirtualMemory 000000007764fb38 5 bytes JMP 0000000164d06b00
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory 0000000077650018 5 bytes JMP 0000000164d06c00
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\ntdll.dll!LdrLoadDll 000000007766c45a 5 bytes JMP 0000000164d06950
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\ntdll.dll!LdrUnloadDll 0000000077671217 5 bytes JMP 0000000164d069b0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!SetServiceObjectSecurity 0000000075735181 5 bytes JMP 0000000164d09d40
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigA 0000000075735254 5 bytes JMP 0000000164d07ae0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigW 00000000757353d5 5 bytes JMP 0000000164d07ed0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2A 00000000757354c2 5 bytes JMP 0000000164d08290
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2W 00000000757355e2 5 bytes JMP 0000000164d083c0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!CreateServiceA 000000007573567c 5 bytes JMP 0000000164d06e40
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!CreateServiceW 000000007573589f 5 bytes JMP 0000000164d072b0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\SysWOW64\sechost.dll!DeleteService 0000000075735a22 5 bytes JMP 0000000164d078e0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\syswow64\USER32.dll!SetWinEventHook 000000007576ee09 5 bytes JMP 0000000164d0b720
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\syswow64\USER32.dll!UnhookWinEvent 0000000075773982 5 bytes JMP 0000000164d0b8a0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\syswow64\USER32.dll!SetWindowsHookExW 0000000075777603 5 bytes JMP 0000000164d0bb30
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\syswow64\USER32.dll!SetWindowsHookExA 000000007577835c 5 bytes JMP 0000000164d0b9b0
.text C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[1448] C:\windows\syswow64\USER32.dll!UnhookWindowsHookEx 000000007578f52b 5 bytes JMP 0000000164d0bcb0
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\ntdll.dll!NtAllocateVirtualMemory 000000007764faa0 5 bytes JMP 0000000164d069e0
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\ntdll.dll!NtFreeVirtualMemory 000000007764fb38 5 bytes JMP 0000000164d06b00
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory 0000000077650018 5 bytes JMP 0000000164d06c00
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\ntdll.dll!LdrLoadDll 000000007766c45a 5 bytes JMP 0000000164d06950
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\ntdll.dll!LdrUnloadDll 0000000077671217 5 bytes JMP 0000000164d069b0
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\sechost.dll!SetServiceObjectSecurity 0000000075735181 5 bytes JMP 0000000164d09d40
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigA 0000000075735254 5 bytes JMP 0000000164d07ae0
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfigW 00000000757353d5 5 bytes JMP 0000000164d07ed0
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2A 00000000757354c2 5 bytes JMP 0000000164d08290
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\sechost.dll!ChangeServiceConfig2W 00000000757355e2 5 bytes JMP 0000000164d083c0
.text C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[976] C:\windows\SysWOW64\sechost.dll!CreateServiceA 000000007573567c 5 bytes JMP 0000000164d06
A voir également:

9 réponses

Réponse 1 / 9
Moya
4 mai 2013 à 11:22
Salut
Essaye de passer un autre antivirus ... voir avec un live cd.
0
Réponse 2 / 9
Sugel Messages postés 4076 Date d'inscription jeudi 18 août 2011 Statut Membre Dernière intervention 19 juin 2017 725
4 mai 2013 à 11:22
Bonjour,
Ta configuration s'il te plait ?
Si elle sature, c'est peut-etre car tu n'en a pas assez, non ?
0
Réponse 3 / 9
Moya
4 mai 2013 à 11:25
http://www.commentcamarche.net/forum/affich-23801165-memoire-physique-sature-sans-raison
0
Réponse 4 / 9
antipolis a Messages postés 15609 Date d'inscription mercredi 5 novembre 2008 Statut Membre Dernière intervention 12 novembre 2014 2 859
4 mai 2013 à 11:27
Bonjour.

Si vous avez fait une analyse avec "GMER", c'est que vous soupçonnez la présence d'une infection virale.

Donc, en toute logique, vous auriez dû déposer votre sujet sur le forum "Virus-Sécurité".
Les experts en dévirussage sont là.

Bonne journée.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 9
bibi 8002 Messages postés 362 Date d'inscription mardi 26 juillet 2005 Statut Membre Dernière intervention 24 septembre 2024 38
4 mai 2013 à 12:42
Bonjour et merci pour vos réponses,
Non, j'ai passé Gmer parce que je l'ai trouvé sur un autre "post", de même que CCleaner.
a vrai dire, avant de poser ma question, j'ai parcouru les forums pendant 2 heures et tenté plusieurs choses.


@sugel : pas assez ? Je ne sais pas.
C'est possible, dans l'absolu, mais pourquoi en aurais-je eu assez jusqu'à la semaine dernière et soudainement, plus assez, sans avoir rien modifié ?
En plus, ce n'est pas comme si j'utilisais des trucs très lourds au moment où ça arrive.
Explorer, c'est simplement la base, non ? :)

@Moya : j'ai utilisé en plus un antivirus en ligne.
0
Sugel Messages postés 4076 Date d'inscription jeudi 18 août 2011 Statut Membre Dernière intervention 19 juin 2017 725
4 mai 2013 à 18:54
C'est vrai ^^
sinon, essaie de restaurer ton pC a une date anterieure, si rien ne marche.
Windows, sort bien souvent ce genre de co*******.
Par exemple, mon PC ne s'eteint pas completement, et j'ai pas de point de restauration anterieur -_-'.

Si seulement cet OS etait parfait ...
0
Réponse 6 / 9
bibi 8002 Messages postés 362 Date d'inscription mardi 26 juillet 2005 Statut Membre Dernière intervention 24 septembre 2024 38
4 mai 2013 à 12:43
------------------
System Information
------------------
Time of this report: 5/4/2013, 12:41:27
Machine name: Bibi-PC
Operating System: Windows 7 Édition Familiale Premium 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.130318-1533)
Language: French (Regional Setting: French)
System Manufacturer: LENOVO
System Model: 0679
BIOS: InsydeH2O Version 29CN17WW(V1.05)
Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz (4 CPUs), ~2.1GHz
Memory: 4096MB RAM
Available OS Memory: 3958MB RAM
Page File: 2231MB used, 5684MB available
Windows Dir: C:\windows
DirectX Version: DirectX 11
DX Setup Parameters: Not found
User DPI Setting: Using System DPI
System DPI Setting: 96 DPI (100 percent)
DWM DPI Scaling: Disabled
DxDiag Version: 6.01.7601.17514 32bit Unicode

------------
DxDiag Notes
------------
Display Tab 1: No problems found.
Sound Tab 1: No problems found.
Input Tab: No problems found.

--------------------
DirectX Debug Levels
--------------------
Direct3D: 0/4 (retail)
DirectDraw: 0/4 (retail)
DirectInput: 0/5 (retail)
DirectMusic: 0/5 (retail)
DirectPlay: 0/9 (retail)
DirectSound: 0/5 (retail)
DirectShow: 0/6 (retail)

---------------
Display Devices
---------------
Card name: NVIDIA GeForce 310M
Manufacturer: NVIDIA
Chip type: GeForce 310M
DAC type: Integrated RAMDAC
Device Key: Enum\PCI\VEN_10DE&DEV_0A75&SUBSYS_392D17AA&REV_A2
Display Memory: 2189 MB
Dedicated Memory: 466 MB
Shared Memory: 1723 MB
Current Mode: 1366 x 768 (32 bit) (60Hz)
Monitor Name: Moniteur Plug-and-Play générique
Monitor Model: LP156WH2-TLAA
Monitor Id: LGD0230
Native Mode: 1366 x 768(p) (59.973Hz)
Output Type: Internal
Driver Name: nvd3dumx.dll,nvwgf2umx.dll,nvwgf2umx.dll,nvd3dum,nvwgf2um,nvwgf2um
Driver File Version: 8.17.0012.8026 (English)
Driver Version: 8.17.12.8026
DDI Version: 10.1
Driver Model: WDDM 1.1
Driver Attributes: Final Retail
Driver Date/Size: 8/3/2011 13:50:00, 15064168 bytes
WHQL Logo'd: n/a
WHQL Date Stamp: n/a
Device Identifier: {D7B71E3E-4935-11CF-406B-21191CC2C535}
Vendor ID: 0x10DE
Device ID: 0x0A75
SubSys ID: 0x392D17AA
Revision ID: 0x00A2
Driver Strong Name: oem41.inf:NVIDIA_SetA_Devices.NTamd64.6.1:Section065:8.17.12.8026:pci\ven_10de&dev_0a75&subsys_392d17aa
Rank Of Driver: 00E60001
Video Accel: ModeMPEG2_A ModeMPEG2_C ModeVC1_C ModeWMV9_C
Deinterlace Caps: {6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(YUY2,YUY2) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(YUY2,YUY2) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(YUY2,YUY2) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(YUY2,YUY2) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_BOBVerticalStretch
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(UYVY,UYVY) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(UYVY,UYVY) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(UYVY,UYVY) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(UYVY,UYVY) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_BOBVerticalStretch
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(YV12,0x32315659) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(YV12,0x32315659) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(YV12,0x32315659) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(YV12,0x32315659) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_BOBVerticalStretch
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_PixelAdaptive
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(NV12,0x3231564e) Frames(Prev/Fwd/Back)=(0,0,0) Caps=VideoProcess_YUV2RGB VideoProcess_StretchX VideoProcess_StretchY DeinterlaceTech_BOBVerticalStretch
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(IMC1,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(IMC1,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC1,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(IMC1,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(IMC2,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(IMC2,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC2,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(IMC2,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(IMC3,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(IMC3,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC3,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(IMC3,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(IMC4,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(IMC4,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(IMC4,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(IMC4,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(S340,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(S340,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(S340,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(S340,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{6CB69578-7617-4637-91E5-1C02DB810285}: Format(In/Out)=(S342,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{F9F19DA5-3B09-4B2F-9D89-C64753E3EAAB}: Format(In/Out)=(S342,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{5A54A0C9-C7EC-4BD9-8EDE-F3C75DC4393B}: Format(In/Out)=(S342,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
{335AA36E-7884-43A4-9C91-7F87FAF3E37E}: Format(In/Out)=(S342,UNKNOWN) Frames(Prev/Fwd/Back)=(0,0,0) Caps=
D3D9 Overlay: Supported
DXVA-HD: Supported
DDraw Status: Enabled
D3D Status: Enabled
AGP Status: Enabled

-------------
Sound Devices
-------------
Description: Haut-parleurs (Conexant Cocoa II High Definition SmartAudio)
Default Sound Playback: Yes
Default Voice Playback: Yes
Hardware ID: HDAUDIO\FUNC_01&VEN_14F1&DEV_5069&SUBSYS_17AAC00B&REV_1003
Manufacturer ID: 1
Product ID: 100
Type: WDM
Driver Name: CHDRT64.sys
Driver Version: 4.107.0000.0000 (French)
Driver Attributes: Final Retail
WHQL Logo'd: n/a
Date and Size: 11/24/2009 08:21:26, 708608 bytes
Other Files:
Driver Provider: Conexant
HW Accel Level: Basic
Cap Flags: 0x0
Min/Max Sample Rate: 0, 0
Static/Strm HW Mix Bufs: 0, 0
Static/Strm HW 3D Bufs: 0, 0
HW Memory: 0
Voice Management: No
EAX(tm) 2.0 Listen/Src: No, No
I3DL2(tm) Listen/Src: No, No
Sensaura(tm) ZoomFX(tm): No

---------------------
Sound Capture Devices
---------------------
Description: Microphone (Conexant Cocoa II High Definition SmartAudio)
Default Sound Capture: Yes
Default Voice Capture: Yes
Driver Name: CHDRT64.sys
Driver Version: 4.107.0000.0000 (French)
Driver Attributes: Final Retail
Date and Size: 11/24/2009 08:21:26, 708608 bytes
Cap Flags: 0x0
Format Flags: 0x0

-------------------
DirectInput Devices
-------------------
Device Name: Souris
Attached: 1
Controller ID: n/a
Vendor/Product ID: n/a
FF Driver: n/a

Device Name: Clavier
Attached: 1
Controller ID: n/a
Vendor/Product ID: n/a
FF Driver: n/a

Device Name: Bluetooth Remote Control HID Device
Attached: 1
Controller ID: 0x0
Vendor/Product ID: 0xFFFE, 0xFFFE
FF Driver: n/a

Poll w/ Interrupt: No

-----------
USB Devices
-----------
+ Concentrateur USB racine
| Vendor/Product ID: 0x8086, 0x3B34
| Matching Device ID: usb\root_hub20
| Service: usbhub
|
+-+ Generic USB Hub
| | Vendor/Product ID: 0x8087, 0x0020
| | Location: Port_#0001.Hub_#0002
| | Matching Device ID: usb\class_09
| | Service: usbhub
| |
| +-+ USB Optical Mouse
| | | Vendor/Product ID: 0x046D, 0xC05A
| | | Location: Port_#0004.Hub_#0004
| | | Matching Device ID: usb\vid_046d&pid_c05a
| | | Lower Filters: LUsbFilt
| | | Service: HidUsb
| | |
| | +-+ HID-compliant Optical Mouse
| | | | Vendor/Product ID: 0x046D, 0xC05A
| | | | Matching Device ID: hid\vid_046d&pid_c05a
| | | | Upper Filters: LMouFilt
| | | | Lower Filters: LHidFilt
| | | | Service: mouhid

----------------
Gameport Devices
----------------

------------
PS/2 Devices
------------
+ Clavier standard PS/2
| Matching Device ID: *pnp0303
| Service: i8042prt
|
+ Pilote clavier de Terminal Server
| Matching Device ID: root\rdp_kbd
| Upper Filters: kbdclass
| Service: TermDD
|
+ ELAN PS/2 Port Smart-Pad
| Matching Device ID: *etd0600
| Upper Filters: ETD
| Service: i8042prt
|
+ Pilote souris de Terminal Server
| Matching Device ID: root\rdp_mou
| Upper Filters: mouclass
| Service: TermDD

------------------------
Disk & DVD/CD-ROM Drives
------------------------
Drive: C:
Free Space: 106.4 GB
Total Space: 431.9 GB
File System: NTFS
Model: ST9500325AS

Drive: D:
Free Space: 28.7 GB
Total Space: 29.7 GB
File System: NTFS
Model: ST9500325AS

Drive: F:
Model: MATSHITA DVD-RAM UJ890AS
Driver: c:\windows\system32\drivers\cdrom.sys, 6.01.7601.17514 (French), , 0 bytes

--------------
System Devices
--------------
Name: Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root Port 2 - 3B44
Device ID: PCI\VEN_8086&DEV_3B44&SUBSYS_38B117AA&REV_05\3&11583659&1&E1
Driver: n/a

Name: QPI Physical 0 - 2D11
Device ID: PCI\VEN_8086&DEV_2D11&SUBSYS_392B17AA&REV_02\3&4F11E61&0&11
Driver: n/a

Name: Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root Port 1 - 3B42
Device ID: PCI\VEN_8086&DEV_3B42&SUBSYS_38B017AA&REV_05\3&11583659&1&E0
Driver: n/a

Name: QPI Link 0 - 2D10
Device ID: PCI\VEN_8086&DEV_2D10&SUBSYS_392B17AA&REV_02\3&4F11E61&0&10
Driver: n/a

Name: Contrôleur audio haute définition
Device ID: PCI\VEN_10DE&DEV_0BE3&SUBSYS_392D17AA&REV_A1\4&333DD729&0&0108
Driver: n/a

Name: Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller - 3B3C
Device ID: PCI\VEN_8086&DEV_3B3C&SUBSYS_38AA17AA&REV_05\3&11583659&1&D0
Driver: n/a

Name: QuickPath Architecture System Address Decoder - 2D01
Device ID: PCI\VEN_8086&DEV_2D01&SUBSYS_392B17AA&REV_02\3&4F11E61&0&01
Driver: n/a

Name: NVIDIA GeForce 310M
Device ID: PCI\VEN_10DE&DEV_0A75&SUBSYS_392D17AA&REV_A2\4&333DD729&0&0008
Driver: n/a

Name: Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller - 3B34
Device ID: PCI\VEN_8086&DEV_3B34&SUBSYS_38B817AA&REV_05\3&11583659&1&E8
Driver: n/a

Name: QuickPath Architecture Generic Non-core Registers - 2C62
Device ID: PCI\VEN_8086&DEV_2C62&SUBSYS_392B17AA&REV_02\3&4F11E61&0&00
Driver: n/a

Name: Intel(R) Management Engine Interface
Device ID: PCI\VEN_8086&DEV_3B64&SUBSYS_38A517AA&REV_06\3&11583659&1&B0
Driver: n/a

Name: Intel(R) 5 Series/3400 Series Chipset Family SMBus Controller - 3B30
Device ID: PCI\VEN_8086&DEV_3B30&SUBSYS_38BF17AA&REV_05\3&11583659&1&FB
Driver: n/a

Name: Pont Intel(R) 82801 PCI - 2448
Device ID: PCI\VEN_8086&DEV_2448&SUBSYS_383F17AA&REV_A5\3&11583659&1&F0
Driver: n/a

Name: Contrôleur audio haute définition
Device ID: PCI\VEN_8086&DEV_3B56&SUBSYS_38AF17AA&REV_05\3&11583659&1&D8
Driver: n/a

Name: Intel(R) 5 Series 4 Port SATA AHCI Controller
Device ID: PCI\VEN_8086&DEV_3B29&SUBSYS_38C117AA&REV_05\3&11583659&1&FA
Driver: n/a

Name: Intel(R) processor PCI Express Root Port - 0045
Device ID: PCI\VEN_8086&DEV_0045&SUBSYS_391F17AA&REV_12\3&11583659&1&08
Driver: n/a

Name: Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root Port 5 - 3B4A
Device ID: PCI\VEN_8086&DEV_3B4A&SUBSYS_38B417AA&REV_05\3&11583659&1&E4
Driver: n/a

Name: Intel(R) HM55 Express Chipset LPC Interface Controller - 3B09
Device ID: PCI\VEN_8086&DEV_3B09&SUBSYS_38BE17AA&REV_05\3&11583659&1&F8
Driver: n/a

Name: Intel(R) processor DRAM Controller - 0044
Device ID: PCI\VEN_8086&DEV_0044&SUBSYS_391E17AA&REV_12\3&11583659&1&00
Driver: n/a

Name: Reserved - 2D13
Device ID: PCI\VEN_8086&DEV_2D13&SUBSYS_392B17AA&REV_02\3&4F11E61&0&13
Driver: n/a

Name: Intel(R) 5 Series/3400 Series Chipset Family PCI Express Root Port 3 - 3B46
Device ID: PCI\VEN_8086&DEV_3B46&SUBSYS_38B217AA&REV_05\3&11583659&1&E2
Driver: n/a

Name: Carte réseau Broadcom 802.11n
Device ID: PCI\VEN_14E4&DEV_4727&SUBSYS_051014E4&REV_01\4&1BB139FF&0&00E1
Driver: n/a

Name: Reserved - 2D12
Device ID: PCI\VEN_8086&DEV_2D12&SUBSYS_392B17AA&REV_02\3&4F11E61&0&12
Driver: n/a

------------------
DirectShow Filters
------------------

DirectShow Filters:
WMAudio Decoder DMO,0x00800800,1,1,WMADMOD.DLL,6.01.7601.17514
WMAPro over S/PDIF DMO,0x00600800,1,1,WMADMOD.DLL,6.01.7601.17514
WMSpeech Decoder DMO,0x00600800,1,1,WMSPDMOD.DLL,6.01.7601.17514
MP3 Decoder DMO,0x00600800,1,1,mp3dmod.dll,6.01.7600.16385
Mpeg4s Decoder DMO,0x00800001,1,1,mp4sdecd.dll,6.01.7600.16385
WMV Screen decoder DMO,0x00600800,1,1,wmvsdecd.dll,6.01.7601.17514
WMVideo Decoder DMO,0x00800001,1,1,wmvdecod.dll,6.01.7601.17514
Mpeg43 Decoder DMO,0x00800001,1,1,mp43decd.dll,6.01.7600.16385
Mpeg4 Decoder DMO,0x00800001,1,1,mpg4decd.dll,6.01.7600.16385
MPC - Video decoder,0x40000001,1,1,MPCVideoDec.ax,1.03.1249.0000
ffdshow Video Decoder,0xff800001,2,1,ffdshow.ax,1.01.4212.0000
Samsung MPEG-4 Splitter Filter,0x00800005,0,1,pxtrmp4s.dll,1.17.0010.0011
WMT VIH2 Fix,0x00200000,1,1,WLXVAFilt.dll,15.04.3555.0308
Record Queue,0x00200000,1,1,WLXVAFilt.dll,15.04.3555.0308
WMT Switch Filter,0x00200000,1,1,WLXVAFilt.dll,15.04.3555.0308
WMT Virtual Renderer,0x00200000,1,0,WLXVAFilt.dll,15.04.3555.0308
WMT DV Extract,0x00200000,1,1,WLXVAFilt.dll,15.04.3555.0308
WMT Virtual Source,0x00200000,0,1,WLXVAFilt.dll,15.04.3555.0308
WMT Sample Information Filter,0x00200000,1,1,WLXVAFilt.dll,15.04.3555.0308
CoreAVC Video Decoder,0x00600000,1,1,AVCDX.ax,0.00.0000.0004
CyberLink MPEG Video Encoder,0x00200000,1,1,P2GVidEnc.ax,6.00.0001.2226
Dirac Source,0x00600000,0,0,DiracSplitter.ax,1.00.0000.0000
MPC - Matroska Source,0x00600000,0,0,MatroskaSplitter.ax,1.05.0002.3236
ffdshow DXVA Video Decoder,0xff800002,2,1,ffdshow.ax,1.01.4212.0000
ffdshow raw video filter,0x00200000,2,1,ffdshow.ax,1.01.4212.0000
RealPlayer Video Filter,0x00200000,1,1,rdsf3260.dll,12.00.0001.0669
ffdshow Audio Decoder,0xff800001,1,1,ffdshow.ax,1.01.4212.0000
AVS Media Grabber 4,0x00200000,1,0,AVSMediaGrabber4.ax,1.00.0000.0043
CyberLink MP3/WAV Wrapper,0x00200000,1,1,P2GMP3Wrap.ax,3.07.0000.1314
Samsung H264 Decoder,0x00600000,1,1,pxtrvdf.dll,1.05.0003.0011
DV Muxer,0x00400000,0,0,qdv.dll,6.06.7601.17514
MPC - Mpeg Source (Gabest),0x00400000,0,0,MpegSplitter.ax,1.05.0002.3236
MPC - Matroska Splitter,0x00600000,1,1,MatroskaSplitter.ax,1.05.0002.3236
CyberLink AudioCD Filter,0x00200000,0,1,P2GAudioCD.ax,5.00.0000.0912
Color Space Converter,0x00400001,1,1,quartz.dll,6.06.7601.17713
LAV Splitter,0x00400001,1,1,LAVSplitter.ax,0.50.0001.0000
WM ASF Reader,0x00400000,0,0,qasf.dll,12.00.7601.17514
Screen Capture filter,0x00200000,0,1,wmpsrcwp.dll,12.00.7601.17514
AVI Splitter,0x00600000,1,1,quartz.dll,6.06.7601.17713
VGA 16 Color Ditherer,0x00400000,1,1,quartz.dll,6.06.7601.17713
SBE2MediaTypeProfile,0x00200000,0,0,sbe.dll,6.06.7601.17528
RadLight Ogg Splitter,0x00800101,1,1,RLOgg.ax,1.00.0000.0002
CyberLink Editing Service 3.0 (Source),0x00200000,0,2,P2GEdtKrn.dll,3.00.0000.2911
Microsoft DTV-DVD Video Decoder,0x005fffff,2,4,msmpeg2vdec.dll,12.00.9200.16426
RadLight Vorbis Decoder,0x00800001,1,1,RLVorbisDec.ax,1.00.0000.0002
RealVideo Decoder,0x00600000,1,1,RealMediaSplitter.ax,1.00.0001.0002
AC3 Parser Filter,0x00600000,1,1,mpg2splt.ax,6.06.7601.17528
DivX AAC Decoder,0x00800000,1,1,daac.ax,8.08.0000.41966
StreamBufferSink,0x00200000,0,0,sbe.dll,6.06.7601.17528
MJPEG Decompressor,0x00600000,1,1,quartz.dll,6.06.7601.17713
MPEG-I Stream Splitter,0x00600000,1,2,quartz.dll,6.06.7601.17713
SAMI (CC) Parser,0x00400000,1,1,quartz.dll,6.06.7601.17713
P2G Video Decoder,0x00200000,2,3,P2GVSD.ax,6.00.0000.2310
VBI Codec,0x00600000,1,4,VBICodec.ax,6.06.7601.17514
MPEG-2 Splitter,0x005fffff,1,0,mpg2splt.ax,6.06.7601.17528
AAC Parser,0x00400000,1,1,aac_parser.ax,1.01.0000.0000
Samsung MP4 Muxer Filter,0x00200000,1,1,ssmp4mux.ax,
MPC - MP4 Source,0x00600000,0,0,MP4Splitter.ax,1.05.0002.3236
Closed Captions Analysis Filter,0x00200000,2,5,cca.dll,6.06.7601.17514
SBE2FileScan,0x00200000,0,0,sbe.dll,6.06.7601.17528
Microsoft MPEG-2 Video Encoder,0x00200000,1,1,msmpeg2enc.dll,6.01.7601.17514
MPC - FLV Splitter (Gabest),0x00600000,1,1,FLVSplitter.ax,1.05.0002.3236
Internal Script Command Renderer,0x00800001,1,0,quartz.dll,6.06.7601.17713
CyberLink Video Regulator,0x00200000,1,1,P2GRGL.ax,2.00.0000.4305
AVS Video Out,0x00200000,0,1,AVSVideoOutFilter3.ax,1.00.0000.0248
P2G Audio Decoder,0x00200000,1,1,P2GAud.ax,6.01.0000.3601
MPEG Audio Decoder,0x03680001,1,1,quartz.dll,6.06.7601.17713
DV Splitter,0x00600000,1,2,qdv.dll,6.06.7601.17514
Video Mixing Renderer 9,0x00200000,1,0,quartz.dll,6.06.7601.17713
CyberLink Video Effect,0x00200000,1,1,P2GVidFx.ax,1.00.0000.3207
Haali Media Splitter,0x00800001,0,1,splitter.ax,1.11.0288.0000
Haali Media Splitter (AR),0x00400000,1,1,splitter.ax,1.11.0288.0000
Dirac Splitter,0x00600000,1,1,DiracSplitter.ax,1.00.0000.0000
Samsung AVI Muxer,0x00200000,2,0,SSAviMux.dll,1.00.0000.0000
Samsung MJPEG Decoder,0x00600000,1,1,pxtrvdf.dll,1.05.0003.0011
CyberLink Audio Noise Reduction,0x00200000,1,1,P2GAuNRWrapper.ax,2.00.0000.1805
Microsoft MPEG-2 Encoder,0x00200000,2,1,msmpeg2enc.dll,6.01.7601.17514
CyberLink Load Image Filter,0x00200000,0,1,CLImage.ax,3.00.0000.2307
MPC - MP4 Splitter,0x00600000,1,1,MP4Splitter.ax,1.05.0002.3236
CyberLink MPEG-2 Splitter,0x00200000,1,2,P2Gm2spliter.ax,2.04.0000.2301
Samsung MJPEG Encoder,0x00200000,1,1,SSMJpgEn.dll,1.00.0000.0002
CyberLink Audio VolumeBooster,0x00200000,1,1,P2GVB.ax,1.00.0000.1008
File Source (Monkey Audio),0x00400000,0,1,MonkeySource.ax,
RadLight OptimFROG DirectShow Filter,0x00600000,0,1,RLOFRDec.ax,1.00.0000.0001
ACM Wrapper,0x00600000,1,1,quartz.dll,6.06.7601.17713
CoreAAC Audio Decoder,0x00800000,1,1,CoreAAC.ax,1.02.0000.0575
madFlac Decoder,0x00600000,1,1,madFlac.ax,1.10.0000.0000
Video Renderer,0x00800001,1,0,quartz.dll,6.06.7601.17713
MPEG-2 Video Stream Analyzer,0x00200000,0,0,sbe.dll,6.06.7601.17528
Cyberlink Dump Dispatch Filter,0x00200000,1,0,P2GDumpDispatch.ax,1.02.0001.2412
Line 21 Decoder,0x00600000,1,1,qdvd.dll,6.06.7601.17713
Video Port Manager,0x00600000,2,1,quartz.dll,6.06.7601.17713
DivX H.264 Decoder,0x00800000,1,1,DivXDecH264.ax,9.00.0001.0021
Video Renderer,0x00400000,1,0,quartz.dll,6.06.7601.17713
DivX Demux Filter,0x00800002,0,1,DirectShowDemuxFilter.dll,1.00.0003.0111
CyberLink Audio Resampler,0x00200000,1,1,P2GAuRsmpl.ax,2.00.0000.1318
Haali Video Renderer,0x00200000,1,0,dxr.dll,
RealMedia Source,0x00600000,0,0,RealMediaSplitter.ax,1.00.0001.0002
File Writer,0x00200000,1,0,WLXVAFilt.dll,15.04.3555.0308
DivX Decoder Filter,0x00800000,1,1,DivXDec.ax,7.03.0000.0048
VPS Decoder,0x00200000,0,0,WSTPager.ax,6.06.7601.17514
WM ASF Writer,0x00400000,0,0,qasf.dll,12.00.7601.17514
FLV Video Decoder,0x00600000,1,1,flvDX.dll,1.00.0000.0001
CyberLink MPEG-1 Splitter,0x00200000,1,2,P2Gm1spliter.ax,2.04.0000.2301
DivX Demux Filter (Unrestricted Edition),0x00600000,0,1,DirectShowDemuxFilter.dll,1.00.0003.0111
VBI Surface Allocator,0x00600000,1,1,vbisurf.ax,6.01.7601.17514
File writer,0x00200000,1,0,qcap.dll,6.06.7601.17514
Samsung H264 Encoding Filter,0x00200000,1,1,pxtrvef.dll,1.04.0007.0139
iTV Data Sink,0x00600000,1,0,itvdata.dll,6.06.7601.17514
iTV Data Capture filter,0x00600000,1,1,itvdata.dll,6.06.7601.17514
Cyberlink File Reader (Async.),0x00200000,0,1,P2GReader.ax,3.00.0000.3016
CyberLink M2V Writer,0x00200000,1,0,P2GM2VWriter.ax,1.03.0000.2017
Haali Simple Media Splitter,0x00200000,0,1,splitter.ax,1.11.0288.0000
DirectVobSub,0x00200000,2,1,DVobSub.ax,2.00.0023.0000
Cyberlink Dump Filter,0x00200000,1,0,P2GDump.ax,3.00.0000.7122
RealAudio Decoder,0x00600000,1,1,RealMediaSplitter.ax,1.00.0001.0002
CyberLink Video Stabilizer,0x00200000,1,1,P2GVideoStabilizer.ax,1.00.0000.1521
Samsung AAC Decoding Filter,0x0060000a,1,1,pxtraacd.dll,1.00.0009.0001
MPC - Avi Splitter,0x00600001,1,1,AviSplitter.ax,1.03.1290.0000
DirectVobSub (auto-loading version),0x00800002,2,1,DVobSub.ax,2.00.0023.0000
SC Subtitle Filter,0x00200000,1,1,SCSubtitleFilter.ax,0.00.0000.0000
CyberLink PCM Wrapper,0x00200000,1,1,P2GPCMEnc.ax,1.01.0000.0321
Samsung AAC Encoder Filter,0x00200000,1,1,pxtraace.dll,1.02.0004.0007
DVD Navigator,0x00200000,0,3,qdvd.dll,6.06.7601.17713
Overlay Mixer2,0x00200000,1,1,qdvd.dll,6.06.7601.17713
Subtitle Source,0x00200000,0,1,DVobSub.ax,2.00.0023.0000
Haali Matroska Muxer,0x00200000,1,0,splitter.ax,1.11.0288.0000
RadLight Speex Decoder,0x00600000,1,1,RLSpeexDec.ax,1.00.0000.0000
AC3Filter,0x40000000,1,1,ac3filter.ax,1.03.0001.0000
AVI Draw,0x00600064,9,1,quartz.dll,6.06.7601.17713
RDP DShow Redirection Filter,0xffffffff,1,0,DShowRdpFilter.dll,
DC-Bass Source,0x00400000,0,1,DCBassSource.ax,1.03.0000.0000
Microsoft MPEG-2 Audio Encoder,0x00200000,1,1,msmpeg2enc.dll,6.01.7601.17514
WST Pager,0x00200000,1,1,WSTPager.ax,6.06.7601.17514
MPEG-2 Demultiplexer,0x00600000,1,1,mpg2splt.ax,6.06.7601.17528
DV Video Decoder,0x00800000,1,1,qdv.dll,6.06.7601.17514
RealPlayer Transcode Filter,0x00600000,0,0,rdsf3260.dll,12.00.0001.0669
TAK SourceFilter,0x00600000,0,1,TAKDSDecoder.ax,
ffdshow Audio Processor,0x00200000,1,1,ffdshow.ax,1.01.4212.0000
LAV Splitter Source,0x00400001,0,1,LAVSplitter.ax,0.50.0001.0000
SampleGrabber,0x00200000,1,1,qedit.dll,6.06.7601.17514
Null Renderer,0x00200000,1,0,qedit.dll,6.06.7601.17514
VP7 Decompressor,0x00800000,1,1,vp7dec.ax,7.00.0010.0000
madFlac Source,0x00600000,0,1,madFlac.ax,1.10.0000.0000
MPEG-2 Sections and Tables,0x005fffff,1,0,Mpeg2Data.ax,6.06.7601.17514
Microsoft AC3 Encoder,0x00200000,1,1,msac3enc.dll,6.01.7601.17514
MPC - FLV Source (Gabest),0x00600000,0,0,FLVSplitter.ax,1.05.0002.3236
StreamBufferSource,0x00200000,0,0,sbe.dll,6.06.7601.17528
CyberLink TimeStretch Filter (CES),0x00200000,1,1,P2Gauts.ax,1.00.0000.4024
Smart Tee,0x00200000,1,2,qcap.dll,6.06.7601.17514
Overlay Mixer,0x00200000,0,0,qdvd.dll,6.06.7601.17713
CyberLink TL MPEG Splitter,0x00200000,1,2,P2GTLMSplter.ax,3.02.0000.2219
MPC - Avi Source,0x00600001,0,0,AviSplitter.ax,1.03.1290.0000
RealPlayer Audio Filter,0x00200000,1,1,rdsf3260.dll,12.00.0001.0669
AVI Decompressor,0x00600000,1,1,quartz.dll,6.06.7601.17713
CyberLink MPEG Muxer,0x00200000,2,1,P2GMpgMux.ax,5.00.0000.2221
AVI/WAV File Source,0x00400000,0,2,quartz.dll,6.06.7601.17713
MPC - MPEG4 Video Splitter,0x00600000,1,1,MP4Splitter.ax,1.05.0002.3236
Wave Parser,0x00400000,1,1,quartz.dll,6.06.7601.17713
MIDI Parser,0x00400000,1,1,quartz.dll,6.06.7601.17713
Multi-file Parser,0x00400000,1,1,quartz.dll,6.06.7601.17713
File stream renderer,0x00400000,1,1,quartz.dll,6.06.7601.17713
ffdshow subtitles filter,0x00200000,2,1,ffdshow.ax,1.01.4212.0000
MPC - Mpeg Splitter (Gabest),0x00400001,1,1,MpegSplitter.ax,1.05.0002.3236
madVR,0x00200000,1,0,madVR.ax,0.82.0005.0000
Microsoft DTV-DVD Audio Decoder,0x005fffff,1,1,msmpeg2adec.dll,6.01.7140.0000
RealMedia Splitter,0x00600000,1,1,RealMediaSplitter.ax,1.00.0001.0002
StreamBufferSink2,0x00200000,0,0,sbe.dll,6.06.7601.17528
AVI Mux,0x00200000,1,0,qcap.dll,6.06.7601.17514
MPC - MPEG4 Video Source,0x00600000,0,0,MP4Splitter.ax,1.05.0002.3236
Line 21 Decoder 2,0x00600002,1,1,quartz.dll,6.06.7601.17713
File Source (Async.),0x00400000,0,1,quartz.dll,6.06.7601.17713
File Source (URL),0x00400000,0,1,quartz.dll,6.06.7601.17713
P2G Video Regulator,0x00200000,1,1,P2GResample.ax,2.05.0000.1818
LAV Audio Decoder,0x00800003,1,1,LAVAudio.ax,0.50.0001.0000
P2G Audio Encoder,0x00200000,2,0,P2GAudEnc.ax,2.00.0000.4815
RadLight Theora Decoder,0x00600000,1,1,RLTheoraDec.ax,1.00.0000.0003
LAV Video Decoder,0x00800003,1,1,LAVVideo.ax,0.50.0001.0000
Haali Video Sink,0x00200000,1,0,splitter.ax,1.11.0288.0000
AC3File,0x00600000,0,1,ac3file.ax,
Dirac Video Decoder,0x00400000,1,1,DiracSplitter.ax,1.00.0000.0000
Infinite Pin Tee Filter,0x00200000,1,1,qcap.dll,6.06.7601.17514
Enhanced Video Renderer,0x00200000,1,0,evr.dll,6.01.7601.17514
BDA MPEG2 Transport Information Filter,0x00200000,2,0,psisrndr.ax,6.06.7601.17669
MPEG Video Decoder,0x40000001,1,1,quartz.dll,6.06.7601.17713
CyberLink MPEG Decoder,0x00200000,2,3,P2GMVD.ax,5.00.0000.0929

WDM Streaming Tee/Splitter Devices:
Convertisseur en T/site-à-site,0x00200000,1,1,ksproxy.ax,6.01.7601.17514

Video Compressors:
WMVideo8 Encoder DMO,0x00600800,1,1,wmvxencd.dll,6.01.7600.16385
WMVideo9 Encoder DMO,0x00600800,1,1,wmvencod.dll,6.01.7600.16385
MSScreen 9 encoder DMO,0x00600800,1,1,wmvsencd.dll,6.01.7600.16385
DV Video Encoder,0x00200000,0,0,qdv.dll,6.06.7601.17514
ffdshow video encoder,0x00100000,1,1,ffdshow.ax,1.01.4212.0000
MJPEG Compressor,0x00200000,0,0,quartz.dll,6.06.7601.17713
Samsung H264 Encoding Filter,0x00100000,1,1,pxtrvef.dll,1.04.0007.0139
Codec Cinepak de Radius,0x00200000,1,1,qcap.dll,6.06.7601.17514
DivX 6.9.2 Codec (4 Logical CPUs),0x00200000,1,1,qcap.dll,6.06.7601.17514
ffdshow Video Codec,0x00200000,1,1,qcap.dll,6.06.7601.17514
Helix I420 YUV Codec,0x00200000,1,1,qcap.dll,6.06.7601.17514
Codec Intel IYUV,0x00200000,1,1,qcap.dll,6.06.7601.17514
Microsoft RLE,0x00200000,1,1,qcap.dll,6.06.7601.17514
Microsoft Vidéo 1,0x00200000,1,1,qcap.dll,6.06.7601.17514
XviD MPEG-4 Codec,0x00200000,1,1,qcap.dll,6.06.7601.17514
Helix YV12 YUV Codec,0x00200000,1,1,qcap.dll,6.06.7601.17514

Audio Compressors:
WM Speech Encoder DMO,0x00600800,1,1,WMSPDMOE.DLL,6.01.7600.16385
WMAudio Encoder DMO,0x00600800,1,1,WMADMOE.DLL,6.01.7600.16385
Samsung AAC Encoder Filter,0x00100000,1,1,pxtraace.dll,1.02.0004.0007
IMA ADPCM,0x00200000,1,1,quartz.dll,6.06.7601.17713
PCM,0x00200000,1,1,quartz.dll,6.06.7601.17713
Microsoft ADPCM,0x00200000,1,1,quartz.dll,6.06.7601.17713
GSM 6.10,0x00200000,1,1,quartz.dll,6.06.7601.17713
Messenger Audio Codec,0x00200000,1,1,quartz.dll,6.06.7601.17713
CCITT A-Law,0x00200000,1,1,quartz.dll,6.06.7601.17713
CCITT u-Law,0x00200000,1,1,quartz.dll,6.06.7601.17713
AC-3 ACM Codec,0x00200000,1,1,quartz.dll,6.06.7601.17713
MPEG Layer-3,0x00200000,1,1,quartz.dll,6.06.7601.17713

Audio Capture Sources:
Microphone (Conexant Cocoa II H,0x00200000,0,0,qcap.dll,6.06.7601.17514

PBDA CP Filters:
PBDA DTFilter,0x00600000,1,1,CPFilters.dll,6.06.7601.17528
PBDA ETFilter,0x00200000,0,0,CPFilters.dll,6.06.7601.17528
PBDA PTFilter,0x00200000,0,0,CPFilters.dll,6.06.7601.17528

Midi Renderers:
Default MidiOut Device,0x00800000,1,0,quartz.dll,6.06.7601.17713
Microsoft GS Wavetable Synth,0x00200000,1,0,quartz.dll,6.06.7601.17713

WDM Streaming Capture Devices:
Conexant HD Audio capture,0x00200000,1,1,ksproxy.ax,6.01.7601.17514
,0x00000000,0,0,,
CyberLink Webcam Splitter,0x00200000,0,1,ksproxy.ax,6.01.7601.17514
Lenovo EasyCamera,0x00200000,1,2,ksproxy.ax,6.01.7601.17514

WDM Streaming Rendering Devices:
,0x00000000,0,0,,
Conexant HD Audio output,0x00200000,1,1,ksproxy.ax,6.01.7601.17514

BDA Network Providers:
Microsoft ATSC Network Provider,0x00200000,0,1,MSDvbNP.ax,6.06.7601.17514
Microsoft DVBC Network Provider,0x00200000,0,1,MSDvbNP.ax,6.06.7601.17514
Microsoft DVBS Network Provider,0x00200000,0,1,MSDvbNP.ax,6.06.7601.17514
Microsoft DVBT Network Provider,0x00200000,0,1,MSDvbNP.ax,6.06.7601.17514
Microsoft Network Provider,0x00200000,0,1,MSNP.ax,6.06.7601.17514

Video Capture Sources:
CyberLink Webcam Splitter,0x00200000,0,1,ksproxy.ax,6.01.7601.17514
Lenovo EasyCamera,0x00200000,1,2,ksproxy.ax,6.01.7601.17514

Multi-Instance Capable VBI Codecs:
VBI Codec,0x00600000,1,4,VBICodec.ax,6.06.7601.17514

BDA Transport Information Renderers:
BDA MPEG2 Transport Information Filter,0x00600000,2,0,psisrndr.ax,6.06.7601.17669
MPEG-2 Sections and Tables,0x00600000,1,0,Mpeg2Data.ax,6.06.7601.17514

BDA CP/CA Filters:
Decrypt/Tag,0x00600000,1,1,EncDec.dll,6.06.7601.17708
Encrypt/Tag,0x00200000,0,0,EncDec.dll,6.06.7601.17708
PTFilter,0x00200000,0,0,EncDec.dll,6.06.7601.17708
XDS Codec,0x00200000,0,0,EncDec.dll,6.06.7601.17708

WDM Streaming Communication Transforms:
Convertisseur en T/site-à-site,0x00200000,1,1,ksproxy.ax,6.01.7601.17514

Audio Renderers:
Haut-parleurs (Conexant Cocoa I,0x00200000,1,0,quartz.dll,6.06.7601.17713
Default DirectSound Device,0x00800000,1,0,quartz.dll,6.06.7601.17713
Default WaveOut Device,0x00200000,1,0,quartz.dll,6.06.7601.17713
DirectSound: Haut-parleurs (Conexant Cocoa II High Definition SmartAudio),0x00200000,1,0,quartz.dll,6.06.7601.17713

---------------
EVR Power Information
---------------
Current Setting: {5C67A112-A4C9-483F-B4A7-1D473BECAFDC} (Quality)
Quality Flags: 2576
Enabled:
Force throttling
Allow half deinterlace
Allow scaling
Decode Power Usage: 100
Balanced Flags: 1424
Enabled:
Force throttling
Allow batching
Force half deinterlace
Force scaling
Decode Power Usage: 50
PowerFlags: 1424
Enabled:
Force throttling
Allow batching
Force half deinterlace
Force scaling
Decode Power Usage: 0
0
Réponse 7 / 9
Moya Léviathan Messages postés 89 Date d'inscription lundi 4 février 2013 Statut Membre Dernière intervention 4 mai 2013 34
4 mai 2013 à 19:18
à mon avis l'antivirus en ligne bof mais bon ... a ta place je dl un live cd antivirus (genre antivir gratuit) et je testerais comme ça ... sinon y'as des distri nunux qui font ça tres bien
0
Réponse 8 / 9
antipolis a Messages postés 15609 Date d'inscription mercredi 5 novembre 2008 Statut Membre Dernière intervention 12 novembre 2014 2 859
4 mai 2013 à 20:56
A mon avis, ce PC est blindé.

Et seuls les spécialistes du forum "Virus-Sécurité" pourront vous le nettoyer correctement.

SVP, ne faites pas un copier-coller des rapports "GMER" et autres dans vos messages, le sujet devient ingérable.
Déposez vos rapports dans https://www.cjoint.com/ et mettez simplement le lien généré dans le message.
0
Réponse 9 / 9
bibi 8002 Messages postés 362 Date d'inscription mardi 26 juillet 2005 Statut Membre Dernière intervention 24 septembre 2024 38
9 mai 2013 à 16:23
Salut,
Merci pour vos réponses.
Alors, Ccleaner semblait avoir nettoyé le problème, que je n'ai pas eu pendant une semaine.
TOutefois, je viens de toucher à des mkv (en utilisant avs video remaker) ainsi qu'à un flv que j'ai essayer de convertir avec se même programme. C'est à ce moment-là que AVS a bugué et que le système s'est mis à ralentir.
Je pense que c'est donc lié à mkv...
Mais je ne vois pas comment résoudre.

Merci.
0

Discussions similaires

combien d'espace memoire occupe un entier ...
diddy_19 -
kamla -

7 réponses
Mémoire "validée" (ram)
dadodasyra -
Malekal_morte- -

8 réponses
Memoire video dedié 128 MB
Guervyl -
Guervyl -

4 réponses
Mettre un clavier physique en Azerty
marcm_54 -
jeannets -

6 réponses