Message d'ereur fservice .exe non trouvable

Salut

c'est une saleté !

soit tu es infecté, soit c'est le reste d'une bébétte ...

Télécharge ceci :

lien : hijackthis
démo : http://pageperso.aol.fr/balltrap34/demohijack.htm
Choisis l'option "do a scan and a logfile", il va te générer un rapport, copie et colle sur le forum.

++

Bonjour,
cest a dire tous simplement il y a un fichier system qui manque sur tn ordi, pour eviter est anomalie formater tn ordi

voila mon hijack this
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:47:58, on 29/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msvs.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKLM\..\Policies\Explorer\Run: [DirectX For Microsoft® Windows] C:\WINDOWS\system32\fservice.exe
O4 - HKUS\S-1-5-21-448539723-1123561945-682003330-500\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background (User '?')
O4 - HKUS\S-1-5-21-448539723-1123561945-682003330-500\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot (User '?')
O4 - HKUS\S-1-5-21-448539723-1123561945-682003330-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-448539723-1123561945-682003330-500\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (User '?')
O4 - HKUS\S-1-5-21-448539723-1123561945-682003330-500\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray (User '?')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe

ok, fais ce qui est indiqué ici stp :

virus methode preliminaire de desinfection version fr

++

Logfile of HijackThis v1.99.1
Scan saved at 18:28:27, on 26/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\FSC\Wireless Utility\WirelessSelector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\eMule\emule.exe
C:\hijack\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\fservice.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [TouchPadHotKey] C:\Program Files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: WirelessSelector.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r (file missing)
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000003d

Kernel Drivers (total 137):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x80707000 \WINDOWS\system32\hal.dll
0xF7A07000 \WINDOWS\system32\KDCOM.DLL
0xF7917000 \WINDOWS\system32\BOOTVID.dll
0xF7313000 spwi.sys
0xF7A09000 \WINDOWS\System32\Drivers\WMILIB.SYS
0xF72FB000 \WINDOWS\System32\Drivers\SCSIPORT.SYS
0xF72CC000 ACPI.sys
0xF72BB000 pci.sys
0xF7507000 isapnp.sys
0xF7ACF000 pciide.sys
0xF7787000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xF7517000 MountMgr.sys
0xF729C000 ftdisk.sys
0xF7A0B000 dmload.sys
0xF7276000 dmio.sys
0xF778F000 PartMgr.sys
0xF7527000 VolSnap.sys
0xF725E000 atapi.sys
0xF7537000 disk.sys
0xF7547000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF723E000 fltMgr.sys
0xF722C000 sr.sys
0xF7215000 KSecDD.sys
0xF7188000 Ntfs.sys
0xF715B000 NDIS.sys
0xF7141000 Mup.sys
0xF70D5000 \SystemRoot\system32\DRIVERS\tunmp.sys
0xF6605000 \SystemRoot\system32\DRIVERS\igxpmp32.sys
0xF65F1000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xF65C9000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xF659E000 \SystemRoot\system32\DRIVERS\b57xp32.sys
0xF7897000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF657A000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF789F000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF7577000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xF78A7000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF78AF000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF6566000 \SystemRoot\system32\DRIVERS\parport.sys
0xF6555000 \SystemRoot\system32\DRIVERS\serial.sys
0xF70D1000 \SystemRoot\system32\DRIVERS\serenum.sys
0xF78B7000 \SystemRoot\system32\DRIVERS\fdc.sys
0xF7587000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF7597000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF75A7000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF61B7000 \SystemRoot\system32\DRIVERS\ks.sys
0xF75B7000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF70C5000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0xF7B08000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF7617000 \SystemRoot\system32\DRIVERS\HssDrv.sys
0xF7627000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF70BD000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF61A0000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF7637000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF7647000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF78BF000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF618F000 \SystemRoot\system32\DRIVERS\psched.sys
0xF7657000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF78C7000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF78CF000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF615F000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xF7667000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF7A4F000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF60D9000 \SystemRoot\system32\DRIVERS\update.sys
0xF6BBF000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF78D7000 \SystemRoot\system32\DRIVERS\flpydisk.sys
0xF7687000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xAA0FD000 \SystemRoot\system32\drivers\RtkHDAud.sys
0xAA0D9000 \SystemRoot\system32\drivers\portcls.sys
0xF76B7000 \SystemRoot\system32\drivers\drmk.sys
0xF76D7000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF7A5D000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF7A5F000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF7BC3000 \SystemRoot\System32\Drivers\Null.SYS
0xF78EF000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xF78F7000 \SystemRoot\System32\drivers\vga.sys
0xF7A61000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF7A63000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF78FF000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF7907000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF70E1000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xAA056000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xA9FFD000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xF76E7000 \SystemRoot\System32\Drivers\aswTdi.SYS
0xA9FD5000 \SystemRoot\system32\DRIVERS\netbt.sys
0xA9F9D000 \SystemRoot\system32\DRIVERS\tcpip6.sys
0xF790F000 \SystemRoot\System32\Drivers\aswRdr.SYS
0xA9F7B000 \SystemRoot\System32\drivers\afd.sys
0xF76F7000 \SystemRoot\system32\DRIVERS\netbios.sys
0xF779F000 \SystemRoot\system32\DRIVERS\ssmdrv.sys
0xA9F50000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xA9EB8000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xA9EA1000 \SystemRoot\system32\DRIVERS\idmtdi.sys
0xF7707000 \SystemRoot\System32\Drivers\Fips.SYS
0xA9E7A000 \SystemRoot\system32\DRIVERS\avipbb.sys
0xF77CF000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF7A67000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
0xA9E2F000 \SystemRoot\System32\Drivers\aswSP.SYS
0xA9DC2000 \SystemRoot\System32\Drivers\aswSnx.SYS
0xF77DF000 \SystemRoot\System32\Drivers\Aavmker4.SYS
0xF7737000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xAA0B1000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xF7747000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xF7757000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xAA09D000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xA9D5A000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF7A6F000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xAA099000 \SystemRoot\System32\drivers\Dxapi.sys
0xF77EF000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF7C3F000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF024000 \SystemRoot\System32\igxpgd32.dll
0xBF012000 \SystemRoot\System32\igxprd32.dll
0xBF04F000 \SystemRoot\System32\igxpdv32.DLL
0xBF1E7000 \SystemRoot\System32\igxpdx32.DLL
0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
0xA9C2B000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0xA9D76000 \SystemRoot\System32\Drivers\aswFsBlk.SYS
0xA9CFA000 \SystemRoot\system32\DRIVERS\fssfltr_tdi.sys
0xA9C66000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA9CEA000 \SystemRoot\system32\DRIVERS\rspndr.sys
0xA9A31000 \SystemRoot\System32\Drivers\aswMon2.SYS
0xA974C000 \SystemRoot\system32\drivers\wdmaud.sys
0xA9841000 \SystemRoot\system32\drivers\sysaudio.sys
0xF7AA3000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xA9633000 \SystemRoot\system32\DRIVERS\atksgt.sys
0xF7887000 \SystemRoot\system32\DRIVERS\lirsgt.sys
0xA9406000 \SystemRoot\system32\DRIVERS\srv.sys
0xF78E7000 \SystemRoot\system32\drivers\npf.sys
0xA92EE000 \??\C:\WINDOWS\system32\FsUsbExDisk.SYS
0xA8B87000 \SystemRoot\system32\DRIVERS\qcusbser.sys
0xF785F000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xF7877000 \SystemRoot\System32\Drivers\Modem.SYS
0xA8303000 \SystemRoot\system32\DRIVERS\asyncmac.sys
0xA7F7F000 \SystemRoot\system32\drivers\kmixer.sys
0x7C910000 \WINDOWS\system32\ntdll.dll

Processes (total 67):
0 System Idle Process
4 SYSTEM
752 C:\WINDOWS\system32\smss.exe
1248 csrss.exe
1272 C:\WINDOWS\system32\winlogon.exe
1364 C:\WINDOWS\system32\services.exe
1376 C:\WINDOWS\system32\lsass.exe
1588 C:\WINDOWS\system32\ati2evxx.exe
1604 C:\WINDOWS\system32\svchost.exe
1724 svchost.exe
1764 C:\WINDOWS\system32\svchost.exe
2040 C:\Program Files\AVAST Software\Avast\AvastSvc.exe
304 C:\WINDOWS\system32\ati2evxx.exe
972 C:\WINDOWS\explorer.exe
596 C:\WINDOWS\system32\spoolsv.exe
956 C:\Program Files\Avira\AntiVir Desktop\sched.exe
1844 C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
1800 C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
1932 C:\Program Files\Avira\AntiVir Desktop\avguard.exe
328 C:\Program Files\Fichiers communs\DeviceHelper\DeviceManager.exe
376 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
384 C:\Program Files\Fichiers communs\MAGIX Services\Database\bin\FABS.exe
536 C:\WINDOWS\system32\FsUsbExService.Exe
1512 C:\Program Files\Google\Update\GoogleUpdate.exe
820 C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
900 C:\Program Files\Hotspot Shield\bin\hsswd.exe
944 C:\Program Files\Java\jre6\bin\jqs.exe
1632 C:\Program Files\Mp3Tube Toolbar\Mp3TubeSvc.exe
816 C:\Program Files\CDBurnerXP\NMSAccessU.exe
1888 C:\Program Files\Mp3Tube Toolbar\Mp3TubeVideoToMp3.exe
2256 C:\WINDOWS\system32\PnkBstrB.exe
2272 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
2424 C:\WINDOWS\system32\svchost.exe
2592 C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
3916 C:\WINDOWS\system32\wbem\wmiapsrv.exe
2304 C:\WINDOWS\system32\LVCOMSX.EXE
2584 C:\Program Files\HSPA USB MODEM\ModemListener.exe
2604 C:\Program Files\AVAST Software\Avast\AvastUI.exe
2656 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
2768 C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
3416 C:\Program Files\HSPA USB MODEM\HSPA USB MODEM.exe
3884 C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
4024 C:\Program Files\SweetIM\Messenger\SweetIM.exe
2064 C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
436 C:\WINDOWS\system32\hkcmd.exe
2996 C:\WINDOWS\system32\igfxpers.exe
3316 C:\WINDOWS\system32\igfxsrvc.exe
3724 C:\WINDOWS\RTHDCPL.EXE
2480 C:\Program Files\WinMover\WinMover.exe
2884 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
3048 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
280 C:\Program Files\Internet Download Manager\IDMan.exe
3740 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe
3772 C:\Program Files\Internet Download Manager\IEMonitor.exe
1232 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
1224 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
4060 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
3656 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
3988 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
2836 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
608 C:\Program Files\VideoLAN\VLC\vlc.exe
2172 wmiprvse.exe
3168 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
2876 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
2408 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
2728 C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
3824 C:\Program Files\ZHPDiag\mbrcheck.exe