trojan win 32 bohdf Résolu

Question

Bonjour,
 lors que je faisait un scan avec mon spyboot et il a decouvert virtumonde et win 32 boh df,et puis jai reussi a me debarrasser de virtumonde en suivant la methode 1 sur ccm mais mon spybot detecte tjrs win 32boh df voila merci d avance

philae83 · Answer

bonsoir,

peut être que tu ne t'es pas débarrassé si bien que ça de virtumonde & co

on commence par ceci stp

* Télécharge  HijackThis  et poste le rapport stp
http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

* Lance un scan "do a system scan & save a logfile" puis copie colle le rapport généré ici

------

Tutorial
http://pchelpbordeaux.free.fr/tuto.html
Démo en image (merci balltrap)
demo hijackenregistrement http://perso.orange.fr/rginformatique/section%20virus/Hijenr.gif
http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

g · Answer

merci d avoir repondu, voici le rapport hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:27:52, on 08/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\Macrogaming\SweetIMBarForIE	oolbar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: {f6e88d12-9f2c-f3fa-a804-bcd2e3e980f8} - {8f089e3e-2dcb-408a-af3f-c2f921d88e6f} - C:\WINDOWS\system32\xklahexl.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE	oolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\PROGRA~1\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: McAfee Desktop Firewall Tray.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\__c004A092.dat
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

philae83 · Answer

re

plusieurs choses stp

* Télécharge SmitfraudFix de S!Ri, balltrap34 et moe31

http://siri.urz.free.fr/Fix/SmitfraudFix.exe

* Installe le à la racine de C
 
* double clic sur l'exe pour le décompresser et lancer le fix.
Utilisation ----- option 1 - Recherche :
* Double clique sur smitfraudfix.cmd 
* Sélectionne 1 pour créer un rapport des fichiers responsables de l'infection.
* Poste le rapport ici
process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

ET

* Télécharge VundoFix.exe (par Atribune) sur ton Bureau

http://www.atribune.org/ccount/click.php?id=4

 * Double-clique VundoFix.exe afin de le lancer

* Clique sur le bouton Scan for Vundo

* Lorsque le scan est complété, clique sur le bouton Remove Vundo

* Une invite te demandera si tu veux supprimer les fichiers, clique YES

* Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers

* Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

* Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

 
Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

g · Answer

j ai installerSmitfraudFix  mais je n arrive pa a faire la manip ke tu me demande,par contre jai reussi a installer  vundofix

philae83 · Answer

tu posteras le rapport de vundo

pour smitfraud qu'est-ce que tu n'arrives pas à faire ?

g · Answer

Installe le à la racine de C   ca veut ke je l enrengistre sur le disque c ?
et je ne sais pa ou double cliquer  sur exe je ne le vois pa

philae83 · Answer

tu l'installes dans C ensuite tu dois avoir l'exe. Tu double cliques dessus

philae83 · Answer

regarde ma capture d'écran

https://www.enregistrersous.com/

g · Answer

mais sur le mien ya pa marquer exe a la fin  ya marquer smitfraudfix sans exe

philae83 · Answer

c'est uniquement parce que les extensions ne sont pas affichées dans ton pc. Double clic dessus

g · Answer

ya 1 fenetre ki ses ouvert c windows systeme 32  cmd exe et ya marker  joedanger nest pa affiler avec  smitfraudfix
cet outil a ete creer par s!ri pour 1 utilisation gratuite
des dons seront accepter  pars!ri uniquement sur son site web
n importe ki  d autres essaye den tirer profit est impliquer dans 1 fraude 
appuyez sur 1 touche pour continuer

philae83 · Answer

appuie sur une touche pour continuer

g · Answer

g · Answer

pas mal ton proverbe :
* Si je ne réponds pas de suite, je ne vous ai pas oublié. Quand je commence un post, je termine

philae83 · Answer

tu vas afficher les extensions

démarrer

-poste de travail ou autre dossier

-menu outils

-options de dossier

-onglet affichage

puis- désactiver la case : Masquer les extensions des fichiers dont le type est connu

tu pourras voir où se trouve smitfraud cmd

g · Answer

Utilisation ----- option 1 - Recherche : 
la je tape 1 et je fais entrer ?

philae83 · Answer

re

oui

 * Sélectionne 1 pour créer un rapport des fichiers responsables de l'infection.
* Poste le rapport ici

g · Answer

voici le rapport  j espere ke c ca 
SmitFraudFix v2.258

Rapport fait à  0:41:33,42, 09/12/2007
Executé à partir de C:\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrateur\Bureau\VundoFix.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\iexplore.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\__c004A092.dat"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Carte Fast Ethernet compatible VIA - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.198.0.91
DNS Server Search Order: 212.198.2.51

HKLM\SYSTEM\CCS\Services\Tcpip\..\{E71B1F43-3901-44B4-9D2C-414A2EDDBAA4}: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS1\Services\Tcpip\..\{E71B1F43-3901-44B4-9D2C-414A2EDDBAA4}: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS2\Services\Tcpip\..\{E71B1F43-3901-44B4-9D2C-414A2EDDBAA4}: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.198.0.91 212.198.2.51


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

philae83 · Answer

oui c'est cela parfait, maintenant il y a une suite

et fait le en mode sans échec comme indiqué stp
note avant ce qu'il te faudra faire car tu n'auras pas accès à internet 

Utilisation ----- option 2 -Nettoyage :

* Redémarre l'ordinateur en mode sans échec
(tapoter F8 au boot pour obtenir le menu de démarrage ou http://service1.symantec.com/support/inter/tsgeninfointl.nsf/fr_docid/20020905112131924


* Double clique sur smitfraudfix.cmd


* Sélectionne 2 pour supprimer les fichiers responsables de l'infection.


A la question Voulez-vous nettoyer le registre ? répondre O (oui) afin de débloquer le fond d'écran et supprimer les clés de démarrage automatique de l'infection.

Le fix déterminera si le fichier wininet.dll est infecté.

A la question Corriger le fichier infecté ? répondre O (oui) pour remplacer le fichier corrompu.

* Redémarre en mode normal et poste le rapport ici

N.B.: Cette étape élimine les fichiers infectieux détectés à l'étape #1
Attention que l'option 2 de l'outil supprime le fond d'écran !

g · Answer

vundofix na rien trouver, c normal mon pc na a redemarrer?

g · Answer

voici ce ke jai pour vundofix
No infected files were found.


Beginning removal...

philae83 · Answer

je t'ai mis la suite pour smitfraud à faire

quant à vundofix, tu me posteras quand même le rapport même si il n'a rien trouvé, il est ici :
C:\vundofix.txt 

edit : on a posté en même temps. Passe à la suite donnée pour smitfraud stp

je pense qu'on continuera demain maintenant vu l'heure

g · Answer

Attention que l'option 2 de l'outil supprime le fond d'écran !   donc il faut pa kil supprime le fon d ecran?
ps : a kel heure sera tu disponible pour continuer?

philae83 · Answer

bonjour,

je serais là cet après midi
pour le fond d'écran, rien d'anormal, suit la procédure stp comme expliqué.

@ + tard

g · Answer

salut
j ai fai ce ke tu ma demander mais y mankai la question :Corriger le fichier infecté ? 
voici le rapport en esperant ne pa metre tromper merci
SmitFraudFix v2.258

Rapport fait à 16:35:24,81, 09/12/2007
Executé à partir de C:\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{E71B1F43-3901-44B4-9D2C-414A2EDDBAA4}: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS1\Services\Tcpip\..\{E71B1F43-3901-44B4-9D2C-414A2EDDBAA4}: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS2\Services\Tcpip\..\{E71B1F43-3901-44B4-9D2C-414A2EDDBAA4}: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.198.0.91 212.198.2.51
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.198.0.91 212.198.2.51


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

philae83 · Answer

bon

reposte un nouveau rapport hijackthis stp

g · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:37:31, on 09/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\WINDOWS\system32\Fmctrl.EXE
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\Macrogaming\SweetIMBarForIE	oolbar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: {f6e88d12-9f2c-f3fa-a804-bcd2e3e980f8} - {8f089e3e-2dcb-408a-af3f-c2f921d88e6f} - C:\WINDOWS\system32\xklahexl.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE	oolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\PROGRA~1\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: McAfee Desktop Firewall Tray.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\__c004A092.dat
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

philae83 · Answer

re

* Télécharge combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
IMPORTANT

*désactive ton antivirus, antispyware, et spybot (résident) durant l'utilisation de ComboFix . Merci. Tu réactives ensuite
puis

* Double clique combofix.exe.

* Tape sur la touche Y (Yes) pour démarrer le scan.

* Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

g · Answer

on fai comment pour desactiver le spyboot?

philae83 · Answer

clic droit sur le résident de spybot (dans ton systray à côté de l'horloge) puis quitter le résident

g · Answer

il ny es pa .

philae83 · Answer

le petit carré blanc et bleu avec le cadenas ne s'y trouve pas ?

g · Answer

non

philae83 · Answer

OK alors poursuit avec combo

g · Answer

ComboFix 07-12-09.1 - Administrateur 2007-12-09 18:10:46.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.212 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe * Created a new restore point . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\install\install.exe C:\WINDOWS\cookies.ini C:\WINDOWS\pack.epk C:\WINDOWS\system32\ahssvkmu.dll C:\WINDOWS\system32\bcgsqgvw.dll C:\WINDOWS\system32\bovpdhwc.dll C:\WINDOWS\system32\cyxpquch.dll C:\WINDOWS\system32\fwgbewvl.dll C:\WINDOWS\system32\lxxcmsct.dll C:\WINDOWS\system32 gdxpsxw.dll C:\WINDOWS\system32\ohdvdtsx.dll C:\WINDOWS\system32 meretfu.dll C:\WINDOWS\system32\stvyikaw.dll C:\WINDOWS\system32 xcmadpt.dll C:\WINDOWS\system32\uaeogqrr.dll C:\WINDOWS\system32\uqvbwbbp.dll C:\WINDOWS\system32\vmanyfxm.dll C:\WINDOWS\system32\xklahexl.dll . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-09 to 2007-12-09 )))))))))))))))))))))))))))))))))))) . 2007-12-09 00:42 . 2007-12-09 16:35 2,398 --a------ C:\WINDOWS\system32 mp.reg 2007-12-09 00:12 . 2007-12-09 16:36 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS sreg.dat 2007-12-07 23:37 . 2007-12-08 00:52 d-------- C:\WINDOWS\BDOSCAN8 2007-12-04 04:59 . 2007-12-04 04:59 794,580 ---hs---- C:\WINDOWS\system32\ofkjghcu.ini 2007-12-03 21:04 . 2007-12-04 04:59 794,520 ---hs---- C:\WINDOWS\system32\lyshugqj.ini 2007-12-03 03:51 . 2007-12-03 20:08 794,024 ---hs---- C:\WINDOWS\system32\inrpwsge.ini 2007-12-03 00:38 . 2007-12-03 01:39 793,844 ---hs---- C:\WINDOWS\system32\uelqtwyo.ini 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-12-02 22:44 . 2007-12-03 00:38 793,724 ---hs---- C:\WINDOWS\system32\mkgjvlar.ini 2007-12-02 05:18 . 2007-12-02 18:17 1,121,263 ---hs---- C:\WINDOWS\system32\hwfrlgaw.ini 2007-11-30 20:06 . 2007-11-30 20:06 1,140,360 ---hs---- C:\WINDOWS\system32 cjnhqih.tmp 2007-11-30 20:06 . 2007-11-30 20:06 1,140,300 ---hs---- C:\WINDOWS\system32 cjnhqih.ini 2007-11-30 19:56 . 2007-11-30 20:05 1,140,300 ---hs---- C:\WINDOWS\system32\qixikaci.ini 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft 2007-11-29 21:00 . 2007-11-30 19:56 1,369,856 ---hs---- C:\WINDOWS\system32 ymyohlc.ini 2007-11-28 20:09 . 2007-11-29 20:05 788,226 ---hs---- C:\WINDOWS\system32\civipaus.ini 2007-11-27 22:48 . 2007-11-28 19:57 784,494 ---hs---- C:\WINDOWS\system32\lvwxxfkc.ini 2007-11-25 23:31 . 2007-11-27 14:26 780,395 ---hs---- C:\WINDOWS\system32\pcekbgkq.ini 2007-11-25 03:00 . 2007-11-25 05:43 748,819 ---hs---- C:\WINDOWS\system32\lhnpcgcg.ini 2007-11-23 22:23 . 2007-11-25 01:44 748,639 ---hs---- C:\WINDOWS\system32\ibhuffol.ini 2007-11-23 21:20 . 2007-11-23 21:21 774,758 ---hs---- C:\WINDOWS\system32\geihitjh.ini 2007-11-22 18:44 . 2007-11-23 18:08 738,956 ---hs---- C:\WINDOWS\system32\vtqpjukh.ini 2007-11-22 18:32 . 2007-11-22 18:35 738,960 ---hs---- C:\WINDOWS\system32\pldlpqhn.ini 2007-11-22 18:25 . 2007-11-22 18:28 738,840 ---hs---- C:\WINDOWS\system32\mugfmsss.ini 2007-11-22 06:33 . 2007-11-22 18:22 414 ---hs---- C:\WINDOWS\system32\pfiuwhmc.ini 2007-11-20 21:06 . 2007-11-22 04:47 672,285 ---hs---- C:\WINDOWS\system32\kvtmmlkq.ini 2007-11-19 04:02 . 2007-11-20 21:04 672,045 ---hs---- C:\WINDOWS\system32 npgdyux.ini 2007-11-17 23:11 . 2007-11-19 02:31 671,745 ---hs---- C:\WINDOWS\system32\hnbqkqxo.ini 2007-11-16 21:54 . 2007-11-17 21:51 671,556 ---hs---- C:\WINDOWS\system32\pavfyffa.ini 2007-11-15 06:49 . 2007-11-16 21:25 671,196 ---hs---- C:\WINDOWS\system32\vhiirqet.ini 2007-11-15 01:38 . 2007-11-15 02:50 671,376 ---hs---- C:\WINDOWS\system32\yauxgwkf.ini 2007-11-13 22:45 . 2007-11-13 22:45 8,635 --a------ C:\WINDOWS\system32\jtomtfkb.dll 2007-11-13 22:43 . 2007-11-14 23:37 671,307 ---hs---- C:\WINDOWS\system32\sahyxwbq.ini 2007-11-12 20:22 . 2007-11-12 20:23 8,540 --a------ C:\WINDOWS\system32\segsthve.dll 2007-11-12 02:20 . 2007-11-12 02:20 8,540 --a------ C:\WINDOWS\system32\ijwogqkh.dll . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-09 15:17 --------- d-----w C:\Program Files\Google 2007-12-09 00:52 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-07 18:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2007-09-26 22:17 20 ---h--w C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT 2007-09-26 22:17 20 ---h--w C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2006-06-06 09:07] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "SystemTray"="SysTray.Exe" [2001-08-24 15:00 C:\WINDOWS\system32\systray.exe] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2006-06-06 09:07] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 aaudstum;aaudstum;\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\aaudstum.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - ENTDRV51 . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156] -> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jwenlkwx.dll . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-09 18:15:19 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-09 18:17:12 - machine was rebooted . --- E O F ---

philae83 · Answer

re

ce n'est pas terminé

* télécharge ERUNT pour sauvegarder ta base de registre
https://www.zebulon.fr/telechargements/utilitaires/systeme-utilitaires/erunt.html
tuto
http://pageperso.aol.fr/loraline60/tuto_erunt.htm

puis

Sélectionne le texte suivant :

File::
C:\WINDOWS\system32\ofkjghcu.ini 
C:\WINDOWS\system32\lyshugqj.ini 
C:\WINDOWS\system32\inrpwsge.ini 
C:\WINDOWS\system32\uelqtwyo.ini 
C:\WINDOWS\system32\mkgjvlar.ini 
C:\WINDOWS\system32\hwfrlgaw.ini 
C:\WINDOWS\system32
cjnhqih.tmp
C:\WINDOWS\system32
cjnhqih.ini 
C:\WINDOWS\system32\qixikaci.ini 
C:\WINDOWS\system32	ymyohlc.ini 
C:\WINDOWS\system32\civipaus.ini 
C:\WINDOWS\system32\lvwxxfkc.ini 
C:\WINDOWS\system32\pcekbgkq.ini 
C:\WINDOWS\system32\lhnpcgcg.ini 
C:\WINDOWS\system32\ibhuffol.ini 
C:\WINDOWS\system32\geihitjh.ini 
C:\WINDOWS\system32\vtqpjukh.ini 
C:\WINDOWS\system32\pldlpqhn.ini 
 C:\WINDOWS\system32\mugfmsss.ini 
C:\WINDOWS\system32\pfiuwhmc.ini 
C:\WINDOWS\system32\kvtmmlkq.ini 
C:\WINDOWS\system32	npgdyux.ini 
C:\WINDOWS\system32\hnbqkqxo.ini 
C:\WINDOWS\system32\pavfyffa.ini 
C:\WINDOWS\system32\vhiirqet.ini 
 C:\WINDOWS\system32\yauxgwkf.ini 
C:\WINDOWS\system32\jtomtfkb.dll 
C:\WINDOWS\system32\sahyxwbq.ini 
C:\WINDOWS\system32\segsthve.dll 
 C:\WINDOWS\system32\ijwogqkh.dll 
C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT 
C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT 
C:\DOCUMENTS & SETTING\ADMINSTRAITEUR\LOCALS SETTING\Temp\jwenlkwx.dll 

Registry::
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3 b4-c8e9-11db-9b28-000b6b985b31}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43 a5-436f-11db-9a30-000b6b6d5b6e}]

# Copie le texte sélectionné (CTRL+C).
# Ouvre le bloc-note (programme>Accessoire>bloc-note).
# Colle le texte copié dans ce bloc-note (CTRL+V).
# Sauvegarde ce fichier sous le nom de CFScript.txt
# Fais un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe
# Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
# Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
# Une fois le scan achevé, un rapport va s'afficher: Poste son contenu.
# Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

ensuite tu iras sur  VIRUS TOTAL
http://www.virustotal.com/en/indexf.html

Tuto : http://pageperso.aol.fr/loraline60/virus_total.htm
pour faire analyser ces fichiers 

C:\WINDOWS\system32\d3dx9_32.dll 
C:\WINDOWS\system32\xactengine2_5.dll

pour cela tu dois :

-démarrer

-poste de travail ou autre dossier

-menu outils

-options de dossier

-onglet affichage

puis

- activer la case : Afficher les fichiers et dossiers cachés

- désactiver la case : Masquer les extensions des fichiers dont le type est connu

- désactiver  la case : Masquer les fichier protégés du système d'exploitation

Puis  - Appliquer 

tu posteras le rapport des 2 générés ici ensuite

ainsi que le rapport de combo, + un nouveau rapport hijackthis

g · Answer

on fai comment pour dizipper en langues francaise

philae83 · Answer

dézipper = extraire ici

Utilisateur anonyme · Answer

Salut philae83,  ;-)
en passant....

Je te retrouve, g ou hill
 3 posts en cour !
http://www.commentcamarche.net/forum/affich 4261328 ki peux maider a analyser mon rapport hijack

http://www.commentcamarche.net/forum/affich 4254703 trojan win 32boh df#0
+ celui-ci....
faudra que tu m'explique pourquoi cette panique g ?
Le post ici est avancé et suis bien son cour...
je ne vois pas bien le pourquoi de ces multi-post....????
Quand tu commence avec un helper, tu continue avec, de toute façon, on s'en aperçois très vite ! LOL

g · Answer

desoler encore 1 fois je sais pa pkoi jai paniquer  philo2100 lol

philae83 · Answer

hello philo :)

je te le laisse sans problème

g · Answer

voici le rapport de cComboFix 07-12-09.1 - Administrateur 2007-12-09 20:07:40.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.186 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\Administrateur\Mes documents\CFScript.txt * Created a new restore point FILE C:\DOCUMENTS & SETTING\ADMINSTRAITEUR\LOCALS SETTING\Temp\jwenlkwx.dll C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT C:\WINDOWS\system32\civipaus.ini C:\WINDOWS\system32\geihitjh.ini C:\WINDOWS\system32\hnbqkqxo.ini C:\WINDOWS\system32\hwfrlgaw.ini C:\WINDOWS\system32\ibhuffol.ini C:\WINDOWS\system32\ijwogqkh.dll C:\WINDOWS\system32\inrpwsge.ini C:\WINDOWS\system32\jtomtfkb.dll C:\WINDOWS\system32\kvtmmlkq.ini C:\WINDOWS\system32\lhnpcgcg.ini C:\WINDOWS\system32\lvwxxfkc.ini C:\WINDOWS\system32\lyshugqj.ini C:\WINDOWS\system32\mkgjvlar.ini C:\WINDOWS\system32\mugfmsss.ini C:\WINDOWS\system32\ncjnhqih.ini C:\WINDOWS\system32\ncjnhqih.tmp C:\WINDOWS\system32\ofkjghcu.ini C:\WINDOWS\system32\pavfyffa.ini C:\WINDOWS\system32\pcekbgkq.ini C:\WINDOWS\system32\pfiuwhmc.ini C:\WINDOWS\system32\pldlpqhn.ini C:\WINDOWS\system32\qixikaci.ini C:\WINDOWS\system32\sahyxwbq.ini C:\WINDOWS\system32\segsthve.dll C:\WINDOWS\system32\tnpgdyux.ini C:\WINDOWS\system32\tymyohlc.ini C:\WINDOWS\system32\uelqtwyo.ini C:\WINDOWS\system32\vhiirqet.ini C:\WINDOWS\system32\vtqpjukh.ini C:\WINDOWS\system32\yauxgwkf.ini . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT C:\WINDOWS\system32\civipaus.ini C:\WINDOWS\system32\geihitjh.ini C:\WINDOWS\system32\hnbqkqxo.ini C:\WINDOWS\system32\hwfrlgaw.ini C:\WINDOWS\system32\ibhuffol.ini C:\WINDOWS\system32\ijwogqkh.dll C:\WINDOWS\system32\inrpwsge.ini C:\WINDOWS\system32\jtomtfkb.dll C:\WINDOWS\system32\kvtmmlkq.ini C:\WINDOWS\system32\lhnpcgcg.ini C:\WINDOWS\system32\lvwxxfkc.ini C:\WINDOWS\system32\lyshugqj.ini C:\WINDOWS\system32\mkgjvlar.ini C:\WINDOWS\system32\mugfmsss.ini C:\WINDOWS\system32\ncjnhqih.ini C:\WINDOWS\system32\ncjnhqih.tmp C:\WINDOWS\system32\ofkjghcu.ini C:\WINDOWS\system32\pavfyffa.ini C:\WINDOWS\system32\pcekbgkq.ini C:\WINDOWS\system32\pfiuwhmc.ini C:\WINDOWS\system32\pldlpqhn.ini C:\WINDOWS\system32\qixikaci.ini C:\WINDOWS\system32\sahyxwbq.ini C:\WINDOWS\system32\segsthve.dll C:\WINDOWS\system32\tnpgdyux.ini C:\WINDOWS\system32\tymyohlc.ini C:\WINDOWS\system32\uelqtwyo.ini C:\WINDOWS\system32\vhiirqet.ini C:\WINDOWS\system32\vtqpjukh.ini C:\WINDOWS\system32\yauxgwkf.ini . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-09 to 2007-12-09 )))))))))))))))))))))))))))))))))))) . 2007-12-09 00:42 . 2007-12-09 16:35 2,398 --a------ C:\WINDOWS\system32\tmp.reg 2007-12-09 00:12 . 2007-12-09 16:36 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS\nsreg.dat 2007-12-07 23:37 . 2007-12-08 00:52 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-09 15:17 --------- d-----w C:\Program Files\Google 2007-12-09 00:52 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-07 18:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2007-11-07 23:50 24,600 ----a-w C:\WINDOWS\system32\rkmssleb.dll 2007-11-07 00:11 8,540 ----a-w C:\WINDOWS\system32\ckjhbsml.dll 2007-11-06 03:09 61,100 ----a-w C:\WINDOWS\system32\tfyqwvha.dll 2007-11-05 00:29 64,020 ----a-w C:\WINDOWS\system32\threhtfn.dll 2007-11-03 20:16 62,560 ----a-w C:\WINDOWS\system32\iympuxmg.dll 2007-11-02 03:51 61,100 ----a-w C:\WINDOWS\system32\dseibwxj.dll 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((( snapshot@2007-12-09_18.16.23.06 ))))))))))))))))))))))))))))))))))))))))) . + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\[u]0[/u]9-12-2007\ERDNT.EXE + 2007-12-09 19:02:20 12,050,432 ----a-w C:\WINDOWS\erdnt\[u]0[/u]9-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-09 19:02:20 122,880 ----a-w C:\WINDOWS\erdnt\[u]0[/u]9-12-2007\Users\[u]0[/u]0000002\UsrClass.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2006-06-06 09:07] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "SystemTray"="SysTray.Exe" [2001-08-24 15:00 C:\WINDOWS\system32\systray.exe] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2006-06-06 09:07] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 aaudstum;aaudstum;\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\aaudstum.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156] -> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jwenlkwx.dll . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-09 20:13:24 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-09 20:14:42 - machine was rebooted C:\ComboFix2.txt ... 2007-12-09 18:17 . --- E O F --- ombofix (jai fai le glisser avec cfscprit )

philae83 · Answer

reposte un nouveau rapport hijackthis et fait analyser les fichiers demandés sur VIRUS TOTAL

n'oublie pas de poster les rapports générés stp

g · Answer

pour les fichiers je peux faire un cpoier coller pour le metre sur virus total

philae83 · Answer

non tu le recherches en cliquant sur parcourir

tout est expliqué dans mon post et tu as aussi un tuto

g · Answer

ca c pour le premier fichiers indiquer
Fichier d3dx9_32.dll reçu le 2007.12.09 20:50:25 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE 


Résultat: 0/32 (0%)
en train de charger les informations du serveur... 
Votre fichier est dans la file d'attente, en position: 2.
L'heure estimée de démarrage est entre 41 et 59 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse. 
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier. 
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération. 
 Formaté Impression des résultats  
Votre fichier a expiré ou n'existe pas. 
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée. 
 Email:  
  

Antivirus Version Dernière mise à jour Résultat 
AhnLab-V3 2007.12.8.0 2007.12.07 - 
AntiVir 7.6.0.40 2007.12.07 - 
Authentium 4.93.8 2007.12.08 - 
Avast 4.7.1098.0 2007.12.09 - 
AVG 7.5.0.503 2007.12.09 - 
BitDefender 7.2 2007.12.09 - 
CAT-QuickHeal 9.00 2007.12.08 - 
ClamAV 0.91.2 2007.12.09 - 
DrWeb 4.44.0.09170 2007.12.09 - 
eSafe 7.0.15.0 2007.12.09 - 
eTrust-Vet 31.3.5361 2007.12.08 - 
Ewido 4.0 2007.12.09 - 
FileAdvisor 1 2007.12.09 - 
Fortinet 3.14.0.0 2007.12.09 - 
F-Prot 4.4.2.54 2007.12.08 - 
F-Secure 6.70.13030.0 2007.12.09 - 
Ikarus T3.1.1.12 2007.12.09 - 
Kaspersky 7.0.0.125 2007.12.09 - 
McAfee 5181 2007.12.08 - 
Microsoft 1.3007 2007.12.09 - 
NOD32v2 2711 2007.12.07 - 
Norman 5.80.02 2007.12.07 - 
Panda 9.0.0.4 2007.12.09 - 
Prevx1 V2 2007.12.09 - 
Rising 20.21.42.00 2007.12.07 - 
Sophos 4.24.0 2007.12.09 - 
Sunbelt 2.2.907.0 2007.12.07 - 
Symantec 10 2007.12.09 - 
TheHacker 6.2.9.154 2007.12.09 - 
VBA32 3.12.2.5 2007.12.07 - 
VirusBuster 4.3.26:9 2007.12.09 - 
Webwasher-Gateway 6.6.2 2007.12.08 - 
Information additionnelle 
File size: 3426072 bytes 
MD5: 26af232140c88b42d92a88f2198edf6a 
SHA1: b62aed3f71d8963227e5021c2222192873ce753b 
PEiD: -

g · Answer

celui ci c le 2eme fichiers analyser par virustotal
Fichier xactengine2_5.dll reçu le 2007.12.09 20:56:45 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE 


Résultat: 0/32 (0%)
en train de charger les informations du serveur... 
Votre fichier est dans la file d'attente, en position: 2.
L'heure estimée de démarrage est entre 41 et 59 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse. 
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier. 
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération. 
 Formaté Impression des résultats  
Votre fichier a expiré ou n'existe pas. 
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.

Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée. 
 Email:  
  

Antivirus Version Dernière mise à jour Résultat 
AhnLab-V3 2007.12.8.0 2007.12.07 - 
AntiVir 7.6.0.40 2007.12.07 - 
Authentium 4.93.8 2007.12.08 - 
Avast 4.7.1098.0 2007.12.09 - 
AVG 7.5.0.503 2007.12.09 - 
BitDefender 7.2 2007.12.09 - 
CAT-QuickHeal 9.00 2007.12.08 - 
ClamAV 0.91.2 2007.12.09 - 
DrWeb 4.44.0.09170 2007.12.09 - 
eSafe 7.0.15.0 2007.12.09 - 
eTrust-Vet 31.3.5361 2007.12.08 - 
Ewido 4.0 2007.12.09 - 
FileAdvisor 1 2007.12.09 - 
Fortinet 3.14.0.0 2007.12.09 - 
F-Prot 4.4.2.54 2007.12.08 - 
F-Secure 6.70.13030.0 2007.12.09 - 
Ikarus T3.1.1.12 2007.12.09 - 
Kaspersky 7.0.0.125 2007.12.09 - 
McAfee 5181 2007.12.08 - 
Microsoft 1.3007 2007.12.09 - 
NOD32v2 2711 2007.12.07 - 
Norman 5.80.02 2007.12.07 - 
Panda 9.0.0.4 2007.12.09 - 
Prevx1 V2 2007.12.09 - 
Rising 20.21.42.00 2007.12.07 - 
Sophos 4.24.0 2007.12.09 - 
Sunbelt 2.2.907.0 2007.12.07 - 
Symantec 10 2007.12.09 - 
TheHacker 6.2.9.154 2007.12.09 - 
VBA32 3.12.2.5 2007.12.07 - 
VirusBuster 4.3.26:9 2007.12.09 - 
Webwasher-Gateway 6.6.2 2007.12.08 - 
Information additionnelle 
File size: 251672 bytes 
MD5: 86c93789e9006f1ac47ed9dd47d4c8a1 
SHA1: e9de46eb68271018aa31c71ef89d1ddef19edf7b 
PEiD: -

g · Answer

voici le nvx rapport hijacthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:04, on 09/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\WINDOWS\system32\Fmctrl.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\Macrogaming\SweetIMBarForIE	oolbar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE	oolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\PROGRA~1\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: McAfee Desktop Firewall Tray.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

g · Answer

j espere ke je ne me suis pa tromper?

philae83 · Answer

* lance hijackthis "do a system scan only" puis coche ces lignes :

O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\Macrogaming\SweetIMBarForIE	oolbar.dll 
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE	oolbar.dll 
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll 
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab 

* toutes applications fermées et HORS CONNEXION, clique sur FIX CHECKED

ENSUITE
ce n'est pas terminé mais j'aurais besoin de :

Télécharge SREng (par Smallfrogs) de ce lien:
http://www.kztechs.com/eng/download.html

Extrais tout son contenu sur ton Bureau
Du dossier sreng2 qui se trouve maintenant sur ton Bureau, double clique sur SREng.exe afin de lancer l'outil
Clique sur Smart Scan
Ensuite, clique sur le bouton [Scan]

Lorsque complété, clique sur le bouton [Save Reports]
Sauvegarde le rapport sur ton Bureau
Copie/colle le contenu du fichier SREnglLOG.log dans ta prochaine réponse, s'il te plaît.

g · Answer

1 fois ke jai cocher les lignes ci dessus je fai KOi?
pkoi ya til le lien de bitdefender?

philae83 · Answer

cela correspond au scan que tu as fait en ligne chez bitdefender (activeX)

tu fais ce que je t'ai demandé à savoir SRENG

g · Answer

ok voila le raport [CODE] 2007-12-09,21:24:30 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Google Inc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"> [Sun Microsystems, Inc.] <"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.] <"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.] <"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.] [N/A] <"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A] [C-Media Electronic Inc. (www.cmedia.com.tw)]

[] [Realtek Semiconductor Corp.] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <> [N/A] [(Verified)Microsoft Windows Publisher] [Triplex Corp.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] ================================== Startup Folders [McAfee Desktop Firewall Tray] C:\PROGRA~1\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [Networks Associates Technology, Inc.]> [NkbMonitor.exe] C:\PROGRA~1\Nikon\PictureProject\NkbMonitor.exe [Nikon Corporation]> [ERUNT AutoBackup] C:\PROGRA~1\ERUNT\AUTOBACK.EXE [N/A]> [Webshots] C:\PROGRA~1\Webshots\Launcher.exe [N/A]> ================================== Services [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] [ATI Smart / ATI Smart][Stopped/Auto Start] <> [McAfee Desktop Firewall Service / FireSvc][Running/Auto Start] <"C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe"> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [McAfee Framework Service / McAfeeFramework][Running/Auto Start] [Network Associates McShield / McShield][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"> [Network Associates Task Manager / McTaskManager][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"> ================================== Drivers [aaudstum / aaudstum][Stopped/Manual Start] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\aaudstum.sys> [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [atksgt / atksgt][Running/Auto Start] [AVG Anti-Rootkit / AVG Anti-Rootkit][Running/Boot Start] <\SystemRoot\System32\DRIVERS\avgarkt.sys> [Avg Anti-Rootkit Clean Driver / AvgArCln][Running/System Start] [catchme / catchme][Running/Manual Start] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys> [C-Media PCI Audio Driver (WDM) / cmpci][Stopped/Manual Start]

[C-Media WDM Audio Interface / cmuda][Stopped/Manual Start]

[dtscsi / dtscsi][Running/Manual Start] <\SystemRoot\System32\Drivers\dtscsi.sys> [Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Running/Manual Start] [McAfee Desktop Firewall Network Driver / FireHook][Running/Auto Start] [firelm01 / firelm01][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\firelm01.sys> [McAfee Desktop Firewall Policy Manager Driver / FirePM][Running/Boot Start] <\SystemRoot\system32\Drivers\FirePM.sys> [McAfee Desktop Firewall TDI Driver / FireTDI][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\FireTDI.sys> [Triplex Ma-La-Zi PCI Joystick / gameport][Running/Manual Start] [lirsgt / lirsgt][Running/Auto Start] [NaiAvFilter1 / NaiAvFilter1][Running/Manual Start] [NaiAvTdi1 / NaiAvTdi1][Running/System Start] [Logitech QuickCam Express(PID_0920) / PID_0920][Stopped/Manual Start] [802.11g USB 2.0 adapter / PRISM_A02][Stopped/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [Secdrv / Secdrv][Running/Auto Start] [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [TxNtSys / TxNtSys][Stopped/Manual Start] <\??\C:\Triplex\Sound\TxNtSys.sys> [Pinnacle PCTV DVB-T USB Stick / USB28xxBGA][Stopped/Manual Start] [USB 28xx OEM Filter / USB28xxOEM][Stopped/Manual Start] [Scientific-Atlanta USB Cable Modem Driver / USBCM][Stopped/Manual Start] <> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys> [Triplex Ma-La-Zi PCI Audio (WDM) / wdm_fm801][Running/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [EntDrv51 / EntDrv51][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\EntDrv51.sys> ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Skype add-on (mastermind)] {22BF413B-C6D2-4d91-82A9-A0F997BA588C} [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [Skype add-on (mastermind)] {22BF413B-C6D2-4D91-82A9-A0F997BA588C} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {233C1507-6A77-46A4-9443-F871F945D258} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [Navigateur Web Microsoft] {8856F961-340A-11D0-A96B-00C04FD705A2} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [SweetIM For Internet Explorer] {BC4FFE41-DE9F-46FA-B455-AAD49B9F9938} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Download all links using BitComet] [Download all videos using BitComet] [Download link using &BitComet] ================================== Running Processes [PID: 612 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 660 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 688 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.5] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 736 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 748 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 904 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 916 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 996 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1092 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1136 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1188 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1520 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1700 / Administrateur][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 1796 / Administrateur][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300] [C:\Program Files\WinRAR arext.dll] [N/A, ] [C:\Program Files\Network Associates\VirusScan\shext.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\ShExtRes.dll] [Network Associates, Inc., 8.0.0.912] [PID: 1860 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 1932 / SYSTEM][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\NetShrRL.dll] [Networks Associates Technology, Inc., 8.0] [PID: 2036 / SYSTEM][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\applib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Logging.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\InternetManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aInet.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\UserSpace.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Management.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\cmalib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aPolicyManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\PsApi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Scheduler.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 536 / SYSTEM][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.DLL] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\FTL.Dll] [Network Associates, Inc., 8.0.0.133] [C:\Program Files\Network Associates\VirusScan aiann.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\Res09 aEvtRes.dll] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\MCSCAN32.DLL] [McAfee, Inc., 5.2.00] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] [Network Associates, Inc, 8.0.0.240] [c:\WINDOWS\system32\msxml4.dll] [Microsoft Corporation, 4.20.9848.0] [PID: 576 / SYSTEM][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aicondl.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\VsTskMgr.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] [Network Associates, Inc., 8.0.0.145] [PID: 1124 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1328 / SYSTEM][C:\PROGRA~1\Network Associates\Common Framework aPrdMgr.exe] [Network Associates, Inc., 3.5.0.412] [C:\PROGRA~1\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\FireePO.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] [Network Associates, Inc., 8.0.0.912] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1300 / Administrateur][C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.90.3] [PID: 1292 / Administrateur][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\shstat.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\Product.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\RES09\Shutilrc.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\Graphics.dll] [Network Associates, Inc., 8.0.0.912] [PID: 1336 / Administrateur][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 1428 / Administrateur][C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe] [Network Associates, Inc., 2.0.275.0] [PID: 1644 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17263] [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] [ATI Technologies Inc., 1.2.2159.16348] [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\atidemgr.dll] [ATI Technologies Inc., 1.2.2217.17103] [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll] [ATI Technologies Inc., 1.2.2147.29150] [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27456] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17173] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27452] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17190] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17187] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29158] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17217] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17203] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17184] [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17177] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17175] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17236] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17162] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17227] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17232] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17224] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17220] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17230] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17159] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17196] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17200] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17193] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll] [ATI Technologies Inc., 1.2.2154.21069] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17211] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17206] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17209] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17168] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll] [ATI Technologies Inc., 1.2.2182.27432] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2168.19591] [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll] [ATI Technologies Inc., 1.2.2166.26895] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2210.26509] [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [PID: 1668 / Administrateur][C:\WINDOWS\Mixer.exe] [C-Media Electronic Inc. (www.cmedia.com.tw), 1.58] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\cmnprop.dll] [C-Media Corporation, 5.00.2195.12] [PID: 1692 / Administrateur][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 51] [PID: 1272 / Administrateur][C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE] [Logitech Inc., 8.1.2.1003] [PID: 2072 / Administrateur][C:\WINDOWS\system32\Fmctrl.EXE] [Triplex Corp., 1.00] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 2148 / Administrateur][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\gtn.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 2228 / Administrateur][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP ailite.dll] [Network Associates, Inc., 1.0.452] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\TrayRL.dll] [Networks Associates Technology, Inc., 8.0] [PID: 2272 / Administrateur][C:\Program Files\Nikon\PictureProject\NkbMonitor.exe] [Nikon Corporation, 1, 7, 5, 3000] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 2764 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\Program Files\Macrogaming\SweetIM\mgAdaptersProxy.dll] [MacroGaming, 1, 1, 0, 162] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.wizard.dll] [ATI Technologies Inc., 1.2.2217.17146] [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.component.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17148] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17136] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17139] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17130] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17133] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17125] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17128] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17143] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.wizard.dll] [ , 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17121] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.wizard.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17123] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.shared.dll] [ATI Technologies Inc., 1.2.0.0] [c:\program files\ati technologies\ati.ace\atixclib.dll] [ , 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 2772 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll] [ATI Technologies Inc., 1.2.2217.17245] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 3632 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 4048 / Administrateur][C:\WINDOWS\system32\WgaTray.exe] [Microsoft Corporation, 1.7.0018.5] [PID: 3788 / Administrateur][C:\Program Files\internet explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300] [C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll] [Skype Technologies S.A., 2, 2, 0, 74] [C:\Program Files\Skype oolbars\Shared\SPhoneParser.dll] [Skype Technologies, 1, 0, 1, 143] [C:\Program Files\BitComet ools\BitCometBHO.dll] [N/A, ] [C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.90.3] [c:\program files\google\googletoolbar3.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\mcscan32.dll] [McAfee, Inc., 5.2.00] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 4020 / Administrateur][C:\Documents and Settings\Administrateur\Bureau\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\Documents and Settings\Administrateur\Bureau\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== File Associations .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%System

philae83 · Answer

re

* Télécharge CCleaner.

https://www.pcastuces.com/logitheque/ccleaner.htm

Installe le dans un répertoire dédié.

Décoche pendant l'installation

--- les deux cases "Ajouter l'option ... "

--- Contrôler les mises à jour

--- Ajouter la Barre d'Outils Yahoo! CCleaner

* Lance Ccleaner pour un nettoyage complet.

et

relance combo et poste le nouveau rapport ainsi qu'un nouveau rapport hijackthis
(plus facile pour moi sinon je galère pour retrouver les bons rapports dans ce topic)
merci


* Double clique combofix.exe.

* Tape sur la touche Y (Yes) pour démarrer le scan.

* Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

g · Answer

sur c cleaner est ce ke je fais chercher des erreurs dans registres?

philae83 · Answer

on avait téléchargé ERUNT je pense non ?
oui tu peux aussi alors

g · Answer

oui et aussi esct ceke je coche  l options avancersdans le nettoyeur?

philae83 · Answer

non

g · Answer

jai redemarrer manuellement mon pc kar je n avai plus acces a internet  apres avoir fai un scan avec combofix c normal? je tenvoie les rapports de suites

g · Answer

ComboFix 07-12-09.1 - Administrateur 2007-12-09 21:52:02.3 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.109 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-09 to 2007-12-09 )))))))))))))))))))))))))))))))))))) . 2007-12-09 21:43 . 2007-12-09 21:43 d-------- C:\Program Files\CCleaner 2007-12-09 00:42 . 2007-12-09 16:35 2,398 --a------ C:\WINDOWS\system32\tmp.reg 2007-12-09 00:12 . 2007-12-09 16:36 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS\nsreg.dat 2007-12-07 23:37 . 2007-12-09 21:17 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-09 20:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-09 15:17 --------- d-----w C:\Program Files\Google 2007-12-09 00:52 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2007-11-07 23:50 24,600 ----a-w C:\WINDOWS\system32\rkmssleb.dll 2007-11-07 00:11 8,540 ----a-w C:\WINDOWS\system32\ckjhbsml.dll 2007-11-06 03:09 61,100 ----a-w C:\WINDOWS\system32\tfyqwvha.dll 2007-11-05 00:29 64,020 ----a-w C:\WINDOWS\system32\threhtfn.dll 2007-11-03 20:16 62,560 ----a-w C:\WINDOWS\system32\iympuxmg.dll 2007-11-02 03:51 61,100 ----a-w C:\WINDOWS\system32\dseibwxj.dll 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((( snapshot@2007-12-09_18.16.23.06 ))))))))))))))))))))))))))))))))))))))))) . + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\[u]0[/u]9-12-2007\ERDNT.EXE + 2007-12-09 19:02:20 12,050,432 ----a-w C:\WINDOWS\erdnt\[u]0[/u]9-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-09 19:02:20 122,880 ----a-w C:\WINDOWS\erdnt\[u]0[/u]9-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-09\ERDNT.EXE + 2007-12-09 19:12:58 12,050,432 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-09\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-09 19:12:58 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-09\Users\[u]0[/u]0000002\UsrClass.dat . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "SystemTray"="SysTray.Exe" [2001-08-24 15:00 C:\WINDOWS\system32\systray.exe] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE [2005-03-06 15:26:48] Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2006-03-01 00:14:30] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ McAfee Desktop Firewall Tray.lnk - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [2006-02-28 22:48:26] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2006-09-13 23:24:08] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 aaudstum;aaudstum;\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\aaudstum.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** jespere ke c celui lacar jen ai 3 catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-09 21:53:57 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-09 21:55:01 C:\ComboFix2.txt ... 2007-12-09 20:14 C:\ComboFix3.txt ... 2007-12-09 18:17 . --- E O F ---

g · Answer

voici lnvx raport hijacthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:06, on 09/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\PROGRA~1\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: McAfee Desktop Firewall Tray.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

philae83 · Answer

jai redemarrer manuellement mon pc kar je n avai plus acces a internet apres avoir fai un scan avec combofix c normal? je tenvoie les rapports de suites

non pas spécialement.

Tu vas suivre pas à pas cette procédure
http://www.malekal.com/Worm.Win32.Delf.ca.php

on y verra peut être plus clair ensuite

tu postes ici tous les rapports.

g · Answer

JE NE SUIS PLUS CHEZ MOI JE SUIS CHEZ UN AMI ,TU SERA LA JUSQU A KE L HEUR?
ET TU CROIS KIL Y A ENCOR DES VIRUS DANS MON PC?

g · Answer

sinon merci pour ton aide precieuse au fait

philae83 · Answer

je n'ai pas d'heure, quand j'en ai marre, je quitte et je vais me coucher

je suis là en général (sauf imprévus) tous les soirs de toutes façons.
si je te ne réponds pas c'est que je ne suis pas présente.
Tu as du pain sur la planche, et non ce n'est pas terminé encore

Utilisateur anonyme · Answer

re, philae83,

dsl du retard...(cause travail)
à ce sujet.
"hello philo :)

je te le laisse sans problème "
-------------------------------------------------------------------
je crois que notre ami  g, ou hill n'était pas au courant des convenances en forum (ici ou ailleurs), et qu'il a paniqué, je crois qu'il a bien compris le pourquoi de la chose !
Ceci dit, merci de ton invitation à continuer, mais tu es prioritaire sur ce topic, je voulais juste le signaler en "live".....;-)
------------------------------
en ce qui concerne le topic, je me permet quelques remarques.
-----------------------------------
la version Java est obsolète et de ce fait une porte ouverte au infection!
jre1.5.0_09 mise à jour indispensable.
d'autant que cette 04 demande le démarrage de l'application...
à supprimer:
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" 
ceci aussi ne me semble pas utile:
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd 
update audio....
De plus,

Perso je ferai renommer HijackThis.exe  en scanner.exe, on ne sait jamais !
cordialement.

g · Answer

bonsoir ,oui j ai bien compris la chose philo2100 et sincerement desoler.
bonsoir philae83.je vais mis mettre de suite sur ce ke ma demander de faire.

g · Answer

voici le raport de cclean
Script execute en mode sans echec 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec 10/12/2007 a 19:12:04,18 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
tentative de suppression de C:\StubInstaller.exe 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
tentative de suppression de C:\WINDOWS\system32\mcrh.tmp 
 
*** Suppression des fichiers dans C:\Program Files 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport !

g · Answer

voici le raport  avg
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	21:21 10/12/2007

 + Résultat de l'analyse:	



C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133775.exe -> Adware.180Solutions : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133780.exe -> Adware.180Solutions : Aucune action entreprise.
C:\Program Files\Macrogaming\SweetIMBarForIE	oolbar.dll -> Adware.BHO : Aucune action entreprise.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20071209-211750-676.dll -> Adware.BHO : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133727.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133732.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133733.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133734.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133736.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133737.exe -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133738.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133740.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133741.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133742.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133743.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133747.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133749.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133750.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133751.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133752.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133753.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133754.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133755.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133756.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133757.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133758.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133760.exe -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133761.exe -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133763.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133764.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133765.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133766.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133767.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133768.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133769.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133770.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133771.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133772.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133773.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133774.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133778.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133779.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133781.dll -> Adware.HotBar : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.


Fin du rapport

g · Answer

voici le raport du scan ke j ai effectuer avec pAVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	21:21 10/12/2007

 + Résultat de l'analyse:	



C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133775.exe -> Adware.180Solutions : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133780.exe -> Adware.180Solutions : Aucune action entreprise.
C:\Program Files\Macrogaming\SweetIMBarForIE	oolbar.dll -> Adware.BHO : Aucune action entreprise.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20071209-211750-676.dll -> Adware.BHO : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133727.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133732.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133733.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133734.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133736.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133737.exe -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133738.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133740.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133741.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133742.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133743.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133747.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133749.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133750.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133751.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133752.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133753.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133754.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133755.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133756.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133757.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133758.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133760.exe -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133761.exe -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133763.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133764.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133765.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133766.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133767.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133768.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133769.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133770.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133771.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133772.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133773.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133774.exe -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133778.dll -> Adware.HotBar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133779.dll -> Adware.Hotbar : Aucune action entreprise.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133781.dll -> Adware.HotBar : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Administrateur\Cookies\administrateur@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.


Fin du rapport

anda

philae83 · Answer

ok,

 pour AVG tu ne l'as pas paramétré pour qu'il mette en quarantaine ?

si c'est le cas, il te faut recommencer. 
Lance AVG Anti-Spyware

Clique sur le bouton Analyse (de la barre d'outils)

puis fait dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.

Puis sur l'onglet Paramètres,
sous : "Comment réagir "clique sur Actions recommandées. Sélectionne Quarantaine.

Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

A la fin du scan, choisis l'option 3

"Appliquer toutes les actions " en bas.

Clique sur "Enregistrer le rapport".

g · Answer

voila jai fai les manips demaner,j envoie un rapport hijacthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:17, on 10/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\WINDOWS\system32\Fmctrl.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\PROGRA~1\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: McAfee Desktop Firewall Tray.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

philae83 · Answer

je ne sais pas si tu auras vu ce que je t'ai mis au post 73

j'attends ta réponse pour la suite

g · Answer

ok je my met

philae83 · Answer

je pense que ce sera pour demain vu l'heure.

g · Answer

ok pas de probleme bonne nuit philae83

g · Answer

voici le nouveau rapport  avg(en esperant ke jai reussi la manip)lol
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	00:35 11/12/2007

 + Résultat de l'analyse:	



C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133775.exe -> Adware.180Solutions : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133780.exe -> Adware.180Solutions : Nettoyé.
C:\Program Files\Macrogaming\SweetIMBarForIE	oolbar.dll -> Adware.BHO : Nettoyé.
C:\Program Files\Trend Micro\HijackThis\backups\backup-20071209-211750-676.dll -> Adware.BHO : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133727.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133732.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133733.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133734.dll -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133736.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133737.exe -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133738.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133740.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133741.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133742.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133743.dll -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133747.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133749.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133750.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133751.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133752.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133753.dll -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133754.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133755.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133756.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133757.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133758.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133760.exe -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133761.exe -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133763.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133764.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133765.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133766.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133767.dll -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133768.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133769.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133770.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133771.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133772.dll -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133773.dll -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133774.exe -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133778.dll -> Adware.HotBar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133779.dll -> Adware.Hotbar : Nettoyé.
C:\System Volume Information\_restore{F10B95C6-EA74-46AE-9729-9F4CAB51CFD2}\RP455\A0133781.dll -> Adware.HotBar : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\Administrateur\Cookies\administrateur@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.


Fin du rapport

Utilisateur anonyme · Answer

re,  philae83,
;-)
"pour acrobat qui n'est pas à jour, je sais mais je pense que ce n'est pas la priorité, je vois ça à la fin.
"
tu parlais de Java je suppose ?
Ceci dit , ne pas le négliger ni l'oublier !...c'est une porte ouverte, il faut la fermer au plus tôt....
---------
perso, j'ai un doute sur la validité des points de restaurations, m'étonnerai qu'un point de resto, fonctionne même après une désinfection...je ne sais ce que tu en pense?
(Perso je ferai la manip de suppression de la restauration système, et refaire un point dès que le PC est clean.)

(je t'avoue que j'ai déjà eu le cas...après désinfection, le point de resto est inutilisable !)
A+
cordialement

philae83 · Answer

bonjour,

je n'ai plus souvenir si on a fait un scan en ligne (pas relu les 4 pages)

il serait bien d'en effectuer un de toutes façons maintenant

* Fait un scan antivirus en ligne Panda et copie colle le résultat ici
https://www.pandasecurity.com/en/homeusers/online-antivirus/?ref=activescan
(avec Internet Explorer et désactive ton Antivirus pendant le scan)

* tuto en image
http://pageperso.aol.fr/loraline60/panda_scan.htm

et également relance combofix et poste le rapport stp ainsi qu'un nouveau rapport hijackthis pour faire le point de tout tes problèmes

g · Answer

bonsoir j espere ke vous allez  bien .
je vais ce ki es demander

g · Answer

voila le raport effectuer avec panda
Incident                                                                        Status                        Location                                                                                                                                                                                                                                                        

Potentially unwanted tool:Application/Pskill.K                                  Not disinfected               C:\Documents and Settings\Administrateur\Bureau\clean\pskill.exe                                                                                                                                                                                                
Potentially unwanted tool:Application/Pskill.K                                  Not disinfected               C:\Documents and Settings\Administrateur\Bureau\clean.zip[clean/pskill.exe]                                                                                                                                                                                     
Potentially unwanted tool:Application/NirCmd.A                                  Not disinfected               C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe[nircmd.exe]                                                                                                                                                                                        
Potentially unwanted tool:Application/NirCmd.A                                  Not disinfected               C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe[nircmd.cfexe]                                                                                                                                                                                      
Potentially unwanted tool:Application/Processor                                 Not disinfected               C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix\Process.exe                                                                                                                                                                                        
Potentially unwanted tool:Application/SuperFast                                 Not disinfected               C:\Documents and Settings\Administrateur\Bureau\SmitfraudFixestart.exe                                                                                                                                                                                        
Spyware:Cookie/Advertising                                                      Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@advertising[2].txt                                                                                                                                                                              
Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@atdmt[1].txt                                                                                                                                                                                    
Spyware:Cookie/Bluestreak                                                       Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@bluestreak[1].txt                                                                                                                                                                               
Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@bs.serving-sys[2].txt                                                                                                                                                                           
Spyware:Cookie/Doubleclick                                                      Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@doubleclick[1].txt                                                                                                                                                                              
Spyware:Cookie/Comclick                                                         Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@fl01.ct2.comclick[2].txt                                                                                                                                                                        
Spyware:Cookie/Server.iad.Liveperson                                            Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@server.iad.liveperson[1].txt                                                                                                                                                                    
Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@serving-sys[1].txt                                                                                                                                                                              
Spyware:Cookie/Smartadserver                                                    Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@smartadserver[2].txt                                                                                                                                                                            
Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\Administrateur\Cookies\administrateur@xiti[1].txt                                                                                                                                                                                     
Adware:Adware/WhenUSearch                                                       Not disinfected               C:\Program Files\DAEMON Tools\SetupDTSB.exe                                                                                                                                                                                                                     
Spyware:Spyware/Vundo                                                           Not disinfected               C:\qoobox\Quarantine\C\WINDOWS\system32\ijwogqkh.dll.vir                                                                                                                                                                                                        
Spyware:Spyware/Vundo                                                           Not disinfected               C:\qoobox\Quarantine\C\WINDOWS\system32\segsthve.dll.vir                                                                                                                                                                                                        
Potentially unwanted tool:Application/Processor                                 Not disinfected               C:\SmitfraudFix\Process.exe                                                                                                                                                                                                                                     
Potentially unwanted tool:Application/SuperFast                                 Not disinfected               C:\SmitfraudFixestart.exe                                                                                                                                                                                                                                     
Potentially unwanted tool:Application/NirCmd.A                                  Not disinfected               C:\WINDOWS\NirCmd.exe                                                                                                                                                                                                                                           
Spyware:Spyware/Vundo                                                           Not disinfected               C:\WINDOWS\system32\ckjhbsml.dll                                                                                                                                                                                                                                
Spyware:Spyware/Vundo                                                           Not disinfected               C:\WINDOWS\system32\dseibwxj.dll                                                                                                                                                                                                                                
Spyware:Spyware/Vundo                                                           Not disinfected               C:\WINDOWS\system32\iympuxmg.dll                                                                                                                                                                                                                                
Adware:Adware/NaviPromo                                                         Not disinfected               C:\WINDOWS\system32\pjexghjrrv.ex_                                                                                                                                                                                                                              
Spyware:Spyware/Vundo                                                           Not disinfected               C:\WINDOWS\system32kmssleb.dll                                                                                                                                                                                                                                
Spyware:Spyware/Vundo                                                           Not disinfected               C:\WINDOWS\system32	fyqwvha.dll                                                                                                                                                                                                                                
Spyware:Spyware/Vundo                                                           Not disinfected               C:\WINDOWS\system32	hrehtfn.dll

Utilisateur anonyme · Answer

re,
tu parles de MP ?
http://www.commentcamarche.net/forum/affich 4262972 trojan win 32 bohdf?page=4#81
pas reçu...
cordialement.
;-)

g · Answer

voici le rapport de combofix jai du redemarrer mon pc car je navai plus acces a internet comme la deniere jai pa compris ce ke tu voulais me dire philo2100 ComboFix 07-12-09.1 - Administrateur 2007-12-11 19:56:34.4 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.224 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-11 to 2007-12-11 )))))))))))))))))))))))))))))))))))) . 2007-12-10 23:09 . 2007-12-10 23:14 d-------- C:\Program Files\RegCleaner 2007-12-10 21:41 . 2007-12-11 19:39 d-------- C:\WINDOWS\system32\ActiveScan 2007-12-10 21:41 . 2007-12-11 18:49 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2007-12-10 21:41 . 2007-12-11 18:49 1,406 --a------ C:\WINDOWS\system32\Help.ico 2007-12-10 19:14 . 2007-12-10 19:14 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2007-12-10 19:00 . 2007-12-10 19:00 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-10 19:00 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-12-09 21:43 . 2007-12-09 21:43 d-------- C:\Program Files\CCleaner 2007-12-09 00:42 . 2007-12-09 16:35 2,398 --a------ C:\WINDOWS\system32 mp.reg 2007-12-09 00:12 . 2007-12-10 22:46 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS sreg.dat 2007-12-07 23:37 . 2007-12-09 21:17 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-11 18:22 --------- d-----w C:\Program Files\Webshots 2007-12-11 18:10 --------- d-----w C:\Program Files\Google 2007-12-10 22:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-10 03:05 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2007-11-07 23:50 24,600 ----a-w C:\WINDOWS\system32 kmssleb.dll 2007-11-07 00:11 8,540 ----a-w C:\WINDOWS\system32\ckjhbsml.dll 2007-11-06 03:09 61,100 ----a-w C:\WINDOWS\system32 fyqwvha.dll 2007-11-05 00:29 64,020 ----a-w C:\WINDOWS\system32 hrehtfn.dll 2007-11-03 20:16 62,560 ----a-w C:\WINDOWS\system32\iympuxmg.dll 2007-11-02 03:51 61,100 ----a-w C:\WINDOWS\system32\dseibwxj.dll 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE [2005-03-06 15:26:48] Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2006-03-01 00:14:30] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ McAfee Desktop Firewall Tray.lnk - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [2006-02-28 22:48:26] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2006-09-13 23:24:08] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 aaudstum;aaudstum;\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\aaudstum.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - ENTDRV51 . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-11 19:59:29 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-11 20:01:03 C:\ComboFix2.txt ... 2007-12-09 21:55 C:\ComboFix3.txt ... 2007-12-09 20:14 . --- E O F ---

g · Answer

voici le rapport hijacthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:14, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\WINDOWS\system32\Fmctrl.EXE
C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet	ools\BitCometBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [C-Media Speaker Configuration] C:\PROGRA~1\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: McAfee Desktop Firewall Tray.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: McAfee Desktop Firewall Service (FireSvc) - Networks Associates Technology, Inc. - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

philae83 · Answer

bonsoir,

 Télécharge navilog1 (Merci il.mafioso!)

http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

    * Ensuite double clique sur navilog1.exe pour lancer l'installation.

    * Une fois l'installation terminée, le fix s'exécutera automatiquement.

    * (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

* Laisse-toi guider. Au menu principal, choisis 1 et valides.

/*\ Ne fais pas le choix 2,3 ou 4 sans notre avis/accord /*\

* Patiente jusqu'au message : *** Analyse terminée le ..... ***

    * Appuie sur une touche comme demandé, le Bloc-notes va s'ouvrir.

    * Copie-colle l'intégralité du rapport dans ta prochaine réponse. Referme le Bloc-notes.

    * Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

g · Answer

voila le rapport navilog

Search Navipromo version 3.3.7 commencé le 11/12/2007 à 20:54:25,54

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Mise à jour le 08.12.2007 à 16h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 
Système de fichiers : NTFS

Executé en mode normal

*** Recherche Programmes installés ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***




*** Recherche dossiers dans "C:\Documents and Settings\Administrateur\application data" *** 


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé



*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans C:\WINDOWS\system32 *

* Recherche dans "C:\Documents and Settings\Administrateur\local settings\application data" * 



*** Recherche fichiers *** 




*** Recherche clés spécifiques dans le Registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus :

2)Recherche Heuristique :

* Dans C:\WINDOWS\system32 :


* Dans "C:\Documents and Settings\Administrateur\local settings\application data" : 


3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse terminée le 11/12/2007 à 20:56:15,71 ***

philae83 · Answer

cool, panda trouve navipromo, et navilog ne le trouve pas !

lol
restons calme


* Télécharge OAD
http://sosvirus.changelog.fr/OAD.exe
- Enregistre le sur ton bureau

Double clique sur le OAD pour le lancer

- nom de fichier à rechercher  fais un copier coller de :

  C:\WINDOWS\system32\pjexghjrrv.ex_ 

- Type de recherche : sélectionne l'option 6 puis valide [entree]

OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

- Fais un copier / coller de ce rapport dans ton prochain post.

Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient

tu referas la même recherche avec 
C:\WINDOWS\system32\pjexghjrrv.exe

g · Answer

tu crois ke c grave ce j ai

g · Answer

voici le raport du 1er fichiers
 11/12/2007 ---- 22:29:07,03  

----------------------------------
§§§§§§ [C:\WINDOWS\system32\pjexghjrrv.ex_6] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------

philae83 · Answer

tu es bien infecté, c'est le moins que l'on puisse dire :)

g · Answer

voici le 2eme
 11/12/2007 ---- 22:34:10,54  

----------------------------------
§§§§§§ [C:\WINDOWS\system32\pjexghjrrv.exe ] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------

g · Answer

c gentil de ta part d etre patiente avec moi

philae83 · Answer

pour le 1er tu t'es trompé
 [C:\WINDOWS\system32\pjexghjrrv.ex_6] 

y a un 6 de trop, recommence avec

C:\WINDOWS\system32\pjexghjrrv.ex_

fait bien attention à prendre en compte à la fin le _

g · Answer

11/12/2007 ---- 22:38:27,87  

----------------------------------
§§§§§§ [C:\WINDOWS\system32\pjexghjrrv.ex_] §§§§§§
----------------------------------
[X] Registre
 
-------------- [  ] rapide
-- Fichier --- [  ] disque systeme
 ------------- [X] complete


********************
     [Registre] 
********************

Aucune entrée détectée

*******************
     [Fichier] 
*******************



*********************
     [Même date] 
*********************

Aucun fichier créé à la même date détecté


Outil Aide Diagnostic By !aur3n7 Version 1.1
----------------------------------
§§§§§ Fin Rapport §§§§§ 
----------------------------------

g · Answer

tu  m apprendra lol

philae83 · Answer

on continue donc Télécharge RavAntivirus d'Evosla, http://www.evosla.com/files/vir/rav/rav.zip Si tu as une clé USB, disque dur externe, etc, branche-les sans les ouvrir avant de lancer ce FIX Fais un clic droit sur le fichier .ZIP > Extraire sur > le Bureau Doucle-clique sur >> RAV.exe << afin de lancer l'outil. Une fois RAV ANTIVIRUS lancé, laisse-le réagir , il scanne automatiquement tout les lecteurs (disques fixes et amovibles) Si infection > un log s'établira, sinon le soft affichera (très rapide) ==>Votre Ordinateur est sain . Retire tes disques amovibles et redémarrez votre ordinateur. Poste le rapport, si infection! et Sélectionne le texte suivant : Driver:: aaudstum Registry:: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3 b4-c8e9-11db-9b28-000b6b985b31} HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43 a5-436f-11db-9a30-000b6b6d5b6e} file:: C:\WINDOWS\system32 kmssleb.dll C:\WINDOWS\system32\ckjhbsml.dll C:\WINDOWS\system32 fyqwvha.dll C:\WINDOWS\system32 hrehtfn.dll C:\WINDOWS\system32\iympuxmg.dll C:\WINDOWS\system32\dseibwxj.dll C:\WINDOWS\system32\pjexghjrrv.ex_ C:\DOCUMENTS and SETTINGS\ADMINTRATEUR1\LOCALS SETTINGS\Temp\aaudstum.sys # Copie le texte sélectionné (CTRL+C). # Ouvre le bloc-note (programme>Accessoire>bloc-note). # Colle le texte copié dans ce bloc-note (CTRL+V). # Sauvegarde ce fichier sous le nom de CFScript.txt # Fais un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe # Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide. # Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal! Ne touche à rien tant que le scan n'est pas terminé. # Une fois le scan achevé, un rapport va s'afficher: Poste son contenu. # Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt poste les rapports demandés

g · Answer

ok pour l antivirus y avait marker mon ordi est sain et voici le raport comboxfix ComboFix 07-12-09.1 - Administrateur 2007-12-11 23:16:03.5 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.231 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\Administrateur\Bureau\CFScript.txt * Created a new restore point FILE C:\DOCUMENTS and SETTINGS\ADMINTRATEUR1\LOCALS SETTINGS\Temp\aaudstum.sys C:\WINDOWS\system32\ckjhbsml.dll C:\WINDOWS\system32\dseibwxj.dll C:\WINDOWS\system32\iympuxmg.dll C:\WINDOWS\system32\pjexghjrrv.ex_ C:\WINDOWS\system32 kmssleb.dll C:\WINDOWS\system32 fyqwvha.dll C:\WINDOWS\system32 hrehtfn.dll . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\ckjhbsml.dll C:\WINDOWS\system32\dseibwxj.dll C:\WINDOWS\system32\iympuxmg.dll C:\WINDOWS\system32\pjexghjrrv.ex_ C:\WINDOWS\system32 kmssleb.dll C:\WINDOWS\system32 fyqwvha.dll C:\WINDOWS\system32 hrehtfn.dll . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_AAUDSTUM -------\aaudstum ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2007-11-11 to 2007-12-11 )))))))))))))))))))))))))))))))))))) . 2007-12-11 23:11 . 2007-12-11 23:11 172 --a------ C:\curr_ver.tmp 2007-12-11 20:52 . 2007-12-11 21:48 d-------- C:\Program Files\Navilog1 2007-12-10 23:09 . 2007-12-10 23:14 d-------- C:\Program Files\RegCleaner 2007-12-10 21:41 . 2007-12-11 19:39 d-------- C:\WINDOWS\system32\ActiveScan 2007-12-10 21:41 . 2007-12-11 18:49 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2007-12-10 21:41 . 2007-12-11 18:49 1,406 --a------ C:\WINDOWS\system32\Help.ico 2007-12-10 19:14 . 2007-12-10 19:14 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2007-12-10 19:00 . 2007-12-10 19:00 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-10 19:00 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-12-09 21:43 . 2007-12-09 21:43 d-------- C:\Program Files\CCleaner 2007-12-09 00:42 . 2007-12-09 16:35 2,398 --a------ C:\WINDOWS\system32 mp.reg 2007-12-09 00:12 . 2007-12-10 22:46 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS sreg.dat 2007-12-07 23:37 . 2007-12-09 21:17 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-11 18:22 --------- d-----w C:\Program Files\Webshots 2007-12-11 18:10 --------- d-----w C:\Program Files\Google 2007-12-10 22:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-10 03:05 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"= 0 (0x0) R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - ENTDRV51 . Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156] -> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jwenlkwx.dll . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-11 23:23:18 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-11 23:26:24 - machine was rebooted C:\ComboFix2.txt ... 2007-12-11 20:01 C:\ComboFix3.txt ... 2007-12-09 21:55 . --- E O F ---

philae83 · Answer

voilà :

* recréé un point de sauvegarde avec ERUNT
Erunt (merci Domi)
http://pageperso.aol.fr/loraline60/tuto_erunt.htm

PUIS

je ne me souviens + si on l'a téléchargé ou non. Si cela n'a pas été fait, commence par ça stp

* Télécharge CCleaner.

https://www.pcastuces.com/logitheque/ccleaner.htm

Installe le dans un répertoire dédié.

Décoche pendant l'installation

--- les deux cases "Ajouter l'option ... "

--- Contrôler les mises à jour

--- Ajouter la Barre d'Outils Yahoo! CCleaner

* Lance Ccleaner pour un nettoyage complet. 

puis

Sélectionne le texte suivant :

Registry::
[-HKEY_CURRENT_USER \software\microsoft\windows\currentversion\explorer\mountpoints2\{7c9432 51-9d1f-11dc-8718-0014a577d395}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3 b4-c8e9-11db-9b28-000b6b985b31}]


# Copie le texte sélectionné (CTRL+C).
# Ouvre le bloc-note (programme>Accessoire>bloc-note).
# Colle le texte copié dans ce bloc-note (CTRL+V).
# Sauvegarde ce fichier sous le nom de CFScript.txt
# Fais un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe
# Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
# Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
# Une fois le scan achevé, un rapport va s'afficher: Poste son contenu.
# Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt

g · Answer

kan je lance le feu vert et je clique oui ca me met 
error :selectedfile does notappear to be  a valid scrip 
je suis nul en anglais lol

philae83 · Answer

je viens de changer les manips, reprend mon post stp et fait les nouvelles. Plus adéquat je pense

g · Answer

lorsque combofix ma afficher le raport je navais plus acces a internet jai du redemarrer voici le rapport est ce ke je dois laisser avg antispyware actif? ComboFix 07-12-09.1 - Administrateur 2007-12-12 0:29:26.6 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.113 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\Administrateur\Bureau\CFScript.txt * Created a new restore point . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-11 to 2007-12-11 )))))))))))))))))))))))))))))))))))) . 2007-12-11 23:47 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-12-11 23:47 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-12-11 23:47 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-12-11 23:47 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-12-11 23:47 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-12-11 23:11 . 2007-12-11 23:11 172 --a------ C:\curr_ver.tmp 2007-12-11 20:52 . 2007-12-11 21:48 d-------- C:\Program Files\Navilog1 2007-12-10 23:09 . 2007-12-10 23:14 d-------- C:\Program Files\RegCleaner 2007-12-10 21:41 . 2007-12-11 19:39 d-------- C:\WINDOWS\system32\ActiveScan 2007-12-10 21:41 . 2007-12-11 18:49 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2007-12-10 21:41 . 2007-12-11 18:49 1,406 --a------ C:\WINDOWS\system32\Help.ico 2007-12-10 19:14 . 2007-12-10 19:14 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2007-12-10 19:00 . 2007-12-10 19:00 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-10 19:00 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-12-09 21:43 . 2007-12-09 21:43 d-------- C:\Program Files\CCleaner 2007-12-09 00:42 . 2007-12-11 23:48 2,406 --a------ C:\WINDOWS\system32\tmp.reg 2007-12-09 00:12 . 2007-12-10 22:46 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS\nsreg.dat 2007-12-07 23:37 . 2007-12-09 21:17 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-11 18:22 --------- d-----w C:\Program Files\Webshots 2007-12-11 18:10 --------- d-----w C:\Program Files\Google 2007-12-10 22:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-10 03:05 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((( snapshot@2007-12-11_19.59.52,76 ))))))))))))))))))))))))))))))))))))))))) . + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\ERDNT.EXE + 2007-12-11 23:20:10 12,066,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 23:20:10 122,880 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\ERDNT.EXE + 2007-12-11 23:24:11 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 23:24:12 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\ERDNT.EXE + 2007-12-11 22:23:52 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 22:23:53 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000002\UsrClass.dat - 2007-12-04 00:00:42 136,704 ----a-w C:\WINDOWS\system32\swsc.exe + 2006-01-09 08:36:06 40,960 ----a-w C:\WINDOWS\system32\swsc.exe - 2006-12-01 04:20:32 212,480 ----a-w C:\WINDOWS\system32\swxcacls.exe + 2006-12-01 04:20:32 79,360 ----a-w C:\WINDOWS\system32\swxcacls.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE [2005-03-06 15:26:48] Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2006-03-01 00:14:30] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ McAfee Desktop Firewall Tray.lnk - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [2006-02-28 22:48:26] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2006-09-13 23:24:08] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-12 00:32:38 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-12 0:34:09 C:\ComboFix2.txt ... 2007-12-11 23:26 C:\ComboFix3.txt ... 2007-12-11 20:01 . --- E O F ---

philae83 · Answer

bon ça commence à me courrir cette histoire.

Comment se comporte ton pc actuellement ?

j'ai tjs ce reste dans la bdr qui n'a pas l'air de vouloir partir.

avait on télécharger SRENG ? je crois que oui relance le et poste un rapport stp, mais je crois que je verrais demain mantenant vu l'heure, il est plus sage que j'aille dormir. La nuit porte conseil

g · Answer

mon se comporte mieux kavant y met un peu de temps a demarrer mais je pense ke jai 2 ou 3 programmes qui s ouvrent en meme temps je crois ke c du a ca par contre je n ai plus les pubs itempestives des sois disant antirus voila sinon je te souhaite bonne nuit et merci encore 1 fois ps:crois tu ke si je reinstalle windows xp ca sera bon? sinon je te transmets le raport sreng ComboFix 07-12-09.1 - Administrateur 2007-12-12 0:29:26.6 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.113 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\Administrateur\Bureau\CFScript.txt * Created a new restore point . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-11 to 2007-12-11 )))))))))))))))))))))))))))))))))))) . 2007-12-11 23:47 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-12-11 23:47 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-12-11 23:47 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-12-11 23:47 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-12-11 23:47 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-12-11 23:11 . 2007-12-11 23:11 172 --a------ C:\curr_ver.tmp 2007-12-11 20:52 . 2007-12-11 21:48 d-------- C:\Program Files\Navilog1 2007-12-10 23:09 . 2007-12-10 23:14 d-------- C:\Program Files\RegCleaner 2007-12-10 21:41 . 2007-12-11 19:39 d-------- C:\WINDOWS\system32\ActiveScan 2007-12-10 21:41 . 2007-12-11 18:49 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2007-12-10 21:41 . 2007-12-11 18:49 1,406 --a------ C:\WINDOWS\system32\Help.ico 2007-12-10 19:14 . 2007-12-10 19:14 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2007-12-10 19:00 . 2007-12-10 19:00 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-10 19:00 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-12-09 21:43 . 2007-12-09 21:43 d-------- C:\Program Files\CCleaner 2007-12-09 00:42 . 2007-12-11 23:48 2,406 --a------ C:\WINDOWS\system32\tmp.reg 2007-12-09 00:12 . 2007-12-10 22:46 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS\nsreg.dat 2007-12-07 23:37 . 2007-12-09 21:17 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-11 18:22 --------- d-----w C:\Program Files\Webshots 2007-12-11 18:10 --------- d-----w C:\Program Files\Google 2007-12-10 22:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-10 03:05 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((( snapshot@2007-12-11_19.59.52,76 ))))))))))))))))))))))))))))))))))))))))) . + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\ERDNT.EXE + 2007-12-11 23:20:10 12,066,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 23:20:10 122,880 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\ERDNT.EXE + 2007-12-11 23:24:11 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 23:24:12 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\ERDNT.EXE + 2007-12-11 22:23:52 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 22:23:53 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000002\UsrClass.dat - 2007-12-04 00:00:42 136,704 ----a-w C:\WINDOWS\system32\swsc.exe + 2006-01-09 08:36:06 40,960 ----a-w C:\WINDOWS\system32\swsc.exe - 2006-12-01 04:20:32 212,480 ----a-w C:\WINDOWS\system32\swxcacls.exe + 2006-12-01 04:20:32 79,360 ----a-w C:\WINDOWS\system32\swxcacls.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE [2005-03-06 15:26:48] Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2006-03-01 00:14:30] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ McAfee Desktop Firewall Tray.lnk - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [2006-02-28 22:48:26] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2006-09-13 23:24:08] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-12 00:32:38 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-12 0:34:09 C:\ComboFix2.txt ... 2007-12-11 23:26 C:\ComboFix3.txt ... 2007-12-11 20:01 . --- E O F ---

philae83 · Answer

je regarderais ton rapport SRENG

t merci encore 1 fois
ps:crois tu ke si je reinstalle windows xp ca sera bon? 

tu crois que je me décarcasse pour que tu formates ?

g · Answer

lol

philae83 · Answer

c'est SRENG que j'avais demandé, pas combo

g · Answer

[CODE] 2007-12-12,01:06:18 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Google Inc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"> [Sun Microsystems, Inc.] <"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.] <"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.] <"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.] [N/A] <"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A] [C-Media Electronic Inc. (www.cmedia.com.tw)]

[] [Realtek Semiconductor Corp.] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <> [N/A] [Triplex Corp.] <"C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] ================================== Startup Folders [McAfee Desktop Firewall Tray] C:\PROGRA~1\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [Networks Associates Technology, Inc.]> [NkbMonitor.exe] C:\PROGRA~1\Nikon\PictureProject\NkbMonitor.exe [Nikon Corporation]> [ERUNT AutoBackup] C:\PROGRA~1\ERUNT\AUTOBACK.EXE [N/A]> [Webshots] C:\PROGRA~1\Webshots\Launcher.exe [N/A]> ================================== Services [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] [ATI Smart / ATI Smart][Stopped/Auto Start] <> [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start] [McAfee Desktop Firewall Service / FireSvc][Running/Auto Start] <"C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe"> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [McAfee Framework Service / McAfeeFramework][Running/Auto Start] [Network Associates McShield / McShield][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"> [Network Associates Task Manager / McTaskManager][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"> ================================== Drivers [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [atksgt / atksgt][Running/Auto Start] [AVG Anti-Rootkit / AVG Anti-Rootkit][Running/Boot Start] <\SystemRoot\System32\DRIVERS\avgarkt.sys> [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start] <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys> [Avg Anti-Rootkit Clean Driver / AvgArCln][Running/System Start] [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start] [catchme / catchme][Stopped/Manual Start] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys> [C-Media PCI Audio Driver (WDM) / cmpci][Stopped/Manual Start]

[C-Media WDM Audio Interface / cmuda][Stopped/Manual Start]

[dtscsi / dtscsi][Running/Manual Start] <\SystemRoot\System32\Drivers\dtscsi.sys> [Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Running/Manual Start] [McAfee Desktop Firewall Network Driver / FireHook][Running/Auto Start] [firelm01 / firelm01][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\firelm01.sys> [McAfee Desktop Firewall Policy Manager Driver / FirePM][Running/Boot Start] <\SystemRoot\system32\Drivers\FirePM.sys> [McAfee Desktop Firewall TDI Driver / FireTDI][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\FireTDI.sys> [Triplex Ma-La-Zi PCI Joystick / gameport][Running/Manual Start] [lirsgt / lirsgt][Running/Auto Start] [NaiAvFilter1 / NaiAvFilter1][Running/Manual Start] [NaiAvTdi1 / NaiAvTdi1][Running/System Start] [Logitech QuickCam Express(PID_0920) / PID_0920][Stopped/Manual Start] [802.11g USB 2.0 adapter / PRISM_A02][Stopped/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [Secdrv / Secdrv][Running/Auto Start] [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [TxNtSys / TxNtSys][Stopped/Manual Start] <\??\C:\Triplex\Sound\TxNtSys.sys> [Pinnacle PCTV DVB-T USB Stick / USB28xxBGA][Stopped/Manual Start] [USB 28xx OEM Filter / USB28xxOEM][Stopped/Manual Start] [Scientific-Atlanta USB Cable Modem Driver / USBCM][Stopped/Manual Start] <> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys> [Triplex Ma-La-Zi PCI Audio (WDM) / wdm_fm801][Running/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [EntDrv51 / EntDrv51][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\EntDrv51.sys> ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Skype add-on (mastermind)] {22BF413B-C6D2-4d91-82A9-A0F997BA588C} [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [Skype add-on (mastermind)] {22BF413B-C6D2-4D91-82A9-A0F997BA588C} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {233C1507-6A77-46A4-9443-F871F945D258} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [Reporte Class] {4A2A4430-3967-4461-94C7-BD95C419F3CF} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [Seleccion Class] {6CEC0297-FAFB-41FB-97EA-77E3081B1DFE} [ControlConexion Class] {6FDCDD41-6C97-4A3B-9E6D-0144B66A1CE4} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [Navigateur Web Microsoft] {8856F961-340A-11D0-A96B-00C04FD705A2} [Panda ActiveScan] {96567F65-E04C-4611-AF29-7CDEA6FA6A84} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Download all links using BitComet] [Download all videos using BitComet] [Download link using &BitComet] ================================== Running Processes [PID: 616 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 692 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.5] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 740 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 752 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 908 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 920 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1000 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1096 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1144 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1272 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1560 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1688 / Administrateur][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 1784 / Administrateur][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\Program Files\WinRAR arext.dll] [N/A, ] [C:\Program Files\Network Associates\VirusScan\shext.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\ShExtRes.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\WINDOWS\system32\CmdLineExt.dll] [Sony DADC Austria AG., 1,1,221,0] [PID: 1928 / Administrateur][C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.90.3] [PID: 1936 / Administrateur][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\shstat.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\Product.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\RES09\Shutilrc.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\Graphics.dll] [Network Associates, Inc., 8.0.0.912] [PID: 1944 / Administrateur][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 1952 / Administrateur][C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe] [Network Associates, Inc., 2.0.275.0] [PID: 2004 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17263] [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] [ATI Technologies Inc., 1.2.2159.16348] [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\atidemgr.dll] [ATI Technologies Inc., 1.2.2217.17103] [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll] [ATI Technologies Inc., 1.2.2147.29150] [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27456] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17173] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27452] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17190] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17187] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29158] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17217] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17203] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17184] [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17177] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17175] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17236] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17162] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17227] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17232] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17224] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17220] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17230] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17159] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17196] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17200] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17193] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll] [ATI Technologies Inc., 1.2.2154.21069] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17211] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17206] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17209] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17168] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll] [ATI Technologies Inc., 1.2.2182.27432] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2168.19591] [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll] [ATI Technologies Inc., 1.2.2166.26895] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2210.26509] [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [PID: 2016 / Administrateur][C:\WINDOWS\Mixer.exe] [C-Media Electronic Inc. (www.cmedia.com.tw), 1.58] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\cmnprop.dll] [C-Media Corporation, 5.00.2195.12] [PID: 240 / Administrateur][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 51] [PID: 232 / Administrateur][C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE] [Logitech Inc., 8.1.2.1003] [PID: 276 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 260 / Administrateur][C:\WINDOWS\system32\Fmctrl.EXE] [Triplex Corp., 1.00] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 436 / Administrateur][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\gtn.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 552 / SYSTEM][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [PID: 640 / Administrateur][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP ailite.dll] [Network Associates, Inc., 1.0.452] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\TrayRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 648 / SYSTEM][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\applib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Logging.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\InternetManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aInet.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\UserSpace.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Management.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\cmalib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aPolicyManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\PsApi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Scheduler.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 948 / Administrateur][C:\Program Files\Nikon\PictureProject\NkbMonitor.exe] [Nikon Corporation, 1, 7, 5, 3000] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 1152 / SYSTEM][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.DLL] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\FTL.Dll] [Network Associates, Inc., 8.0.0.133] [C:\Program Files\Network Associates\VirusScan aiann.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\Res09 aEvtRes.dll] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\MCSCAN32.DLL] [McAfee, Inc., 5.2.00] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] [Network Associates, Inc, 8.0.0.240] [c:\WINDOWS\system32\msxml4.dll] [Microsoft Corporation, 4.20.9848.0] [PID: 1248 / SYSTEM][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aicondl.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\VsTskMgr.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] [Network Associates, Inc., 8.0.0.145] [PID: 1704 / SYSTEM][C:\PROGRA~1\Network Associates\Common Framework aPrdMgr.exe] [Network Associates, Inc., 3.5.0.412] [C:\PROGRA~1\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\FireePO.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] [Network Associates, Inc., 8.0.0.912] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1900 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 3340 / Administrateur][C:\WINDOWS\system32\WgaTray.exe] [Microsoft Corporation, 1.7.0018.5] [PID: 3360 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 4064 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.wizard.dll] [ATI Technologies Inc., 1.2.2217.17146] [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.component.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17148] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17136] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17139] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17130] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17133] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17125] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17128] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17143] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.wizard.dll] [ , 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17121] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.wizard.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17123] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.shared.dll] [ATI Technologies Inc., 1.2.0.0] [c:\program files\ati technologies\ati.ace\atixclib.dll] [ , 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 4076 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll] [ATI Technologies Inc., 1.2.2217.17245] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 324 / Administrateur][C:\Program Files\internet explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300] [C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll] [Skype Technologies S.A., 2, 2, 0, 74] [C:\Program Files\Skype oolbars\Shared\SPhoneParser.dll] [Skype Technologies, 1, 0, 1, 143] [C:\Program Files\BitComet ools\BitCometBHO.dll] [N/A, ] [C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.90.3] [c:\program files\google\googletoolbar3.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\mcscan32.dll] [McAfee, Inc., 5.2.00] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.01081

philae83 · Answer

le rapport est complet ?

ce qui est étrange c'est que la manip que je t'ai donné plus haut, je l'ai donnée aussi à quelqu'un d'autre et qu'elle a fonctionné. Je pense que tu as dû raté ou mal réussir celle ci

on revoit ça demain si tu veux bien
il est tard

g · Answer

ok pas de probleme bye,je crois ke tu as raison je pense ke celui ci fera l affaire [CODE] 2007-12-12,01:06:18 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Google Inc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"> [Sun Microsystems, Inc.] <"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.] <"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.] <"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.] [N/A] <"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A] [C-Media Electronic Inc. (www.cmedia.com.tw)]

[] [Realtek Semiconductor Corp.] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <> [N/A] [Triplex Corp.] <"C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] ================================== Startup Folders [McAfee Desktop Firewall Tray] C:\PROGRA~1\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [Networks Associates Technology, Inc.]> [NkbMonitor.exe] C:\PROGRA~1\Nikon\PictureProject\NkbMonitor.exe [Nikon Corporation]> [ERUNT AutoBackup] C:\PROGRA~1\ERUNT\AUTOBACK.EXE [N/A]> [Webshots] C:\PROGRA~1\Webshots\Launcher.exe [N/A]> ================================== Services [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] [ATI Smart / ATI Smart][Stopped/Auto Start] <> [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start] [McAfee Desktop Firewall Service / FireSvc][Running/Auto Start] <"C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe"> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [McAfee Framework Service / McAfeeFramework][Running/Auto Start] [Network Associates McShield / McShield][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"> [Network Associates Task Manager / McTaskManager][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"> ================================== Drivers [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [atksgt / atksgt][Running/Auto Start] [AVG Anti-Rootkit / AVG Anti-Rootkit][Running/Boot Start] <\SystemRoot\System32\DRIVERS\avgarkt.sys> [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start] <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys> [Avg Anti-Rootkit Clean Driver / AvgArCln][Running/System Start] [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start] [catchme / catchme][Stopped/Manual Start] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys> [C-Media PCI Audio Driver (WDM) / cmpci][Stopped/Manual Start]

[C-Media WDM Audio Interface / cmuda][Stopped/Manual Start]

[dtscsi / dtscsi][Running/Manual Start] <\SystemRoot\System32\Drivers\dtscsi.sys> [Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Running/Manual Start] [McAfee Desktop Firewall Network Driver / FireHook][Running/Auto Start] [firelm01 / firelm01][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\firelm01.sys> [McAfee Desktop Firewall Policy Manager Driver / FirePM][Running/Boot Start] <\SystemRoot\system32\Drivers\FirePM.sys> [McAfee Desktop Firewall TDI Driver / FireTDI][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\FireTDI.sys> [Triplex Ma-La-Zi PCI Joystick / gameport][Running/Manual Start] [lirsgt / lirsgt][Running/Auto Start] [NaiAvFilter1 / NaiAvFilter1][Running/Manual Start] [NaiAvTdi1 / NaiAvTdi1][Running/System Start] [Logitech QuickCam Express(PID_0920) / PID_0920][Stopped/Manual Start] [802.11g USB 2.0 adapter / PRISM_A02][Stopped/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [Secdrv / Secdrv][Running/Auto Start] [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [TxNtSys / TxNtSys][Stopped/Manual Start] <\??\C:\Triplex\Sound\TxNtSys.sys> [Pinnacle PCTV DVB-T USB Stick / USB28xxBGA][Stopped/Manual Start] [USB 28xx OEM Filter / USB28xxOEM][Stopped/Manual Start] [Scientific-Atlanta USB Cable Modem Driver / USBCM][Stopped/Manual Start] <> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys> [Triplex Ma-La-Zi PCI Audio (WDM) / wdm_fm801][Running/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [EntDrv51 / EntDrv51][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\EntDrv51.sys> ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Skype add-on (mastermind)] {22BF413B-C6D2-4d91-82A9-A0F997BA588C} [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [Skype add-on (mastermind)] {22BF413B-C6D2-4D91-82A9-A0F997BA588C} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {233C1507-6A77-46A4-9443-F871F945D258} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [Reporte Class] {4A2A4430-3967-4461-94C7-BD95C419F3CF} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [Seleccion Class] {6CEC0297-FAFB-41FB-97EA-77E3081B1DFE} [ControlConexion Class] {6FDCDD41-6C97-4A3B-9E6D-0144B66A1CE4} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [Navigateur Web Microsoft] {8856F961-340A-11D0-A96B-00C04FD705A2} [Panda ActiveScan] {96567F65-E04C-4611-AF29-7CDEA6FA6A84} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Download all links using BitComet] [Download all videos using BitComet] [Download link using &BitComet] ================================== Running Processes [PID: 616 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 692 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.5] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 740 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 752 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 908 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 920 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1000 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1096 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1144 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1272 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1560 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1688 / Administrateur][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 1784 / Administrateur][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\Program Files\WinRAR arext.dll] [N/A, ] [C:\Program Files\Network Associates\VirusScan\shext.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\ShExtRes.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\WINDOWS\system32\CmdLineExt.dll] [Sony DADC Austria AG., 1,1,221,0] [PID: 1928 / Administrateur][C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.90.3] [PID: 1936 / Administrateur][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\shstat.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\Product.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\RES09\Shutilrc.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\Graphics.dll] [Network Associates, Inc., 8.0.0.912] [PID: 1944 / Administrateur][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 1952 / Administrateur][C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe] [Network Associates, Inc., 2.0.275.0] [PID: 2004 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17263] [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] [ATI Technologies Inc., 1.2.2159.16348] [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\atidemgr.dll] [ATI Technologies Inc., 1.2.2217.17103] [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll] [ATI Technologies Inc., 1.2.2147.29150] [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27456] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17173] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27452] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17190] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17187] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29158] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17217] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17203] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17184] [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17177] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17175] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17236] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17162] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17227] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17232] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17224] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17220] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17230] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17159] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17196] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17200] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17193] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll] [ATI Technologies Inc., 1.2.2154.21069] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17211] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17206] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17209] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17168] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll] [ATI Technologies Inc., 1.2.2182.27432] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2168.19591] [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll] [ATI Technologies Inc., 1.2.2166.26895] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2210.26509] [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [PID: 2016 / Administrateur][C:\WINDOWS\Mixer.exe] [C-Media Electronic Inc. (www.cmedia.com.tw), 1.58] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\cmnprop.dll] [C-Media Corporation, 5.00.2195.12] [PID: 240 / Administrateur][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 51] [PID: 232 / Administrateur][C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE] [Logitech Inc., 8.1.2.1003] [PID: 276 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 260 / Administrateur][C:\WINDOWS\system32\Fmctrl.EXE] [Triplex Corp., 1.00] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 436 / Administrateur][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\gtn.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 552 / SYSTEM][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [PID: 640 / Administrateur][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP ailite.dll] [Network Associates, Inc., 1.0.452] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\TrayRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 648 / SYSTEM][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\applib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Logging.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\InternetManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aInet.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\UserSpace.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Management.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\cmalib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aPolicyManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\PsApi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Scheduler.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 948 / Administrateur][C:\Program Files\Nikon\PictureProject\NkbMonitor.exe] [Nikon Corporation, 1, 7, 5, 3000] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 1152 / SYSTEM][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.DLL] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\FTL.Dll] [Network Associates, Inc., 8.0.0.133] [C:\Program Files\Network Associates\VirusScan aiann.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\Res09 aEvtRes.dll] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\MCSCAN32.DLL] [McAfee, Inc., 5.2.00] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] [Network Associates, Inc, 8.0.0.240] [c:\WINDOWS\system32\msxml4.dll] [Microsoft Corporation, 4.20.9848.0] [PID: 1248 / SYSTEM][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aicondl.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\VsTskMgr.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] [Network Associates, Inc., 8.0.0.145] [PID: 1704 / SYSTEM][C:\PROGRA~1\Network Associates\Common Framework aPrdMgr.exe] [Network Associates, Inc., 3.5.0.412] [C:\PROGRA~1\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\FireePO.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] [Network Associates, Inc., 8.0.0.912] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1900 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 3340 / Administrateur][C:\WINDOWS\system32\WgaTray.exe] [Microsoft Corporation, 1.7.0018.5] [PID: 3360 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 4064 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.wizard.dll] [ATI Technologies Inc., 1.2.2217.17146] [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.component.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17148] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17136] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17139] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17130] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17133] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17125] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17128] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17143] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.wizard.dll] [ , 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17121] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.wizard.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17123] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.shared.dll] [ATI Technologies Inc., 1.2.0.0] [c:\program files\ati technologies\ati.ace\atixclib.dll] [ , 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 4076 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll] [ATI Technologies Inc., 1.2.2217.17245] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 324 / Administrateur][C:\Program Files\internet explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300] [C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll] [Skype Technologies S.A., 2, 2, 0, 74] [C:\Program Files\Skype oolbars\Shared\SPhoneParser.dll] [Skype Technologies, 1, 0, 1, 143] [C:\Program Files\BitComet ools\BitCometBHO.dll] [N/A, ] [C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.90.3] [c:\program files\google\googletoolbar3.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\mcscan32.dll] [McAfee, Inc., 5.2.00] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]

philae83 · Answer

c'est la fin qui me parait bizarre. Regarde comment il se termine.

je file

g · Answer

lol c vrai ca doit ce terminer par code normalement

g · Answer

[CODE] 2007-12-12,01:06:18 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Google Inc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"> [Sun Microsystems, Inc.] <"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.] <"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.] <"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.] [N/A] <"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A] [C-Media Electronic Inc. (www.cmedia.com.tw)]

[] [Realtek Semiconductor Corp.] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <> [N/A] [Triplex Corp.] <"C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] ================================== Startup Folders [McAfee Desktop Firewall Tray] C:\PROGRA~1\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [Networks Associates Technology, Inc.]> [NkbMonitor.exe] C:\PROGRA~1\Nikon\PictureProject\NkbMonitor.exe [Nikon Corporation]> [ERUNT AutoBackup] C:\PROGRA~1\ERUNT\AUTOBACK.EXE [N/A]> [Webshots] C:\PROGRA~1\Webshots\Launcher.exe [N/A]> ================================== Services [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] [ATI Smart / ATI Smart][Stopped/Auto Start] <> [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start] [McAfee Desktop Firewall Service / FireSvc][Running/Auto Start] <"C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe"> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [McAfee Framework Service / McAfeeFramework][Running/Auto Start] [Network Associates McShield / McShield][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"> [Network Associates Task Manager / McTaskManager][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"> ================================== Drivers [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [atksgt / atksgt][Running/Auto Start] [AVG Anti-Rootkit / AVG Anti-Rootkit][Running/Boot Start] <\SystemRoot\System32\DRIVERS\avgarkt.sys> [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start] <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys> [Avg Anti-Rootkit Clean Driver / AvgArCln][Running/System Start] [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start] [catchme / catchme][Stopped/Manual Start] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys> [C-Media PCI Audio Driver (WDM) / cmpci][Stopped/Manual Start]

[C-Media WDM Audio Interface / cmuda][Stopped/Manual Start]

[dtscsi / dtscsi][Running/Manual Start] <\SystemRoot\System32\Drivers\dtscsi.sys> [Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Running/Manual Start] [McAfee Desktop Firewall Network Driver / FireHook][Running/Auto Start] [firelm01 / firelm01][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\firelm01.sys> [McAfee Desktop Firewall Policy Manager Driver / FirePM][Running/Boot Start] <\SystemRoot\system32\Drivers\FirePM.sys> [McAfee Desktop Firewall TDI Driver / FireTDI][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\FireTDI.sys> [Triplex Ma-La-Zi PCI Joystick / gameport][Running/Manual Start] [lirsgt / lirsgt][Running/Auto Start] [NaiAvFilter1 / NaiAvFilter1][Running/Manual Start] [NaiAvTdi1 / NaiAvTdi1][Running/System Start] [Logitech QuickCam Express(PID_0920) / PID_0920][Stopped/Manual Start] [802.11g USB 2.0 adapter / PRISM_A02][Stopped/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [Secdrv / Secdrv][Running/Auto Start] [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [TxNtSys / TxNtSys][Stopped/Manual Start] <\??\C:\Triplex\Sound\TxNtSys.sys> [Pinnacle PCTV DVB-T USB Stick / USB28xxBGA][Stopped/Manual Start] [USB 28xx OEM Filter / USB28xxOEM][Stopped/Manual Start] [Scientific-Atlanta USB Cable Modem Driver / USBCM][Stopped/Manual Start] <> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys> [Triplex Ma-La-Zi PCI Audio (WDM) / wdm_fm801][Running/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [EntDrv51 / EntDrv51][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\EntDrv51.sys> ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Skype add-on (mastermind)] {22BF413B-C6D2-4d91-82A9-A0F997BA588C} [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [Skype add-on (mastermind)] {22BF413B-C6D2-4D91-82A9-A0F997BA588C} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {233C1507-6A77-46A4-9443-F871F945D258} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [Reporte Class] {4A2A4430-3967-4461-94C7-BD95C419F3CF} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [Seleccion Class] {6CEC0297-FAFB-41FB-97EA-77E3081B1DFE} [ControlConexion Class] {6FDCDD41-6C97-4A3B-9E6D-0144B66A1CE4} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [Navigateur Web Microsoft] {8856F961-340A-11D0-A96B-00C04FD705A2} [Panda ActiveScan] {96567F65-E04C-4611-AF29-7CDEA6FA6A84} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Download all links using BitComet] [Download all videos using BitComet] [Download link using &BitComet] ================================== Running Processes [PID: 616 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 692 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.5] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 740 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 752 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 908 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 920 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1000 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1096 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1144 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1272 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1560 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1688 / Administrateur][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 1784 / Administrateur][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\Program Files\WinRAR arext.dll] [N/A, ] [C:\Program Files\Network Associates\VirusScan\shext.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\ShExtRes.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\WINDOWS\system32\CmdLineExt.dll] [Sony DADC Austria AG., 1,1,221,0] [PID: 1928 / Administrateur][C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.90.3] [PID: 1936 / Administrateur][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\shstat.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\Product.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\RES09\Shutilrc.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\Graphics.dll] [Network Associates, Inc., 8.0.0.912] [PID: 1944 / Administrateur][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 1952 / Administrateur][C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe] [Network Associates, Inc., 2.0.275.0] [PID: 2004 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17263] [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] [ATI Technologies Inc., 1.2.2159.16348] [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\atidemgr.dll] [ATI Technologies Inc., 1.2.2217.17103] [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll] [ATI Technologies Inc., 1.2.2147.29150] [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27456] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17173] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27452] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17190] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17187] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29158] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17217] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17203] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17184] [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17177] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17175] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17236] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17162] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17227] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17232] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17224] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17220] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17230] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17159] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17196] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17200] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17193] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll] [ATI Technologies Inc., 1.2.2154.21069] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17211] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17206] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17209] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17168] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll] [ATI Technologies Inc., 1.2.2182.27432] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2168.19591] [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll] [ATI Technologies Inc., 1.2.2166.26895] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2210.26509] [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [PID: 2016 / Administrateur][C:\WINDOWS\Mixer.exe] [C-Media Electronic Inc. (www.cmedia.com.tw), 1.58] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\cmnprop.dll] [C-Media Corporation, 5.00.2195.12] [PID: 240 / Administrateur][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 51] [PID: 232 / Administrateur][C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE] [Logitech Inc., 8.1.2.1003] [PID: 276 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 260 / Administrateur][C:\WINDOWS\system32\Fmctrl.EXE] [Triplex Corp., 1.00] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 436 / Administrateur][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\gtn.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 552 / SYSTEM][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [PID: 640 / Administrateur][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP ailite.dll] [Network Associates, Inc., 1.0.452] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\TrayRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 648 / SYSTEM][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\applib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Logging.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\InternetManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aInet.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\UserSpace.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Management.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\cmalib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aPolicyManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\PsApi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Scheduler.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 948 / Administrateur][C:\Program Files\Nikon\PictureProject\NkbMonitor.exe] [Nikon Corporation, 1, 7, 5, 3000] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 1152 / SYSTEM][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.DLL] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\FTL.Dll] [Network Associates, Inc., 8.0.0.133] [C:\Program Files\Network Associates\VirusScan aiann.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\Res09 aEvtRes.dll] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\MCSCAN32.DLL] [McAfee, Inc., 5.2.00] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] [Network Associates, Inc, 8.0.0.240] [c:\WINDOWS\system32\msxml4.dll] [Microsoft Corporation, 4.20.9848.0] [PID: 1248 / SYSTEM][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aicondl.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\VsTskMgr.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] [Network Associates, Inc., 8.0.0.145] [PID: 1704 / SYSTEM][C:\PROGRA~1\Network Associates\Common Framework aPrdMgr.exe] [Network Associates, Inc., 3.5.0.412] [C:\PROGRA~1\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\FireePO.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] [Network Associates, Inc., 8.0.0.912] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1900 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 3340 / Administrateur][C:\WINDOWS\system32\WgaTray.exe] [Microsoft Corporation, 1.7.0018.5] [PID: 3360 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 4064 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.wizard.dll] [ATI Technologies Inc., 1.2.2217.17146] [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.component.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17148] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17136] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17139] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17130] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17133] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17125] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17128] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17143] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.wizard.dll] [ , 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17121] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.wizard.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17123] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.shared.dll] [ATI Technologies Inc., 1.2.0.0] [c:\program files\ati technologies\ati.ace\atixclib.dll] [ , 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 4076 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll] [ATI Technologies Inc., 1.2.2217.17245] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 324 / Administrateur][C:\Program Files\internet explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300] [C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll] [Skype Technologies S.A., 2, 2, 0, 74] [C:\Program Files\Skype oolbars\Shared\SPhoneParser.dll] [Skype Technologies, 1, 0, 1, 143] [C:\Program Files\BitComet ools\BitCometBHO.dll] [N/A, ] [C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.90.3] [c:\program files\google\googletoolbar3.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\mcscan32.dll] [McAfee, Inc., 5.2.00] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.01081

g · Answer

c bizare ,lorsque je le mets  a l ajout il y a tout de selectionner?

g · Answer

[CODE] 2007-12-12,01:06:18 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Google Inc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"> [Sun Microsystems, Inc.] <"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.] <"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.] <"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.] [N/A] <"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A] [C-Media Electronic Inc. (www.cmedia.com.tw)]

[] [Realtek Semiconductor Corp.] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <> [N/A] [Triplex Corp.] <"C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] ================================== Startup Folders [McAfee Desktop Firewall Tray] C:\PROGRA~1\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [Networks Associates Technology, Inc.]> [NkbMonitor.exe] C:\PROGRA~1\Nikon\PictureProject\NkbMonitor.exe [Nikon Corporation]> [ERUNT AutoBackup] C:\PROGRA~1\ERUNT\AUTOBACK.EXE [N/A]> [Webshots] C:\PROGRA~1\Webshots\Launcher.exe [N/A]> ================================== Services [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] [ATI Smart / ATI Smart][Stopped/Auto Start] <> [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start] [McAfee Desktop Firewall Service / FireSvc][Running/Auto Start] <"C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe"> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [McAfee Framework Service / McAfeeFramework][Running/Auto Start] [Network Associates McShield / McShield][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"> [Network Associates Task Manager / McTaskManager][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"> ================================== Drivers [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [atksgt / atksgt][Running/Auto Start] [AVG Anti-Rootkit / AVG Anti-Rootkit][Running/Boot Start] <\SystemRoot\System32\DRIVERS\avgarkt.sys> [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start] <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys> [Avg Anti-Rootkit Clean Driver / AvgArCln][Running/System Start] [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start] [catchme / catchme][Stopped/Manual Start] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys> [C-Media PCI Audio Driver (WDM) / cmpci][Stopped/Manual Start]

[C-Media WDM Audio Interface / cmuda][Stopped/Manual Start]

[dtscsi / dtscsi][Running/Manual Start] <\SystemRoot\System32\Drivers\dtscsi.sys> [Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Running/Manual Start] [McAfee Desktop Firewall Network Driver / FireHook][Running/Auto Start] [firelm01 / firelm01][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\firelm01.sys> [McAfee Desktop Firewall Policy Manager Driver / FirePM][Running/Boot Start] <\SystemRoot\system32\Drivers\FirePM.sys> [McAfee Desktop Firewall TDI Driver / FireTDI][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\FireTDI.sys> [Triplex Ma-La-Zi PCI Joystick / gameport][Running/Manual Start] [lirsgt / lirsgt][Running/Auto Start] [NaiAvFilter1 / NaiAvFilter1][Running/Manual Start] [NaiAvTdi1 / NaiAvTdi1][Running/System Start] [Logitech QuickCam Express(PID_0920) / PID_0920][Stopped/Manual Start] [802.11g USB 2.0 adapter / PRISM_A02][Stopped/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [Secdrv / Secdrv][Running/Auto Start] [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [TxNtSys / TxNtSys][Stopped/Manual Start] <\??\C:\Triplex\Sound\TxNtSys.sys> [Pinnacle PCTV DVB-T USB Stick / USB28xxBGA][Stopped/Manual Start] [USB 28xx OEM Filter / USB28xxOEM][Stopped/Manual Start] [Scientific-Atlanta USB Cable Modem Driver / USBCM][Stopped/Manual Start] <> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys> [Triplex Ma-La-Zi PCI Audio (WDM) / wdm_fm801][Running/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [EntDrv51 / EntDrv51][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\EntDrv51.sys> ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Skype add-on (mastermind)] {22BF413B-C6D2-4d91-82A9-A0F997BA588C} [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [Skype add-on (mastermind)] {22BF413B-C6D2-4D91-82A9-A0F997BA588C} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {233C1507-6A77-46A4-9443-F871F945D258} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [Reporte Class] {4A2A4430-3967-4461-94C7-BD95C419F3CF} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [Seleccion Class] {6CEC0297-FAFB-41FB-97EA-77E3081B1DFE} [ControlConexion Class] {6FDCDD41-6C97-4A3B-9E6D-0144B66A1CE4} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [Navigateur Web Microsoft] {8856F961-340A-11D0-A96B-00C04FD705A2} [Panda ActiveScan] {96567F65-E04C-4611-AF29-7CDEA6FA6A84} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Download all links using BitComet] [Download all videos using BitComet] [Download link using &BitComet] ================================== Running Processes [PID: 616 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 692 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.5] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 740 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 752 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 908 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 920 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1000 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1096 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1144 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1272 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1560 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1688 / Administrateur][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 1784 / Administrateur][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\Program Files\WinRAR arext.dll] [N/A, ] [C:\Program Files\Network Associates\VirusScan\shext.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\ShExtRes.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\WINDOWS\system32\CmdLineExt.dll] [Sony DADC Austria AG., 1,1,221,0] [PID: 1928 / Administrateur][C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.90.3] [PID: 1936 / Administrateur][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\shstat.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\Product.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\RES09\Shutilrc.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\Graphics.dll] [Network Associates, Inc., 8.0.0.912] [PID: 1944 / Administrateur][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 1952 / Administrateur][C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe] [Network Associates, Inc., 2.0.275.0] [PID: 2004 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17263] [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] [ATI Technologies Inc., 1.2.2159.16348] [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\atidemgr.dll] [ATI Technologies Inc., 1.2.2217.17103] [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll] [ATI Technologies Inc., 1.2.2147.29150] [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27456] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17173] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27452] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17190] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17187] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29158] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17217] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17203] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17184] [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17177] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17175] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17236] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17162] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17227] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17232] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17224] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17220] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17230] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17159] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17196] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17200] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17193] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll] [ATI Technologies Inc., 1.2.2154.21069] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17211] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17206] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17209] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17168] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll] [ATI Technologies Inc., 1.2.2182.27432] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2168.19591] [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll] [ATI Technologies Inc., 1.2.2166.26895] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2210.26509] [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [PID: 2016 / Administrateur][C:\WINDOWS\Mixer.exe] [C-Media Electronic Inc. (www.cmedia.com.tw), 1.58] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\cmnprop.dll] [C-Media Corporation, 5.00.2195.12] [PID: 240 / Administrateur][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 51] [PID: 232 / Administrateur][C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE] [Logitech Inc., 8.1.2.1003] [PID: 276 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 260 / Administrateur][C:\WINDOWS\system32\Fmctrl.EXE] [Triplex Corp., 1.00] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 436 / Administrateur][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\gtn.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 552 / SYSTEM][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [PID: 640 / Administrateur][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP ailite.dll] [Network Associates, Inc., 1.0.452] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\TrayRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 648 / SYSTEM][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\applib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Logging.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\InternetManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aInet.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\UserSpace.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Management.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\cmalib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aPolicyManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\PsApi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Scheduler.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 948 / Administrateur][C:\Program Files\Nikon\PictureProject\NkbMonitor.exe] [Nikon Corporation, 1, 7, 5, 3000] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 1152 / SYSTEM][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.DLL] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\FTL.Dll] [Network Associates, Inc., 8.0.0.133] [C:\Program Files\Network Associates\VirusScan aiann.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\Res09 aEvtRes.dll] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\MCSCAN32.DLL] [McAfee, Inc., 5.2.00] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] [Network Associates, Inc, 8.0.0.240] [c:\WINDOWS\system32\msxml4.dll] [Microsoft Corporation, 4.20.9848.0] [PID: 1248 / SYSTEM][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aicondl.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\VsTskMgr.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] [Network Associates, Inc., 8.0.0.145] [PID: 1704 / SYSTEM][C:\PROGRA~1\Network Associates\Common Framework aPrdMgr.exe] [Network Associates, Inc., 3.5.0.412] [C:\PROGRA~1\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\FireePO.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] [Network Associates, Inc., 8.0.0.912] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1900 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 3340 / Administrateur][C:\WINDOWS\system32\WgaTray.exe] [Microsoft Corporation, 1.7.0018.5] [PID: 3360 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 4064 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.wizard.dll] [ATI Technologies Inc., 1.2.2217.17146] [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.component.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17148] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17136] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17139] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17130] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17133] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17125] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17128] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17143] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.wizard.dll] [ , 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17121] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.wizard.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17123] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.shared.dll] [ATI Technologies Inc., 1.2.0.0] [c:\program files\ati technologies\ati.ace\atixclib.dll] [ , 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 4076 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll] [ATI Technologies Inc., 1.2.2217.17245] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 324 / Administrateur][C:\Program Files\internet explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300] [C:\PROGRA~1\Skype\Phone\IEPlugin\SkypeIEPlugin.dll] [Skype Technologies S.A., 2, 2, 0, 74] [C:\Program Files\Skype oolbars\Shared\SPhoneParser.dll] [Skype Technologies, 1, 0, 1, 143] [C:\Program Files\BitComet ools\BitCometBHO.dll] [N/A, ] [C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll] [Sun Microsystems, Inc., 5.0.90.3] [c:\program files\google\googletoolbar3.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\mcscan32.dll] [McAfee, Inc., 5.2.00] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.01081

Utilisateur anonyme · Answer

à mon avis il te manque ceci:
---------------------------------------
 File Associations
Winsock Provider
Autorun.Inf
HOSTS File
Process Privileges Scan 
--------------------------
perso j'essaierai en mode sans échec pour voir ce que ça donne ?
https://leblogdeclaude.blogspot.com/2007/04/informatique-rebooter-xp-en-mode-sans.html

Lyonnais92 · Answer

Bonjour,

je pense que c'est un problème de taille du rapport.

Ouvre le avec le Bloc-notes, cherche la dernière ligne qui figure dans le post, sélectionne seulement le reste du rapport et copie ce reste dans ta réponse.

Comme le dit philo, la suite du rapport doit colmporter les infos sur les 5 points qu'il mentionne.

g · Answer

[CODE] 2007-12-12,14:42:49 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed Follow item(s) have been choosed: All Boot Items (Including Registry, Startup Folders, Services and so on) Browser Add-ons Runing Processes (Including process model information) File Associations Winsock Provider Autorun.Inf HOSTS File Process Privileges Scan Boot Items Registry [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Google Inc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"> [Sun Microsystems, Inc.] <"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.] <"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.] <"C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.] [N/A] <"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A] [C-Media Electronic Inc. (www.cmedia.com.tw)]

[] [Realtek Semiconductor Corp.] [(Verified)Microsoft Windows XP Publisher] <> [N/A] [Triplex Corp.] <"C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime> [Apple Inc.] <"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}> [(Verified)GRISOFT LTD] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] ================================== Startup Folders [McAfee Desktop Firewall Tray] C:\PROGRA~1\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [Networks Associates Technology, Inc.]> [NkbMonitor.exe] C:\PROGRA~1\Nikon\PictureProject\NkbMonitor.exe [Nikon Corporation]> [ERUNT AutoBackup] C:\PROGRA~1\ERUNT\AUTOBACK.EXE [N/A]> [Webshots] C:\PROGRA~1\Webshots\Launcher.exe [N/A]> ================================== Services [Apple Mobile Device / Apple Mobile Device][Running/Auto Start] <"C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] [ATI Smart / ATI Smart][Stopped/Auto Start] <> [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start] [McAfee Desktop Firewall Service / FireSvc][Running/Auto Start] <"C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe"> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [McAfee Framework Service / McAfeeFramework][Running/Auto Start] [Network Associates McShield / McShield][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"> [Network Associates Task Manager / McTaskManager][Running/Auto Start] <"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"> ================================== Drivers [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [atksgt / atksgt][Running/Auto Start] [AVG Anti-Rootkit / AVG Anti-Rootkit][Running/Boot Start] <\SystemRoot\System32\DRIVERS\avgarkt.sys> [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start] <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys> [Avg Anti-Rootkit Clean Driver / AvgArCln][Running/System Start] [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start] [catchme / catchme][Stopped/Manual Start] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys> [C-Media PCI Audio Driver (WDM) / cmpci][Stopped/Manual Start]

[C-Media WDM Audio Interface / cmuda][Stopped/Manual Start]

[dtscsi / dtscsi][Running/Manual Start] <\SystemRoot\System32\Drivers\dtscsi.sys> [Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Running/Manual Start] [McAfee Desktop Firewall Network Driver / FireHook][Running/Auto Start] [firelm01 / firelm01][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\firelm01.sys> [McAfee Desktop Firewall Policy Manager Driver / FirePM][Running/Boot Start] <\SystemRoot\system32\Drivers\FirePM.sys> [McAfee Desktop Firewall TDI Driver / FireTDI][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\FireTDI.sys> [Triplex Ma-La-Zi PCI Joystick / gameport][Running/Manual Start] [lirsgt / lirsgt][Running/Auto Start] [NaiAvFilter1 / NaiAvFilter1][Running/Manual Start] [NaiAvTdi1 / NaiAvTdi1][Running/System Start] [Logitech QuickCam Express(PID_0920) / PID_0920][Stopped/Manual Start] [802.11g USB 2.0 adapter / PRISM_A02][Stopped/Manual Start] [Pilote de liaison parallèle directe / Ptilink][Running/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [Secdrv / Secdrv][Running/Auto Start] [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [TxNtSys / TxNtSys][Stopped/Manual Start] <\??\C:\Triplex\Sound\TxNtSys.sys> [Pinnacle PCTV DVB-T USB Stick / USB28xxBGA][Stopped/Manual Start] [USB 28xx OEM Filter / USB28xxOEM][Stopped/Manual Start] [Scientific-Atlanta USB Cable Modem Driver / USBCM][Stopped/Manual Start] <> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys> [Triplex Ma-La-Zi PCI Audio (WDM) / wdm_fm801][Running/Manual Start] [Codec Teletext standard / WSTCODEC][Stopped/Manual Start] [EntDrv51 / EntDrv51][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\EntDrv51.sys> ================================== Browser Add-ons [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Skype add-on (mastermind)] {22BF413B-C6D2-4d91-82A9-A0F997BA588C} [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Shockwave ActiveX Control] {166B1BCA-3F9C-11CF-8075-444553540000} [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} [Skype add-on (mastermind)] {22BF413B-C6D2-4D91-82A9-A0F997BA588C} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [Shockwave ActiveX Control] {233C1507-6A77-46A4-9443-F871F945D258} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [QuickTime Object] {4063BE15-3B08-470D-A0D5-B37161CFFD69} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [Reporte Class] {4A2A4430-3967-4461-94C7-BD95C419F3CF} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [Seleccion Class] {6CEC0297-FAFB-41FB-97EA-77E3081B1DFE} [ControlConexion Class] {6FDCDD41-6C97-4A3B-9E6D-0144B66A1CE4} [SSVHelper Class] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [Skype add-on (button)] {77BF5300-1474-4EC7-9980-D32B190E9B07} [Navigateur Web Microsoft] {8856F961-340A-11D0-A96B-00C04FD705A2} [Panda ActiveScan] {96567F65-E04C-4611-AF29-7CDEA6FA6A84} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Download all links using BitComet] [Download all videos using BitComet] [Download link using &BitComet] ================================== Running Processes [PID: 612 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 660 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 688 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.5] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 736 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 748 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 904 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 916 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1008 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1104 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [PID: 1144 / SERVICE RÉSEAU][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1192 / SERVICE LOCAL][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1532 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1700 / SYSTEM][C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID: 1796 / SYSTEM][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireSvc.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [PID: 1836 / SYSTEM][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\applib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Logging.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\InternetManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aInet.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\UserSpace.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Management.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\cmalib.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework aPolicyManager.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\PsApi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\Scheduler.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1868 / SYSTEM][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\Res09\McShield.DLL] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\FTL.Dll] [Network Associates, Inc., 8.0.0.133] [C:\Program Files\Network Associates\VirusScan aiann.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\mytilus.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\Res09 aEvtRes.dll] [Network Associates, Inc., 8.0.0.342] [C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Fichiers communs\Network Associates\Engine\MCSCAN32.DLL] [McAfee, Inc., 5.2.00] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] [Network Associates, Inc, 8.0.0.240] [c:\WINDOWS\system32\msxml4.dll] [Microsoft Corporation, 4.20.9848.0] [PID: 2008 / SYSTEM][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aicondl.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\VsTskMgr.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] [Network Associates, Inc., 8.0.0.145] [PID: 236 / SYSTEM][C:\PROGRA~1\Network Associates\Common Framework aPrdMgr.exe] [Network Associates, Inc., 3.5.0.412] [C:\PROGRA~1\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\PROGRA~1\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\WINDOWS\system32\FireePO.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] [Network Associates, Inc., 8.0.0.912] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 328 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [PID: 1424 / SERVICE LOCAL][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2188 / Administrateur][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4129] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2500] [PID: 2264 / Administrateur][C:\WINDOWS\system32\WgaTray.exe] [Microsoft Corporation, 1.7.0018.5] [PID: 2300 / Administrateur][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\EntApi.dll] [Network Associates, Inc, 8.0.0.240] [C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll] [, 1, 0, 0, 1] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300] [C:\Program Files\WinRAR arext.dll] [N/A, ] [C:\Program Files\Network Associates\VirusScan\shext.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\ShExtRes.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [PID: 2424 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2492 / Administrateur][C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe] [Sun Microsystems, Inc., 5.0.90.3] [PID: 2504 / Administrateur][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan aiwmain.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\shstat.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\Product.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\RES09\McShield.dll] [Network Associates, Inc., 8.0.0.251] [C:\Program Files\Network Associates\VirusScan\RES09\Shutilrc.dll] [Network Associates, Inc., 8.0.0.912] [C:\Program Files\Network Associates\VirusScan\Graphics.dll] [Network Associates, Inc., 8.0.0.912] [PID: 2512 / Administrateur][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework ailog.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aCmnLib.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework aXML.dll] [Network Associates, Inc., 3.5.0.474] [C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll] [Network Associates, Inc., 3.5.0.412] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 2524 / Administrateur][C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe] [Network Associates, Inc., 2.0.275.0] [PID: 2548 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17263] [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] [ATI Technologies Inc., 1.2.2159.16348] [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\atidemgr.dll] [ATI Technologies Inc., 1.2.2217.17103] [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll] [ATI Technologies Inc., 1.2.2147.29150] [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27456] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17173] [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] [ATI Technologies Inc., 1.2.2182.27452] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17190] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17187] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29158] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17217] [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17203] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17184] [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll] [ATI Technologies Inc., 1.2.2147.29146] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17177] [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17175] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17236] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17162] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17227] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17232] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17224] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17220] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17230] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17159] [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17196] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17200] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17193] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll] [ATI Technologies Inc., 1.2.2154.21069] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17211] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17206] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17209] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] [ATI Technologies Inc., 1.2.2217.17168] [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll] [ATI Technologies Inc., 1.2.2182.27432] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll] [ATI Technologies Inc., 1.2.2147.29145] [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.shared.dll] [ATI Technologies Inc., 1.2.2168.19591] [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll] [ATI Technologies Inc., 1.2.2166.26895] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll] [ATI Technologies Inc., 1.2.2147.29164] [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29149] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.shared.dll] [ATI Technologies Inc., 1.2.2210.26509] [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll] [ATI Technologies Inc., 1.2.2147.29147] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [GRISOFT s.r.o., 7, 5, 1, 36] [PID: 2568 / Administrateur][C:\WINDOWS\Mixer.exe] [C-Media Electronic Inc. (www.cmedia.com.tw), 1.58] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\cmnprop.dll] [C-Media Corporation, 5.00.2195.12] [PID: 2696 / Administrateur][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 51] [PID: 2780 / Administrateur][C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE] [Logitech Inc., 8.1.2.1003] [PID: 3016 / Administrateur][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\gtn.dll] [Google Inc., 2, 1, 615, 5858] [C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll] [Google Inc., 2, 1, 615, 5858] [PID: 3196 / Administrateur][C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCL.dll] [Networks Associates Technology, Inc., 8.0] [C:\WINDOWS\system32\FireCore.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCNL.dll] [Networks Associates Technology, Inc., 2.5] [C:\WINDOWS\system32\FireCUI.dll] [Networks Associates Technology, Inc., 2.5] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\CLibRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP ailite.dll] [Network Associates, Inc., 1.0.452] [C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\Resource\0409\TrayRL.dll] [Networks Associates Technology, Inc., 8.0] [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] [Network Associates, Inc., 3.5.0.412] [PID: 3492 / Administrateur][C:\Program Files\Nikon\PictureProject\NkbMonitor.exe] [Nikon Corporation, 1, 7, 5, 3000] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 3608 / Administrateur][C:\PROGRA~1\Webshots\webshots.scr] [Webshots.com, 2.2.0.4644] [PID: 4044 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.wizard.dll] [ATI Technologies Inc., 1.2.2217.17146] [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.component.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17148] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.shared.dll] [ATI Technologies Inc., 1.2.2147.29144] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17136] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17139] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17130] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17133] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17125] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17128] [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17143] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.wizard.dll] [ , 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17121] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.wizard.dll] [ATI Technologies Inc., 1.2.2217.17153] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.wizard.dll] [ATI Technologies Inc., 1.2.2217.17123] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27643] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2169.27620] [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29168] [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29148] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29167] [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29165] [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29157] [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29166] [c:\program files\ati technologies\ati.ace\cli.aspect.transcode.local.shared.dll] [ATI Technologies Inc., 1.2.0.0] [c:\program files\ati technologies\ati.ace\atixclib.dll] [ , 1.0.0.0] [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29155] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 4092 / Administrateur][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_22ffebde\mscorlib.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_88fc3b69\system.windows.forms.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.implementation.dll] [ATI Technologies Inc., 1.2.2217.17118] [c:\program files\ati technologies\ati.ace\log.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\cli.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\log.foundation.service.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] [ATI Technologies Inc., 1.2.2147.29163] [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.2407] [c:\windows\assembly ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_c1c4e33e\system.dll] [N/A, ] [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] [ATI Technologies Inc., 1.2.2217.17268] [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_cbdce1b3\system.xml.dll] [N/A, ] [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll] [ATI Technologies Inc., 1.2.2217.17245] [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] [ATI Technologies Inc., 1.2.2147.29143] [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] [ATI Technologies Inc., 1.2.2217.17269] [c:\program files\ati technologies\ati.ace\aticccom.dll] [ATI Technologies Inc., 1.0.0.0] [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] [ATI Technologies Inc., 1.2.2147.29142] [c:\program files\ati technologies\ati.ace\aem.foundation.dll] [ATI Technologies Inc., 1.2.2147.29141] [c:\program files\ati technologies\ati.ace\apm.foundation.dll] [ATI Technologies Inc., 1.2.2147.29156] [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.2032] [c:\windows\assembly ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_088bf056\system.drawing.dll] [N/A, ] [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll] [Microsoft Corporation, 1.1.4322.2407] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll] [Microsoft Corporation, 1.1.4322.2407] [PID: 1220 / Administrateur][C:\Documents and Settings\Administrateur\Bureau\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\Documents and Settings\Administrateur\Bureau\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== File Associations .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock Provider N/A ================================== Autorun.Inf N/A ================================== HOSTS File 127.0.0.1 localhost ================================== Process Privileges Scan Special

g · Answer

voila la fin du rapport enfin je pense
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1700, C:\PROGRAM FILES\FICHIERS COMMUNS\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2492, C:\PROGRAM FILES\JAVA\JRE1.5.0_09\BIN\JUSCHED.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2504, C:\PROGRAM FILES\NETWORK ASSOCIATES\VIRUSSCAN\SHSTAT.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2512, C:\PROGRAM FILES\NETWORK ASSOCIATES\COMMON FRAMEWORK\UPDATERUI.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2524, C:\PROGRAM FILES\FICHIERS COMMUNS\NETWORK ASSOCIATES\TALKBACK\TBMON.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2548, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CLI.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2568, C:\WINDOWS\MIXER.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 2696, C:\WINDOWS\SOUNDMAN.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3196, C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE DESKTOP FIREWALL FOR WINDOWS XP\FIRETRAY.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3492, C:\PROGRAM FILES\NIKON\PICTUREPROJECT\NKBMONITOR.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3608, C:\PROGRA~1\WEBSHOTS\WEBSHOTS.SCR]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 4044, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CLI.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 4092, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CLI.EXE]

==================================
API HOOK
N/A

==================================
Hidden Process
N/A

==================================


[/CODE]

g · Answer

j espere ke c ca

philae83 · Answer

bonsoir,

oui je pense que cette fois c'est bon, je regarderais le rapport un peu plus tard.

suis très en retard ce soir :)

g · Answer

ok no probleme

philae83 · Answer

bon j'ai regardé ton rapport, y a dedans de critique.
Reste que la manip d'hier n'a pas dû être faite correctement je pense (je l'ai faite faire aussi hier sur un autre pc, tout est rentré dans l'ordre)

il faut recommencer mais renvoie un rapport combo (des fois qu'il y ai du nouveau par là)

g · Answer

ComboFix 07-12-09.1 - Administrateur 2007-12-13 0:16:33.7 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.194 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-12 to 2007-12-12 )))))))))))))))))))))))))))))))))))) . 2007-12-11 23:47 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-12-11 23:47 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-12-11 23:47 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-12-11 23:47 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-12-11 23:47 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-12-11 23:11 . 2007-12-11 23:11 172 --a------ C:\curr_ver.tmp 2007-12-11 20:52 . 2007-12-11 21:48 d-------- C:\Program Files\Navilog1 2007-12-10 23:09 . 2007-12-10 23:14 d-------- C:\Program Files\RegCleaner 2007-12-10 21:41 . 2007-12-11 19:39 d-------- C:\WINDOWS\system32\ActiveScan 2007-12-10 21:41 . 2007-12-11 18:49 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2007-12-10 21:41 . 2007-12-11 18:49 1,406 --a------ C:\WINDOWS\system32\Help.ico 2007-12-10 19:14 . 2007-12-10 19:14 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2007-12-10 19:00 . 2007-12-10 19:00 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-10 19:00 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-12-09 21:43 . 2007-12-09 21:43 d-------- C:\Program Files\CCleaner 2007-12-09 00:42 . 2007-12-11 23:48 2,406 --a------ C:\WINDOWS\system32\tmp.reg 2007-12-09 00:12 . 2007-12-10 22:46 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS\nsreg.dat 2007-12-07 23:37 . 2007-12-09 21:17 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-12-02 23:29 . 2007-12-02 23:29 d-------- C:\Program Files\Sierra Entertainment 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-11 18:22 --------- d-----w C:\Program Files\Webshots 2007-12-11 18:10 --------- d-----w C:\Program Files\Google 2007-12-10 22:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-10 03:05 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-12-02 22:30 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((( snapshot@2007-12-11_19.59.52,76 ))))))))))))))))))))))))))))))))))))))))) . + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\ERDNT.EXE + 2007-12-12 00:02:13 12,066,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-12 00:02:13 122,880 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\ERDNT.EXE + 2007-12-11 23:24:11 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 23:24:12 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\ERDNT.EXE + 2007-12-11 22:23:52 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 22:23:53 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000002\UsrClass.dat - 2007-12-04 00:00:42 136,704 ----a-w C:\WINDOWS\system32\swsc.exe + 2006-01-09 08:36:06 40,960 ----a-w C:\WINDOWS\system32\swsc.exe - 2006-12-01 04:20:32 212,480 ----a-w C:\WINDOWS\system32\swxcacls.exe + 2006-12-01 04:20:32 79,360 ----a-w C:\WINDOWS\system32\swxcacls.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE [2005-03-06 15:26:48] Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2006-03-01 00:14:30] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ McAfee Desktop Firewall Tray.lnk - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [2006-02-28 22:48:26] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2006-09-13 23:24:08] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe *Newly Created Service* - ENTDRV51 . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-13 00:19:50 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-13 0:21:23 . --- E O F ---

g · Answer

C KEL MANIP KE JE DOIS RECOMMENCER?

Utilisateur anonyme · Answer

à mon avis il s'agit de ceci:
http://www.commentcamarche.net/forum/affich 4262972 trojan win 32 bohdf?page=6#120

philae83 · Answer

bonsoir

il s'agit de celle ci
http://www.commentcamarche.net/forum/affich 4262972 trojan win 32 bohdf?page=5#101

mais je te remets, une partie a bien fonctionné :

Sélectionne le texte suivant : 

Registry::
[-HKEY_CURRENT_USER \software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3 b4-c8e9-11db-9b28-000b6b985b31}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43 a5-436f-11db-9a30-000b6b6d5b6e}]

# Copie le texte sélectionné (CTRL+C).
# Ouvre le bloc-note (programme>Accessoire>bloc-note).
# Colle le texte copié dans ce bloc-note (CTRL+V).
# Sauvegarde ce fichier sous le nom de CFScript.txt
# Fais un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe
# Une fenêtre bleue va apparaître: au message qui apparaît ( Type 1 to continue, or 2 to abort) , tape 1 puis valide.
# Patiente le temps du scan. Le bureau va disparaître à plusieurs reprises: c'est normal!
Ne touche à rien tant que le scan n'est pas terminé.
# Une fois le scan achevé, un rapport va s'afficher: Poste son contenu.
# Si le fichier ne s'ouvre pas, il se trouve ici > C:\ComboFix.txt 

tu diras également si tu as toujours des soucis sur ce pc

g · Answer

ComboFix 07-12-09.1 - Administrateur 2007-12-13 23:06:06.8 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.240 [GMT 1:00] Running from: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\Administrateur\Bureau\CFScript.txt * Created a new restore point . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-13 to 2007-12-13 )))))))))))))))))))))))))))))))))))) . 2007-12-11 23:47 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-12-11 23:47 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-12-11 23:47 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-12-11 23:47 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-12-11 23:47 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-12-11 23:11 . 2007-12-11 23:11 172 --a------ C:\curr_ver.tmp 2007-12-11 20:52 . 2007-12-11 21:48 d-------- C:\Program Files\Navilog1 2007-12-10 23:09 . 2007-12-10 23:14 d-------- C:\Program Files\RegCleaner 2007-12-10 21:41 . 2007-12-11 19:39 d-------- C:\WINDOWS\system32\ActiveScan 2007-12-10 21:41 . 2007-12-11 18:49 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2007-12-10 21:41 . 2007-12-11 18:49 1,406 --a------ C:\WINDOWS\system32\Help.ico 2007-12-10 19:14 . 2007-12-10 19:14 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2007-12-10 19:00 . 2007-12-10 19:00 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-12-10 19:00 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-12-09 21:43 . 2007-12-09 21:43 d-------- C:\Program Files\CCleaner 2007-12-09 00:42 . 2007-12-11 23:48 2,406 --a------ C:\WINDOWS\system32\tmp.reg 2007-12-09 00:12 . 2007-12-10 22:46 d-------- C:\SmitfraudFix 2007-12-08 23:45 . 2007-12-08 23:45 d-------- C:\VundoFix Backups 2007-12-08 23:36 . 2007-12-08 23:36 1,046,702 --a------ C:\SmitfraudFix.exe 2007-12-08 23:27 . 2007-12-08 23:27 d-------- C:\Program Files\Trend Micro 2007-12-08 22:30 . 2007-12-08 22:30 1,158 --a------ C:\WINDOWS\mozver.dat 2007-12-08 22:27 . 2007-12-08 22:27 d-------- C:\Documents and Settings\Administrateur\Application Data\Talkback 2007-12-08 22:26 . 2007-12-08 22:26 0 --a------ C:\WINDOWS\nsreg.dat 2007-12-07 23:37 . 2007-12-09 21:17 d-------- C:\WINDOWS\BDOSCAN8 2007-12-02 23:46 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-12-02 23:46 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-12-02 23:46 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-11-30 19:53 . 2007-11-30 19:53 d-------- C:\Program Files\Alcohol Soft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-13 20:17 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Skype 2007-12-13 18:10 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-13 02:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-12-11 18:22 --------- d-----w C:\Program Files\Webshots 2007-12-11 18:10 --------- d-----w C:\Program Files\Google 2007-12-02 22:56 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-11-30 18:41 685,816 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-11-25 22:21 --------- d-----w C:\Program Files\Windows Live Safety Center 2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-11-09 01:55 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2007-10-29 22:43 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2007-10-25 08:28 222,720 ----a-w C:\WINDOWS\system32\wmasf.dll 2001-11-23 04:08 712,704 -c--a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL . ((((((((((((((((((((((((((((( snapshot@2007-12-11_19.59.52,76 ))))))))))))))))))))))))))))))))))))))))) . + 2007-07-06 09:52:38 72,960 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqac.sys + 2007-07-06 13:09:51 138,240 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqad.dll + 2007-07-06 13:09:51 47,104 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqdscli.dll + 2007-07-06 13:09:51 16,896 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqise.dll + 2007-07-06 13:09:51 660,992 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqqm.dll + 2007-07-06 13:09:51 177,152 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqrt.dll + 2007-07-06 13:09:51 95,744 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqsec.dll + 2007-07-06 13:09:51 48,640 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqupgrd.dll + 2007-07-06 13:09:51 527,360 ----a-w C:\WINDOWS\$hf_mig$\KB937894\SP2QFE\mqutil.dll + 2005-10-12 23:15:25 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spmsg.dll + 2005-10-12 23:15:26 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB937894\spuninst.exe + 2005-10-12 23:15:25 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\spcustom.dll + 2005-10-12 23:15:28 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\update.exe + 2005-10-12 23:15:45 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB937894\update\updspapi.dll + 2007-10-29 22:36:31 1,293,824 ----a-w C:\WINDOWS\$hf_mig$\KB941568\SP2QFE\quartz.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB941568\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB941568\update\updspapi.dll + 2007-10-11 05:59:18 1,024,512 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\browseui.dll + 2007-10-11 05:59:18 152,064 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\cdfview.dll + 2007-10-11 05:59:21 1,056,768 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\danim.dll + 2007-10-11 05:59:22 357,888 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\dxtmsft.dll + 2007-10-11 05:59:22 205,824 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\dxtrans.dll + 2007-10-11 05:59:22 55,808 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\extmgr.dll + 2007-10-10 10:48:23 18,432 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\iedw.exe + 2007-10-11 05:59:22 251,904 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\iepeers.dll + 2007-10-11 05:59:22 96,768 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\inseng.dll + 2007-10-11 05:59:22 16,384 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\jsproxy.dll + 2007-10-30 09:57:54 3,086,848 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\mshtml.dll + 2007-10-11 05:59:26 449,024 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\mshtmled.dll + 2007-10-11 05:59:26 146,432 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\msrating.dll + 2007-10-11 05:59:27 532,480 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\mstime.dll + 2007-10-11 05:59:27 39,424 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\pngfilt.dll + 2007-10-11 05:59:28 1,498,624 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\shdocvw.dll + 2007-10-11 05:59:28 474,624 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\shlwapi.dll + 2007-10-10 23:36:44 369,152 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\spru040c.dll + 2007-10-11 05:59:29 620,032 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\urlmon.dll + 2007-10-11 05:59:29 670,208 ----a-w C:\WINDOWS\$hf_mig$\KB942615\SP2QFE\wininet.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942615\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942615\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942615\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942615\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942615\update\updspapi.dll + 2007-11-13 11:02:46 60,416 ----a-w C:\WINDOWS\$hf_mig$\KB942763\SP2QFE\tzchange.exe + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942763\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942763\update\updspapi.dll + 2007-11-14 07:19:25 450,560 ----a-w C:\WINDOWS\$hf_mig$\KB942840\SP2QFE\jscript.dll + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB942840\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB942840\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB942840\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB942840\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB942840\update\updspapi.dll + 2007-11-13 08:47:45 20,480 ----a-w C:\WINDOWS\$hf_mig$\KB944653\SP2QFE\secdrv.sys + 2007-03-06 01:34:33 15,072 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spmsg.dll + 2007-03-06 01:34:38 216,800 ----a-w C:\WINDOWS\$hf_mig$\KB944653\spuninst.exe + 2007-03-06 01:34:31 22,752 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\spcustom.dll + 2007-03-06 01:34:56 727,776 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\update.exe + 2007-03-06 01:35:48 394,976 ----a-w C:\WINDOWS\$hf_mig$\KB944653\update\updspapi.dll + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\ERDNT.EXE + 2007-12-12 00:02:13 12,066,816 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-12 00:02:13 122,880 ----a-w C:\WINDOWS\erdnt\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\ERDNT.EXE + 2007-12-11 23:24:11 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 23:24:12 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\12-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\13-12-2007\ERDNT.EXE + 2007-12-13 02:36:36 12,140,544 ----a-w C:\WINDOWS\erdnt\AutoBackup\13-12-2007\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-13 02:36:37 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\13-12-2007\Users\[u]0[/u]0000002\UsrClass.dat + 2005-03-06 14:27:46 162,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\ERDNT.EXE + 2007-12-11 22:23:52 12,066,816 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000001\NTUSER.DAT + 2007-12-11 22:23:53 122,880 ----a-w C:\WINDOWS\erdnt\AutoBackup\2007-12-11\Users\[u]0[/u]0000002\UsrClass.dat - 2007-08-22 13:13:05 1,023,488 ----a-w C:\WINDOWS\system32\browseui.dll + 2007-10-11 06:13:38 1,024,000 ----a-w C:\WINDOWS\system32\browseui.dll - 2007-08-22 13:13:05 152,064 -c--a-w C:\WINDOWS\system32\cdfview.dll + 2007-10-11 06:13:38 152,064 ----a-w C:\WINDOWS\system32\cdfview.dll - 2007-08-22 13:13:05 1,056,768 -c--a-w C:\WINDOWS\system32\danim.dll + 2007-10-11 06:13:38 1,056,768 ----a-w C:\WINDOWS\system32\danim.dll - 2007-08-22 13:13:05 1,023,488 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll + 2007-10-11 06:13:38 1,024,000 -c--a-w C:\WINDOWS\system32\dllcache\browseui.dll - 2007-08-22 13:13:05 152,064 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll + 2007-10-11 06:13:38 152,064 -c--a-w C:\WINDOWS\system32\dllcache\cdfview.dll - 2007-08-22 13:13:05 1,056,768 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll + 2007-10-11 06:13:38 1,056,768 -c--a-w C:\WINDOWS\system32\dllcache\danim.dll - 2007-08-22 13:13:05 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll + 2007-10-11 06:13:39 357,888 -c--a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll - 2007-08-22 13:13:05 205,312 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll + 2007-10-11 06:13:39 205,312 -c--a-w C:\WINDOWS\system32\dllcache\dxtrans.dll - 2007-08-22 13:13:05 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll + 2007-10-11 06:13:39 55,808 -c--a-w C:\WINDOWS\system32\dllcache\extmgr.dll - 2007-08-21 10:30:45 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe + 2007-10-10 11:16:27 18,432 -c--a-w C:\WINDOWS\system32\dllcache\iedw.exe - 2007-08-22 13:13:05 251,392 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll + 2007-10-11 06:13:39 251,392 -c--a-w C:\WINDOWS\system32\dllcache\iepeers.dll - 2007-08-22 13:13:06 96,768 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll + 2007-10-11 06:13:39 96,768 -c--a-w C:\WINDOWS\system32\dllcache\inseng.dll - 2006-05-18 05:31:21 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll + 2007-11-14 07:28:02 450,560 -c--a-w C:\WINDOWS\system32\dllcache\jscript.dll - 2007-08-22 13:13:06 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll + 2007-10-11 06:13:39 16,384 -c--a-w C:\WINDOWS\system32\dllcache\jsproxy.dll - 2004-08-03 22:58:22 72,960 -c--a-w C:\WINDOWS\system32\dllcache\mqac.sys + 2007-07-06 10:05:47 72,960 -c--a-w C:\WINDOWS\system32\dllcache\mqac.sys - 2004-08-04 00:54:32 138,240 -c--a-w C:\WINDOWS\system32\dllcache\mqad.dll + 2007-07-06 12:50:47 138,240 -c--a-w C:\WINDOWS\system32\dllcache\mqad.dll - 2004-08-04 00:54:32 47,104 -c--a-w C:\WINDOWS\system32\dllcache\mqdscli.dll + 2007-07-06 12:50:47 47,104 -c--a-w C:\WINDOWS\system32\dllcache\mqdscli.dll - 2004-08-04 00:54:32 16,896 -c--a-w C:\WINDOWS\system32\dllcache\mqise.dll + 2007-07-06 12:50:47 16,896 -c--a-w C:\WINDOWS\system32\dllcache\mqise.dll - 2004-08-04 00:54:32 660,992 -c--a-w C:\WINDOWS\system32\dllcache\mqqm.dll + 2007-07-06 12:50:47 660,992 -c--a-w C:\WINDOWS\system32\dllcache\mqqm.dll - 2004-08-04 00:54:32 177,152 -c--a-w C:\WINDOWS\system32\dllcache\mqrt.dll + 2007-07-06 12:50:47 177,152 -c--a-w C:\WINDOWS\system32\dllcache\mqrt.dll - 2004-08-04 00:54:32 95,744 -c--a-w C:\WINDOWS\system32\dllcache\mqsec.dll + 2007-07-06 12:50:47 95,744 -c--a-w C:\WINDOWS\system32\dllcache\mqsec.dll - 2004-08-04 00:54:32 48,640 -c--a-w C:\WINDOWS\system32\dllcache\mqupgrd.dll + 2007-07-06 12:50:47 48,640 -c--a-w C:\WINDOWS\system32\dllcache\mqupgrd.dll - 2004-08-04 00:54:32 527,360 -c--a-w C:\WINDOWS\system32\dllcache\mqutil.dll + 2007-07-06 12:50:47 527,360 -c--a-w C:\WINDOWS\system32\dllcache\mqutil.dll - 2007-08-22 13:13:07 3,079,168 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll + 2007-10-30 10:18:16 3,079,680 -c--a-w C:\WINDOWS\system32\dllcache\mshtml.dll - 2007-08-22 13:13:07 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll + 2007-10-11 06:13:40 449,024 -c--a-w C:\WINDOWS\system32\dllcache\mshtmled.dll - 2007-08-22 13:13:07 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll + 2007-10-11 06:13:40 146,432 -c--a-w C:\WINDOWS\system32\dllcache\msrating.dll - 2007-08-22 13:13:07 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll + 2007-10-11 06:13:40 532,480 -c--a-w C:\WINDOWS\system32\dllcache\mstime.dll - 2007-08-22 13:13:07 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll + 2007-10-11 06:13:40 39,424 -c--a-w C:\WINDOWS\system32\dllcache\pngfilt.dll - 2005-08-30 03:55:43 1,293,312 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll + 2007-10-29 22:43:32 1,293,824 -c--a-w C:\WINDOWS\system32\dllcache\quartz.dll - 2007-08-22 13:13:08 1,495,040 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll + 2007-10-11 06:13:40 1,495,040 -c--a-w C:\WINDOWS\system32\dllcache\shdocvw.dll - 2007-08-22 13:13:08 474,624 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll + 2007-10-11 06:13:41 474,624 -c--a-w C:\WINDOWS\system32\dllcache\shlwapi.dll - 2007-08-22 13:13:08 617,472 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll + 2007-10-11 06:13:41 617,472 -c--a-w C:\WINDOWS\system32\dllcache\urlmon.dll - 2007-08-22 13:13:08 663,040 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll + 2007-10-11 06:13:41 663,552 -c--a-w C:\WINDOWS\system32\dllcache\wininet.dll - 2006-10-18 20:47:18 222,208 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll + 2007-10-25 08:28:30 222,720 -c--a-w C:\WINDOWS\system32\dllcache\wmasf.dll - 2004-08-03 22:58:22 72,960 -c--a-w C:\WINDOWS\system32\drivers\mqac.sys + 2007-07-06 10:05:47 72,960 ----a-w C:\WINDOWS\system32\drivers\mqac.sys - 2007-08-22 13:13:05 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll + 2007-10-11 06:13:39 357,888 ----a-w C:\WINDOWS\system32\dxtmsft.dll - 2007-08-22 13:13:05 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll + 2007-10-11 06:13:39 205,312 ----a-w C:\WINDOWS\system32\dxtrans.dll - 2007-08-22 13:13:05 55,808 -c--a-w C:\WINDOWS\system32\extmgr.dll + 2007-10-11 06:13:39 55,808 ----a-w C:\WINDOWS\system32\extmgr.dll - 2007-08-22 13:13:05 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll + 2007-10-11 06:13:39 251,392 ----a-w C:\WINDOWS\system32\iepeers.dll - 2007-08-22 13:13:06 96,768 -c--a-w C:\WINDOWS\system32\inseng.dll + 2007-10-11 06:13:39 96,768 ----a-w C:\WINDOWS\system32\inseng.dll - 2006-05-18 05:31:21 450,560 ----a-w C:\WINDOWS\system32\jscript.dll + 2007-11-14 07:28:02 450,560 ----a-w C:\WINDOWS\system32\jscript.dll - 2007-08-22 13:13:06 16,384 -c--a-w C:\WINDOWS\system32\jsproxy.dll + 2007-10-11 06:13:39 16,384 ----a-w C:\WINDOWS\system32\jsproxy.dll - 2004-08-04 00:54:32 138,240 -c--a-w C:\WINDOWS\system32\mqad.dll + 2007-07-06 12:50:47 138,240 ----a-w C:\WINDOWS\system32\mqad.dll - 2004-08-04 00:54:32 47,104 -c--a-w C:\WINDOWS\system32\mqdscli.dll + 2007-07-06 12:50:47 47,104 ----a-w C:\WINDOWS\system32\mqdscli.dll - 2004-08-04 00:54:32 16,896 -c--a-w C:\WINDOWS\system32\mqise.dll + 2007-07-06 12:50:47 16,896 ----a-w C:\WINDOWS\system32\mqise.dll - 2004-08-04 00:54:32 660,992 -c--a-w C:\WINDOWS\system32\mqqm.dll + 2007-07-06 12:50:47 660,992 ----a-w C:\WINDOWS\system32\mqqm.dll - 2004-08-04 00:54:32 177,152 -c--a-w C:\WINDOWS\system32\mqrt.dll + 2007-07-06 12:50:47 177,152 ----a-w C:\WINDOWS\system32\mqrt.dll - 2004-08-04 00:54:32 95,744 -c--a-w C:\WINDOWS\system32\mqsec.dll + 2007-07-06 12:50:47 95,744 ----a-w C:\WINDOWS\system32\mqsec.dll - 2004-08-04 00:54:32 48,640 -c--a-w C:\WINDOWS\system32\mqupgrd.dll + 2007-07-06 12:50:47 48,640 ----a-w C:\WINDOWS\system32\mqupgrd.dll - 2004-08-04 00:54:32 527,360 -c--a-w C:\WINDOWS\system32\mqutil.dll + 2007-07-06 12:50:47 527,360 ----a-w C:\WINDOWS\system32\mqutil.dll - 2007-11-02 07:12:57 18,238,072 -c--a-w C:\WINDOWS\system32\MRT.exe + 2007-12-02 23:00:05 18,684,536 -c--a-w C:\WINDOWS\system32\MRT.exe - 2007-08-22 13:13:07 3,079,168 ----a-w C:\WINDOWS\system32\mshtml.dll + 2007-10-30 10:18:16 3,079,680 ----a-w C:\WINDOWS\system32\mshtml.dll - 2007-08-22 13:13:07 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll + 2007-10-11 06:13:40 449,024 ----a-w C:\WINDOWS\system32\mshtmled.dll - 2007-08-22 13:13:07 146,432 -c--a-w C:\WINDOWS\system32\msrating.dll + 2007-10-11 06:13:40 146,432 ----a-w C:\WINDOWS\system32\msrating.dll - 2007-08-22 13:13:07 532,480 -c--a-w C:\WINDOWS\system32\mstime.dll + 2007-10-11 06:13:40 532,480 ----a-w C:\WINDOWS\system32\mstime.dll - 2007-08-22 13:13:07 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll + 2007-10-11 06:13:40 39,424 ----a-w C:\WINDOWS\system32\pngfilt.dll - 2007-08-22 13:13:08 1,495,040 ----a-w C:\WINDOWS\system32\shdocvw.dll + 2007-10-11 06:13:40 1,495,040 ----a-w C:\WINDOWS\system32\shdocvw.dll - 2007-08-22 13:13:08 474,624 ----a-w C:\WINDOWS\system32\shlwapi.dll + 2007-10-11 06:13:41 474,624 ----a-w C:\WINDOWS\system32\shlwapi.dll - 2007-12-04 00:00:42 136,704 ----a-w C:\WINDOWS\system32\swsc.exe + 2006-01-09 08:36:06 40,960 ----a-w C:\WINDOWS\system32\swsc.exe - 2006-12-01 04:20:32 212,480 ----a-w C:\WINDOWS\system32\swxcacls.exe + 2006-12-01 04:20:32 79,360 ----a-w C:\WINDOWS\system32\swxcacls.exe - 2007-07-18 12:42:22 60,416 -c----w C:\WINDOWS\system32\tzchange.exe + 2007-11-13 11:31:11 60,416 ------w C:\WINDOWS\system32\tzchange.exe - 2007-08-22 13:13:08 617,472 ----a-w C:\WINDOWS\system32\urlmon.dll + 2007-10-11 06:13:41 617,472 ----a-w C:\WINDOWS\system32\urlmon.dll - 2007-08-22 13:13:08 663,040 ----a-w C:\WINDOWS\system32\wininet.dll + 2007-10-11 06:13:41 663,552 ----a-w C:\WINDOWS\system32\wininet.dll . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-01 03:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" [2006-10-12 03:10] "ShStatEXE"="C:\Program Files\Network Associates\VirusScan\SHSTAT.exe" [2004-08-18 08:00] "McAfeeUpdaterUI"="C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" [2004-08-06 03:50] "Network Associates Error Reporting Service"="C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" [2004-02-19 13:07] "Cmaudio"="RunDll32 cmicnfg.cpl" [] "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43] "C-Media Mixer"="Mixer.exe" [2002-10-15 18:00 C:\WINDOWS\mixer.exe] "C-Media Speaker Configuration"="C:\PROGRA~1\C-Media\WIN_ME\Setup.exe" [2003-01-10 04:31] "SoundMan"="SOUNDMAN.EXE" [2006-01-11 15:08 C:\WINDOWS\soundman.exe] "LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 09:45] "InstallLeader"="" [] "FmctrlTray"="Fmctrl.EXE" [2001-08-07 10:35 C:\WINDOWS\system32\fmctrl.exe] "QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-06-29 05:24] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ ERUNT AutoBackup.lnk - C:\Program Files\ERUNT\AUTOBACK.EXE [2005-03-06 15:26:48] Webshots.lnk - C:\Program Files\Webshots\Launcher.exe [2006-03-01 00:14:30] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ McAfee Desktop Firewall Tray.lnk - C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\FireTray.exe [2006-02-28 22:48:26] NkbMonitor.exe.lnk - C:\Program Files\Nikon\PictureProject\NkbMonitor.exe [2006-09-13 23:24:08] R0 FirePM;McAfee Desktop Firewall Policy Manager Driver;C:\WINDOWS\system32\Drivers\FirePM.sys R1 FireTDI;McAfee Desktop Firewall TDI Driver;\??\C:\WINDOWS\system32\Drivers\FireTDI.sys R1 NaiAvTdi1;NaiAvTdi1;C:\WINDOWS\system32\drivers\mvstdi5x.sys R2 FireHook;McAfee Desktop Firewall Network Driver;C:\WINDOWS\system32\DRIVERS\firehook.sys R3 firelm01;firelm01;\??\C:\WINDOWS\system32\drivers\firelm01.sys R3 gameport;Triplex Ma-La-Zi PCI Joystick;C:\WINDOWS\system32\DRIVERS\fmjoy.sys R3 wdm_fm801;Triplex Ma-La-Zi PCI Audio (WDM);C:\WINDOWS\system32\drivers\fm801.sys S3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS S3 TxNtSys;TxNtSys;\??\C:\Triplex\Sound\TxNtSys.sys S3 USB28xxBGA;Pinnacle PCTV DVB-T USB Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d395e3b4-c8e9-11db-9b28-000b6b985b31}] \Shell\AutoRun\command - RavMon.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{da3c43a5-436f-11db-9a30-000b6b6d5b6e}] \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL antihost.exe . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-11-28 10:14:06 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************** catchme 0.3.1331 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-13 23:09:25 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-13 23:11:00 C:\ComboFix2.txt ... 2007-12-13 00:21 . --- E O F --- aparament y tourne bcp mieux je vais lancer mon spyboot pour voir

philae83 · Answer

c toujours là, mais ce ne sont que des traces dans le registre, j'abandonne sur ce coup là....

tient nous au courant

g · Answer

lol,c koi ki es tjrs la?

philae83 · Answer

NON 
ce sont les traces dans le registre

g · Answer

c trace sont nuisibles ?
jai fai un scan avec spyboot et il ne trouve plus win 32boh df 
mais il a detecter :bluestreak,doubleclick et mediaplex

Utilisateur anonyme · Answer

":bluestreak,doubleclick et mediaple"
pas de panique à chaque fois que tu surf, tu vas t'en ramasser !
Je te conseille après chaque surf, d'utiliser ATF-cleaner
http://www.atribune.org/ccount/click.php?id=1
;-)

philae83 · Answer

bonjour,

c trace sont nuisibles ? 
non

si tu n'as plus de problèmes on peut je pense clore le sujet. Mais avant qq petites manips à effectuer

Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.
http://perso.orange.fr/AceRothstein/ToolsCleaner2.exe
# Double clique sur ToolsCleaner2.exe >
# Clique sur .Recherche
# puis sur Suppression quand la liste est trouvée.
# Note : ton bureau va disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

puis IMPORTANT

* démarrer-----------panneau de configuration------------système----------
onglet Restauration système-----------coche la case (Désactiver la restauration système)--------------
redémarre l'ordinateur
réactive la ensuite
http://pageperso.aol.fr/loraline60/desactiver_restauration_systeme.htm

.

* Pour améliorer la sécurité de ton PC prend quelques instants pour lire

CECI

bonne fin de journée et bonnes fêtes de fin d'année

g · Answer

bonjour philae83
est ce ke je peux supprimer erunt.sreng,rav exe,regcleaner,tools cleaners ,avg anti spyware,oadexe et tous les rapports kon a fait  ou tu pense ke je devrais garder kelkechose?
bonne fetes de fin d nnee a toi aussi et je te souhaites bcp  de bonheur pour l annee 2008

philae83 · Answer

bonsoir, toolscleaner que je te demande d'utiliser supprime ceux dont tu n'auras plus besoin

erunt, tu le gardes, il sauvegarde ta base de registre, il peut toujours être utile.
Regcleaner on l'avait téléchargé ? me souviens + il nettoie ta base de registre, garde le
avg tu peux le conserver également après sa période d'essai, tu fais les mises à jour manuellement et tu peux toujours faire des scans réguliers avec, même si il n'a plus la protection résidente.
OAD tu peux le supprimer

pour les rapports supprime aussi

bonnes fêtes à toi également et pleins de bonne chose (notamment un pc propre....lol)

g · Answer

et rav.exe.?
(je ferai appel  a tes services au ca ou lool)

philae83 · Answer

oui tu peux supprimer aussi

g · Answer

voici ma derniere question (je crois) j ai des fichiers thumb.db en dessous ya marker fichier de la base de registre y son eparpillers 1 peu partout,je les laisse?

philae83 · Answer

tu les vois parce que les fichiers et dossiers cachés sont apparent, retourne les masquer

-démarrer

-poste de travail ou autre dossier

-menu outils

-options de dossier

-onglet affichage

puis

- décoche: Afficher les fichiers et dossiers cachés



- coche : Masquer les fichier protégés du système d'exploitation

Puis  - Appliquer

g · Answer

ok je l ai fait
j ai supprimer 1 dossier ou il y avait 1 de mes films et un de ces fichiers c rien?

philae83 · Answer

non t'inquiète pas

g · Answer

OK MERCI PHILAE83?BEN JE CROIS KE C LA FIN  JE TE REMERCIE ET JE TE DIS A LA PROCHAINE  BYE

philae83 · Answer

ok, bonne continuation

Trojan win 32 bohdf - Page 8

Discussions similaires

Newsletters