Spyware - Trojan Résolu

Question

Bonjour,
Depuis que j'ai lancé un programme sur mon Ordi, il y'a un programme qui s'execute au demarrage de mon ordi, et des actions bizarres que je demande pas sont executés sur ma machine. Pensant que c'est un trojan, j'ai utilisé la solution spybot pour le neutraliser et l'enlever. En vain. J'enleve le trojan, puis quand je relance un nouveau scan, le trojan est toujours la. Donc je demande votre aide.
J'ai avast! antivirus comme antivirus et spybot comme anti spyware et windows defender avec toutes les mises a jour.
Merci de bien vouloir m'aider
Mon rapport d'erreur avec spybot :

--- Search result list ---
Bifrose.LA: [SBI $D9EB7AA3] Réglages utilisateur (Clé du registre, nothing done)
  HKEY_USERS\S-1-5-21-2042880865-261311869-1095737210-1000\Software\Bifrost

DoubleClick: [SBI $61F39AC8] Cookie traceur (Firefox: default) (Cookie, nothing done)
  

MediaPlex: [SBI $61F39AC8] Cookie traceur (Firefox: default) (Cookie, nothing done)
  


--- Spybot - Search & Destroy version: 1.5  (build: 20070830) ---

2007-08-31 blindman.exe (1.0.0.6)
2007-08-31 SDMain.exe (1.0.0.4)
2007-08-31 SDUpdate.exe (1.0.6.4)
2007-08-31 SDWinSec.exe (1.0.0.8)
2007-08-31 SpybotSD.exe (1.5.1.15)
2007-08-31 TeaTimer.exe (1.5.0.9)
2007-12-31 unins000.exe (51.46.0.0)
2007-08-31 Update.exe (1.4.0.5)
2007-08-31 advcheck.dll (1.5.3.0)
2007-04-02 aports.dll (2.1.0.0)
2007-04-02 DelZip179.dll (1.79.5.3)
2007-08-31 SDHelper.dll (1.5.0.8)
2007-08-31 Tools.dll (2.1.2.0)
2007-12-26 Includes\Cookies.sbi (*)
2007-12-26 Includes\Dialer.sbi (*)
2007-12-26 Includes\DialerC.sbi (*)
2007-12-26 Includes\Hijackers.sbi (*)
2007-12-26 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2007-12-26 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2007-11-07 Includes\Malware.sbi (*)
2007-12-26 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2007-12-26 Includes\PUPSC.sbi (*)
2007-12-26 Includes\Revision.sbi (*)
2007-05-30 Includes\Security.sbi (*)
2007-12-26 Includes\SecurityC.sbi (*)
2007-11-07 Includes\Spybots.sbi (*)
2007-12-26 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2007-12-12 Includes\Trojans.sbi (*)
2007-12-26 Includes\TrojansC.sbi (*)
2008-12-24 Plugins\TCPIPAddress.dll



--- System information ---
Windows Vista (Build: 6000) (6.0.6000)


--- Startup entries list ---
Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
   file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
   size: 39792
    MD5: E28D00EC675F5F5A5A0555E7A4523A6E

Located: HK_LM:Run, avast!
command: C:\PROGRA~1\Avast4\ashDisp.exe
   file: C:\PROGRA~1\Avast4\ashDisp.exe
   size: 79224
    MD5: 88D86112DD9F2BB6A603674706C7E846

Located: HK_LM:Run, Easy-PrintToolBox
command: C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
   file: 
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: HK_LM:Run, NeroFilterCheck
command: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
   file: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
   size: 153136
    MD5: 8112D0DACAE746290FC87B3A980FA719

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\QTTask.exe" -atboottime
   file: C:\Program Files\QuickTime\QTTask.exe
   size: 286720
    MD5: 49CCFBE5D5225B9D3CC78C09DEE147D0

Located: HK_LM:Run, SoundMan
command: SOUNDMAN.EXE
   file: C:\Windows\SOUNDMAN.EXE
   size: 598016
    MD5: C048F97F373A886B7726FD7B7CA9B8DA

Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
   file: C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
   size: 132496
    MD5: D4F0F7437327DBAA264338BAAFB5E5AF

Located: HK_LM:Run, VModes
command: VModes AttachToDesktop
   file: C:\Windows\system32\VModes.exe
   size: 28672
    MD5: 02CC4F141EE0EC0D9699128483A86A47

Located: HK_LM:Run, VTTimer
command: VTTimer.exe
   file: C:\Windows\system32\VTTimer.exe
   size: 53248
    MD5: 09F1A97848BFAB3F36EB216681465B85

Located: HK_LM:Run, VTTrayp
command: VTtrayp.exe
   file: C:\Windows\system32\VTtrayp.exe
   size: 163840
    MD5: EC9DD7D903EF1E91AF7088FDF82F8341

Located: HK_LM:Run, WatchDog
command: C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
   file: 
   size: 0
    MD5: D41D8CD98F00B204E9800998ECF8427E
         Warning: if the file is actually larger than 0 bytes,
         the checksum could not be properly calculated!

Located: HK_LM:Run, Windows Defender
command: %ProgramFiles%\Windows Defender\MSASCui.exe -hide
   file: C:\Program Files\Windows Defender\MSASCui.exe
   size: 1006264
    MD5: 9AD9E2FB2811123DA13DE84CC154AB77

Located: HK_CU:Run, {9B71D88C-C598-4935-C5D1-43AA4DB90836}
  where: S-1-5-21-2042880865-261311869-1095737210-1000...
command: C:\Users\user\AppData\Roaming\server.exe
   file: C:\Users\user\AppData\Roaming\server.exe
   size: 594813
    MD5: C28E19B3F27E49DA74451681CA3BAEB9

Located: HK_CU:Run, SpybotSD TeaTimer
  where: S-1-5-21-2042880865-261311869-1095737210-1000...
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
   file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
   size: 1460560
    MD5: B7D4586BFC0DD6C3BE7DCCC252A3E97E



--- Browser helper object list ---
{7E853D72-626A-48EC-A868-BA8D5E23E045} ()
          location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
          BHO name: 
        CLSID name: 



--- ActiveX list ---
{166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control)
          DPF name: 
        CLSID name: Shockwave ActiveX Control
         Installer: C:\Windows\Downloaded Program Files\setup.inf
          Codebase: http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
       description: Macromedia ShockWave Flash Player 7
    classification: Legitimate
    known filename: SWDIR.DLL
         info link: 
       info source: Patrick M. Kolla
              Path: C:\Windows\system32\macromed\Director\
         Long name:          swdir.dll
        Short name:                   
    Date (created): 25/09/2007 12:40:08
Date (last access): 25/09/2007 12:40:08
 Date (last write): 07/08/2007 17:20:44
          Filesize:             182248
        Attributes:           archive 
               MD5: 6C90714399BD3F1E7C0503A38EADBAC7
             CRC32:           D1E8C81D
           Version:          10.2.0.23

{8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_03
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
       description: Sun Java
    classification: Legitimate
    known filename: %PROGRAM FILES%\JabaSoft\JRE\*\Bin
pjava131.dll
         info link: 
       info source: Patrick M. Kolla
              Path: C:\Program Files\Java\jre1.6.0_03\bin\
         Long name:    npjpi160_03.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 24/09/2007 23:31:44
Date (last access): 24/09/2007 23:31:44
 Date (last write): 25/09/2007 01:11:34
          Filesize:             132496
        Attributes:           archive 
               MD5: D6A4682A6FF41832A3F1A7AB9AE08199
             CRC32:           9080B537
           Version:           6.0.30.5

{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_02
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
       description: 
    classification: Legitimate
    known filename: npjpi160_02.dll
         info link: 
       info source: Safer Networking Ltd.
              Path: C:\Program Files\Java\jre1.6.0_03\bin\
         Long name:            ssv.dll
        Short name:                   
    Date (created): 16/10/2007 14:47:10
Date (last access): 24/09/2007 23:31:44
 Date (last write): 25/09/2007 01:11:34
          Filesize:             501136
        Attributes:           archive 
               MD5: D787E3123FAD2BD58AB45B9A5C360ACD
             CRC32:           DDC625C2
           Version:           6.0.30.5

{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_03
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
              Path: C:\Program Files\Java\jre1.6.0_03\bin\
         Long name:            ssv.dll
        Short name:                   
    Date (created): 16/10/2007 14:47:10
Date (last access): 24/09/2007 23:31:44
 Date (last write): 25/09/2007 01:11:34
          Filesize:             501136
        Attributes:           archive 
               MD5: D787E3123FAD2BD58AB45B9A5C360ACD
             CRC32:           DDC625C2
           Version:           6.0.30.5

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.6.0)
          DPF name: Java Runtime Environment 1.6.0
        CLSID name: Java Plug-in 1.6.0_03
         Installer: 
          Codebase: http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
       description: 
    classification: Legitimate
    known filename: npjpi150_06.dll
         info link: 
       info source: Safer Networking Ltd.
              Path: C:\Program Files\Java\jre1.6.0_03\bin\
         Long name:    npjpi160_03.dll
        Short name:       NPJPI1~1.DLL
    Date (created): 24/09/2007 23:31:44
Date (last access): 24/09/2007 23:31:44
 Date (last write): 25/09/2007 01:11:34
          Filesize:             132496
        Attributes:           archive 
               MD5: D6A4682A6FF41832A3F1A7AB9AE08199
             CRC32:           9080B537
           Version:           6.0.30.5

{D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
          DPF name: 
        CLSID name: Shockwave Flash Object
         Installer: C:\Windows\Downloaded Program Files\swflash.inf
          Codebase: http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
       description: Macromedia Shockwave Flash Player
    classification: Legitimate
    known filename: 
         info link: 
       info source: Patrick M. Kolla
              Path: C:\Windows\system32\Macromed\Flash\
         Long name:        Flash9d.ocx
        Short name:                   
    Date (created): 11/06/2007 13:04:32
Date (last access): 11/06/2007 13:04:32
 Date (last write): 11/06/2007 13:04:32
          Filesize:            2267368
        Attributes:  readonly archive 
               MD5: B01E2A41389FBA42B7B5A026EA88C9B7
             CRC32:           8980B6EC
           Version:           9.0.47.0



--- Process list ---
PID:  232 (   0) C:\Windows\system32	askeng.exe
 size: 166400
  MD5: 1226E9FAE5B8508801EC974E3C9D9C14
PID:  252 (   0) C:\Windows\system32\Dwm.exe
 size: 83456
  MD5: E87B968F3D49117445893EB0503FE34F
PID:   12 (   0) C:\Windows\Explorer.EXE
 size: 2923520
  MD5: 6D06CD98D954FE87FB2DB8108793B399
PID: 1464 (   0) C:\Program Files\Windows Defender\MSASCui.exe
 size: 1006264
  MD5: 9AD9E2FB2811123DA13DE84CC154AB77
PID: 2036 (   0) C:\Windows\System32\VTTimer.exe
 size: 53248
  MD5: 09F1A97848BFAB3F36EB216681465B85
PID:  776 (   0) C:\Windows\SOUNDMAN.EXE
 size: 598016
  MD5: C048F97F373A886B7726FD7B7CA9B8DA
PID: 1088 (   0) C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
 size: 132496
  MD5: D4F0F7437327DBAA264338BAAFB5E5AF
PID:  296 (   0) C:\Program Files\Avast4\ashDisp.exe
 size: 79224
  MD5: 88D86112DD9F2BB6A603674706C7E846
PID: 2132 (   0) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
 size: 1460560
  MD5: B7D4586BFC0DD6C3BE7DCCC252A3E97E
PID: 3196 (   0) C:\Windows\System32\mobsync.exe
 size: 95232
  MD5: 9C632DC0F1B6D79B05F46A4A5349CEF4
PID: 4088 (   0) C:\Windows\system32\wbem\unsecapp.exe
 size: 37376
  MD5: E19C7BCE081B85F86F03AE9D82FFA77B
PID: 3484 (   0) C:\Program Files\Mozilla Firefox\firefox.exe
 size: 7650416
  MD5: 15637C95A67A2C09B3CC5004BE595CCA
PID: 3704 (   0) C:\Program Files\Internet Explorer\iexplore.exe
 size: 625152
  MD5: 7023BC3AF58F0C47856AF147E290D81A
PID: 3904 (   0) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
 size: 4943184
  MD5: C92780F50B8BB7A89E919585916494A9
PID: 3124 (   0) C:\Program Files\Dofus\dofus.dll
 size: 1552483
  MD5: 3522F1DC5C16736D8DF5379CC1774493
PID: 4004 (   0) C:\Program Files\Dofus\dofus.dll
 size: 1552483
  MD5: 3522F1DC5C16736D8DF5379CC1774493
PID: 2024 (   0) C:\Program Files\MSN Messenger\msnmsgr.exe
 size: 5674352
  MD5: A7EFC7EA7EF6FB022A8A95813EDCBE5D
PID: 4068 (   0) C:\Program Files\Internet Explorer\IEUser.exe
 size: 301568
  MD5: F86B4F1A21102E7962B49893734A9BAF
PID: 2168 (   0) C:\Program Files\Internet Explorer\iexplore.exe
 size: 625152
  MD5: 7023BC3AF58F0C47856AF147E290D81A


--- Browser start & search pages list ---
Spybot - Search & Destroy browser pages report, 31/12/2007 13:11:22

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
  C:\Windows\system32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page
  https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
  https://www.google.fr/?gws_rd=ssl
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
  %SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page
  https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
  https://www.msn.com/fr-fr/?ocid=iehp
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL
  https://www.msn.com/fr-fr/?ocid=iehp
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL
  https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF


--- Winsock Layered Service Provider list ---
Namespace Provider  3: Fournisseur Shim d'affectation de noms de messagerie
        GUID: {964ACBA2-B2BC-40EB-8C6A-A6DB40161CAE}
    Filename: 



--- Uninstall list ---


--- System Services ---
Service (registry key): .NET CLR Data
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): .NET CLR Networking
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): .NET Data Provider for Oracle
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): .NET Data Provider for SqlServer
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): .NETFramework
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): ACPI
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote ACPI Microsoft
    Image path: system32\drivers\acpi.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 1
 Error Control: 3

Service (registry key): adiusbaw
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: USB ADSL WAN Adapter
    Image path: system32\DRIVERS\adiusbaw.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): adp94xx
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\adp94xx.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): adpahci
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\adpahci.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): adpu160m
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\adpu160m.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): adpu320
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\adpu320.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): adsi
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): AeLookupSvc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\aelupsvc.dll,-1
   Description: @%SystemRoot%\system32\aelupsvc.dll,-2
   Object name: localSystem
    Image path: %systemroot%\system32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1

Service (registry key): AFD
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Ancilliary Function Driver for Winsock
   Description: Ancilliary Function Driver for Winsock
    Image path: \SystemRoot\system32\drivers\afd.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 1
          Type: 1
 Error Control: 1

Service (registry key): aic78xx
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\djsvs.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): ALCXWDM
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Service for Realtek AC97 Audio (WDM)
    Image path: system32\drivers\RTKVAC.SYS
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): ALG
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\Alg.exe,-112
   Description: @%SystemRoot%\system32\Alg.exe,-113
   Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\System32\alg.exe
    Image size: 58880
     Image MD5: E69FB0E3112C40FDC0EF7D21A52DC951
   Control Set: CurrentControlSet
         Start: 3
          Type: 16
 Error Control: 1

Service (registry key): aliide
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\aliide.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 3

Service (registry key): amdagp
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: AMD AGP Bus Filter Driver
    Image path: \SystemRoot\system32\drivers\amdagp.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): amdide
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\amdide.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 3

Service (registry key): AmdK7
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: AMD K7 Processor Driver
    Image path: \SystemRoot\system32\drivers\amdk7.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): AmdK8
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: AMD K8 Processor Driver
    Image path: \SystemRoot\system32\drivers\amdk8.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): Appinfo
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\system32\appinfo.dll,-100
   Description: @%systemroot%\system32\appinfo.dll,-101
   Object name: LocalSystem
    Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1
 Depends On services: RpcSs,ProfSvc

Service (registry key): arc
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\arc.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): arcsas
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\arcsas.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): aswMonFlt
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: aswMonFlt
   Description: avast! mini-filter driver (aswMonFlt)
    Image path: system32\DRIVERS\aswMonFlt.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 2
          Type: 2
 Error Control: 1
 Depends On services: FltMgr

Service (registry key): aswRdr
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: aswRdr
   Control Set: CurrentControlSet
         Start: 1
          Type: 1
 Error Control: 1
 Depends On services: tcpip

Service (registry key): aswTdi
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: avast! Network Shield Support
   Control Set: CurrentControlSet
         Start: 1
          Type: 1
 Error Control: 1
 Depends On services: tcpip

Service (registry key): aswUpdSv
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: avast! iAVS4 Control Service
   Description: Fournit la mise à jour automatique pour l'antivirus avast!.
   Object name: LocalSystem
    Image path: "C:\Program Files\Avast4\aswUpdSv.exe"
    Image size: 17272
     Image MD5: 591E7CDF35DE74D55CD462A13FBADE5E
   Control Set: CurrentControlSet
         Start: 2
          Type: 272
 Error Control: 1

Service (registry key): AsyncMac
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote de média asynchrone RAS
   Description: Pilote de média asynchrone RAS
    Image path: system32\DRIVERS\asyncmac.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): atapi
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Canal IDE
    Image path: system32\drivers\atapi.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 1
 Error Control: 3

Service (registry key): AudioEndpointBuilder
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\audiosrv.dll,-204
   Description: @%SystemRoot%\System32\audiosrv.dll,-205
   Object name: LocalSystem
    Image path: %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: PlugPlay

Service (registry key): Audiosrv
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\audiosrv.dll,-200
   Description: @%SystemRoot%\System32\audiosrv.dll,-201
   Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: AudioEndpointBuilder,RpcSs,MMCSS

Service (registry key): avast! Antivirus
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: avast! Antivirus
   Description: Gère et implémente les services de l'antivirus avast! pour cet ordinateur. Ceci inclut la protection résidente, la zone de quarantaine et le planificateur.
   Object name: LocalSystem
    Image path: "C:\Program Files\Avast4\ashServ.exe"
    Image size: 140664
     Image MD5: DBBB6E20EC8C38902C4935B249AEBE2A
   Control Set: CurrentControlSet
         Start: 2
          Type: 272
 Error Control: 1
 Depends On services: aswMonFlt,RpcSS

Service (registry key): avast! Mail Scanner
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: avast! Mail Scanner
   Description: Implémente l'analyse du courrier électronique pour l'antivirus avast!.
   Object name: LocalSystem
    Image path: "C:\Program Files\Avast4\ashMaiSv.exe" /service
    Image size: 247160
     Image MD5: 36088BA16E85C081D7BC48725872D540
   Control Set: CurrentControlSet
         Start: 3
          Type: 272
 Error Control: 1
 Depends On services: "avast! Antivirus"

Service (registry key): avast! Web Scanner
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: avast! Web Scanner
   Description: Implémente l'analyse du contenu web (HTTP) pour l'antivirus avast!.
   Object name: LocalSystem
    Image path: "C:\Program Files\Avast4\ashWebSv.exe" /service
    Image size: 345464
     Image MD5: 86ACF7955F4DB72880F61D724A97855A
   Control Set: CurrentControlSet
         Start: 3
          Type: 272
 Error Control: 1
 Depends On services: "avast! Antivirus"

Service (registry key): b57nd60x
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0
    Image path: system32\DRIVERS\b57nd60x.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): BattC
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): Beep
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Beep
   Control Set: CurrentControlSet
         Start: 1
          Type: 1
 Error Control: 1

Service (registry key): BFE
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\bfe.dll,-1001
   Description: @%SystemRoot%\system32\bfe.dll,-1002
   Object name: NT AUTHORITY\LocalService
    Image path: %systemroot%\system32\svchost.exe -k LocalServiceNoNetwork
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: RpcSs

Service (registry key): BITS
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\qmgr.dll,-1000
   Description: @%SystemRoot%\system32\qmgr.dll,-1001
   Object name: LocalSystem
    Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: RpcSs,EventSystem

Service (registry key): blbdrive
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\blbdrive.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): Bonjour Service
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##
   Description: ##Id_String2.6844F930_1628_4223_B5CC_5BB94B879762##
   Object name: LocalSystem
    Image path: "C:\Program Files\Bonjour\mDNSResponder.exe"
    Image size: 229376
     Image MD5: 73686FE0B2E0469F89FD2075BE724704
   Control Set: CurrentControlSet
         Start: 2
          Type: 16
 Error Control: 1
 Depends On services: Tcpip

Service (registry key): bowser
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Bowser
   Description: Implements the datagram receiver for the computer browser browser service.
    Image path: system32\DRIVERS\bowser.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 2
 Error Control: 1

Service (registry key): BrFiltLo
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Brother USB Mass-Storage Lower Filter Driver
    Image path: \SystemRoot\system32\drivers\brfiltlo.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): BrFiltUp
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Brother USB Mass-Storage Upper Filter Driver
    Image path: \SystemRoot\system32\drivers\brfiltup.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): Browser
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\system32\browser.dll,-100
   Description: @%systemroot%\system32\browser.dll,-101
   Object name: LocalSystem
    Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: LanmanWorkstation,LanmanServer

Service (registry key): Brserid
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Brother MFC Serial Port Interface Driver (WDM)
    Image path: \SystemRoot\system32\drivers\brserid.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): BrSerWdm
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Brother WDM Serial driver
    Image path: \SystemRoot\system32\drivers\brserwdm.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): BrUsbMdm
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Brother MFC USB Fax Only Modem
    Image path: \SystemRoot\system32\drivers\brusbmdm.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): BrUsbSer
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Brother MFC USB Serial WDM Driver
    Image path: \SystemRoot\system32\drivers\brusbser.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): BTHMODEM
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Bluetooth Serial Communications Driver
    Image path: \SystemRoot\system32\drivers\bthmodem.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): cdfs
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: CD/DVD File System Reader
   Description: ISO9660/Joliet File System Reader for CD/DVDs. (Core) (All pieces)
    Image path: system32\DRIVERS\cdfs.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 2
 Error Control: 1
 Depends On group: "SCSI CDROM Class"

Service (registry key): cdrom
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote de CD-ROM
    Image path: system32\DRIVERS\cdrom.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 1
          Type: 1
 Error Control: 1

Service (registry key): CertPropSvc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\System32\certprop.dll,-11
   Description: @%SystemRoot%\System32\certprop.dll,-12
   Object name: LocalSystem
    Image path: %SystemRoot%\system32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1
 Depends On services: RpcSs

Service (registry key): circlass
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Consumer IR Devices
    Image path: \SystemRoot\system32\drivers\circlass.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): CLFS
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Common Log (CLFS)
   Description: Common Log (CLFS)
    Image path: System32\CLFS.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 1
 Error Control: 3

Service (registry key): clr_optimization_v2.0.50727_32
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Microsoft .NET Framework NGEN v2.0.50727_X86
   Description: Microsoft .NET Framework NGEN
   Object name: LocalSystem
    Image path: %systemroot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
    Image size: 59392
     Image MD5: D3BF342F47996E18490970FCFB8126A8
   Control Set: CurrentControlSet
         Start: 3
          Type: 16
 Error Control: 0

Service (registry key): cmdide
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\cmdide.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 3

Service (registry key): Compbatt
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Microsoft Composite Battery Driver
    Image path: \SystemRoot\system32\drivers\compbatt.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 3

Service (registry key): COMSysApp
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @comres.dll,-947
   Description: @comres.dll,-948
   Object name: LocalSystem
    Image path: %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
    Image size: 7168
     Image MD5: BE01E566D1F569AAB32D0335613E1EEA
   Control Set: CurrentControlSet
         Start: 3
          Type: 16
 Error Control: 1
 Depends On services: RpcSs,EventSystem,SENS

Service (registry key): crcdisk
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Crcdisk Filter Driver
    Image path: system32\drivers\crcdisk.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 1
 Error Control: 1

Service (registry key): Crusoe
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Transmeta Crusoe Processor Driver
    Image path: \SystemRoot\system32\drivers\crusoe.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): crypt32
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): CryptSvc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\cryptsvc.dll,-1001
   Description: @%SystemRoot%\system32\cryptsvc.dll,-1002
   Object name: NT Authority\NetworkService
    Image path: %SystemRoot%\system32\svchost.exe -k NetworkService
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: RpcSs

Service (registry key): DCLocator
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): DcomLaunch
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @oleres.dll,-5012
   Description: @oleres.dll,-5013
   Object name: LocalSystem
    Image path: %SystemRoot%\system32\svchost.exe -k DcomLaunch
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1

Service (registry key): DfsC
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Dfs Client Driver
   Description: Dfs Client Driver
    Image path: System32\Drivers\dfsc.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 1
          Type: 2
 Error Control: 1
 Depends On services: Mup

Service (registry key): Dhcp
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\dhcpcsvc.dll,-100
   Description: @%SystemRoot%\system32\dhcpcsvc.dll,-101
   Object name: NT Authority\LocalService
    Image path: %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: NSI,Tdx,Afd

Service (registry key): disk
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote de disque
    Image path: system32\drivers\disk.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 1
 Error Control: 1

Service (registry key): Dnscache
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\System32\dnsapi.dll,-101
   Description: @%SystemRoot%\System32\dnsapi.dll,-102
   Object name: NT AUTHORITY\NetworkService
    Image path: %SystemRoot%\system32\svchost.exe -k NetworkService
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: Tdx

Service (registry key): dot3svc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\system32\dot3svc.dll,-1102
   Description: @%systemroot%\system32\dot3svc.dll,-1103
   Object name: localSystem
    Image path: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1
 Depends On services: RpcSs,Ndisuio,Eaphost

Service (registry key): DPS
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\system32\dps.dll,-500
   Description: @%systemroot%\system32\dps.dll,-501
   Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1

Service (registry key): drmkaud
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Filtre de décodeur DRM (Noyau Microsoft)
    Image path: system32\drivers\drmkaud.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): DXGKrnl
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: LDDM Graphics Subsystem
   Description: Controls the underlying video driver stacks to provide fully-featured display capabilities.
    Image path: \SystemRoot\System32\drivers\dxgkrnl.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 0

Service (registry key): EapHost
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\system32\eapsvc.dll,-1
   Description: @%systemroot%\system32\eapsvc.dll,-2
   Object name: localSystem
    Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1
 Depends On services: RPCSS,KeyIso

Service (registry key): Ecache
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: ReadyBoost Caching Driver
   Description: ReadyBoost Caching Driver
    Image path: System32\drivers\ecache.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 1
 Error Control: 3

Service (registry key): ELOADER
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: General Purpose USB Driver (adildr.sys)
    Image path: System32\Drivers\adildr.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 2
          Type: 1
 Error Control: 1

Service (registry key): elxstor
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\elxstor.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): EmdCache
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): EMDMgmt
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\emdmgmt.dll,-1000
   Description: @%SystemRoot%\system32\emdmgmt.dll,-1001
   Object name: LocalSystem
    Image path: %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 0
 Depends On services: rpcss,ecache,slsvc,fileinfo

Service (registry key): ESENT
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): Eventlog
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\wevtsvc.dll,-200
   Description: @%SystemRoot%\system32\wevtsvc.dll,-201
   Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1

Service (registry key): EventSystem
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @comres.dll,-2450
   Description: @comres.dll,-2451
   Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\system32\svchost.exe -k LocalService
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: rpcss

Service (registry key): fastfat
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: FAT12/16/32 File System Driver
   Description: Note - dependance on CDROM.SYS only if required to read/write DVD-RAM media (which appears as CD class device). (Core) (All pieces)
   Control Set: CurrentControlSet
         Start: 3
          Type: 2
 Error Control: 1

Service (registry key): fdc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote de contrôleur de lecteur de disquettes
    Image path: system32\DRIVERS\fdc.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): fdPHost
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\system32\fdPHost.dll,-100
   Description: @%systemroot%\system32\fdPHost.dll,-101
   Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\system32\svchost.exe -k LocalService
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1
 Depends On services: RpcSs,http

Service (registry key): FDResPub
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\system32\fdrespub.dll,-100
   Description: @%systemroot%\system32\fdrespub.dll,-101
   Object name: NT AUTHORITY\LocalService
    Image path: %SystemRoot%\system32\svchost.exe -k LocalService
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: RpcSs,http

Service (registry key): FileInfo
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: File Information FS MiniFilter
   Description: Collects information about files in memory to be consumed by other system services.
    Image path: system32\drivers\fileinfo.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 2
 Error Control: 1
 Depends On services: fltmgr

Service (registry key): Filetrace
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: FileTrace
   Description: ETW File Trace Filter
    Image path: system32\drivers\filetrace.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 2
 Error Control: 1
 Depends On services: FltMgr

Service (registry key): FLEXnet Licensing Service
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: FLEXnet Licensing Service
   Description: This service performs licensing functions on behalf of FLEXnet enabled products.
   Object name: LocalSystem
    Image path: "C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
    Image size: 654848
     Image MD5: 227846995AFEEFA70D328BF5334A86A5
   Control Set: CurrentControlSet
         Start: 3
          Type: 16
 Error Control: 1

Service (registry key): flpydisk
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote de lecteur de disquettes
    Image path: system32\DRIVERS\flpydisk.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): FltMgr
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: FltMgr
   Description: File System Filter Manager Driver
    Image path: system32\drivers\fltmgr.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 0
          Type: 2
 Error Control: 3

Service (registry key): FontCache3.0.0.0
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\PresentationHost.exe,-3309
   Description: @%SystemRoot%\system32\PresentationHost.exe,-3310
   Object name: NT Authority\LocalService
    Image path: %systemroot%\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
    Image size: 36864
     Image MD5: 7EF57375636991F794BF40B522A8E7EF
   Control Set: CurrentControlSet
         Start: 3
          Type: 16
 Error Control: 1

Service (registry key): Fs_Rec
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 1
          Type: 8
 Error Control: 0

Service (registry key): gagp30kx
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms
    Image path: \SystemRoot\system32\drivers\gagp30kx.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): gpsvc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @gpapi.dll,-112
   Description: @gpapi.dll,-113
   Object name: LocalSystem
    Image path: %systemroot%\system32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: RPCSS,Mup

Service (registry key): HDAudBus
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Microsoft UAA Bus Driver for High Definition Audio
    Image path: \SystemRoot\system32\drivers\hdaudbus.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): HidBth
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Microsoft Bluetooth HID Miniport
    Image path: \SystemRoot\system32\drivers\hidbth.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 0

Service (registry key): HidIr
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Microsoft Infrared HID Driver
    Image path: \SystemRoot\system32\drivers\hidir.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 0

Service (registry key): hidserv
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\System32\hidserv.dll,-101
   Description: @%SystemRoot%\System32\hidserv.dll,-102
   Object name: LocalSystem
    Image path: %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1

Service (registry key): HidUsb
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote de classe HID Microsoft
    Image path: system32\DRIVERS\hidusb.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 0

Service (registry key): hkmsvc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\kmsvc.dll,-6
   Description: @%SystemRoot%\system32\kmsvc.dll,-7
   Object name: localSystem
    Image path: %SystemRoot%\System32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1
 Depends On services: RpcSs

Service (registry key): HpCISSs
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\hpcisss.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): HTTP
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: HTTP
   Description: This service implements the hypertext transfer protocol (HTTP). If this service is disabled, any services that explicitly depend on it will fail to start.
    Image path: system32\drivers\HTTP.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 1

Service (registry key): i2omp
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\i2omp.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): i8042prt
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Pilote pour clavier i8042 et souris sur port PS/2
    Image path: system32\DRIVERS\i8042prt.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 1
          Type: 1
 Error Control: 1

Service (registry key): ialm
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: system32\DRIVERS\ialmnt5.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 3
          Type: 1
 Error Control: 0

Service (registry key): iaStorV
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: Intel RAID Controller Vista
    Image path: \SystemRoot\system32\drivers\iastorv.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): idsvc
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8193
   Description: @%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8192
   Object name: LocalSystem
    Image path: "%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
    Image size: 741376
     Image MD5: 6D1D3CAB85BA0C63CB83296A8A1825F9
   Control Set: CurrentControlSet
         Start: 3
          Type: 32
 Error Control: 1

Service (registry key): iirsp
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\iirsp.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSet
         Start: 4
          Type: 1
 Error Control: 1

Service (registry key): IKEEXT
 Registry path: \SYSTEM\CurrentControlSet\Services\
  Display name: @%SystemRoot%\system32\ikeext.dll,-501
   Description: @%SystemRoot%\system32\ikeext.dll,-502
   Object name: LocalSystem
    Image path: %systemroot%\system32\svchost.exe -k netsvcs
    Image size: 22016
     Image MD5: 10DA15933D582D2FEDCF705EFE394B09
   Control Set: CurrentControlSet
         Start: 2
          Type: 32
 Error Control: 1
 Depends On services: BFE

Service (registry key): inetaccs
 Registry path: \SYSTEM\CurrentControlSet\Services\
   Control Set: CurrentControlSet
         Start: 0
          Type: 0
 Error Control: 0

Service (registry key): intelide
 Registry path: \SYSTEM\CurrentControlSet\Services\
    Image path: \SystemRoot\system32\drivers\intelide.sys
    Image size: 0
     Image MD5: D41D8CD98F00B204E9800998ECF8427E
   Control Set: CurrentControlSe

Utilisateur anonyme · Answer

Help me, please.

green day · Answer

Salut

Télécharge ceci : 

Lien : http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis

Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm 

Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum. 

++

Utilisateur anonyme · Answer

Salut green day et merci de ta reponse.
Voici le rapport  Hijackthis :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:28:23, on 31/12/2007
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\VTTimer.exe
C:\Windows\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Avast4\ashDisp.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Dofus\dofus.dll
C:\Program Files\Dofus\dofus.dll
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Menara
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [VModes] VModes AttachToDesktop
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [{9B71D88C-C598-4935-C5D1-43AA4DB90836}] C:\Users\user\AppData\Roaming\server.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

Utilisateur anonyme · Answer

Aidez moi s'il vous plait :s

green day · Answer

Salut

Télécharger ComboFix (par sUBs) sur le Bureau : http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

* Démarrer en mode sans echec 
* Double cliquer combofix.exe. 
* Appuyer sur la touche Y (Yes) pour démarrer le scan 
* Le rapport sera crée dans: C:\Combofix.txt, poste le stp 


++

Utilisateur anonyme · Answer

Salut,
en lancant ComboFix.exe, une fentre s'ouvre me disant que Reg.exe a cessé de fonctionné. Est-ce du a un probleme de compatibilité parceque j'ai Vista starter ? ou autre chose ?
Autre chose, je sais pas quand je dois cliquer sur Y car il y'a un Scan automatique.
Et puis finalement, je trouve pas le log.

Utilisateur anonyme · Answer

Le nom de l'application est server.exe, on dirait qu'il a un syeteme d'autoregeneration car quand je le supprime, il reapparait.
Help c'est important !

Utilisateur anonyme · Answer

Il y a bien 9 mois que ce problème m'est survenu, et je ne sais malheureusement plus comment j'ai pu neutralisé ce malware. Pardon.

Spyware - Trojan

8 réponses

Votre réponse

Discussions similaires

Newsletters