Certaines page Internet:Impossible.d'afficher

Résolu
bigjal -  
Bonjour,

Sur certaines page internet je ne suis pas capable de les voir. J'ai le message Impossible d'Afficher la page et mon serveur devient introuvable. Ce message survient très souvent lorsque j'essai d'aller sur un site comme pour payer quelque chose et beaucoup d'autres..
J'ai fait faire un diagnostique sur Window et le voici.

Window ne peut pas se connecter a internet a l'aide de http et Https

vérifier les port HTTP (80) . Le port https(443) et le port Ftp (21).

Voici le rapport

Heure de la dernière exécution du diagnostic : 02/15/09 15:52:23 Diagnostic HTTP, HTTPS, FTP
Connectivité HTTP, HTTPS, FTP

warn FTP (passif): Erreur 12029 lors de la connexion à ftp.microsoft.com : Impossible d'établir une connexion avec le serveur
warn HTTP: Erreur 12029 lors de la connexion à www.microsoft.com : Impossible d'établir une connexion avec le serveur
warn FTP (actif): Erreur 12029 lors de la connexion à ftp.microsoft.com : Impossible d'établir une connexion avec le serveur
warn HTTPS: Erreur 12029 lors de la connexion à www.microsoft.com : Impossible d'établir une connexion avec le serveur
warn HTTP: Erreur 12029 lors de la connexion à www.hotmail.com : Impossible d'établir une connexion avec le serveur
warn HTTPS: Erreur 12029 lors de la connexion à www.passport.net : Impossible d'établir une connexion avec le serveur
error Impossible d'établir une connexion HTTP.
error Impossible d'établir une connexion HTTPS.
error Impossible d'établir une connexion FTP.
info Redirection de l'utilisateur vers l'appel d'aide

Diagnostic du client DNS
DNS - N'est pas un scénario d'utilisateur à domicile

info Utilisation du proxy Web : non
info Résolution de nom ok pour (www.microsoft.com) : oui
Pas de serveurs DNS

Échec de DNS

Diagnostic de la passerelle
Passerelle

info La configuration de proxy suivante est utilisée par IE : Détecter automatiquement les paramètres :Désactivé Script de configuration automatique : Serveur proxy : Liste d'exceptions de proxys :
info Cet ordinateur possède l'entrée ou les entrées de passerelle suivantes : 192.168.2.1
info Cet ordinateur possède l'adresse ou les adresses IP suivantes : 192.168.2.11
info La passerelle par défaut se trouve dans le même sous-réseau que cet ordinateur
info L'entrée de passerelle par défaut est une adresse monodiffusion valide
info L'ARP a résolu l'adresse de passerelle par défaut en 1 tentative(s)
info Ping ICMP a atteint la passerelle par défaut en 1 tentative(s)
info Le port TCP 80 sur l'hôte 207.46.193.254 a été joint
info L'hôte Internet www.microsoft.com a été atteint
info La passerelle par défaut est correcte

Diagnostic de la couche IP
Table de routage IP endommagée

info Le itinéraire par défaut est valide
info Le itinéraire de bouclage est valide
info Le itinéraire hôte local est valide
info Le itinéraire de sous-réseau local est valide
Entrées de la mémoire cache ARP non valides

action La mémoire cache ARP a été vidée

Diagnostic de la configuration IP
Adresse IP non valide

info Adresse IP valide détectée : 192.168.2.11

Diagnostic sans fil
Sans fil - Service désactivé

Sans fil - SSID d'utilisateur

action Entrée utilisateur requise : Spécifier le nom du réseau ou SSID
Sans fil - Premier paramétrage

info Nom du réseau sans fil (SSID) auquel l'utilisateur aimerait se connecter = BELL645.
Sans fil - Antenne éteinte

info Adresse IP valide détectée : 192.168.2.11
Sans fil - Hors de portée

Sans fil - Problème matériel

Sans fil - Utilisateur novice

Sans fil - Réseau ad hoc

Sans fil - Moins favoris

Sans fil - 802.1x activé

Sans fil - Incompatibilité de configuration

Sans fil - Rapport signal-bruit faible

Diagnostic WinSock
État WinSock

info Toutes les entrées de fournisseur de service de base sont présentes dans le catalogue Winsock.
info Les chaînes du fournisseur de service Winsock sont valides.
info L'entrée de fournisseur MSAFD Tcpip [TCP/IP] a réussi le test de communication de bouclage.
info L'entrée de fournisseur MSAFD Tcpip [UDP/IP] a réussi le test de communication de bouclage.
info L'entrée de fournisseur RSVP UDP Service Provider a réussi le test de communication de bouclage.
info L'entrée de fournisseur RSVP TCP Service Provider a réussi le test de communication de bouclage.
info La connectivité est valide pour tous les fournisseurs de service Winsock.

Diagnostic de la carte réseau
Détection de l'emplacement réseau

info Utilisation d'une connexion Internet à domicile
Identification de la carte réseau

info Connexion réseau : Nom=Connexion au réseau local, périphérique=Carte réseau Fast Ethernet PCI Realtek RTL8139 Family #2, type de support=Réseau local, sous-type de support=Réseau local
info Connexion réseau : Nom=Connexion réseau sans fil, périphérique=D-Link Xtreme N, type de support=Réseau local, sous-type de support=SANS FIL
info Connexion réseau : Nom=Sympatico 2, périphérique=Parallèle direct, type de support=DIRECT, sous-type de support=AUCUN
info Les connexions Ethernet et sans fil sont disponibles. L'utilisateur est invité à opérer une sélection
action Entrée utilisateur requise : Sélectionner la connexion réseau
info Connexion sans fil sélectionnée
État de la carte réseau

info État de la connexion réseau : Connecté

Diagnostic HTTP, HTTPS, FTP
Connectivité HTTP, HTTPS, FTP

warn HTTPS: Erreur 12029 lors de la connexion à www.microsoft.com : Impossible d'établir une connexion avec le serveur
warn HTTP: Erreur 12029 lors de la connexion à www.microsoft.com : Impossible d'établir une connexion avec le serveur
warn FTP (passif): Erreur 12029 lors de la connexion à ftp.microsoft.com : Impossible d'établir une connexion avec le serveur
warn FTP (actif): Erreur 12029 lors de la connexion à ftp.microsoft.com : Impossible d'établir une connexion avec le serveur
warn HTTP: Erreur 12029 lors de la connexion à www.hotmail.com : Impossible d'établir une connexion avec le serveur
warn HTTPS: Erreur 12029 lors de la connexion à www.passport.net : Impossible d'établir une connexion avec le serveur
error Impossible d'établir une connexion HTTP.
error Impossible d'établir une connexion HTTPS.
error Impossible d'établir une connexion FTP.
Configuration: Windows XP
Internet Explorer 6.0

28 réponses

Résumé de la discussion

Impossibilité d’afficher plusieurs pages web et indisponibilité du serveur surviennent lors de navigations courantes, notamment sur des paiements en ligne, et les ports HTTP 80, HTTPS 443 et FTP 21 semblent concernés. Le diagnostic indique que la passerelle et le réseau local sont atteignables, mais les tests HTTP/HTTPS/FTP affichent des erreurs 12029 vers des serveurs externes et une résolution DNS partielle. En pratique, l’adresse IP locale 192.168.2.11 et la passerelle 192.168.2.1 sont atteignables; l’ARP est vidée et le ping vers la passerelle réussit, suggérant un souci hors du lien local. D'autres éléments pointent vers une configuration réseau locale problématique, comme l’absence de proxy ou des paramètres de sécurité et de navigateur obsolètes; vérifier proxy, pare-feu et DNS peut être utile.

Bobot (l’IA à votre service)
  3. bigjal Auteur
    Merci encore pour ton aide.

    Par curiosité, tu demeures à quelle endroit car je vois que le site est très large. Moi je viens du Québec plus précisément Montréal.

    Bonne journée
    3. bigjal Auteur
      Salut,
      Est-ce que tu peux me dire comment faire pour faire une bonne connection réseau car j'ai fait le tout au téléphone avec un technicien et tout était parfait et j'ai même un technicien du système Sympatico qui est venu chez moi pour faire l'installation car j'avais 2 problèmes 1- problème de prise téléphonique et 2- mon modem ne fonctionnait pas bien. je l'ai fait vérifié hier.
      La seul chose qui pourrait avoir un problème c'est que j'ai 2 cartes D-Link (adaptateur) et ma carte réseau Fast Ethernet qui a un X rouge dessus lorsque je vais vérifier mes cartes. est-ce normal ? Je ne crois pas sauf que dès que je le réactive ma connection internet ne foncitonne pas.

      Merci encore ........
      2. gen-hackman
        Diagnostic sans fil
        Sans fil - Service désactivé

        Sans fil - SSID d'utilisateur

        action Entrée utilisateur requise : Spécifier le nom du réseau ou SSID
        Sans fil - Premier paramétrage

        info Nom du réseau sans fil (SSID) auquel l'utilisateur aimerait se connecter = BELL645.
        Sans fil - Antenne éteinte

        info Adresse IP valide détectée : 192.168.2.11
        Sans fil - Hors de portée

        Sans fil - Problème matériel

        Sans fil - Utilisateur novice

        Sans fil - Réseau ad hoc

        Sans fil - Moins favoris

        Sans fil - 802.1x activé

        Sans fil - Incompatibilité de configuration

        Sans fil - Rapport signal-bruit faible
        1. bigjal Auteur
          Que veut dire le tout. Je vois qu'il y des message d'erreur mais je ne comprend rien du pourquoi et pour quelle raison que je suis capable d'aller sur Internet. J'ai fait auparavent, la vérification avec Sympatico afin de vérifier mes connection et tout était en règle sauf il me disait que c'était un problème d'ordi et non de connection.

          Je n'y comprend rien.

          Merci encore de m'aider, t'ai mon seul espoir afin de m'en sortir...
      3. gen-hackman
        salut essaie ceci :

        option internet et rétablir les paramètres par defaut d'internet explorer,
        1. bigjal Auteur
          Ca ne change rien..
      4. gen-hackman
        Bonjour renconters-tu encore des soucis particulires? car je ne vois plus rien
        1. bigjal Auteur
          Salut,
          Je rencontre toujours les mêmes problèmes: Lorsque j'essai d'aller dans un site qui est sécurisé comme lors d'un paiement, la page se déconnecte et j'ai fait une analyseavec Internet qui m'inscrit erreur 12029 lors de la connexion FTP. et je ne suis pas capable de créer mon compte Outlook Express.
      5. gen-hackman
        Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
        - Coche Afficher les fichiers et dossiers cachés
        - Décoche Masquer les extensions des fichiers dont le type est connu
        - Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)
        clique sur Appliquer, puis OK.

        N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important

        Fais analyser le(s) fichier(s) suivants sur Virustotal :

        http://www.virustotal.com/flash/index_en.html

        * Clique sur Parcourir en haut, choisis Poste de travail et cherche ce fichier :

        C:\WINDOWS\system32\wsimd.dll

        * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
        * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
        * Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
        * Une nouvelle fenêtre de ton navigateur va apparaître
        * Clique alors sur les deux fleches
        * Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
        * Enfin colle le résultat dans ta prochaine réponse.

        * Fais la même chose avec ces fichiers :


        C:\WINDOWS\system32\wsfwDS.dll
        C:\WINDOWS\system32\dsaNac.dll
        C:\WINDOWS\system32\dsa.dll

        Note : Pour analyser un autre fichier, clique en bas sur Autre fichier.
        1. bigjal Auteur
          Fichier wsimd.dll reçu le 2009.02.19 00:56:13 (CET)Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 237636 bytes
          MD5...: 83ab8f284222998a31875d81b633aa47
          SHA1..: 24e526aedf7e1abc1ae2c04ec38c7895b18b6d44
          SHA256: 843a1ce24051c67851e245e25027c12b3f552136dae9afe197bb86b6050cdc86
          SHA512: 27ad3b91231e8aa761b1b241105ac8d34bf01e04cbb0dbb367b07ca0cfee9915<BR>c637ca7f2f4ba9d44e197e228e68d41620eda41d4942f14b2a3530b268d6ef2d
          ssdeep: 3072:yQ55Pa+wFMaC81BlwJLH5QP2qTFY1ub027yVrddeqRIU1O5c3NFxhSAIIR:<BR>yQ58l1BCJtQP2GGVr9FdP<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Windows OCX File (63.5%)<BR>Win32 Executable MS Visual C++ (generic) (19.3%)<BR>Windows Screen Saver (6.7%)<BR>Win32 Executable Generic (4.3%)<BR>Win32 Dynamic Link Library (generic) (3.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x10007848<BR>timedatestamp.....: 0x44efb89e (Sat Aug 26 02:57:34 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x23e0e 0x24000 6.60 e6f825f551257ca4a65d0f7babc63110<BR>.rdata 0x25000 0x803a 0x9000 4.58 6e7b4f7855b9e099a6f1102cc6f60dfd<BR>.data 0x2e000 0x8732 0x5000 2.64 c55815c11c8573e977be765c7bec737e<BR>.rsrc 0x37000 0x29f8 0x3000 3.59 8ec8e8f60d8cc2351dcac63d91b7ae9d<BR>.reloc 0x3a000 0x309e 0x4000 5.56 629ff7753bff5017922ef948029ebbaf<BR><BR>( 9 imports ) <BR>> VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW<BR>> KERNEL32.dll: lstrcmpiW, GlobalFlags, GetPrivateProfileIntW, GetPrivateProfileStringW, WritePrivateProfileStringW, GetCurrentDirectoryW, SetFilePointer, FlushFileBuffers, LockFile, UnlockFile, SetEndOfFile, MoveFileW, DeleteFileW, FindClose, FindFirstFileW, GetVolumeInformationW, GetFullPathNameW, GetStringTypeExW, GetThreadLocale, GetShortPathNameW, GetFileAttributesW, GetFileSize, GetFileTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileTime, SetFileAttributesW, FileTimeToSystemTime, FileTimeToLocalFileTime, RtlUnwind, RaiseException, GetCommandLineA, HeapAlloc, HeapFree, CreateThread, ExitThread, ExitProcess, TerminateProcess, HeapSize, HeapReAlloc, GetTimeZoneInformation, GetSystemTime, GetLocalTime, SetUnhandledExceptionFilter, FatalAppExitA, GetProcessVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, LCMapStringA, LCMapStringW, VirtualAlloc, IsBadWritePtr, UnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, IsValidLocale, IsValidCodePage, GetLocaleInfoA, EnumSystemLocalesA, GetUserDefaultLCID, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetConsoleCtrlHandler, SetStdHandle, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, LoadLibraryA, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, DeleteCriticalSection, CloseHandle, DeviceIoControl, FindResourceW, LoadResource, LockResource, GlobalAddAtomW, GlobalFindAtomW, GetModuleHandleW, MulDiv, GetModuleHandleA, SetLastError, GetVersion, lstrcpynW, lstrcpyW, lstrcatW, SetErrorMode, TlsGetValue, LocalReAlloc, SetEvent, TlsSetValue, GlobalReAlloc, TlsFree, GlobalHandle, GlobalUnlock, GlobalFree, TlsAlloc, LocalAlloc, GlobalLock, lstrcmpW, GlobalAlloc, GlobalDeleteAtom, lstrcmpA, lstrcmpiA, GetCurrentThread, SuspendThread, GetCurrentThreadId, SetThreadPriority, FormatMessageW, LocalFree, CreateEventW, CreateMutexW, ReleaseSemaphore, CreateSemaphoreW, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, lstrlenW, GetSystemDirectoryW, LoadLibraryW, GetProcAddress, FreeLibrary, GetVersionExW, WaitForSingleObject, GetCurrentProcess, DuplicateHandle, ResumeThread, CreateFileW, GetModuleFileNameW, LeaveCriticalSection, EnterCriticalSection, WriteFile, ReadFile, GetOverlappedResult, CancelIo, WaitForMultipleObjects, ReleaseMutex, GetLastError, Sleep, ResetEvent<BR>> USER32.dll: RegisterClassW, GetClassInfoW, wsprintfW, WinHelpW, GetCapture, IsChild, GetTopWindow, SetScrollPos, GetScrollPos, SetScrollRange, GetScrollRange, ShowScrollBar, SetScrollInfo, GetScrollInfo, ScrollWindow, EndDeferWindowPos, CopyRect, BeginDeferWindowPos, GetClientRect, DeferWindowPos, EqualRect, AdjustWindowRectEx, SetFocus, IsWindow, SetActiveWindow, GetSysColor, MapWindowPoints, SendDlgItemMessageA, SendDlgItemMessageW, UpdateWindow, LoadIconW, CheckDlgButton, CheckRadioButton, GetDlgItemInt, GetDlgItemTextW, SetDlgItemInt, SetDlgItemTextW, IsDlgButtonChecked, ScrollWindowEx, IsDialogMessageW, SetWindowTextW, MoveWindow, ShowWindow, LoadCursorW, GetSysColorBrush, GetClassNameW, PtInRect, GetDesktopWindow, InsertMenuW, DeleteMenu, GetMenuStringW, DestroyMenu, CharUpperW, GetMenu, GetMenuItemCount, GetSubMenu, GetMenuItemID, TrackPopupMenu, SetWindowPlacement, GetDlgItem, GetWindowTextLengthW, GetWindowTextW, GetDlgCtrlID, DefWindowProcW, DestroyWindow, CreateWindowExW, SetPropW, GetPropW, CallWindowProcW, RemovePropW, GetMessageTime, GetMessagePos, GetForegroundWindow, SetForegroundWindow, GetWindow, SetWindowLongW, SetWindowPos, RegisterWindowMessageW, OffsetRect, IntersectRect, SystemParametersInfoW, IsIconic, GetWindowPlacement, GetWindowRect, GetSystemMetrics, GrayStringW, DrawTextW, TabbedTextOutW, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, ScreenToClient, LoadStringW, UnregisterClassW, UnhookWindowsHookEx, GetMenuCheckMarkDimensions, LoadBitmapW, GetMenuState, SetMenuItemBitmaps, CheckMenuItem, EnableMenuItem, GetFocus, GetParent, GetLastActivePopup, IsWindowEnabled, GetWindowLongW, MessageBoxW, EnableWindow, SetCursor, ShowOwnedPopups, PostMessageW, PostQuitMessage, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, SendMessageW, GetKeyState, CallNextHookEx, ValidateRect, IsWindowVisible, PeekMessageW, GetCursorPos, SetWindowsHookExW, MsgWaitForMultipleObjects, ModifyMenuW, GetNextDlgTabItem<BR>> GDI32.dll: CreateBitmap, SelectObject, GetStockObject, SelectPalette, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, SetTextColor, SetMapMode, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, GetClipBox, SelectClipRgn, ExcludeClipRect, IntersectClipRect, OffsetClipRgn, MoveToEx, LineTo, SetTextAlign, SetTextJustification, SetTextCharacterExtra, SetMapperFlags, GetCurrentPositionEx, ArcTo, SetArcDirection, PolyDraw, PolylineTo, SetColorAdjustment, PolyBezierTo, DeleteObject, GetClipRgn, CreateRectRgn, SelectClipPath, ExtSelectClipRgn, PlayMetaFileRecord, GetObjectType, SaveDC, EnumMetaFile, PlayMetaFile, GetDeviceCaps, GetViewportExtEx, GetWindowExtEx, CreatePen, ExtCreatePen, CreateSolidBrush, CreateHatchBrush, CreatePatternBrush, CreateDIBPatternBrushPt, PtVisible, RectVisible, TextOutW, ExtTextOutW, Escape, GetDCOrgEx, GetObjectW, StartDocW, DeleteDC, RestoreDC<BR>> comdlg32.dll: GetFileTitleW<BR>> WINSPOOL.DRV: ClosePrinter, DocumentPropertiesW, OpenPrinterW<BR>> ADVAPI32.dll: RegQueryValueExW, RegOpenKeyW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegSetValueExW, RegDeleteValueW, RegDeleteKeyW<BR>> SHELL32.dll: SHGetFileInfoW, DragAcceptFiles<BR>> COMCTL32.dll: -<BR><BR>( 1 exports ) <BR>CreateImdMain<BR>

          Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 237636 bytes
          MD5...: 83ab8f284222998a31875d81b633aa47
          SHA1..: 24e526aedf7e1abc1ae2c04ec38c7895b18b6d44
          SHA256: 843a1ce24051c67851e245e25027c12b3f552136dae9afe197bb86b6050cdc86
          SHA512: 27ad3b91231e8aa761b1b241105ac8d34bf01e04cbb0dbb367b07ca0cfee9915<BR>c637ca7f2f4ba9d44e197e228e68d41620eda41d4942f14b2a3530b268d6ef2d
          ssdeep: 3072:yQ55Pa+wFMaC81BlwJLH5QP2qTFY1ub027yVrddeqRIU1O5c3NFxhSAIIR:<BR>yQ58l1BCJtQP2GGVr9FdP<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Windows OCX File (63.5%)<BR>Win32 Executable MS Visual C++ (generic) (19.3%)<BR>Windows Screen Saver (6.7%)<BR>Win32 Executable Generic (4.3%)<BR>Win32 Dynamic Link Library (generic) (3.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x10007848<BR>timedatestamp.....: 0x44efb89e (Sat Aug 26 02:57:34 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x23e0e 0x24000 6.60 e6f825f551257ca4a65d0f7babc63110<BR>.rdata 0x25000 0x803a 0x9000 4.58 6e7b4f7855b9e099a6f1102cc6f60dfd<BR>.data 0x2e000 0x8732 0x5000 2.64 c55815c11c8573e977be765c7bec737e<BR>.rsrc 0x37000 0x29f8 0x3000 3.59 8ec8e8f60d8cc2351dcac63d91b7ae9d<BR>.reloc 0x3a000 0x309e 0x4000 5.56 629ff7753bff5017922ef948029ebbaf<BR><BR>( 9 imports ) <BR>> VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW<BR>> KERNEL32.dll: lstrcmpiW, GlobalFlags, GetPrivateProfileIntW, GetPrivateProfileStringW, WritePrivateProfileStringW, GetCurrentDirectoryW, SetFilePointer, FlushFileBuffers, LockFile, UnlockFile, SetEndOfFile, MoveFileW, DeleteFileW, FindClose, FindFirstFileW, GetVolumeInformationW, GetFullPathNameW, GetStringTypeExW, GetThreadLocale, GetShortPathNameW, GetFileAttributesW, GetFileSize, GetFileTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileTime, SetFileAttributesW, FileTimeToSystemTime, FileTimeToLocalFileTime, RtlUnwind, RaiseException, GetCommandLineA, HeapAlloc, HeapFree, CreateThread, ExitThread, ExitProcess, TerminateProcess, HeapSize, HeapReAlloc, GetTimeZoneInformation, GetSystemTime, GetLocalTime, SetUnhandledExceptionFilter, FatalAppExitA, GetProcessVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, LCMapStringA, LCMapStringW, VirtualAlloc, IsBadWritePtr, UnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, IsValidLocale, IsValidCodePage, GetLocaleInfoA, EnumSystemLocalesA, GetUserDefaultLCID, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetConsoleCtrlHandler, SetStdHandle, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, LoadLibraryA, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, DeleteCriticalSection, CloseHandle, DeviceIoControl, FindResourceW, LoadResource, LockResource, GlobalAddAtomW, GlobalFindAtomW, GetModuleHandleW, MulDiv, GetModuleHandleA, SetLastError, GetVersion, lstrcpynW, lstrcpyW, lstrcatW, SetErrorMode, TlsGetValue, LocalReAlloc, SetEvent, TlsSetValue, GlobalReAlloc, TlsFree, GlobalHandle, GlobalUnlock, GlobalFree, TlsAlloc, LocalAlloc, GlobalLock, lstrcmpW, GlobalAlloc, GlobalDeleteAtom, lstrcmpA, lstrcmpiA, GetCurrentThread, SuspendThread, GetCurrentThreadId, SetThreadPriority, FormatMessageW, LocalFree, CreateEventW, CreateMutexW, ReleaseSemaphore, CreateSemaphoreW, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, lstrlenW, GetSystemDirectoryW, LoadLibraryW, GetProcAddress, FreeLibrary, GetVersionExW, WaitForSingleObject, GetCurrentProcess, DuplicateHandle, ResumeThread, CreateFileW, GetModuleFileNameW, LeaveCriticalSection, EnterCriticalSection, WriteFile, ReadFile, GetOverlappedResult, CancelIo, WaitForMultipleObjects, ReleaseMutex, GetLastError, Sleep, ResetEvent<BR>> USER32.dll: RegisterClassW, GetClassInfoW, wsprintfW, WinHelpW, GetCapture, IsChild, GetTopWindow, SetScrollPos, GetScrollPos, SetScrollRange, GetScrollRange, ShowScrollBar, SetScrollInfo, GetScrollInfo, ScrollWindow, EndDeferWindowPos, CopyRect, BeginDeferWindowPos, GetClientRect, DeferWindowPos, EqualRect, AdjustWindowRectEx, SetFocus, IsWindow, SetActiveWindow, GetSysColor, MapWindowPoints, SendDlgItemMessageA, SendDlgItemMessageW, UpdateWindow, LoadIconW, CheckDlgButton, CheckRadioButton, GetDlgItemInt, GetDlgItemTextW, SetDlgItemInt, SetDlgItemTextW, IsDlgButtonChecked, ScrollWindowEx, IsDialogMessageW, SetWindowTextW, MoveWindow, ShowWindow, LoadCursorW, GetSysColorBrush, GetClassNameW, PtInRect, GetDesktopWindow, InsertMenuW, DeleteMenu, GetMenuStringW, DestroyMenu, CharUpperW, GetMenu, GetMenuItemCount, GetSubMenu, GetMenuItemID, TrackPopupMenu, SetWindowPlacement, GetDlgItem, GetWindowTextLengthW, GetWindowTextW, GetDlgCtrlID, DefWindowProcW, DestroyWindow, CreateWindowExW, SetPropW, GetPropW, CallWindowProcW, RemovePropW, GetMessageTime, GetMessagePos, GetForegroundWindow, SetForegroundWindow, GetWindow, SetWindowLongW, SetWindowPos, RegisterWindowMessageW, OffsetRect, IntersectRect, SystemParametersInfoW, IsIconic, GetWindowPlacement, GetWindowRect, GetSystemMetrics, GrayStringW, DrawTextW, TabbedTextOutW, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, ScreenToClient, LoadStringW, UnregisterClassW, UnhookWindowsHookEx, GetMenuCheckMarkDimensions, LoadBitmapW, GetMenuState, SetMenuItemBitmaps, CheckMenuItem, EnableMenuItem, GetFocus, GetParent, GetLastActivePopup, IsWindowEnabled, GetWindowLongW, MessageBoxW, EnableWindow, SetCursor, ShowOwnedPopups, PostMessageW, PostQuitMessage, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, SendMessageW, GetKeyState, CallNextHookEx, ValidateRect, IsWindowVisible, PeekMessageW, GetCursorPos, SetWindowsHookExW, MsgWaitForMultipleObjects, ModifyMenuW, GetNextDlgTabItem<BR>> GDI32.dll: CreateBitmap, SelectObject, GetStockObject, SelectPalette, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, SetTextColor, SetMapMode, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, GetClipBox, SelectClipRgn, ExcludeClipRect, IntersectClipRect, OffsetClipRgn, MoveToEx, LineTo, SetTextAlign, SetTextJustification, SetTextCharacterExtra, SetMapperFlags, GetCurrentPositionEx, ArcTo, SetArcDirection, PolyDraw, PolylineTo, SetColorAdjustment, PolyBezierTo, DeleteObject, GetClipRgn, CreateRectRgn, SelectClipPath, ExtSelectClipRgn, PlayMetaFileRecord, GetObjectType, SaveDC, EnumMetaFile, PlayMetaFile, GetDeviceCaps, GetViewportExtEx, GetWindowExtEx, CreatePen, ExtCreatePen, CreateSolidBrush, CreateHatchBrush, CreatePatternBrush, CreateDIBPatternBrushPt, PtVisible, RectVisible, TextOutW, ExtTextOutW, Escape, GetDCOrgEx, GetObjectW, StartDocW, DeleteDC, RestoreDC<BR>> comdlg32.dll: GetFileTitleW<BR>> WINSPOOL.DRV: ClosePrinter, DocumentPropertiesW, OpenPrinterW<BR>> ADVAPI32.dll: RegQueryValueExW, RegOpenKeyW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegSetValueExW, RegDeleteValueW, RegDeleteKeyW<BR>> SHELL32.dll: SHGetFileInfoW, DragAcceptFiles<BR>> COMCTL32.dll: -<BR><BR>( 1 exports ) <BR>CreateImdMain<BR>
        2. bigjal Auteur
          Fichier wsimd.dll reçu le 2009.02.19 00:56:13 (CET)Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 237636 bytes
          MD5...: 83ab8f284222998a31875d81b633aa47
          SHA1..: 24e526aedf7e1abc1ae2c04ec38c7895b18b6d44
          SHA256: 843a1ce24051c67851e245e25027c12b3f552136dae9afe197bb86b6050cdc86
          SHA512: 27ad3b91231e8aa761b1b241105ac8d34bf01e04cbb0dbb367b07ca0cfee9915<BR>c637ca7f2f4ba9d44e197e228e68d41620eda41d4942f14b2a3530b268d6ef2d
          ssdeep: 3072:yQ55Pa+wFMaC81BlwJLH5QP2qTFY1ub027yVrddeqRIU1O5c3NFxhSAIIR:<BR>yQ58l1BCJtQP2GGVr9FdP<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Windows OCX File (63.5%)<BR>Win32 Executable MS Visual C++ (generic) (19.3%)<BR>Windows Screen Saver (6.7%)<BR>Win32 Executable Generic (4.3%)<BR>Win32 Dynamic Link Library (generic) (3.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x10007848<BR>timedatestamp.....: 0x44efb89e (Sat Aug 26 02:57:34 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x23e0e 0x24000 6.60 e6f825f551257ca4a65d0f7babc63110<BR>.rdata 0x25000 0x803a 0x9000 4.58 6e7b4f7855b9e099a6f1102cc6f60dfd<BR>.data 0x2e000 0x8732 0x5000 2.64 c55815c11c8573e977be765c7bec737e<BR>.rsrc 0x37000 0x29f8 0x3000 3.59 8ec8e8f60d8cc2351dcac63d91b7ae9d<BR>.reloc 0x3a000 0x309e 0x4000 5.56 629ff7753bff5017922ef948029ebbaf<BR><BR>( 9 imports ) <BR>> VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW<BR>> KERNEL32.dll: lstrcmpiW, GlobalFlags, GetPrivateProfileIntW, GetPrivateProfileStringW, WritePrivateProfileStringW, GetCurrentDirectoryW, SetFilePointer, FlushFileBuffers, LockFile, UnlockFile, SetEndOfFile, MoveFileW, DeleteFileW, FindClose, FindFirstFileW, GetVolumeInformationW, GetFullPathNameW, GetStringTypeExW, GetThreadLocale, GetShortPathNameW, GetFileAttributesW, GetFileSize, GetFileTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileTime, SetFileAttributesW, FileTimeToSystemTime, FileTimeToLocalFileTime, RtlUnwind, RaiseException, GetCommandLineA, HeapAlloc, HeapFree, CreateThread, ExitThread, ExitProcess, TerminateProcess, HeapSize, HeapReAlloc, GetTimeZoneInformation, GetSystemTime, GetLocalTime, SetUnhandledExceptionFilter, FatalAppExitA, GetProcessVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, LCMapStringA, LCMapStringW, VirtualAlloc, IsBadWritePtr, UnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, IsValidLocale, IsValidCodePage, GetLocaleInfoA, EnumSystemLocalesA, GetUserDefaultLCID, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetConsoleCtrlHandler, SetStdHandle, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, LoadLibraryA, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, DeleteCriticalSection, CloseHandle, DeviceIoControl, FindResourceW, LoadResource, LockResource, GlobalAddAtomW, GlobalFindAtomW, GetModuleHandleW, MulDiv, GetModuleHandleA, SetLastError, GetVersion, lstrcpynW, lstrcpyW, lstrcatW, SetErrorMode, TlsGetValue, LocalReAlloc, SetEvent, TlsSetValue, GlobalReAlloc, TlsFree, GlobalHandle, GlobalUnlock, GlobalFree, TlsAlloc, LocalAlloc, GlobalLock, lstrcmpW, GlobalAlloc, GlobalDeleteAtom, lstrcmpA, lstrcmpiA, GetCurrentThread, SuspendThread, GetCurrentThreadId, SetThreadPriority, FormatMessageW, LocalFree, CreateEventW, CreateMutexW, ReleaseSemaphore, CreateSemaphoreW, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, lstrlenW, GetSystemDirectoryW, LoadLibraryW, GetProcAddress, FreeLibrary, GetVersionExW, WaitForSingleObject, GetCurrentProcess, DuplicateHandle, ResumeThread, CreateFileW, GetModuleFileNameW, LeaveCriticalSection, EnterCriticalSection, WriteFile, ReadFile, GetOverlappedResult, CancelIo, WaitForMultipleObjects, ReleaseMutex, GetLastError, Sleep, ResetEvent<BR>> USER32.dll: RegisterClassW, GetClassInfoW, wsprintfW, WinHelpW, GetCapture, IsChild, GetTopWindow, SetScrollPos, GetScrollPos, SetScrollRange, GetScrollRange, ShowScrollBar, SetScrollInfo, GetScrollInfo, ScrollWindow, EndDeferWindowPos, CopyRect, BeginDeferWindowPos, GetClientRect, DeferWindowPos, EqualRect, AdjustWindowRectEx, SetFocus, IsWindow, SetActiveWindow, GetSysColor, MapWindowPoints, SendDlgItemMessageA, SendDlgItemMessageW, UpdateWindow, LoadIconW, CheckDlgButton, CheckRadioButton, GetDlgItemInt, GetDlgItemTextW, SetDlgItemInt, SetDlgItemTextW, IsDlgButtonChecked, ScrollWindowEx, IsDialogMessageW, SetWindowTextW, MoveWindow, ShowWindow, LoadCursorW, GetSysColorBrush, GetClassNameW, PtInRect, GetDesktopWindow, InsertMenuW, DeleteMenu, GetMenuStringW, DestroyMenu, CharUpperW, GetMenu, GetMenuItemCount, GetSubMenu, GetMenuItemID, TrackPopupMenu, SetWindowPlacement, GetDlgItem, GetWindowTextLengthW, GetWindowTextW, GetDlgCtrlID, DefWindowProcW, DestroyWindow, CreateWindowExW, SetPropW, GetPropW, CallWindowProcW, RemovePropW, GetMessageTime, GetMessagePos, GetForegroundWindow, SetForegroundWindow, GetWindow, SetWindowLongW, SetWindowPos, RegisterWindowMessageW, OffsetRect, IntersectRect, SystemParametersInfoW, IsIconic, GetWindowPlacement, GetWindowRect, GetSystemMetrics, GrayStringW, DrawTextW, TabbedTextOutW, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, ScreenToClient, LoadStringW, UnregisterClassW, UnhookWindowsHookEx, GetMenuCheckMarkDimensions, LoadBitmapW, GetMenuState, SetMenuItemBitmaps, CheckMenuItem, EnableMenuItem, GetFocus, GetParent, GetLastActivePopup, IsWindowEnabled, GetWindowLongW, MessageBoxW, EnableWindow, SetCursor, ShowOwnedPopups, PostMessageW, PostQuitMessage, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, SendMessageW, GetKeyState, CallNextHookEx, ValidateRect, IsWindowVisible, PeekMessageW, GetCursorPos, SetWindowsHookExW, MsgWaitForMultipleObjects, ModifyMenuW, GetNextDlgTabItem<BR>> GDI32.dll: CreateBitmap, SelectObject, GetStockObject, SelectPalette, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, SetTextColor, SetMapMode, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, GetClipBox, SelectClipRgn, ExcludeClipRect, IntersectClipRect, OffsetClipRgn, MoveToEx, LineTo, SetTextAlign, SetTextJustification, SetTextCharacterExtra, SetMapperFlags, GetCurrentPositionEx, ArcTo, SetArcDirection, PolyDraw, PolylineTo, SetColorAdjustment, PolyBezierTo, DeleteObject, GetClipRgn, CreateRectRgn, SelectClipPath, ExtSelectClipRgn, PlayMetaFileRecord, GetObjectType, SaveDC, EnumMetaFile, PlayMetaFile, GetDeviceCaps, GetViewportExtEx, GetWindowExtEx, CreatePen, ExtCreatePen, CreateSolidBrush, CreateHatchBrush, CreatePatternBrush, CreateDIBPatternBrushPt, PtVisible, RectVisible, TextOutW, ExtTextOutW, Escape, GetDCOrgEx, GetObjectW, StartDocW, DeleteDC, RestoreDC<BR>> comdlg32.dll: GetFileTitleW<BR>> WINSPOOL.DRV: ClosePrinter, DocumentPropertiesW, OpenPrinterW<BR>> ADVAPI32.dll: RegQueryValueExW, RegOpenKeyW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegSetValueExW, RegDeleteValueW, RegDeleteKeyW<BR>> SHELL32.dll: SHGetFileInfoW, DragAcceptFiles<BR>> COMCTL32.dll: -<BR><BR>( 1 exports ) <BR>CreateImdMain<BR>

          Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 237636 bytes
          MD5...: 83ab8f284222998a31875d81b633aa47
          SHA1..: 24e526aedf7e1abc1ae2c04ec38c7895b18b6d44
          SHA256: 843a1ce24051c67851e245e25027c12b3f552136dae9afe197bb86b6050cdc86
          SHA512: 27ad3b91231e8aa761b1b241105ac8d34bf01e04cbb0dbb367b07ca0cfee9915<BR>c637ca7f2f4ba9d44e197e228e68d41620eda41d4942f14b2a3530b268d6ef2d
          ssdeep: 3072:yQ55Pa+wFMaC81BlwJLH5QP2qTFY1ub027yVrddeqRIU1O5c3NFxhSAIIR:<BR>yQ58l1BCJtQP2GGVr9FdP<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Windows OCX File (63.5%)<BR>Win32 Executable MS Visual C++ (generic) (19.3%)<BR>Windows Screen Saver (6.7%)<BR>Win32 Executable Generic (4.3%)<BR>Win32 Dynamic Link Library (generic) (3.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x10007848<BR>timedatestamp.....: 0x44efb89e (Sat Aug 26 02:57:34 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x23e0e 0x24000 6.60 e6f825f551257ca4a65d0f7babc63110<BR>.rdata 0x25000 0x803a 0x9000 4.58 6e7b4f7855b9e099a6f1102cc6f60dfd<BR>.data 0x2e000 0x8732 0x5000 2.64 c55815c11c8573e977be765c7bec737e<BR>.rsrc 0x37000 0x29f8 0x3000 3.59 8ec8e8f60d8cc2351dcac63d91b7ae9d<BR>.reloc 0x3a000 0x309e 0x4000 5.56 629ff7753bff5017922ef948029ebbaf<BR><BR>( 9 imports ) <BR>> VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW<BR>> KERNEL32.dll: lstrcmpiW, GlobalFlags, GetPrivateProfileIntW, GetPrivateProfileStringW, WritePrivateProfileStringW, GetCurrentDirectoryW, SetFilePointer, FlushFileBuffers, LockFile, UnlockFile, SetEndOfFile, MoveFileW, DeleteFileW, FindClose, FindFirstFileW, GetVolumeInformationW, GetFullPathNameW, GetStringTypeExW, GetThreadLocale, GetShortPathNameW, GetFileAttributesW, GetFileSize, GetFileTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileTime, SetFileAttributesW, FileTimeToSystemTime, FileTimeToLocalFileTime, RtlUnwind, RaiseException, GetCommandLineA, HeapAlloc, HeapFree, CreateThread, ExitThread, ExitProcess, TerminateProcess, HeapSize, HeapReAlloc, GetTimeZoneInformation, GetSystemTime, GetLocalTime, SetUnhandledExceptionFilter, FatalAppExitA, GetProcessVersion, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, LCMapStringA, LCMapStringW, VirtualAlloc, IsBadWritePtr, UnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, IsValidLocale, IsValidCodePage, GetLocaleInfoA, EnumSystemLocalesA, GetUserDefaultLCID, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetConsoleCtrlHandler, SetStdHandle, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, LoadLibraryA, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, DeleteCriticalSection, CloseHandle, DeviceIoControl, FindResourceW, LoadResource, LockResource, GlobalAddAtomW, GlobalFindAtomW, GetModuleHandleW, MulDiv, GetModuleHandleA, SetLastError, GetVersion, lstrcpynW, lstrcpyW, lstrcatW, SetErrorMode, TlsGetValue, LocalReAlloc, SetEvent, TlsSetValue, GlobalReAlloc, TlsFree, GlobalHandle, GlobalUnlock, GlobalFree, TlsAlloc, LocalAlloc, GlobalLock, lstrcmpW, GlobalAlloc, GlobalDeleteAtom, lstrcmpA, lstrcmpiA, GetCurrentThread, SuspendThread, GetCurrentThreadId, SetThreadPriority, FormatMessageW, LocalFree, CreateEventW, CreateMutexW, ReleaseSemaphore, CreateSemaphoreW, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, lstrlenW, GetSystemDirectoryW, LoadLibraryW, GetProcAddress, FreeLibrary, GetVersionExW, WaitForSingleObject, GetCurrentProcess, DuplicateHandle, ResumeThread, CreateFileW, GetModuleFileNameW, LeaveCriticalSection, EnterCriticalSection, WriteFile, ReadFile, GetOverlappedResult, CancelIo, WaitForMultipleObjects, ReleaseMutex, GetLastError, Sleep, ResetEvent<BR>> USER32.dll: RegisterClassW, GetClassInfoW, wsprintfW, WinHelpW, GetCapture, IsChild, GetTopWindow, SetScrollPos, GetScrollPos, SetScrollRange, GetScrollRange, ShowScrollBar, SetScrollInfo, GetScrollInfo, ScrollWindow, EndDeferWindowPos, CopyRect, BeginDeferWindowPos, GetClientRect, DeferWindowPos, EqualRect, AdjustWindowRectEx, SetFocus, IsWindow, SetActiveWindow, GetSysColor, MapWindowPoints, SendDlgItemMessageA, SendDlgItemMessageW, UpdateWindow, LoadIconW, CheckDlgButton, CheckRadioButton, GetDlgItemInt, GetDlgItemTextW, SetDlgItemInt, SetDlgItemTextW, IsDlgButtonChecked, ScrollWindowEx, IsDialogMessageW, SetWindowTextW, MoveWindow, ShowWindow, LoadCursorW, GetSysColorBrush, GetClassNameW, PtInRect, GetDesktopWindow, InsertMenuW, DeleteMenu, GetMenuStringW, DestroyMenu, CharUpperW, GetMenu, GetMenuItemCount, GetSubMenu, GetMenuItemID, TrackPopupMenu, SetWindowPlacement, GetDlgItem, GetWindowTextLengthW, GetWindowTextW, GetDlgCtrlID, DefWindowProcW, DestroyWindow, CreateWindowExW, SetPropW, GetPropW, CallWindowProcW, RemovePropW, GetMessageTime, GetMessagePos, GetForegroundWindow, SetForegroundWindow, GetWindow, SetWindowLongW, SetWindowPos, RegisterWindowMessageW, OffsetRect, IntersectRect, SystemParametersInfoW, IsIconic, GetWindowPlacement, GetWindowRect, GetSystemMetrics, GrayStringW, DrawTextW, TabbedTextOutW, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, ScreenToClient, LoadStringW, UnregisterClassW, UnhookWindowsHookEx, GetMenuCheckMarkDimensions, LoadBitmapW, GetMenuState, SetMenuItemBitmaps, CheckMenuItem, EnableMenuItem, GetFocus, GetParent, GetLastActivePopup, IsWindowEnabled, GetWindowLongW, MessageBoxW, EnableWindow, SetCursor, ShowOwnedPopups, PostMessageW, PostQuitMessage, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, SendMessageW, GetKeyState, CallNextHookEx, ValidateRect, IsWindowVisible, PeekMessageW, GetCursorPos, SetWindowsHookExW, MsgWaitForMultipleObjects, ModifyMenuW, GetNextDlgTabItem<BR>> GDI32.dll: CreateBitmap, SelectObject, GetStockObject, SelectPalette, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, SetTextColor, SetMapMode, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, GetClipBox, SelectClipRgn, ExcludeClipRect, IntersectClipRect, OffsetClipRgn, MoveToEx, LineTo, SetTextAlign, SetTextJustification, SetTextCharacterExtra, SetMapperFlags, GetCurrentPositionEx, ArcTo, SetArcDirection, PolyDraw, PolylineTo, SetColorAdjustment, PolyBezierTo, DeleteObject, GetClipRgn, CreateRectRgn, SelectClipPath, ExtSelectClipRgn, PlayMetaFileRecord, GetObjectType, SaveDC, EnumMetaFile, PlayMetaFile, GetDeviceCaps, GetViewportExtEx, GetWindowExtEx, CreatePen, ExtCreatePen, CreateSolidBrush, CreateHatchBrush, CreatePatternBrush, CreateDIBPatternBrushPt, PtVisible, RectVisible, TextOutW, ExtTextOutW, Escape, GetDCOrgEx, GetObjectW, StartDocW, DeleteDC, RestoreDC<BR>> comdlg32.dll: GetFileTitleW<BR>> WINSPOOL.DRV: ClosePrinter, DocumentPropertiesW, OpenPrinterW<BR>> ADVAPI32.dll: RegQueryValueExW, RegOpenKeyW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegSetValueExW, RegDeleteValueW, RegDeleteKeyW<BR>> SHELL32.dll: SHGetFileInfoW, DragAcceptFiles<BR>> COMCTL32.dll: -<BR><BR>( 1 exports ) <BR>CreateImdMain<BR>
        3. bigjal Auteur
          Fichier wsfwDS.dll reçu le 2009.02.19 01:02:05 (CET)Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 245830 bytes
          MD5...: c4f8eeeeb80c56abd9a81984f525d696
          SHA1..: f17dbd1844edab12e0c5c5b72a4312c2a079c871
          SHA256: 229132ca74b5721f2b1b6baccbc8ea635d0d25ac0a627d486c88e2ad8c271996
          SHA512: 212618ef171e943613ee5af39e66901582005834ee05da8d7a2e24c4aef6a1b4<BR>d6804cae7cb78aa21f7f3080339af18351ceb8fd2189b9fb3af637b36e174f42
          ssdeep: 3072:lmMox4eQPPgd7iPEPAYS/p+N9h+a2JWm+3FKLeEqI35O97cHB+XLfI26En:<BR>lCqeUgxqE7S/JJ63Fowy+Xb<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Windows OCX File (63.5%)<BR>Win32 Executable MS Visual C++ (generic) (19.3%)<BR>Windows Screen Saver (6.7%)<BR>Win32 Executable Generic (4.3%)<BR>Win32 Dynamic Link Library (generic) (3.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x100086d6<BR>timedatestamp.....: 0x44efb899 (Sat Aug 26 02:57:29 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x24676 0x25000 6.57 711bf991c72f10a25187cbc616404c29<BR>.rdata 0x26000 0x872c 0x9000 4.72 e4dd94d95e878c508aac9143ee12cc16<BR>.data 0x2f000 0x8a90 0x6000 2.46 f6b73c9f6457ba8ce874392d9228c7dd<BR>.rsrc 0x38000 0x2a10 0x3000 3.60 43f88ec253a8202600afc515577df15d<BR>.reloc 0x3b000 0x3272 0x4000 5.68 9e91bf9490e9cc1756558271bea373fa<BR><BR>( 11 imports ) <BR>> wsimd.dll: CreateImdMain<BR>> VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW<BR>> DSA.dll: DsaCreateShim<BR>> KERNEL32.dll: DuplicateHandle, GetCurrentProcess, CreateFileW, ReadFile, WriteFile, SetFilePointer, FlushFileBuffers, LockFile, UnlockFile, SetEndOfFile, MoveFileW, DeleteFileW, FindClose, FindFirstFileW, GetVolumeInformationW, GetFullPathNameW, GetStringTypeExW, GetThreadLocale, GetShortPathNameW, GetFileAttributesW, GetFileSize, GetFileTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileTime, SetFileAttributesW, FileTimeToSystemTime, FileTimeToLocalFileTime, RtlUnwind, IsBadReadPtr, GetCommandLineA, HeapAlloc, HeapFree, ExitProcess, TerminateProcess, CreateThread, ExitThread, RaiseException, HeapSize, HeapReAlloc, GetTimeZoneInformation, GetSystemTime, GetProcessVersion, FatalAppExitA, Sleep, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, LCMapStringA, LCMapStringW, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsBadCodePtr, GetCPInfo, IsValidLocale, IsValidCodePage, GetLocaleInfoA, EnumSystemLocalesA, GetUserDefaultLCID, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetConsoleCtrlHandler, SetStdHandle, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, LoadLibraryA, FindResourceW, LoadResource, LockResource, InitializeCriticalSection, DeleteCriticalSection, GlobalAddAtomW, GlobalFindAtomW, GetModuleHandleW, GetCurrentDirectoryW, WritePrivateProfileStringW, GetPrivateProfileStringW, GetPrivateProfileIntW, GlobalFlags, lstrcmpiW, GetLastError, MulDiv, GetModuleHandleA, SetLastError, GetVersion, lstrcpynW, InterlockedIncrement, lstrcpyW, lstrcatW, SetErrorMode, TlsGetValue, LocalReAlloc, TlsSetValue, GlobalReAlloc, TlsFree, GlobalHandle, GlobalUnlock, GlobalFree, TlsAlloc, LocalAlloc, SuspendThread, SetThreadPriority, ResumeThread, GlobalLock, lstrcmpW, GlobalAlloc, GlobalDeleteAtom, lstrcmpA, lstrcmpiA, GetCurrentThread, GetCurrentThreadId, FormatMessageW, LocalFree, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, lstrlenW, WaitForMultipleObjects, CreateEventW, ReleaseMutex, CreateMutexW, ReleaseSemaphore, CreateSemaphoreW, WaitForSingleObject, CloseHandle, LoadLibraryW, GetProcAddress, FreeLibrary, GetVersionExW, GetSystemDirectoryW, GetModuleFileNameW, LeaveCriticalSection, EnterCriticalSection, SetEvent, ResetEvent, GetLocalTime, InterlockedDecrement<BR>> USER32.dll: GetSystemMetrics, GetWindowPlacement, IsIconic, SystemParametersInfoW, IntersectRect, OffsetRect, RegisterWindowMessageW, SetForegroundWindow, GetForegroundWindow, GetMessagePos, GetMessageTime, RemovePropW, CallWindowProcW, GetPropW, SetPropW, CreateWindowExW, DestroyWindow, DefWindowProcW, SetWindowPlacement, TrackPopupMenu, GetMenuItemID, GetSubMenu, GetMenu, RegisterClassW, GetClassInfoW, WinHelpW, GetCapture, IsChild, GetTopWindow, SetScrollPos, GetScrollPos, SetScrollRange, GetScrollRange, ShowScrollBar, SetScrollInfo, GetScrollInfo, ScrollWindow, EndDeferWindowPos, CopyRect, BeginDeferWindowPos, GetClientRect, DeferWindowPos, EqualRect, AdjustWindowRectEx, IsWindow, SetActiveWindow, GetSysColor, MapWindowPoints, SendDlgItemMessageA, UpdateWindow, LoadIconW, LoadCursorW, GetSysColorBrush, CharUpperW, DestroyMenu, SetFocus, ShowWindow, SetWindowPos, MoveWindow, SetWindowLongW, GetWindowTextLengthW, IsDialogMessageW, ScrollWindowEx, IsDlgButtonChecked, SetDlgItemTextW, SetDlgItemInt, SendDlgItemMessageW, GetDlgItemTextW, GetDlgItemInt, GetDlgItem, CheckRadioButton, CheckDlgButton, GetMenuStringW, DeleteMenu, InsertMenuW, GetMenuItemCount, wsprintfW, GetDesktopWindow, GetWindowTextW, SetWindowTextW, GetWindow, GetDlgCtrlID, GetWindowRect, PtInRect, GetClassNameW, LoadStringW, GrayStringW, DrawTextW, TabbedTextOutW, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, ScreenToClient, UnregisterClassW, UnhookWindowsHookEx, GetMenuCheckMarkDimensions, LoadBitmapW, GetMenuState, ModifyMenuW, SetMenuItemBitmaps, EnableMenuItem, GetFocus, GetNextDlgTabItem, GetMessageW, DispatchMessageW, GetActiveWindow, GetKeyState, CallNextHookEx, ValidateRect, IsWindowVisible, PeekMessageW, GetCursorPos, SetWindowsHookExW, GetParent, GetLastActivePopup, IsWindowEnabled, GetWindowLongW, MessageBoxW, EnableWindow, SetCursor, ShowOwnedPopups, SendMessageW, PostMessageW, PostQuitMessage, MsgWaitForMultipleObjects, CheckMenuItem, TranslateMessage<BR>> GDI32.dll: GetStockObject, SelectPalette, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, SetTextColor, SetMapMode, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, GetClipBox, SelectClipRgn, ExcludeClipRect, IntersectClipRect, OffsetClipRgn, MoveToEx, LineTo, SetTextAlign, SetTextJustification, SetTextCharacterExtra, SetMapperFlags, GetCurrentPositionEx, ArcTo, SelectObject, PolyDraw, PolylineTo, SetColorAdjustment, PolyBezierTo, DeleteObject, GetClipRgn, CreateRectRgn, SelectClipPath, ExtSelectClipRgn, PlayMetaFileRecord, GetObjectType, SaveDC, EnumMetaFile, PlayMetaFile, GetDeviceCaps, GetViewportExtEx, GetWindowExtEx, CreatePen, ExtCreatePen, CreateSolidBrush, CreateHatchBrush, CreatePatternBrush, CreateDIBPatternBrushPt, PtVisible, RectVisible, TextOutW, ExtTextOutW, Escape, GetDCOrgEx, GetObjectW, SetArcDirection, CreateBitmap, StartDocW, DeleteDC, RestoreDC<BR>> comdlg32.dll: GetFileTitleW<BR>> WINSPOOL.DRV: ClosePrinter, DocumentPropertiesW, OpenPrinterW<BR>> ADVAPI32.dll: RegCreateKeyExW, RegDeleteKeyW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegOpenKeyW<BR>> SHELL32.dll: SHGetFileInfoW, DragAcceptFiles<BR>> COMCTL32.dll: -<BR><BR>( 1 exports ) <BR>CreateWsfwMain<BR>

          Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 245830 bytes
          MD5...: c4f8eeeeb80c56abd9a81984f525d696
          SHA1..: f17dbd1844edab12e0c5c5b72a4312c2a079c871
          SHA256: 229132ca74b5721f2b1b6baccbc8ea635d0d25ac0a627d486c88e2ad8c271996
          SHA512: 212618ef171e943613ee5af39e66901582005834ee05da8d7a2e24c4aef6a1b4<BR>d6804cae7cb78aa21f7f3080339af18351ceb8fd2189b9fb3af637b36e174f42
          ssdeep: 3072:lmMox4eQPPgd7iPEPAYS/p+N9h+a2JWm+3FKLeEqI35O97cHB+XLfI26En:<BR>lCqeUgxqE7S/JJ63Fowy+Xb<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Windows OCX File (63.5%)<BR>Win32 Executable MS Visual C++ (generic) (19.3%)<BR>Windows Screen Saver (6.7%)<BR>Win32 Executable Generic (4.3%)<BR>Win32 Dynamic Link Library (generic) (3.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x100086d6<BR>timedatestamp.....: 0x44efb899 (Sat Aug 26 02:57:29 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x24676 0x25000 6.57 711bf991c72f10a25187cbc616404c29<BR>.rdata 0x26000 0x872c 0x9000 4.72 e4dd94d95e878c508aac9143ee12cc16<BR>.data 0x2f000 0x8a90 0x6000 2.46 f6b73c9f6457ba8ce874392d9228c7dd<BR>.rsrc 0x38000 0x2a10 0x3000 3.60 43f88ec253a8202600afc515577df15d<BR>.reloc 0x3b000 0x3272 0x4000 5.68 9e91bf9490e9cc1756558271bea373fa<BR><BR>( 11 imports ) <BR>> wsimd.dll: CreateImdMain<BR>> VERSION.dll: GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW<BR>> DSA.dll: DsaCreateShim<BR>> KERNEL32.dll: DuplicateHandle, GetCurrentProcess, CreateFileW, ReadFile, WriteFile, SetFilePointer, FlushFileBuffers, LockFile, UnlockFile, SetEndOfFile, MoveFileW, DeleteFileW, FindClose, FindFirstFileW, GetVolumeInformationW, GetFullPathNameW, GetStringTypeExW, GetThreadLocale, GetShortPathNameW, GetFileAttributesW, GetFileSize, GetFileTime, LocalFileTimeToFileTime, SystemTimeToFileTime, SetFileTime, SetFileAttributesW, FileTimeToSystemTime, FileTimeToLocalFileTime, RtlUnwind, IsBadReadPtr, GetCommandLineA, HeapAlloc, HeapFree, ExitProcess, TerminateProcess, CreateThread, ExitThread, RaiseException, HeapSize, HeapReAlloc, GetTimeZoneInformation, GetSystemTime, GetProcessVersion, FatalAppExitA, Sleep, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, LCMapStringA, LCMapStringW, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsBadCodePtr, GetCPInfo, IsValidLocale, IsValidCodePage, GetLocaleInfoA, EnumSystemLocalesA, GetUserDefaultLCID, GetACP, GetOEMCP, GetStringTypeA, GetStringTypeW, SetConsoleCtrlHandler, SetStdHandle, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, LoadLibraryA, FindResourceW, LoadResource, LockResource, InitializeCriticalSection, DeleteCriticalSection, GlobalAddAtomW, GlobalFindAtomW, GetModuleHandleW, GetCurrentDirectoryW, WritePrivateProfileStringW, GetPrivateProfileStringW, GetPrivateProfileIntW, GlobalFlags, lstrcmpiW, GetLastError, MulDiv, GetModuleHandleA, SetLastError, GetVersion, lstrcpynW, InterlockedIncrement, lstrcpyW, lstrcatW, SetErrorMode, TlsGetValue, LocalReAlloc, TlsSetValue, GlobalReAlloc, TlsFree, GlobalHandle, GlobalUnlock, GlobalFree, TlsAlloc, LocalAlloc, SuspendThread, SetThreadPriority, ResumeThread, GlobalLock, lstrcmpW, GlobalAlloc, GlobalDeleteAtom, lstrcmpA, lstrcmpiA, GetCurrentThread, GetCurrentThreadId, FormatMessageW, LocalFree, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, lstrlenW, WaitForMultipleObjects, CreateEventW, ReleaseMutex, CreateMutexW, ReleaseSemaphore, CreateSemaphoreW, WaitForSingleObject, CloseHandle, LoadLibraryW, GetProcAddress, FreeLibrary, GetVersionExW, GetSystemDirectoryW, GetModuleFileNameW, LeaveCriticalSection, EnterCriticalSection, SetEvent, ResetEvent, GetLocalTime, InterlockedDecrement<BR>> USER32.dll: GetSystemMetrics, GetWindowPlacement, IsIconic, SystemParametersInfoW, IntersectRect, OffsetRect, RegisterWindowMessageW, SetForegroundWindow, GetForegroundWindow, GetMessagePos, GetMessageTime, RemovePropW, CallWindowProcW, GetPropW, SetPropW, CreateWindowExW, DestroyWindow, DefWindowProcW, SetWindowPlacement, TrackPopupMenu, GetMenuItemID, GetSubMenu, GetMenu, RegisterClassW, GetClassInfoW, WinHelpW, GetCapture, IsChild, GetTopWindow, SetScrollPos, GetScrollPos, SetScrollRange, GetScrollRange, ShowScrollBar, SetScrollInfo, GetScrollInfo, ScrollWindow, EndDeferWindowPos, CopyRect, BeginDeferWindowPos, GetClientRect, DeferWindowPos, EqualRect, AdjustWindowRectEx, IsWindow, SetActiveWindow, GetSysColor, MapWindowPoints, SendDlgItemMessageA, UpdateWindow, LoadIconW, LoadCursorW, GetSysColorBrush, CharUpperW, DestroyMenu, SetFocus, ShowWindow, SetWindowPos, MoveWindow, SetWindowLongW, GetWindowTextLengthW, IsDialogMessageW, ScrollWindowEx, IsDlgButtonChecked, SetDlgItemTextW, SetDlgItemInt, SendDlgItemMessageW, GetDlgItemTextW, GetDlgItemInt, GetDlgItem, CheckRadioButton, CheckDlgButton, GetMenuStringW, DeleteMenu, InsertMenuW, GetMenuItemCount, wsprintfW, GetDesktopWindow, GetWindowTextW, SetWindowTextW, GetWindow, GetDlgCtrlID, GetWindowRect, PtInRect, GetClassNameW, LoadStringW, GrayStringW, DrawTextW, TabbedTextOutW, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, ScreenToClient, UnregisterClassW, UnhookWindowsHookEx, GetMenuCheckMarkDimensions, LoadBitmapW, GetMenuState, ModifyMenuW, SetMenuItemBitmaps, EnableMenuItem, GetFocus, GetNextDlgTabItem, GetMessageW, DispatchMessageW, GetActiveWindow, GetKeyState, CallNextHookEx, ValidateRect, IsWindowVisible, PeekMessageW, GetCursorPos, SetWindowsHookExW, GetParent, GetLastActivePopup, IsWindowEnabled, GetWindowLongW, MessageBoxW, EnableWindow, SetCursor, ShowOwnedPopups, SendMessageW, PostMessageW, PostQuitMessage, MsgWaitForMultipleObjects, CheckMenuItem, TranslateMessage<BR>> GDI32.dll: GetStockObject, SelectPalette, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, SetTextColor, SetMapMode, SetViewportOrgEx, OffsetViewportOrgEx, SetViewportExtEx, ScaleViewportExtEx, SetWindowOrgEx, OffsetWindowOrgEx, SetWindowExtEx, ScaleWindowExtEx, GetClipBox, SelectClipRgn, ExcludeClipRect, IntersectClipRect, OffsetClipRgn, MoveToEx, LineTo, SetTextAlign, SetTextJustification, SetTextCharacterExtra, SetMapperFlags, GetCurrentPositionEx, ArcTo, SelectObject, PolyDraw, PolylineTo, SetColorAdjustment, PolyBezierTo, DeleteObject, GetClipRgn, CreateRectRgn, SelectClipPath, ExtSelectClipRgn, PlayMetaFileRecord, GetObjectType, SaveDC, EnumMetaFile, PlayMetaFile, GetDeviceCaps, GetViewportExtEx, GetWindowExtEx, CreatePen, ExtCreatePen, CreateSolidBrush, CreateHatchBrush, CreatePatternBrush, CreateDIBPatternBrushPt, PtVisible, RectVisible, TextOutW, ExtTextOutW, Escape, GetDCOrgEx, GetObjectW, SetArcDirection, CreateBitmap, StartDocW, DeleteDC, RestoreDC<BR>> comdlg32.dll: GetFileTitleW<BR>> WINSPOOL.DRV: ClosePrinter, DocumentPropertiesW, OpenPrinterW<BR>> ADVAPI32.dll: RegCreateKeyExW, RegDeleteKeyW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, RegDeleteValueW, RegOpenKeyW<BR>> SHELL32.dll: SHGetFileInfoW, DragAcceptFiles<BR>> COMCTL32.dll: -<BR><BR>( 1 exports ) <BR>CreateWsfwMain<BR>
        4. bigjal Auteur
          Fichier dsaNac.dll reçu le 2009.02.19 01:04:18 (CET)Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 53248 bytes
          MD5...: 4afb29dc0ed02d830da6849f99cb1325
          SHA1..: 0fa4a11258b202f10afd360ddc097d6d5f9d37fa
          SHA256: 8d35b08bce18fea9d448c6381ea5324c414dff0cd27bd6fdc70fac47c4357be7
          SHA512: 400b65c96d00eade1aa010a0a89efad054f830b07e26959c4495d0590f65a3ce<BR>f0312118705f1befa5b7ea16d64fdaa7c3bec47b8ff051d83bc4fce7f6b0f72f
          ssdeep: 768:w30Sk5bhGMZ4RjTB3lQNgor22Fr0KP2G3itxs:w3WmjTB3lQNgo1FV2Htx<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (65.2%)<BR>Win32 Executable Generic (14.7%)<BR>Win32 Dynamic Link Library (generic) (13.1%)<BR>Generic Win/DOS Executable (3.4%)<BR>DOS Executable Generic (3.4%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x1000191f<BR>timedatestamp.....: 0x44ac40b6 (Wed Jul 05 22:44:06 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x58d2 0x6000 6.34 3990ca26047bd734cf45d1acdf4aab5e<BR>.rdata 0x7000 0xc36 0x1000 4.43 26b80e46b6ffdc607bc9e6ad32351f11<BR>.data 0x8000 0x4424 0x3000 0.74 87453b83f2987241b287a0f0c4229f7e<BR>.rsrc 0xd000 0x3c8 0x1000 1.00 10fae5b3a3f3a5286ad3fa22e225fcaa<BR>.reloc 0xe000 0xd5a 0x1000 3.42 193cdfaffef62281eaef025617df025d<BR><BR>( 2 imports ) <BR>> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -<BR>> KERNEL32.dll: TlsGetValue, CloseHandle, FlushFileBuffers, HeapFree, HeapAlloc, GetCommandLineA, GetVersion, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, ExitProcess, RtlUnwind, TerminateProcess, GetCurrentProcess, GetCurrentThreadId, TlsSetValue, TlsAlloc, TlsFree, SetLastError, GetLastError, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, WriteFile, SetFilePointer, InterlockedDecrement, InterlockedIncrement, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, GetCPInfo, GetACP, GetOEMCP, GetProcAddress, LoadLibraryA, SetStdHandle, LCMapStringA, LCMapStringW<BR><BR>( 1 exports ) <BR>AEIEvent<BR>

          Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 53248 bytes
          MD5...: 4afb29dc0ed02d830da6849f99cb1325
          SHA1..: 0fa4a11258b202f10afd360ddc097d6d5f9d37fa
          SHA256: 8d35b08bce18fea9d448c6381ea5324c414dff0cd27bd6fdc70fac47c4357be7
          SHA512: 400b65c96d00eade1aa010a0a89efad054f830b07e26959c4495d0590f65a3ce<BR>f0312118705f1befa5b7ea16d64fdaa7c3bec47b8ff051d83bc4fce7f6b0f72f
          ssdeep: 768:w30Sk5bhGMZ4RjTB3lQNgor22Fr0KP2G3itxs:w3WmjTB3lQNgo1FV2Htx<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (65.2%)<BR>Win32 Executable Generic (14.7%)<BR>Win32 Dynamic Link Library (generic) (13.1%)<BR>Generic Win/DOS Executable (3.4%)<BR>DOS Executable Generic (3.4%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x1000191f<BR>timedatestamp.....: 0x44ac40b6 (Wed Jul 05 22:44:06 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x58d2 0x6000 6.34 3990ca26047bd734cf45d1acdf4aab5e<BR>.rdata 0x7000 0xc36 0x1000 4.43 26b80e46b6ffdc607bc9e6ad32351f11<BR>.data 0x8000 0x4424 0x3000 0.74 87453b83f2987241b287a0f0c4229f7e<BR>.rsrc 0xd000 0x3c8 0x1000 1.00 10fae5b3a3f3a5286ad3fa22e225fcaa<BR>.reloc 0xe000 0xd5a 0x1000 3.42 193cdfaffef62281eaef025617df025d<BR><BR>( 2 imports ) <BR>> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -<BR>> KERNEL32.dll: TlsGetValue, CloseHandle, FlushFileBuffers, HeapFree, HeapAlloc, GetCommandLineA, GetVersion, GetModuleHandleA, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, ExitProcess, RtlUnwind, TerminateProcess, GetCurrentProcess, GetCurrentThreadId, TlsSetValue, TlsAlloc, TlsFree, SetLastError, GetLastError, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, WriteFile, SetFilePointer, InterlockedDecrement, InterlockedIncrement, MultiByteToWideChar, GetStringTypeA, GetStringTypeW, GetCPInfo, GetACP, GetOEMCP, GetProcAddress, LoadLibraryA, SetStdHandle, LCMapStringA, LCMapStringW<BR><BR>( 1 exports ) <BR>AEIEvent<BR>
        5. bigjal Auteur
          Fichier dsa.dll reçu le 2009.02.19 01:06:14 (CET)Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 1253432 bytes
          MD5...: 010af8a41b4a6748000f4db9058922d1
          SHA1..: b35618cc88caf7f805ffeb17ed472787f0793b4e
          SHA256: 6c1fd0c1f246e8c73e8ed68b0362247af139eede6ffdafb5b08a5302c0a56a69
          SHA512: 4ecdf9c19b378a35102afa5a899714779d34a2094282d330ea777bd44dfbf8e2<BR>c0f184705b7f18b771908a23723ddcd6d727ea3794c3022da8778f2668cfe133
          ssdeep: 24576:QE2LTjgEQPQbC8CKJlkhq8O+Bf16p/FTDB9nVJT65:QpQQWBKJlyr6p/FT<BR>DbT65<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (53.1%)<BR>Windows Screen Saver (18.4%)<BR>Win32 Executable Generic (12.0%)<BR>Win32 Dynamic Link Library (generic) (10.6%)<BR>Generic Win/DOS Executable (2.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x100bce41<BR>timedatestamp.....: 0x44ac40c3 (Wed Jul 05 22:44:19 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0xd5ac4 0xd6000 6.61 516241d7429607020018d4475826d464<BR>.rdata 0xd7000 0x245e8 0x25000 5.93 0377bb7a21847a218018854d2a7fd400<BR>.data 0xfc000 0x6c724 0x28000 5.67 3a3943a1b81fda2121b9dd3ab44a2074<BR>.rsrc 0x169000 0x408 0x1000 1.09 36b38781ba0f3e992f2851517eba6764<BR>.reloc 0x16a000 0xc574 0xd000 6.42 1f845abc1128c5b6c5acb23c70bbdd4b<BR><BR>( 9 imports ) <BR>> KERNEL32.dll: WideCharToMultiByte, TlsGetValue, OutputDebugStringA, CreateMutexA, CreateFileA, DeviceIoControl, GetFileSize, FindFirstFileA, FindClose, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, TlsSetValue, SleepEx, WaitForMultipleObjectsEx, GetLastError, TlsAlloc, EnterCriticalSection, LeaveCriticalSection, SetEvent, FileTimeToLocalFileTime, FileTimeToSystemTime, WriteConsoleA, SetEndOfFile, GetNumberOfConsoleInputEvents, PeekConsoleInputA, GetConsoleMode, SetConsoleMode, ReadConsoleInputA, DeleteFileA, GetDriveTypeA, GetFullPathNameA, GetCurrentDirectoryA, CloseHandle, ResetEvent, TlsFree, GetSystemTimeAsFileTime, MultiByteToWideChar, SetLastError, UnmapViewOfFile, FlushViewOfFile, ReleaseMutex, CreateFileMappingA, OpenFileMappingA, CreateEventA, MapViewOfFile, GetLocaleInfoW, ReadFile, SetEnvironmentVariableA, CompareStringW, CompareStringA, CreateThread, SetThreadPriority, Sleep, WaitForSingleObject, GetCurrentThreadId, InterlockedIncrement, InterlockedDecrement, GetModuleFileNameA, GetUserDefaultLangID, GetUserDefaultLCID, EnumSystemLocalesA, GetLocaleInfoA, SetCurrentDirectoryA, IsValidCodePage, IsValidLocale, LocalFree, FormatMessageA, LoadLibraryA, GetProcAddress, FreeLibrary, FindNextFileA, GetVersion, GetFileType, GetStdHandle, GetCurrentProcessId, GlobalMemoryStatus, QueryPerformanceCounter, GetTickCount, GetVersionExA, FlushConsoleInputBuffer, RtlUnwind, HeapAlloc, GetTimeZoneInformation, GetSystemTime, GetLocalTime, HeapFree, GetCommandLineA, HeapReAlloc, SetConsoleCtrlHandler, GetCurrentThread, GetEnvironmentVariableA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, ExitProcess, FatalAppExitA, SetHandleCount, GetStartupInfoA, TerminateProcess, GetCurrentProcess, HeapSize, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, WriteFile, GetStringTypeA, GetStringTypeW, UnhandledExceptionFilter, SetFilePointer, LCMapStringA, LCMapStringW, FlushFileBuffers, SetStdHandle, SetUnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, GetACP, GetOEMCP<BR>> ADVAPI32.dll: RegisterEventSourceA, ReportEventA, DeregisterEventSource, CryptReleaseContext, CryptCreateHash, CryptGetHashParam, CryptSetHashParam, CryptSignHashA, CryptDestroyHash, InitializeSecurityDescriptor, SetSecurityDescriptorDacl<BR>> CRYPT32.dll: CertFreeCertificateChain, CertEnumCertificatesInStore, CertGetCertificateChain, CertDuplicateCertificateContext, CertAddCertificateContextToStore, CertCreateCertificateContext, CertOpenStore, CertCloseStore, CertVerifyTimeValidity, CertGetNameStringA, CertFindCertificateInStore, CertFreeCertificateContext, CertOpenSystemStoreA, CryptAcquireCertificatePrivateKey, CertDeleteCertificateFromStore<BR>> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> WinSCard.dll: SCardConnectA, SCardListReadersA, SCardEstablishContext, SCardReleaseContext, g_rgSCardT1Pci, g_rgSCardT0Pci, SCardTransmit, SCardDisconnect<BR>> VERSION.dll: GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA<BR>> SHLWAPI.dll: PathRemoveFileSpecA<BR>> USER32.dll: GetProcessWindowStation, GetDesktopWindow, MessageBoxIndirectA, GetUserObjectInformationW<BR>> GDI32.dll: DeleteDC, GetBitmapBits, BitBlt, GetObjectA, SelectObject, CreateCompatibleBitmap, GetDeviceCaps, CreateCompatibleDC, CreateDCA, DeleteObject<BR><BR>( 1 exports ) <BR>DsaCreateShim<BR>

          Antivirus Version Dernière mise à jour Résultat
          a-squared 4.0.0.93 2009.02.18 -
          AhnLab-V3 2009.2.19.0 2009.02.18 -
          AntiVir 7.9.0.83 2009.02.18 -
          Authentium 5.1.0.4 2009.02.18 -
          Avast 4.8.1335.0 2009.02.18 -
          AVG 8.0.0.237 2009.02.19 -
          BitDefender 7.2 2009.02.19 -
          CAT-QuickHeal 10.00 2009.02.18 -
          ClamAV 0.94.1 2009.02.18 -
          Comodo 983 2009.02.18 -
          DrWeb 4.44.0.09170 2009.02.19 -
          eSafe 7.0.17.0 2009.02.18 -
          eTrust-Vet 31.6.6364 2009.02.19 -
          F-Prot 4.4.4.56 2009.02.18 -
          F-Secure 8.0.14470.0 2009.02.18 -
          Fortinet 3.117.0.0 2009.02.18 -
          GData 19 2009.02.19 -
          Ikarus T3.1.1.45.0 2009.02.18 -
          K7AntiVirus 7.10.630 2009.02.18 -
          Kaspersky 7.0.0.125 2009.02.19 -
          McAfee 5529 2009.02.17 -
          McAfee+Artemis 5529 2009.02.17 -
          Microsoft 1.4306 2009.02.18 -
          NOD32 3866 2009.02.18 -
          Norman 6.00.06 2009.02.18 -
          nProtect 2009.1.8.0 2009.02.18 -
          Panda 9.4.3.20 2009.02.18 -
          PCTools 4.4.2.0 2009.02.18 -
          Prevx1 V2 2009.02.19 -
          Rising 21.17.22.00 2009.02.18 -
          SecureWeb-Gateway 6.7.6 2009.02.18 -
          Sophos 4.38.0 2009.02.18 -
          Sunbelt 3.2.1855.2 2009.02.17 -
          Symantec 10 2009.02.19 -
          TheHacker 6.3.2.2.259 2009.02.18 -
          TrendMicro 8.700.0.1004 2009.02.18 -
          VBA32 3.12.10.0 2009.02.18 -
          ViRobot 2009.2.18.1613 2009.02.18 -
          VirusBuster 4.5.11.0 2009.02.18 -

          Information additionnelle
          File size: 1253432 bytes
          MD5...: 010af8a41b4a6748000f4db9058922d1
          SHA1..: b35618cc88caf7f805ffeb17ed472787f0793b4e
          SHA256: 6c1fd0c1f246e8c73e8ed68b0362247af139eede6ffdafb5b08a5302c0a56a69
          SHA512: 4ecdf9c19b378a35102afa5a899714779d34a2094282d330ea777bd44dfbf8e2<BR>c0f184705b7f18b771908a23723ddcd6d727ea3794c3022da8778f2668cfe133
          ssdeep: 24576:QE2LTjgEQPQbC8CKJlkhq8O+Bf16p/FTDB9nVJT65:QpQQWBKJlyr6p/FT<BR>DbT65<BR>
          PEiD..: Armadillo v1.xx - v2.xx
          TrID..: File type identification<BR>Win32 Executable MS Visual C++ (generic) (53.1%)<BR>Windows Screen Saver (18.4%)<BR>Win32 Executable Generic (12.0%)<BR>Win32 Dynamic Link Library (generic) (10.6%)<BR>Generic Win/DOS Executable (2.8%)
          PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x100bce41<BR>timedatestamp.....: 0x44ac40c3 (Wed Jul 05 22:44:19 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 5 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0xd5ac4 0xd6000 6.61 516241d7429607020018d4475826d464<BR>.rdata 0xd7000 0x245e8 0x25000 5.93 0377bb7a21847a218018854d2a7fd400<BR>.data 0xfc000 0x6c724 0x28000 5.67 3a3943a1b81fda2121b9dd3ab44a2074<BR>.rsrc 0x169000 0x408 0x1000 1.09 36b38781ba0f3e992f2851517eba6764<BR>.reloc 0x16a000 0xc574 0xd000 6.42 1f845abc1128c5b6c5acb23c70bbdd4b<BR><BR>( 9 imports ) <BR>> KERNEL32.dll: WideCharToMultiByte, TlsGetValue, OutputDebugStringA, CreateMutexA, CreateFileA, DeviceIoControl, GetFileSize, FindFirstFileA, FindClose, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, TlsSetValue, SleepEx, WaitForMultipleObjectsEx, GetLastError, TlsAlloc, EnterCriticalSection, LeaveCriticalSection, SetEvent, FileTimeToLocalFileTime, FileTimeToSystemTime, WriteConsoleA, SetEndOfFile, GetNumberOfConsoleInputEvents, PeekConsoleInputA, GetConsoleMode, SetConsoleMode, ReadConsoleInputA, DeleteFileA, GetDriveTypeA, GetFullPathNameA, GetCurrentDirectoryA, CloseHandle, ResetEvent, TlsFree, GetSystemTimeAsFileTime, MultiByteToWideChar, SetLastError, UnmapViewOfFile, FlushViewOfFile, ReleaseMutex, CreateFileMappingA, OpenFileMappingA, CreateEventA, MapViewOfFile, GetLocaleInfoW, ReadFile, SetEnvironmentVariableA, CompareStringW, CompareStringA, CreateThread, SetThreadPriority, Sleep, WaitForSingleObject, GetCurrentThreadId, InterlockedIncrement, InterlockedDecrement, GetModuleFileNameA, GetUserDefaultLangID, GetUserDefaultLCID, EnumSystemLocalesA, GetLocaleInfoA, SetCurrentDirectoryA, IsValidCodePage, IsValidLocale, LocalFree, FormatMessageA, LoadLibraryA, GetProcAddress, FreeLibrary, FindNextFileA, GetVersion, GetFileType, GetStdHandle, GetCurrentProcessId, GlobalMemoryStatus, QueryPerformanceCounter, GetTickCount, GetVersionExA, FlushConsoleInputBuffer, RtlUnwind, HeapAlloc, GetTimeZoneInformation, GetSystemTime, GetLocalTime, HeapFree, GetCommandLineA, HeapReAlloc, SetConsoleCtrlHandler, GetCurrentThread, GetEnvironmentVariableA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, ExitProcess, FatalAppExitA, SetHandleCount, GetStartupInfoA, TerminateProcess, GetCurrentProcess, HeapSize, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, WriteFile, GetStringTypeA, GetStringTypeW, UnhandledExceptionFilter, SetFilePointer, LCMapStringA, LCMapStringW, FlushFileBuffers, SetStdHandle, SetUnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, GetACP, GetOEMCP<BR>> ADVAPI32.dll: RegisterEventSourceA, ReportEventA, DeregisterEventSource, CryptReleaseContext, CryptCreateHash, CryptGetHashParam, CryptSetHashParam, CryptSignHashA, CryptDestroyHash, InitializeSecurityDescriptor, SetSecurityDescriptorDacl<BR>> CRYPT32.dll: CertFreeCertificateChain, CertEnumCertificatesInStore, CertGetCertificateChain, CertDuplicateCertificateContext, CertAddCertificateContextToStore, CertCreateCertificateContext, CertOpenStore, CertCloseStore, CertVerifyTimeValidity, CertGetNameStringA, CertFindCertificateInStore, CertFreeCertificateContext, CertOpenSystemStoreA, CryptAcquireCertificatePrivateKey, CertDeleteCertificateFromStore<BR>> WS2_32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -<BR>> WinSCard.dll: SCardConnectA, SCardListReadersA, SCardEstablishContext, SCardReleaseContext, g_rgSCardT1Pci, g_rgSCardT0Pci, SCardTransmit, SCardDisconnect<BR>> VERSION.dll: GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA<BR>> SHLWAPI.dll: PathRemoveFileSpecA<BR>> USER32.dll: GetProcessWindowStation, GetDesktopWindow, MessageBoxIndirectA, GetUserObjectInformationW<BR>> GDI32.dll: DeleteDC, GetBitmapBits, BitBlt, GetObjectA, SelectObject, CreateCompatibleBitmap, GetDeviceCaps, CreateCompatibleDC, CreateDCA, DeleteObject<BR><BR>( 1 exports ) <BR>DsaCreateShim<BR>
      6. gen-hackman
        ok merci Kevin :)(rien a voir)

        relance rsit stp cette fois avec le log.txt Merci
        1. bigjal Auteur
          Logfile of random's system information tool 1.05 (written by random/random)
          Run by Propriétaire at 2009-02-18 07:51:38
          Microsoft Windows XP Édition familiale Service Pack 2
          System drive C: has 20 GB (60%) free of 33 GB
          Total RAM: 119 MB (9% free)

          HijackThis download failed

          ======Scheduled tasks folder======

          C:\WINDOWS\tasks\Symantec NetDetect.job

          ======Registry dump======

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9394EDE7-C8B5-483E-8773-474BF36AF6E4}]
          ST - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll [2004-08-13 155648]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9AA2F14F-E956-44B8-8694-A5B615CDF341}]
          NOW!Imaging - C:\Program Files\Netscape Nitro\components\NOWImaging.dll []

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9ECB9560-04F9-4bbc-943D-298DDF1699E1}]
          CNisExtBho Class - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2003-09-07 131072]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
          Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-08-20 2436160]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
          Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [2007-09-01 325048]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
          MSNToolBandBHO - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
          {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - boîte à outils hp - C:\HP\EXPLOREBAR\HPTOOLKT.DLL [2002-06-04 86016]
          {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - Web assistant - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2003-09-07 131072]
          {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - MSN - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]
          {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2007-08-20 2436160]

          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
          "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CamMonitor]
          c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe [2002-06-17 69632]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
          C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2005-04-06 71256]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
          C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
          C:\WINDOWS\system32\dla\tfswctrl.exe [2002-07-16 106549]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
          C:\WINDOWS\System32\hkcmd.exe [2002-05-15 114688]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
          C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-12-22 241664]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hp Silent Service]
          C:\Windows\system32\HpSrvUI.exe [2002-06-18 32768]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
          C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [2003-08-04 49152]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
          C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe [2004-02-26 176128]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpScannerFirstBoot]
          c:\hp\drivers\scannercamera\scannerfb.exe [2001-12-13 20480]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
          c:\windows\system\hpsysdrv.exe [1998-05-07 52736]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
          C:\WINDOWS\System32\igfxtray.exe [2002-05-15 155648]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint]
          C:\Program Files\Microsoft IntelliPoint\point32.exe [2003-05-15 163840]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
          NvQTwk []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
          nwiz.exe /install []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
          C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2007-05-28 95800]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PS2]
          C:\WINDOWS\system32\ps2.exe [2002-06-14 81920]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
          C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
          C:\WINDOWS\SMINST\RECGUARD.EXE [2001-12-18 212992]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Services Host ]
          hostV1.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StorageGuard]
          C:\Program Files\VERITAS Software\Update Manager\sgtray.exe [2002-05-09 155648]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-09-01 68856]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]
          C:\PROGRA~1\SYMNET~1\SNDMon.exe [2005-04-29 100056]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^hp center.lnk]
          C:\PROGRA~1\HPCENT~1\137903\Program\BACKWE~1.EXE [2002-08-12 16384]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
          C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpqtra08.exe [2003-09-16 237568]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logiciel Kodak EasyShare.lnk]
          C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe -hx []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
          C:\PROGRA~1\MICROS~3\Office\OSA9.EXE [1999-02-17 65588]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Wireless Connection Manager.lnk]
          C:\PROGRA~1\D-Link\D-LINK~1\WIRELE~1.EXE [2006-12-06 13357056]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
          "SymWSC"=2
          "SNDSrvc"=2
          "SBService"=2
          "SAVScan"=2
          "Pml Driver HPZ12"=3
          "NVSvc"=2
          "navapsvc"=2
          "gusvc"=3
          "ccSetMgr"=2
          "ccPwdSvc"=3
          "ccProxy"=2
          "ccEvtMgr"=2
          "IDriverT"=3
          "ACS"=2
          "wscsvc"=2

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
          C:\WINDOWS\system32\igfxsrvc.dll [2002-05-15 307200]

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
          "dontdisplaylastusername"=0
          "legalnoticecaption"=
          "legalnoticetext"=
          "shutdownwithoutlogon"=1
          "undockwithoutlogon"=1

          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
          "NoDriveTypeAutoRun"=145

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
          "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019"
          "C:\Program Files\hp center\137903\Program\BackWeb-137903.exe"="C:\Program Files\hp center\137903\Program\BackWeb-137903.exe:*:Enabled:BackWeb-137903"

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
          "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
          shell\AutoRun\command - G:\LaunchU3.exe -a

          ======List of files/folders created in the last 1 months======

          2009-02-17 16:20:16 ----D---- C:\WINDOWS\ERUNT
          2009-02-17 07:49:15 ----D---- C:\SDFix
          2009-02-16 19:47:12 ----A---- C:\WINDOWS\imsins.BAK
          2009-02-16 07:37:08 ----D---- C:\_OTMoveIt
          2009-02-15 19:57:50 ----A---- C:\WINDOWS\ntbtlog.txt
          2009-02-15 19:25:28 ----A---- C:\FindyKill.txt
          2009-02-15 18:45:50 ----D---- C:\Program Files\FindyKill
          2009-02-15 16:44:37 ----D---- C:\Program Files\trend micro
          2009-02-15 16:44:22 ----D---- C:\rsit
          2009-02-15 16:30:54 ----A---- C:\rapport.txt
          2009-02-15 16:30:14 ----A---- C:\WINDOWS\system32\o4Patch.exe
          2009-02-15 16:30:14 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\WS2Fix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\VACFix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\IEDFix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\404Fix.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\VCCLSID.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\swxcacls.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\SrchSTS.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\dumphive.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\swsc.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\swreg.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\Process.exe
          2009-02-10 20:01:16 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
          2009-02-10 20:00:57 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
          2009-02-10 20:00:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
          2009-01-29 20:43:23 ----A---- C:\WINDOWS\system32\wsimd.dll
          2009-01-29 20:43:23 ----A---- C:\WINDOWS\system32\wsfwDS.dll
          2009-01-29 20:43:22 ----RA---- C:\WINDOWS\system32\dsaNac.dll
          2009-01-29 20:43:22 ----RA---- C:\WINDOWS\system32\dsa.dll
          2009-01-29 20:43:21 ----D---- C:\WINDOWS\pcidevice
          2009-01-29 20:43:18 ----D---- C:\Program Files\D-Link
          2009-01-29 20:40:54 ----D---- C:\temp

          ======List of files/folders modified in the last 1 months======

          2009-02-18 07:51:44 ----D---- C:\WINDOWS\Prefetch
          2009-02-18 07:46:55 ----RD---- C:\Program Files
          2009-02-18 07:45:48 ----D---- C:\WINDOWS\Temp
          2009-02-18 07:45:07 ----A---- C:\WINDOWS\ModemLog_Lucent Win Modem.txt
          2009-02-17 23:06:36 ----A---- C:\WINDOWS\SchedLgU.Txt
          2009-02-17 22:26:39 ----D---- C:\WINDOWS\system32
          2009-02-17 22:19:20 ----D---- C:\WINDOWS\system32\CatRoot2
          2009-02-17 21:07:50 ----SD---- C:\Documents and Settings\Propriétaire\Application Data\Microsoft
          2009-02-17 20:56:29 ----D---- C:\WINDOWS
          2009-02-17 17:49:44 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
          2009-02-17 17:40:24 ----RSHDC---- C:\WINDOWS\system32\dllcache
          2009-02-17 17:40:21 ----D---- C:\WINDOWS\Help
          2009-02-17 17:40:21 ----D---- C:\Program Files\Internet Explorer
          2009-02-17 17:34:57 ----D---- C:\WINDOWS\WBEM
          2009-02-17 17:34:57 ----D---- C:\WINDOWS\system32\fr-fr
          2009-02-17 17:34:54 ----D---- C:\WINDOWS\Media
          2009-02-17 17:34:54 ----D---- C:\WINDOWS\inf
          2009-02-17 17:13:17 ----D---- C:\WINDOWS\network diagnostic
          2009-02-16 19:41:32 ----D---- C:\WINDOWS\system32\CatRoot
          2009-02-16 19:29:58 ----D---- C:\WINDOWS\Debug
          2009-02-15 21:28:16 ----D---- C:\WINDOWS\security
          2009-02-15 19:58:29 ----D---- C:\Documents and Settings
          2009-02-15 19:28:45 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
          2009-02-10 20:01:03 ----D---- C:\WINDOWS\system32\drivers
          2009-02-02 19:16:55 ----RASH---- C:\BOOT.INI
          2009-02-02 19:16:55 ----A---- C:\WINDOWS\win.ini
          2009-02-02 19:16:55 ----A---- C:\WINDOWS\system.ini
          2009-02-02 17:48:01 ----D---- C:\WINDOWS\pss
          2009-02-02 17:37:19 ----SD---- C:\WINDOWS\Downloaded Program Files
          2009-02-02 17:37:14 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
          2009-02-02 16:54:40 ----D---- C:\Program Files\Fichiers communs
          2009-02-01 18:12:12 ----D---- C:\WINDOWS\system32\ias
          2009-01-29 20:44:26 ----D---- C:\WINDOWS\system32\ReinstallBackups
          2009-01-29 20:43:14 ----HD---- C:\Program Files\InstallShield Installation Information
          2009-01-29 20:16:23 ----SHD---- C:\WINDOWS\Installer
          2009-01-26 20:20:25 ----D---- C:\Documents and Settings\Propriétaire\Application Data\VERITAS
          2009-01-26 20:19:58 ----D---- C:\Documents and Settings\Propriétaire\Application Data\SlipStream

          ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

          R1 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2002-05-22 90336]
          R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2002-08-12 82380]
          R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2002-06-19 5589]
          R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2002-06-19 22995]
          R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-04-05 267192]
          R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2002-06-06 40368]
          R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2002-07-16 23701]
          R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2002-07-16 34805]
          R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2002-07-16 4117]
          R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2002-07-16 2233]
          R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2002-07-16 54900]
          R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2002-07-16 14421]
          R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2002-07-16 6325]
          R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2002-07-16 91156]
          R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2002-07-16 95125]
          R3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2002-05-22 69504]
          R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-03-22 95936]
          R3 AR5416;D-Link Xtreme N Service; C:\WINDOWS\system32\DRIVERS\ar5416.sys [2006-09-25 1037088]
          R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
          R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2002-05-22 78045]
          R3 ltmodem5;LT Modem Driver; C:\WINDOWS\System32\DRIVERS\ltmdmnt.sys [2003-03-31 625537]
          R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
          R3 MxlW2k;MxlW2k; C:\WINDOWS\system32\drivers\MxlW2k.sys [2002-08-12 28164]
          R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2002-03-08 13780]
          R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\point32.sys [2003-05-15 19072]
          R3 Ps2;PS2; C:\WINDOWS\System32\DRIVERS\PS2.sys [2001-06-04 14112]
          R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-05-07 493896]
          R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2005-04-05 11512]
          R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
          R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2005-04-05 173208]
          R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2005-04-05 36984]
          R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090212.003\symidsco.sys []
          R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2005-04-05 47192]
          R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-04-05 17976]
          R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
          R3 usbhub;USB Root Hub (usbport); C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
          R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
          R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2006-07-20 54432]
          S1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-19 41600]
          S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2004-08-19 40320]
          S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\System32\DRIVERS\p3.sys [2004-08-19 46720]
          S3 catchme;catchme; \??\C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\catchme.sys []
          S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2004-02-26 51056]
          S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2004-02-26 16496]
          S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [2004-02-26 21488]
          S3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2001-08-08 158140]
          S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2001-08-08 12479]
          S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2001-08-08 12031]
          S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2001-08-08 11679]
          S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2001-08-08 11999]
          S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2001-08-08 19359]
          S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2001-08-08 29215]
          S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2001-08-08 19199]
          S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
          S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2001-08-08 33503]
          S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2001-08-08 23519]
          S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2002-05-03 931882]
          S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
          S3 S3Psddr;S3Psddr; C:\WINDOWS\System32\DRIVERS\s3gnbm.sys [2002-07-13 155008]
          S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616]
          S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-04 17024]
          S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
          S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-04 15104]
          S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
          S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
          S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-28 12032]

          ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

          S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-19 268800]
          S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
          S4 ACS;Atheros Configuration Service; C:\Program Files\D-Link\D-Link DWA-552 Xtreme N Desktop Adapter\acs.exe [2006-08-25 360532]
          S4 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2005-04-06 255576]
          S4 ccProxy;Symantec Network Proxy; C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe [2005-03-21 218712]
          S4 ccPwdSvc;Symantec Password Validation; C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2005-04-06 87640]
          S4 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2005-04-06 235096]
          S4 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-08-20 138168]
          S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
          S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\System32\nvsvc32.exe [2002-05-03 61440]
          S4 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\HPZipm12.exe [2004-02-26 65795]
          S4 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2005-04-05 206552]
          S4 SymWSC;SymWMI Service; C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe [2004-11-02 316544]

          -----------------EOF-----------------
      7. gen-hackman
        desactive Norton et fais ensuite ce qui est indiqué
        1. bigjal Auteur
          ========== PROCESSES ==========
          Process explorer.exe killed successfully.
          ========== FILES ==========
          C:\WINDOWS\system32\CF14417.exe moved successfully.
          C:\Bug.txt moved successfully.
          ========== REGISTRY ==========
          Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\blah service\\ deleted successfully.
          Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Update\\ deleted successfully.
          Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Services Host not found.
          Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\windows auto update\\ deleted successfully.
          Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows secure\\ deleted successfully.
          ========== COMMANDS ==========
          User's Temp folder emptied.
          User's Temporary Internet Files folder emptied.
          User's Internet Explorer cache folder emptied.
          File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
          File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be deleted on reboot.
          File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
          Local Service Temp folder emptied.
          Local Service Temporary Internet Files folder emptied.
          Windows Temp folder emptied.
          Temp folders emptied.
          Explorer started successfully

          OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02172009_222636

          Files moved on Reboot...
          File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
          File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be moved on reboot.
          File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.
        2. bigjal Auteur
          Killing 'Nircmd.com'

          PUSHD "C:\32788R22FWJFW"

          IF NOT EXIST C:\WINDOWS\system32\cmd.exe GOTO Not_NT

          VER 1>OsVer

          "C:\WINDOWS\system32\Find.exe" "5.2." OsVer

          ---------- OSVER

          IF 1 == 0 GOTO Not_NT

          "C:\WINDOWS\system32\Find.exe" "5.1.2" OsVer

          ---------- OSVER
          Microsoft Windows XP [version 5.1.2600]

          IF 0 == 0 GOTO NT

          =============================================

          ALLUSERSPROFILE=C:\Documents and Settings\All Users
          APPDATA=C:\Documents and Settings\Propri‚taire\Application Data
          CFLDR=32788R22FWJFW
          CLASSPATH=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
          CLIENTNAME=Console
          CommonProgramFiles=C:\Program Files\Fichiers communs
          COMPUTERNAME=NOM-ZJEF8TC8UDR
          ComSpec=C:\WINDOWS\system32\cmd.execf
          FP_NO_HOST_CHECK=NO
          HOMEDRIVE=C:
          HOMEPATH=\Documents and Settings\Propri‚taire
          KMD=CF14417.exe
          LOGONSERVER=\\NOM-ZJEF8TC8UDR
          NUMBER_OF_PROCESSORS=1
          OS=Windows_NT
          Path=C:\32788R22FWJFW;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Python22;C:\Program Files\QuickTime\QTSystem\
          PATHEXT=.CFEXE;.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
          PROCESSOR_ARCHITECTURE=x86
          PROCESSOR_IDENTIFIER=x86 Family 15 Model 1 Stepping 3, GenuineIntel
          PROCESSOR_LEVEL=15
          PROCESSOR_REVISION=0103
          ProgramFiles=C:\Program Files
          PROMPT=$
          QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
          RKEY_=hklm\software\microsoft\windows nt\currentversion\windows
          SESSIONNAME=Console
          sfxcmd="C:\Documents and Settings\Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\ALU16WGL\ComboFix[1].exe"
          sfxname=C:\Documents and Settings\Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\ALU16WGL\ComboFix[1].exe
          SYSTEM=C:\WINDOWS\system32
          SystemDrive=C:
          SystemRoot=C:\WINDOWS
          TEMP=C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
          TMP=C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp
          USERDOMAIN=NOM-ZJEF8TC8UDR
          USERNAME=Propri‚taire
          USERPROFILE=C:\Documents and Settings\Propri‚taire
          windir=C:\WINDOWS

          =============================================

          IF NOT DEFINED sfxname GOTO END

          IF EXIST C:\cfDebug.cmd DEL /A/F C:\cfDebug.cmd

          CALL sfx.cmd

          CALL AV.cmd

          SET /a AVCount+=1

          CSCRIPT.exe //NOLOGO //E:VBSCRIPT //B //T:08 av.vbs

          FINDSTR -C:"*On-access scanning enabled*" Resident.txt 1>AVChk && (
          SED -r "s/AV: (.*) \*On-access .*/* \1/;" AVChk | SED ":a; $!N;s/\n/~n/;ta" 1>AVChkB
          NIRCMD beep 3000 200
          NIRCMD beep 3000 300
          IF 1 LEQ 1 FOR /F "TOKENS=*" %G IN (AVChkB) DO @NIRCMD INFOBOX "" "" && GOTO Av-check
          IF 1 GTR 1 FOR /F "TOKENS=*" %G IN (AVChkB) DO @NIRCMD INFOBOX "" ""
          )

          DEL /Q AVChk?

          SET AVCount=

          IF EXIST OsVer00 CALL :Vista

          IF /I "C:\32788R22FWJFW" NEQ "C:\32788R22FWJFW" GOTO Abort

          IF EXIST "C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\32788R22FWJFW32788R22FWJFW.log" DEL "C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\32788R22FWJFW32788R22FWJFW.log"

          (
          SET "FileName=ComboFix[1]"
          SET "FilePath=C:\Documents and Settings\Propri‚taire\Local Settings\Temporary Internet Files\Content.IE5\ALU16WGL\"
          )

          SET FileName 1>FileName

          GREP -isqx "FileName=[-[:alnum:]@.]*" FileName || GOTO AbortB

          DEL /Q DirName0?

          Error: Key: software\microsoft\windows\currentversion\app paths\combofix.exe does not exist!

          CALL NIRCMD INFOBOX "" ""

          GOTO END

          IF EXIST "C:\WINDOWS\system32\cmd.execf" MOVE /Y "C:\WINDOWS\system32\cmd.execf" "C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp"

          CD ..

          IF DEFINED cfldr RD /S/Q "32788R22FWJFW"
      8. gen-hackman
        ---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

        ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :

        http://oldtimer.geekstogo.com/OTMoveIt3.exe

        ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

        ---> Copie (Ctrl+C) le texte suivant ci-dessous :

        :processes
        explorer.exe

        :files
        C:\WINDOWS\system32\CF14417.exe
        C:\Bug.txt

        :reg
        [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\blah service]
        [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Update]
        [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Services Host]
        "hostV1.exe"=-
        [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\windows auto update]
        [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows secure]

        :commands
        [purity]
        [emptytemp]
        [start explorer]
        [reboot]

        ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

        ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

        Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
        Accepte en cliquant sur YES.

        ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
        Le nom du rapport correspond au moment de sa création : date_heure.log
        1. bigjal Auteur
          Comment savoir quel anti-virus que j'ai et combien j'en ai. Je croyais que je les avaient déjà désactivé. Peux-tu m'aider a savoir comment faire pour tout désactiver mes anti-virus.
          Merci.
      9. gen-hackman
        bonsoir relance Malwarebytes en examen rapide en mode sans echec stp
        1. bigjal Auteur
          Malwarebytes' Anti-Malware 1.33
          Version de la base de données: 1654
          Windows 5.1.2600 Service Pack 2

          2009-02-17 21:07:12
          mbam-log-2009-02-17 (21-07-12).txt

          Type de recherche: Examen rapide
          Eléments examinés: 52535
          Temps écoulé: 9 minute(s), 2 second(s)

          Processus mémoire infecté(s): 0
          Module(s) mémoire infecté(s): 0
          Clé(s) du Registre infectée(s): 0
          Valeur(s) du Registre infectée(s): 0
          Elément(s) de données du Registre infecté(s): 0
          Dossier(s) infecté(s): 0
          Fichier(s) infecté(s): 0

          Processus mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Module(s) mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Clé(s) du Registre infectée(s):
          (Aucun élément nuisible détecté)

          Valeur(s) du Registre infectée(s):
          (Aucun élément nuisible détecté)

          Elément(s) de données du Registre infecté(s):
          (Aucun élément nuisible détecté)

          Dossier(s) infecté(s):
          (Aucun élément nuisible détecté)

          Fichier(s) infecté(s):
          (Aucun élément nuisible détecté)
      10. gen-hackman
        renvoie rsit stp
        1. bigjal Auteur
          Logfile of random's system information tool 1.05 (written by random/random)
          Run by Propriétaire at 2009-02-17 20:21:05
          Microsoft Windows XP Édition familiale Service Pack 2
          System drive C: has 20 GB (60%) free of 33 GB
          Total RAM: 119 MB (10% free)

          HijackThis download failed

          ======Scheduled tasks folder======

          C:\WINDOWS\tasks\Symantec NetDetect.job

          ======Registry dump======

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9394EDE7-C8B5-483E-8773-474BF36AF6E4}]
          ST - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll [2004-08-13 155648]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9AA2F14F-E956-44B8-8694-A5B615CDF341}]
          NOW!Imaging - C:\Program Files\Netscape Nitro\components\NOWImaging.dll []

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9ECB9560-04F9-4bbc-943D-298DDF1699E1}]
          CNisExtBho Class - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2003-09-07 131072]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
          Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-08-20 2436160]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
          Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [2007-09-01 325048]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
          MSNToolBandBHO - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
          {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - boîte à outils hp - C:\HP\EXPLOREBAR\HPTOOLKT.DLL [2002-06-04 86016]
          {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - Web assistant - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2003-09-07 131072]
          {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - MSN - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]
          {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2007-08-20 2436160]

          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
          "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\blah service]
          msnmsgrr.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CamMonitor]
          c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe [2002-06-17 69632]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
          C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2005-04-06 71256]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
          C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
          C:\WINDOWS\system32\dla\tfswctrl.exe [2002-07-16 106549]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
          C:\WINDOWS\System32\hkcmd.exe [2002-05-15 114688]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
          C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-12-22 241664]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hp Silent Service]
          C:\Windows\system32\HpSrvUI.exe [2002-06-18 32768]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
          C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [2003-08-04 49152]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
          C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe [2004-02-26 176128]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpScannerFirstBoot]
          c:\hp\drivers\scannercamera\scannerfb.exe [2001-12-13 20480]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
          c:\windows\system\hpsysdrv.exe [1998-05-07 52736]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
          C:\WINDOWS\System32\igfxtray.exe [2002-05-15 155648]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint]
          C:\Program Files\Microsoft IntelliPoint\point32.exe [2003-05-15 163840]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Update]
          phqghumea.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
          NvQTwk []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
          nwiz.exe /install []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
          C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2007-05-28 95800]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PS2]
          C:\WINDOWS\system32\ps2.exe [2002-06-14 81920]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
          C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
          C:\WINDOWS\SMINST\RECGUARD.EXE [2001-12-18 212992]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Services Host ]
          hostV1.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StorageGuard]
          C:\Program Files\VERITAS Software\Update Manager\sgtray.exe [2002-05-09 155648]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-09-01 68856]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]
          C:\PROGRA~1\SYMNET~1\SNDMon.exe [2005-04-29 100056]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\windows auto update]
          msblast.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows secure]
          setver32.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^hp center.lnk]
          C:\PROGRA~1\HPCENT~1\137903\Program\BACKWE~1.EXE [2002-08-12 16384]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
          C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpqtra08.exe [2003-09-16 237568]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logiciel Kodak EasyShare.lnk]
          C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe -hx []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
          C:\PROGRA~1\MICROS~3\Office\OSA9.EXE [1999-02-17 65588]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Wireless Connection Manager.lnk]
          C:\PROGRA~1\D-Link\D-LINK~1\WIRELE~1.EXE [2006-12-06 13357056]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
          "SymWSC"=2
          "SNDSrvc"=2
          "SBService"=2
          "SAVScan"=2
          "Pml Driver HPZ12"=3
          "NVSvc"=2
          "navapsvc"=2
          "gusvc"=3
          "ccSetMgr"=2
          "ccPwdSvc"=3
          "ccProxy"=2
          "ccEvtMgr"=2
          "IDriverT"=3
          "ACS"=2
          "wscsvc"=2

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
          C:\WINDOWS\system32\igfxsrvc.dll [2002-05-15 307200]

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
          "dontdisplaylastusername"=0
          "legalnoticecaption"=
          "legalnoticetext"=
          "shutdownwithoutlogon"=1
          "undockwithoutlogon"=1

          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
          "NoDriveTypeAutoRun"=145

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
          "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019"
          "C:\Program Files\hp center\137903\Program\BackWeb-137903.exe"="C:\Program Files\hp center\137903\Program\BackWeb-137903.exe:*:Enabled:BackWeb-137903"

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
          "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
          shell\AutoRun\command - G:\LaunchU3.exe -a

          ======List of files/folders created in the last 1 months======

          2009-02-17 17:34:41 ----A---- C:\WINDOWS\ieResetIcons.exe
          2009-02-17 16:20:16 ----D---- C:\WINDOWS\ERUNT
          2009-02-17 07:49:15 ----D---- C:\SDFix
          2009-02-16 19:47:12 ----A---- C:\WINDOWS\imsins.BAK
          2009-02-16 07:37:08 ----D---- C:\_OTMoveIt
          2009-02-15 19:57:50 ----A---- C:\WINDOWS\ntbtlog.txt
          2009-02-15 19:25:28 ----A---- C:\FindyKill.txt
          2009-02-15 18:45:50 ----D---- C:\Program Files\FindyKill
          2009-02-15 16:44:37 ----D---- C:\Program Files\trend micro
          2009-02-15 16:44:22 ----D---- C:\rsit
          2009-02-15 16:30:54 ----A---- C:\rapport.txt
          2009-02-15 16:30:14 ----A---- C:\WINDOWS\system32\o4Patch.exe
          2009-02-15 16:30:14 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\WS2Fix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\VACFix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\IEDFix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\404Fix.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\VCCLSID.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\swxcacls.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\SrchSTS.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\dumphive.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\swsc.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\swreg.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\Process.exe
          2009-02-15 16:16:15 ----A---- C:\WINDOWS\system32\CF14417.exe
          2009-02-15 16:14:55 ----A---- C:\Bug.txt
          2009-02-10 20:01:16 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
          2009-02-10 20:00:57 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
          2009-02-10 20:00:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
          2009-01-29 20:43:23 ----A---- C:\WINDOWS\system32\wsimd.dll
          2009-01-29 20:43:23 ----A---- C:\WINDOWS\system32\wsfwDS.dll
          2009-01-29 20:43:22 ----RA---- C:\WINDOWS\system32\dsaNac.dll
          2009-01-29 20:43:22 ----RA---- C:\WINDOWS\system32\dsa.dll
          2009-01-29 20:43:21 ----D---- C:\WINDOWS\pcidevice
          2009-01-29 20:43:18 ----D---- C:\Program Files\D-Link
          2009-01-29 20:40:54 ----D---- C:\temp

          ======List of files/folders modified in the last 1 months======

          2009-02-17 20:21:11 ----D---- C:\WINDOWS\Prefetch
          2009-02-17 17:49:44 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
          2009-02-17 17:49:39 ----D---- C:\WINDOWS\Temp
          2009-02-17 17:42:27 ----RD---- C:\Program Files
          2009-02-17 17:41:33 ----A---- C:\WINDOWS\ModemLog_Lucent Win Modem.txt
          2009-02-17 17:41:22 ----D---- C:\WINDOWS
          2009-02-17 17:40:24 ----RSHDC---- C:\WINDOWS\system32\dllcache
          2009-02-17 17:40:22 ----D---- C:\WINDOWS\system32
          2009-02-17 17:40:21 ----D---- C:\WINDOWS\Help
          2009-02-17 17:40:21 ----D---- C:\Program Files\Internet Explorer
          2009-02-17 17:39:36 ----A---- C:\WINDOWS\SchedLgU.Txt
          2009-02-17 17:34:54 ----D---- C:\WINDOWS\Media
          2009-02-17 17:34:54 ----D---- C:\WINDOWS\inf
          2009-02-17 17:34:33 ----D---- C:\WINDOWS\system32\CatRoot2
          2009-02-17 17:13:17 ----D---- C:\WINDOWS\network diagnostic
          2009-02-16 19:45:56 ----D---- C:\WINDOWS\WBEM
          2009-02-16 19:45:56 ----D---- C:\WINDOWS\system32\fr-fr
          2009-02-16 19:41:32 ----D---- C:\WINDOWS\system32\CatRoot
          2009-02-16 19:29:58 ----D---- C:\WINDOWS\Debug
          2009-02-15 21:28:16 ----D---- C:\WINDOWS\security
          2009-02-15 19:58:29 ----D---- C:\Documents and Settings
          2009-02-15 19:28:45 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
          2009-02-15 15:34:53 ----SD---- C:\Documents and Settings\Propriétaire\Application Data\Microsoft
          2009-02-10 20:01:03 ----D---- C:\WINDOWS\system32\drivers
          2009-02-02 19:16:55 ----RASH---- C:\BOOT.INI
          2009-02-02 19:16:55 ----A---- C:\WINDOWS\win.ini
          2009-02-02 19:16:55 ----A---- C:\WINDOWS\system.ini
          2009-02-02 17:48:01 ----D---- C:\WINDOWS\pss
          2009-02-02 17:37:19 ----SD---- C:\WINDOWS\Downloaded Program Files
          2009-02-02 17:37:14 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
          2009-02-02 16:54:40 ----D---- C:\Program Files\Fichiers communs
          2009-02-01 18:12:12 ----D---- C:\WINDOWS\system32\ias
          2009-01-29 20:44:26 ----D---- C:\WINDOWS\system32\ReinstallBackups
          2009-01-29 20:43:14 ----HD---- C:\Program Files\InstallShield Installation Information
          2009-01-29 20:16:23 ----SHD---- C:\WINDOWS\Installer
          2009-01-26 20:20:25 ----D---- C:\Documents and Settings\Propriétaire\Application Data\VERITAS
          2009-01-26 20:19:58 ----D---- C:\Documents and Settings\Propriétaire\Application Data\SlipStream

          ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

          R1 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2002-05-22 90336]
          R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2002-08-12 82380]
          R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2002-06-19 5589]
          R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2002-06-19 22995]
          R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-04-05 267192]
          R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2002-06-06 40368]
          R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2002-07-16 23701]
          R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2002-07-16 34805]
          R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2002-07-16 4117]
          R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2002-07-16 2233]
          R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2002-07-16 54900]
          R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2002-07-16 14421]
          R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2002-07-16 6325]
          R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2002-07-16 91156]
          R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2002-07-16 95125]
          R3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2002-05-22 69504]
          R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-03-22 95936]
          R3 AR5416;D-Link Xtreme N Service; C:\WINDOWS\system32\DRIVERS\ar5416.sys [2006-09-25 1037088]
          R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
          R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2002-05-22 78045]
          R3 ltmodem5;LT Modem Driver; C:\WINDOWS\System32\DRIVERS\ltmdmnt.sys [2003-03-31 625537]
          R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
          R3 MxlW2k;MxlW2k; C:\WINDOWS\system32\drivers\MxlW2k.sys [2002-08-12 28164]
          R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2002-03-08 13780]
          R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\point32.sys [2003-05-15 19072]
          R3 Ps2;PS2; C:\WINDOWS\System32\DRIVERS\PS2.sys [2001-06-04 14112]
          R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-05-07 493896]
          R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2005-04-05 11512]
          R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
          R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2005-04-05 173208]
          R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2005-04-05 36984]
          R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090212.003\symidsco.sys []
          R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2005-04-05 47192]
          R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-04-05 17976]
          R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
          R3 usbhub;USB Root Hub (usbport); C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
          R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
          R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2006-07-20 54432]
          S1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-19 41600]
          S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2004-08-19 40320]
          S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\System32\DRIVERS\p3.sys [2004-08-19 46720]
          S3 catchme;catchme; \??\C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\catchme.sys []
          S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2004-02-26 51056]
          S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2004-02-26 16496]
          S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [2004-02-26 21488]
          S3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2001-08-08 158140]
          S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2001-08-08 12479]
          S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2001-08-08 12031]
          S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2001-08-08 11679]
          S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2001-08-08 11999]
          S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2001-08-08 19359]
          S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2001-08-08 29215]
          S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2001-08-08 19199]
          S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
          S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2001-08-08 33503]
          S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2001-08-08 23519]
          S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2002-05-03 931882]
          S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
          S3 S3Psddr;S3Psddr; C:\WINDOWS\System32\DRIVERS\s3gnbm.sys [2002-07-13 155008]
          S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616]
          S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-04 17024]
          S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
          S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-04 15104]
          S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
          S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
          S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-28 12032]

          ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

          S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-19 268800]
          S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
          S4 ACS;Atheros Configuration Service; C:\Program Files\D-Link\D-Link DWA-552 Xtreme N Desktop Adapter\acs.exe [2006-08-25 360532]
          S4 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2005-04-06 255576]
          S4 ccProxy;Symantec Network Proxy; C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe [2005-03-21 218712]
          S4 ccPwdSvc;Symantec Password Validation; C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2005-04-06 87640]
          S4 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2005-04-06 235096]
          S4 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-08-20 138168]
          S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
          S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\System32\nvsvc32.exe [2002-05-03 61440]
          S4 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\HPZipm12.exe [2004-02-26 65795]
          S4 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2005-04-05 206552]
          S4 SymWSC;SymWMI Service; C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe [2004-11-02 316544]

          -----------------EOF-----------------
      11. gen-hackman
        Télécharge SDFix sur ton bureau :
        ici http://downloads.andymanchesta.com/RemovalTools/SDFix.exe.
        ou ici http://download.bleepingcomputer.com/andymanchesta/SDFix.exe­
        ou ici http://sdfix.net/SDFix.exe

        --> Double-clique sur SDFix.exe et choisis "Install" .

        ( tuto ici : https://www.malekal.com/slenfbot-still-an-other-irc-bot/ )

        Puis une fois l'installe faite ,

        Impératif : Démarrer en mode sans echec .

        /!\ Ne jamais démarrer en mode sans échec via MSCONFIG /!\

        Comment aller en Mode sans échec :
        1) Redémarre ton ordi .
        2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" .
        3) Tu tapotes jusqu' à l'apparition de l'écran avec les options de démarrage .
        4) Choisis la première option : Sans Échec , et valide en tapant sur [Entrée] .
        5) Choisis ton compte habituel ( et pas Administrateur ).
        attention : pas de connexion possible en mode sans échec , donc copie ou imprime bien la manipe pour éviter les erreurs ...

        Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double-clique sur RunThis.bat pour lancer l'outil .
        -->Tapes Y pour lancer le script ...
        Le Fix supprime les services du virus et nettoie le registre, de ce fait un redémarrage est nécessaire , donc :
        presses une touche pour redémarrer quand il te le sera demandé .

        Le PC va mettre du temps avant de démarrer ( c'est normale ), après le chargement du Bureau presses une touche lorsque "Finished" s'affiche .

        Le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier
        C:\SDFix sous le nom "Report.txt".

        Poste ce dernier dans ta prochaine réponse accompagné d'un nouveau rapport Hijakcthis pour analyse
        1. bigjal Auteur
          Bonjour,

          Voici mon rapport sdfix.

          [b]SDFix: Version 1.240 [/b]
          Run by Propriétaire on 2009-02-17 at 16:25

          Microsoft Windows XP [version 5.1.2600]
          Running From: C:\SDFix

          [b]Checking Services [/b]:

          Restoring Default Security Values
          Restoring Default Hosts File

          Rebooting

          [b]Checking Files [/b]:

          Trojan Files Found:

          C:\WINDOWS\SYSTEM32\FTPUPD.EXE - Deleted
          C:\WINDOWS\system32\TFTP1064 - Deleted
          C:\WINDOWS\system32\TFTP1660 - Deleted
          C:\WINDOWS\system32\TFTP1728 - Deleted
          C:\WINDOWS\system32\TFTP2508 - Deleted
          C:\WINDOWS\system32\TFTP2536 - Deleted
          C:\WINDOWS\system32\TFTP2956 - Deleted
          C:\WINDOWS\system32\TFTP3612 - Deleted
          C:\WINDOWS\system32\TFTP476 - Deleted

          Removing Temp Files

          [b]ADS Check [/b]:

          [b]Final Check [/b]:

          catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2009-02-17 16:58:07
          Windows 5.1.2600 Service Pack 2 NTFS

          scanning hidden processes ...

          scanning hidden services & system hive ...

          scanning hidden registry entries ...

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
          "AppInit_DLLs"=""
          "DeviceNotSelectedTimeout"="15"
          "GDIProcessHandleQuota"=dword:00002710
          "Spooler"="yes"
          "swapdisk"=""
          "TransmissionRetryTimeout"="90"
          "USERProcessHandleQuota"=dword:00002710
          "LoadAppInit_DLLs"=dword:00000001

          scanning hidden files ...

          scan completed successfully
          hidden processes: 0
          hidden services: 0
          hidden files: 0

          [b]Remaining Services [/b]:

          Authorized Application Key Export:

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
          "C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019"
          "C:\\Program Files\\hp center\\137903\\Program\\BackWeb-137903.exe"="C:\\Program Files\\hp center\\137903\\Program\\BackWeb-137903.exe:*:Enabled:BackWeb-137903"

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
          "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

          [b]Remaining Files [/b]:

          File Backups: - C:\SDFix\backups\backups.zip

          [b]Files with Hidden Attributes [/b]:

          Tue 8 Feb 2005 10,886 A..H. --- "C:\Program Files\Casino Treasure\udhglstl.tmp"
          Sat 11 Jan 2003 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
          Sat 11 Jan 2003 401 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv11.bak"
          Thu 22 Mar 2007 1,675,264 ...H. --- "C:\Program Files\PopCap Games\Bejeweled 2 Deluxe\game.exe"
          Mon 13 Feb 2006 1,290,240 ...H. --- "C:\Program Files\PopCap Games\Zuma Deluxe\popcapgame1.exe"
          Tue 28 Mar 2006 1,290,240 ...H. --- "C:\Program Files\PopCap Games\Zuma Deluxe\popcapgame2.exe"
          Wed 14 May 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\cc102203f99c8c6ebf1523556f8411b6\BIT10.tmp"

          [b]Finished![/b]
      12. gen-hackman
        redemarre ton ordi et renvoie le log.txt (nouveau) de rsit stp
        1. bigjal Auteur
          Bonsoir, Voici le rapport

          Logfile of random's system information tool 1.05 (written by random/random)
          Run by Propriétaire at 2009-02-16 19:15:50
          Microsoft Windows XP Édition familiale Service Pack 2
          System drive C: has 20 GB (61%) free of 33 GB
          Total RAM: 119 MB (8% free)

          HijackThis download failed

          ======Scheduled tasks folder======

          C:\WINDOWS\tasks\Symantec NetDetect.job

          ======Registry dump======

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9394EDE7-C8B5-483E-8773-474BF36AF6E4}]
          ST - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll [2004-08-13 155648]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9AA2F14F-E956-44B8-8694-A5B615CDF341}]
          NOW!Imaging - C:\Program Files\Netscape Nitro\components\NOWImaging.dll []

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9ECB9560-04F9-4bbc-943D-298DDF1699E1}]
          CNisExtBho Class - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2003-09-07 131072]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
          Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2007-08-20 2436160]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
          Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [2007-09-01 325048]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
          MSNToolBandBHO - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
          {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - boîte à outils hp - C:\HP\EXPLOREBAR\HPTOOLKT.DLL [2002-06-04 86016]
          {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - Web assistant - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll [2003-09-07 131072]
          {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - MSN - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]
          {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2007-08-20 2436160]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\blah service]
          msnmsgrr.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CamMonitor]
          c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe [2002-06-17 69632]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
          C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe [2005-04-06 71256]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
          C:\WINDOWS\system32\ctfmon.exe [2004-08-19 15360]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla]
          C:\WINDOWS\system32\dla\tfswctrl.exe [2002-07-16 106549]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
          C:\WINDOWS\System32\hkcmd.exe [2002-05-15 114688]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
          C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-12-22 241664]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hp Silent Service]
          C:\Windows\system32\HpSrvUI.exe [2002-06-18 32768]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
          C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [2003-08-04 49152]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
          C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe [2004-02-26 176128]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpScannerFirstBoot]
          c:\hp\drivers\scannercamera\scannerfb.exe [2001-12-13 20480]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
          c:\windows\system\hpsysdrv.exe [1998-05-07 52736]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
          C:\WINDOWS\System32\igfxtray.exe [2002-05-15 155648]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint]
          C:\Program Files\Microsoft IntelliPoint\point32.exe [2003-05-15 163840]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Update]
          phqghumea.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
          NvQTwk []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
          nwiz.exe /install []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
          C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2007-05-28 95800]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PS2]
          C:\WINDOWS\system32\ps2.exe [2002-06-14 81920]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
          C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
          C:\WINDOWS\SMINST\RECGUARD.EXE [2001-12-18 212992]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Services Host ]
          hostV1.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StorageGuard]
          C:\Program Files\VERITAS Software\Update Manager\sgtray.exe [2002-05-09 155648]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-09-01 68856]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor]
          C:\PROGRA~1\SYMNET~1\SNDMon.exe [2005-04-29 100056]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\windows auto update]
          msblast.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows secure]
          setver32.exe []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^hp center.lnk]
          C:\PROGRA~1\HPCENT~1\137903\Program\BACKWE~1.EXE [2002-08-12 16384]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^HP Digital Imaging Monitor.lnk]
          C:\PROGRA~1\HEWLET~1\DIGITA~1\bin\hpqtra08.exe [2003-09-16 237568]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Logiciel Kodak EasyShare.lnk]
          C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe -hx []

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Microsoft Office.lnk]
          C:\PROGRA~1\MICROS~3\Office\OSA9.EXE [1999-02-17 65588]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Wireless Connection Manager.lnk]
          C:\PROGRA~1\D-Link\D-LINK~1\WIRELE~1.EXE [2006-12-06 13357056]

          [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
          "SymWSC"=2
          "SNDSrvc"=2
          "SBService"=2
          "SAVScan"=2
          "Pml Driver HPZ12"=3
          "NVSvc"=2
          "navapsvc"=2
          "gusvc"=3
          "ccSetMgr"=2
          "ccPwdSvc"=3
          "ccProxy"=2
          "ccEvtMgr"=2
          "IDriverT"=3
          "ACS"=2
          "wscsvc"=2

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
          C:\WINDOWS\system32\igfxsrvc.dll [2002-05-15 307200]

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
          "dontdisplaylastusername"=0
          "legalnoticecaption"=
          "legalnoticetext"=
          "shutdownwithoutlogon"=1
          "undockwithoutlogon"=1

          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
          "NoDriveTypeAutoRun"=145

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
          "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019"
          "C:\Program Files\hp center\137903\Program\BackWeb-137903.exe"="C:\Program Files\hp center\137903\Program\BackWeb-137903.exe:*:Enabled:BackWeb-137903"

          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
          "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
          shell\AutoRun\command - G:\LaunchU3.exe -a

          ======List of files/folders created in the last 1 months======

          2009-02-16 07:37:08 ----D---- C:\_OTMoveIt
          2009-02-15 19:57:50 ----A---- C:\WINDOWS\ntbtlog.txt
          2009-02-15 19:25:28 ----A---- C:\FindyKill.txt
          2009-02-15 18:45:50 ----D---- C:\Program Files\FindyKill
          2009-02-15 16:44:37 ----D---- C:\Program Files\trend micro
          2009-02-15 16:44:22 ----D---- C:\rsit
          2009-02-15 16:30:54 ----A---- C:\rapport.txt
          2009-02-15 16:30:14 ----A---- C:\WINDOWS\system32\o4Patch.exe
          2009-02-15 16:30:14 ----A---- C:\WINDOWS\system32\Agent.OMZ.Fix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\WS2Fix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\VACFix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\IEDFix.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\IEDFix.C.exe
          2009-02-15 16:30:13 ----A---- C:\WINDOWS\system32\404Fix.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\VCCLSID.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\swxcacls.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\SrchSTS.exe
          2009-02-15 16:30:12 ----A---- C:\WINDOWS\system32\dumphive.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\swsc.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\swreg.exe
          2009-02-15 16:30:11 ----A---- C:\WINDOWS\system32\Process.exe
          2009-02-15 16:16:15 ----A---- C:\WINDOWS\system32\CF14417.exe
          2009-02-15 16:14:55 ----A---- C:\Bug.txt
          2009-02-10 20:01:16 ----D---- C:\Documents and Settings\Propriétaire\Application Data\Malwarebytes
          2009-02-10 20:00:57 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
          2009-02-10 20:00:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
          2009-01-29 20:43:23 ----A---- C:\WINDOWS\system32\wsimd.dll
          2009-01-29 20:43:23 ----A---- C:\WINDOWS\system32\wsfwDS.dll
          2009-01-29 20:43:22 ----RA---- C:\WINDOWS\system32\dsaNac.dll
          2009-01-29 20:43:22 ----RA---- C:\WINDOWS\system32\dsa.dll
          2009-01-29 20:43:21 ----D---- C:\WINDOWS\pcidevice
          2009-01-29 20:43:18 ----D---- C:\Program Files\D-Link
          2009-01-29 20:40:54 ----D---- C:\temp

          ======List of files/folders modified in the last 1 months======

          2009-02-16 19:13:25 ----RD---- C:\Program Files
          2009-02-16 16:55:54 ----D---- C:\WINDOWS\Prefetch
          2009-02-16 16:13:42 ----A---- C:\WINDOWS\ModemLog_Lucent Win Modem.txt
          2009-02-16 07:47:35 ----A---- C:\WINDOWS\SchedLgU.Txt
          2009-02-16 07:43:24 ----D---- C:\WINDOWS\Temp
          2009-02-15 21:28:16 ----D---- C:\WINDOWS\security
          2009-02-15 19:58:29 ----D---- C:\Documents and Settings
          2009-02-15 19:57:50 ----D---- C:\WINDOWS
          2009-02-15 19:28:49 ----D---- C:\WINDOWS\system32
          2009-02-15 19:28:45 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
          2009-02-15 15:52:42 ----D---- C:\WINDOWS\network diagnostic
          2009-02-15 15:34:53 ----SD---- C:\Documents and Settings\Propriétaire\Application Data\Microsoft
          2009-02-10 20:01:03 ----D---- C:\WINDOWS\system32\drivers
          2009-02-04 20:32:40 ----D---- C:\Program Files\Fichiers communs\Symantec Shared
          2009-02-02 19:16:55 ----RASH---- C:\BOOT.INI
          2009-02-02 19:16:55 ----A---- C:\WINDOWS\win.ini
          2009-02-02 19:16:55 ----A---- C:\WINDOWS\system.ini
          2009-02-02 17:48:01 ----D---- C:\WINDOWS\pss
          2009-02-02 17:37:19 ----SD---- C:\WINDOWS\Downloaded Program Files
          2009-02-02 17:37:14 ----D---- C:\Documents and Settings\All Users\Application Data\Zylom
          2009-02-02 16:54:40 ----D---- C:\Program Files\Fichiers communs
          2009-02-02 16:35:38 ----D---- C:\WINDOWS\system32\CatRoot2
          2009-02-01 18:12:12 ----D---- C:\WINDOWS\system32\ias
          2009-01-29 20:46:12 ----D---- C:\WINDOWS\inf
          2009-01-29 20:44:26 ----D---- C:\WINDOWS\system32\ReinstallBackups
          2009-01-29 20:43:14 ----HD---- C:\Program Files\InstallShield Installation Information
          2009-01-29 20:16:23 ----SHD---- C:\WINDOWS\Installer
          2009-01-26 20:20:25 ----D---- C:\Documents and Settings\Propriétaire\Application Data\VERITAS
          2009-01-26 20:19:58 ----D---- C:\Documents and Settings\Propriétaire\Application Data\SlipStream

          ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

          R1 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2002-05-22 90336]
          R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2002-08-12 82380]
          R1 sscdbhk5;sscdbhk5; C:\WINDOWS\system32\drivers\sscdbhk5.sys [2002-06-19 5589]
          R1 ssrtln;ssrtln; C:\WINDOWS\system32\drivers\ssrtln.sys [2002-06-19 22995]
          R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-04-05 267192]
          R2 drvnddm;drvnddm; C:\WINDOWS\system32\drivers\drvnddm.sys [2002-06-06 40368]
          R2 tfsnboio;tfsnboio; C:\WINDOWS\system32\dla\tfsnboio.sys [2002-07-16 23701]
          R2 tfsncofs;tfsncofs; C:\WINDOWS\system32\dla\tfsncofs.sys [2002-07-16 34805]
          R2 tfsndrct;tfsndrct; C:\WINDOWS\system32\dla\tfsndrct.sys [2002-07-16 4117]
          R2 tfsndres;tfsndres; C:\WINDOWS\system32\dla\tfsndres.sys [2002-07-16 2233]
          R2 tfsnifs;tfsnifs; C:\WINDOWS\system32\dla\tfsnifs.sys [2002-07-16 54900]
          R2 tfsnopio;tfsnopio; C:\WINDOWS\system32\dla\tfsnopio.sys [2002-07-16 14421]
          R2 tfsnpool;tfsnpool; C:\WINDOWS\system32\dla\tfsnpool.sys [2002-07-16 6325]
          R2 tfsnudf;tfsnudf; C:\WINDOWS\system32\dla\tfsnudf.sys [2002-07-16 91156]
          R2 tfsnudfa;tfsnudfa; C:\WINDOWS\system32\dla\tfsnudfa.sys [2002-07-16 95125]
          R3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2002-05-22 69504]
          R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-03-22 95936]
          R3 AR5416;D-Link Xtreme N Service; C:\WINDOWS\system32\DRIVERS\ar5416.sys [2006-09-25 1037088]
          R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
          R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2002-05-22 78045]
          R3 ltmodem5;LT Modem Driver; C:\WINDOWS\System32\DRIVERS\ltmdmnt.sys [2003-03-31 625537]
          R3 mouhid;Pilote HID de souris; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-23 12288]
          R3 MxlW2k;MxlW2k; C:\WINDOWS\system32\drivers\MxlW2k.sys [2002-08-12 28164]
          R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2002-03-08 13780]
          R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\point32.sys [2003-05-15 19072]
          R3 Ps2;PS2; C:\WINDOWS\System32\DRIVERS\PS2.sys [2001-06-04 14112]
          R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-05-07 493896]
          R3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2005-04-05 11512]
          R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
          R3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2005-04-05 173208]
          R3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2005-04-05 36984]
          R3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20090129.001\symidsco.sys []
          R3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2005-04-05 47192]
          R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2005-04-05 17976]
          R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
          R3 usbhub;USB Root Hub (usbport); C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
          R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
          R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2006-07-20 54432]
          S1 AmdK7;Pilote de processeur AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-19 41600]
          S1 intelppm;Pilote de processeur Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2004-08-19 40320]
          S1 P3;Pilote processeur Intel Pentium III; C:\WINDOWS\System32\DRIVERS\p3.sys [2004-08-19 46720]
          S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2004-02-26 51056]
          S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [2004-02-26 16496]
          S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [2004-02-26 21488]
          S3 i81x;i81x; C:\WINDOWS\System32\DRIVERS\i81xnt5.sys [2001-08-08 158140]
          S3 iAimFP0;iAimFP0; C:\WINDOWS\System32\DRIVERS\wADV01nt.sys [2001-08-08 12479]
          S3 iAimFP1;iAimFP1; C:\WINDOWS\System32\DRIVERS\wADV02NT.sys [2001-08-08 12031]
          S3 iAimFP2;iAimFP2; C:\WINDOWS\System32\DRIVERS\wADV05NT.sys [2001-08-08 11679]
          S3 iAimFP3;iAimFP3; C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys [2001-08-08 11999]
          S3 iAimFP4;iAimFP4; C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys [2001-08-08 19359]
          S3 iAimTV0;iAimTV0; C:\WINDOWS\System32\DRIVERS\wATV01nt.sys [2001-08-08 29215]
          S3 iAimTV1;iAimTV1; C:\WINDOWS\System32\DRIVERS\wATV02NT.sys [2001-08-08 19199]
          S3 iAimTV2;iAimTV2; C:\WINDOWS\System32\DRIVERS\wATV03nt.sys []
          S3 iAimTV3;iAimTV3; C:\WINDOWS\System32\DRIVERS\wATV04nt.sys [2001-08-08 33503]
          S3 iAimTV4;iAimTV4; C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys [2001-08-08 23519]
          S3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2002-05-03 931882]
          S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
          S3 S3Psddr;S3Psddr; C:\WINDOWS\System32\DRIVERS\s3gnbm.sys [2002-07-13 155008]
          S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616]
          S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-04 17024]
          S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
          S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-04 15104]
          S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
          S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys []
          S4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-28 12032]

          ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

          S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-19 268800]
          S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
          S4 ACS;Atheros Configuration Service; C:\Program Files\D-Link\D-Link DWA-552 Xtreme N Desktop Adapter\acs.exe [2006-08-25 360532]
          S4 ccEvtMgr;Symantec Event Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe [2005-04-06 255576]
          S4 ccProxy;Symantec Network Proxy; C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe [2005-03-21 218712]
          S4 ccPwdSvc;Symantec Password Validation; C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe [2005-04-06 87640]
          S4 ccSetMgr;Symantec Settings Manager; C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe [2005-04-06 235096]
          S4 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-08-20 138168]
          S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
          S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\System32\nvsvc32.exe [2002-05-03 61440]
          S4 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\HPZipm12.exe [2004-02-26 65795]
          S4 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe [2005-04-05 206552]
          S4 SymWSC;SymWMI Service; C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe [2004-11-02 316544]

          -----------------EOF-----------------
      13. gen-hackman
        pas de suite fais ceci bonjour :

        ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

        ---> Copie (Ctrl+C) le texte suivant ci-dessous :

        :processes
        explorer.exe

        :reg
        [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
        "C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019"
        "C:\Program Files\hp center\137903\Program\BackWeb-137903.exe"="C:\Program Files\hp center\137903\Program\BackWeb-137903.exe:*:Enabled:BackWeb-137903"

        :commands
        [purity]
        [emptytemp]
        [start explorer]
        [reboot]

        ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

        ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

        Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
        Accepte en cliquant sur YES.

        ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
        Le nom du rapport correspond au moment de sa création : date_heure.log
        1. bigjal Auteur
          Voici le rapport Otmoveit3.
          ========== PROCESSES ==========
          Process explorer.exe killed successfully.
          ========== REGISTRY ==========
          HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\"C:\WINDOWS\system32\sessmgr.exe"|"C:\WINDOWS\system32\sessmgr.exe:*:Enabled:@xpsp2res.dll,-22019" /E : value set successfully!
          HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\"C:\Program Files\hp center\137903\Program\BackWeb-137903.exe"|"C:\Program Files\hp center\137903\Program\BackWeb-137903.exe:*:Enabled:BackWeb-137903" /E : value set successfully!
          ========== COMMANDS ==========
          User's Temp folder emptied.
          User's Temporary Internet Files folder emptied.
          User's Internet Explorer cache folder emptied.
          File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
          File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be deleted on reboot.
          File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
          Local Service Temp folder emptied.
          Local Service Temporary Internet Files folder emptied.
          Windows Temp folder emptied.
          Temp folders emptied.
          Explorer started successfully

          OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02162009_073708

          Files moved on Reboot...
          File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
          File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be moved on reboot.
          File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.
      14. gen-hackman
        dans l onglet rapport/logs
        1. bigjal Auteur
          C'est l'ancien rapport qui y est
        2. bigjal Auteur
          Est-ce que tu veux que je redémarre Malwarebyte ?
      15. gen-hackman
        Comment aller en Mode sans échec
        1) Redémarres ton ordi
        2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
        3) Tu verras un écran avec options de démarrage apparaître
        4) Choisis la première option : Sans Échec, et valide avec "Entrée"
        5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
        (attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...)
        1. bigjal Auteur
          J'ai fait un scan complet et il n'y avait aucun fichier et aucun virus et il n'a pas créé de rapport. Est-ce que je peux retrouver le rapport a un autre endroit.
      • 1
      • 2

      Discussions similaires

      FOTOSE (allemagne)
      lix

      13 réponses
      Impossible de charger une page internet sans message d'erreur
      Justine010

      6 réponses
      ATTENTION : escroquerie à la carte bleue !!
      dvrg

      80 réponses