PC qui se bloque au démarrage

Question

Bonjour, 

Hier nous avons voulu allumer notre PC sous Windows Vista et ce dernier a démarré puis lorsqu'il semblait prêt, les icônes ne s'ouvraient pas il restait planté.
On a répété l'opération plusieurs fois sans succès, il a fallut l'éteindre avec la touche de la tour.

Nous avons essayé par la suite de démarrer en mode sans échec et c'est un peu mieux mais au bout de 3/4 manips le problème recommence, on ne peut éteindre l'ordi quand forçant la touche. En démarrant en mode sans échec avec réseau (ou un truc dans le genre ;))) j'ai un accès à internet mais ça ne permet même pas de poster sur un forum, je le fais avec un autre ordi. 

Je suis perdue, j'ai vraiment besoin de votre aide car je ne sais pas comment m'y prendre.

Merci pour vos précieux conseils.

jlpjlp · Answer

slt
teste la température et la ram

https://www.commentcamarche.net/informatique/composants/25371-tester-des-composants-de-pc-les-meilleurs-outils-gratuits/

sinon pour voir si il y a une infection




Télécharge ZHPDiag ( de Nicolas coolman ). 
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html 


(outil de diagnostic) 

Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " ) 

Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista ) 

Clique sur la loupe en haut à gauche, puis laisse l'outil scanner. 

Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau. 

Rend toi sur Cjoint : http://www.cijoint.fr/ 

Clique sur "Parcourir " dans la partie " Joindre un fichier[...] " 

Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau 

Clique ensuite sur "Cliquez ici pour déposer le fichier " et copie/colle le lien dans ton prochain message 

ou sinon pour transmettre ton rapport: 
* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports. 
Donnes le liens pjjoint ici ensuite pour pouvoir être consultés. 


a lire aussi :  https://www.commentcamarche.net/informatique/windows/259-que-faire-quand-windows-ne-demarre-plus/

Alexane · Answer

Merci pour ta réponse, mais je doute d'y arriver car hier toutes applications lancées plantées.
Il y a quelques moi j'avais téléchargé "Malwarebytes' Anti-Malware" et "Rockiller" suite à vos conseils et je ne les avais pas enlevé du bureau, hier j'ai donc voulu lancer ces applications périmées, elles n'ont pas pu aller au bout car ça a planté.

Si je n'arrive pas à lancer ces programmes faute de plantage comment je procède ? 
Nb : j'essayerai ce soir car là je suis au boulot.

Merci de ton aide.

jlpjlp · Answer

pour vérifier les infections passe zhpdiag

si le pc ne laisse pas le temps d'une analyse avec zhpdiag, rogukiller...

il faudra utiliser un livecd antivirus comme indiqué dans le dernier lien de mon premier message

Alexane · Answer

ok je note, enfin j'imprime tout ça, j'espère en savoir un peu plus ce soir !
merci bonne journée et à demain !

Alexane · Answer

question idote mais de novice ;) quand je télécharge les logiciels je démarre en mode sans echec réseau ?

jlpjlp · Answer

en mode normal

si cela marche pas en mode sans echec en prenant le reseau effectivement

Alexane · Answer

Bonjour,

J'ai grave galéré hier puisque l'ordi démarre mais lorsque tous les icônes sont chargés il se bloque.
J'ai donc démarrer en mode sans échec et restauré le système à une date antérieure afin d'essayer de me connecter.
Il est archi long... et d'office c'est mis à lancer un scan complet avec mon antivirus Antivir, pendant le scan, il a "bipé" 2 fois... mais pas de virus à priori.
J'en ai profité pour mettre à jour "Malwarebytes" et au bout de 2h... il s'est bloqué (j'avais choisi analyse complète)... j'étais dégoutée !
Voilà où j'en suis sachant que c'était 1h30 et franchement mon lit m'appelait, j'ai tout éteint !!

Maintenant je n'ai pas procédé comme tu l'indiquais à savoir tester la ram... si l'ordi s'allume ce soir, je commence par quoi ?
Merci de ton aide.

jlpjlp · Answer

commence par tester la temperature et la  ram .

Alexane · Answer

Y'aurait-il quelqu'un pour "traduire" ce rapport et me dier quoi faire ?
D'avance merci !

jlpjlp · Answer

le rapport est incomplet

héberge le comme indiqué

Alexane · Answer

le pb c'est que je n'y arrive pas !

Alexane · Answer

J'ai oublié de préciser que sur www.cijoint.fr la fenêtre s'ouvre mais rien ne se passe elle reste "blanche" et pour l'autre site pjjoint.malekal.com je ne sais pas où l'on colle les rapports.
Je suis désolée mais je crois que c'est vraiment compliqué pour moi !

Alexane · Answer

J'ai le fichier ZHPDiag enregistré sur le bureau dans un bloc note, quand je copie tout le texte je ne sais pas où le coller dans le site pjjoint...
Je viens de voir qu'il y avait dans la rubrique "statistiques" des rapports d'inscrits mais au jour et heure du mien il n'y apparait pas.
As-tu encore de la patience pour m'aider ?

Alexane · Answer

et le rapport de RogueKiller RogueKiller V5.2.3 [16/06/2011] par Tigzy contact sur http://www.sur-la-toile.com mail: tigzyRKgmailcom Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version Demarrage : Mode sans echec avec prise en charge reseau Utilisateur: Familly Menut [Droits d'admin] Mode: Recherche -- Date : 11/11/2011 19:02:07 Processus malicieux: 0 Entrees de registre: 0 Fichier HOSTS: 127.0.0.1 localhost ::1 localhost Termine : << RKreport[3].txt >> RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

Alexane · Answer

un petit up pour jlpjlp si tu es là ou si quelqu'un veut prendre le relais durant son absence, merci ;)

jlpjlp · Answer

roguekiller n'est pas la dernière version de plus cette version est source de plantage : vire la 


zhpdiag est à hébergé sur un site sinon il en manque la moitié et donc je ne peux rien dire ...

Alexane · Answer

Ok je comprends que tu veux que le rapport soit hébergé.
Maintenant comme je te l'ai dis plus haut je voudrai que tu m'expliques comment envoyer le rapport.
J'ai beau regarder les démo, je n'y pige que dalle, en fait j'ai bien le rapport qui s'affiche mais après j'en fais quoi puisque le copier/coller est incomplet ?

jlpjlp · Answer

il faut héberger le fichier sur un site  

comme ceux indiqué, ou archivehost, ...  


si tu n'y arrive pas colle en deux ou trois rapport le fichier zhpdiag


sinon tu as vérifié la ram, le disque dur , la température avec le premier lien donné?

Alexane · Answer

J'essaie de coller en plusieurs fois

Rapport de ZHPDiag v1.28.223 par Nicolas Coolman, Update du 10/11/2011
Run by Familly Menut at 12/11/2011 11:26:04
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html
State : Version à jour.


---\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421 (Defaut)

---\ Windows Product Information
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
Windows Automatic Updates : OK

---\ System Information
~ Processor: x86 Family 15 Model 107 Stepping 2, AuthenticAMD
~ Operating System: 32 Bits
Boot mode: Sans échec avec prise en charge du réseau (Fail-safe with network boot)
Total RAM: 2813 MB (77% free)
System Restore: Activé (Enable)
System drive C: has 99 GB (71%) free of 139 GB

---\ Logged in mode
~ Computer Name: PC-DE-MENUT
~ User Name: Familly Menut
~ All Users Names: Familly Menut, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O82,O89
Logged in as Administrator

---\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Familly Menut\AppData\Roaming\
~ %Desktop% : C:\Users\Familly Menut\Desktop\
~ %Favorites% : C:\Users\Familly Menut\Favorites\
~ %LocalAppData% : C:\Users\Familly Menut\AppData\Local\
~ %StartMenu% : C:\Users\Familly Menut\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\system32\

---\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 99 Go of 139 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 143 Go of 143 Go)
F:\ CD-ROM drive (Not Inserted)
G:\ Floppy drive, Flash card reader, USB Key (Not Inserted)



---\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoDesktop: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowMyComputer: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] WarnOnHTTPSToHTTPRedirect: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services] wscsvc :  OK
~ Scan Security Center in 00mn 00s



---\ Recherche particulière de fichiers génériques
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Explorateur Windows.) (.10/09/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592]
[MD5.4B555106290BD117334E9A08761C035A] - (....) (.02/11/2006 - 10:45:37.) -- C:\Windows\system32undll32.exe [44544]
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:33:13.) -- C:\Windows\system32\Wininit.exe [96768]
[MD5.D3788D91530CFA005BD516189A4C676E] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.13/10/2011 - 03:28:15.) -- C:\Windows\system32\wininet.dll [1126912]
[MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.10/09/2009 - 07:28:13.) -- C:\Windows\system32\Winlogon.exe [314368]
[MD5.95F5FF73B076576C41740F1A842B9B57] - (....) (.21/01/2008 - 08:20:47.) -- C:\Windows\system32\fr-FR\user32.dll.mui [20480]
[MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.15/06/2011 - 14:58:27.) -- C:\Windows\system32\drivers\AFD.sys [273408]
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.10/09/2009 - 07:32:26.) -- C:\Windows\system32\drivers\atapi.sys [19944]
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:33:23.) -- C:\Windows\system32\drivers\Cdfs.sys [70144]
[MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.10/09/2009 - 05:39:17.) -- C:\Windows\system32\drivers\Cdrom.sys [67072]
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.15/06/2011 - 15:59:03.) -- C:\Windows\system32\drivers\DfsC.sys [75264]
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.10/09/2009 - 05:42:42.) -- C:\Windows\system32\drivers\HDAudBus.sys [561152]
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:32:45.) -- C:\Windows\system32\drivers\i8042prt.sys [54784]
[MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:34:06.) -- C:\Windows\system32\drivers\IpNat.sys [100864]
[MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/06/2011 - 14:24:40.) -- C:\Windows\system32\drivers\MRxSmb.sys [106496]
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.10/09/2009 - 05:45:37.) -- C:\Windows\system32\drivers
etBT.sys [185856]
[MD5.6A4A98CEE84CF9E99564510DDA4BAA47] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.10/09/2009 - 07:32:49.) -- C:\Windows\system32\drivers
tfs.sys [1083880]
[MD5.0FA9B5055484649D63C303FE404E5F4D] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 09:51:30.) -- C:\Windows\system32\drivers\Parport.sys [79360]
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/01/2008 - 03:34:44.) -- C:\Windows\system32\drivers\Rasl2tp.sys [76288]
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.21/01/2008 - 03:32:22.) -- C:\Windows\system32\driversdpdr.sys [248832]
[MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.10/09/2009 - 05:45:22.) -- C:\Windows\system32\drivers\smb.sys [66560]
[MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.10/09/2009 - 05:45:56.) -- C:\Windows\system32\drivers	dx.sys [72192]
~ Scan Generic Processes in 00mn 00s

Alexane · Answer

---\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 199/5778
~ Mes musiques (My Musics) : 3/12
~ Mes Videos (My Videos) : 1/6
~ Mes Favoris (My Favorites) : 2/115
~ Mes Documents (My Documents) : 1/155
~ Mon Bureau (My Desktop) : 1/5
~ Menu demarrer (Programs) : 6/31
~ Scan Hidden Files in 00mn 08s



---\ Processus lancés
[MD5.904E13BA41AF2E353A32CF351CA53639] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\internet explorer\iexplore.exe   [748336] [PID.1956]
[MD5.CD0204AA98E03B936704CA6E30BC6897] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe   [2183168] [PID.744]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe   [69120] [PID.1108]
~ Scan Processes Running in 00mn 00s



---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Familly Menut\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.google.com
~ Scan Google Browser in 00mn 00s



---\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (...) -- C:\Program Files\iTunes\Mozilla Plugins
pitunes.dll
P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc. - DivX Web Player version 1.4.3.4.) -- C:\Program Files\DivX\DivX Web Player
pdivx32.dll
P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc - npdivxplayerplugin.) -- C:\Program Files\DivX\DivX Player
pDivxPlayerPlugin.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_29 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin
ew_plugin
pjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 4.0.60831.0.) -- C:\Program Files\Microsoft Silverlight\4.0.60831.0
pctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeLive,version=1.3] - (.Microsoft Corp. - Office Live Update v1.3.) -- C:\Program Files\Microsoft\Office Live
pOLW.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3502.0922] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=15.4.3508.1109] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79
pGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.21.79
pGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 00s



---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sfr.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} . (.Ask - Ask Toolbar.) (5.13.1.18107) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)) -- C:\Windows\system32\ieframe.dll
~ Scan IE Browser in 00mn 00s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Scan Keys in 00mn 00s



---\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2322.0
pwinext.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
~ Scan BHO in 00mn 00s



---\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.Egis Incorporated. - Acer eDataSecurity Management Explorer Tool.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll
O3 - Toolbar: @C:\Program Files\MSN Toolbar\Platform\6.3.2322.0
pwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} . (.Microsoft Corporation - Bing Bar.) -- C:\Program Files\MSN Toolbar\Platform\6.3.2322.0
pwinext.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
~ Scan Toolbar in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe 
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe 
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] . (...) -- C:\Program Files\Acer\Empowering Technology\SysMonitor.exe 
O4 - HKLM\..\Run: [EmpoweringTechnology] . (.Pas de propriétaire - Acer Empowering Technology Framework Launch.) -- C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe 
O4 - HKLM\..\Run: [eDataSecurity Loader] . (.Egis Incorporated - Acer eDataSecurity Management Loader.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe 
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe 
O4 - HKLM\..\Run: [RemoteControl] . (.Cyberlink Corp. - PowerDVD RC Service.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe 
O4 - HKLM\..\Run: [LanguageShortcut] . (.Pas de propriétaire - Language Application.) -- C:\Program Files\CyberLink\PowerDVD\Language\Language.exe 
O4 - HKLM\..\Run: [BkupTray] . (.Pas de propriétaire - NTI Backup Now 5 Tray Module.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe 
O4 - HKLM\..\Run: [NvCplDaemon] . (.NVIDIA Corporation - NVIDIA Display Properties Extension.) -- C:\Windows\system32\NvCpl.dll 
O4 - HKLM\..\Run: [NvMediaCenter] . (.NVIDIA Corporation - NVIDIA Media Center Library.) -- C:\Windows\system32\NvMcTray.dll 
O4 - HKLM\..\Run: [WarReg_PopUp] . (.Acer Incorporated - WR_PopUp.) -- C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe 
O4 - HKLM\..\Run: [Google Desktop Search] . (.Google - Google Desktop.) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
O4 - HKLM\..\Run: [HP Software Update] . (.Hewlett-Packard Co. - Hewlett-Packard Product Assistant.) -- C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
O4 - HKLM\..\Run: [avgnt] . (.Avira GmbH - Antivirus System Tray Tool.) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 
O4 - HKLM\..\Run: [Skytel] . (.Realtek Semiconductor Corp. - Realtek Voice  Manager.) -- C:\Windows\Skytel.exe 
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe 
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe 
O4 - HKLM\..\Run: [ApnUpdater] . (.Ask - Ask Updater.) -- C:\Program Files\Ask.com\Updater\Updater.exe 
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe 
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
O4 - HKUS\S-1-5-21-354416556-2475112062-1044191986-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe 
O4 - HKUS\S-1-5-21-354416556-2475112062-1044191986-1000\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe 
O4 - HKUS\S-1-5-21-354416556-2475112062-1044191986-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\WMPNSCFG.exe 
~ Scan Application in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Familly Menut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Familly Menut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Mail\WinMail.exe
O4 - Global Startup: C:\Users\Familly Menut\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Global Startup: C:\Users\Familly Menut\Desktop\Cyberlink PowerDirector.lnk . (.CyberLink Corp..)  -- C:\Program Files\Cyberlink\PowerDirector\PDR.exe
O4 - Global Startup: C:\Users\Familly Menut\Desktop\DivX Movies.lnk . (...)  -- C:\Users\Familly Menut\Videos\DivX Movies
O4 - Global Startup: C:\Users\Familly Menut\Desktop\freeDoc.lnk . (.Tessier & Ashpool.)  -- C:\Program Files\freeDoc\freeDoc.exe
O4 - Global Startup: C:\Users\Familly Menut\Desktop\PLC Configuration Utility-85M.lnk . (...)  -- C:\Program Files\PLC\PLC_Device_85M\PLSetUp.exe
O4 - Global Startup: C:\Users\Familly Menut\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Familly Menut\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.)  -- C:\Program Files\Windows Media Player\wmplayer.exe
~ Scan Global Startup in 00mn 00s



---\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: E&xporter vers Microsoft Excel . (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.exe
O8 - Extra context menu item: Google Sidewiki... . (.Google Inc. - Google Toolbar for Internet Explorer.) -- C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll
~ Scan IE Menu Contextuel in 00mn 00s



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} . (.Microsoft Corporation - Windows Live Writer Blog This Extension.) -- C:\Program Files\Windows Live\Writer\WriterBro
O9 - Extra button: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft Office OneNote Internet Explorer Add-in.) -- C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: &Envoyer à OneNote - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO
~ Scan IE Extra Buttons in 00mn 00s



---\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32
apinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll
~ Scan Winsock in 00mn 00s



---\ Objets ActiveX (Downloaded Program Files)(O16)
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
~ Scan Objets ActiveX in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{ECF751A8-F9C3-4A3B-9C7F-0FEEDE515AFB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{ECF751A8-F9C3-4A3B-9C7F-0FEEDE515AFB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{ECF751A8-F9C3-4A3B-9C7F-0FEEDE515AFB}: DhcpNameServer = 192.168.1.1
~ Scan Domain in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\system32\mscoree.dll
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
~ Scan Protocole Additionnel in 00mn 00s



---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Google - Google Desktop.) - C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.dll
~ Scan AppInit DLL in 00mn 00s



---\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll
~ Scan SSODL in 00mn 00s



---\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll
~ Scan STS/SSO in 00mn 00s



---\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) . (.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: eDataSecurity Service (eDataSecurity Service) . (.Egis Incorporated - Acer eDataSecurity Management Service.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: Empowering Technology Service (ETService) . (.Pas de propriétaire - Acer Empowering Technology Framework Servic.) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) (ForceWare Intelligent Application Manager (IAM)) . (.Pas de propriétaire - app_filter Module.) - C:\Program Files\bin32
SvcAppFlt.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service:  (MBAMService) . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: ForceWare IP service (nSvcIp) . (.Pas de propriétaire - NVIDIA Corporation.) - C:\Program Files\bin32
SvcIp.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) . (.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.1.) - C:\Windows\system32
vvsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
~ Scan Services in 00mn 00s



---\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ Scan Keys in 00mn 00s



---\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
~ Scan Scheduled Task in 00mn 00s



---\ Pilotes lancés au démarrage (O41)
O41 - Driver:  (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys
O41 - Driver:  (avipbb) . (.Avira GmbH - Avira Driver for Security Enhancement.) - C:\Windows\system32\DRIVERS\avipbb.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\system32\Drivers\dfsc.sys
O41 - Driver:  (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\system32\DRIVERS\i8042prt.sys
O41 - Driver:  (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\system32\DRIVERS\kbdclass.sys
O41 - Driver:  (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\system32\DRIVERS\kbdhid.sys
O41 - Driver:  (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\system32\DRIVERS\mouclass.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\system32\DRIVERS
etbios.sys
O41 - Driver:  (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\system32\DRIVERS
etbt.sys
O41 - Driver:  (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\system32\drivers
siproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver:  (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\system32\DRIVERSasacd.sys
O41 - Driver:  (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\system32\DRIVERSdbss.sys
O41 - Driver:  (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\DRIVERS\RDPCDD.sys
O41 - Driver:  (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\system32\driversdpencdd.sys
O41 - Driver: C:\Windows\system32	cpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\system32\DRIVERS\smb.sys
O41 - Driver:  (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\system32\DRIVERS\ssmdrv.sys
O41 - Driver: C:\Windows\system32	cpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS	dx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\system32\DRIVERS	ermdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0 (ws2ifsl) . (.Microsoft Corporation - Winsock2 IFS Layer.) - C:\Windows\system32\drivers\ws2ifsl.sys
~ Scan Drivers in 00mn 00s



---\ Logiciels installés (O42)
O42 - Logiciel: 32 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM] -- {A80FA752-C491-4ED9-ABF0-4278563160B2}
O42 - Logiciel: AV Input Selection - (.YUAN.) [HKLM] -- {F429ED71-4A8B-457A-85E4-F6398CE73E58}
O42 - Logiciel: Acer DVDivine - (.Acer Inc..) [HKLM] -- {B145EC69-66F5-11D8-9D75-000129760D75}
O42 - Logiciel: Acer Empowering Technology - (.Acer Incorporated.) [HKLM] -- {8F1B6239-FEA0-450A-A950-B05276CE177C}
O42 - Logiciel: Acer GameZone Console DTV 2.0.1.1 - (.Oberon Media, Inc..) [HKLM] -- Acer GameZone Console_is1
O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}
O42 - Logiciel: Acer eDataSecurity Management - (.Egis Inc..) [HKLM] -- {A5633652-3795-4829-BB0B-644F0279E279}
O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites - (.Microsoft Corporation.) [HKLM] -- Activation Assistant for the 2007 Microsoft Office suites
O42 - Logiciel: Adobe Flash Player 11 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Photoshop Elements 2.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Photoshop Elements 2.0
O42 - Logiciel: Adobe Reader 8.1.0 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A81000000003}
O42 - Logiciel: Agatha Christie Death on the Nile - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112615863}
O42 - Logiciel: Alice Greenfingers - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {6A3F9D74-BB80-4451-8CA1-4B3A857F1359}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM] -- {C23CD6DA-1958-43A5-ADD0-59396572E02E}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop
O42 - Logiciel: Azada - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113080210}
O42 - Logiciel: Barre d'outils Bing - (.Microsoft Corporation.) [HKLM] -- {08234a0d-cf39-4dca-99f0-0c5cb496da81}
O42 - Logiciel: Big Kahuna Reef - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110322783}
O42 - Logiciel: Bing Bar Platform - (.Microsoft Corporation.) [HKLM] -- {65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {D03482C5-9AD8-496D-B388-692AE04C93AF}
O42 - Logiciel: Bricks of Egypt - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11029123}
O42 - Logiciel: Cake Mania - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}
O42 - Logiciel: Chicken Invaders 3 - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112531267}
O42 - Logiciel: Chuzzle - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110411970}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: Diner Dash Flo on the Go - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111872660}
O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM] -- {7B63B2922B174135AFC0E1377DD81EC2}
O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM] -- {B13A7C41581B411290FBC0395694E2A9}
O42 - Logiciel: DivX Player - (.DivX, Inc..) [HKLM] -- {8ADFC4160D694100B5B8A22DE9DCABD9}
O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM] -- DivX Plus DirectShow Filters
O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM] -- {B7050CBDB2504B34BC2A9CA0A692CC29}
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {488F0347-C4A7-4374-91A7-30818BEDA710}
O42 - Logiciel: Google Desktop - (.Google.) [HKLM] -- Google Desktop
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {18455581-E099-4BA8-BC6B-F34B2F06600C}
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Customer Participation Program 8.0 - (.HP.) [HKLM] -- HPExtendedCapabilities
O42 - Logiciel: HP Imaging Device Functions 8.0 - (.HP.) [HKLM] -- HP Imaging Device Functions
O42 - Logiciel: HP OCR Software 8.0 - (.HP.) [HKLM] -- HPOCR
O42 - Logiciel: HP Photosmart All-In-One Software 8.0 - (.HP.) [HKLM] -- {8641C1CB-03B3-41d4-8DEC-79826A4B5C0E}
O42 - Logiciel: HP Photosmart Essential - (.HP.) [HKLM] -- {EB21A812-671B-4D08-B974-2A347F0D8F70}
O42 - Logiciel: HP Product Assistant - (.Hewlett-Packard.) [HKLM] -- {36FDBE6E-6684-462B-AE98-9A39A1B200CC}
O42 - Logiciel: HP Solution Center 8.0 - (.HP.) [HKLM] -- HP Solution Center & Imaging Support Tools
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM] -- {2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}
O42 - Logiciel: HPSSupply - (.Nom de votre société.) [HKLM] -- {EB75DE50-5754-4F6F-875D-126EDF8E4CB3}
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595
O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484
O42 - Logiciel: Java(TM) 6 Update 29 - (.Oracle.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216026FF}
O42 - Logiciel: Jewel Quest Solitaire - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111771833}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: Kick N Rush - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111324990}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Mahjong Escape Ancient China - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}
O42 - Logiciel: Mahjongg Artifacts - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111692950}
O42 - Logiciel: Malwarebytes' Anti-Malware version 1.51.2.1300 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1
O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - fra - (.Microsoft Corporation.) [HKLM] -- {3E31821C-7917-367E-938E-E65FC413EA31}
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1
O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}
O42 - Logiciel: Microsoft .NET Framework 4 Client Profile FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
O42 - Logiciel: Microsoft Office 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office File Validation Add-In - (.Microsoft Corporation.) [HKLM] -- {90140000-2005-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- HOMESTUDENTR
O42 - Logiciel: Microsoft Office Home and Student 2007 - (.Microsoft Corporation.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Live Add-in 1.3 - (.Microsoft Corporation.) [HKLM] -- {57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
O42 - Logiciel: Microsoft Office OneNote MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-00A1-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{14809F99-C601-4D4A-9391-F1E8FAA964C5}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
O42 - Logiciel: Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) - (.Microsoft.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Publisher 98 - (.Pas de propriétaire.) [HKLM] -- MSPUB5
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C}
O42 - Logiciel: Module linguistique Microsoft .NET Framework 3.5 SP1- fra - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 Language Pack SP1 - fra
O42 - Logiciel: Module linguistique Microsoft .NET Framework 4 Client Profile FRA - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 4 Client Profile FRA Language Pack
O42 - Logiciel: Mystery Case Files - Huntsville - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111118433}
O42 - Logiciel: Mystery Solitaire - Secret Island - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111796363}
O42 - Logiciel: NTI Backup Now 5 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}
O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}
O42 - Logiciel: NVIDIA Drivers - (.Pas de propriétaire.) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- {7CFA46E3-CC2F-4355-82AE-6012DC3633FD}
O42 - Logiciel: PLC Configuration Utility-85M - (.***IS_STRING_NOT_DEFINED***.) [HKLM] -- {365172F8-9A61-483A-B7CD-820C19BF4528}
O42 - Logiciel: PhotoNow! - (.CyberLink Corp..) [HKLM] -- {D36DD326-7280-11D8-97C8-000129760CBE}
O42 - Logiciel: PowerDVD 7.0 with 5.1ch - (.CyberLink Corporation.) [HKLM] -- {6811CAA0-BF12-11D4-9EA1-0050BAE317E1}
O42 - Logiciel: PowerDirector (Acer DT) - (.CyberLink Corp..) [HKLM] -- InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}
O42 - Logiciel: QuickTime - (.Apple Inc..) [HKLM] -- {C9E14402-3631-4182-B377-6B0DFB1C0339}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288621) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5C497F0B-2061-4CC9-A61C-6B45B867354D}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2288931) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CD769337-C8AC-46DB-A7DC-643E50089263}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2345043) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{536FB502-775F-4494-BACE-C02CC90B7A5B}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553074) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{5729F1AE-5895-468F-9165-BAD161C9E982}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553089) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{01D4CA59-7070-4420-9BCC-0EFA7C5D76BE}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2553090) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{643C12A2-AF9A-4712-B8BE-3B7650AFE00A}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB2584063) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{BF3F1CBD-B05C-4644-AE43-6EE0FCC227A4}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB969559) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB976321) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7F207DCA-3399-40CB-A968-6E5991B1421A}
O42 - Logiciel: Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2446708
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2478663
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2518870
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2539636
O42 - Logiciel: Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2572078
O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB2553073) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{65EA4836-B5A3-4C1D-8883-0C35E471003A}
O42 - Logiciel: Security Update for Microsoft Office InfoPath 2007 (KB979441) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB2535818) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{8588DD11-6BD7-4400-B55C-DD5AB74B43E1}
O42 - Logiciel: Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{D75E6D0C-BADF-4F41-98B2-0C0F02C15062}
O42 - Logiciel: Security Update for Microsoft Office Visio Viewer 2007 (KB973709) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB2344993) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{7A5B74FA-7A92-4FC9-821A-2DD5D4E73E48}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (972581) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}
O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB974234) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{FCD742B9-7A55-44BC-A776-F795F21FEDDC}
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2478663) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2478663
O42 - Logiciel: Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870) - (.Microsoft Corporation.) [HKLM] -- {0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}.KB2518870
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}
O42 - Logiciel: TV sur PC - (.SFR.) [HKLM] -- Neuf_TV_PC
O42 - Logiciel: Turbo Pizza - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113009953}
O42 - Logiciel: Update for 2007 Microsoft Office System (KB967642) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}
O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2468871) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871
O42 - Logiciel: Update for Microsoft .NET Framework 4 Client Profile (KB2533523) - (.Microsoft Corporation.) [HKLM] -- {3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523
O42 - Logiciel: Update for Microsoft Office 2007 (KB2508958) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
O42 - Logiciel: Update for Microsoft Office 2007 System (KB2539530) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B4CEEAE-AA88-490C-BCB2-AAC3421981A4}
O42 - Logiciel: Update for Microsoft Office OneNote 2007 (KB980729) - (.Microsoft.) [HKLM] -- {91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{329050A9-EF80-40F9-B633-74508F54C1FF}
O42 - Logiciel: Utilitaire de configuration iPhone - (.Apple Inc..) [HKLM] -- {FA54AFB1-5745-4389-B8C1-9F7509672ED1}
O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 - (.DivX, Inc.) [HKLM] -- {767CC44C-9BBC-438D-BAD3-FD4595DD148B}
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite
O42 - Logiciel: Windows Live - (.Microsoft Corporation.) [HKLM] -- {34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {D45240D3-B6B3-4FF9-B243-54ECE3E10066}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {F53D678E-238F-4A71-9742-08BB6774E9DC}
O42 - Logiciel: Windows Live Family Safety - (.Microsoft Corporation.) [HKLM] -- {FCFBA290-CB48-4AF1-A241-2685AEDEDD66}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {76810709-A7D3-468D-9167-A1780C1E766C}
O42 - Logiciel: Windows Live ID Sign-in Assistant - (.Microsoft Corporation.) [HKLM] -- {61AD15B2-50DB-4686-A739-14FE180D4429}
O42 - Logiciel: Windows Live Installer - (.Microsoft Corporation.) [HKLM] -- {0B0F231F-CE6A-483D-AA23-77B364F75917}
O42 - Logiciel: Windows Live MIME IFilter - (.Microsoft Corporation.) [HKLM] -- {AF844339-2F8A-4593-81B3-9F4C54038C4E}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9D56775A-93F3-44A3-8092-840E3826DE30}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {9FAE6E8D-E686-49F5-A574-0A58DFD9580C}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {6057E21C-ABE9-4059-AE3E-3BEB9925E660}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {EB4DF488-AAEF-406F-A341-CB2AAA315B90}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {92EA4134-10D1-418A-91E1-5A0453131A38}
O42 - Logiciel: Windows Live PIMT Platform - (.Microsoft Corporation.) [HKLM] -- {4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {A9BDCA6B-3653-467B-AC83-94367DA3BFE3}
O42 - Logiciel: Windows Live Photo Common - (.Microsoft Corporation.) [HKLM] -- {C893D8C0-1BA0-4517-B11C-E89B65E72F70}
O42 - Logiciel: Windows Live Photo Gallery - (.Microsoft Corporation.) [HKLM] -- {3336F667-9049-4D46-98B6-4C743EEBC5B1}
O42 - Logiciel: Windows Live SOXE - (.Microsoft Corporation.) [HKLM] -- {682B3E4F-696A-42DE-A41C-4C07EA1678B4}
O42 - Logiciel: Windows Live SOXE Definitions - (.Microsoft Corporation.) [HKLM] -- {200FEC62-3C34-4D60-9CE8-EC372E01C08F}
O42 - Logiciel: Windows Live UX Platform - (.Microsoft Corporation.) [HKLM] -- {CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}
O42 - Logiciel: Windows Live UX Platform Language Pack - (.Microsoft Corporation.) [HKLM] -- {09F56A49-A7B1-4AAB-95B9-D13094254AD1}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {3B9A92DA-6374-4872-B646-253F18624D5F}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {A726AE06-AAA3-43D1-87E3-70F510314F04}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {AAAFC670-569B-4A2F-82B4-42945E0DE3EF}
O42 - Logiciel: Windows Live Writer Resources - (.Microsoft Corporation.) [HKLM] -- {62687B11-58B5-4A18-9BC3-9DF4CE03F194}
O42 - Logiciel: Zuma Deluxe - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110111700}
O42 - Logiciel: eSobi v2 - (.esobi Inc..) [HKLM] -- InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}
O42 - Logiciel: freeDoc version 6.72 - (.Tessier & Ashpool.) [HKLM] -- freeDoc_is1
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM] -- {69995C7A-062A-4A90-A4DF-8C22895DF522}

Alexane · Answer

---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.F69641EFDB19ACB4753B0155F7FDEED5] - 12/11/2011 - 10:40:56 ---A- . (...) -- C:\Windows\system32\drivers\TrueSight.sys [111872] O44 - LFC:[MD5.6EA416C2E277844E0B7957C8CB633404] - 12/11/2011 - 10:16:13 ---A- . (...) -- C:\Windows\system32\PerfStringBackup.INI [1495948] O44 - LFC:[MD5.C432E8179A3CB4D19FE07A8A94B355A2] - 12/11/2011 - 10:16:13 ---A- . (...) -- C:\Windows\system32\perfc009.dat [103460] O44 - LFC:[MD5.2CEEE23D404395A80AF1D8B72F8A3D9B] - 12/11/2011 - 10:16:13 ---A- . (...) -- C:\Windows\system32\perfc00C.dat [126042] O44 - LFC:[MD5.954D43C9168B2E49C0A357EDC6FEA03F] - 12/11/2011 - 10:16:13 ---A- . (...) -- C:\Windows\system32\perfh009.dat [595386] O44 - LFC:[MD5.64C55618B352385072F1FEA367253864] - 12/11/2011 - 10:16:13 ---A- . (...) -- C:\Windows\system32\perfh00C.dat [678056] O44 - LFC:[MD5.E8E7F526F1075F66D897F06FA80D1686] - 12/11/2011 - 09:58:42 ---A- . (...) -- C:\Windows tbtlog.txt [1312766] O44 - LFC:[MD5.E59B29B5725A84E929DFD4B586951203] - 12/11/2011 - 09:58:21 -S-A- . (...) -- C:\Windows\bootstat.dat [67584] O44 - LFC:[MD5.CEAF98D916D2B75B8704BEE7680EE0B5] - 12/11/2011 - 09:56:22 ---A- . (...) -- C:\Windows\system32\agent.log [0] O44 - LFC:[MD5.852DD0907849FFD6B1CCB09AF4FE2B45] - 12/11/2011 - 09:56:15 --HA- . (...) -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [3216] O44 - LFC:[MD5.852DD0907849FFD6B1CCB09AF4FE2B45] - 12/11/2011 - 09:56:15 --HA- . (...) -- C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [3216] O44 - LFC:[MD5.DE34D00D8934B0EA6BD787534ED3D591] - 11/11/2011 - 18:09:00 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.22D9AB2E9452C9D13AC8E9E78F6986AE] - 11/11/2011 - 12:24:02 ---A- . (...) -- C:\Windows\PFRO.log [5432128] O44 - LFC:[MD5.49D08DC1FB4E9A70158A48FE96C5B1AF] - 10/11/2011 - 19:27:21 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1432714] O44 - LFC:[MD5.9D1379B60113E70C75592B02538E84D6] - 23/10/2011 - 17:13:27 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\java.exe [145184] O44 - LFC:[MD5.9225A1067BC2858575B9787BB3ECC4FD] - 23/10/2011 - 17:13:27 ---A- . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Windows\system32\javaw.exe [145184] O44 - LFC:[MD5.AFBF77A659ABEA37EBE3994656970CF2] - 23/10/2011 - 17:13:27 ---A- . (.Sun Microsystems, Inc. - Java(TM) Web Start Launcher.) -- C:\Windows\system32\javaws.exe [157472] O44 - LFC:[MD5.D248D0DB24D9E01AA7F2E42A9758E8C0] - 23/10/2011 - 17:13:19 ---A- . (...) -- C:\Windows\system32\jupdate-1.6.0_29-b11.log [3075] O44 - LFC:[MD5.2C536D41DCE213E1D449F18B3D41EA55] - 16/10/2011 - 17:43:56 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\system32\FlashPlayerCPLApp.cpl [414368] ~ Scan Files in 00mn 05s ---\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\system32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l'Éditeur de configuration de sécurité Windows.) -- C:\Windows\system32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\system32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\system32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\system32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\system32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\system32 spkg.dll ~ Scan Keys in 00mn 00s ---\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\system32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network siproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\system32\Drivers siproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network dpencdd.sys . (.Microsoft Corporation - RDP Miniport.) -- C:\Windows\system32\Drivers dpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\system32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\system32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\system32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\system32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Volume Manager Extension Driver.) -- C:\Windows\system32\Drivers\volmgrx.sys ~ Scan CSB in 00mn 00s ---\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\system32\iccvid.dll O52 - TDSD: \Drivers32\"vidc.DIVX"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\system32\DivX.dll O52 - TDSD: \Drivers32\"vidc.yv12"="DivX.dll" . (.DivX, Inc. - DivX.) -- C:\Windows\system32\DivX.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"DivX.dll"="DivX 6.8.5 Codec" . (...) -- (.not file.) ~ Scan Keys in 00mn 00s ---\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll ~ Scan Keys in 00mn 00s ---\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 ~ Scan Keys in 00mn 00s ---\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "BindDirectlyToPropertySetStorage"=0 ~ Scan Keys in 00mn 00s ---\ Liste des Drivers Système (O58) O58 - SDL:[MD5.04F0FCAC69C7C71A3AC4EB97FAFC8303] - 21/01/2008 - 03:32:46 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422968] O58 - SDL:[MD5.60505E0041F7751BDBB80F88BF45C2CE] - 21/01/2008 - 03:32:51 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [300600] O58 - SDL:[MD5.8A42779B02AEC986EAB64ECFC98F8BD7] - 21/01/2008 - 03:32:52 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [101432] O58 - SDL:[MD5.241C9E37F8CE45EF51C3DE27515CA4E5] - 21/01/2008 - 03:32:53 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [149560] O58 - SDL:[MD5.9EAEF5FC9B8E351AFA7E78A6FAE91F91] - 21/01/2008 - 03:32:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [17464] O58 - SDL:[MD5.5D2888182FB46632511ACEE92FDAD522] - 21/01/2008 - 03:32:49 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [79416] O58 - SDL:[MD5.5E2A321BD7C8B3624E41FDEC3E244945] - 21/01/2008 - 03:32:50 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [79928] O58 - SDL:[MD5.1E4114685DE1FFA9675E09C6A1FB3F4B] - 29/06/2009 - 18:10:39 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [66616] O58 - SDL:[MD5.0F78D3DAE6DEDD99AE54C9491C62ADF2] - 29/06/2009 - 18:10:39 ---A- . (.Avira GmbH - Avira Driver for Security Enhancement.) -- C:\Windows\system32\drivers\avipbb.sys [138192] O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568] O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248] O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808] O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336] O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160] O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904] O58 - SDL:[MD5.0CA25E686A4928484E9FDABD168AB629] - 21/01/2008 - 03:32:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [19000] O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272] O58 - SDL:[MD5.5425F74AC0C1DBD96A1E04F17D63F94C] - 21/01/2008 - 03:32:50 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel(R) PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [118784] O58 - SDL:[MD5.23B62471681A124889978F6295B3F4C6] - 21/01/2008 - 03:32:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [342584] O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 21/09/2009 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\system32\drivers\GEARAspiWDM.sys [26600] O58 - SDL:[MD5.16EE7B23A009E00D835CDB79574A91A6] - 21/01/2008 - 03:32:52 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [40504] O58 - SDL:[MD5.54155EA1B0DF185878E0FC9EC3AC3A14] - 21/01/2008 - 03:32:49 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [235064] O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576] O58 - SDL:[MD5.58FF11C95C3681C9250914521CB9F036] - 12/05/2008 - 17:12:04 ---A- . (.Acer, Inc. - int15.) -- C:\Windows\system32\drivers\int15.sys [12832] O58 - SDL:[MD5.8C7FA71CB1EBCD3EDE8958D27B1BF0B4] - 12/05/2008 - 12:23:40 ---A- . (.Acer, Inc. - int15.) -- C:\Windows\system32\drivers\int15_64.sys [17952] O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944] O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944] O58 - SDL:[MD5.C7E15E82879BF3235B559563D4185365] - 21/01/2008 - 03:32:49 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [96312] O58 - SDL:[MD5.EE01EBAE8C9BF0FA072E0FF68718920A] - 21/01/2008 - 03:32:51 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89656] O58 - SDL:[MD5.912A04696E9CA30146A62AFA1463DD5C] - 21/01/2008 - 03:32:48 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96312] O58 - SDL:[MD5.69A6268D7F81E53D568AB4E7E991CAF3] - 18/06/2011 - 17:00:50 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [22216] O58 - SDL:[MD5.0001CE609D66632FA17B84705F658879] - 21/01/2008 - 03:32:53 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [31288] O58 - SDL:[MD5.C252F32CD9A49DBFC25ECF26EBD51A99] - 21/01/2008 - 03:32:52 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [386616] O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384] O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers frd960.sys [45160] O58 - SDL:[MD5.2757D2BA59AEE155209E24942AB127C9] - 10/10/2006 - 10:52:06 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [14848] O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers trigdigi.sys [20608] O58 - SDL:[MD5.F972DC046C374A9E02F2DFBE74EBB203] - 12/05/2008 - 01:49:00 ---A- . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\system32\drivers vhda32v.sys [43552] O58 - SDL:[MD5.35B7985D727974C7F6046B215EE01048] - 12/05/2008 - 01:49:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode Driver, Version 175.) -- C:\Windows\system32\drivers vlddmkm.sys [7451040] O58 - SDL:[MD5.AE78A7285DF03A277415FC62F8CE8F24] - 12/05/2008 - 06:55:00 ---A- . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\system32\drivers vmfdx32.sys [1042464] O58 - SDL:[MD5.2EDF9E7751554B42CBB60116DE727101] - 21/01/2008 - 03:32:47 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers vraid.sys [102968] O58 - SDL:[MD5.C44EE36DD84FA95EB81D79C374756003] - 12/05/2008 - 09:53:10 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) SMU Microcontroller Driver.) -- C:\Windows\system32\drivers vsmu.sys [13312] O58 - SDL:[MD5.ABED0C09758D1D97DB0042DBB2688177] - 21/01/2008 - 03:32:47 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers vstor.sys [45112] O58 - SDL:[MD5.FA7B8ECA6E845B244B7E30A9DCD82C6C] - 12/05/2008 - 13:02:02 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers vstor32.sys [140832] O58 - SDL:[MD5.AB94285FF6C6BC5433407D8D182A4BB4] - 12/05/2008 - 22:38:42 ---A- . (.Egis Incorporated - Acer eDataSecurity Management PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [18992] O58 - SDL:[MD5.2AAF9A5D7A63D26BFAEA853C5F2292BC] - 12/05/2008 - 22:38:44 ---A- . (.Egis Incorporated - Acer eDataSecurity Management PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [16944] O58 - SDL:[MD5.0EB8CEC99855BEAE5B0D02C2302619EF] - 12/05/2008 - 22:38:44 ---A- . (.Egis Incorporated - Acer eDataSecurity Management PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\PSDVdisk.sys [60464] O58 - SDL:[MD5.0A6DB55AFB7820C99AA1F3A1D270F4F6] - 21/01/2008 - 03:32:50 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1122360] O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088] O58 - SDL:[MD5.4C01298060CF930D26A75A86B874B6AE] - 12/05/2008 - 11:35:54 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [2103512] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.A99C6C8B0BAA970D8AA59DDC50B57F94] - 21/01/2008 - 03:32:52 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [74808] O58 - SDL:[MD5.A36EE93698802CD899F98BFD553D8185] - 29/06/2009 - 15:28:02 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [28520] O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944] O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848] O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920] O58 - SDL:[MD5.F69641EFDB19ACB4753B0155F7FDEED5] - 11/11/2011 - 10:40:56 ---A- . (...) -- C:\Windows\system32\drivers\TrueSight.sys [111872] O58 - SDL:[MD5.F763E070843EE2803DE1395002B42938] - 10/10/2006 - 10:51:50 ---A- . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\system32\drivers\UBHelper.sys [13824] O58 - SDL:[MD5.9224BB254F591DE4CA8D572A5F0D635C] - 21/01/2008 - 03:32:45 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [238648] O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408] O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 21/01/2008 - 03:32:49 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816] O58 - SDL:[MD5.AADF5587A4063F52C2C3FED7887426FC] - 21/01/2008 - 03:32:21 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [20024] O58 - SDL:[MD5.587253E09325E6BF226B299774B728A9] - 21/01/2008 - 03:32:49 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [130616] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (...) -- C:\Windows\system32\ANSI.SYS [9029] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (...) -- C:\Windows\system32\country.sys [27097] O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (...) -- C:\Windows\system32\HIMEM.SYS [4768] O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEY01.SYS [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (...) -- C:\Windows\system32\KEYBOARD.SYS [42537] O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (...) -- C:\Windows\system32\NTDOS.SYS [27866] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (...) -- C:\Windows\system32\NTDOS404.SYS [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (...) -- C:\Windows\system32\NTDOS411.SYS [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (...) -- C:\Windows\system32\NTDOS412.SYS [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (...) -- C:\Windows\system32\NTDOS804.SYS [29146] O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (...) -- C:\Windows\system32\NTIO.SYS [33952] O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (...) -- C:\Windows\system32\NTIO404.SYS [34672] O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (...) -- C:\Windows\system32\NTIO411.SYS [35776] O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (...) -- C:\Windows\system32\NTIO412.SYS [35536] O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (...) -- C:\Windows\system32\NTIO804.SYS [34672] O58 - SDL:[MD5.4A1857EC7EC4CBCEF475F0A1DEC02B28] - 24/06/2009 - 17:21:00 R--A- . (.Intellon, Inc. - PCAUSA NDIS 4.0 Protocol Driver.) -- C:\Windows\system32\PLCNDIS4.SYS [17584] O58 - SDL:[MD5.2ABA2F545B35F9C6CC2CFC4E1D539A80] - 24/06/2009 - 17:11:00 R--A- . (.Intellon, Inc. - PCAUSA NDIS 5.0 Protocol Driver.) -- C:\Windows\system32\PLCNDIS5.SYS [17280] ~ Scan Drivers in 07mn 49s ---\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.28 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ Scan ADS in 00mn 00s ---\ Liste des services Legacy (O64) O64 - Services: CurCS - 13/02/2009 - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio(avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - 30/08/2011 - C:\Windows\system32\DRIVERS\avgntflt.sys - avgntflt(avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - 30/08/2011 - C:\Windows\system32\DRIVERS\avipbb.sys - avipbb(avipbb) .(.Avira GmbH - Avira Driver for Security Enhancement.) - LEGACY_AVIPBB O64 - Services: CurCS - ??/??/???? - C:\Users\FAMILL~1\AppData\Local\Temp\catchme.sys (.not file.) - catchme (catchme) .(...) - LEGACY_CATCHME O64 - Services: CurCS - 29/09/2008 - C:\Windows\system32\drivers\int15.sys - int15(int15) .(.Acer, Inc. - int15.) - LEGACY_INT15 O64 - Services: CurCS - 26/04/2004 - C:\Windows\system32\PLCNDIS5.sys - PLCNDIS5 NDIS Protocol Driver(PLCNDIS5) .(.Intellon, Inc. - PCAUSA NDIS 5.0 Protocol Driver.) - LEGACY_PLCNDIS5 O64 - Services: CurCS - 04/03/2008 - C:\Windows\system32\DRIVERS\psdfilter.sys - PSDFilter(PSDFilter) .(.Egis Incorporated - Acer eDataSecurity Management PSD Filter Dr.) - LEGACY_PSDFILTER O64 - Services: CurCS - 04/03/2008 - C:\Windows\system32\DRIVERS\PSDNServ.sys - PSDNServ(PSDNServ) .(.Egis Incorporated - Acer eDataSecurity Management PSD Named Pip.) - LEGACY_PSDNSERV O64 - Services: CurCS - 04/03/2008 - C:\Windows\system32\DRIVERS\PSDVdisk.sys - PSDVdisk(psdvdisk) .(.Egis Incorporated - Acer eDataSecurity Management PSD Virtual D.) - LEGACY_PSDVDISK O64 - Services: CurCS - 17/06/2010 - C:\Windows\system32\DRIVERS\ssmdrv.sys - ssmdrv(ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV ~ Scan Services in 00mn 00s ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (. - .) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe O67 - Shell Spawning: <.exe> [HKCU\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.) O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.com> [HKCR\..\open\Command] (.Microsoft Corporation - Windows Control Panel.) -- "%1" %* O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows egedit.exe ~ Scan Keys in 00mn 00s ---\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\internet explorer\iexplore.exe ~ Scan Keys in 00mn 00s ---\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com O69 - SBI: SearchScopes [HKCU] {67A2568C-7A0A-4EED-AECC-B5405DE63B64} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {70D46D94-BF1E-45ED-B567-48701376298E} - (Google Desktop) - http://127.0.0.1:4664/search&s=qsUr2E7DEw53ipkIr_FN6CYUzjk?q={searchTerms} O69 - SBI: SearchScopes [HKCU] {B6BEB673-B671-4784-8776-63457DFE2824} - (Ask Search) - http://websearch.ask.com ~ Scan Keys in 00mn 00s ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.DA1F52F275BB5881FBBF7792DB713A34] [SPRF][18/10/2011] (.Ask.com - AskStub Application.) -- C:\Users\Familly Menut\AppData\Local\Temp\ApnStub.exe [357032] [MD5.ED92900BF225E26A4E54C2C14FA1424F] [SPRF][09/09/2011] (.Ask.com - AskIC Dynamic Link Library.) -- C:\Users\Familly Menut\AppData\Local\Temp\AskSLib.dll [246440] [MD5.8E43D356130BC01337E678A3E15D4B03] [SPRF][02/05/2011] (...) -- C:\Users\Familly Menut\AppData\Local\Temp\ComodoCleanup.exe [198984] [MD5.0E2281AEC56203CA6A9E1848F7DBDF5A] [SPRF][19/10/2011] (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Users\Familly Menut\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe [909088] [MD5.E86092C41679015EE27A14F2E8410DFF] [SPRF][09/06/2010] (...) -- C:\Users\Familly Menut\AppData\Local\Temp\_unps.exe [282624] [MD5.29FDF493EAE41AF560231B50403D6CE6] [SPRF][03/02/2009] (.Direction Générale des Impôts - Module de délivrance de certificat MINEFI.) -- C:\Windows\Downloaded Program Files\CERTDGI1.dll [118144] ~ Scan Files in 00mn 00s ---\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "WinCollab-DFSR-Out-TCP" |Out - Domain - P6 - FALSE | .(...) -- C:\Windows\system32\dfsr.exe (.not file.) O87 - FAEL: "WinCollab-DFSR-In-TCP" |In - Domain - P6 - TRUE | .(...) -- C:\Windows\system32\dfsr.exe (.not file.) O87 - FAEL: "{A2833FA7-F393-4028-90D9-94D8954EB299}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDirector.) -- C:\Program Files\Cyberlink\PowerDirector\PDR.exe O87 - FAEL: "{95A5B6F1-AB4A-4C0F-B316-3D358944C376}" | In - None - P17 - TRUE | .(.CyberLink Corp. - PowerDVD.) -- C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe O87 - FAEL: "{3D1FCDB1-0869-4FD5-B2CF-9489D8191A28}" | In - None - P17 - TRUE | .(.Acer Incorporated - DVDivine.) -- C:\Program Files\Acer Arcade Live\Acer DVDivine\Acer DVDivine.exe O87 - FAEL: "{5CFAD744-915B-4F15-8DEA-B7244EC4EBD8}" | In - Public - P6 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O87 - FAEL: "{8275CD3F-1453-4C44-A1F3-8C90FF18ED20}" | In - Public - P6 - TRUE | .(.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O87 - FAEL: "{9773C304-2055-4323-B6F9-58F8A64358B0}" | In - Public - P6 - TRUE | .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O87 - FAEL: "{D6ADAA43-FB47-4EE8-B085-ECF97F8CB172}" | In - Public - P17 - TRUE | .(.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O87 - FAEL: "{AA097394-2D5A-4B89-A22C-D684290F69B8}" | In - Public - P17 - TRUE | .(.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O87 - FAEL: "{E6598C06-23F9-45A7-AA87-F69F70F6DE5D}" | In - Public - P17 - TRUE | .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O87 - FAEL: "{60D666D4-CFC4-473B-9D37-888B5F9577C8}" | In - None - P17 - TRUE | .(.Apple Inc. - WebKit2WebProcess.exe.) -- C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe O87 - FAEL: "{E6E12EC2-705D-4737-BA7C-1D64C5C90833}" | In - Private - P6 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{4C9EF80A-9A39-4E63-9CBD-D826B2D476C9}" | In - Private - P17 - TRUE | .(.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe O87 - FAEL: "{968E7762-3DCE-4252-AE79-FC676462EC31}" | In - None - P17 - TRUE | .(.Apple Inc. - iTunes.) -- C:\Program Files\iTunes\iTunes.exe ~ Scan Firewall in 00mn 00s ---\ Scan Additionnel (O88) Database Version : 8818 - (10/11/2011) Clés trouvées (Keys found) : 27 Valeurs trouvées (Values found) : 4 Dossiers trouvés (Folders found) : 2 Fichiers trouvés (Files found) : 1 [HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Toolbar.AskSBar [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd] =>Toolbar.AskSBar [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1] =>Toolbar.AskSBar [HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}] =>Toolbar.AskTBar [HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] =>Toolbar.AskSBar [HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask [HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.AskSBar [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.AskSBar [HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask [HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Toolbar.AskSBar [HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Toolbar.AskSBar [HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar [HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Toolbar.AskSBar [HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar [HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AskSBar [HKCU\Software\APN] =>Toolbar.Agent [HKLM\Software\APN] =>Toolbar.Agent [HKCU\Software\Ask.com] =>Toolbar.AskBar [HKCU\Software\Ask.com] =>Toolbar.AskBarDis [HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar [HKLM\Software\AskToolbar] =>Toolbar.AskTBar [HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{00000000-6E41-4FD3-8538-502F5495E5FC} =>Adware.ShoppingReport2 [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AskSBar [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:ApnUpdater =>Toolbar.Ask C:\Program Files\Ask.com =>Toolbar.AskBar C:\Users\Familly Menut\AppData\LocalLow\AskToolbar =>Toolbar.AskTBar C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar =>Toolbar.AskTBar ~ Scan Additionnel in 00mn 07s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Auto 14/07/2009 136360 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe SS - | Auto 29/06/2009 269480 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe SS - | Auto 07/09/2011 37664 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SS - | Auto 07/09/2011 387944 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Auto 10/10/2006 16384 | (BUNAgentSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe SS - | Auto 12/05/2008 500784 | (eDataSecurity Service) . (.Egis Incorporated.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe SS - | Auto 24576 | (ETService) . (...) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe SS - | Auto 598016 | (ForceWare Intelligent Application Manager (IAM)) . (...) - C:\Program Files\bin32 SvcAppFlt.exe SS - | Demand 24/05/2009 33176 | (getPlus(R) Helper) . (.NOS Microsystems Ltd..) - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe SS - | Demand 02/07/2010 30192 | Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) . (.Google.) - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe SS - | Auto 04/02/2010 135664 | (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 04/02/2010 135664 | (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe SS - | Demand 25/04/2009 182768 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 07/09/2011 821096 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SS - | Auto 12/05/2008 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SS - | Auto 09/11/2011 366152 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe SS - | Auto 163840 | (nSvcIp) . (...) - C:\Program Files\bin32 SvcIp.exe SS - | Auto 10/10/2006 45056 | (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe SS - | Auto 131072 | (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe SS - | Auto 12/05/2008 118784 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32 vvsvc.exe SS - | Auto 272024 | (RichVideo) . (...) - C:\Program Files\Cyberlink\Shared files\RichVideo.exe SS - | Auto 21/01/2008 21504 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ~ Scan Services in 00mn 07s ---\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net ~ Scan MBR in 00mn 09s ---\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Familly Menut at 12/11/2011 11:36:06 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ Scan MBR in 00mn 11s End of the scan (1684 lines in 10mn 01s)(0)

jlpjlp · Answer

pas d'infection

la barre ask est plus ou mieux génante mais c'est tout

pour l'enlever utilise adwcleaner
http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner


teste le matériel comme indiqué plus haut

et tente de restaurer le pc avant tes problèmes pour voir si cela regle le problème

Alexane · Answer

ok j'ai passé adwcleaner mais une fois terminé il a voulu redémarrer pour que cela soit effectif et là bien entendu en redémarrant "normalement" il a planté. Je ne sais donc pas si cela a fonctionné, c'est étrange je ne le trouve pas sur le bureau non plus...
Je reste donc toujours en mode sans échec et parfois il plante quelques mn...

Alexane · Answer

J'ai oublié de te dire qu'avant de poster j'ai déjà restaurer à une date ultérieure où tout semblait aller bien.

Je viens de passer EVEREST je suis allée dans sonde et là j'ai processeur 35° et ensuite j'ai lancé un rapport que je te colle là : 

EVEREST Home Edition © 2003-2005 Lavalys, Inc. 

--------------------------------------------------------------------------------
 
     
  Version   EVEREST v2.20.405/fr  
  Site web   http://www.lavalys.com/  
  Type de rapport   Rapport rapide  
  Ordinateur   PC-DE-MENUT  
  Générateur   Familly Menut  
  Système d'exploitation   Microsoft Windows Vista Home Edition 6.0.6002 (WinVista Beta)  
  Date   2011-11-12  
  Heure   14:54  


Sonde 

--------------------------------------------------------------------------------
 
      
   
  Températures:  
   Processeur   35 °C (95 °F)  


Debug - PCI 

--------------------------------------------------------------------------------
 
     
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 7B 07 00 00 00 00 A1 00 03 0C 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 7C 07 00 00 00 00 A1 00 03 0C 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 7D 07 00 00 00 00 A1 00 03 0C 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 7E 07 00 00 00 00 A1 00 03 0C 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 4B 08 00 00 00 00 A2 00 00 03 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 25 10 57 01  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 E0 06 00 00 00 00 A1 00 00 03 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 4B 17 30 98  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 59 07 00 00 00 00 A1 00 01 01 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 D4 0A 00 00 00 00 A2 00 01 01 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 25 10 57 01  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 60 07 00 00 00 00 A2 00 00 02 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 25 10 57 01  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   22 10 00 11 00 00 00 00 00 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   22 10 01 11 00 00 00 00 00 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   22 10 02 11 00 00 00 00 00 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   22 10 03 11 00 00 00 00 00 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 68 05 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 69 05 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 51 07 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 54 07 00 00 00 00 A2 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 5A 07 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 5B 07 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 5C 07 00 00 00 00 A2 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 84 CB  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 74 07 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 25 10 57 01  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 78 07 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 7A 07 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 DE 10 00 00  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 52 07 00 00 00 00 A1 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 25 10 57 01  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   DE 10 53 07 00 00 00 00 A2 00 00 08 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 25 10 57 01  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
   
  B20 D10000 F01:   ?  
      
  Offset 00:   06 11 03 34 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 10:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 20:   00 00 00 00 00 00 00 00 00 00 00 00 25 10 57 01  
  Offset 30:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 40:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 50:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 60:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 70:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 80:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset 90:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset A0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset B0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset C0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset D0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset E0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
  Offset F0:   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  


Debug - Video BIOS 

--------------------------------------------------------------------------------
 
     
  C000:0000   U.h.K7400.L.w.VIDEO ..........IBM VGA Compatible........04/18/08  
  C000:0040   .................n2..................."....;..B.PMIDl.o.......  
  C000:0080   .....3..........HWEAPCIR..K.........h.......GeForce 8200 OEM VGA  
  C000:00C0   BIOS........................................................Ver  
  C000:0100   sion 62.77.18.00.03 ...Copyright (C) 1996-2007 NVIDIA Corp......  
  C000:0140   ....MCP77 Board - mcp78pvo.............Chip Rev ..............  
  C000:0180   ............................................BIT......E2...2.B...  
  C000:01C0   6.C...R.D...'.A...d.I...g.L...y.M...{.N.....P.....S.....T.....U.  
  C000:0200   ....V.....c.....x.....d.....i.&.........^...............wb......  
  C000:0240   ............\"..............I.. ..{@..*.@.F.F.....@..........'.  
  C000:0280   ........................m...B{.....P.....(.....#D.#g.......*....  
  C000:02C0   ........wb...W.!.....02/07/08...................].z.z...........  
  C000:0300   ........(... ...].z.z.............,.E.....1...t...5.........=.G.  
  C000:0340   z.z.J.....z.I...Q.........W...................5.a.......f.......  
  C000:0380   ..6.)...n...J.q.....t.......x...z.].......%.O.O.O.y.............  
  C000:03C0   .............._.2....u....%..$P..!.....t...........]!..........X  


Debug - Unknown 

--------------------------------------------------------------------------------
 
     
  Motherboard   10/30/2008-NF-MCP78-8A61O001C-00  
  Motherboard   DMIMOBO:  
  Motherboard   DMISYS: Acer Aspire X3200  
  Motherboard   V.R01B0Oct.30.2008  
  Optical   ATAPI DVD A DH16A6S SCSI CdRom Device  
  PCI/AGP   1022-1100: Configuration HyperTransport(mc) AMD [NoDB]  
  PCI/AGP   1022-1101: Configuration de la table d'adresses AMD [NoDB]  
  PCI/AGP   1022-1102: Configuration du mode de suivi HyperTransport(tm) et DRAM AMD [NoDB]  
  PCI/AGP   1022-1103: Configuration diverse AMD [NoDB]  
  PCI/AGP   10DE-0568: Contrôleur de RAM standard PCI [NoDB]  
  PCI/AGP   10DE-0569: Pont PCI vers PCI standard PCI [NoDB]  
  PCI/AGP   10DE-06E0: NVIDIA GeForce 9300 GE [NoDB]  
  PCI/AGP   10DE-0751: Contrôleur de RAM standard PCI [NoDB]  
  PCI/AGP   10DE-0752: NVIDIA nForce PCI System Management [NoDB]  
  PCI/AGP   10DE-0753: NVIDIA nForce System Management Controller [NoDB]  
  PCI/AGP   10DE-0754: Contrôleur de RAM standard PCI [NoDB]  
  PCI/AGP   10DE-0759: Contrôleur IDE standard double canal PCI [NoDB]  
  PCI/AGP   10DE-075A: Pont PCI vers PCI standard PCI [NoDB]  
  PCI/AGP   10DE-075B: Pont PCI vers PCI standard PCI [NoDB]  
  PCI/AGP   10DE-075C: Pont ISA standard PCI [NoDB]  
  PCI/AGP   10DE-0760: NVIDIA nForce 10/100/1000 Mbps Networking Controller [NoDB]  
  PCI/AGP   10DE-0774: Contrôleur audio haute définition [NoDB]  
  PCI/AGP   10DE-0778: Pont PCI vers PCI standard PCI [NoDB]  
  PCI/AGP   10DE-077A: Pont PCI vers PCI standard PCI [NoDB]  
  PCI/AGP   10DE-077B: Contrôleur hôte USB OpenHCD standard [NoDB]  
  PCI/AGP   10DE-077C: Contrôleur hôte PCI vers USB standard étendu [NoDB]  
  PCI/AGP   10DE-077D: Contrôleur hôte USB OpenHCD standard [NoDB]  
  PCI/AGP   10DE-077E: Contrôleur hôte PCI vers USB standard étendu [NoDB]  
  PCI/AGP   10DE-084B: NVIDIA GeForce 8200 [NoDB]  
  PCI/AGP   10DE-0AD4: NVIDIA nForce Serial ATA Controller [NoDB]  
  PCI/AGP   1106-3403: Contrôleur hôte compatible IEE 1394 VIA OHCI [NoDB]  



--------------------------------------------------------------------------------

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Alexane · Answer

Pc très très lent je n'arrive bientôt plus à travailler en mode sans échec...
Il me reste encore à tester les ram, si j'y arrive !!!!

alexane · Answer

Alors hier soir j'ai essayé de télécharger, en vain, le logiciel Memtest, j'ai tenté plusieurs fois avec toujours comme message "téléchargement réussi" et rien ne se passe, rien sur le bureau...
J'ai donc testé les ram avec windows vista et il n'a rien détecté de deffectueux.

Voilà j'ai tout fait je suis dans l'impasse, une autre piste jlpjlp ?

jlpjlp · Answer

as tu sauvegardé tes données? As tu le cd de restauration de windows .? La pc plante en mode normal et en mode sans echec? Depuis l installation d un logiciel? Explique clairement tes problèmes

alexane · Answer

Non nous n'avons rien téléchargé qui puisse avoir endommagé ou ralentir l'ordi.
Je n'ai rien sauvegardé, quant au cd de restauration je pense l'avoir au fond d'un carton ;)
En effet le PC plante ou est archiiiiiii long (genre 10mn pour ouvrir un logiciel) en mode normal et en mode sans echec (un peu plus rapide et surtout j'arrive à avoir une connection internet).

Hier par contre il s'est passé un truc bizare, la flèche de la souris est partie toute seule dans tous les sens... puis cela s'est arrêté.

Je ne vois pas ce que je peux te dire de plus...

jlpjlp · Answer

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Va dans démarrer puis panneau de configuration 
- Double Clique sur l'icône "Comptes d'utilisateurs" 
- Clique ensuite sur désactiver et valide. 


télécharge combofix (par sUBs) ici : 

http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

et enregistre le sur le bureau. 

déconnecte toi d'internet et ferme toutes tes applications. 

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware) 


double-clique sur combofix.exe et suis les instructions 

à la fin, il va produire un rapport C:\ComboFix.txt 

réactive ton parefeu, ton antivirus, la garde de ton antispyware 

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse. 

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi. 

Tu as un tutoriel complet ici : 

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

alexane · Answer

Merci pour ta réponse, comme cela m'a l'air pointu (j'espère que je vais y arriver !!!) je n'avais pas le temps de le faire hier.
Du boulot je vais imprimer les manips et ce soir je lance tout ça !

Une semaine sans pc c'est vraiment l'enfer, pourvu que j'y arrive !

alexane · Answer

et voilà cela a été très long !!!!

ComboFix 11-11-17.03 - Familly Menut 17/11/2011  22:44:26.1.2 - x86 NETWORK
Microsoft® Windows Vista(TM) Édition Familiale Basique   6.0.6002.2.1252.33.1036.18.2814.2309 [GMT 1:00]
Lancé depuis: c:\users\Familly Menut\Downloads\ComboFix.exe
AV: AntiVir Desktop *Enabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Enabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Un nouveau point de restauration a été créé
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Familly Menut\AppData\Roaming\.#
c:\users\Familly Menut\AppData\Roaming\.#\MBX@1254@2A2990.###
c:\users\Familly Menut\AppData\Roaming\.#\MBX@1254@2A29C0.###
c:\users\Familly Menut\AppData\Roaming\.#\MBX@1254@2A29F0.###
c:\users\Familly Menut\AppData\Roaming\.#\MBX@200@1D12990.###
c:\users\Familly Menut\AppData\Roaming\.#\MBX@200@1D129C0.###
c:\users\Familly Menut\AppData\Roaming\.#\MBX@200@1D129F0.###
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2011-10-17 au 2011-11-17  ))))))))))))))))))))))))))))))))))))
.
.
2011-11-17 22:45 . 2011-11-17 22:46	--------	d-----w-	c:\users\Familly Menut\AppData\Local	emp
2011-11-17 22:45 . 2011-11-17 22:45	--------	d-----w-	c:\users\Default\AppData\Local	emp
2011-11-12 13:47 . 2011-11-12 13:47	--------	d-----w-	c:\program files\Lavalys
2011-11-11 20:53 . 2011-11-12 09:40	111872	----a-w-	c:\windows\system32\drivers\TrueSight.sys
2011-11-10 21:58 . 2011-11-12 10:26	--------	d-----w-	C:\ZHP
2011-11-09 23:12 . 2011-10-17 11:41	2409784	----a-w-	c:\program files\Windows Mail\OESpamFilter.dat
2011-11-09 23:12 . 2011-09-20 21:02	905088	----a-w-	c:\windows\system32\drivers	cpip.sys
2011-11-09 23:12 . 2011-09-30 15:57	707584	----a-w-	c:\program files\Common Files\System\wab32.dll
2011-11-09 22:16 . 2011-11-09 22:16	--------	d-----w-	c:\programdata\WindowsSearch
2011-10-23 16:14 . 2011-10-23 16:14	--------	d-----w-	c:\program files\Common Files\Java
2011-10-23 16:14 . 2011-10-23 16:14	--------	d-----w-	c:\programdata\Ask
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-17 20:52 . 2011-11-17 20:34	56200	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF16D2B8-9690-43ED-B607-9F0589F91953}\offreg.dll
2011-10-16 16:43 . 2011-06-18 22:29	414368	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-07 03:48 . 2011-11-15 20:20	6668624	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CF16D2B8-9690-43ED-B607-9F0589F91953}\mpengine.dll
2011-10-03 03:06 . 2010-05-23 07:37	472808	----a-w-	c:\windows\system32\deployJava1.dll
2011-09-06 13:30 . 2011-10-13 10:49	2043392	----a-w-	c:\windows\system32\win32k.sys
2011-09-01 02:35 . 2011-10-13 11:12	1798144	----a-w-	c:\windows\system32\jscript9.dll
2011-09-01 02:28 . 2011-10-13 11:12	1126912	----a-w-	c:\windows\system32\wininet.dll
2011-09-01 02:22 . 2011-10-13 11:12	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2011-08-31 16:00 . 2011-06-18 10:15	22216	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-08-25 16:15 . 2011-10-13 10:36	555520	----a-w-	c:\windows\system32\UIAutomationCore.dll
2011-08-25 16:14 . 2011-10-13 10:36	563712	----a-w-	c:\windows\system32\oleaut32.dll
2011-08-25 16:14 . 2011-10-13 10:36	238080	----a-w-	c:\windows\system32\oleacc.dll
2011-08-25 13:31 . 2011-10-13 10:36	4096	----a-w-	c:\windows\system32\oleaccrc.dll
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-03-04 21:38	121392	----a-w-	c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-07 68856]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2008-03-26 5369856]
"Acer Empowering Technology Monitor"="c:\program files\Acer\Empowering Technology\SysMonitor.exe" [2008-04-25 319488]
"EmpoweringTechnology"="c:\program files\Acer\Empowering Technology\Framework.Launcher.exe" [2008-04-25 319488]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-01-08 68640]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-25 28672]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-04-22 13535776]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-04-22 92704]
"WarReg_PopUp"="c:\program files\Acer\WR_PopUp\WarReg_PopUp.exe" [2008-01-29 303104]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-07-02 30192]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-08-18 421736]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-12-1 110592]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GOEC62~1.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-04-25 24576]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 135664]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-07-02 30192]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 135664]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-08-31 22216]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers
vhda32v.sys [2008-04-22 43552]
R3 PLCNDIS5;PLCNDIS5 NDIS Protocol Driver;c:\windows\system32\PLCNDIS5.SYS [2004-04-26 17280]
R3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [2011-11-12 111872]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork	REG_MULTI_SZ   	PLA DPS BFE mpssvc
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
.
Contenu du dossier 'Tâches planifiées'
.
2011-11-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 18:55]
.
2011-11-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-04 18:55]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.sfr.fr/
mStart Page = hxxp://fr.fr.acer.yahoo.com
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
LSP: %SYSTEMROOT%\system32
vLsp.dll
TCP: DhcpNameServer = 192.168.1.1
DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} - hxxps://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-17 23:46
Windows 6.0.6002 Service Pack 2 NTFS
.
Recherche de processus cachés ... 
.
Recherche d'éléments en démarrage automatique cachés ... 
.
Recherche de fichiers cachés ... 
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
Heure de fin: 2011-11-18  00:18:57
ComboFix-quarantined-files.txt  2011-11-17 23:18
.
Avant-CF: 107 124 375 552 octets libres
Après-CF: 107 582 144 512 octets libres
.
- - End Of File - - 8DADEC0C3F121A096BF22291943D7549

jlpjlp · Answer

comment va le pc?

alexane · Answer

Toujours les mêmes symptômes... il se bloque.
Démarrage normal impossible alors démarrage sans échec obligatoire mais il se bloque toujours c'est même pire !!!... que faire de plus je suis perdue ?

jlpjlp · Answer

il faudrait débrancher ton materiel et tester le demarrage, si tu as mis un nouveau logiciel ou materiel le retirer


le pc est sous garantie? quelle référence le pc?

Aznet · Answer

Bonjour, je me présente je m'appelle Johan.

Mon pc se fige sans raison apparente et le seul moyen que j'ai trouvé est d'éteindre en restant appuyé sur le bouton d'alimentation et de le rallumer.

J'ai effectué le scan ZHPDiag et j'espère que quelqu'un sera me dire quel est mon problème et que faire. 

Merci d'avance!

Voici le lien pour visualiser mon scan http://pjjoint.malekal.com/files.php?id=ZHPDiag_20111207_m12m147r14c11

PC qui se bloque au démarrage

35 réponses

Discussions similaires

Newsletters