Problème pc qui rame

Résolu
Bonjour,

Depuis quelques jours, mon PC rame beaucoup. Les pages internet ont du mal à s'ouvrir. Idem pour les docs en pdf ou word. J'utilise google chrome pour internet et windows XP.
JE vous joints un compte rendu HIJACK fait ce matin. Je vous remercie pour votre aide car je ne m'en sort pas. Bonne journée.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:01:10, on 17/05/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\program files\real\realplayer\update\realsched.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\MySurvey Messenger\MySurveyMessenger.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: DCA - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files\Consumer Input\dca-bho.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Cammaestro 4.2GU build 1105
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Consumer Input Update] C:\Program Files\Consumer Input\dca-ua.exe
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\gaelle\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Kujytuo] C:\Documents and Settings\gaelle\Application Data\kujytuo\kujytuo.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: MySurvey Messenger.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O15 - Trusted Zone: http://www.consoclicker.com
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} (20-20 3D Viewer) - http://but.2020.net/planner/Core/Player/2020PlayerAX_Win32.cab
O16 - DPF: {3A226D85-574D-4272-B73C-DBCAECF709B3} (TNSClickerb.Clicker) - http://www.consoclicker.com/TNSClickrb.CAB
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {70A5EBDC-3EA6-464A-9FF7-084BC150C417} (TNSClickera.Clicker) - http://www.consoclicker.com/TNSClickra.CAB
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/maconfig/MaConfig_4_0_2_0.cab
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} (CeWe Color AG & Co. OHG Control) - https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab
O16 - DPF: {8C922C73-FFFA-45A3-B2C2-BC1E30074267} (WalkmanRegistrar Object) - http://www.sony.fr/bravia/RegistrationAgent.cab
O16 - DPF: {935F9B04-0C7B-4454-A391-348C54AD7ADD} (Jolly Bear Games Player) - http://games.bigfishgames.com/fr_big-city-adventure-sydney-australia/online/JBGamePlayer.cab
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader5.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://wanadoofr.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E56347B0-6C2B-4C2E-939F-EE513EAC80BC} (Creative Product Registration ActiveX Control Module) - http://www.creative.com/register/OCXs/CtORWebClientNoMFC.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{071F53E1-8522-4D4B-B36A-F1DD47CF55E8}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\..\{5A7F97A6-C62C-4A11-9FA0-5829CE9B8832}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS1\Services\Tcpip\..\{071F53E1-8522-4D4B-B36A-F1DD47CF55E8}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CS3\Services\Tcpip\..\{071F53E1-8522-4D4B-B36A-F1DD47CF55E8}: NameServer = 208.67.222.222,208.67.220.220
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - Unknown owner - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (file missing)
O23 - Service: ServiceLayer - Unknown owner - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (file missing)
O23 - Service: Service Messenger Sharing Folders USN Journal Reader (usnjsvc) - Unknown owner - C:\Program Files\Windows Live\Messenger\usnsvc.exe (file missing)

--
End of file - 13371 bytes

<config>Windows XP / Safari 535.19</config>

19 réponses

  1. Bonjour

    Télécharge Malwaresbytes anti malware ici
    http://www.malwarebytes.org/mbam.php

    Bouton »Download free version »

    * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

    (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

    * Potasse le tuto pour te familiariser avec le prg :

    https://forum.pcastuces.com/sujet.asp?f=31&s=3

    (cela dis, il est très simple d'utilisation).

    relance Malwaresbytes en suivant scrupuleusement ces consignes :

    ! Déconnecte toi et ferme toutes applications en cours !

    * Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)

    *Procèdes à une mise à jour

    *Fais un examen dit "Complet"

    --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
    --> à la fin tu cliques sur "Afficher les résultats" " .
    --> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

    Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

    Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

    @+

    1. Bonjour, ça fait beaucoup de trucs réunis pour un XP, non? messagerie, updaters, anti-anti-virus, games, toolbars..... Le dossier run de la base de registre ne devrait pas être aussi chargé, vous n'avez qu'à supprimer quelques lignes, une à la fois et redémarrer, jusqu'a retrouver la stabilité désiré. Allez-y avec précaution qu'en même, la base de registre d'xp est très sensible. et bonne journée.
      nico
      1. je pense avoir suivi ta procédure Guillaume, voici le résultat :

        Malwarebytes Anti-Malware (Essai) 1.61.0.1400
        www.malwarebytes.org

        Version de la base de données: v2012.05.17.02

        Windows XP Service Pack 3 x86 NTFS
        Internet Explorer 8.0.6001.18702
        gaelle :: GAELLE [administrateur]

        Protection: Désactivé

        17/05/2012 11:39:52
        mbam-log-2012-05-17 (11-39-52).txt

        Type d'examen: Examen complet
        Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
        Options d'examen désactivées: P2P
        Elément(s) analysé(s): 275895
        Temps écoulé: 1 heure(s), 22 minute(s), 46 seconde(s)

        Processus mémoire détecté(s): 0
        (Aucun élément nuisible détecté)

        Module(s) mémoire détecté(s): 0
        (Aucun élément nuisible détecté)

        Clé(s) du Registre détectée(s): 0
        (Aucun élément nuisible détecté)

        Valeur(s) du Registre détectée(s): 1
        HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|Shell (Backdoor.Agent.Gen) -> Données: C:\Documents and Settings\gaelle\Local Settings\Application Data\cabe10e2\X -> Mis en quarantaine et supprimé avec succès.

        Elément(s) de données du Registre détecté(s): 0
        (Aucun élément nuisible détecté)

        Dossier(s) détecté(s): 0
        (Aucun élément nuisible détecté)

        Fichier(s) détecté(s): 2
        C:\Documents and Settings\LocalService\Local Settings\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb (Rootkit.Zeroaccess) -> Mis en quarantaine et supprimé avec succès.
        C:\Documents and Settings\NetworkService\Local Settings\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb (Rootkit.Zeroaccess) -> Mis en quarantaine et supprimé avec succès.

        (fin)
        1. Re

          Télécharge TDSSKiller

          *Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
          * Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.

          Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut.
          Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée.
          Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée.
          Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas
          Si Suspicious file est indiqué, laisse l''option cochée sur Skip
          une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer

          sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau

          Sinon il est enregistré ici : C:\TDSSKiller_N°Version_Date_Heure.txt

          Poste moi son rapport à l'issue; merci

          @+
          1. voilà :

            16:03:29.0015 0284 TDSS rootkit removing tool 2.7.35.0 May 16 2012 07:37:57
            16:03:29.0203 0284 ============================================================
            16:03:29.0203 0284 Current date / time: 2012/05/17 16:03:29.0203
            16:03:29.0203 0284 SystemInfo:
            16:03:29.0203 0284
            16:03:29.0203 0284 OS Version: 5.1.2600 ServicePack: 3.0
            16:03:29.0203 0284 Product type: Workstation
            16:03:29.0203 0284 ComputerName: GAELLE
            16:03:29.0203 0284 UserName: gaelle
            16:03:29.0203 0284 Windows directory: C:\windows
            16:03:29.0203 0284 System windows directory: C:\windows
            16:03:29.0203 0284 Processor architecture: Intel x86
            16:03:29.0203 0284 Number of processors: 2
            16:03:29.0203 0284 Page size: 0x1000
            16:03:29.0203 0284 Boot type: Normal boot
            16:03:29.0203 0284 ============================================================
            16:03:30.0796 0284 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
            16:03:30.0906 0284 ============================================================
            16:03:30.0906 0284 \Device\Harddisk0\DR0:
            16:03:30.0906 0284 MBR partitions:
            16:03:30.0906 0284 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C0681
            16:03:30.0906 0284 ============================================================
            16:03:30.0953 0284 C: <-> \Device\Harddisk0\DR0\Partition0
            16:03:30.0953 0284 ============================================================
            16:03:30.0953 0284 Initialize success
            16:03:30.0953 0284 ============================================================
            16:03:39.0703 1076 ============================================================
            16:03:39.0703 1076 Scan started
            16:03:39.0703 1076 Mode: Manual;
            16:03:39.0703 1076 ============================================================
            16:03:40.0796 1076 !SASCORE (c0393eb99a6c72c6bef9bfc4a72b33a6) C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
            16:03:40.0796 1076 !SASCORE - ok
            16:03:40.0921 1076 Aavmker4 (473f97edc5a5312f3665ab2921196c0c) C:\windows\system32\drivers\Aavmker4.sys
            16:03:40.0921 1076 Aavmker4 - ok
            16:03:40.0937 1076 Abiosdsk - ok
            16:03:40.0937 1076 abp480n5 - ok
            16:03:41.0015 1076 ACDaemon - ok
            16:03:41.0046 1076 ACPI (e5e6dbfc41ea8aad005cb9a57a96b43b) C:\windows\system32\DRIVERS\ACPI.sys
            16:03:41.0046 1076 ACPI - ok
            16:03:41.0093 1076 ACPIEC (e4abc1212b70bb03d35e60681c447210) C:\windows\system32\drivers\ACPIEC.sys
            16:03:41.0093 1076 ACPIEC - ok
            16:03:41.0218 1076 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
            16:03:41.0234 1076 AdobeFlashPlayerUpdateSvc - ok
            16:03:41.0234 1076 adpu160m - ok
            16:03:41.0265 1076 aec (8bed39e3c35d6a489438b8141717a557) C:\windows\system32\drivers\aec.sys
            16:03:41.0265 1076 aec - ok
            16:03:41.0312 1076 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\windows\system32\drivers\Afc.sys
            16:03:41.0312 1076 Afc - ok
            16:03:41.0390 1076 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\windows\System32\drivers\afd.sys
            16:03:41.0390 1076 AFD - ok
            16:03:41.0406 1076 Aha154x - ok
            16:03:41.0406 1076 aic78u2 - ok
            16:03:41.0421 1076 aic78xx - ok
            16:03:41.0531 1076 Alerter (758fdc60d41716ef889d849989b4b1cd) C:\windows\system32\alrsvc.dll
            16:03:41.0531 1076 Alerter - ok
            16:03:41.0578 1076 ALG (5e9a6658a2a69ae7eb195113b7a2e7a9) C:\windows\System32\alg.exe
            16:03:41.0593 1076 ALG - ok
            16:03:41.0593 1076 AliIde - ok
            16:03:41.0609 1076 amsint - ok
            16:03:41.0687 1076 AppMgmt (f36c9f78fc902c8dce4d3b576bb0435a) C:\windows\System32\appmgmts.dll
            16:03:41.0687 1076 AppMgmt - ok
            16:03:41.0734 1076 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\windows\system32\DRIVERS\arp1394.sys
            16:03:41.0734 1076 Arp1394 - ok
            16:03:41.0734 1076 asc - ok
            16:03:41.0750 1076 asc3350p - ok
            16:03:41.0750 1076 asc3550 - ok
            16:03:41.0828 1076 Aspi32 - ok
            16:03:41.0890 1076 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
            16:03:41.0906 1076 aspnet_state - ok
            16:03:41.0984 1076 aswFsBlk (0ae43c6c411254049279c2ee55630f95) C:\windows\system32\drivers\aswFsBlk.sys
            16:03:41.0984 1076 aswFsBlk - ok
            16:03:42.0015 1076 aswMon2 (8c30b7ddd2f1d8d138ebe40345af2b11) C:\windows\system32\drivers\aswMon2.sys
            16:03:42.0031 1076 aswMon2 - ok
            16:03:42.0062 1076 aswRdr (da12626fd9a67f4e917e2f2fbe1e1764) C:\windows\system32\drivers\aswRdr.sys
            16:03:42.0062 1076 aswRdr - ok
            16:03:42.0109 1076 aswSnx (dcb199b967375753b5019ec15f008f53) C:\windows\system32\drivers\aswSnx.sys
            16:03:42.0140 1076 aswSnx - ok
            16:03:42.0171 1076 aswSP (b32873e5a1443c0a1e322266e203bf10) C:\windows\system32\drivers\aswSP.sys
            16:03:42.0187 1076 aswSP - ok
            16:03:42.0328 1076 aswTdi (6ff544175a9180c5d88534d3d9c9a9f7) C:\windows\system32\drivers\aswTdi.sys
            16:03:42.0343 1076 aswTdi - ok
            16:03:42.0343 1076 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\windows\system32\DRIVERS\asyncmac.sys
            16:03:42.0343 1076 AsyncMac - ok
            16:03:42.0359 1076 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\windows\system32\DRIVERS\atapi.sys
            16:03:42.0375 1076 atapi - ok
            16:03:42.0375 1076 Atdisk - ok
            16:03:42.0406 1076 Atmarpc (9916c1225104ba14794209cfa8012159) C:\windows\system32\DRIVERS\atmarpc.sys
            16:03:42.0406 1076 Atmarpc - ok
            16:03:42.0437 1076 AudioSrv (b4005aef7873144634765b570dac466e) C:\windows\System32\audiosrv.dll
            16:03:42.0437 1076 AudioSrv - ok
            16:03:42.0468 1076 audstub (d9f724aa26c010a217c97606b160ed68) C:\windows\system32\DRIVERS\audstub.sys
            16:03:42.0468 1076 audstub - ok
            16:03:42.0546 1076 avast! Antivirus (4041d31508a2a084dfb42c595854090f) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
            16:03:42.0562 1076 avast! Antivirus - ok
            16:03:42.0593 1076 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\windows\system32\drivers\Beep.sys
            16:03:42.0593 1076 Beep - ok
            16:03:42.0640 1076 BITS (baa0b6e647c1ad593e9bae5cc31bcffb) C:\WINDOWS\system32\qmgr.dll
            16:03:42.0703 1076 BITS - ok
            16:03:42.0718 1076 Browser (06b54a7b1ef7cb16bfd0e208d343fa71) C:\windows\System32\browser.dll
            16:03:42.0718 1076 Browser - ok
            16:03:42.0765 1076 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\windows\system32\drivers\cbidf2k.sys
            16:03:42.0781 1076 cbidf2k - ok
            16:03:42.0781 1076 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\windows\system32\DRIVERS\CCDECODE.sys
            16:03:42.0796 1076 CCDECODE - ok
            16:03:42.0796 1076 cd20xrnt - ok
            16:03:42.0843 1076 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\windows\system32\drivers\Cdaudio.sys
            16:03:42.0843 1076 Cdaudio - ok
            16:03:42.0859 1076 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\windows\system32\drivers\Cdfs.sys
            16:03:42.0859 1076 Cdfs - ok
            16:03:42.0859 1076 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\windows\system32\DRIVERS\cdrom.sys
            16:03:42.0859 1076 Cdrom - ok
            16:03:42.0875 1076 Changer - ok
            16:03:42.0906 1076 CiSvc (793ef38a5fd086c3c8e48a8a861562ed) C:\windows\system32\cisvc.exe
            16:03:42.0906 1076 CiSvc - ok
            16:03:42.0921 1076 ClipSrv (8b30cbb0c07d49b2658fb190946b0e7e) C:\windows\system32\clipsrv.exe
            16:03:42.0921 1076 ClipSrv - ok
            16:03:42.0984 1076 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
            16:03:43.0046 1076 clr_optimization_v2.0.50727_32 - ok
            16:03:43.0046 1076 CmdIde - ok
            16:03:43.0046 1076 COMSysApp - ok
            16:03:43.0062 1076 Cpqarray - ok
            16:03:43.0093 1076 CryptSvc (7a6d0b71035e123fdda2156a25578ad3) C:\windows\System32\cryptsvc.dll
            16:03:43.0093 1076 CryptSvc - ok
            16:03:43.0109 1076 dac2w2k - ok
            16:03:43.0109 1076 dac960nt - ok
            16:03:43.0140 1076 dc3d (484ffbcec4091ff617494b6b0cb04eb3) C:\windows\system32\DRIVERS\dc3d.sys
            16:03:43.0140 1076 dc3d - ok
            16:03:43.0187 1076 DcomLaunch (0203b1aad358f206cb0a3c1f93cce17a) C:\windows\system32\rpcss.dll
            16:03:43.0203 1076 DcomLaunch - ok
            16:03:43.0265 1076 Dhcp (318f535dc05551d96deeb90b6d6904de) C:\windows\System32\dhcpcsvc.dll
            16:03:43.0265 1076 Dhcp - ok
            16:03:43.0296 1076 Disk (044452051f3e02e7963599fc8f4f3e25) C:\windows\system32\DRIVERS\disk.sys
            16:03:43.0296 1076 Disk - ok
            16:03:43.0312 1076 dmadmin - ok
            16:03:43.0375 1076 dmboot (f5deadd42335fb33edca74ecb2f36cba) C:\windows\system32\drivers\dmboot.sys
            16:03:43.0390 1076 dmboot - ok
            16:03:43.0390 1076 dmio (5a7c47c9b3f9fb92a66410a7509f0c71) C:\windows\system32\drivers\dmio.sys
            16:03:43.0390 1076 dmio - ok
            16:03:43.0421 1076 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\windows\system32\drivers\dmload.sys
            16:03:43.0421 1076 dmload - ok
            16:03:43.0453 1076 dmserver (6797c23d6b79935482d7f0e8ca5e5b67) C:\windows\System32\dmserver.dll
            16:03:43.0453 1076 dmserver - ok
            16:03:43.0468 1076 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\windows\system32\drivers\DMusic.sys
            16:03:43.0468 1076 DMusic - ok
            16:03:43.0500 1076 Dnscache (1a1e59377fb6cacd711cc5073c4a7d79) C:\windows\System32\dnsrslvr.dll
            16:03:43.0500 1076 Dnscache - ok
            16:03:43.0562 1076 Dot3svc (3fcf86f03d0302443c21ce6e5bbf7a25) C:\windows\System32\dot3svc.dll
            16:03:43.0562 1076 Dot3svc - ok
            16:03:43.0562 1076 dpti2o - ok
            16:03:43.0593 1076 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\windows\system32\drivers\drmkaud.sys
            16:03:43.0593 1076 drmkaud - ok
            16:03:43.0625 1076 dtscsi (12aca694b50ea53563c1e7c99e7bb27d) C:\windows\System32\Drivers\dtscsi.sys
            16:03:43.0640 1076 dtscsi - ok
            16:03:43.0656 1076 EapHost (8b5fc9087d2cab110bc2ed5cc5e7b8ac) C:\windows\System32\eapsvc.dll
            16:03:43.0656 1076 EapHost - ok
            16:03:43.0687 1076 EL90XBC (6e883bf518296a40959131c2304af714) C:\windows\system32\DRIVERS\el90xbc5.sys
            16:03:43.0687 1076 EL90XBC - ok
            16:03:43.0734 1076 ERSvc (94f948cb12c4d35483f1e815deb16c7b) C:\windows\System32\ersvc.dll
            16:03:43.0734 1076 ERSvc - ok
            16:03:43.0750 1076 Eventlog (c3fb1d70cb88722267949694ba51759e) C:\windows\system32\services.exe
            16:03:43.0765 1076 Eventlog - ok
            16:03:43.0796 1076 EventSystem (ec16ae9b37eacf871629227a3f3913fd) C:\WINDOWS\system32\es.dll
            16:03:43.0812 1076 EventSystem - ok
            16:03:43.0843 1076 Fastfat (38d332a6d56af32635675f132548343e) C:\windows\system32\drivers\Fastfat.sys
            16:03:43.0843 1076 Fastfat - ok
            16:03:43.0875 1076 FastUserSwitchingCompatibility (1b8542f338cdd86929a084a455837158) C:\windows\System32\shsvcs.dll
            16:03:43.0890 1076 FastUserSwitchingCompatibility - ok
            16:03:43.0890 1076 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\windows\system32\drivers\Fdc.sys
            16:03:43.0890 1076 Fdc - ok
            16:03:43.0906 1076 Fips (31f923eb2170fc172c81abda0045d18c) C:\windows\system32\drivers\Fips.sys
            16:03:43.0906 1076 Fips - ok
            16:03:43.0921 1076 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\windows\system32\drivers\Flpydisk.sys
            16:03:43.0921 1076 Flpydisk - ok
            16:03:43.0968 1076 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\windows\system32\drivers\fltmgr.sys
            16:03:43.0968 1076 FltMgr - ok
            16:03:44.0062 1076 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
            16:03:44.0062 1076 FontCache3.0.0.0 - ok
            16:03:44.0093 1076 FsUsbExDisk (790a4ca68f44be35967b3df61f3e4675) C:\WINDOWS\system32\FsUsbExDisk.SYS
            16:03:44.0093 1076 FsUsbExDisk - ok
            16:03:44.0140 1076 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\windows\system32\drivers\Fs_Rec.sys
            16:03:44.0140 1076 Fs_Rec - ok
            16:03:44.0156 1076 Ftdisk (a86859b77b908c18c2657f284aa29fe3) C:\windows\system32\DRIVERS\ftdisk.sys
            16:03:44.0156 1076 Ftdisk - ok
            16:03:44.0250 1076 getPlusHelper (63677825d08cf4458caae9ef2372e5d6) C:\Program Files\NOS\bin\getPlus_Helper.dll
            16:03:44.0250 1076 getPlusHelper - ok
            16:03:44.0281 1076 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\windows\system32\DRIVERS\msgpc.sys
            16:03:44.0281 1076 Gpc - ok
            16:03:44.0343 1076 gupdate (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
            16:03:44.0343 1076 gupdate - ok
            16:03:44.0359 1076 gupdatem (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
            16:03:44.0359 1076 gupdatem - ok
            16:03:44.0406 1076 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            16:03:44.0406 1076 gusvc - ok
            16:03:44.0453 1076 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\windows\system32\DRIVERS\HDAudBus.sys
            16:03:44.0484 1076 HDAudBus - ok
            16:03:44.0593 1076 helpsvc (1247f83b705af0e796330442f7967cf8) C:\windows\PCHealth\HelpCtr\Binaries\pchsvc.dll
            16:03:44.0593 1076 helpsvc - ok
            16:03:44.0625 1076 HidServ (a3b9b4a68bc839ce5a264d5908092261) C:\windows\System32\hidserv.dll
            16:03:44.0625 1076 HidServ - ok
            16:03:44.0656 1076 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\windows\system32\DRIVERS\hidusb.sys
            16:03:44.0656 1076 HidUsb - ok
            16:03:44.0703 1076 hkmsvc (17b3c3d40cdba40c2e331d28be4de27f) C:\windows\System32\kmsvc.dll
            16:03:44.0718 1076 hkmsvc - ok
            16:03:44.0718 1076 hpn - ok
            16:03:44.0765 1076 HPZid412 (9f1d80908658eb7f1bf70809e0b51470) C:\windows\system32\DRIVERS\HPZid412.sys
            16:03:44.0765 1076 HPZid412 - ok
            16:03:44.0781 1076 HPZipr12 (f7e3e9d50f9cd3de28085a8fdaa0a1c3) C:\windows\system32\DRIVERS\HPZipr12.sys
            16:03:44.0781 1076 HPZipr12 - ok
            16:03:44.0812 1076 HPZius12 (cf1b7951b4ec8d13f3c93b74bb2b461b) C:\windows\system32\DRIVERS\HPZius12.sys
            16:03:44.0812 1076 HPZius12 - ok
            16:03:44.0843 1076 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\windows\system32\Drivers\HTTP.sys
            16:03:44.0859 1076 HTTP - ok
            16:03:44.0875 1076 HTTPFilter (bd31cface38d1800abdb43f4260af0d5) C:\windows\System32\w3ssl.dll
            16:03:44.0875 1076 HTTPFilter - ok
            16:03:44.0890 1076 i2omgmt - ok
            16:03:44.0890 1076 i2omp - ok
            16:03:44.0937 1076 i8042prt (a09bdc4ed10e3b2e0ec27bb94af32516) C:\windows\system32\DRIVERS\i8042prt.sys
            16:03:44.0937 1076 i8042prt - ok
            16:03:45.0046 1076 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
            16:03:45.0062 1076 idsvc - ok
            16:03:45.0078 1076 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\windows\system32\DRIVERS\imapi.sys
            16:03:45.0093 1076 Imapi - ok
            16:03:45.0109 1076 ImapiService (c4221678bbaa55239c23632875759961) C:\WINDOWS\system32\imapi.exe
            16:03:45.0125 1076 ImapiService - ok
            16:03:45.0125 1076 ini910u - ok
            16:03:45.0281 1076 IntcAzAudAddService (3000e98f519cf6fda669bae8e47f7b4f) C:\windows\system32\drivers\RtkHDAud.sys
            16:03:45.0343 1076 IntcAzAudAddService - ok
            16:03:45.0406 1076 IntelIde - ok
            16:03:45.0437 1076 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\windows\system32\drivers\ip6fw.sys
            16:03:45.0437 1076 Ip6Fw - ok
            16:03:45.0468 1076 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\windows\system32\DRIVERS\ipfltdrv.sys
            16:03:45.0468 1076 IpFilterDriver - ok
            16:03:45.0500 1076 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\windows\system32\DRIVERS\ipinip.sys
            16:03:45.0500 1076 IpInIp - ok
            16:03:45.0515 1076 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\windows\system32\DRIVERS\ipnat.sys
            16:03:45.0531 1076 IpNat - ok
            16:03:45.0531 1076 IPSec (23c74d75e36e7158768dd63d92789a91) C:\windows\system32\DRIVERS\ipsec.sys
            16:03:45.0531 1076 IPSec - ok
            16:03:45.0578 1076 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\windows\system32\DRIVERS\irda.sys
            16:03:45.0578 1076 irda - ok
            16:03:45.0578 1076 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\windows\system32\DRIVERS\irenum.sys
            16:03:45.0578 1076 IRENUM - ok
            16:03:45.0609 1076 Irmon (f9cb3a98b395a5e5cc36c65b3c41ad9c) C:\windows\System32\irmon.dll
            16:03:45.0625 1076 Irmon - ok
            16:03:45.0656 1076 irsir (0501f0b9ab08425f8c0eacbdcc04aa32) C:\windows\system32\DRIVERS\irsir.sys
            16:03:45.0656 1076 irsir - ok
            16:03:45.0671 1076 isapnp (355836975a67b6554bca60328cd6cb74) C:\windows\system32\DRIVERS\isapnp.sys
            16:03:45.0671 1076 isapnp - ok
            16:03:45.0703 1076 Kbdclass (16813155807c6881f4bfbf6657424659) C:\windows\system32\DRIVERS\kbdclass.sys
            16:03:45.0718 1076 Kbdclass - ok
            16:03:45.0734 1076 kbdhid (94c59cb884ba010c063687c3a50dce8e) C:\windows\system32\DRIVERS\kbdhid.sys
            16:03:45.0750 1076 kbdhid - ok
            16:03:45.0781 1076 kmixer (692bcf44383d056aed41b045a323d378) C:\windows\system32\drivers\kmixer.sys
            16:03:45.0781 1076 kmixer - ok
            16:03:45.0812 1076 KSecDD (b467646c54cc746128904e1654c750c1) C:\windows\system32\drivers\KSecDD.sys
            16:03:45.0812 1076 KSecDD - ok
            16:03:45.0843 1076 lanmanserver (1db8078a32e03ac8f5eb5e6dcac2aa34) C:\windows\System32\srvsvc.dll
            16:03:45.0843 1076 lanmanserver - ok
            16:03:45.0890 1076 lanmanworkstation (ad54ead46d92f413be189aabc1c59490) C:\windows\System32\wkssvc.dll
            16:03:45.0890 1076 lanmanworkstation - ok
            16:03:45.0906 1076 lbrtfdc - ok
            16:03:45.0937 1076 LmHosts (0f357c079ac529a844ab5b18e4eef881) C:\windows\System32\lmhsvc.dll
            16:03:45.0937 1076 LmHosts - ok
            16:03:45.0968 1076 MBAMProtector (fb097bbc1a18f044bd17bd2fccf97865) C:\WINDOWS\system32\drivers\mbam.sys
            16:03:45.0968 1076 MBAMProtector - ok
            16:03:46.0093 1076 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
            16:03:46.0109 1076 MBAMService - ok
            16:03:46.0125 1076 McComponentHostService - ok
            16:03:46.0156 1076 Messenger (e67a66a3781c1a483f0f8992664cbe0d) C:\windows\System32\msgsvc.dll
            16:03:46.0156 1076 Messenger - ok
            16:03:46.0187 1076 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\windows\system32\drivers\mnmdd.sys
            16:03:46.0187 1076 mnmdd - ok
            16:03:46.0234 1076 mnmsrvc (d3a2870cd96cda7bcff3dc54f64087ad) C:\WINDOWS\system32\mnmsrvc.exe
            16:03:46.0250 1076 mnmsrvc - ok
            16:03:46.0265 1076 Modem (510ade9327fe84c10254e1902697e25f) C:\windows\system32\drivers\Modem.sys
            16:03:46.0265 1076 Modem - ok
            16:03:46.0296 1076 Mouclass (027c01bd7ef3349aaebc883d8a799efb) C:\windows\system32\DRIVERS\mouclass.sys
            16:03:46.0296 1076 Mouclass - ok
            16:03:46.0296 1076 mouhid (124d6846040c79b9c997f78ef4b2a4e5) C:\windows\system32\DRIVERS\mouhid.sys
            16:03:46.0312 1076 mouhid - ok
            16:03:46.0328 1076 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\windows\system32\drivers\MountMgr.sys
            16:03:46.0328 1076 MountMgr - ok
            16:03:46.0328 1076 mraid35x - ok
            16:03:46.0343 1076 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\windows\system32\DRIVERS\mrxdav.sys
            16:03:46.0343 1076 MRxDAV - ok
            16:03:46.0437 1076 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\windows\system32\DRIVERS\mrxsmb.sys
            16:03:46.0453 1076 MRxSmb - ok
            16:03:46.0468 1076 MSDTC (8648d670ae0d95c95e7bbb5b80661796) C:\WINDOWS\system32\msdtc.exe
            16:03:46.0484 1076 MSDTC - ok
            16:03:46.0500 1076 Msfs (c941ea2454ba8350021d774daf0f1027) C:\windows\system32\drivers\Msfs.sys
            16:03:46.0500 1076 Msfs - ok
            16:03:46.0515 1076 MSIServer - ok
            16:03:46.0531 1076 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\windows\system32\drivers\MSKSSRV.sys
            16:03:46.0531 1076 MSKSSRV - ok
            16:03:46.0546 1076 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\windows\system32\drivers\MSPCLOCK.sys
            16:03:46.0546 1076 MSPCLOCK - ok
            16:03:46.0546 1076 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\windows\system32\drivers\MSPQM.sys
            16:03:46.0546 1076 MSPQM - ok
            16:03:46.0578 1076 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\windows\system32\DRIVERS\mssmbios.sys
            16:03:46.0578 1076 mssmbios - ok
            16:03:46.0578 1076 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\windows\system32\drivers\MSTEE.sys
            16:03:46.0578 1076 MSTEE - ok
            16:03:46.0609 1076 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\windows\system32\drivers\Mup.sys
            16:03:46.0609 1076 Mup - ok
            16:03:46.0640 1076 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\windows\system32\DRIVERS\NABTSFEC.sys
            16:03:46.0640 1076 NABTSFEC - ok
            16:03:46.0687 1076 napagent (69e4fbbabaeee1bff422e091da3171da) C:\windows\System32\qagentrt.dll
            16:03:46.0703 1076 napagent - ok
            16:03:46.0734 1076 NDIS (1df7f42665c94b825322fae71721130d) C:\windows\system32\drivers\NDIS.sys
            16:03:46.0734 1076 NDIS - ok
            16:03:46.0750 1076 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\windows\system32\DRIVERS\NdisIP.sys
            16:03:46.0765 1076 NdisIP - ok
            16:03:46.0796 1076 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\windows\system32\DRIVERS\ndistapi.sys
            16:03:46.0796 1076 NdisTapi - ok
            16:03:46.0828 1076 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\windows\system32\DRIVERS\ndisuio.sys
            16:03:46.0828 1076 Ndisuio - ok
            16:03:46.0828 1076 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\windows\system32\DRIVERS\ndiswan.sys
            16:03:46.0828 1076 NdisWan - ok
            16:03:46.0859 1076 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\windows\system32\drivers\NDProxy.sys
            16:03:46.0859 1076 NDProxy - ok
            16:03:46.0875 1076 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\windows\system32\DRIVERS\netbios.sys
            16:03:46.0875 1076 NetBIOS - ok
            16:03:46.0921 1076 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\windows\system32\DRIVERS\netbt.sys
            16:03:46.0921 1076 NetBT - ok
            16:03:46.0953 1076 NetDDE (5c9b1d83755b36237b70f95df3d46a52) C:\windows\system32\netdde.exe
            16:03:46.0968 1076 NetDDE - ok
            16:03:46.0968 1076 NetDDEdsdm (5c9b1d83755b36237b70f95df3d46a52) C:\windows\system32\netdde.exe
            16:03:46.0968 1076 NetDDEdsdm - ok
            16:03:47.0000 1076 Netlogon (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\windows\system32\lsass.exe
            16:03:47.0000 1076 Netlogon - ok
            16:03:47.0031 1076 Netman (be0cb143fa427d93440ded18db8c918b) C:\windows\System32\netman.dll
            16:03:47.0031 1076 Netman - ok
            16:03:47.0125 1076 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
            16:03:47.0125 1076 NetTcpPortSharing - ok
            16:03:47.0140 1076 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\windows\system32\DRIVERS\nic1394.sys
            16:03:47.0140 1076 NIC1394 - ok
            16:03:47.0203 1076 Nla (6f5f546a92c7b6ae45db1d6910781eb0) C:\windows\System32\mswsock.dll
            16:03:47.0218 1076 Nla - ok
            16:03:47.0328 1076 nosGetPlusHelper (25d6b2eb0a1fc4ab413afe7ec4793ec1) C:\Program Files\NOS\bin\getPlus_Helper_3004.dll
            16:03:47.0328 1076 nosGetPlusHelper - ok
            16:03:47.0359 1076 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\windows\system32\drivers\Npfs.sys
            16:03:47.0375 1076 Npfs - ok
            16:03:47.0406 1076 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\windows\system32\drivers\Ntfs.sys
            16:03:47.0421 1076 Ntfs - ok
            16:03:47.0484 1076 NtLmSsp (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\windows\system32\lsass.exe
            16:03:47.0484 1076 NtLmSsp - ok
            16:03:47.0515 1076 NtmsSvc (037d92b3a7853a183fcab77fb1d13d6c) C:\windows\system32\ntmssvc.dll
            16:03:47.0531 1076 NtmsSvc - ok
            16:03:47.0546 1076 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\windows\system32\drivers\Null.sys
            16:03:47.0546 1076 Null - ok
            16:03:47.0843 1076 nv (a05d99cbf55eb493c9e82b4bca848ef5) C:\windows\system32\DRIVERS\nv4_mini.sys
            16:03:48.0140 1076 nv - ok
            16:03:48.0218 1076 nvata (9eccd189a9554c30a0d18a429778c7ba) C:\windows\system32\DRIVERS\nvata.sys
            16:03:48.0218 1076 nvata - ok
            16:03:48.0265 1076 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\windows\system32\DRIVERS\nwlnkflt.sys
            16:03:48.0265 1076 NwlnkFlt - ok
            16:03:48.0296 1076 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\windows\system32\DRIVERS\nwlnkfwd.sys
            16:03:48.0296 1076 NwlnkFwd - ok
            16:03:48.0390 1076 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE
            16:03:48.0390 1076 odserv - ok
            16:03:48.0421 1076 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\windows\system32\DRIVERS\ohci1394.sys
            16:03:48.0421 1076 ohci1394 - ok
            16:03:48.0453 1076 optousb (c18a238392f493bc5f4d01f837416c5f) C:\windows\system32\DRIVERS\optousb.sys
            16:03:48.0453 1076 optousb - ok
            16:03:48.0468 1076 optovcm (d99d4f1765ca2bf3d904e0a74f01963d) C:\windows\system32\DRIVERS\optovcm.sys
            16:03:48.0468 1076 optovcm - ok
            16:03:48.0515 1076 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
            16:03:48.0515 1076 ose - ok
            16:03:48.0546 1076 Parport (8fd0bdbea875d06ccf6c945ca9abaf75) C:\windows\system32\DRIVERS\parport.sys
            16:03:48.0562 1076 Parport - ok
            16:03:48.0593 1076 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\windows\system32\drivers\PartMgr.sys
            16:03:48.0593 1076 PartMgr - ok
            16:03:48.0640 1076 ParVdm (9575c5630db8fb804649a6959737154c) C:\windows\system32\drivers\ParVdm.sys
            16:03:48.0640 1076 ParVdm - ok
            16:03:48.0671 1076 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\windows\system32\DRIVERS\pccsmcfd.sys
            16:03:48.0671 1076 pccsmcfd - ok
            16:03:48.0671 1076 PCI (043410877bda580c528f45165f7125bc) C:\windows\system32\DRIVERS\pci.sys
            16:03:48.0718 1076 PCI - ok
            16:03:48.0718 1076 PCIDump - ok
            16:03:48.0781 1076 PCIIde (f4bfde7209c14a07aaa61e4d6ae69eac) C:\windows\system32\DRIVERS\pciide.sys
            16:03:48.0781 1076 PCIIde - ok
            16:03:48.0812 1076 Pcmcia (f0406cbc60bdb0394a0e17ffb04cdd3d) C:\windows\system32\drivers\Pcmcia.sys
            16:03:48.0828 1076 Pcmcia - ok
            16:03:48.0875 1076 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\windows\system32\Drivers\pcouffin.sys
            16:03:48.0875 1076 pcouffin - ok
            16:03:48.0890 1076 PDCOMP - ok
            16:03:48.0890 1076 PDFRAME - ok
            16:03:48.0890 1076 PDRELI - ok
            16:03:48.0906 1076 PDRFRAME - ok
            16:03:48.0906 1076 perc2 - ok
            16:03:48.0921 1076 perc2hib - ok
            16:03:48.0968 1076 PlugPlay (c3fb1d70cb88722267949694ba51759e) C:\windows\system32\services.exe
            16:03:48.0968 1076 PlugPlay - ok
            16:03:49.0046 1076 Point32 (420336f91eb745811cf130c80ede0653) C:\windows\system32\DRIVERS\point32.sys
            16:03:49.0046 1076 Point32 - ok
            16:03:49.0078 1076 PolicyAgent (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\windows\system32\lsass.exe
            16:03:49.0078 1076 PolicyAgent - ok
            16:03:49.0109 1076 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\windows\system32\DRIVERS\raspptp.sys
            16:03:49.0109 1076 PptpMiniport - ok
            16:03:49.0125 1076 Processor (e19c9632ac828f6f214391e2bdda11cb) C:\windows\system32\DRIVERS\processr.sys
            16:03:49.0125 1076 Processor - ok
            16:03:49.0125 1076 ProtectedStorage (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\windows\system32\lsass.exe
            16:03:49.0140 1076 ProtectedStorage - ok
            16:03:49.0140 1076 PSched (09298ec810b07e5d582cb3a3f9255424) C:\windows\system32\DRIVERS\psched.sys
            16:03:49.0140 1076 PSched - ok
            16:03:49.0171 1076 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\windows\system32\DRIVERS\ptilink.sys
            16:03:49.0171 1076 Ptilink - ok
            16:03:49.0171 1076 ql1080 - ok
            16:03:49.0187 1076 Ql10wnt - ok
            16:03:49.0187 1076 ql12160 - ok
            16:03:49.0203 1076 ql1240 - ok
            16:03:49.0203 1076 ql1280 - ok
            16:03:49.0265 1076 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\windows\system32\DRIVERS\rasacd.sys
            16:03:49.0265 1076 RasAcd - ok
            16:03:49.0312 1076 RasAuto (78da9ccdac683ef5aa87d1c919f6d221) C:\windows\System32\rasauto.dll
            16:03:49.0328 1076 RasAuto - ok
            16:03:49.0343 1076 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\windows\system32\DRIVERS\rasirda.sys
            16:03:49.0359 1076 Rasirda - ok
            16:03:49.0359 1076 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\windows\system32\DRIVERS\rasl2tp.sys
            16:03:49.0359 1076 Rasl2tp - ok
            16:03:49.0437 1076 RasMan (0a48df90b4784f9b90a2671af992c914) C:\windows\System32\rasmans.dll
            16:03:49.0453 1076 RasMan - ok
            16:03:49.0453 1076 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\windows\system32\DRIVERS\raspppoe.sys
            16:03:49.0453 1076 RasPppoe - ok
            16:03:49.0468 1076 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\windows\system32\DRIVERS\raspti.sys
            16:03:49.0468 1076 Raspti - ok
            16:03:49.0484 1076 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\windows\system32\DRIVERS\rdbss.sys
            16:03:49.0500 1076 Rdbss - ok
            16:03:49.0500 1076 RDPCDD (4912d5b403614ce99c28420f75353332) C:\windows\system32\DRIVERS\RDPCDD.sys
            16:03:49.0500 1076 RDPCDD - ok
            16:03:49.0546 1076 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\windows\system32\DRIVERS\rdpdr.sys
            16:03:49.0546 1076 rdpdr - ok
            16:03:49.0593 1076 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\windows\system32\drivers\RDPWD.sys
            16:03:49.0593 1076 RDPWD - ok
            16:03:49.0656 1076 RDSessMgr (9f63d9c5b238ed1c375d417eff3d5be7) C:\WINDOWS\system32\sessmgr.exe
            16:03:49.0671 1076 RDSessMgr - ok
            16:03:49.0687 1076 redbook (d8eb2a7904db6c916eb5361878ddcbae) C:\windows\system32\DRIVERS\redbook.sys
            16:03:49.0703 1076 redbook - ok
            16:03:49.0734 1076 RemoteAccess (7da370c31673c99497bd07068ee6e354) C:\windows\System32\mprdim.dll
            16:03:49.0734 1076 RemoteAccess - ok
            16:03:49.0765 1076 RemoteRegistry (e598d81197e2e0ec42a0c55772bb00e8) C:\windows\system32\regsvc.dll
            16:03:49.0765 1076 RemoteRegistry - ok
            16:03:49.0781 1076 RimUsb - ok
            16:03:49.0812 1076 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\windows\system32\DRIVERS\RimSerial.sys
            16:03:49.0812 1076 RimVSerPort - ok
            16:03:49.0859 1076 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\windows\system32\Drivers\RootMdm.sys
            16:03:49.0859 1076 ROOTMODEM - ok
            16:03:49.0875 1076 RpcLocator (499c59a2584f6d4ea41e944da571d993) C:\windows\system32\locator.exe
            16:03:49.0890 1076 RpcLocator - ok
            16:03:49.0921 1076 RpcSs (0203b1aad358f206cb0a3c1f93cce17a) C:\windows\system32\rpcss.dll
            16:03:49.0937 1076 RpcSs - ok
            16:03:49.0968 1076 RSVP (414964844f4793acb868d057e8ed997e) C:\windows\system32\rsvp.exe
            16:03:49.0968 1076 RSVP - ok
            16:03:50.0000 1076 SamSs (91e6024d6d4dcdecdb36c43ecf9bbecb) C:\windows\system32\lsass.exe
            16:03:50.0000 1076 SamSs - ok
            16:03:50.0078 1076 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
            16:03:50.0078 1076 SASDIFSV - ok
            16:03:50.0093 1076 SASENUM (7ce61c25c159f50f9eaf6d77fc83fa35) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
            16:03:50.0093 1076 SASENUM - ok
            16:03:50.0140 1076 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
            16:03:50.0140 1076 SASKUTIL - ok
            16:03:50.0171 1076 SCardSvr (67949cc8a865296c1333c96a4e1a2d66) C:\windows\System32\SCardSvr.exe
            16:03:50.0171 1076 SCardSvr - ok
            16:03:50.0218 1076 Schedule (55f5c5c1be1a78e285033e432ba01597) C:\windows\system32\schedsvc.dll
            16:03:50.0234 1076 Schedule - ok
            16:03:50.0281 1076 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\DRIVERS\secdrv.sys
            16:03:50.0281 1076 Secdrv - ok
            16:03:50.0296 1076 seclogon (5ac311c0af2af5ec221670bb8dc479d3) C:\windows\System32\seclogon.dll
            16:03:50.0312 1076 seclogon - ok
            16:03:50.0375 1076 SENS (3531366f38f453d08fe72e7b32dfe786) C:\windows\system32\sens.dll
            16:03:50.0390 1076 SENS - ok
            16:03:50.0421 1076 Ser2pl (541e8e4759b7b659f17b1fa6eede5e9e) C:\windows\system32\DRIVERS\ser2pl.sys
            16:03:50.0421 1076 Ser2pl - ok
            16:03:50.0453 1076 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\windows\system32\DRIVERS\serenum.sys
            16:03:50.0453 1076 serenum - ok
            16:03:50.0453 1076 ServiceLayer - ok
            16:03:50.0515 1076 sfdrv01 (4c0d673281178cb496011a2e28571fc8) C:\windows\system32\drivers\sfdrv01.sys
            16:03:50.0515 1076 sfdrv01 - ok
            16:03:50.0531 1076 sfhlp02 (15be2b5e4dc5b8623cf167720682abc9) C:\windows\system32\drivers\sfhlp02.sys
            16:03:50.0531 1076 sfhlp02 - ok
            16:03:50.0562 1076 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\windows\system32\drivers\Sfloppy.sys
            16:03:50.0562 1076 Sfloppy - ok
            16:03:50.0578 1076 sfsync04 (21a4c510ab071a10bcb638fe4254d101) C:\windows\system32\drivers\sfsync04.sys
            16:03:50.0593 1076 sfsync04 - ok
            16:03:50.0703 1076 SharedAccess (f4ce708a7d17a625de6c0fd746d50e88) C:\windows\System32\ipnathlp.dll
            16:03:50.0703 1076 SharedAccess - ok
            16:03:50.0765 1076 ShellHWDetection (1b8542f338cdd86929a084a455837158) C:\windows\System32\shsvcs.dll
            16:03:50.0781 1076 ShellHWDetection - ok
            16:03:50.0781 1076 Simbad - ok
            16:03:50.0812 1076 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\windows\system32\DRIVERS\SLIP.sys
            16:03:50.0812 1076 SLIP - ok
            16:03:50.0812 1076 Sparrow - ok
            16:03:50.0843 1076 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\windows\system32\drivers\splitter.sys
            16:03:50.0843 1076 splitter - ok
            16:03:50.0890 1076 Spooler (60784f891563fb1b767f70117fc2428f) C:\windows\system32\spoolsv.exe
            16:03:50.0890 1076 Spooler - ok
            16:03:50.0984 1076 sptd (d390675b8ce45e5fb359338e5e649329) C:\windows\system32\Drivers\sptd.sys
            16:03:50.0984 1076 Suspicious file (NoAccess): C:\windows\system32\Drivers\sptd.sys. md5: d390675b8ce45e5fb359338e5e649329
            16:03:50.0984 1076 sptd ( LockedFile.Multi.Generic ) - warning
            16:03:50.0984 1076 sptd - detected LockedFile.Multi.Generic (1)
            16:03:50.0984 1076 SQTECH9080 - ok
            16:03:51.0000 1076 sr (39626e6dc1fb39434ec40c42722b660a) C:\windows\system32\DRIVERS\sr.sys
            16:03:51.0000 1076 sr - ok
            16:03:51.0062 1076 srservice (6ed29124a1c83bd0cf6b26bd01ca6f6f) C:\WINDOWS\system32\srsvc.dll
            16:03:51.0062 1076 srservice - ok
            16:03:51.0109 1076 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\windows\system32\DRIVERS\srv.sys
            16:03:51.0125 1076 Srv - ok
            16:03:51.0156 1076 SSDPSRV (ea9e0db8684cef2fd3badd671df5a112) C:\windows\System32\ssdpsrv.dll
            16:03:51.0156 1076 SSDPSRV - ok
            16:03:51.0187 1076 StarOpen (306521935042fc0a6988d528643619b3) C:\windows\system32\drivers\StarOpen.sys
            16:03:51.0187 1076 StarOpen - ok
            16:03:51.0218 1076 stisvc (d76b0e8a4ecad1adcc75fd14a7acc54c) C:\windows\system32\wiaservc.dll
            16:03:51.0234 1076 stisvc - ok
            16:03:51.0265 1076 streamip (77813007ba6265c4b6098187e6ed79d2) C:\windows\system32\DRIVERS\StreamIP.sys
            16:03:51.0265 1076 streamip - ok
            16:03:51.0296 1076 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\windows\system32\DRIVERS\swenum.sys
            16:03:51.0296 1076 swenum - ok
            16:03:51.0343 1076 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\windows\system32\drivers\swmidi.sys
            16:03:51.0343 1076 swmidi - ok
            16:03:51.0359 1076 SwPrv - ok
            16:03:51.0359 1076 symc810 - ok
            16:03:51.0375 1076 symc8xx - ok
            16:03:51.0375 1076 sym_hi - ok
            16:03:51.0375 1076 sym_u3 - ok
            16:03:51.0453 1076 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\windows\system32\drivers\sysaudio.sys
            16:03:51.0453 1076 sysaudio - ok
            16:03:51.0484 1076 SysmonLog (0899061318a6b1d9596aabfc77f45e44) C:\windows\system32\smlogsvc.exe
            16:03:51.0484 1076 SysmonLog - ok
            16:03:51.0515 1076 TapiSrv (8e5231171ad6595ff002e848cc54fcd7) C:\windows\System32\tapisrv.dll
            16:03:51.0515 1076 TapiSrv - ok
            16:03:51.0546 1076 tbhsd (c26c6dff638d9e51dc5cc60a7785d057) C:\windows\system32\drivers\tbhsd.sys
            16:03:51.0562 1076 tbhsd - ok
            16:03:51.0625 1076 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\windows\system32\DRIVERS\tcpip.sys
            16:03:51.0625 1076 Tcpip - ok
            16:03:51.0687 1076 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\windows\system32\drivers\TDPIPE.sys
            16:03:51.0734 1076 TDPIPE - ok
            16:03:51.0734 1076 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\windows\system32\drivers\TDTCP.sys
            16:03:51.0750 1076 TDTCP - ok
            16:03:51.0781 1076 TermDD (88155247177638048422893737429d9e) C:\windows\system32\DRIVERS\termdd.sys
            16:03:51.0781 1076 TermDD - ok
            16:03:51.0828 1076 TermService (710bc85a8c22626ee094439e3ea0d38c) C:\windows\System32\termsrv.dll
            16:03:51.0828 1076 TermService - ok
            16:03:51.0875 1076 Themes (1b8542f338cdd86929a084a455837158) C:\windows\System32\shsvcs.dll
            16:03:51.0890 1076 Themes - ok
            16:03:51.0921 1076 TlntSvr (d859a9d2f026ce5804485068ffd6eaf2) C:\WINDOWS\system32\tlntsvr.exe
            16:03:51.0921 1076 TlntSvr - ok
            16:03:51.0953 1076 tmcomm (4dc436421c9d745d7e8c37f956701c78) C:\WINDOWS\system32\drivers\tmcomm.sys
            16:03:51.0953 1076 tmcomm - ok
            16:03:51.0953 1076 TosIde - ok
            16:03:51.0968 1076 TrkWks (e1a84a5067627407a53c2c4f8d8a1d2e) C:\windows\system32\trkwks.dll
            16:03:51.0984 1076 TrkWks - ok
            16:03:52.0000 1076 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\windows\system32\drivers\Udfs.sys
            16:03:52.0000 1076 Udfs - ok
            16:03:52.0031 1076 ultra - ok
            16:03:52.0093 1076 UnlockerDriver5 (28cd05b9e54a11f08e3968ccc8f45002) C:\Program Files\Unlocker\UnlockerDriver5.sys
            16:03:52.0093 1076 UnlockerDriver5 - ok
            16:03:52.0140 1076 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\windows\system32\DRIVERS\update.sys
            16:03:52.0140 1076 Update - ok
            16:03:52.0171 1076 upnphost (bd8166a495b02308f364b36249475f22) C:\windows\System32\upnphost.dll
            16:03:52.0187 1076 upnphost - ok
            16:03:52.0203 1076 UPS (1edc93d7bd731b5ca6248ae245099b60) C:\windows\System32\ups.exe
            16:03:52.0218 1076 UPS - ok
            16:03:52.0250 1076 USBAAPL (60a68a5ea173a97971ee9f1ff49eb2b3) C:\windows\system32\Drivers\usbaapl.sys
            16:03:52.0250 1076 USBAAPL - ok
            16:03:52.0296 1076 usbaudio (e919708db44ed8543a7c017953148330) C:\windows\system32\drivers\usbaudio.sys
            16:03:52.0296 1076 usbaudio - ok
            16:03:52.0343 1076 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\windows\system32\DRIVERS\usbccgp.sys
            16:03:52.0343 1076 usbccgp - ok
            16:03:52.0375 1076 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\windows\system32\DRIVERS\usbehci.sys
            16:03:52.0375 1076 usbehci - ok
            16:03:52.0406 1076 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\windows\system32\DRIVERS\usbhub.sys
            16:03:52.0421 1076 usbhub - ok
            16:03:52.0421 1076 usbohci (0daecce65366ea32b162f85f07c6753b) C:\windows\system32\DRIVERS\usbohci.sys
            16:03:52.0421 1076 usbohci - ok
            16:03:52.0437 1076 usbprint (a717c8721046828520c9edf31288fc00) C:\windows\system32\DRIVERS\usbprint.sys
            16:03:52.0453 1076 usbprint - ok
            16:03:52.0468 1076 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\windows\system32\DRIVERS\usbscan.sys
            16:03:52.0468 1076 usbscan - ok
            16:03:52.0500 1076 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\windows\system32\DRIVERS\USBSTOR.SYS
            16:03:52.0500 1076 usbstor - ok
            16:03:52.0531 1076 usbvideo (63bbfca7f390f4c49ed4b96bfb1633e0) C:\windows\system32\Drivers\usbvideo.sys
            16:03:52.0531 1076 usbvideo - ok
            16:03:52.0578 1076 usnjsvc - ok
            16:03:52.0609 1076 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\windows\System32\drivers\vga.sys
            16:03:52.0609 1076 VgaSave - ok
            16:03:52.0625 1076 ViaIde - ok
            16:03:52.0671 1076 VolSnap (46de1126684369bace4849e4fc8c43ca) C:\windows\system32\drivers\VolSnap.sys
            16:03:52.0671 1076 VolSnap - ok
            16:03:52.0718 1076 VSS (5a4da252b2c0550ab83d129c02cf6c19) C:\windows\System32\vssvc.exe
            16:03:52.0734 1076 VSS - ok
            16:03:52.0765 1076 W32Time (c1f726ee0b043b074a68992bc4aef8fd) C:\WINDOWS\system32\w32time.dll
            16:03:52.0781 1076 W32Time - ok
            16:03:52.0796 1076 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\windows\system32\DRIVERS\wanarp.sys
            16:03:52.0812 1076 Wanarp - ok
            16:03:52.0859 1076 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\windows\system32\Drivers\wdf01000.sys
            16:03:52.0859 1076 Wdf01000 - ok
            16:03:52.0875 1076 WDICA - ok
            16:03:52.0890 1076 wdmaud (6768acf64b18196494413695f0c3a00f) C:\windows\system32\drivers\wdmaud.sys
            16:03:52.0906 1076 wdmaud - ok
            16:03:53.0015 1076 WebClient (714670e64fbe6d28d99871ed9a52a334) C:\windows\System32\webclnt.dll
            16:03:53.0015 1076 WebClient - ok
            16:03:53.0078 1076 winmgmt (5e9deae9980ff34bcd6dde2e9e2bf911) C:\windows\system32\wbem\WMIsvc.dll
            16:03:53.0093 1076 winmgmt - ok
            16:03:53.0125 1076 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
            16:03:53.0125 1076 WmdmPmSN - ok
            16:03:53.0171 1076 Wmi (31c1fd0bbdc5b81c21edba4331edae55) C:\windows\System32\advapi32.dll
            16:03:53.0187 1076 Wmi - ok
            16:03:53.0234 1076 WmiApSrv (4e8e8a58f56b25d0795f484e5eb7f898) C:\WINDOWS\system32\wbem\wmiapsrv.exe
            16:03:53.0234 1076 WmiApSrv - ok
            16:03:53.0359 1076 WMPNetworkSvc (c9bea742ce225cc993c9465fddae4656) C:\Program Files\Windows Media Player\WMPNetwk.exe
            16:03:53.0375 1076 WMPNetworkSvc - ok
            16:03:53.0437 1076 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\windows\system32\DRIVERS\wpdusb.sys
            16:03:53.0437 1076 WpdUsb - ok
            16:03:53.0484 1076 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\windows\System32\drivers\ws2ifsl.sys
            16:03:53.0484 1076 WS2IFSL - ok
            16:03:53.0500 1076 WSearch - ok
            16:03:53.0531 1076 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\windows\system32\DRIVERS\WSTCODEC.SYS
            16:03:53.0531 1076 WSTCODEC - ok
            16:03:53.0593 1076 wuauserv (75d6c5c3d2c93b1f9931e5dfb693ae2a) C:\WINDOWS\system32\wuauserv.dll
            16:03:53.0640 1076 wuauserv - ok
            16:03:53.0671 1076 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:\windows\system32\DRIVERS\WudfPf.sys
            16:03:53.0671 1076 WudfPf - ok
            16:03:53.0703 1076 WudfRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\windows\system32\DRIVERS\wudfrd.sys
            16:03:53.0718 1076 WudfRd - ok
            16:03:53.0781 1076 WudfSvc (575a4190d989f64732119e4114045a4f) C:\windows\System32\WUDFSvc.dll
            16:03:53.0796 1076 WudfSvc - ok
            16:03:53.0859 1076 WZCSVC (c336e54ee0c291a02f004667db1e66cb) C:\windows\System32\wzcsvc.dll
            16:03:53.0875 1076 WZCSVC - ok
            16:03:53.0890 1076 xmlprov (f92a87fdda0c11c8604fbc2b864fa726) C:\windows\System32\xmlprov.dll
            16:03:53.0906 1076 xmlprov - ok
            16:03:53.0937 1076 yukonwxp (a5d4eae27e68625296d685a786897491) C:\windows\system32\DRIVERS\yk51x86.sys
            16:03:53.0953 1076 yukonwxp - ok
            16:03:53.0984 1076 ZSMC302 (1e7313797552a93222e36e425676308a) C:\windows\system32\Drivers\usbvm302.sys
            16:03:53.0984 1076 ZSMC302 - ok
            16:03:54.0015 1076 MBR (0x1B8) (c99c3199cfaa4cbdcd91493f6d113a50) \Device\Harddisk0\DR0
            16:03:54.0296 1076 \Device\Harddisk0\DR0 - ok
            16:03:54.0312 1076 Boot (0x1200) (578a3eb4e9000af3b5ff64e4b53b28ee) \Device\Harddisk0\DR0\Partition0
            16:03:54.0312 1076 \Device\Harddisk0\DR0\Partition0 - ok
            16:03:54.0312 1076 ============================================================
            16:03:54.0312 1076 Scan finished
            16:03:54.0312 1076 ============================================================
            16:03:54.0328 3648 Detected object count: 1
            16:03:54.0328 3648 Actual detected object count: 1
            16:04:13.0718 3648 sptd ( LockedFile.Multi.Generic ) - skipped by user
            16:04:13.0718 3648 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
            16:04:17.0375 3816 Deinitialize success
            1. Re

              Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :

              https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

              Ou

              https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

              Serveur N°2

              Ou

              http://www.premiumorange.com/zeb-help-process/zhpdiag.html
              en bas de la page ZHP avec un numéro de version.

              Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

              Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »

              Clique sur la loupe pour lancer l'analyse.

              Laisse l'outil travailler, il peut être assez long.

              Ferme ZHPDiag en fin d'analyse.

              Pour transmettre le rapport clique sur ce lien :

              http://pjjoint.malekal.com/

              https://www.cjoint.com/

              Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).

              Sélectionne le fichier ZHPDiag.txt.

              Clique sur "Cliquez ici pour déposer le fichier".

              Un lien de cette forme :

              http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

              est ajouté dans la page.

              Copie ce lien dans ta réponse.

              Merci

              @+
              1. j'ai 2 fichiers txt alors je te mets les 2 :

                http://pjjoint.malekal.com/files.php?id=20120517_c9j12f13t8o14
                http://pjjoint.malekal.com/files.php?id=20120517_z11i14h10e7i11
                1. désolée, je l'avais pas vu :

                  http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120517_s7b11r13x12d14
                  1. Re

                    Utilisation de l'outil ZHPFix :

                    * Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
                    -------------------------------------------------------------------------------------------------


                    O4 - HKCU\..\Run: [Kujytuo] C:\Documents and Settings\gaelle\Application Data\kujytuo\kujytuo.exe (.not file.)
                    O4 - HKUS\S-1-5-21-583907252-1767777339-725345543-1003\..\Run: [Kujytuo] C:\Documents and Settings\gaelle\Application Data\kujytuo\kujytuo.exe (.not file.)
                    [HKCU\Software\PriceGong]
                    [HKLM\Software\Babylon]
                    O43 - CFD: 08/08/2007 - 17:12:28 - [0,953] ----D C:\Documents and Settings\gaelle\Application Data\Babylon
                    O43 - CFD: 04/04/2012 - 18:40:01 - [3,790] ----D C:\Documents and Settings\gaelle\Local Settings\Application Data\Babylon
                    O43 - CFD: 09/09/2007 - 18:13:42 - [0,005] ----D C:\Documents and Settings\gaelle\Menu Démarrer\Programmes\InternetGameBox
                    O69 - SBI: SearchScopes [HKCU] {5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} - (ALOT Recherche) - https://search.alot.com/
                    [HKLM\Software\Classes\AppID\contenthandler.dll]
                    [HKLM\Software\Classes\TypeLib\{259eeb17-79aa-44df-8410-8e55f82a902a}]
                    [HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}]
                    [HKLM\Software\Classes\Interface\{3e16a203-c0aa-4d44-acc5-38a70a8c76da}]
                    [HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}]
                    [HKLM\Software\Classes\Interface\{5663b370-f3c3-40d1-9c46-0e800aa4d0e8}]
                    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}]
                    [HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6e15d3c4-c6fc-4f02-b130-77cc5b1f09db}]
                    [HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}]
                    [HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}]
                    [HKLM\Software\Classes\AppID\{a5461fca-320c-4d6f-a150-a53823ce8142}]
                    [HKLM\Software\Classes\TypeLib\{c7403c30-3644-43d8-a82f-4bd84b9682d9}]
                    [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\PriceGong]
                    C:\Documents and Settings\gaelle\Application Data\Babylon
                    C:\Documents and Settings\gaelle\Local Settings\Application Data\Babylon
                    O4 - HKLM\..\Run: [NPSStartup] Clé orpheline
                    [HKCU\Software\SweetIM]
                    [HKLM\Software\SweetIM]
                    O43 - CFD: 11/04/2012 - 15:19:54 - [4,416] ----D C:\Program Files\SweetIM
                    O43 - CFD: 15/10/2008 - 15:32:54 - [0] ----D C:\Documents and Settings\gaelle\Local Settings\Application Data\Conduit
                    [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E08A9998-D98F-476f-8F5C-37C80FE0A4DA}]
                    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}]
                    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}]
                    [HKCU\Software\SweetIM]
                    [HKLM\Software\SweetIM]
                    C:\Program Files\SweetIM
                    C:\Documents and Settings\gaelle\Local Settings\Application Data\Conduit
                    O42 - Logiciel: Java 6 Update 29 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216014FF}

                    FirewallRAZ
                    Emptytemp

                    --------------------------------------------------------------------------------------------
                    Puis lance ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe
                    « Exécuter en tant qu'administrateur »
                    .

                    * Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

                    *Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

                    *Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
                    - Clique sur le bouton « GO » pour lancer le nettoyage,

                    -> laisse travailler l'outil et ne touche à rien ...

                    -> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !

                    Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...

                    ( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )

                    A+
                    1. Rapport de ZHPFix 1.12.3372 par Nicolas Coolman, Update du 22/11/2011
                      Fichier d'export Registre :
                      Run by gaelle at 17/05/2012 18:00:42
                      Windows XP Professional Service Pack 3 (Build 2600)
                      Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

                      ========== Logiciel(s) ==========
                      SUPPRIME O42 - Logiciel: Java 6 Update 29 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216014FF}

                      ========== Clé(s) du Registre ==========
                      SUPPRIME Key: HKCU\Software\PriceGong
                      SUPPRIME Key: HKLM\Software\Babylon
                      SUPPRIME Key: SearchScopes :{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
                      SUPPRIME Key: HKLM\Software\Classes\AppID\contenthandler.dll
                      SUPPRIME Key: HKLM\Software\Classes\TypeLib\{259eeb17-79aa-44df-8410-8e55f82a902a}
                      SUPPRIME Key: HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
                      SUPPRIME Key: HKLM\Software\Classes\Interface\{3e16a203-c0aa-4d44-acc5-38a70a8c76da}
                      SUPPRIME Key: HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
                      SUPPRIME Key: HKLM\Software\Classes\Interface\{5663b370-f3c3-40d1-9c46-0e800aa4d0e8}
                      ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
                      SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6e15d3c4-c6fc-4f02-b130-77cc5b1f09db}
                      SUPPRIME Key: HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
                      SUPPRIME Key: HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
                      SUPPRIME Key: HKLM\Software\Classes\AppID\{a5461fca-320c-4d6f-a150-a53823ce8142}
                      SUPPRIME Key: HKLM\Software\Classes\TypeLib\{c7403c30-3644-43d8-a82f-4bd84b9682d9}
                      SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\PriceGong
                      SUPPRIME Key: HKCU\Software\SweetIM
                      SUPPRIME Key: HKLM\Software\SweetIM
                      SUPPRIME Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E08A9998-D98F-476f-8F5C-37C80FE0A4DA}
                      SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
                      SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}

                      ========== Valeur(s) du Registre ==========
                      SUPPRIME RunValue: Kujytuo
                      ABSENT RunValue: Kujytuo
                      SUPPRIME RunValue: NPSStartup
                      SUPPRIME FirewallRaz (SP) : C:\Program Files\PPLive\PPLive.exe
                      SUPPRIME FirewallRaz (SP) : C:\Program Files\PPMate\ppmate.exe
                      SUPPRIME FirewallRaz (SP) : C:\Program Files\PPMate\ppamnet.exe
                      SUPPRIME FirewallRaz (SP) : C:\Program Files\TVAnts\Tvants.exe
                      SUPPRIME FirewallRaz (SP) : C:\Documents and Settings\gaelle\Application Data\SopCast\adv\SopAdver.exe
                      SUPPRIME FirewallRaz (SP) : C:\Program Files\SopCast\SopCast.exe
                      SUPPRIME FirewallRaz (SP) : C:\Program Files\21cn\VGO\Clt.exe
                      SUPPRIME FirewallRaz (SP) : C:\Program Files\ma-config.com\maconfservice.exe
                      Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

                      ========== Dossier(s) ==========
                      SUPPRIME Folder: C:\Documents and Settings\gaelle\Application Data\Babylon
                      SUPPRIME Folder: C:\Documents and Settings\gaelle\Local Settings\Application Data\Babylon
                      SUPPRIME Folder: C:\Documents and Settings\gaelle\Menu Démarrer\Programmes\InternetGameBox
                      SUPPRIME Folder: C:\Program Files\SweetIM
                      SUPPRIME Folder: C:\Documents and Settings\gaelle\Local Settings\Application Data\Conduit
                      SUPPRIME Temporaires Windows: : 69

                      ========== Fichier(s) ==========
                      ABSENT File: c:\documents and settings\gaelle\application data\kujytuo\kujytuo.exe
                      ABSENT Folder/File: c:\documents and settings\gaelle\application data\babylon
                      ABSENT Folder/File: c:\documents and settings\gaelle\local settings\application data\babylon
                      ABSENT Folder/File: c:\program files\sweetim
                      ABSENT Folder/File: c:\documents and settings\gaelle\local settings\application data\conduit
                      SUPPRIME Temporaires Windows: : 4

                      ========== Récapitulatif ==========
                      21 : Clé(s) du Registre
                      12 : Valeur(s) du Registre
                      6 : Dossier(s)
                      6 : Fichier(s)
                      1 : Logiciel(s)

                      End of clean in 01mn 09s

                      ========== Chemin de fichier rapport ==========
                      C:\ZHP\ZHPFix[R1].txt - 17/05/2012 18:00:42 [4094]
                      1. tout allait mieux mais lorsque j'ai réinstallé java, ça a recommencé à ramer et je n'ai pas pu lancer secunia. Il rame encore + qu'avant...
                        1. j'ai réussi l'installation de java, ensuite j'ai cliqué sur le lien que tu m'as mis concernant sécunia, mais mon ordi reste bloqué donc pas de mises à jour faites et j'ai rien fais d'autre
                          1. voilà :

                            http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120517_r10i7w6o5g15
                            1. Re
                              Rien de particulier, si ce n'est de configurer correctement les programmes au démarrage de Windows.

                              Je te laisse gérer .
                              je met ce post en résolu.

                              @+