deathlife
-
Compteur de contenus
67 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par deathlife
-
[HJT] Vérification log de "maintenance"
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
oui il fonctionne correctement (mis à part les ralentissements dur aux accés disques qui commence à dater un peu) Merci de ton aide (encore une fois ) A bientôt !! -
[HJT] Vérification log de "maintenance"
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Oups j'avais zappé le coup du proxy :s oui je suis derrière un proxy. En fait, je n'ai pas de firewall sur le pc car il y a une DMZ avec Firewall + Proxy en entrée internet du coup je n'ai pas juger nécessaire de mettre un firewall sur le PC lui même. { tu as le bonjour de Laura } Tu peux lui rendre bien baveux de ma part -
[HJT] Vérification log de "maintenance"
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Me revoilou !! ci-dessous je te remet le rapport suite aux choses que tu m'as dites de faire afin de voir si tout est ok, on ne sait jamais... Sinon, oui ça va plutot pas mal, j'émerge un peu du boulot alors j'en profite pour venir faire un coucou sur le forum Merci encore une fois pour ton aide et j'espère que de ton coté ça va bien également. Ciao Ciao Ami de la prairie Edit : (c'est mieux avec le log ) Logfile of HijackThis v1.99.1 Scan saved at 14:43:00, on 11/12/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\nvsvc32.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\WINNT\system32\ctfmon.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Spamihilator\spamihilator.exe C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=10.10.10.3:4421;http=10.10.10.3:4480;https=10.10.10.3:4480;socks=10.10.10.3:1080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe" O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - http://www.wow-europe.com/signup/fr/wowbeta/Si.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033...all/xscan53.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://www.touslesdrivers.com/hardwaredetection.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s...er/PROFILER.CAB O17 - HKLM\System\CCS\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O17 - HKLM\System\CS1\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O17 - HKLM\System\CS2\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: MonitorMagic (1279,48155) (MonitorMagic) - Unknown owner - C:\Program Files\MonitorMagicService\NM.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe -
[HJT] Vérification log de "maintenance"
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Bonjour Charles, ça faisait longtemps J'ai récupéré et lancé le removal de norton. J'ai supprimé l'entrée dans mon host qui avait bien été ajoutée volontairement mais qui n'a plus lieu d'être. J'ai relancé HJT sans être en mode sans echec et en voici le résultat. Merci et à bientôt -------------------------------------------------------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 14:04:01, on 11/12/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\hidserv.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32\nvsvc32.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\WINNT\system32\ctfmon.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Spamihilator\spamihilator.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe C:\PROGRA~1\FICHIE~1\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=10.10.10.3:4421;http=10.10.10.3:4480;https=10.10.10.3:4480;socks=10.10.10.3:1080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe" O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - http://www.wow-europe.com/signup/fr/wowbeta/Si.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033...all/xscan53.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://www.touslesdrivers.com/hardwaredetection.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s...er/PROFILER.CAB O17 - HKLM\System\CCS\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O17 - HKLM\System\CS1\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O17 - HKLM\System\CS2\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: MonitorMagic (1279,48155) (MonitorMagic) - Unknown owner - C:\Program Files\MonitorMagicService\NM.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe -
[HJT] Vérification log de "maintenance"
deathlife a posté un sujet dans Analyses et éradication malwares
Bonjour, ci-dessous le log d'un HJT lancé ce matin afin de voir si rien n'est venu se glissé dans la machine depuis le temps. Il s'agit de préventif. Merci d'avance et à bientôt, -------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 12:11:15, on 11/12/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\userinit.exe C:\WINNT\Explorer.EXE C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=10.10.10.3:4421;http=10.10.10.3:4480;https=10.10.10.3:4480;socks=10.10.10.3:1080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O1 - Hosts: www.lexel-cosmetiques.com intracos O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe" O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - http://www.wow-europe.com/signup/fr/wowbeta/Si.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004033...all/xscan53.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://www.touslesdrivers.com/hardwaredetection.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s...er/PROFILER.CAB O17 - HKLM\System\CCS\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O17 - HKLM\System\CS1\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O17 - HKLM\System\CS2\Services\Tcpip\..\{2304CC4B-B5C0-41DD-B1F8-243E03D5DF15}: NameServer = 194.2.0.20,194.2.0.50 O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: MonitorMagic (1279,48155) (MonitorMagic) - Unknown owner - C:\Program Files\MonitorMagicService\NM.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe -
Bonjour, cela fait plusieurs jours qu'un souci apparait à l'ouverture d'un document PDF lancé depuis le navigateur IE apparait. La personne clique sur le lien du PDF, la fenêtre s'ouvre bien, télécharge le PDF semble le lancer et puis ... Microsoft Visual++. Runtime library Program: C:\Program files\Internet Explorer\Iexplore.exe This aplication has requested the runtime to terminateit an unusual way. please contact the application's support team for information. J'ai fait mettre à jour Acrobat reader avec tout ce qu'il était possible de le mettre à jour et le souci est toujours présent... Fenêtre demandant si l'on veut envoyé le rapport d'erreur ou pas puis fermeture de IE. Avez-vous une petite (ou grande) idée pour résoudre ce souci car j'avoue que je ne comprend plus étant donné que cela passe trés bien sur tout les autres PC à disposition de mon coté ? Merci d'avance.
-
erreur de explorer.exe sur lecture vidéo
deathlife a répondu à un(e) sujet de deathlife dans Software
Bonjour et merci pour cette piste. je vais allé voir cela en détail et je donnerais le compte rendu sur le post dés que ce sera étudié et fait. A bientôt, -
Bonjour, je viens poster ici car j'ai un truc complètement bizare et avant de réinstaller mon odrinateur j'aurai voulu savoir s'il n'y avait pas une solution à mon souci. Le souci est que lorsque je veux lancer une vidéo (peu importe le format) dés le click sur le fichier, j'ai explorer qui plante et se relance tout seul. Ce qui fait que je n'arrive plus à ouvrir le moindre fichier (je n'ai meme pas le temps de double click d'ailleur). Qu'en pensez vous ? Sinon pour info je suis sous win2k sp4 avec un pentium IV 1.7Ghz Merci d'avance pour votre aide ou tout du moins vos réponses.
-
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Merci merci en tout cas pour ton aide concernant le test, j'ai pris mon pc je suis allé chez un pote et ça fonctionne nickel, l'inverse par contre .... non j'ai beau leur dire tout ça je parle à des murs marocains qui sont payés à la rapidité avec laquelle ils expédient les clients alors ça n'aide pas ... par contre ça m'a aidé à décider de changer de FAI ainsi que tout les abonnements de ma société par la même occasion. J'espère que ça va s'améliorer mais bon je n'y crois plus trop à présent. A bientôt !! -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
ET voilà 2 log d antivirus le premier kapersky KASPERSKY ONLINE SCANNER REPORT Thursday, August 10, 2006 1:58:24 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 10/08/2006 Kaspersky Anti-Virus database records: 201097 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ F:\ G:\ H:\ I:\ Scan Statistics Total number of scanned objects 98916 Number of viruses found 0 Number of infected objects 0 / 0 Number of suspicious objects 0 Duration of the scan process 00:50:40 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\017dbfdf167790a34988fb1b8a3e11f3_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e948793146a6a18ad35bd638074a9ab_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21176ded52bc8ebf71d8ffaa27a9e575_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2386760b9345d4dbc2371a23df15ecde_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24d8c312ed3247f82aa9ca9d52dadbbc_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a49677faf81938026f2a757a3826ca9_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65f29e76e7465bf55a19ec359ea5b20c_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\73a5a967ed5cecda8c8e06d60894af78_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7fe9f503ab91d5a5fff84eba41f01557_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8a47632fa9c4482f6c4fbe8700e19f0a_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a2cd89c5c65ef59eb8aea5b472cb04e0_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a7b02000e72f1016587ed969fac08322_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\af1141ccb071860415fc8cceaa4a6ed4_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2daa4fb7133a050757945ecdcfb8dbf_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f2ec2dbd2e5ce590369dff7149b0c5d0_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe4406697fc08a863c0a89767e4fd864_782600de-06bd-4b40-a989-8b3b72df1c1c Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{ECA484D7-7864-4A22-9668-ABCB32C146D2}\RP36\change.log Object is locked skipped D:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped D:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped D:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped D:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped D:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped D:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped D:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped D:\Documents and Settings\nerz\Cookies\index.dat Object is locked skipped D:\Documents and Settings\nerz\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped D:\Documents and Settings\nerz\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped D:\Documents and Settings\nerz\Local Settings\Historique\History.IE5\index.dat Object is locked skipped D:\Documents and Settings\nerz\Local Settings\Historique\History.IE5\MSHist012006081020060811\index.dat Object is locked skipped D:\Documents and Settings\nerz\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped D:\Documents and Settings\nerz\NTUSER.DAT Object is locked skipped D:\Documents and Settings\nerz\ntuser.dat.LOG Object is locked skipped D:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped D:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped D:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped D:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped D:\System Volume Information\_restore{ECA484D7-7864-4A22-9668-ABCB32C146D2}\RP36\change.log Object is locked skipped D:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped D:\WINDOWS\SchedLgU.Txt Object is locked skipped D:\WINDOWS\SoftwareDistribution\EventCache\{69081BE1-F39A-4641-8EB7-3E5F0A268836}.bin Object is locked skipped D:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped D:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped D:\WINDOWS\system32\CatRoot2\edbtmp.log Object is locked skipped D:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped D:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped D:\WINDOWS\system32\config\default Object is locked skipped D:\WINDOWS\system32\config\default.LOG Object is locked skipped D:\WINDOWS\system32\config\SAM Object is locked skipped D:\WINDOWS\system32\config\SAM.LOG Object is locked skipped D:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped D:\WINDOWS\system32\config\SECURITY Object is locked skipped D:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped D:\WINDOWS\system32\config\software Object is locked skipped D:\WINDOWS\system32\config\software.LOG Object is locked skipped D:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped D:\WINDOWS\system32\config\system Object is locked skipped D:\WINDOWS\system32\config\system.LOG Object is locked skipped D:\WINDOWS\system32\h323log.txt Object is locked skipped D:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped D:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped D:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped D:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped D:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped D:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped D:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped D:\WINDOWS\WindowsUpdate.log Object is locked skipped E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped E:\System Volume Information\_restore{ECA484D7-7864-4A22-9668-ABCB32C146D2}\RP36\change.log Object is locked skipped F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped F:\System Volume Information\_restore{ECA484D7-7864-4A22-9668-ABCB32C146D2}\RP36\change.log Object is locked skipped G:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped G:\System Volume Information\_restore{ECA484D7-7864-4A22-9668-ABCB32C146D2}\RP36\change.log Object is locked skipped Scan process completed. et le second antivir AntiVir PersonalEdition Classic Report file date: jeudi 10 août 2006 12:24 Scanning for 479050 virus strains and unwanted programs. Licensed to: AntiVir PersonalEdition Classic Serial number: 0000149996-WURGE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: nerz Computer name: HUUL Version informations: AVSCAN.EXE : 7.0.0.42 557096 24/06/2006 21:27:46 AVSCAN.DLL : 7.0.0.42 53288 24/06/2006 21:27:46 LUKE.DLL : 7.0.0.42 118824 24/06/2006 21:27:46 LUKERES.DLL : 7.0.0.42 25640 24/06/2006 21:27:46 ANTIVIR0.VDF : 6.35.0.1 7371264 24/06/2006 21:27:46 ANTIVIR1.VDF : 6.35.0.168 730112 24/06/2006 21:27:46 ANTIVIR2.VDF : 6.35.1.56 459776 24/06/2006 21:27:46 ANTIVIR3.VDF : 6.35.1.74 33792 24/06/2006 21:27:46 AVEWIN32.DLL : 7.1.1.2 1782272 24/06/2006 21:27:46 AVPREF.DLL : 7.0.0.1 49192 24/06/2006 21:27:46 AVREP.DLL : 6.35.1.25 737320 24/06/2006 21:27:46 AVRPBASE.DLL : 7.0.0.0 2162728 24/06/2006 21:27:46 AVPACK32.DLL : 7.1.0.1 335912 24/06/2006 21:27:46 AVREG.DLL : 6.31.0.90 27688 24/06/2006 21:27:46 NETNT.DLL : 6.32.0.0 6696 24/06/2006 21:27:46 NETNW.DLL : 6.32.0.0 9768 24/06/2006 21:27:46 RCIMAGE.DLL : 7.0.0.71 1642536 24/06/2006 21:27:47 RCTEXT.DLL : 7.0.0.75 77864 24/06/2006 21:27:47 Configuration settings for the scan: Jobname: '%s'.................: Local Drives Configuration file............: D:\Program Files\AntiVir PersonalEdition Classic\alldrives.avp Boot sectors..................: C,D,E,F,G,A,H,I Scan memory...................: 1 Process scan..................: 1 Scan all files................: 1 Scan archives.................: 1 Recursion depth...............: 20 Smart extensions..............: 1 Macro heuristic...............: 1 File heuristic................: -1 Primary action................: 1 Secondary action..............: 0 Start of the scan: jeudi 10 août 2006 12:24 The scan over running processes will be started 31 Processes was scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Boot sector 'F:\' [NOTE] No virus was found! Boot sector 'G:\' [NOTE] No virus was found! Boot sector 'A:\' [NOTE] In the drive 'A:\' no data medium is inserted! Starting to scan the registry. The registry was scanned ( 12 files ). Starting the file scan: C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\017dbfdf167790a34988fb1b8a3e11f3_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e948793146a6a18ad35bd638074a9ab_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21176ded52bc8ebf71d8ffaa27a9e575_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2386760b9345d4dbc2371a23df15ecde_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24d8c312ed3247f82aa9ca9d52dadbbc_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a49677faf81938026f2a757a3826ca9_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\65f29e76e7465bf55a19ec359ea5b20c_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\73a5a967ed5cecda8c8e06d60894af78_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7fe9f503ab91d5a5fff84eba41f01557_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8a47632fa9c4482f6c4fbe8700e19f0a_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a2cd89c5c65ef59eb8aea5b472cb04e0_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a7b02000e72f1016587ed969fac08322_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\af1141ccb071860415fc8cceaa4a6ed4_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2daa4fb7133a050757945ecdcfb8dbf_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f2ec2dbd2e5ce590369dff7149b0c5d0_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fe4406697fc08a863c0a89767e4fd864_782600de-06bd-4b40-a989-8b3b72df1c1c [WARNING] The file could not be opened! D:\pagefile.sys [WARNING] The file could not be opened! D:\Documents and Settings\LocalService\NTUSER.DAT [WARNING] The file could not be opened! D:\Documents and Settings\LocalService\ntuser.dat.LOG [WARNING] The file could not be opened! D:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [WARNING] The file could not be opened! D:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [WARNING] The file could not be opened! D:\Documents and Settings\nerz\NTUSER.DAT [WARNING] The file could not be opened! D:\Documents and Settings\nerz\ntuser.dat.LOG [WARNING] The file could not be opened! D:\Documents and Settings\nerz\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [WARNING] The file could not be opened! D:\Documents and Settings\nerz\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [WARNING] The file could not be opened! D:\Documents and Settings\NetworkService\NTUSER.DAT [WARNING] The file could not be opened! D:\Documents and Settings\NetworkService\ntuser.dat.LOG [WARNING] The file could not be opened! D:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [WARNING] The file could not be opened! D:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [WARNING] The file could not be opened! D:\WINDOWS\SoftwareDistribution\EventCache\{69081BE1-F39A-4641-8EB7-3E5F0A268836}.bin [WARNING] The file could not be opened! D:\WINDOWS\system32\CatRoot2\edb.log [WARNING] The file could not be opened! D:\WINDOWS\system32\CatRoot2\edbtmp.log [WARNING] The file could not be opened! D:\WINDOWS\system32\CatRoot2\tmp.edb [WARNING] The file could not be opened! D:\WINDOWS\system32\config\default [WARNING] The file could not be opened! D:\WINDOWS\system32\config\default.LOG [WARNING] The file could not be opened! D:\WINDOWS\system32\config\SAM [WARNING] The file could not be opened! D:\WINDOWS\system32\config\SAM.LOG [WARNING] The file could not be opened! D:\WINDOWS\system32\config\SECURITY [WARNING] The file could not be opened! D:\WINDOWS\system32\config\SECURITY.LOG [WARNING] The file could not be opened! D:\WINDOWS\system32\config\software [WARNING] The file could not be opened! D:\WINDOWS\system32\config\software.LOG [WARNING] The file could not be opened! D:\WINDOWS\system32\config\system [WARNING] The file could not be opened! D:\WINDOWS\system32\config\system.LOG [WARNING] The file could not be opened! The path A:\ could not be found! Le périphérique n'est pas prêt. The path H:\ could not be found! Le périphérique n'est pas prêt. The path I:\ could not be found! Le périphérique n'est pas prêt. End of the scan: jeudi 10 août 2006 12:59 Used time: 35:05 min The scan has been done completely. 5223 Scanning directories 229703 Files were scanned 0 viruses and/or unwanted programs was found 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1732 Archives were scanned 43 Warnings 1 Notes -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
bonjour bonjour, j'ai réussi à télécharger eye on network et ma moyenne de dl est de 4.2Ko et la moyenne d'upload est de 1Ko ... tout ça en ayant télécharger pingplotter... ça confirme bien que mon FAI se fou de moi en me sortant que ce n'est pas eux que c'est mon pc bla bla bla je vais les rappeler et me foutre d'eux, pour cela je vais faire un pingplotter sur leur serveur manière de leur sortir l'endroit qui pèche... wait and see ... Merci en tout cas pour ton aide depuis hier et j'espère que je vais enfin réussir à résoudre cela :/ -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
téléchargement lancer à 2.4Ko / s avec un peu de chance ça ne descendra pas plus bas à tout à l'heure -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Bon bah je n'arrive à faire ni l'un ni l'autre :/ je pense que c'est du à la faiblesse de ma connexion car chaque fois ca n'arrive pas à passer soit le certificat activeX ou à lancer le scan je continue à essayer ? -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
non rien .. question con .. j'ai la réponse en lisant un peu mieux ta réponse :/ à de suite ! -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Service D:\WINDOWS\system32\DRIVERS\cdrom.sys [sYSTEM] Cdrom Service [sYSTEM] Changer Service D:\WINDOWS\system32\cisvc.exe [MANUAL] CiSvc Service D:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv Service D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [MANUAL] clr_optimization_v2.0.50727_32 Service [DISABLED] CmdIde Service D:\WINDOWS\system32\dllhost.exe [MANUAL] COMSysApp Service [DISABLED] Cpqarray Service D:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc Service D:\WINDOWS\system32\DRIVERS\ctljystk.sys [MANUAL] ctljystk Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service D:\WINDOWS\system32\svchost.exe [AUTO] DcomLaunch Service D:\WINDOWS\system32\svchost.exe [AUTO] Dhcp Service D:\WINDOWS\system32\DRIVERS\disk.sys [bOOT] Disk Service D:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin Service D:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot Service D:\WINDOWS\System32\drivers\dmio.sys [bOOT] dmio Service D:\WINDOWS\System32\drivers\dmload.sys [bOOT] dmload Service D:\WINDOWS\System32\svchost.exe [AUTO] dmserver Service D:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic Service D:\WINDOWS\system32\svchost.exe [AUTO] Dnscache Service [DISABLED] dpti2o Service D:\Program Files\HardwareDetection\driverhardwarev2.sys [MANUAL] driverhardwarev2 Service D:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud Service D:\WINDOWS\system32\drivers\emu10k1m.sys [MANUAL] emu10k Service D:\WINDOWS\system32\drivers\ctlfacem.sys [MANUAL] emu10k1 Service D:\WINDOWS\System32\svchost.exe [AUTO] ERSvc Service D:\WINDOWS\system32\services.exe [AUTO] Eventlog Service D:\WINDOWS\system32\svchost.exe [MANUAL] EventSystem Service [DISABLED] Fastfat Service D:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility Service D:\WINDOWS\system32\DRIVERS\fdc.sys [MANUAL] Fdc Service [sYSTEM] Fips Service D:\WINDOWS\system32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk Service D:\WINDOWS\system32\DRIVERS\fltMgr.sys [bOOT] FltMgr Service [sYSTEM] Fs_Rec Service D:\WINDOWS\system32\DRIVERS\ftdisk.sys [bOOT] Ftdisk Service D:\WINDOWS\system32\DRIVERS\gameenum.sys [MANUAL] gameenum Service D:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] Gmer Service D:\WINDOWS\system32\DRIVERS\msgpc.sys [MANUAL] Gpc Service D:\WINDOWS\System32\svchost.exe [AUTO] helpsvc Service D:\WINDOWS\System32\svchost.exe [AUTO] HidServ Service D:\WINDOWS\system32\DRIVERS\hidusb.sys [MANUAL] hidusb Service [DISABLED] hpn Service D:\WINDOWS\System32\Drivers\HTTP.sys [MANUAL] HTTP Service D:\WINDOWS\System32\svchost.exe [MANUAL] HTTPFilter Service [sYSTEM] i2omgmt Service [DISABLED] i2omp Service D:\WINDOWS\system32\DRIVERS\i8042prt.sys [sYSTEM] i8042prt Service D:\WINDOWS\system32\DRIVERS\imapi.sys [sYSTEM] Imapi Service D:\WINDOWS\system32\imapi.exe [MANUAL] ImapiService Service [DISABLED] ini910u Service D:\WINDOWS\system32\DRIVERS\intelide.sys [bOOT] IntelIde Service D:\WINDOWS\system32\DRIVERS\intelppm.sys [sYSTEM] intelppm Service D:\WINDOWS\system32\DRIVERS\Ip6Fw.sys [MANUAL] Ip6Fw Service D:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver Service D:\WINDOWS\system32\DRIVERS\ipinip.sys [MANUAL] IpInIp Service D:\WINDOWS\system32\DRIVERS\ipnat.sys [MANUAL] IpNat Service D:\WINDOWS\system32\DRIVERS\ipsec.sys [sYSTEM] IPSec Service D:\WINDOWS\system32\DRIVERS\irenum.sys [MANUAL] IRENUM Service D:\WINDOWS\system32\DRIVERS\isapnp.sys [bOOT] isapnp Service D:\WINDOWS\system32\DRIVERS\kbdclass.sys [sYSTEM] Kbdclass Service D:\WINDOWS\system32\DRIVERS\kbdhid.sys [sYSTEM] kbdhid Service D:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer Service [bOOT] KSecDD Service D:\WINDOWS\System32\Drivers\l8042pr2.sys [MANUAL] L8042PR2 Service D:\WINDOWS\system32\svchost.exe [AUTO] lanmanserver Service D:\WINDOWS\system32\svchost.exe [AUTO] lanmanworkstation Service [sYSTEM] lbrtfdc Service D:\WINDOWS\system32\DRIVERS\LHidFlt2.Sys [MANUAL] LHidFlt2 Service D:\WINDOWS\System32\Drivers\LHidUsb.Sys [MANUAL] LHidUsb Service D:\WINDOWS\system32\svchost.exe [AUTO] LmHosts Service D:\WINDOWS\System32\Drivers\LMouFlt2.sys [MANUAL] LMouFlt2 Service D:\WINDOWS\system32\svchost.exe Service [sYSTEM] mnmdd Service D:\WINDOWS\system32\mnmsrvc.exe [MANUAL] mnmsrvc Service [MANUAL] Modem Service D:\WINDOWS\system32\DRIVERS\mouclass.sys [sYSTEM] Mouclass Service D:\WINDOWS\system32\DRIVERS\mouhid.sys [MANUAL] mouhid Service [bOOT] MountMgr Service [DISABLED] mraid35x Service D:\WINDOWS\system32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV Service D:\WINDOWS\system32\DRIVERS\mrxsmb.sys [sYSTEM] MRxSmb Service D:\WINDOWS\system32\msdtc.exe [MANUAL] MSDTC Service [sYSTEM] Msfs Service D:\WINDOWS\system32\msiexec.exe [MANUAL] MSIServer Service D:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV Service D:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK Service D:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM Service D:\WINDOWS\system32\DRIVERS\mssmbios.sys [MANUAL] mssmbios Service [bOOT] Mup Service [bOOT] NDIS Service D:\WINDOWS\system32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi Service D:\WINDOWS\system32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio Service D:\WINDOWS\system32\DRIVERS\ndiswan.sys [MANUAL] NdisWan Service [MANUAL] NDProxy Service D:\WINDOWS\system32\DRIVERS\netbios.sys [sYSTEM] NetBIOS Service D:\WINDOWS\system32\DRIVERS\netbt.sys [sYSTEM] NetBT Service D:\WINDOWS\system32\netdde.exe [DISABLED] NetDDE Service D:\WINDOWS\system32\netdde.exe [DISABLED] NetDDEdsdm Service D:\WINDOWS\system32\lsass.exe [MANUAL] Netlogon Service D:\WINDOWS\System32\svchost.exe [MANUAL] Netman Service D:\WINDOWS\system32\DRIVERS\netrcacm.sys [MANUAL] netrcacm Service D:\WINDOWS\system32\svchost.exe [MANUAL] Nla Service [sYSTEM] Npfs Service [DISABLED] Ntfs Service D:\WINDOWS\system32\lsass.exe [MANUAL] NtLmSsp Service D:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc Service [sYSTEM] Null Service D:\WINDOWS\system32\DRIVERS\nv4_mini.sys [MANUAL] nv Service D:\WINDOWS\system32\nvsvc32.exe [AUTO] NVSvc Service D:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt Service D:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd Service D:\WINDOWS\system32\DRIVERS\ohci1394.sys [bOOT] ohci1394 Service D:\WINDOWS\system32\DRIVERS\parport.sys [MANUAL] Parport Service [bOOT] PartMgr Service [AUTO] ParVdm Service D:\WINDOWS\system32\DRIVERS\pci.sys [bOOT] PCI Service [sYSTEM] PCIDump Service D:\WINDOWS\system32\DRIVERS\pciide.sys [bOOT] PCIIde Service [DISABLED] Pcmcia Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service D:\WINDOWS\system32\PfModNT.sys [AUTO] PfModNT Service D:\WINDOWS\system32\services.exe [AUTO] PlugPlay Service D:\WINDOWS\system32\lsass.exe [AUTO] PolicyAgent Service D:\WINDOWS\system32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport Service D:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage Service D:\WINDOWS\system32\DRIVERS\psched.sys [MANUAL] PSched Service D:\WINDOWS\system32\DRIVERS\ptilink.sys [MANUAL] Ptilink Service D:\WINDOWS\System32\Drivers\PxHelp20.sys Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service D:\WINDOWS\system32\DRIVERS\rasacd.sys [sYSTEM] RasAcd Service D:\WINDOWS\system32\svchost.exe [MANUAL] RasAuto Service D:\WINDOWS\system32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp Service D:\WINDOWS\system32\svchost.exe [MANUAL] RasMan Service D:\WINDOWS\system32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe Service D:\WINDOWS\system32\DRIVERS\raspti.sys [MANUAL] Raspti Service D:\WINDOWS\system32\DRIVERS\rdbss.sys [sYSTEM] Rdbss Service D:\WINDOWS\System32\DRIVERS\RDPCDD.sys [sYSTEM] RDPCDD Service D:\WINDOWS\system32\DRIVERS\rdpdr.sys [MANUAL] rdpdr Service [MANUAL] RDPWD Service D:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr Service D:\WINDOWS\system32\DRIVERS\redbook.sys [sYSTEM] redbook Service D:\WINDOWS\system32\svchost.exe [DISABLED] RemoteAccess Service D:\WINDOWS\system32\svchost.exe [AUTO] RemoteRegistry Service D:\WINDOWS\system32\locator.exe [MANUAL] RpcLocator Service D:\WINDOWS\system32\svchost.exe [AUTO] RpcSs Service D:\WINDOWS\system32\rsvp.exe [MANUAL] RSVP Service D:\WINDOWS\system32\DRIVERS\RTL8139.SYS [MANUAL] rtl8139 Service D:\WINDOWS\system32\lsass.exe [AUTO] SamSs Service D:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr Service D:\WINDOWS\System32\svchost.exe [AUTO] Schedule Service D:\WINDOWS\system32\DRIVERS\secdrv.sys [MANUAL] Secdrv Service D:\WINDOWS\System32\svchost.exe [AUTO] seclogon Service D:\WINDOWS\system32\svchost.exe [AUTO] SENS Service D:\WINDOWS\system32\DRIVERS\serenum.sys [MANUAL] serenum Service D:\WINDOWS\system32\DRIVERS\serial.sys [sYSTEM] Serial Service [sYSTEM] Sfloppy Service D:\WINDOWS\system32\drivers\sfmanm.sys [MANUAL] sfman Service D:\WINDOWS\system32\svchost.exe [AUTO] SharedAccess Service D:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection Service [DISABLED] Simbad Service D:\WINDOWS\system32\drivers\smwdm.sys [MANUAL] smwdm Service D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [AUTO] SoundMAX Agent Service (default) Service [DISABLED] Sparrow Service D:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter Service D:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler Service D:\WINDOWS\system32\DRIVERS\sr.sys [bOOT] sr Service D:\WINDOWS\system32\svchost.exe [AUTO] srservice Service D:\WINDOWS\system32\DRIVERS\srv.sys [MANUAL] Srv Service D:\WINDOWS\system32\svchost.exe [MANUAL] SSDPSRV Service D:\WINDOWS\system32\svchost.exe [MANUAL] stisvc Service D:\WINDOWS\system32\DRIVERS\swenum.sys [MANUAL] swenum Service D:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi Service D:\WINDOWS\system32\dllhost.exe [MANUAL] SwPrv Service [DISABLED] symc810 Service [DISABLED] symc8xx Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service D:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio Service D:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog Service D:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv Service D:\WINDOWS\system32\DRIVERS\tcpip.sys [sYSTEM] Tcpip Service [MANUAL] TDPIPE Service [MANUAL] TDTCP Service D:\WINDOWS\system32\DRIVERS\termdd.sys [sYSTEM] TermDD Service D:\WINDOWS\System32\svchost.exe [MANUAL] TermService Service D:\WINDOWS\System32\svchost.exe [AUTO] Themes Service D:\WINDOWS\system32\tlntsvr.exe [DISABLED] TlntSvr Service [DISABLED] TosIde Service D:\WINDOWS\system32\svchost.exe [AUTO] TrkWks Service [DISABLED] Udfs Service [DISABLED] ultra Service D:\WINDOWS\system32\DRIVERS\update.sys [MANUAL] Update Service D:\WINDOWS\system32\svchost.exe [MANUAL] upnphost Service D:\WINDOWS\System32\ups.exe [MANUAL] UPS Service D:\WINDOWS\system32\DRIVERS\usbccgp.sys [MANUAL] usbccgp Service D:\WINDOWS\system32\DRIVERS\usbehci.sys [MANUAL] usbehci Service D:\WINDOWS\system32\DRIVERS\usbhub.sys [MANUAL] usbhub Service D:\WINDOWS\system32\DRIVERS\usbohci.sys [MANUAL] usbohci Service D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [MANUAL] USBSTOR Service D:\WINDOWS\system32\DRIVERS\usbuhci.sys [MANUAL] usbuhci Service D:\WINDOWS\system32\svchost.exe [MANUAL] usnsvc Service D:\WINDOWS\System32\drivers\vga.sys [sYSTEM] VgaSave Service [DISABLED] ViaIde Service [bOOT] VolSnap Service D:\WINDOWS\System32\vssvc.exe [MANUAL] VSS Service D:\WINDOWS\System32\svchost.exe [AUTO] W32Time Service D:\WINDOWS\system32\DRIVERS\wanarp.sys [MANUAL] Wanarp Service [MANUAL] WDICA Service D:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud Service D:\WINDOWS\system32\svchost.exe [AUTO] WebClient Service D:\WINDOWS\system32\svchost.exe [AUTO] winmgmt Service [MANUAL] Winsock Service D:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN Service D:\WINDOWS\System32\svchost.exe [MANUAL] Wmi Service D:\WINDOWS\system32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv Service [sYSTEM] WS2IFSL Service D:\WINDOWS\System32\svchost.exe [AUTO] wscsvc Service D:\WINDOWS\system32\svchost.exe [AUTO] wuauserv Service D:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC Service D:\WINDOWS\System32\svchost.exe [MANUAL] xmlprov ---- EOF - GMER 1.0.10 ---- Ouffff voilà c'est fini de poster le rapport merci d'avance pour ton aide ! -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\system32\xpsp2res.dll 0x20000000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library D:\WINDOWS\system32\wups.dll 0x50640000 Process D:\Documents and Settings\nerz\Bureau\gmer.exe 1676 Library D:\Documents and Settings\nerz\Bureau\gmer.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\COMCTL32.dll 0x58B50000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\OLEPRO32.DLL 0x5F140000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\gmer.dll 0x07200000 Library D:\Program Files\Logitech\MouseWare\System\LgWndHk.dll 0x10000000 Library D:\WINDOWS\system32\MSCTF.dll 0x74690000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x00C40000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Process D:\WINDOWS\Explorer.EXE 1740 Library D:\WINDOWS\Explorer.EXE 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\BROWSEUI.dll 0x75F10000 Library D:\WINDOWS\system32\SHDOCVW.dll 0x77720000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\CRYPTUI.dll 0x76610000 Library D:\WINDOWS\system32\WINTRUST.dll 0x76BE0000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\WININET.dll 0x77AA0000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\system32\appHelp.dll 0x77B50000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library D:\WINDOWS\System32\cscui.dll 0x765B0000 Library D:\WINDOWS\System32\CSCDLL.dll 0x76590000 Library D:\WINDOWS\system32\themeui.dll 0x5B950000 Library D:\WINDOWS\system32\Secur32.dll 0x77FC0000 Library D:\WINDOWS\system32\MSIMG32.dll 0x76310000 Library D:\WINDOWS\system32\xpsp2res.dll 0x20000000 Library D:\WINDOWS\system32\actxprxy.dll 0x71CA0000 Library D:\WINDOWS\system32\msutb.dll 0x5FFB0000 Library D:\WINDOWS\system32\MSCTF.dll 0x74690000 Library D:\WINDOWS\system32\urlmon.dll 0x77170000 Library D:\WINDOWS\system32\LINKINFO.dll 0x76920000 Library D:\WINDOWS\system32\ntshrui.dll 0x76930000 Library D:\WINDOWS\system32\ATL.DLL 0x76AC0000 Library D:\WINDOWS\system32\MPR.dll 0x71A60000 Library D:\WINDOWS\System32\drprov.dll 0x75EF0000 Library D:\WINDOWS\System32\ntlanman.dll 0x71B70000 Library D:\WINDOWS\System32\NETUI0.dll 0x71C30000 Library D:\WINDOWS\System32\NETUI1.dll 0x71BF0000 Library D:\WINDOWS\System32\NETRAP.dll 0x71BE0000 Library D:\WINDOWS\System32\SAMLIB.dll 0x71B50000 Library D:\WINDOWS\System32\davclnt.dll 0x75F00000 Library D:\WINDOWS\system32\msi.dll 0x01530000 Library D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x10000000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Library D:\WINDOWS\system32\wdmaud.drv 0x72C70000 Library D:\WINDOWS\system32\msacm32.drv 0x72C60000 Library D:\WINDOWS\system32\midimap.dll 0x77BA0000 Library D:\Program Files\Logitech\MouseWare\System\LgWndHk.dll 0x01960000 Library D:\WINDOWS\system32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\webcheck.dll 0x74AA0000 Library D:\WINDOWS\system32\WSOCK32.dll 0x71A10000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\SETUPAPI.dll 0x778E0000 Library D:\WINDOWS\system32\stobject.dll 0x76540000 Library D:\WINDOWS\system32\BatMeter.dll 0x74A60000 Library D:\WINDOWS\system32\POWRPROF.dll 0x74A40000 Library D:\WINDOWS\system32\WTSAPI32.dll 0x76F00000 Library D:\WINDOWS\system32\NETSHELL.dll 0x76390000 Library D:\WINDOWS\system32\rtutils.dll 0x76E30000 Library D:\WINDOWS\system32\credui.dll 0x76BB0000 Library D:\WINDOWS\system32\iphlpapi.dll Process D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe 1804 Library D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\COMCTL32.dll 0x77390000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\Program Files\AntiVir PersonalEdition Classic\MFC71U.DLL 0x7C250000 Library D:\Program Files\AntiVir PersonalEdition Classic\MSVCR71.dll 0x00330000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\Program Files\AntiVir PersonalEdition Classic\avgcmxp.dll 0x10000000 Library D:\WINDOWS\system32\wtsapi32.dll 0x76F00000 Library D:\WINDOWS\system32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\Secur32.dll 0x77FC0000 Library D:\Program Files\Logitech\MouseWare\System\LgWndHk.dll 0x010A0000 Library D:\WINDOWS\system32\MSCTF.dll 0x74690000 Library D:\WINDOWS\system32\hhctrl.ocx 0x7DB30000 Library D:\WINDOWS\system32\mui\000c\hhctrlui.dll 0x68D60000 Library D:\WINDOWS\system32\mswsock.dll 0x71990000 Library D:\WINDOWS\system32\hnetcfg.dll 0x62E40000 Library D:\WINDOWS\System32\wshtcpip.dll 0x719D0000 Library D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x01140000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Process D:\WINDOWS\system32\RunDLL32.exe 1828 Library D:\WINDOWS\system32\RunDLL32.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\system32\NvMCTray.dll 0x10000000 Library D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x009A0000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Library D:\WINDOWS\system32\MSCTF.dll 0x74690000 Process D:\Program Files\Analog Devices\SoundMAX\SMTray.exe 1856 Library D:\Program Files\Analog Devices\SoundMAX\SMTray.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\MFC42.DLL 0x73D20000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\COMCTL32.dll 0x58B50000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\system32\MFC42LOC.DLL 0x61D70000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x10000000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Library D:\WINDOWS\system32\MSCTF.dll 0x74690000 Process D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe 1868 Library D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\WININET.dll 0x77AA0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Process D:\WINDOWS\system32\ctfmon.exe 1900 Library D:\WINDOWS\system32\ctfmon.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\MSCTF.dll 0x74690000 Library D:\WINDOWS\system32\MSUTB.dll 0x5FFB0000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x10000000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Process D:\Program Files\Logitech\MouseWare\system\em_exec.exe 1964 Library D:\Program Files\Logitech\MouseWare\system\em_exec.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\Program Files\Logitech\MouseWare\system\EVENTEX.dll 0x10000000 Library D:\WINDOWS\system32\COMNCTR.dll 0x00320000 Library D:\Program Files\Logitech\MouseWare\system\MFC42.DLL 0x6C370000 Library D:\WINDOWS\system32\MSVCRT.dll 0x77BE0000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\COMCTL32.dll 0x58B50000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\IMM32.dll 0x76320000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Library D:\WINDOWS\system32\MFC42LOC.DLL 0x61D70000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\MSCTF.dll 0x74690000 Library D:\Program Files\Logitech\MouseWare\system\ccresrce.dll 0x01800000 Library D:\Program Files\Logitech\MouseWare\system\GlbResLt.dll 0x02000000 Library D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x00970000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\Program Files\Logitech\MouseWare\System\devices.dll 0x00A90000 Library D:\Program Files\Logitech\MouseWare\system\ccstmglb.dll 0x00AC0000 Library D:\Program Files\Logitech\MouseWare\system\ccustom.dll 0x00BE0000 Library D:\Program Files\Logitech\MouseWare\system\ccmsghk.dll 0x00D00000 Library D:\Program Files\Logitech\MouseWare\System\LgWndHk.dll 0x00E20000 ---- Modules - GMER 1.0.10 ---- Module \WINDOWS\system32\ntoskrnl.exe 804D7000 Module \WINDOWS\system32\hal.dll 806FD000 Module \WINDOWS\system32\KDCOM.DLL F7B6F000 Module \WINDOWS\system32\BOOTVID.dll F7A7F000 Module ACPI.sys F761F000 Module \WINDOWS\system32\DRIVERS\WMILIB.SYS F7B71000 Module pci.sys F760E000 Module isapnp.sys F766F000 Module pciide.sys F7C37000 Module \WINDOWS\system32\DRIVERS\PCIIDEX.SYS F78EF000 Module intelide.sys F7B73000 Module MountMgr.sys F767F000 Module ftdisk.sys F75EF000 Module dmload.sys F7B75000 Module dmio.sys F75C9000 Module PartMgr.sys F78F7000 Module VolSnap.sys F768F000 Module atapi.sys F75B1000 Module disk.sys F769F000 Module \WINDOWS\system32\DRIVERS\CLASSPNP.SYS F76AF000 Module fltMgr.sys F7592000 Module sr.sys F7580000 Module PxHelp20.sys F76BF000 Module KSecDD.sys F7569000 Module Ntfs.sys F74DC000 Module NDIS.sys F74AF000 Module ohci1394.sys F76CF000 Module \WINDOWS\system32\DRIVERS\1394BUS.SYS F76DF000 Module Mup.sys F7494000 Module agp440.sys F76EF000 Module \SystemRoot\system32\DRIVERS\intelppm.sys F777F000 Module \SystemRoot\system32\DRIVERS\nv4_mini.sys F708D000 Module \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS F7079000 Module \SystemRoot\system32\DRIVERS\usbuhci.sys F796F000 Module \SystemRoot\system32\DRIVERS\USBPORT.SYS F7056000 Module \SystemRoot\system32\DRIVERS\usbehci.sys F7977000 Module \SystemRoot\system32\DRIVERS\fdc.sys F797F000 Module \SystemRoot\system32\DRIVERS\parport.sys F7042000 Module \SystemRoot\system32\DRIVERS\serial.sys F7031000 Module \SystemRoot\system32\DRIVERS\serenum.sys F7B13000 Module \SystemRoot\system32\DRIVERS\cdrom.sys F778F000 Module \SystemRoot\system32\DRIVERS\redbook.sys F779F000 Module \SystemRoot\system32\DRIVERS\ks.sys F700E000 Module \SystemRoot\system32\DRIVERS\imapi.sys F77AF000 Module \SystemRoot\system32\drivers\smwdm.sys F6F80000 Module \SystemRoot\system32\drivers\portcls.sys F6F5C000 Module \SystemRoot\system32\drivers\drmk.sys F77BF000 Module \SystemRoot\system32\drivers\aeaudio.sys F7B7F000 Module \SystemRoot\system32\DRIVERS\audstub.sys F7DB2000 Module \SystemRoot\system32\DRIVERS\rasl2tp.sys F77CF000 Module \SystemRoot\system32\DRIVERS\ndistapi.sys F7B1F000 Module \SystemRoot\system32\DRIVERS\ndiswan.sys F6F45000 Module \SystemRoot\system32\DRIVERS\raspppoe.sys F77DF000 Module \SystemRoot\system32\DRIVERS\raspptp.sys F77EF000 Module \SystemRoot\system32\DRIVERS\TDI.SYS F7987000 Module \SystemRoot\system32\DRIVERS\psched.sys F6F34000 Module \SystemRoot\system32\DRIVERS\msgpc.sys F77FF000 Module \SystemRoot\system32\DRIVERS\ptilink.sys F798F000 Module \SystemRoot\system32\DRIVERS\raspti.sys F7997000 Module \SystemRoot\system32\DRIVERS\rdpdr.sys F6EEC000 Module \SystemRoot\system32\DRIVERS\termdd.sys F780F000 Module \SystemRoot\system32\DRIVERS\kbdclass.sys F799F000 Module \SystemRoot\system32\DRIVERS\mouclass.sys F79A7000 Module \SystemRoot\system32\DRIVERS\swenum.sys F7B81000 Module \SystemRoot\system32\DRIVERS\update.sys F6DF0000 Module \SystemRoot\system32\DRIVERS\mssmbios.sys F7B3B000 Module \SystemRoot\System32\Drivers\NDProxy.SYS F781F000 Module \SystemRoot\system32\DRIVERS\usbhub.sys F783F000 Module \SystemRoot\system32\DRIVERS\USBD.SYS F7B83000 Module \SystemRoot\system32\DRIVERS\flpydisk.sys F79AF000 Module \SystemRoot\System32\Drivers\Fs_Rec.SYS F7B85000 Module \SystemRoot\System32\Drivers\Null.SYS F7DBB000 Module \SystemRoot\System32\Drivers\Beep.SYS F7B87000 Module \SystemRoot\system32\DRIVERS\HIDPARSE.SYS F79BF000 Module \SystemRoot\System32\drivers\vga.sys F79C7000 Module \SystemRoot\System32\Drivers\mnmdd.SYS F7B89000 Module \SystemRoot\System32\DRIVERS\RDPCDD.sys F7B8B000 Module \SystemRoot\System32\Drivers\Msfs.SYS F79CF000 Module \SystemRoot\System32\Drivers\Npfs.SYS F79D7000 Module \SystemRoot\system32\DRIVERS\rasacd.sys F7468000 Module \SystemRoot\system32\DRIVERS\ipsec.sys F4C95000 Module \SystemRoot\system32\DRIVERS\tcpip.sys F4C3D000 Module \SystemRoot\system32\DRIVERS\netbt.sys F4C15000 Module \SystemRoot\system32\DRIVERS\ipnat.sys F4BF4000 Module \SystemRoot\system32\DRIVERS\wanarp.sys F786F000 Module \SystemRoot\System32\drivers\afd.sys F4BD2000 Module \SystemRoot\system32\DRIVERS\netbios.sys F787F000 Module \SystemRoot\system32\DRIVERS\rdbss.sys F4B7F000 Module \SystemRoot\system32\DRIVERS\mrxsmb.sys F4B10000 Module \SystemRoot\System32\Drivers\Fips.SYS F788F000 Module \??\D:\Program_Files\AntiVir_PersonalEdition_Classic\avgio.sys F7B8D000 Module \SystemRoot\system32\DRIVERS\usbccgp.sys F79E7000 Module \SystemRoot\System32\Drivers\Cdfs.SYS F78AF000 Module \SystemRoot\System32\Drivers\LHidUsb.Sys F78BF000 Module \SystemRoot\System32\Drivers\HIDCLASS.SYS F78CF000 Module \SystemRoot\system32\DRIVERS\hidusb.sys F6EE8000 Module \SystemRoot\system32\DRIVERS\LHidFlt2.Sys F79EF000 Module \SystemRoot\system32\DRIVERS\mouhid.sys F6EE4000 Module \SystemRoot\System32\Drivers\LMouFlt2.sys F78DF000 Module \SystemRoot\system32\DRIVERS\kbdhid.sys F6EE0000 Module \SystemRoot\System32\Drivers\dump_atapi.sys F4A30000 Module \SystemRoot\System32\Drivers\dump_WMILIB.SYS F7B8F000 Module \SystemRoot\System32\win32k.sys BF800000 Module \SystemRoot\System32\drivers\Dxapi.sys F6ED0000 Module \SystemRoot\System32\watchdog.sys F79FF000 Module \SystemRoot\System32\drivers\dxg.sys BF9C2000 Module \SystemRoot\System32\drivers\dxgthk.sys F7C61000 Module \SystemRoot\System32\nv4_disp.dll BF9D4000 Module \SystemRoot\system32\DRIVERS\ndisuio.sys BAD0C000 Module \SystemRoot\system32\DRIVERS\mrxdav.sys BA28B000 Module \SystemRoot\System32\Drivers\ParVdm.SYS F7BB1000 Module \??\D:\WINDOWS\system32\PfModNT.sys F7BBB000 Module \SystemRoot\system32\DRIVERS\srv.sys BA121000 Module \SystemRoot\system32\drivers\wdmaud.sys BA0E4000 Module \SystemRoot\system32\drivers\sysaudio.sys BA318000 Module \??\D:\Program_Files\AntiVir_PersonalEdition_Classic\avgntflt.sys BA2D8000 Module \SystemRoot\System32\Drivers\HTTP.sys B9B26000 Module \SystemRoot\System32\DRIVERS\gmer.sys B9AC6000 Module \SystemRoot\System32\Drivers\Fastfat.SYS B91EB000 Module \SystemRoot\system32\drivers\kmixer.sys B91C1000 Module \WINDOWS\system32\ntdll.dll ---- Services - GMER 1.0.10 ---- Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service D:\WINDOWS\system32\DRIVERS\ACPI.sys [bOOT] ACPI Service [DISABLED] ACPIEC Service [DISABLED] adpu160m Service D:\WINDOWS\system32\drivers\aeaudio.sys [MANUAL] aeaudio Service D:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec Service D:\WINDOWS\System32\drivers\afd.sys [sYSTEM] AFD Service D:\WINDOWS\system32\DRIVERS\agp440.sys [bOOT] agp440 Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service D:\WINDOWS\system32\svchost.exe [DISABLED] Alerter Service D:\WINDOWS\System32\alg.exe [MANUAL] ALG Service [DISABLED] AliIde Service [DISABLED] amsint Service D:\Program Files\AntiVir PersonalEdition Classic\sched.exe [AUTO] AntiVirScheduler Service D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe [AUTO] AntiVirService Service D:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [MANUAL] aspnet_state Service D:\WINDOWS\system32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac Service D:\WINDOWS\system32\DRIVERS\atapi.sys [bOOT] atapi Service [DISABLED] Atdisk Service D:\WINDOWS\system32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc Service D:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv Service D:\WINDOWS\system32\DRIVERS\audstub.sys [MANUAL] audstub Service D:\Program Files\AntiVir PersonalEdition Classic\avgio.sys [sYSTEM] avgio Service D:\Program Files\AntiVir PersonalEdition Classic\avgntflt.sys [MANUAL] avgntflt Service [sYSTEM] Beep Service D:\WINDOWS\system32\svchost.exe [AUTO] BITS Service D:\WINDOWS\system32\svchost.exe [AUTO] Browser Service [DISABLED] cbidf2k Service [DISABLED] cd20xrnt Service [sYSTEM] Cdaudio Service -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
Process D:\WINDOWS\System32\svchost.exe 824 Library D:\WINDOWS\System32\svchost.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\System32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\System32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\System32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\System32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\System32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\System32\NTMARTA.DLL 0x77650000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\System32\SAMLIB.dll 0x71B50000 Library D:\WINDOWS\System32\xpsp2res.dll 0x20000000 Library d:\windows\system32\shsvcs.dll 0x776A0000 Library D:\WINDOWS\System32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library d:\windows\system32\dhcpcsvc.dll 0x76D30000 Library d:\windows\system32\DNSAPI.dll 0x76ED0000 Library d:\windows\system32\WS2_32.dll 0x719F0000 Library d:\windows\system32\WS2HELP.dll 0x719E0000 Library d:\windows\system32\iphlpapi.dll 0x76D10000 Library d:\windows\system32\Secur32.dll 0x77FC0000 Library d:\windows\system32\wzcsvc.dll 0x775E0000 Library d:\windows\system32\rtutils.dll 0x76E30000 Library d:\windows\system32\WMI.dll 0x76CE0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library d:\windows\system32\WTSAPI32.dll 0x76F00000 Library d:\windows\system32\ESENT.dll 0x6F890000 Library d:\windows\system32\ATL.DLL 0x76AC0000 Library D:\WINDOWS\System32\rsaenh.dll 0x0FFD0000 Library D:\WINDOWS\System32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\System32\COMRes.dll 0x77000000 Library D:\WINDOWS\System32\rastls.dll 0x76B70000 Library D:\WINDOWS\system32\CRYPTUI.dll 0x76610000 Library D:\WINDOWS\system32\WINTRUST.dll 0x76BE0000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library D:\WINDOWS\system32\WININET.dll 0x77AA0000 Library D:\WINDOWS\System32\MPRAPI.dll 0x76CF0000 Library D:\WINDOWS\System32\ACTIVEDS.dll 0x77C90000 Library D:\WINDOWS\System32\adsldpc.dll 0x76DC0000 Library D:\WINDOWS\System32\SETUPAPI.dll 0x778E0000 Library D:\WINDOWS\System32\RASAPI32.dll 0x76E90000 Library D:\WINDOWS\System32\rasman.dll 0x76E40000 Library D:\WINDOWS\System32\TAPI32.dll 0x76E60000 Library D:\WINDOWS\System32\SCHANNEL.dll 0x76790000 Library D:\WINDOWS\System32\WinSCard.dll 0x72340000 Library D:\WINDOWS\System32\raschap.dll 0x76C90000 Library D:\WINDOWS\system32\msv1_0.dll 0x77C40000 Library d:\windows\system32\schedsvc.dll 0x76B10000 Library d:\windows\system32\NTDSAPI.dll 0x76740000 Library D:\WINDOWS\System32\MSIDLE.DLL 0x74EC0000 Library d:\windows\system32\audiosrv.dll 0x70DA0000 Library d:\windows\system32\wkssvc.dll 0x772D0000 Library d:\windows\system32\cryptsvc.dll 0x76CC0000 Library d:\windows\system32\certcli.dll 0x752C0000 Library d:\windows\system32\qmgr.dll 0x60AC0000 Library D:\WINDOWS\system32\MPR.dll 0x71A60000 Library d:\windows\system32\SHFOLDER.dll 0x76720000 Library d:\windows\system32\WINHTTP.dll 0x4D5E0000 Library d:\windows\system32\ersvc.dll 0x74EF0000 Library d:\windows\system32\dmserver.dll 0x74F00000 Library D:\WINDOWS\system32\mswsock.dll 0x71990000 Library D:\WINDOWS\System32\hnetcfg.dll 0x62E40000 Library d:\windows\system32\es.dll 0x776D0000 Library D:\WINDOWS\System32\wshtcpip.dll 0x719D0000 Library d:\windows\pchealth\helpctr\binaries\pchsvc.dll 0x74EB0000 Library d:\windows\system32\hidserv.dll 0x68D40000 Library d:\windows\system32\HID.DLL 0x68D50000 Library d:\windows\system32\srvsvc.dll 0x75000000 Library d:\windows\system32\netman.dll 0x77CD0000 Library d:\windows\system32\netshell.dll 0x76390000 Library d:\windows\system32\credui.dll 0x76BB0000 Library d:\windows\system32\WZCSAPI.DLL 0x72F80000 Library d:\windows\system32\seclogon.dll 0x73C70000 Library d:\windows\system32\sens.dll 0x72240000 Library d:\windows\system32\trkwks.dll 0x74FE0000 Library d:\windows\system32\srsvc.dll 0x75110000 Library d:\windows\system32\POWRPROF.dll 0x74A40000 Library d:\windows\system32\w32time.dll 0x76760000 Library d:\windows\system32\MSVCP60.dll 0x76010000 Library d:\windows\system32\wbem\wmisvc.dll 0x4F0B0000 Library D:\WINDOWS\system32\VSSAPI.DLL 0x75350000 Library d:\windows\system32\wuauserv.dll 0x50000000 Library D:\WINDOWS\system32\wuaueng.dll 0x50040000 Library D:\WINDOWS\System32\ADVPACK.dll 0x751D0000 Library D:\WINDOWS\System32\WINSPOOL.DRV 0x72F50000 Library D:\WINDOWS\System32\Cabinet.dll 0x750C0000 Library D:\WINDOWS\System32\mspatcha.dll 0x60440000 Library D:\WINDOWS\System32\sfc.dll 0x76B50000 Library D:\WINDOWS\System32\sfc_os.dll 0x76C10000 Library d:\windows\system32\browser.dll 0x76D90000 Library d:\windows\system32\ipnathlp.dll 0x66890000 Library d:\windows\system32\AUTHZ.dll 0x77680000 Library d:\windows\system32\wscsvc.dll 0x4C190000 Library d:\windows\system32\msi.dll 0x745E0000 Library D:\WINDOWS\system32\wbem\wbemprox.dll 0x74E60000 Library D:\WINDOWS\system32\wbem\wbemcomn.dll 0x75200000 Library D:\WINDOWS\System32\SXS.DLL 0x77210000 Library D:\WINDOWS\system32\comsvcs.dll 0x76080000 Library D:\WINDOWS\system32\colbact.DLL 0x750A0000 Library D:\WINDOWS\system32\MTXCLU.DLL 0x75060000 Library D:\WINDOWS\system32\WSOCK32.dll 0x71A10000 Library D:\WINDOWS\System32\CLUSAPI.DLL 0x76D50000 Library D:\WINDOWS\System32\RESUTILS.DLL 0x75020000 Library D:\WINDOWS\system32\actxprxy.dll 0x71CA0000 Library D:\WINDOWS\System32\Wbem\wbemcore.dll 0x76250000 Library D:\WINDOWS\System32\Wbem\esscli.dll 0x75280000 Library D:\WINDOWS\System32\Wbem\FastProx.dll 0x75610000 Library D:\WINDOWS\system32\wbem\wbemsvc.dll 0x74E40000 Library D:\WINDOWS\system32\wbem\wmiutils.dll 0x74F90000 Library D:\WINDOWS\system32\wbem\repdrvfs.dll 0x75170000 Library D:\WINDOWS\system32\wbem\wmiprvsd.dll 0x59AD0000 Library D:\WINDOWS\system32\NCObjAPI.DLL 0x5FB00000 Library D:\WINDOWS\system32\wbem\wbemess.dll 0x75300000 Library D:\WINDOWS\System32\rasadhlp.dll 0x76F70000 Library D:\WINDOWS\system32\wuapi.dll 0x506A0000 Library D:\WINDOWS\system32\wbem\ncprov.dll 0x5FAD0000 Library D:\WINDOWS\system32\wbem\wbemcons.dll 0x73C80000 Library D:\WINDOWS\system32\netcfgx.dll 0x75570000 Library D:\WINDOWS\system32\upnp.dll 0x76DF0000 Library D:\WINDOWS\system32\SSDPAPI.dll 0x74E70000 Library D:\WINDOWS\System32\rasmans.dll 0x7DEF0000 Library D:\WINDOWS\System32\WINIPSEC.DLL 0x742D0000 Library d:\windows\system32\tapisrv.dll 0x73330000 Library d:\windows\system32\PSAPI.DLL 0x76BA0000 Library D:\WINDOWS\System32\rastapi.dll 0x75880000 Library D:\WINDOWS\System32\unimdm.tsp 0x57F70000 Library D:\WINDOWS\System32\uniplat.dll 0x71F70000 Library D:\WINDOWS\System32\kmddsp.tsp 0x57FF0000 Library D:\WINDOWS\System32\ndptsp.tsp 0x57FD0000 Library D:\WINDOWS\System32\ipconf.tsp 0x58000000 Library D:\WINDOWS\System32\h323.tsp 0x58020000 Library D:\WINDOWS\System32\hidphone.tsp 0x58010000 Library D:\WINDOWS\System32\rasppp.dll 0x721B0000 Library D:\WINDOWS\System32\ntlsapi.dll 0x72400000 Library D:\WINDOWS\system32\kerberos.dll 0x71C50000 Library D:\WINDOWS\System32\cryptdll.dll 0x76730000 Library D:\WINDOWS\System32\RASDLG.dll 0x754C0000 Process D:\WINDOWS\system32\svchost.exe 876 Library D:\WINDOWS\system32\svchost.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library d:\windows\system32\dnsrslvr.dll 0x76710000 Library d:\windows\system32\DNSAPI.dll 0x76ED0000 Library d:\windows\system32\WS2_32.dll 0x719F0000 Library d:\windows\system32\WS2HELP.dll 0x719E0000 Library d:\windows\system32\iphlpapi.dll Process D:\WINDOWS\system32\svchost.exe 908 Library D:\WINDOWS\system32\svchost.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\system32\NTMARTA.DLL 0x77650000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\SAMLIB.dll 0x71B50000 Library D:\WINDOWS\system32\xpsp2res.dll 0x20000000 Library d:\windows\system32\lmhsvc.dll 0x74BB0000 Library d:\windows\system32\iphlpapi.dll 0x76D10000 Library d:\windows\system32\WS2_32.dll 0x719F0000 Library d:\windows\system32\WS2HELP.dll 0x719E0000 Library d:\windows\system32\webclnt.dll 0x5A9F0000 Library D:\WINDOWS\system32\WININET.dll 0x77AA0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\Secur32.dll 0x77FC0000 Library D:\WINDOWS\system32\wsock32.dll 0x71A10000 Library d:\windows\system32\regsvc.dll 0x76820000 Library d:\windows\system32\ssdpsrv.dll 0x76840000 Library D:\WINDOWS\system32\hnetcfg.dll 0x62E40000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library D:\WINDOWS\system32\mswsock.dll 0x71990000 Library D:\WINDOWS\System32\wshtcpip.dll 0x719D0000 Process D:\WINDOWS\system32\spoolsv.exe 1036 Library D:\WINDOWS\system32\spoolsv.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\system32\SPOOLSS.DLL 0x74240000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\DNSAPI.dll 0x76ED0000 Library D:\WINDOWS\system32\iphlpapi.dll 0x76D10000 Library D:\WINDOWS\system32\rasadhlp.dll 0x76F70000 Library D:\WINDOWS\system32\localspl.dll 0x75B40000 Library D:\WINDOWS\system32\Secur32.dll 0x77FC0000 Library D:\WINDOWS\system32\sfc_os.dll 0x76C10000 Library D:\WINDOWS\system32\WINTRUST.dll 0x76BE0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library D:\WINDOWS\system32\winspool.drv 0x72F50000 Library D:\WINDOWS\system32\netapi32.dll 0x6FEE0000 Library D:\WINDOWS\system32\cnbjmon.dll 0x741F0000 Library D:\WINDOWS\system32\pjlmon.dll 0x741D0000 Library D:\WINDOWS\system32\tcpmon.dll 0x72370000 Library D:\WINDOWS\system32\usbmon.dll 0x72360000 Library D:\WINDOWS\System32\mswsock.dll 0x71990000 Library D:\WINDOWS\System32\winrnr.dll 0x76F60000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\win32spl.dll 0x75EA0000 Library D:\WINDOWS\system32\NETRAP.dll 0x71BE0000 Library D:\WINDOWS\system32\NTDSAPI.dll 0x76740000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library D:\WINDOWS\system32\xpsp2res.dll 0x20000000 Library D:\WINDOWS\system32\inetpp.dll 0x74260000 Process D:\Program Files\AntiVir PersonalEdition Classic\sched.exe 1160 Library D:\Program Files\AntiVir PersonalEdition Classic\sched.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\Program Files\AntiVir PersonalEdition Classic\MSVCR71.dll 0x7C340000 Library D:\Program Files\AntiVir PersonalEdition Classic\MSVCP71.dll 0x7C3A0000 Library D:\Program Files\AntiVir PersonalEdition Classic\schedr.dll 0x10000000 Library D:\WINDOWS\system32\WTSAPI32.DLL 0x76F00000 Library D:\WINDOWS\system32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\rasapi32.dll 0x76E90000 Library D:\WINDOWS\system32\rasman.dll 0x76E40000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\TAPI32.dll 0x76E60000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\rtutils.dll 0x76E30000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\xpsp2res.dll 0x20000000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Process D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe 1172 Library D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\Program Files\AntiVir PersonalEdition Classic\GUARDMSG.DLL 0x003C0000 Library D:\Program Files\AntiVir PersonalEdition Classic\MSVCR71.dll 0x7C340000 Library D:\Program Files\AntiVir PersonalEdition Classic\AVPREF.DLL 0x10000000 Library D:\Program Files\AntiVir PersonalEdition Classic\SMTPLIB.DLL 0x003B0000 Library D:\Program Files\AntiVir PersonalEdition Classic\AVEWIN32.DLL 0x00B20000 Library D:\WINDOWS\system32\mswsock.dll 0x71990000 Library D:\WINDOWS\system32\hnetcfg.dll 0x62E40000 Library D:\WINDOWS\System32\wshtcpip.dll 0x719D0000 Library D:\WINDOWS\system32\FLTLIB.DLL 0x5E100000 Process D:\WINDOWS\system32\nvsvc32.exe 1264 Library D:\WINDOWS\system32\nvsvc32.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\POWRPROF.dll 0x74A40000 Library D:\WINDOWS\system32\wtsapi32.dll 0x76F00000 Library D:\WINDOWS\system32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\COMCTL32.dll 0x58B50000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\WINTRUST.dll 0x76BE0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library D:\WINDOWS\system32\secur32.dll 0x77FC0000 Library D:\WINDOWS\system32\msv1_0.dll 0x77C40000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\iphlpapi.dll 0x76D10000 Library D:\WINDOWS\system32\Apphelp.dll 0x77B50000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\NTMARTA.DLL 0x77650000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\SAMLIB.dll 0x71B50000 Process D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe 1484 Library D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Process D:\WINDOWS\system32\wuauclt.exe 1664 Library D:\WINDOWS\system32\wuauclt.exe 0x00400000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\ATL.DLL 0x76AC0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\COMCTL32.dll 0x77390000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\wuaucpl.cpl 0x50940000 Library D:\WINDOWS\system32\SHFOLDER.dll 0x76720000 Library D:\WINDOWS\system32\wuaueng.dll 0x50040000 Library D:\WINDOWS\system32\ADVPACK.dll 0x751D0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\ESENT.dll 0x6F890000 Library D:\WINDOWS\system32\WTSAPI32.dll 0x76F00000 Library D:\WINDOWS\system32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\WINSPOOL.DRV 0x72F50000 Library D:\WINDOWS\system32\SETUPAPI.dll 0x778E0000 Library D:\WINDOWS\system32\WINHTTP.dll 0x4D5E0000 Library D:\WINDOWS\system32\WINTRUST.dll 0x76BE0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library D:\WINDOWS\system32\Cabinet.dll 0x750C0000 Library D:\WINDOWS\system32\mspatcha.dll 0x60440000 Library D:\WINDOWS\system32\sfc.dll 0x76B50000 Library D:\WINDOWS\system32\sfc_os.dll 0x76C10000 Library D:\WINDOWS\system32\MSIMG32.dll 0x76310000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB00 -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
suite ! Process D:\WINDOWS\system32\lsass.exe 556 Library D:\WINDOWS\system32\lsass.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\LSASRV.dll 0x756B0000 Library D:\WINDOWS\system32\MPR.dll 0x71A60000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\NTDSAPI.dll 0x76740000 Library D:\WINDOWS\system32\DNSAPI.dll 0x76ED0000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\Secur32.dll 0x77FC0000 Library D:\WINDOWS\system32\SAMLIB.dll 0x71B50000 Library D:\WINDOWS\system32\SAMSRV.dll 0x743B0000 Library D:\WINDOWS\system32\cryptdll.dll 0x76730000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\system32\msprivs.dll 0x20000000 Library D:\WINDOWS\system32\kerberos.dll 0x71C50000 Library D:\WINDOWS\system32\msv1_0.dll 0x77C40000 Library D:\WINDOWS\system32\iphlpapi.dll 0x76D10000 Library D:\WINDOWS\system32\netlogon.dll 0x74420000 Library D:\WINDOWS\system32\w32time.dll 0x76760000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Library D:\WINDOWS\system32\schannel.dll 0x76790000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\wdigest.dll 0x742E0000 Library D:\WINDOWS\system32\rsaenh.dll 0x0FFD0000 Library D:\WINDOWS\system32\scecli.dll 0x74370000 Library D:\WINDOWS\system32\SETUPAPI.dll 0x778E0000 Library D:\WINDOWS\system32\ipsecsvc.dll 0x74340000 Library D:\WINDOWS\system32\AUTHZ.dll 0x77680000 Library D:\WINDOWS\system32\oakley.DLL 0x75DD0000 Library D:\WINDOWS\system32\WINIPSEC.DLL 0x742D0000 Library D:\WINDOWS\system32\mswsock.dll 0x71990000 Library D:\WINDOWS\system32\hnetcfg.dll 0x62E40000 Library D:\WINDOWS\System32\wshtcpip.dll 0x719D0000 Library D:\WINDOWS\system32\dssenh.dll 0x68100000 Library D:\WINDOWS\system32\pstorsvc.dll 0x74300000 Library D:\WINDOWS\system32\psbase.dll 0x74320000 Process D:\WINDOWS\system32\svchost.exe 716 Library D:\WINDOWS\system32\svchost.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\system32\NTMARTA.DLL 0x77650000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\SAMLIB.dll 0x71B50000 Library d:\windows\system32\rpcss.dll 0x76870000 Library d:\windows\system32\Secur32.dll 0x77FC0000 Library d:\windows\system32\WS2_32.dll 0x719F0000 Library d:\windows\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\xpsp2res.dll 0x20000000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library d:\windows\system32\termsrv.dll 0x766A0000 Library d:\windows\system32\ICAAPI.dll 0x74EE0000 Library d:\windows\system32\SETUPAPI.dll 0x778E0000 Library D:\WINDOWS\system32\WINTRUST.dll 0x76BE0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library d:\windows\system32\AUTHZ.dll 0x77680000 Library d:\windows\system32\mstlsapi.dll 0x75080000 Library d:\windows\system32\ACTIVEDS.dll 0x77C90000 Library d:\windows\system32\adsldpc.dll 0x76DC0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library d:\windows\system32\ATL.DLL 0x76AC0000 Library D:\WINDOWS\system32\REGAPI.dll 0x76B60000 Library D:\WINDOWS\system32\rsaenh.dll 0x0FFD0000 Library D:\WINDOWS\system32\Apphelp.dll 0x77B50000 Process D:\WINDOWS\system32\svchost.exe 784 Library D:\WINDOWS\system32\svchost.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library d:\windows\system32\rpcss.dll 0x76870000 Library d:\windows\system32\Secur32.dll 0x77FC0000 Library d:\windows\system32\WS2_32.dll 0x719F0000 Library d:\windows\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\xpsp2res.dll 0x20000000 Library D:\WINDOWS\system32\rsaenh.dll 0x0FFD0000 Library D:\WINDOWS\system32\mswsock.dll 0x71990000 Library D:\WINDOWS\system32\hnetcfg.dll 0x62E40000 Library D:\WINDOWS\System32\wshtcpip.dll 0x719D0000 Library D:\WINDOWS\system32\DNSAPI.dll 0x76ED0000 Library D:\WINDOWS\system32\iphlpapi.dll 0x76D10000 Library D:\WINDOWS\System32\winrnr.dll 0x76F60000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\rasadhlp.dll 0x76F70000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
pfiouu je galère rien que pour venir poster mes réponses !!! voici le copier / coller du rapport gmer -------------------------------------------------- GMER 1.0.10.10122 - http://www.gmer.net Rootkit 2006-08-09 22:13:30 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.10 ---- INT 0x00 \WINDOWS\system32\ntoskrnl.exe 804DE51E INT 0x01 \WINDOWS\system32\ntoskrnl.exe 804DE69D INT 0x03 \WINDOWS\system32\ntoskrnl.exe 804DEAB1 INT 0x04 \WINDOWS\system32\ntoskrnl.exe 804DEC34 INT 0x05 \WINDOWS\system32\ntoskrnl.exe 804DED99 INT 0x06 \WINDOWS\system32\ntoskrnl.exe 804DEF1A INT 0x07 \WINDOWS\system32\ntoskrnl.exe 804DF593 INT 0x09 \WINDOWS\system32\ntoskrnl.exe 804DF998 INT 0x0A \WINDOWS\system32\ntoskrnl.exe 804DFAB6 INT 0x0B \WINDOWS\system32\ntoskrnl.exe 804DFBF3 INT 0x0C \WINDOWS\system32\ntoskrnl.exe 804DFE50 INT 0x0D \WINDOWS\system32\ntoskrnl.exe 804E014C INT 0x0E \WINDOWS\system32\ntoskrnl.exe 804E0877 INT 0x0F \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x10 \WINDOWS\system32\ntoskrnl.exe 804E0CCA INT 0x11 \WINDOWS\system32\ntoskrnl.exe 804E0E04 INT 0x12 \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x13 \WINDOWS\system32\ntoskrnl.exe 804E0F69 INT 0x14 \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x15 \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x16 \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x17 \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x18 \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x19 \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x1A \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x1B \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x1C \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x1D \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x1E \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x1F \WINDOWS\system32\hal.dll 806FF10C INT 0x2A \WINDOWS\system32\ntoskrnl.exe 804DDD51 INT 0x2B \WINDOWS\system32\ntoskrnl.exe 804DDE54 INT 0x2C \WINDOWS\system32\ntoskrnl.exe 804DE000 INT 0x2D \WINDOWS\system32\ntoskrnl.exe 804DE990 INT 0x2E \WINDOWS\system32\ntoskrnl.exe 804DD7D1 INT 0x2F \WINDOWS\system32\ntoskrnl.exe 804E0BAC INT 0x30 \WINDOWS\system32\ntoskrnl.exe 804DCE90 INT 0x31 \WINDOWS\system32\ntoskrnl.exe 804DCE9A INT 0x32 \WINDOWS\system32\ntoskrnl.exe 804DCEA4 INT 0x33 \WINDOWS\system32\ntoskrnl.exe 804DCEAE INT 0x34 \WINDOWS\system32\ntoskrnl.exe 804DCEB8 INT 0x35 \WINDOWS\system32\ntoskrnl.exe 804DCEC2 INT 0x36 \WINDOWS\system32\ntoskrnl.exe 804DCECC INT 0x37 \WINDOWS\system32\hal.dll 806FE864 INT 0x38 \WINDOWS\system32\ntoskrnl.exe 804DCEE0 INT 0x39 \WINDOWS\system32\ntoskrnl.exe 804DCEEA INT 0x3A \WINDOWS\system32\ntoskrnl.exe 804DCEF4 INT 0x3B \WINDOWS\system32\ntoskrnl.exe 804DCEFE INT 0x3C \WINDOWS\system32\ntoskrnl.exe 804DCF08 INT 0x3D \WINDOWS\system32\hal.dll 806FFE2C INT 0x3E \WINDOWS\system32\ntoskrnl.exe 804DCF1C INT 0x3F \WINDOWS\system32\ntoskrnl.exe 804DCF26 INT 0x40 \WINDOWS\system32\ntoskrnl.exe 804DCF30 INT 0x41 \WINDOWS\system32\hal.dll 806FFC88 INT 0x42 \WINDOWS\system32\ntoskrnl.exe 804DCF44 INT 0x43 \WINDOWS\system32\ntoskrnl.exe 804DCF4E INT 0x44 \WINDOWS\system32\ntoskrnl.exe 804DCF58 INT 0x45 \WINDOWS\system32\ntoskrnl.exe 804DCF62 INT 0x46 \WINDOWS\system32\ntoskrnl.exe 804DCF6C INT 0x47 \WINDOWS\system32\ntoskrnl.exe 804DCF76 INT 0x48 \WINDOWS\system32\ntoskrnl.exe 804DCF80 INT 0x49 \WINDOWS\system32\ntoskrnl.exe 804DCF8A INT 0x4A \WINDOWS\system32\ntoskrnl.exe 804DCF94 INT 0x4B \WINDOWS\system32\ntoskrnl.exe 804DCF9E INT 0x4C \WINDOWS\system32\ntoskrnl.exe 804DCFA8 INT 0x4D \WINDOWS\system32\ntoskrnl.exe 804DCFB2 INT 0x4E \WINDOWS\system32\ntoskrnl.exe 804DCFBC INT 0x4F \WINDOWS\system32\ntoskrnl.exe 804DCFC6 INT 0x50 \WINDOWS\system32\hal.dll 806FE93C INT 0x51 \WINDOWS\system32\ntoskrnl.exe 804DCFDA INT 0x52 \WINDOWS\system32\ntoskrnl.exe 804DCFE4 INT 0x53 \WINDOWS\system32\ntoskrnl.exe 804DCFEE INT 0x54 \WINDOWS\system32\ntoskrnl.exe 804DCFF8 INT 0x55 \WINDOWS\system32\ntoskrnl.exe 804DD002 INT 0x56 \WINDOWS\system32\ntoskrnl.exe 804DD00C INT 0x57 \WINDOWS\system32\ntoskrnl.exe 804DD016 INT 0x58 \WINDOWS\system32\ntoskrnl.exe 804DD020 INT 0x59 \WINDOWS\system32\ntoskrnl.exe 804DD02A INT 0x5A \WINDOWS\system32\ntoskrnl.exe 804DD034 INT 0x5B \WINDOWS\system32\ntoskrnl.exe 804DD03E INT 0x5C \WINDOWS\system32\ntoskrnl.exe 804DD048 INT 0x5D \WINDOWS\system32\ntoskrnl.exe 804DD052 INT 0x5E \WINDOWS\system32\ntoskrnl.exe 804DD05C INT 0x5F \WINDOWS\system32\ntoskrnl.exe 804DD066 INT 0x60 \WINDOWS\system32\ntoskrnl.exe 804DD070 INT 0x61 \WINDOWS\system32\ntoskrnl.exe 804DD07A INT 0x62 \WINDOWS\system32\ntoskrnl.exe 804DD084 INT 0x64 \WINDOWS\system32\ntoskrnl.exe 804DD098 INT 0x65 \WINDOWS\system32\ntoskrnl.exe 804DD0A2 INT 0x66 \WINDOWS\system32\ntoskrnl.exe 804DD0AC INT 0x67 \WINDOWS\system32\ntoskrnl.exe 804DD0B6 INT 0x68 \WINDOWS\system32\ntoskrnl.exe 804DD0C0 INT 0x69 \WINDOWS\system32\ntoskrnl.exe 804DD0CA INT 0x6A \WINDOWS\system32\ntoskrnl.exe 804DD0D4 INT 0x6B \WINDOWS\system32\ntoskrnl.exe 804DD0DE INT 0x6C \WINDOWS\system32\ntoskrnl.exe 804DD0E8 INT 0x6D \WINDOWS\system32\ntoskrnl.exe 804DD0F2 INT 0x6E \WINDOWS\system32\ntoskrnl.exe 804DD0FC INT 0x6F \WINDOWS\system32\ntoskrnl.exe 804DD106 INT 0x70 \WINDOWS\system32\ntoskrnl.exe 804DD110 INT 0x71 \WINDOWS\system32\ntoskrnl.exe 804DD11A INT 0x72 \WINDOWS\system32\ntoskrnl.exe 804DD124 INT 0x74 \WINDOWS\system32\ntoskrnl.exe 804DD138 INT 0x75 \WINDOWS\system32\ntoskrnl.exe 804DD142 INT 0x76 \WINDOWS\system32\ntoskrnl.exe 804DD14C INT 0x77 \WINDOWS\system32\ntoskrnl.exe 804DD156 INT 0x78 \WINDOWS\system32\ntoskrnl.exe 804DD160 INT 0x79 \WINDOWS\system32\ntoskrnl.exe 804DD16A INT 0x7A \WINDOWS\system32\ntoskrnl.exe 804DD174 INT 0x7B \WINDOWS\system32\ntoskrnl.exe 804DD17E INT 0x7C \WINDOWS\system32\ntoskrnl.exe 804DD188 INT 0x7D \WINDOWS\system32\ntoskrnl.exe 804DD192 INT 0x7E \WINDOWS\system32\ntoskrnl.exe 804DD19C INT 0x7F \WINDOWS\system32\ntoskrnl.exe 804DD1A6 INT 0x80 \WINDOWS\system32\ntoskrnl.exe 804DD1B0 INT 0x81 \WINDOWS\system32\ntoskrnl.exe 804DD1BA INT 0x82 \WINDOWS\system32\ntoskrnl.exe 804DD1C4 INT 0x84 \WINDOWS\system32\ntoskrnl.exe 804DD1D8 INT 0x85 \WINDOWS\system32\ntoskrnl.exe 804DD1E2 INT 0x86 \WINDOWS\system32\ntoskrnl.exe 804DD1EC INT 0x87 \WINDOWS\system32\ntoskrnl.exe 804DD1F6 INT 0x88 \WINDOWS\system32\ntoskrnl.exe 804DD200 INT 0x89 \WINDOWS\system32\ntoskrnl.exe 804DD20A INT 0x8A \WINDOWS\system32\ntoskrnl.exe 804DD214 INT 0x8B \WINDOWS\system32\ntoskrnl.exe 804DD21E INT 0x8C \WINDOWS\system32\ntoskrnl.exe 804DD228 INT 0x8D \WINDOWS\system32\ntoskrnl.exe 804DD232 INT 0x8E \WINDOWS\system32\ntoskrnl.exe 804DD23C INT 0x8F \WINDOWS\system32\ntoskrnl.exe 804DD246 INT 0x90 \WINDOWS\system32\ntoskrnl.exe 804DD250 INT 0x91 \WINDOWS\system32\ntoskrnl.exe 804DD25A INT 0x93 \WINDOWS\system32\ntoskrnl.exe 804DD26E INT 0x94 \WINDOWS\system32\ntoskrnl.exe 804DD278 INT 0x95 \WINDOWS\system32\ntoskrnl.exe 804DD282 INT 0x96 \WINDOWS\system32\ntoskrnl.exe 804DD28C INT 0x97 \WINDOWS\system32\ntoskrnl.exe 804DD296 INT 0x98 \WINDOWS\system32\ntoskrnl.exe 804DD2A0 INT 0x99 \WINDOWS\system32\ntoskrnl.exe 804DD2AA INT 0x9A \WINDOWS\system32\ntoskrnl.exe 804DD2B4 INT 0x9B \WINDOWS\system32\ntoskrnl.exe 804DD2BE INT 0x9C \WINDOWS\system32\ntoskrnl.exe 804DD2C8 INT 0x9D \WINDOWS\system32\ntoskrnl.exe 804DD2D2 INT 0x9E \WINDOWS\system32\ntoskrnl.exe 804DD2DC INT 0x9F \WINDOWS\system32\ntoskrnl.exe 804DD2E6 INT 0xA0 \WINDOWS\system32\ntoskrnl.exe 804DD2F0 INT 0xA1 \WINDOWS\system32\ntoskrnl.exe 804DD2FA INT 0xA2 \WINDOWS\system32\ntoskrnl.exe 804DD304 INT 0xA3 \WINDOWS\system32\ntoskrnl.exe 804DD30E INT 0xA5 \WINDOWS\system32\ntoskrnl.exe 804DD322 INT 0xA6 \WINDOWS\system32\ntoskrnl.exe 804DD32C INT 0xA7 \WINDOWS\system32\ntoskrnl.exe 804DD336 INT 0xA8 \WINDOWS\system32\ntoskrnl.exe 804DD340 INT 0xA9 \WINDOWS\system32\ntoskrnl.exe 804DD34A INT 0xAA \WINDOWS\system32\ntoskrnl.exe 804DD354 INT 0xAB \WINDOWS\system32\ntoskrnl.exe 804DD35E INT 0xAC \WINDOWS\system32\ntoskrnl.exe 804DD368 INT 0xAD \WINDOWS\system32\ntoskrnl.exe 804DD372 INT 0xAE \WINDOWS\system32\ntoskrnl.exe 804DD37C INT 0xAF \WINDOWS\system32\ntoskrnl.exe 804DD386 INT 0xB0 \WINDOWS\system32\ntoskrnl.exe 804DD390 INT 0xB3 \WINDOWS\system32\ntoskrnl.exe 804DD3AE INT 0xB5 \WINDOWS\system32\ntoskrnl.exe 804DD3C2 INT 0xB6 \WINDOWS\system32\ntoskrnl.exe 804DD3CC INT 0xB7 \WINDOWS\system32\ntoskrnl.exe 804DD3D6 INT 0xB8 \WINDOWS\system32\ntoskrnl.exe 804DD3E0 INT 0xB9 \WINDOWS\system32\ntoskrnl.exe 804DD3EA INT 0xBA \WINDOWS\system32\ntoskrnl.exe 804DD3F4 INT 0xBB \WINDOWS\system32\ntoskrnl.exe 804DD3FE INT 0xBC \WINDOWS\system32\ntoskrnl.exe 804DD408 INT 0xBD \WINDOWS\system32\ntoskrnl.exe 804DD412 INT 0xBE \WINDOWS\system32\ntoskrnl.exe 804DD41C INT 0xBF \WINDOWS\system32\ntoskrnl.exe 804DD426 INT 0xC0 \WINDOWS\system32\ntoskrnl.exe 804DD430 INT 0xC1 \WINDOWS\system32\hal.dll 806FEAC0 INT 0xC2 \WINDOWS\system32\ntoskrnl.exe 804DD444 INT 0xC3 \WINDOWS\system32\ntoskrnl.exe 804DD44E INT 0xC4 \WINDOWS\system32\ntoskrnl.exe 804DD458 INT 0xC5 \WINDOWS\system32\ntoskrnl.exe 804DD462 INT 0xC6 \WINDOWS\system32\ntoskrnl.exe 804DD46C INT 0xC7 \WINDOWS\system32\ntoskrnl.exe 804DD476 INT 0xC8 \WINDOWS\system32\ntoskrnl.exe 804DD480 INT 0xC9 \WINDOWS\system32\ntoskrnl.exe 804DD48A INT 0xCA \WINDOWS\system32\ntoskrnl.exe 804DD494 INT 0xCB \WINDOWS\system32\ntoskrnl.exe 804DD49E INT 0xCC \WINDOWS\system32\ntoskrnl.exe 804DD4A8 INT 0xCD \WINDOWS\system32\ntoskrnl.exe 804DD4B2 INT 0xCE \WINDOWS\system32\ntoskrnl.exe 804DD4BC INT 0xCF \WINDOWS\system32\ntoskrnl.exe 804DD4C6 INT 0xD0 \WINDOWS\system32\ntoskrnl.exe 804DD4D0 INT 0xD1 \WINDOWS\system32\hal.dll 806FDE54 INT 0xD2 \WINDOWS\system32\ntoskrnl.exe 804DD4E4 INT 0xD3 \WINDOWS\system32\ntoskrnl.exe 804DD4EE INT 0xD4 \WINDOWS\system32\ntoskrnl.exe 804DD4F8 INT 0xD5 \WINDOWS\system32\ntoskrnl.exe 804DD502 INT 0xD6 \WINDOWS\system32\ntoskrnl.exe 804DD50C INT 0xD7 \WINDOWS\system32\ntoskrnl.exe 804DD516 INT 0xD8 \WINDOWS\system32\ntoskrnl.exe 804DD520 INT 0xD9 \WINDOWS\system32\ntoskrnl.exe 804DD52A INT 0xDA \WINDOWS\system32\ntoskrnl.exe 804DD534 INT 0xDB \WINDOWS\system32\ntoskrnl.exe 804DD53E INT 0xDC \WINDOWS\system32\ntoskrnl.exe 804DD548 INT 0xDD \WINDOWS\system32\ntoskrnl.exe 804DD552 INT 0xDE \WINDOWS\system32\ntoskrnl.exe 804DD55C INT 0xDF \WINDOWS\system32\ntoskrnl.exe 804DD566 INT 0xE0 \WINDOWS\system32\ntoskrnl.exe 804DD570 INT 0xE1 \WINDOWS\system32\hal.dll 806FF048 INT 0xE2 \WINDOWS\system32\ntoskrnl.exe 804DD584 INT 0xE3 \WINDOWS\system32\hal.dll 806FEDAC INT 0xE4 \WINDOWS\system32\ntoskrnl.exe 804DD598 INT 0xE5 \WINDOWS\system32\ntoskrnl.exe 804DD5A2 INT 0xE6 \WINDOWS\system32\ntoskrnl.exe 804DD5AC INT 0xE7 \WINDOWS\system32\ntoskrnl.exe 804DD5B6 INT 0xE8 \WINDOWS\system32\ntoskrnl.exe 804DD5C0 INT 0xE9 \WINDOWS\system32\ntoskrnl.exe 804DD5CA INT 0xEA \WINDOWS\system32\ntoskrnl.exe 804DD5D4 INT 0xEB \WINDOWS\system32\ntoskrnl.exe 804DD5DE INT 0xEC \WINDOWS\system32\ntoskrnl.exe 804DD5E8 INT 0xED \WINDOWS\system32\ntoskrnl.exe 804DD5F2 INT 0xEE \WINDOWS\system32\ntoskrnl.exe 804DD5F9 INT 0xEF \WINDOWS\system32\ntoskrnl.exe 804DD600 INT 0xF0 \WINDOWS\system32\ntoskrnl.exe 804DD607 INT 0xF1 \WINDOWS\system32\ntoskrnl.exe 804DD60E INT 0xF2 \WINDOWS\system32\ntoskrnl.exe 804DD615 INT 0xF3 \WINDOWS\system32\ntoskrnl.exe 804DD61C INT 0xF4 \WINDOWS\system32\ntoskrnl.exe 804DD623 INT 0xF5 \WINDOWS\system32\ntoskrnl.exe 804DD62A INT 0xF6 \WINDOWS\system32\ntoskrnl.exe 804DD631 INT 0xF7 \WINDOWS\system32\ntoskrnl.exe 804DD638 INT 0xF8 \WINDOWS\system32\ntoskrnl.exe 804DD63F INT 0xF9 \WINDOWS\system32\ntoskrnl.exe 804DD646 INT 0xFA \WINDOWS\system32\ntoskrnl.exe 804DD64D INT 0xFB \WINDOWS\system32\ntoskrnl.exe 804DD654 INT 0xFC \WINDOWS\system32\ntoskrnl.exe 804DD65B INT 0xFD \WINDOWS\system32\hal.dll 806FF5A8 INT 0xFE \WINDOWS\system32\hal.dll 806FF748 INT 0xFF \WINDOWS\system32\ntoskrnl.exe 804DD670 SYSENTER \WINDOWS\system32\ntoskrnl.exe 804DD89F ---- Processes - GMER 1.0.10 ---- Process Sytem Idle 0 Process System 4 Process D:\WINDOWS\System32\alg.exe 256 Library D:\WINDOWS\System32\alg.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\System32\ATL.DLL 0x76AC0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\System32\WSOCK32.dll 0x71A10000 Library D:\WINDOWS\System32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\System32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\System32\MSWSOCK.DLL 0x71990000 Library D:\WINDOWS\System32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\System32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\System32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\System32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\System32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\System32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\System32\COMRes.dll 0x77000000 Library D:\WINDOWS\System32\xpsp2res.dll 0x20000000 Library D:\WINDOWS\system32\hnetcfg.dll 0x62E40000 Library D:\WINDOWS\System32\wshtcpip.dll 0x719D0000 Process D:\WINDOWS\System32\smss.exe 392 Library D:\WINDOWS\System32\smss.exe 0x48580000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Process D:\WINDOWS\system32\csrss.exe 448 Library D:\WINDOWS\system32\csrss.exe 0x4A680000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\CSRSRV.dll 0x75AD0000 Library D:\WINDOWS\system32\basesrv.dll 0x75AE0000 Library D:\WINDOWS\system32\winsrv.dll 0x75AF0000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\KERNEL32.dll 0x7C800000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\sxs.dll 0x77210000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Process D:\WINDOWS\system32\winlogon.exe 488 Library D:\WINDOWS\system32\winlogon.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\AUTHZ.dll 0x77680000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\CRYPT32.dll 0x779E0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\MSASN1.dll 0x77A80000 Library D:\WINDOWS\system32\NDdeApi.dll 0x758D0000 Library D:\WINDOWS\system32\PROFMAP.dll 0x758C0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\PSAPI.DLL 0x76BA0000 Library D:\WINDOWS\system32\REGAPI.dll 0x76B60000 Library D:\WINDOWS\system32\Secur32.dll 0x77FC0000 Library D:\WINDOWS\system32\SETUPAPI.dll 0x778E0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\WINTRUST.dll 0x76BE0000 Library D:\WINDOWS\system32\IMAGEHLP.dll 0x76C40000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\MSGINA.dll 0x75900000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\COMCTL32.dll 0x58B50000 Library D:\WINDOWS\system32\ODBC32.dll 0x74730000 Library D:\WINDOWS\system32\comdlg32.dll 0x76340000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\odbcint.dll 0x20000000 Library D:\WINDOWS\system32\SHSVCS.dll 0x776A0000 Library D:\WINDOWS\system32\sfc.dll 0x76B50000 Library D:\WINDOWS\system32\sfc_os.dll 0x76C10000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\Apphelp.dll 0x77B50000 Library D:\WINDOWS\system32\WINSCARD.DLL 0x72340000 Library D:\WINDOWS\system32\WTSAPI32.dll 0x76F00000 Library D:\WINDOWS\system32\sxs.dll 0x77210000 Library D:\WINDOWS\system32\uxtheme.dll 0x5B090000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\system32\cscdll.dll 0x76590000 Library D:\WINDOWS\system32\WlNotify.dll 0x758E0000 Library D:\WINDOWS\system32\WINSPOOL.DRV 0x72F50000 Library D:\WINDOWS\system32\MPR.dll 0x71A60000 Library D:\WINDOWS\system32\WgaLogon.dll 0x01240000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\rsaenh.dll 0x0FFD0000 Library D:\WINDOWS\system32\NTMARTA.DLL 0x77650000 Library D:\WINDOWS\system32\WLDAP32.dll 0x76F10000 Library D:\WINDOWS\system32\SAMLIB.dll 0x71B50000 Library D:\WINDOWS\system32\CLBCATQ.DLL 0x76F80000 Library D:\WINDOWS\system32\COMRes.dll 0x77000000 Library D:\WINDOWS\system32\WINHTTP.dll 0x4D5E0000 Library D:\WINDOWS\system32\msv1_0.dll 0x77C40000 Library D:\WINDOWS\system32\iphlpapi.dll 0x76D10000 Library D:\WINDOWS\system32\cscui.dll 0x765B0000 Library D:\WINDOWS\system32\wdmaud.drv 0x72C70000 Library D:\WINDOWS\system32\msacm32.drv 0x72C60000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\midimap.dll 0x77BA0000 Library D:\WINDOWS\system32\MPRAPI.dll 0x76CF0000 Library D:\WINDOWS\system32\ACTIVEDS.dll 0x77C90000 Library D:\WINDOWS\system32\adsldpc.dll 0x76DC0000 Library D:\WINDOWS\system32\ATL.DLL 0x76AC0000 Library D:\WINDOWS\system32\rtutils.dll 0x76E30000 Library D:\WINDOWS\system32\xpsp2res.dll 0x01C70000 Process D:\WINDOWS\system32\services.exe 532 Library D:\WINDOWS\system32\services.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\SCESRV.dll 0x76A20000 Library D:\WINDOWS\system32\AUTHZ.dll 0x77680000 Library D:\WINDOWS\system32\umpnpmgr.dll 0x7DBC0000 Library D:\WINDOWS\system32\WINSTA.dll 0x762F0000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\NCObjAPI.DLL 0x5FB00000 Library D:\WINDOWS\system32\MSVCP60.dll 0x76010000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll 0x58B50000 Library D:\WINDOWS\system32\secur32.dll 0x77FC0000 Library D:\WINDOWS\system32\Apphelp.dll 0x77B50000 Library D:\WINDOWS\system32\eventlog.dll 0x77B80000 Library D:\WINDOWS\system32\WS2_32.dll 0x719F0000 Library D:\WINDOWS\system32\WS2HELP.dll 0x719E0000 Library D:\WINDOWS\system32\PSAPI.DLL 0x76BA0000 Library D:\WINDOWS\system32\wtsapi32.dll 0x76F00000 Process D:\WINDOWS\system32\savedump.exe 548 Library D:\WINDOWS\system32\savedump.exe 0x01000000 Library D:\WINDOWS\system32\ntdll.dll 0x7C910000 Library D:\WINDOWS\system32\kernel32.dll 0x7C800000 Library D:\WINDOWS\system32\msvcrt.dll 0x77BE0000 Library D:\WINDOWS\system32\ADVAPI32.dll 0x77DA0000 Library D:\WINDOWS\system32\RPCRT4.dll 0x77E50000 Library D:\WINDOWS\system32\NETAPI32.dll 0x6FEE0000 Library D:\WINDOWS\system32\dbgeng.dll 0x6DA60000 Library D:\WINDOWS\system32\DBGHELP.dll 0x5D3F0000 Library D:\WINDOWS\system32\VERSION.dll 0x77BD0000 Library D:\WINDOWS\system32\ShimEng.dll 0x5CEA0000 Library D:\WINDOWS\AppPatch\AcGenral.DLL 0x595B0000 Library D:\WINDOWS\system32\USER32.dll 0x77D10000 Library D:\WINDOWS\system32\GDI32.dll 0x77EF0000 Library D:\WINDOWS\system32\WINMM.dll 0x76AE0000 Library D:\WINDOWS\system32\ole32.dll 0x774A0000 Library D:\WINDOWS\system32\OLEAUT32.dll 0x770E0000 Library D:\WINDOWS\system32\MSACM32.dll 0x77BB0000 Library D:\WINDOWS\system32\SHELL32.dll 0x7C9D0000 Library D:\WINDOWS\system32\SHLWAPI.dll 0x77F40000 Library D:\WINDOWS\system32\USERENV.dll 0x76960000 Library D:\WINDOWS\system32\UxTheme.dll 0x5B090000 Library D:\WINDOWS\system32\SYNCOR11.DLL 0x6BD00000 Library D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll 0x77390000 Library D:\WINDOWS\system32\comctl32.dll -
Aide pour Log Hijackthis
deathlife a répondu à un(e) sujet de deathlife dans Analyses et éradication malwares
FPort v2.0 - TCP/IP Process to Port Mapper Copyright 2000 by Foundstone, Inc. http://www.foundstone.com Pid Process Port Proto Path 1616 -> 1026 TCP 984 -> 135 TCP 616 Explorer -> 1245 TCP D:\WINDOWS\Explorer.EXE 616 Explorer -> 1246 TCP D:\WINDOWS\Explorer.EXE 0 System -> 1235 TCP 0 System -> 1242 TCP 4 System -> 139 TCP 4 System -> 445 TCP 932 avgnt -> 1025 TCP D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe 1608 avguard -> 18350 TCP D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe 1616 -> 137 UDP 984 -> 445 UDP 616 Explorer -> 1055 UDP D:\WINDOWS\Explorer.EXE 616 Explorer -> 4500 UDP D:\WINDOWS\Explorer.EXE 4 System -> 1051 UDP 0 System -> 1053 UDP 0 System -> 1054 UDP 0 System -> 1167 UDP 0 System -> 123 UDP 0 System -> 1900 UDP 4 System -> 500 UDP 932 avgnt -> 123 UDP D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe 1608 avguard -> 1036 UDP D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe 1608 avguard -> 138 UDP D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe PsList 1.26 - Process Information Lister Copyright © 1999-2004 Mark Russinovich Sysinternals - www.sysinternals.com Process information for HUUL: Name Pid Pri Thd Hnd VM WS Priv Idle 0 0 2 0 0 16 0 System 4 8 69 276 1904 220 0 smss 392 11 3 21 3828 372 164 csrss 620 13 12 409 25328 3796 1664 winlogon 660 13 19 448 55104 3400 7440 services 704 9 15 271 35656 4060 1972 svchost 896 8 16 199 61132 4640 2976 svchost 984 8 10 236 35620 3992 1728 svchost 1080 8 77 1464 138588 27012 15128 wscntfy 3136 8 1 34 26296 2272 532 svchost 1180 8 6 89 30472 3160 1260 svchost 1276 8 14 201 37732 4220 1660 spoolsv 1472 8 12 124 42408 4440 3092 sched 1596 8 7 63 31200 3460 1092 avguard 1608 8 23 88 63988 24556 40104 alg 1616 8 6 105 33488 3388 1144 nvsvc32 1840 8 3 113 24824 3124 1992 SMAgent 1904 8 2 28 22320 1588 492 lsass 716 9 18 338 41440 1276 3580 explorer 616 8 24 702 138460 24356 28012 avgnt 932 8 2 65 33200 4504 1440 rundll32 1032 8 1 31 31124 3004 1984 SMTray 1060 8 1 28 26472 2668 648 jusched 1072 8 1 22 17948 1688 440 ctfmon 1128 8 1 64 29988 3184 868 cmd 2056 8 1 21 13688 1380 1456 pslist 200 13 2 88 17788 1724 728 EM_EXEC 1152 8 2 84 34760 3768 1320 ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ explorer.exe pid: 616 Command line: D:\WINDOWS\Explorer.EXE Base Size Version Path 0x7c800000 0x104000 5.01.2600.2945 D:\WINDOWS\system32\kernel32.dll 0x77ef0000 0x47000 5.01.2600.2818 D:\WINDOWS\system32\GDI32.dll 0x77d10000 0x90000 5.01.2600.2622 D:\WINDOWS\system32\USER32.dll 0x77f40000 0x76000 6.00.2900.2937 D:\WINDOWS\system32\SHLWAPI.dll 0x7c9d0000 0x823000 6.00.2900.2869 D:\WINDOWS\system32\SHELL32.dll 0x774a0000 0x13d000 5.01.2600.2726 D:\WINDOWS\system32\ole32.dll 0x75f10000 0xfd000 6.00.2900.2937 D:\WINDOWS\system32\BROWSEUI.dll 0x77720000 0x16f000 6.00.2900.2937 D:\WINDOWS\system32\SHDOCVW.dll 0x6fee0000 0x54000 5.01.2600.2952 D:\WINDOWS\system32\NETAPI32.dll 0x77aa0000 0xa7000 6.00.2900.2937 D:\WINDOWS\system32\WININET.dll 0x6bd00000 0xd000 0.01.0002.0003 D:\WINDOWS\system32\SYNCOR11.DLL 0x76f80000 0x7f000 2001.12.4414.0308 D:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 D:\WINDOWS\system32\COMRes.dll 0x77170000 0xa0000 6.00.2900.2960 D:\WINDOWS\system32\urlmon.dll 0x76920000 0x8000 5.01.2600.2751 D:\WINDOWS\system32\LINKINFO.dll 0x76ac0000 0x11000 3.05.2284.0000 D:\WINDOWS\system32\ATL.DLL 0x01530000 0x2c6000 3.01.4000.2435 D:\WINDOWS\system32\msi.dll 0x10000000 0xb000 1.01.0000.0000 D:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x76010000 0x65000 6.02.3104.0000 D:\WINDOWS\system32\MSVCP60.dll 0x72c60000 0x8000 5.01.2600.0000 D:\WINDOWS\system32\msacm32.drv 0x01960000 0x7000 9.80.0019.0000 D:\Program Files\Logitech\MouseWare\System\LgWndHk.dll 0x76d10000 0x19000 5.01.2600.2912 D:\WINDOWS\system32\iphlpapi.dll 0x01d90000 0x2c000 D:\Program Files\WinRAR\rarext.dll 0x019d0000 0x13000 7.00.0000.0004 D:\Program Files\AntiVir PersonalEdition Classic\shlext.dll 0x7c250000 0x102000 7.10.3077.0000 D:\Program Files\AntiVir PersonalEdition Classic\MFC71U.DLL 0x021c0000 0x56000 7.10.3052.0004 D:\Program Files\AntiVir PersonalEdition Classic\MSVCR71.dll 0x7c3a0000 0x7b000 7.10.3077.0000 D:\Program Files\AntiVir PersonalEdition Classic\MSVCP71.dll 0x77cd0000 0x33000 5.01.2600.2743 D:\WINDOWS\system32\netman.dll 0x76d30000 0x1e000 5.01.2600.2912 D:\WINDOWS\system32\DHCPCSVC.DLL 0x76ed0000 0x27000 5.01.2600.2938 D:\WINDOWS\system32\DNSAPI.dll 0x6f890000 0x111000 5.01.2600.2780 D:\WINDOWS\system32\ESENT.dll 0x0ffd0000 0x28000 5.01.2600.2161 D:\WINDOWS\system32\rsaenh.dll 0x74730000 0x3d000 3.525.1117.0000 D:\WINDOWS\system32\ODBC32.dll 0x02e80000 0x18000 3.525.1117.0000 D:\WINDOWS\system32\odbcint.dll 0x76f70000 0x6000 5.01.2600.2938 D:\WINDOWS\system32\rasadhlp.dll 0x75be0000 0x6e000 5.06.0000.8831 D:\WINDOWS\system32\jscript.dll 0x7dbf0000 0x2f5000 6.00.2900.2963 D:\WINDOWS\system32\mshtml.dll 0x74630000 0x27000 3.10.0349.0000 D:\WINDOWS\system32\msls31.dll 0x73250000 0x67000 5.06.0000.8820 D:\WINDOWS\system32\vbscript.dll 0x73d20000 0xfe000 6.02.4131.0000 D:\WINDOWS\system32\MFC42.DLL 0x61d70000 0xe000 6.00.8665.0000 D:\WINDOWS\system32\MFC42LOC.DLL 0x30000000 0x224000 8.00.0024.0000 D:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx 0x60980000 0x7000 3.01.4000.1823 D:\WINDOWS\system32\MSISIP.DLL 0x74e10000 0x10000 5.06.0000.8820 D:\WINDOWS\system32\wshext.dll 0x59000000 0xe000 5.06.0000.6626 D:\WINDOWS\system32\wshFR.DLL ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com No matching processes were found. ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ winlogon.exe pid: 660 Command line: winlogon.exe Base Size Version Path 0x01000000 0x81000 \??\D:\WINDOWS\system32\winlogon.exe 0x7c800000 0x104000 5.01.2600.2945 D:\WINDOWS\system32\kernel32.dll 0x77680000 0x11000 5.01.2600.2622 D:\WINDOWS\system32\AUTHZ.dll 0x77d10000 0x90000 5.01.2600.2622 D:\WINDOWS\system32\USER32.dll 0x77ef0000 0x47000 5.01.2600.2818 D:\WINDOWS\system32\GDI32.dll 0x6fee0000 0x54000 5.01.2600.2952 D:\WINDOWS\system32\NETAPI32.dll 0x7c9d0000 0x823000 6.00.2900.2869 D:\WINDOWS\system32\SHELL32.dll 0x77f40000 0x76000 6.00.2900.2937 D:\WINDOWS\system32\SHLWAPI.dll 0x74730000 0x3d000 3.525.1117.0000 D:\WINDOWS\system32\ODBC32.dll 0x20000000 0x18000 3.525.1117.0000 D:\WINDOWS\system32\odbcint.dll 0x774a0000 0x13d000 5.01.2600.2726 D:\WINDOWS\system32\ole32.dll 0x6bd00000 0xd000 0.01.0002.0003 D:\WINDOWS\system32\SYNCOR11.DLL 0x01240000 0xae000 1.05.0540.0000 D:\WINDOWS\system32\WgaLogon.dll 0x0ffd0000 0x28000 5.01.2600.2161 D:\WINDOWS\system32\rsaenh.dll 0x76f80000 0x7f000 2001.12.4414.0308 D:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 D:\WINDOWS\system32\COMRes.dll 0x76d10000 0x19000 5.01.2600.2912 D:\WINDOWS\system32\iphlpapi.dll 0x72c60000 0x8000 5.01.2600.0000 D:\WINDOWS\system32\msacm32.drv 0x76ac0000 0x11000 3.05.2284.0000 D:\WINDOWS\system32\ATL.DLL ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ services.exe pid: 704 Command line: D:\WINDOWS\system32\services.exe Base Size Version Path 0x7c800000 0x104000 5.01.2600.2945 D:\WINDOWS\system32\kernel32.dll 0x77d10000 0x90000 5.01.2600.2622 D:\WINDOWS\system32\USER32.dll 0x77ef0000 0x47000 5.01.2600.2818 D:\WINDOWS\system32\GDI32.dll 0x77680000 0x11000 5.01.2600.2622 D:\WINDOWS\system32\AUTHZ.dll 0x7dbc0000 0x21000 5.01.2600.2744 D:\WINDOWS\system32\umpnpmgr.dll 0x6fee0000 0x54000 5.01.2600.2952 D:\WINDOWS\system32\NETAPI32.dll 0x76010000 0x65000 6.02.3104.0000 D:\WINDOWS\system32\MSVCP60.dll 0x774a0000 0x13d000 5.01.2600.2726 D:\WINDOWS\system32\ole32.dll 0x7c9d0000 0x823000 6.00.2900.2869 D:\WINDOWS\system32\SHELL32.dll 0x77f40000 0x76000 6.00.2900.2937 D:\WINDOWS\system32\SHLWAPI.dll 0x6bd00000 0xd000 0.01.0002.0003 D:\WINDOWS\system32\SYNCOR11.DLL Le volume dans le lecteur D s'appelle Winxp Le num‚ro de s‚rie du volume est 6812-F07B R‚pertoire de D:\Program Files 09/08/2006 19:42 <REP> . 09/08/2006 19:42 <REP> .. 26/06/2006 21:53 <REP> Analog Devices 24/06/2006 23:27 <REP> AntiVir PersonalEdition Classic 25/06/2006 01:16 <REP> Asus 24/06/2006 23:12 <REP> ComPlus Applications 29/06/2006 18:49 <REP> Creative 08/08/2006 00:34 <REP> DAoC Portal 26/06/2006 21:10 <REP> Driver Cleaner 09/08/2006 19:42 <REP> eMule 18/07/2006 00:22 <REP> Fichiers communs 25/06/2006 02:10 <REP> hardwaredetection 25/06/2006 01:06 <REP> Intel 09/08/2006 16:43 <REP> Internet Explorer 09/08/2006 19:15 <REP> Java 26/06/2006 22:21 <REP> K-Lite Codec Pack 26/06/2006 20:59 <REP> Logitech 24/06/2006 23:53 <REP> Messenger 24/06/2006 23:16 <REP> microsoft frontpage 24/06/2006 23:13 <REP> Movie Maker 09/08/2006 19:42 <REP> Mozilla Firefox 24/06/2006 23:11 <REP> MSN 24/06/2006 23:11 <REP> MSN Gaming Zone 25/06/2006 00:29 <REP> MSN Messenger 24/06/2006 23:13 <REP> NetMeeting 09/08/2006 15:30 <REP> Numericable 24/06/2006 23:56 <REP> Outlook Express 24/06/2006 23:14 <REP> Services en ligne 09/08/2006 19:24 <REP> Spybot - Search & Destroy 25/06/2006 00:35 <REP> Teamspeak2_RC2 31/07/2006 20:16 <REP> TSO 29/06/2006 00:28 <REP> Winamp 24/06/2006 23:56 <REP> Windows Media Player 24/06/2006 23:11 <REP> Windows NT 25/06/2006 00:14 <REP> WinRAR 24/06/2006 23:16 <REP> xerox 09/08/2006 19:14 <REP> Yahoo! 0 fichier(s) 0 octets 37 R‚p(s) 3ÿ628ÿ101ÿ632 octets libres Le volume dans le lecteur C n'a pas de nom. Le num‚ro de s‚rie du volume est 80F2-8A95 R‚pertoire de C:\ c:\Documents and Settings\Administrateur\Bureau\91.31_forceware_winxp2k_international.exe c:\Documents and Settings\Administrateur\Bureau\91.31_winxp2kmce_international_whql.exe c:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\LiveDrvUni-Pack(FRN).exe c:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\mw9791fra.exe c:\Documents and Settings\Administrateur\Bureau\Nouveau dossier\wrar351fr.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\CRF000\Audio\Restore\Setup.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\CRF000\Audio\Setup\Setup.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\CRF000\Audio\Surmix2\Setup.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\{F7480AF4-C32B-4C89-8F0C-2F8095AB1DE9}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\{F7480AF4-C32B-4C89-8F0C-2F8095AB1DE9}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvuninst-amd64.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\{F7480AF4-C32B-4C89-8F0C-2F8095AB1DE9}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvuninst-ia64.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\{F7480AF4-C32B-4C89-8F0C-2F8095AB1DE9}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnp-amd64.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\{F7480AF4-C32B-4C89-8F0C-2F8095AB1DE9}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnpbr.exe c:\Documents and Settings\Administrateur\Local Settings\Temp\{F7480AF4-C32B-4C89-8F0C-2F8095AB1DE9}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnp-ia64.exe c:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\666UWZCJ\antivir_workstation_win7u_en_h[1].exe c:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\666UWZCJ\FirefoxGoogleToolbarSetup[1].exe Voilà le log comme demandé -
Bonjour, suite au fait que mon pc subit d'énorme ralentissement de connexion internet (même pas l'impression d'être derriere un 56K), j'ai fait des vérifications sur les spywares, les virus. Je me suis aussi rapprocher de numéricable et d'après eux tout est normal jusqu'à mon modem c'est donc mon pc qui a un truc ... Aussi, voici mon rapport HJT pour voir si quelque chose clocherait sur mon pc. Merci d'avance pour votre aide Logfile of HijackThis v1.99.1 Scan saved at 19:46:13, on 09/08/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\Program Files\AntiVir PersonalEdition Classic\sched.exe D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe D:\WINDOWS\system32\nvsvc32.exe D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe D:\WINDOWS\Explorer.EXE D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe D:\WINDOWS\system32\RunDLL32.exe D:\Program Files\Analog Devices\SoundMAX\SMTray.exe D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\Logitech\MouseWare\system\em_exec.exe D:\WINDOWS\system32\wuauclt.exe D:\Program Files\Mozilla Firefox\firefox.exe D:\Documents and Settings\nerz\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM\..\Run: [avgnt] "D:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [smapp] D:\Program Files\Analog Devices\SoundMAX\SMTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} (Java Plug-in) - O17 - HKLM\System\CCS\Services\Tcpip\..\{47B20CCC-70FA-4773-B60E-629DD70E54FA}: NameServer = 194.2.0.20,164.2.0.50 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WgaLogon - D:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - D:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
-
[résolu][XP SP2] installation GForce 6200
deathlife a répondu à un(e) sujet de deathlife dans Software
bon j'ai rerechanger la totalité pour voir et là hôô miracle cela fonctionne. J'ai testé ton astuce Niko pour l'intallation de la carte graphique, et contrairement à ce week end, l'installation à l'air de bien se passé, puis ça me demande de reboot, je le fais et en fait quand windows est relancé bah ... toujours rien la carte est toujours une VGA sans driver dans ma liste de matériels :/ Heelllpp ^^ Merci en tout cas pour vos réponses -
[résolu][XP SP2] installation GForce 6200
deathlife a répondu à un(e) sujet de deathlife dans Software
je continue sur ce post pour ne pas créer plusieurs fils mais bon j'ai un souci qui dépasse la carte graphique En fait, j'ai eu le pc qui ne voulait plus se lancer samedi, j'ai donc changer l'alimentation et toujours le même souci... les ventilos du boitier, processeur, carte mere tournent bien mais rien strictement rien ne se lance :/ du coup j'ai test avec une autre carte mère et là .. meme souci tout les ventilos se lancent mais rien d'autre :/ quelqu'un saurait d'ou ça pourrait provenir ? merci :/ -
[résolu][XP SP2] installation GForce 6200
deathlife a répondu à un(e) sujet de deathlife dans Software
Bonjour, oui je me doute mais comme je prévois une évolution de ce pc j'ai préféré faire en sorte de ne pas la changer dans quelques temps Merci et à touti -
[résolu][XP SP2] installation GForce 6200
deathlife a répondu à un(e) sujet de deathlife dans Software
je vais prendre celle là : FORTRON FSP 500-60GLN - 500 W. (VENT. 120 MM, SILEN.) Je pense que ça devrait aller non ?