Aller au contenu

kikidrif

Membres
  • Compteur de contenus

    345
  • Inscription

  • Dernière visite

Réputation sur la communauté

0 Neutral

À propos de kikidrif

  • Rang
    Mega Power Member
  • Date de naissance 13/07/1981

Contact Methods

  • MSN
    ll-2Sex4You-ll@hotmail.fr
  • Website URL
    http://
  • ICQ
    0

Profile Information

  • Sexe
    Male
  • Localisation
    Lyon
  1. kikidrif

    Problème affichage GTX 275

    Bonsoir à tous, Bon alors concernant mon soucis ... Pour ce qui est de la capture ça ne sera pas la peine. Le problème à été résolu tout à l'heure simplement en faisant comme naitsirhc là dit donc ^^ Merci bien à toi et aux autres qui ont prient la peine de m'aider
  2. kikidrif

    Problème affichage GTX 275

    Bonjour(soir) à tous, Je vous contact à la suite d'un petit soucis avec ma GTX/XFX 275 en effet, depuis que je l'ai installé j'ai comme l'impression qu'un filtre et venu se mettre sur " mon bureau ". Au lieu de voir mes icônes et texte clair comme auparavant avec ma GTS je les voient de façon " + - flou " comme si un filtre était venu se greffer sur mon bureau. J'ai installé les derniers drivers ainsi que des antérieurs mais rien n'y fais. Ma config est récente donc à se niveau aucun soucis .... Si vous auriez une idée d'avance merci
  3. Bonjour à tous, Je suis à la recherche d'une PCB pour seagate 1 terra sata voici les informations : Serie : S/N: 9VP144TC ou ST31000528AS Firmaware : CC35 étiquette blanche sur le PCB même : 4778 J Ici les photos de deux faces http://www.casimages.com/img.php?i=100508080410505657.jpg http://www.casimages.com/img.php?i=100508080515409241.jpg Voilà, si pars chance quelqu'un aurait ou serait ou je pourrais me procurer cette carte surtout qu'il n'hésite pas même si je me doute du résultats D'avance merci
  4. Bonjour à tous, Voilà j'ai un énorme problème, J'ai effectué aujourd'hui des mises à jour par rapport à mon vista (ultimate) sur mon Pc portable (ou il y à des années de boulot dessus) et depuis, mon Pc demarrage, arrive sur la page comme quoi il configure la mise à jour 3/3 .... 99% et paf ca me ferme la session sans même que j'ai ax à un quelconque bouton et ça me le fait en boucle ! Je ne peux plus acceder à mon bureau rien, même le mode sans echec ne se lance plus, idem pour la configuration " dite potable " donc là je viens à vous ! Par pitié, aidez-moi car ça me ferai vraiment C***** de perdre tout mon taf ! (et oui ... aucune save ) ... J'ai même essayé l'invite de commande ça ne change rien.... D'avance merci
  5. kikidrif

    Voici mon rapport :)

    Et bien pour le moment plus de message envoyé ... Pour le logiciel donné plus haut, il avait bien detecté un " virus " qu'il à effacé. J'ai relancé le logiciel pour voir, et cellui-ci m'a dit que tout était clean donc pour le moment plus rien.
  6. kikidrif

    Voici mon rapport :)

    Bonjour Pear, Apres nettoyage via le logiciel donné plus haut, infection detectée puis redemarrage ... Je retourne dans le dossier d'installation et là aucun fichier sous la forme date et heure.txt comme tu l'as dis. Cependant, j'ai un fichier " temp " ainsi qu'un " selecnetv " qui ce sont crée. Pour le 2eme l'interieur est vide pour l'autre voici son contenu: [C:\Windows\system32\WindowsAnytimeUpgrade.exe] 626F198768F67A0FEB3AD909E638F551 [C:\Windows\system32\WinFXDocObj.exe] 14F0C0AAEF23C111371F808A6911E998 [C:\Windows\system32\wininit.exe] 101BA3EA053480BB5D957EF37C06B5ED [C:\Windows\system32\winload.exe] BB82A604FCC5A930696962A27F1C9760 [C:\Windows\system32\winlogon.exe] C2610B6BDBEFC053BBDAB4F1B965CB24 [C:\Windows\system32\winresume.exe] E3770E54B0864B93DF82C2E35F5AB20D [C:\Windows\system32\winrs.exe] 24AB1404A479AFEEC112079D9AF12A0D [C:\Windows\system32\winrshost.exe] 8F26CCF26436315033192266A7135FF5 [C:\Windows\system32\WinSAT.exe] 550E83EEE739D1C25A49E70F038EC816 [C:\Windows\system32\WINSPOOL.EXE] 0B4B94B78123E8035B84105BC024F9F8 [C:\Windows\system32\winver.exe] EEE1CE328E50D4391D9CE7624286CEB0
  7. Bonjour à tous, Je vous décris vite fait ce qui m'arrive, mon msn balance des messages tout seul en anglais à tout mes contacts et ceux même quand le Pc est eteind .... Merci pour votre aide voici donc mon rapport et merci d'avance pour votre aide Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:33:07, on 30/04/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18226) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Users\jennifer\AppData\Local\Temp\RtkBtMnt.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\taskmgr.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Nouveau dossier\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a...m=aspire_7730zg R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a...m=aspire_7730zg R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a...m=aspire_7730zg R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe" O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O13 - Gopher Prefix: O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe -- End of file - 7173 bytes
  8. Mouais en tout cas merci Pear ( je n"ai pas accé au MSE tant pis je formate. Je marqué résolut sur le sujet.
  9. Galère ce truc au pire si on ne trouve pas, je formaterai ça vous eviterai de perdre votre temps, cordialement ( voici le rapport ) Tue Oct 21 18:58:13 2008 EliBagle v11.87 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 21 de Octubre del 2008) ---------------------------------------------- Lista de Acciones (por Acción Directa): C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado. C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle Por favor, envienos una muestra del fichero C:\Muestras\SROSA.SYS.Muestra EliBagle v11.87 a "virus@satinfo.es". Gracias. C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado. C:\DOCUMENTS AND SETTINGS\ADMINISTRATEUR\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado. C:\DOCUMENTS AND SETTINGS\ADMINISTRATEUR\APPLICATION DATA\M\LIST.OCT --> Eliminado Bagle Restaurada Clave: "SafeBoot\Minimal y Network" Reinicie para Completar la Limpieza. Tue Oct 21 18:58:23 2008 EliBagle v11.87 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 21 de Octubre del 2008) ---------------------------------------------- Lista de Acciones (por Acción Directa): C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado. Por favor, envienos una muestra del fichero C:\Muestras\SROSA.SYS.Muestra EliBagle v11.87 a "virus@satinfo.es". Gracias. C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado. C:\DOCUMENTS AND SETTINGS\ADMINISTRATEUR\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado. Restaurada Clave: "SafeBoot\Minimal y Network" Reinicie para Completar la Limpieza. Tue Oct 21 18:58:38 2008 EliBagle v11.87 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 21 de Octubre del 2008) ---------------------------------------------- Lista de Acciones (por Acción Directa): C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado. Por favor, envienos una muestra del fichero C:\Muestras\SROSA.SYS.Muestra EliBagle v11.87 a "virus@satinfo.es". Gracias. C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado. C:\DOCUMENTS AND SETTINGS\ADMINISTRATEUR\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado. Restaurada Clave: "SafeBoot\Minimal y Network" Reinicie para Completar la Limpieza. Tue Oct 21 18:58:41 2008 EliBagle v11.87 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 21 de Octubre del 2008) ---------------------------------------------- Lista de Acciones (por Exploración): Explorando Unidad C:\ Tue Oct 21 19:00:27 2008 EliBagle v11.87 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 21 de Octubre del 2008) ---------------------------------------------- Lista de Acciones (por Acción Directa): C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado. Por favor, envienos una muestra del fichero C:\Muestras\SROSA.SYS.Muestra EliBagle v11.87 a "virus@satinfo.es". Gracias. C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado. C:\DOCUMENTS AND SETTINGS\ADMINISTRATEUR\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado. Restaurada Clave: "SafeBoot\Minimal y Network" Reinicie para Completar la Limpieza. Tue Oct 21 19:00:58 2008 EliBagle v11.87 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 21 de Octubre del 2008) ---------------------------------------------- Lista de Acciones (por Exploración): Explorando Unidad C:\ C:\Qoobox\Quarantine\C\Documents and Settings\Administrateur\Application Data\m\FLEC006.EXE.VIR --> Eliminado Bagle C:\Qoobox\Quarantine\C\WINDOWS\system32\MDELK.EXE.VIR --> Eliminado Bagle C:\Qoobox\Quarantine\C\WINDOWS\system32\WINTEMS.EXE.VIR --> Eliminado Bagle Nº Total de Directorios: 7611 Nº Total de Ficheros: 106609 Nº de Ficheros Analizados: 7102 Nº de Ficheros Infectados: 3 Nº de Ficheros Limpiados: 3 Tue Oct 21 19:54:18 2008 EliBagle v11.87 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 21 de Octubre del 2008) ---------------------------------------------- Lista de Acciones (por Acción Directa): C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado. Por favor, envienos una muestra del fichero C:\Muestras\SROSA.SYS.Muestra EliBagle v11.87 a "virus@satinfo.es". Gracias. C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado. C:\DOCUMENTS AND SETTINGS\ADMINISTRATEUR\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado. Restaurada Clave: "SafeBoot\Minimal y Network" Reinicie para Completar la Limpieza.
  10. Bonjour, voici le rapport cependant j'ai l'impression qu'il ressemble au premier .... De plus le fichier .txt crée pour le code pré-donné s'est automatiquement effacé est-ce normal ? ComboFix 08-10-19.04 - Administrateur 2008-10-21 17:40:17.2 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1491 [GMT 2:00] Lancé depuis: C:\Documents and Settings\Administrateur\Bureau\Combo-Fix.exe Commutateurs utilisés :: C:\Documents and Settings\Administrateur\Bureau\CFScript.txt.txt * Un nouveau point de restauration a été créé FILE :: C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS C:\WINDOWS\system32\drivers\winfilse.exe C:\WINDOWS\SYSTEM32\wintems.exe . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Administrateur\Application Data\m C:\Documents and Settings\Administrateur\Application Data\m\data.oct C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe C:\Documents and Settings\Administrateur\Application Data\m\list.oct C:\Documents and Settings\Administrateur\Application Data\m\shared\[app.ita]Avast!.Professional.Edition.4.7.844.keygen.generatore.seriale.freddy.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\[u]0[/u]1.SOPHOS.ANTIVIRUS.V4.08.NTW2KXP2k3.MULTILANGUAGE-DWP.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\A-one DVD Ripper 6.8.4.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\A Free Healthy Eating Hypnosis Session 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Absolute_Steinway_Piano_VSTi_3.0_[KeyGen].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Abstract Dance Screensaver 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ActMask_SPL_Virtual_Printer_SDK_3_(With_Crack).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\AddEmail_ActiveX_1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Adrift Screensaver 2.3.3.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Adsense_Code_Ceaner_1.0.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Alice DVD any Video to XviD Converter 5.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Aliens Font 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Andromeda_Sky_View_for_Pocket_PC_1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Ap_PDF_Split-Merge_2.5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Application_Mover_2.6_With_Crack.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ASCIItoUnicode 0.3.5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\axSPC 1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Bay of Hope - Animated Wallpaper 5.07.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Belkasoft_LinksManager_1.01_[Patch].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Black_&_White_1.2_Clan_patch.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\BlubiX_1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Byteplant DocManager 1.0.1.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Camera_Collector_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\CheckIP 1.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Clear Text Fields 0.0.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\CodeThatScroller 1.2.6.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Convert_to_iPod_Suite_2.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Crazy_Ball_1.5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Crossword 1.1 [Crack].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\DaddyCall 3.4.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\DataPouch 1.0.352.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\DHTML_Menu_Wizard_1.0_(With_Crack).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Digital Media Shredder 1.0.2.0 (Key).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\EAN Barcode Generator 5.9.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Easy Password Manager 2.0.13.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Easy Transcriber 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Easy_Icon_Creator_5.0_(Key+Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Easy_Photo_Recovery_1.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Elementary_0.8.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Embird Alphabet 7 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Family_Medical_and_CRM_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Fascinating_Bears_1.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\FilterGate_5.22_Beta_7.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Finance_and_Statistics_Models_Set_1.0_(Key+Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\FirstStop WebSearch Business Edition 5.0.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Game Speeder 1 build 132.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\GetPDF_Intranet_Server_2.21_build_896.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\GreenClean_1.1.8_Serial.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\HexSer 1.0.0.4.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Home_Illusion_1.0_[Patch].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\HSLAB_WhoIs_1.0.9.21.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\HtmltoXCode_1.0.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\I-Worm.Zafi.b removal tool 12.0.0.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\iNews_1.5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\inharmonic_focus_screensaver_01_(Key+Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\INTAKT_1.0.3_[Key+Serial].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Internet_Spy_Filter_3.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\IP Detective Suite 2K 3.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\KanaWoW 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Karaoke Mixer 1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\KwikTrig 2.1.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Lighthouse_Seascapes_Screensaver_2.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\MailScan_SMTP_Server_5.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\MaSoft_Reminder_1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\MB6-283 Practice Exam Testing Engine Software 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\McAfee.VirusScan.v10.0.27.Retail.Crack.-.Keygen.-.Serial.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\mDigger Reader 1.0.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Miracle_Type_8.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Moonlight Lighthouse Demo Screensaver 1.0 Serial.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Motorstorm Screensaver (PS3) 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\MP3_Rectifier_1.7.58.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Nightscape_Creations_Nature_Screen_Saver_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Nucleus_Kernel_-_DBF_4.03.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Okoker_DVD_to_iPod_Converter_2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Oriens JPEG Professional 1.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\oSync_1.0.1_Beta_6.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Outlook Email Attachments Extractor Pro 2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Outlook Express Email Sound Changer 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Password_Protect_USB_3.6.1_KeyGen.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Paypal_Order_Form_Maker_by_Kirkham_1.0_(Key+Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Pazera Free MP4 to AVI Converter 1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Pocket_Luach_Deluxe_1.11.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Pop-Up_Zapper_Lite_2.01.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Presto_Transfer_Windows_Mail_1.7_(KeyGen).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Project Assistant 4.0 Build 2991.15938.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Quick_Calculator_2.21.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Quick_Ping_Monitor_3.03.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\QuickMail 3.5.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Ramdisk 1.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Rapid Gunner 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\RAR2SFX 1.0.0.10.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Recipe_Box_1.0a_Crack.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ResumeGrabber Professional 5.0 (Cracked).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Ringtone_Ripper_2.1.2.0007_(Key+Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Roadkil's Detector 1.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\RPWiz_1.05.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\RSIGuard_Stretch_Edition_3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\SaveMyModem 1.0 RC2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Show.kit 2.11.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Spb_Time_2.0.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\StayOn_Pro_4.0_[Serial].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Summer 2005 screensaver 1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\TabTip-Tamer 3.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Telepati SIP Phone Freeware 1.5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Thorns 3D 2.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Time Cards 2000 3.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\TransportNext March 08.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Trojan Guarder Gold 7.50.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Turkey Time Clock Demo Screensaver 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Tuxnbill 1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\TVNanny_0.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\USA CRYPT 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VCD_Burner_ActiveX_Control_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VIGps 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Village Stamp 1.5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VistaRunner 6.23.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VMN Storage 3.72.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Voice_Balancing_System_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VrmlPad 2.1 Key+Serial.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Water_Illusion_Lite_1.6.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Wav to MP3 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Web Page SnapShot 1.6.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Windhammer_Special_Edition_2.31.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\WinKaraoke Player 1.5c.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\wssecure_4.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Zoo_Tycoon_2_Endangered_Species_demo.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ZoomCall Pro VideoPhone 5.2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\srvlist.oct C:\Muestras C:\Muestras\SROSA.SYS.Muestra EliBagle v11.86 C:\WINDOWS\system32\ban_list.txt C:\WINDOWS\System32\drivers\downld C:\WINDOWS\system32\drivers\downld\100953.exe C:\WINDOWS\System32\drivers\downld\102093.exe C:\WINDOWS\system32\drivers\downld\103765.exe C:\WINDOWS\system32\drivers\downld\106718.exe C:\WINDOWS\System32\drivers\downld\108406.exe C:\WINDOWS\System32\drivers\downld\121156.exe C:\WINDOWS\System32\drivers\downld\122281.exe C:\WINDOWS\system32\drivers\downld\122406.exe C:\WINDOWS\System32\drivers\downld\125515.exe C:\WINDOWS\system32\drivers\downld\131281.exe C:\WINDOWS\system32\drivers\downld\131781.exe C:\WINDOWS\System32\drivers\downld\132578.exe C:\WINDOWS\system32\drivers\downld\134343.exe C:\WINDOWS\System32\drivers\downld\136531.exe C:\WINDOWS\System32\drivers\downld\139046.exe C:\WINDOWS\system32\drivers\downld\139437.exe C:\WINDOWS\system32\drivers\downld\139468.exe C:\WINDOWS\System32\drivers\downld\152078.exe C:\WINDOWS\System32\drivers\downld\157015.exe C:\WINDOWS\system32\drivers\downld\157187.exe C:\WINDOWS\system32\drivers\downld\160546.exe C:\WINDOWS\System32\drivers\downld\162671.exe C:\WINDOWS\System32\drivers\downld\165546.exe C:\WINDOWS\System32\drivers\downld\168500.exe C:\WINDOWS\System32\drivers\downld\173828.exe C:\WINDOWS\system32\drivers\downld\183687.exe C:\WINDOWS\System32\drivers\downld\205156.exe C:\WINDOWS\System32\drivers\downld\210765.exe C:\WINDOWS\System32\drivers\downld\212671.exe C:\WINDOWS\System32\drivers\downld\213468.exe C:\WINDOWS\system32\drivers\downld\219406.exe C:\WINDOWS\System32\drivers\downld\219796.exe C:\WINDOWS\System32\drivers\downld\235734.exe C:\WINDOWS\system32\drivers\downld\237781.exe C:\WINDOWS\System32\drivers\downld\267781.exe C:\WINDOWS\System32\drivers\downld\271062.exe C:\WINDOWS\System32\drivers\downld\281890.exe C:\WINDOWS\System32\drivers\downld\472484.exe C:\WINDOWS\system32\drivers\downld\477453.exe C:\WINDOWS\system32\drivers\downld\64671.exe C:\WINDOWS\System32\drivers\downld\65625.exe C:\WINDOWS\system32\drivers\downld\66671.exe C:\WINDOWS\System32\drivers\downld\66812.exe C:\WINDOWS\system32\drivers\downld\66859.exe C:\WINDOWS\system32\drivers\downld\67765.exe C:\WINDOWS\System32\drivers\downld\68375.exe C:\WINDOWS\System32\drivers\downld\68500.exe C:\WINDOWS\System32\drivers\downld\68890.exe C:\WINDOWS\system32\drivers\downld\70062.exe C:\WINDOWS\System32\drivers\downld\70578.exe C:\WINDOWS\system32\drivers\downld\71515.exe C:\WINDOWS\System32\drivers\downld\71703.exe C:\WINDOWS\system32\drivers\downld\72359.exe C:\WINDOWS\System32\drivers\downld\72937.exe C:\WINDOWS\System32\drivers\downld\73390.exe C:\WINDOWS\System32\drivers\downld\74187.exe C:\WINDOWS\system32\drivers\downld\74812.exe C:\WINDOWS\System32\drivers\downld\77562.exe C:\WINDOWS\System32\drivers\downld\77953.exe C:\WINDOWS\system32\drivers\downld\78734.exe C:\WINDOWS\system32\drivers\downld\80281.exe C:\WINDOWS\system32\drivers\downld\80593.exe C:\WINDOWS\system32\drivers\downld\80968.exe C:\WINDOWS\System32\drivers\downld\81343.exe C:\WINDOWS\System32\drivers\downld\81968.exe C:\WINDOWS\system32\drivers\downld\82812.exe C:\WINDOWS\System32\drivers\downld\84156.exe C:\WINDOWS\system32\drivers\downld\84171.exe C:\WINDOWS\system32\drivers\downld\84515.exe C:\WINDOWS\System32\drivers\downld\85593.exe C:\WINDOWS\system32\drivers\downld\86078.exe C:\WINDOWS\System32\drivers\downld\87296.exe C:\WINDOWS\System32\drivers\downld\87718.exe C:\WINDOWS\system32\drivers\downld\87765.exe C:\WINDOWS\system32\drivers\downld\87875.exe C:\WINDOWS\System32\drivers\downld\88718.exe C:\WINDOWS\System32\drivers\downld\89125.exe C:\WINDOWS\System32\drivers\downld\89312.exe C:\WINDOWS\System32\drivers\downld\90093.exe C:\WINDOWS\System32\drivers\downld\90546.exe C:\WINDOWS\System32\drivers\downld\90718.exe C:\WINDOWS\system32\drivers\downld\92484.exe C:\WINDOWS\System32\drivers\downld\92703.exe C:\WINDOWS\system32\drivers\downld\93781.exe C:\WINDOWS\system32\drivers\downld\94406.exe C:\WINDOWS\System32\drivers\downld\94468.exe C:\WINDOWS\System32\drivers\downld\94546.exe C:\WINDOWS\system32\drivers\downld\94625.exe C:\WINDOWS\system32\drivers\downld\95265.exe C:\WINDOWS\system32\drivers\downld\95671.exe C:\WINDOWS\system32\drivers\downld\96078.exe C:\WINDOWS\System32\drivers\downld\96281.exe C:\WINDOWS\system32\drivers\downld\97218.exe C:\WINDOWS\system32\drivers\downld\97296.exe C:\WINDOWS\system32\drivers\downld\97578.exe C:\WINDOWS\system32\drivers\downld\99359.exe C:\WINDOWS\System32\drivers\downld\99406.exe C:\WINDOWS\system32\drivers\downld\99937.exe C:\WINDOWS\system32\drivers\winfilse.exe C:\WINDOWS\system32\mdelk.exe C:\WINDOWS\system32\wintems.exe . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SROSA ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-21 au 2008-10-21 )))))))))))))))))))))))))))))))))))) . 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\system32\xircom 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\system32\oobe 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\system32\npp 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\msagent 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\Program Files\microsoft frontpage 2008-10-21 14:20 . 2004-10-20 17:23 21,344 -ra------ C:\WINDOWS\system32\drivers\fbxusb32.sys 2008-10-21 14:18 . 2008-10-21 14:18 <REP> d--hs---- C:\WINDOWS\ftpcache 2008-10-21 14:18 . 2008-10-21 14:18 <REP> d-------- C:\Program Files\Free 2008-10-21 13:25 . 2008-10-21 13:25 <REP> d-------- C:\Program Files\Spybot - Search & Destroy 2008-10-21 13:25 . 2008-10-21 13:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-21 13:00 . 2008-10-21 13:00 <REP> d-------- C:\Program Files\TuneUp Utilities 2008 2008-10-21 13:00 . 2008-10-21 13:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-10-21 12:35 . 2008-10-21 12:35 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-21 12:35 . 2008-10-21 12:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-10-21 12:35 . 2008-10-21 12:35 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes 2008-10-21 12:35 . 2008-10-16 20:25 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-21 12:35 . 2008-10-16 20:25 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-20 22:45 . 2008-10-20 22:45 <REP> d-------- C:\Program Files\Panda Security 2008-10-20 22:45 . 2008-06-19 17:24 28,544 --a------ C:\WINDOWS\system32\drivers\pavboot.sys 2008-10-20 20:59 . 2008-10-20 20:59 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Lavasoft 2008-10-20 18:13 . 2008-10-20 18:13 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Ubisoft 2008-10-20 18:05 . 2008-10-20 18:05 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\InstallShield 2008-10-18 02:10 . 2008-10-18 02:10 41 --a------ C:\WINDOWS\system32\' 2008-10-18 02:09 . 2005-06-11 00:02 12,800 --a------ C:\WINDOWS\system32\vncdrv.dll 2008-10-18 02:09 . 2004-06-26 15:22 6,016 --a------ C:\WINDOWS\system32\drivers\vnccom.SYS 2008-10-18 02:09 . 2004-06-26 15:21 5,760 --a------ C:\WINDOWS\system32\vnchelp.dll 2008-10-18 02:09 . 2004-06-26 15:22 4,736 --a------ C:\WINDOWS\system32\drivers\vncdrv.sys 2008-10-17 16:01 . 2008-10-17 16:01 <REP> d--h----- C:\WINDOWS\system32\GroupPolicy 2008-10-16 16:39 . 2008-10-16 16:56 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-10-15 17:47 . 2008-10-15 17:47 <REP> d-------- C:\Program Files\RhinoSoft.com 2008-10-15 10:59 . 2008-10-15 11:00 <REP> d--h----- C:\WINDOWS\$hf_mig$ 2008-10-15 00:11 . 2008-08-14 12:34 138,496 --------- C:\WINDOWS\system32\dllcache\afd.sys 2008-10-14 23:50 . 2008-09-15 17:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys 2008-10-14 23:49 . 2008-09-08 12:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys 2008-10-14 12:50 . 2006-01-10 10:50 24,576 -ra------ C:\WINDOWS\system32\AsIO.dll 2008-10-14 12:50 . 2007-12-17 11:14 12,400 -ra------ C:\WINDOWS\system32\drivers\AsIO.sys 2008-10-14 12:50 . 2008-01-04 13:34 11,832 --a------ C:\WINDOWS\system32\drivers\AsInsHelp64.sys 2008-10-14 12:50 . 2008-01-04 13:34 10,216 --a------ C:\WINDOWS\system32\drivers\AsInsHelp32.sys 2008-10-14 12:46 . 2008-10-14 12:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Ubisoft 2008-10-14 00:27 . 2008-10-14 00:27 <REP> d-------- C:\WINDOWS\Sun 2008-10-13 18:46 . 2008-04-13 07:46 85,248 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys 2008-10-13 18:46 . 2008-04-13 07:46 19,200 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS 2008-10-13 18:46 . 2008-04-13 07:46 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys 2008-10-13 18:46 . 2008-04-13 15:34 16,384 --a------ C:\WINDOWS\system32\ipsink.ax 2008-10-13 18:46 . 2008-04-13 09:46 15,232 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys 2008-10-13 18:46 . 2008-04-13 09:46 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys 2008-10-13 18:46 . 2008-04-13 07:46 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys 2008-10-13 18:46 . 2008-04-13 07:39 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys 2008-10-13 18:45 . 2008-04-13 15:34 92,160 --a------ C:\WINDOWS\system32\kswdmcap.ax 2008-10-13 18:45 . 2008-04-13 15:34 61,952 --a------ C:\WINDOWS\system32\kstvtune.ax 2008-10-13 18:45 . 2008-04-13 15:33 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2008-10-13 18:45 . 2008-04-13 15:34 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax 2008-10-13 18:45 . 2008-04-13 15:34 28,672 --a------ C:\WINDOWS\system32\vidcap.ax 2008-10-13 18:42 . 2007-02-03 10:27 938,272 --a------ C:\WINDOWS\system32\drivers\LV302V32.SYS 2008-10-13 18:42 . 2007-10-12 04:00 490,008 --a------ C:\WINDOWS\system32\LVUI2.dll 2008-10-13 18:42 . 2007-10-12 04:00 465,432 --a------ C:\WINDOWS\system32\LVUI2RC.dll 2008-10-13 18:42 . 2007-10-12 03:57 416,280 --a------ C:\WINDOWS\system32\LVCodec2.dll 2008-10-13 18:42 . 2003-02-21 04:42 348,160 --a------ C:\WINDOWS\system\msvcr71.dll 2008-10-13 18:42 . 2007-02-03 10:29 129,824 --a------ C:\WINDOWS\system32\lvci1051.dll 2008-10-13 18:42 . 2007-02-03 08:59 50,127 --a------ C:\WINDOWS\system32\lvcoinst.ini 2008-10-13 18:42 . 2007-10-12 04:00 41,752 --a------ C:\WINDOWS\system32\drivers\LVUSBSta.sys 2008-10-13 18:42 . 2007-02-03 10:27 14,240 --a------ C:\WINDOWS\system32\drivers\lv302af.sys 2008-10-13 18:42 . 2007-02-03 09:01 13,398 --a------ C:\WINDOWS\system32\Repository.reg 2008-10-13 18:14 . 2008-04-13 07:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys 2008-10-13 10:50 . 2008-10-13 10:50 <REP> d-------- C:\Program Files\Sierra Entertainment 2008-10-12 23:22 . 2008-10-12 23:22 <REP> d-------- C:\Program Files\Micro Application 2008-10-12 23:22 . 2006-06-21 18:38 2,507,776 --a------ C:\WINDOWS\MediaDico38Dll.dll 2008-10-12 23:22 . 2006-05-08 16:02 208,992 --a------ C:\WINDOWS\RACHook38.dll 2008-10-12 23:22 . 2006-05-24 15:59 199,680 --a------ C:\WINDOWS\MediaR38.dll 2008-10-12 23:22 . 2008-10-12 23:26 1,976 --a------ C:\WINDOWS\MediaR38.ini 2008-10-12 23:22 . 2008-10-12 23:22 105 --a------ C:\WINDOWS\NAVIGMA.INI 2008-10-10 22:09 . 2008-10-10 22:09 <REP> d-------- C:\Program Files\Real 2008-10-10 22:09 . 2008-10-10 22:09 <REP> d-------- C:\Program Files\Fichiers communs\xing shared 2008-10-10 22:09 . 2008-10-10 22:09 <REP> d-------- C:\Program Files\Fichiers communs\Real 2008-10-10 22:09 . 2008-10-10 22:09 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2008-10-10 21:37 . 2008-10-10 21:37 <REP> d-------- C:\Program Files\MSXML 4.0 2008-10-10 01:54 . 2008-10-10 01:54 <REP> d-------- C:\Program Files\UltraISO 2008-10-10 01:54 . 2008-10-10 01:54 <REP> d-------- C:\Program Files\Fichiers communs\EZB Systems 2008-10-10 01:17 . 2008-10-16 16:39 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Nero 2008-10-10 01:07 . 2008-10-10 01:07 4,767 --a------ C:\WINDOWS\Irremote.ini 2008-10-10 01:06 . 2008-10-10 01:06 <REP> d-------- C:\Program Files\Windows Sidebar 2008-10-08 23:35 . 2008-10-06 10:39 2,097,152 --a------ C:\WINDOWS\P5Q-E-ASUS-1406.ROM 2008-10-08 02:17 . 2008-10-08 02:17 <REP> d-------- C:\WINDOWS\74224F8D4A1748169EDB7BB854DE532C.TMP 2008-10-08 02:17 . 2008-10-20 18:12 <REP> d-------- C:\Program Files\Ubisoft 2008-10-07 23:58 . 2008-10-07 23:58 <REP> d-------- C:\Program Files\GrabIt 2008-10-07 23:58 . 2008-10-18 12:33 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\GrabIt 2008-10-07 01:32 . 2008-10-07 01:32 <REP> d-------- C:\Program Files\Bonjour 2008-10-07 01:25 . 2008-10-07 01:25 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared 2008-10-07 01:24 . 2008-10-07 01:32 <REP> d-------- C:\Program Files\Fichiers communs\Adobe 2008-10-06 16:44 . 2008-10-06 16:44 <REP> d-------- C:\Program Files\Java 2008-10-06 16:44 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-10-06 16:43 . 2008-10-06 16:43 <REP> d-------- C:\Program Files\Fichiers communs\Java 2008-10-05 19:55 . 2008-10-05 19:55 <REP> d--h-c--- C:\Documents and Settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6} 2008-10-05 19:55 . 2008-10-05 19:56 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2008-10-05 19:49 . 2008-10-05 19:49 <REP> d-------- C:\ProgramData 2008-10-05 19:49 . 2008-10-05 19:49 <REP> d-------- C:\Program Files\Electronic Arts 2008-10-05 19:48 . 2008-10-05 19:48 1,590 --a------ C:\WINDOWS\system32\ealregsnapshot1.reg 2008-10-05 11:24 . 2008-10-05 11:24 <REP> d-------- C:\Program Files\OpenAL 2008-10-05 11:24 . 2008-04-28 15:53 805,400 -ra------ C:\WINDOWS\system32\tmp105B.tmp 2008-10-05 11:24 . 2008-04-28 15:53 805,400 -ra------ C:\WINDOWS\system32\tmp105A.tmp 2008-10-05 11:24 . 2008-10-05 11:24 444,952 --a------ C:\WINDOWS\system32\wrap_oal.dll 2008-10-05 11:24 . 2008-10-05 11:24 109,080 --a------ C:\WINDOWS\system32\OpenAL32.dll 2008-10-05 11:10 . 2008-10-05 11:10 <REP> d-------- C:\Program Files\Codemasters 2008-10-04 13:54 . 2008-10-04 13:54 <REP> d-------- C:\Program Files\MSBuild 2008-10-04 13:54 . 2008-10-04 13:54 <REP> d-------- C:\Program Files\Microsoft Works 2008-10-04 13:53 . 2008-10-04 13:53 <REP> d-------- C:\Program Files\Microsoft.NET 2008-10-04 13:51 . 2008-10-04 13:54 <REP> d-------- C:\WINDOWS\SHELLNEW 2008-10-04 13:51 . 2008-10-04 13:51 <REP> d-------- C:\Program Files\Microsoft Visual Studio 8 2008-10-04 13:50 . 2008-10-04 13:50 <REP> dr-h----- C:\MSOCache 2008-10-04 13:50 . 2008-10-04 13:55 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-10-04 12:49 . 2008-10-04 12:49 <REP> d-------- C:\Program Files\Marvell 2008-10-04 12:27 . 2008-08-25 10:47 2,097,152 --a------ C:\WINDOWS\P5Q-E-ASUS-1306.ROM 2008-10-04 12:14 . 2008-10-04 12:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Corel 2008-10-04 12:10 . 2008-06-12 09:46 20,992 --a------ C:\WINDOWS\system32\vncmirror.dll 2008-10-04 12:10 . 2008-06-12 09:46 4,608 --a------ C:\WINDOWS\system32\drivers\vncmirror.sys 2008-10-04 12:09 . 2008-10-04 12:09 <REP> d--h----- C:\ASUS.SYS 2008-10-04 12:09 . 2008-10-14 16:36 <REP> d--h----- C:\ASUS.000 2008-10-04 12:08 . 2008-10-14 12:50 <REP> d-------- C:\Program Files\ASUS 2008-10-04 12:07 . 2008-10-04 12:07 670 --a------ C:\WINDOWS\setup.iss 2008-10-04 12:01 . 2008-10-21 17:46 <REP> d-------- C:\Program Files\SpeedFan 2008-10-04 01:40 . 2008-10-04 01:40 <REP> d-------- C:\Program Files\Microsoft IntelliType Pro 2008-10-04 01:39 . 2008-10-13 18:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\LogiShrd 2008-10-04 01:39 . 2008-10-04 01:39 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Logitech 2008-10-04 01:38 . 2006-10-08 21:51 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe 2008-10-04 01:38 . 2008-10-04 01:38 0 --ah----- C:\WINDOWS\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-21 11:00 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-10-21 09:53 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2008-10-20 18:44 298,004 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx 2008-10-20 18:44 26,210,336 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat 2008-10-18 20:40 --------- d-----w C:\Program Files\Cpu-z 2008-10-14 10:50 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-10-09 23:15 --------- d-----w C:\Program Files\Fichiers communs\Nero 2008-10-09 23:07 --------- d-----w C:\Program Files\Nero 2008-10-09 23:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Nero 2008-10-08 19:20 --------- d-----w C:\Program Files\Everest 2008-10-05 17:48 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2008-10-04 10:41 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\TMP 2008-10-03 03:36 --------- d-----w C:\Program Files\Analog Devices 2008-10-03 03:22 --------- d-----w C:\Program Files\Intel 2008-10-03 03:07 --------- d-----w C:\Program Files\TaskSwitchXP 2008-10-03 03:07 --------- d-----w C:\Program Files\Mozilla Thunderbird 2008-10-03 03:01 --------- d-----w C:\Program Files\Windows Media Connect 2 2008-10-03 00:14 --------- d-----w C:\Program Files\uTorrent 2008-10-03 00:04 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\MailFrontier 2008-10-03 00:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier 2008-10-03 00:00 --------- d-----w C:\Program Files\Zone Labs 2008-10-02 23:55 --------- d-----w C:\Program Files\ma-config.com 2008-10-02 23:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\ma-config.com 2008-10-02 23:54 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-10-02 22:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\ESET 2008-10-02 22:08 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\TuneUp Software 2008-10-02 21:55 --------- d-----w C:\Program Files\AGEIA Technologies 2008-10-02 21:45 --------- d-----w C:\Program Files\SystemRequirementsLab 2008-09-19 08:04 290,432 ----a-w C:\WINDOWS\system32\drivers\yk51x86.sys 2008-09-17 07:55 6,132,576 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys 2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys . ------- Sigcheck ------- 2008-08-24 01:53 361600 e88631e21a9caca06104802f9e915115 C:\WINDOWS\system32\drivers\tcpip.sys 2008-08-24 01:53 2011136 22f702a6dcbdb4f7282c4b73b95ee4e4 C:\WINDOWS\explorer.exe . ((((((((((((((((((((((((((((( snapshot@2008-10-21_14.39.19.79 ))))))))))))))))))))))))))))))))))))))))) . - 2008-10-21 12:23:34 75,304 ----a-w C:\WINDOWS\system32\ZoneLabs\vsmon.exe + 2008-10-21 15:30:18 75,304 ----a-w C:\WINDOWS\system32\ZoneLabs\vsmon.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "TaskSwitchXP"="C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe" [2004-04-20 794632] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-08-24 15360] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-10-21 2156368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "itype"="c:\Program Files\Microsoft IntelliType Pro\itype.exe" [2008-06-10 1442888] "FirefoxUltimateOptimizer"="C:\Documents and Settings\Administrateur\Mes documents\Firefox Optimizer\Firefox Ultimate Optimizer.exe" [2007-11-08 114688] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-09-17 13574144] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "nwiz"="nwiz.exe" [2008-09-17 C:\WINDOWS\system32\nwiz.exe] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 C:\WINDOWS\KHALMNPR.Exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "TaskSwitchXP"="C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe" [2004-04-20 794632] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] "nltide_3"="advpack.dll" [2008-08-26 C:\WINDOWS\system32\advpack.dll] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe [2008-08-19 3562496] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe [2008-08-19 3562496] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe [2008-08-19 3562496] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2008-10-04 805392] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "HonorAutoRunSetting"= 1 (0x1) "NoDesktopCleanupWizard"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn] 2008-05-02 02:42 72208 c:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTWLgn.dll [COLOR=RED]Les clés de Registre SafeBoot doivent être réparées. Cette machine ne peut pas utiliser le Mode Sans Échec.[/COLOR] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system] @="Driver Group" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] @="DiskDrive" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] @="Hdc" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] @="Keyboard" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] @="Mouse" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] @="System" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] @="Volume" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe -silent "MediaDICO38"=C:\Program Files\Micro Application\38 Dictionnaires et Recueils de Correspondance\LanceMediaDICO38.exe Lancement "ServUTrayIcon"=C:\Program Files\RhinoSoft.com\Serv-U\Serv-U-Tray.exe "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "NvCplDaemon"=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup "NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit "SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "FirewallOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\Program Files\\FlashFXP\\FlashFXP.exe"= "C:\\Program Files\\Bonjour\\mDNSResponder.exe"= R0 mv61xx;mv61xx;C:\WINDOWS\system32\DRIVERS\mv61xx.sys [2008-05-19 150568] R0 pavboot;pavboot;C:\WINDOWS\system32\drivers\pavboot.sys [2008-06-19 28544] R0 Si3124;Si3124;C:\WINDOWS\system32\drivers\Si3124.sys [2008-08-24 76208] R0 Si3132r5;Si3132r5;C:\WINDOWS\system32\drivers\Si3132r5.sys [2008-08-24 208688] R0 Si3531;Si3531;C:\WINDOWS\system32\drivers\Si3531.sys [2008-08-24 210224] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208] R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-08-24 14336] R2 vnccom;vnccom;C:\WINDOWS\system32\Drivers\vnccom.SYS [2004-06-26 6016] R3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344] S3 maconfservice;Ma-Config Service;C:\Program Files\ma-config.com\maconfservice.exe [2008-09-02 191656] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-21 307968] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ccfdc4c3-984f-11dd-8dd6-002215331e6c}] \Shell\AutoRun\command - H:\Programs\nu2menu\nu2menu.exe *Newly Created Service* - SROSA . Contenu du dossier 'Tâches planifiées' 2008-10-21 C:\WINDOWS\Tasks\1-Click Maintenance.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-02-29 14:24] 2008-10-21 C:\WINDOWS\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-02-29 14:24] . - - - - ORPHELINS SUPPRIMES - - - - Toolbar-ITBar7Layout - (no file) Toolbar-ITBar7Position - (no file) ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-21 17:46:04 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... C:\WINDOWS\system32\drivers\winfilse.exe [4460] 0x892EB020 C:\WINDOWS\system32\wintems.exe [4920] 0x87E2E2A8 C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe [4164] 0x87E1B360 Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run] "drvsyskit"="C:\\WINDOWS\\system32\\drivers\\winfilse.exe" "german.exe"="C:\\WINDOWS\\system32\\wintems.exe" "mule_st_key"="C:\\Documents and Settings\\Administrateur\\Application Data\\m\\flec006.exe" [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\srosa] "ImagePath"="\??\C:\WINDOWS\system32\drivers\srosa.sys" . ------------------------ Autres processus actifs ------------------------ . C:\Program Files\Fichiers communs\Logishrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.exe . ************************************************************************** . Heure de fin: 2008-10-21 17:49:10 - La machine a redémarré [Administrateur] ComboFix-quarantined-files.txt 2008-10-21 15:49:03 ComboFix2.txt 2008-10-21 12:41:43 Avant-CF: 265,349,435,392 octets libres Après-CF: 265,190,719,488 octets libres 567 --- E O F --- 2008-10-15 09:00:21
  11. Bonjour Pear et merci de prendre le temps de m'aider. J'ai bien suivis toutes les étapes mails il m'est impossible de poster le rapport pour la console de récuperation car il ne m'en à pas fait. Cecis étant je te certifie qu'il là bien installé j'ai eu le message comme quoi c'était bon. Pour le reste voici le log. ComboFix 08-10-19.04 - Administrateur 2008-10-21 14:31:56.1 - NTFSx86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.1667 [GMT 2:00] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Administrateur\Application Data\m C:\Documents and Settings\Administrateur\Application Data\m\data.oct C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe C:\Documents and Settings\Administrateur\Application Data\m\list.oct C:\Documents and Settings\Administrateur\Application Data\m\shared\[MST-3].Panda.Z.The.Robonimation.OP.&.ED.Single.-.Jam.Project.-.Voyager.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\1site_Lite_2007.18.230_(KeyGen).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\3D Maroon Animated Cursors 1.1d.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\3D_Realistic_Fireplace_Screen_Saver_2.7_[Patch].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\40tude_Dialog_2.0.15.1_Beta_38_(Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ABC_Amber_BlackBerry_Converter_6.01.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Ace_ScreenSpy_5.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Addza_Address_Book_1.0.7.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Advanced_MP3_Sound_Recorder_3.6_[KeyGen].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\allMonitor 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Amigos Spanish 4.6.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ANSINE 2.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Apache_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Applet_Menu_Factory_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Aquarium_Life_Screensaver_3.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Archer_2.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ArcSoft CD&DVD LabelMaker 1.0.9.52.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\AS_HDGET_WIN32_DLL_2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Astronomy_Slide_Show_2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\AVG.7.1.384.Build.720.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\avg.antivirus.7.1.plus.firewall.+.serial.updated-fixed.07-2006.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\AVI_To_WMV_Converter_1.20_(Key+Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Azure Shore Screensaver 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Bad_Angel_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Bambusa (Classic) 1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Belkasoft_RemovEx_Pro_2.01_[KeyGen].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\BraZip 9.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Bug_Trail_Personal_Edition_1.01.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Community Builder 2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Creator Thumbs for HTML 1.2.0.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\DateTray_1.02_(KeyGen).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\DayOffNet_2.18_[Serial].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\DeskLensExp 2.0.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Download Tracker 1.0.15.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\DriveLook_1.00.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Duplicate Finder 3.4.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\E-Library 3.0r.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Easy_Web_Gallery_Maker_2.0_2.0_Crack.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\EasyEncode 0.7.31.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\eTIMER_4.01.02_[KeyGen].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Excel_Macro_Processor_1.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Extreme Exe Morning Coffee 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\EZ-Forms-DD250_Filler_5.50.ec.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\EZ_Backup_Skype_Premium_4.72.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Fiat.Panda.-.Seat.Marbella.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Floppy_Remote_Drive_Disabler_2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Freedom_Force_-_Psylocke_model.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\FreeSMTP.Net_1.0_Key.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\GVH_Setup_Maker_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\HL2 Logo Screensaver 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\HomeSite 5.5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\HP0-660_Practice_Exam_Testing_Engine_Software_1.0_(Crack).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\IBUndelete_1.0_KeyGen.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\iMac Firmware Update 4.1.9.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Image Anvil 2.0.5.28421 (Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Jamendo Gadget 1.0.0.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Ken_Messenger_Server_5.0.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\LingvoSoft_Talking_Picture_Dictionary_2007_Italian_-_Polish_1.1.18.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Littleeye_2.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\LiveF1 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\LSText 0.22.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\McAfee.VirusScan.v10.0.27.Crack.-.Keygen.-.Serial.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Memo Plus 4.18.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Micro Menu 2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Motion_Detection_1.04_Build_23.2_(Crack).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\MusicGoals_by_Eye_and_Ear_1.6.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Nawras_Files_Splitter_3.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\NeroLite 0.1.3 Alpha.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\NH_Backup_3.0.74_(Key).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Northern Bullfinches Screensaver 5.07 (With Crack).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Okoker HD-DVD Burner 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Opal_Calista_Screensaver_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\OTD_Command_Centre_5.01d.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\PDF Page Counter Deluxe 3.3 (KeyGen).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\PDFSprite PDF Driver advanced version 9.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Pic-Matic_1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Picture Stamp 2.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\PixRev_1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Planet Neptune 3D Screensaver 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Popup Blocker 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\POSitive_Point_of_Sale_Lite_5.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\PowerCyberCafe_2.7_(Cracked).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Print Audit 5.0.24.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Print Studio Photo ID Card Software 2.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ProfPDF_Information_Manager_1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\PS-Timer 1.04.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\pwStore_1.0.6.421.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\R-WIN_2000_Keyboard_Switch_6.0_Patch.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\RegEditer 3.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ReGet_Junior_2.3.266_Beta_[KeyGen].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\REL_Link_Checker_Lite_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Remote-Anything_5.38.14.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Rumie 0.68.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\RunAs_Professional_3.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Sabotage_2.8.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Salaat Time 1.9.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Seagulls Screen Saver 3D 1.02.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Shut_UP_2.1.6_(Cracked).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Sky Presets 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\SmartFileIcons_2.01.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Solway's_Plain_Backup_1.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Sql2Csv 1.0.2.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\SQLWriter 1.6.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Stay Away Alergies Software 1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\SupremeSched 4.02.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Symantec.Mobile.Security.Virus.Definition.10.JAN.2007.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Symantec.Norton.Ghost.10.2006.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Taskbar Manager 3.5.1 [Crack].zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Text_Calendar_1.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\TextPredictive_1.0.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\threeMessenger 1.0 Key+Serial.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\TIFF_Splitter_Basic_1.7.9.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Tower Clock Animated Wallpaper 5.07.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Turbo-Sniper SE 2.07.308.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\U-Upload Cart 1.2.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\UltraCapture_1.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Unreal_Tournament_2004_DM_PC_Room_map.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\USAsoft DVD Video DivX Converter 5.00.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VB 001 Joiner 1.0.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VCD_Builder_1.1.1.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\VidCrop_1.0.0.15_(Key+Serial).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\ViperChat 2.25.4.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Web_Historian_1.3.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\WebBrowser4Widgets_1.0.2.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Winter_Wonderland_Screen_Saver_2.0.zip C:\Documents and Settings\Administrateur\Application Data\m\shared\Word_Cleaner_3.5_(Key).zip C:\Documents and Settings\Administrateur\Application Data\m\shared\XML_to_Excel_Convert_Software_7.0_(Cracked).zip C:\Documents and Settings\Administrateur\Application Data\m\srvlist.oct C:\WINDOWS\system32\ban_list.txt C:\WINDOWS\system32\drivers\downld C:\WINDOWS\system32\drivers\downld\103046.exe C:\WINDOWS\system32\drivers\downld\104765.exe C:\WINDOWS\system32\drivers\downld\131937.exe C:\WINDOWS\system32\drivers\downld\136343.exe C:\WINDOWS\system32\drivers\downld\144093.exe C:\WINDOWS\system32\drivers\downld\149281.exe C:\WINDOWS\system32\drivers\downld\155359.exe C:\WINDOWS\system32\drivers\downld\163312.exe C:\WINDOWS\system32\drivers\downld\214484.exe C:\WINDOWS\system32\drivers\downld\218718.exe C:\WINDOWS\system32\drivers\downld\219140.exe C:\WINDOWS\system32\drivers\downld\224968.exe C:\WINDOWS\system32\drivers\downld\228468.exe C:\WINDOWS\system32\drivers\downld\229875.exe C:\WINDOWS\system32\drivers\downld\231578.exe C:\WINDOWS\system32\drivers\downld\236843.exe C:\WINDOWS\system32\drivers\downld\238515.exe C:\WINDOWS\system32\drivers\downld\270656.exe C:\WINDOWS\system32\drivers\downld\279281.exe C:\WINDOWS\system32\drivers\downld\284421.exe C:\WINDOWS\system32\drivers\downld\61781.exe C:\WINDOWS\system32\drivers\downld\67515.exe C:\WINDOWS\system32\drivers\downld\73156.exe C:\WINDOWS\system32\drivers\downld\73609.exe C:\WINDOWS\system32\drivers\downld\79062.exe C:\WINDOWS\system32\drivers\downld\79468.exe C:\WINDOWS\system32\drivers\downld\85546.exe C:\WINDOWS\system32\drivers\downld\87890.exe C:\WINDOWS\system32\drivers\downld\88093.exe C:\WINDOWS\system32\drivers\downld\91718.exe C:\WINDOWS\system32\drivers\downld\93828.exe C:\WINDOWS\system32\drivers\downld\95484.exe C:\WINDOWS\system32\drivers\downld\97781.exe C:\WINDOWS\system32\drivers\srosa.sys C:\WINDOWS\system32\mdelk.exe C:\WINDOWS\system32\wintems.exe . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SERV-U -------\Service_Serv-U ((((((((((((((((((((((((((((( Fichiers créés du 2008-09-21 au 2008-10-21 )))))))))))))))))))))))))))))))))))) . 2008-10-21 14:38 . 2008-10-21 14:38 <REP> d-------- C:\WINDOWS\system32\drivers\downld 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\system32\xircom 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\system32\oobe 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\system32\npp 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\WINDOWS\msagent 2008-10-21 14:37 . 2008-10-21 14:37 <REP> d-------- C:\Program Files\microsoft frontpage 2008-10-21 14:20 . 2004-10-20 17:23 21,344 -ra------ C:\WINDOWS\system32\drivers\fbxusb32.sys 2008-10-21 14:18 . 2008-10-21 14:18 <REP> d--hs---- C:\WINDOWS\ftpcache 2008-10-21 14:18 . 2008-10-21 14:18 <REP> d-------- C:\Program Files\Free 2008-10-21 13:25 . 2008-10-21 13:25 <REP> d-------- C:\Program Files\Spybot - Search & Destroy 2008-10-21 13:25 . 2008-10-21 13:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-10-21 13:00 . 2008-10-21 13:00 <REP> d-------- C:\Program Files\TuneUp Utilities 2008 2008-10-21 13:00 . 2008-10-21 13:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-10-21 12:35 . 2008-10-21 12:35 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware 2008-10-21 12:35 . 2008-10-21 12:35 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-10-21 12:35 . 2008-10-21 12:35 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Malwarebytes 2008-10-21 12:35 . 2008-10-16 20:25 38,496 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2008-10-21 12:35 . 2008-10-16 20:25 15,504 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-10-21 12:18 . 2008-10-21 12:18 <REP> d-------- C:\Muestras 2008-10-20 22:45 . 2008-10-20 22:45 <REP> d-------- C:\Program Files\Panda Security 2008-10-20 22:45 . 2008-06-19 17:24 28,544 --a------ C:\WINDOWS\system32\drivers\pavboot.sys 2008-10-20 20:59 . 2008-10-20 20:59 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Lavasoft 2008-10-20 20:41 . 2004-04-20 04:01 794,632 --------- C:\WINDOWS\system32\drivers\winfilse.exe 2008-10-20 18:13 . 2008-10-20 18:13 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Ubisoft 2008-10-20 18:05 . 2008-10-20 18:05 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\InstallShield 2008-10-18 02:10 . 2008-10-18 02:10 41 --a------ C:\WINDOWS\system32\' 2008-10-18 02:09 . 2005-06-11 00:02 12,800 --a------ C:\WINDOWS\system32\vncdrv.dll 2008-10-18 02:09 . 2004-06-26 15:22 6,016 --a------ C:\WINDOWS\system32\drivers\vnccom.SYS 2008-10-18 02:09 . 2004-06-26 15:21 5,760 --a------ C:\WINDOWS\system32\vnchelp.dll 2008-10-18 02:09 . 2004-06-26 15:22 4,736 --a------ C:\WINDOWS\system32\drivers\vncdrv.sys 2008-10-17 16:01 . 2008-10-17 16:01 <REP> d--h----- C:\WINDOWS\system32\GroupPolicy 2008-10-16 16:39 . 2008-10-16 16:56 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-10-15 17:47 . 2008-10-15 17:47 <REP> d-------- C:\Program Files\RhinoSoft.com 2008-10-15 10:59 . 2008-10-15 11:00 <REP> d--h----- C:\WINDOWS\$hf_mig$ 2008-10-15 00:11 . 2008-08-14 12:34 138,496 --------- C:\WINDOWS\system32\dllcache\afd.sys 2008-10-14 23:50 . 2008-09-15 17:26 1,846,528 --------- C:\WINDOWS\system32\dllcache\win32k.sys 2008-10-14 23:49 . 2008-09-08 12:41 333,824 --------- C:\WINDOWS\system32\dllcache\srv.sys 2008-10-14 12:50 . 2006-01-10 10:50 24,576 -ra------ C:\WINDOWS\system32\AsIO.dll 2008-10-14 12:50 . 2007-12-17 11:14 12,400 -ra------ C:\WINDOWS\system32\drivers\AsIO.sys 2008-10-14 12:50 . 2008-01-04 13:34 11,832 --a------ C:\WINDOWS\system32\drivers\AsInsHelp64.sys 2008-10-14 12:50 . 2008-01-04 13:34 10,216 --a------ C:\WINDOWS\system32\drivers\AsInsHelp32.sys 2008-10-14 12:46 . 2008-10-14 12:46 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Ubisoft 2008-10-14 00:27 . 2008-10-14 00:27 <REP> d-------- C:\WINDOWS\Sun 2008-10-13 18:46 . 2008-04-13 07:46 85,248 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys 2008-10-13 18:46 . 2008-04-13 07:46 19,200 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS 2008-10-13 18:46 . 2008-04-13 07:46 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys 2008-10-13 18:46 . 2008-04-13 15:34 16,384 --a------ C:\WINDOWS\system32\ipsink.ax 2008-10-13 18:46 . 2008-04-13 09:46 15,232 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys 2008-10-13 18:46 . 2008-04-13 09:46 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys 2008-10-13 18:46 . 2008-04-13 07:46 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys 2008-10-13 18:46 . 2008-04-13 07:39 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys 2008-10-13 18:45 . 2008-04-13 15:34 92,160 --a------ C:\WINDOWS\system32\kswdmcap.ax 2008-10-13 18:45 . 2008-04-13 15:34 61,952 --a------ C:\WINDOWS\system32\kstvtune.ax 2008-10-13 18:45 . 2008-04-13 15:33 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll 2008-10-13 18:45 . 2008-04-13 15:34 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax 2008-10-13 18:45 . 2008-04-13 15:34 28,672 --a------ C:\WINDOWS\system32\vidcap.ax 2008-10-13 18:42 . 2007-02-03 10:27 938,272 --a------ C:\WINDOWS\system32\drivers\LV302V32.SYS 2008-10-13 18:42 . 2007-10-12 04:00 490,008 --a------ C:\WINDOWS\system32\LVUI2.dll 2008-10-13 18:42 . 2007-10-12 04:00 465,432 --a------ C:\WINDOWS\system32\LVUI2RC.dll 2008-10-13 18:42 . 2007-10-12 03:57 416,280 --a------ C:\WINDOWS\system32\LVCodec2.dll 2008-10-13 18:42 . 2003-02-21 04:42 348,160 --a------ C:\WINDOWS\system\msvcr71.dll 2008-10-13 18:42 . 2007-02-03 10:29 129,824 --a------ C:\WINDOWS\system32\lvci1051.dll 2008-10-13 18:42 . 2007-02-03 08:59 50,127 --a------ C:\WINDOWS\system32\lvcoinst.ini 2008-10-13 18:42 . 2007-10-12 04:00 41,752 --a------ C:\WINDOWS\system32\drivers\LVUSBSta.sys 2008-10-13 18:42 . 2007-02-03 10:27 14,240 --a------ C:\WINDOWS\system32\drivers\lv302af.sys 2008-10-13 18:42 . 2007-02-03 09:01 13,398 --a------ C:\WINDOWS\system32\Repository.reg 2008-10-13 18:14 . 2008-04-13 07:45 60,032 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys 2008-10-13 10:50 . 2008-10-13 10:50 <REP> d-------- C:\Program Files\Sierra Entertainment 2008-10-12 23:22 . 2008-10-12 23:22 <REP> d-------- C:\Program Files\Micro Application 2008-10-12 23:22 . 2006-06-21 18:38 2,507,776 --a------ C:\WINDOWS\MediaDico38Dll.dll 2008-10-12 23:22 . 2006-05-08 16:02 208,992 --a------ C:\WINDOWS\RACHook38.dll 2008-10-12 23:22 . 2006-05-24 15:59 199,680 --a------ C:\WINDOWS\MediaR38.dll 2008-10-12 23:22 . 2008-10-12 23:26 1,976 --a------ C:\WINDOWS\MediaR38.ini 2008-10-12 23:22 . 2008-10-12 23:22 105 --a------ C:\WINDOWS\NAVIGMA.INI 2008-10-10 22:09 . 2008-10-10 22:09 <REP> d-------- C:\Program Files\Real 2008-10-10 22:09 . 2008-10-10 22:09 <REP> d-------- C:\Program Files\Fichiers communs\xing shared 2008-10-10 22:09 . 2008-10-10 22:09 <REP> d-------- C:\Program Files\Fichiers communs\Real 2008-10-10 22:09 . 2008-10-10 22:09 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2008-10-10 21:37 . 2008-10-10 21:37 <REP> d-------- C:\Program Files\MSXML 4.0 2008-10-10 01:54 . 2008-10-10 01:54 <REP> d-------- C:\Program Files\UltraISO 2008-10-10 01:54 . 2008-10-10 01:54 <REP> d-------- C:\Program Files\Fichiers communs\EZB Systems 2008-10-10 01:17 . 2008-10-16 16:39 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Nero 2008-10-10 01:07 . 2008-10-10 01:07 4,767 --a------ C:\WINDOWS\Irremote.ini 2008-10-10 01:06 . 2008-10-10 01:06 <REP> d-------- C:\Program Files\Windows Sidebar 2008-10-08 23:35 . 2008-10-06 10:39 2,097,152 --a------ C:\WINDOWS\P5Q-E-ASUS-1406.ROM 2008-10-08 02:17 . 2008-10-08 02:17 <REP> d-------- C:\WINDOWS\74224F8D4A1748169EDB7BB854DE532C.TMP 2008-10-08 02:17 . 2008-10-20 18:12 <REP> d-------- C:\Program Files\Ubisoft 2008-10-07 23:58 . 2008-10-07 23:58 <REP> d-------- C:\Program Files\GrabIt 2008-10-07 23:58 . 2008-10-18 12:33 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\GrabIt 2008-10-07 01:32 . 2008-10-07 01:32 <REP> d-------- C:\Program Files\Bonjour 2008-10-07 01:25 . 2008-10-07 01:25 <REP> d-------- C:\Program Files\Fichiers communs\Macrovision Shared 2008-10-07 01:24 . 2008-10-07 01:32 <REP> d-------- C:\Program Files\Fichiers communs\Adobe 2008-10-06 16:44 . 2008-10-06 16:44 <REP> d-------- C:\Program Files\Java 2008-10-06 16:44 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-10-06 16:43 . 2008-10-06 16:43 <REP> d-------- C:\Program Files\Fichiers communs\Java 2008-10-05 19:55 . 2008-10-05 19:55 <REP> d--h-c--- C:\Documents and Settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6} 2008-10-05 19:55 . 2008-10-05 19:56 107,888 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2008-10-05 19:49 . 2008-10-05 19:49 <REP> d-------- C:\ProgramData 2008-10-05 19:49 . 2008-10-05 19:49 <REP> d-------- C:\Program Files\Electronic Arts 2008-10-05 19:48 . 2008-10-05 19:48 1,590 --a------ C:\WINDOWS\system32\ealregsnapshot1.reg 2008-10-05 11:24 . 2008-10-05 11:24 <REP> d-------- C:\Program Files\OpenAL 2008-10-05 11:24 . 2008-04-28 15:53 805,400 -ra------ C:\WINDOWS\system32\tmp105B.tmp 2008-10-05 11:24 . 2008-04-28 15:53 805,400 -ra------ C:\WINDOWS\system32\tmp105A.tmp 2008-10-05 11:24 . 2008-10-05 11:24 444,952 --a------ C:\WINDOWS\system32\wrap_oal.dll 2008-10-05 11:24 . 2008-10-05 11:24 109,080 --a------ C:\WINDOWS\system32\OpenAL32.dll 2008-10-05 11:10 . 2008-10-05 11:10 <REP> d-------- C:\Program Files\Codemasters 2008-10-04 13:54 . 2008-10-04 13:54 <REP> d-------- C:\Program Files\MSBuild 2008-10-04 13:54 . 2008-10-04 13:54 <REP> d-------- C:\Program Files\Microsoft Works 2008-10-04 13:53 . 2008-10-04 13:53 <REP> d-------- C:\Program Files\Microsoft.NET 2008-10-04 13:51 . 2008-10-04 13:54 <REP> d-------- C:\WINDOWS\SHELLNEW 2008-10-04 13:51 . 2008-10-04 13:51 <REP> d-------- C:\Program Files\Microsoft Visual Studio 8 2008-10-04 13:50 . 2008-10-04 13:50 <REP> dr-h----- C:\MSOCache 2008-10-04 13:50 . 2008-10-04 13:55 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-10-04 12:49 . 2008-10-04 12:49 <REP> d-------- C:\Program Files\Marvell 2008-10-04 12:27 . 2008-08-25 10:47 2,097,152 --a------ C:\WINDOWS\P5Q-E-ASUS-1306.ROM 2008-10-04 12:14 . 2008-10-04 12:14 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Corel 2008-10-04 12:10 . 2008-06-12 09:46 20,992 --a------ C:\WINDOWS\system32\vncmirror.dll 2008-10-04 12:10 . 2008-06-12 09:46 4,608 --a------ C:\WINDOWS\system32\drivers\vncmirror.sys 2008-10-04 12:09 . 2008-10-04 12:09 <REP> d--h----- C:\ASUS.SYS 2008-10-04 12:09 . 2008-10-14 16:36 <REP> d--h----- C:\ASUS.000 2008-10-04 12:08 . 2008-10-14 12:50 <REP> d-------- C:\Program Files\ASUS 2008-10-04 12:07 . 2008-10-04 12:07 670 --a------ C:\WINDOWS\setup.iss 2008-10-04 12:01 . 2008-10-21 14:38 <REP> d-------- C:\Program Files\SpeedFan 2008-10-04 01:40 . 2008-10-04 01:40 <REP> d-------- C:\Program Files\Microsoft IntelliType Pro 2008-10-04 01:39 . 2008-10-13 18:41 <REP> d-------- C:\Documents and Settings\All Users\Application Data\LogiShrd . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-10-21 11:00 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-10-21 09:53 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\uTorrent 2008-10-20 18:44 298,004 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx 2008-10-20 18:44 26,210,336 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat 2008-10-18 20:40 --------- d-----w C:\Program Files\Cpu-z 2008-10-14 10:50 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-10-09 23:15 --------- d-----w C:\Program Files\Fichiers communs\Nero 2008-10-09 23:07 --------- d-----w C:\Program Files\Nero 2008-10-09 23:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Nero 2008-10-08 19:20 --------- d-----w C:\Program Files\Everest 2008-10-05 17:48 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2008-10-04 10:41 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\TMP 2008-10-03 03:36 --------- d-----w C:\Program Files\Analog Devices 2008-10-03 03:22 --------- d-----w C:\Program Files\Intel 2008-10-03 03:07 --------- d-----w C:\Program Files\TaskSwitchXP 2008-10-03 03:07 --------- d-----w C:\Program Files\Mozilla Thunderbird 2008-10-03 03:01 --------- d-----w C:\Program Files\Windows Media Connect 2 2008-10-03 00:14 --------- d-----w C:\Program Files\uTorrent 2008-10-03 00:04 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\MailFrontier 2008-10-03 00:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier 2008-10-03 00:00 --------- d-----w C:\Program Files\Zone Labs 2008-10-02 23:55 --------- d-----w C:\Program Files\ma-config.com 2008-10-02 23:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\ma-config.com 2008-10-02 23:54 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-10-02 22:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\ESET 2008-10-02 22:08 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\TuneUp Software 2008-10-02 21:55 --------- d-----w C:\Program Files\AGEIA Technologies 2008-10-02 21:45 --------- d-----w C:\Program Files\SystemRequirementsLab 2008-09-19 08:04 290,432 ----a-w C:\WINDOWS\system32\drivers\yk51x86.sys 2008-09-17 07:55 6,132,576 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys 2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys . ------- Sigcheck ------- 2008-08-24 01:53 361600 e88631e21a9caca06104802f9e915115 C:\WINDOWS\system32\drivers\tcpip.sys 2008-08-24 01:53 2011136 22f702a6dcbdb4f7282c4b73b95ee4e4 C:\WINDOWS\explorer.exe . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "TaskSwitchXP"="C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe" [2004-04-20 794632] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-08-24 15360] "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-10-21 2156368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "itype"="c:\Program Files\Microsoft IntelliType Pro\itype.exe" [2008-06-10 1442888] "FirefoxUltimateOptimizer"="C:\Documents and Settings\Administrateur\Mes documents\Firefox Optimizer\Firefox Ultimate Optimizer.exe" [2007-11-08 114688] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2008-09-17 13574144] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784] "nwiz"="nwiz.exe" [2008-09-17 C:\WINDOWS\system32\nwiz.exe] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 C:\WINDOWS\KHALMNPR.Exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "TaskSwitchXP"="C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe" [2004-04-20 794632] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "nltide_2"="shell32" [X] "nltide_3"="advpack.dll" [2008-08-26 C:\WINDOWS\system32\advpack.dll] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe [2008-08-19 3562496] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe [2008-08-19 3562496] C:\Documents and Settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\ SpeedFan.lnk - C:\Program Files\SpeedFan\speedfan.exe [2008-08-19 3562496] C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\ Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2008-10-04 805392] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "HonorAutoRunSetting"= 1 (0x1) "NoDesktopCleanupWizard"= 1 (0x1) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoSMHelp"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn] 2008-05-02 02:42 72208 c:\Program Files\Fichiers communs\Logishrd\Bluetooth\LBTWLgn.dll [COLOR=RED]Les clés de Registre SafeBoot doivent être réparées. Cette machine ne peut pas utiliser le Mode Sans Échec.[/COLOR] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system] @="Driver Group" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] @="DiskDrive" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] @="Hdc" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] @="Keyboard" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] @="Mouse" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] @="System" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] @="Volume" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe -silent "MediaDICO38"=C:\Program Files\Micro Application\38 Dictionnaires et Recueils de Correspondance\LanceMediaDICO38.exe Lancement "ServUTrayIcon"=C:\Program Files\RhinoSoft.com\Serv-U\Serv-U-Tray.exe "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "NvCplDaemon"=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup "NvMediaCenter"=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit "SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe "SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "FirewallOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\Program Files\\FlashFXP\\FlashFXP.exe"= "C:\\Program Files\\Bonjour\\mDNSResponder.exe"= R0 mv61xx;mv61xx;C:\WINDOWS\system32\DRIVERS\mv61xx.sys [2008-05-19 150568] R0 pavboot;pavboot;C:\WINDOWS\system32\drivers\pavboot.sys [2008-06-19 28544] R0 Si3124;Si3124;C:\WINDOWS\system32\drivers\Si3124.sys [2008-08-24 76208] R0 Si3132r5;Si3132r5;C:\WINDOWS\system32\drivers\Si3132r5.sys [2008-08-24 208688] R0 Si3531;Si3531;C:\WINDOWS\system32\drivers\Si3531.sys [2008-08-24 210224] R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208] R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2008-08-24 14336] R2 vnccom;vnccom;C:\WINDOWS\system32\Drivers\vnccom.SYS [2004-06-26 6016] R3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 21344] S3 maconfservice;Ma-Config Service;C:\Program Files\ma-config.com\maconfservice.exe [2008-09-02 191656] S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-10-21 307968] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ccfdc4c3-984f-11dd-8dd6-002215331e6c}] \Shell\AutoRun\command - H:\Programs\nu2menu\nu2menu.exe *Newly Created Service* - HELPSVC *Newly Created Service* - SROSA . Contenu du dossier 'Tâches planifiées' 2008-10-21 C:\WINDOWS\Tasks\1-Click Maintenance.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-02-29 14:24] 2008-10-21 C:\WINDOWS\Tasks\Maintenance en 1 clic.job - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe [2008-02-29 14:24] . - - - - ORPHELINS SUPPRIMES - - - - Toolbar-ITBar7Layout - (no file) Toolbar-ITBar7Position - (no file) . ------- Examen supplémentaire ------- . FireFox -: Profile - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\csg8ig5o.default\ FireFox -: prefs.js - STARTUP.HOMEPAGE - yahoo.fr FF -: plugin - C:\Program Files\ma-config.com\nphardwaredetection.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-21 14:38:02 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... C:\WINDOWS\system32\drivers\winfilse.exe [3652] 0x8819E928 C:\WINDOWS\system32\wintems.exe [5160] 0x87D9DB90 Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run] "drvsyskit"="C:\\WINDOWS\\system32\\drivers\\winfilse.exe" "german.exe"="C:\\WINDOWS\\system32\\wintems.exe" [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\srosa] "ImagePath"="\??\C:\WINDOWS\system32\drivers\srosa.sys" . ------------------------ Autres processus actifs ------------------------ . C:\Program Files\Fichiers communs\Logishrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PSIService.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Fichiers communs\Logishrd\KHAL2\KHALMNPR.exe . ************************************************************************** . Heure de fin: 2008-10-21 14:41:42 - La machine a redémarré [Administrateur] ComboFix-quarantined-files.txt 2008-10-21 12:41:34 Avant-CF: 265,694,621,696 octets libres Après-CF: 265,573,642,240 octets libres 495 --- E O F --- 2008-10-15 09:00:21
  12. Bonjour à tous, Voilà hier j'ai eu un soucis. Je me suis apercu que j'avais " pris " cette M.... de bagle et surement autre. J'ai fais un scan en ligne avec Panda il me là bien détecté ( voir rapport ) 1. C:\WINDOWS\system32\wintems.exe 2. C:\WINDOWS\system32\mdelk.exe 3. C:\WINDOWS\system32\drivers\downld\245703.exe 4. C:\WINDOWS\system32\drivers\downld\264468.exe 5. C:\WINDOWS\system32\drivers\downld\259703.exe 6. C:\WINDOWS\system32\drivers\downld\144546.exe 7. C:\WINDOWS\system32\drivers\downld\620156.exe 8. C:\WINDOWS\system32\drivers\downld\618343.exe 9. C:\WINDOWS\system32\drivers\downld\612921.exe 10. C:\WINDOWS\system32\drivers\downld\142390.exe 11. C:\Documents and Settings\Administrateur\Application Data\m\flec006.exe 12. C:\WINDOWS\system32\drivers\downld\260515.exe 13. C:\WINDOWS\system32\drivers\downld\256984.exe 14. C:\WINDOWS\system32\drivers\downld\249593.exe Bien evidement comme vous le savais je ne peux n'y lancé mon av ni firewall ni même installé Hijackthis celui-ci me disant que ce n'est pas une application Win32. Spybot et autre impossible aussi à installé donc je viens vous voir pour de l'aide s'y m'afois il n'y avait rien faire je formaterai. Et pour finir, demarrage mode sans echec impossible. En attente de votre aide ... Merci d'avance
  13. kikidrif

    Panneau de Configuration .. Comment supprimer ....

    Alors en gros je voudrais supprimer par exemple le raccourcis AD-AWARE du panneau de config (je parle de l'icone) mon frere m'a installé ce log comme et je ne peux l'enlever de là. J'ai eu beau allez voir dans ajout/suppresion de programme celui-ci est toujours présent.
  14. Bonjour à tous, Je viens vous demander de l'aide. J'aimerai savoir comment faire pour enlever des " Raccourcis du panneau de config " et supprimer totalement le " log " qui y est. Merci encore à vous
  15. kikidrif

    Compte Utilisateur et jeux petit soucis

    Merci Pear ça ma bien aide
×