goodnews75

Ok merci à toi d'avoir pris du temps pour essayer de m'aider. C'est sympa de ta part et je n'ai rien perdu, car j'ai aussi appris que l'on pouvait faire une impression écran ! Je vais lire le lien Bon courage et merci Cordialement

C'est vrai que c'est bien compliqué tout ça Alors j'ai décoché qttask Pour les autres, je sais que : wcourier : est un programme de mon ordi ASUS qui sert au WIFI je crois batterylife : gestion de la battery et des options ASUS ZCFgsvc : programme Intel wireless ifrmewrk : aussi Intel proset EOUwiz : Intel wireless Intel aussi Hcontrol : Asus control des touches clavier spéciales En regardant tous les programmes de MSCONFIG, tous ont leur place ici. C'est surtout les processus qui m'inquietent

Ce ne fut pas trés compliqué, je ne savais pas que l'on pouvait faire une copie de son écran...Ca c'est vraiment génial merci pour ton aide Voici les copies des processus PS : ce soir il tourne trés bien, mais ce matin ce fut une galère au demarrage Puis MS CONFIG

Bonsoir, Merci pour ton aide et tes explications didactiques. Je devrais y arriver. Je te post cela rapidement Encore merci Cordialement

bonjour, Merci pour tes conseils, je n'ai rien compris...je suis novice en informatique Merci quand même Salutations

Salut, J'ai desactiver la MAJ automatique, j'ai toujours sur les 51 processus actifs, 7 svchost.exe qui tournent. J'ai rebooter mon PC et il à encore mis 5/6 minutes bloqué à 100% avant de redescendre à 10/15%. Il y A vraiment un truc etrange, il ne faisait pas cela avant.

Bonsoir Comme il y en a 51, y a t'il une façon de faire un copier coller ou faut t'il que je tape l'ensemble ? Avez-vous besoin de connaitre la mémoire utilisée pour chacun d'eux ? Merci Salutations

bonsoir, Merci pour ta réponse. Effectivement j'ai compté 7 processus svchost.exe en marche dont 1 qui utilise 43 000ko, tous les autres entre 7500ko et 3000ko. Avant de faire ce que tu proposes, je voulais que tu me confirme le fait que cela soit normal d'avoir autant de processus en route Merci pour ta nouvelle réponse. Salutations

Bonjour, Voici mon problème : Mon PC demarre avec une UC à 100% pendant beaucoup trop longtemps 5/8mm en moyenne. J'ai 51 processus qui fonctionnent et je ne sais pas si ils servent tous et/ou celui qui ralenti le plus la machine. Je sais que ce n'est pas un virus car je viens du forum sécurité ou Charles Ingals m'a épaulé pour le vérifier Voici son dernier commentaire : Pour moi le problème n'est pas d'origine infectieuse.Malheureusement je ne vois pas quelle application peut être responsable de ce souci Poste voir un message ici > http://forum.zebulon.fr/index.php?showforum=1 J'espère qu'on pourra t'aider à trouver le responsable! Merci pour votre aide carc'est vraiment galère de ne pouvoir avancer sur ce PC qui rame qui rame !!!!! Cordialement

bonsoir, Ok je vais tenter car c'est vraiment pénible d'avoir un PC qui rame un jour sur 2. Merci beaucoup pour ton aide au moins je sais que je n'ai pas de virus Bon courage à toi Merci et cordialement

Peux t'on remettre les racourcis de touche clavier STP O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe > Note: utile uniquement si tu te sert des touches spéciales sur ton clavier, sinon coche! Merci

Bonjour, Voici le rapport Merci ! REG.EXE VERSION 3.0 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost HTTPFilter REG_MULTI_SZ HTTPFilter\ LocalService REG_MULTI_SZ AlerterWebClientLmHostsRemoteRegistryupnphostSSDPSRV\ NetworkService REG_MULTI_SZ DnsCache\ netsvcs REG_MULTI_SZ 6to4AppMgmtAudioSrvBrowserCryptSvcDMServerDHCPERSvcEventSystemFastUserSwitchingCompatibilityHidServIasIpripIrmonLanmanServerLanmanWorkstationMessengerNetmanNlaNtmssvcNWCWorkstationNwsapagentRasautoRasmanRemoteaccessScheduleSeclogonSENSSharedaccessSRServiceTapisrvThemesTrkWksW32TimeWZCSVCWmiWmdmPmSpwinmgmtwscsvcxmlprovBITSwuauservShellHWDetectionhelpsvcWmdmPmSN\ DcomLaunch REG_MULTI_SZ DcomLaunchTermService\ rpcss REG_MULTI_SZ RpcSs\ imgsvc REG_MULTI_SZ StiSvc\ termsvcs REG_MULTI_SZ TermService\ WudfServiceGroup REG_MULTI_SZ WUDFSvc\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\DComLaunch CoInitializeSecurityParam REG_DWORD 0x1 DefaultRpcStackSize REG_DWORD 0x8 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\HTTPFilter CoInitializeSecurityParam REG_DWORD 0x1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\LocalService CoInitializeSecurityParam REG_DWORD 0x1 AuthenticationCapabilities REG_DWORD 0x2000 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\netsvcs CoInitializeSecurityParam REG_DWORD 0x1 AuthenticationCapabilities REG_DWORD 0x3020 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\PCHealth CoInitializeSecurityParam REG_DWORD 0x2 AuthenticationCapabilities REG_DWORD 0x40 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\termsvcs CoInitializeSecurityParam REG_DWORD 0x1 DefaultRpcStackSize REG_DWORD 0x8

Je te mettrai bien la liste complete des processus ouverts, a part les recopier, y a t'il une autre façon de faire un copié collé de cette liste ?

Bonsoir, J'ai fais les manip, et c'est toujours trés long à demarrer. SVCHOST.EXE (system) EST A 68 000 KO pendant plusieurs minutes juste au demarrage sans rien faire C normal d'avoir autant de svchost en fonction (7) ? G remarqué que de temps en temps le processus spoolsv.exe se met à monter tout seul ? Merci pour ta patience depuis le temps que tu es sur mon sujet, je voulais t'en remercier. Cordialement

Ok pour le stop du statut du service Je n'ai pas trouvé le tmcomm Je n'ai jamais tenté de toucher à teatimer, on m'a déja expliqué que c'etait important de l'avoir !

et la suite STATUS: SCANNINGFile "iFrmewrk.exe" received on 05.16.2007 at 00:39:54 (CET) is being scanned by VirusTotal in this moment. Results will be shown as they're generated. Antivirus Version Update Result AhnLab-V3 2007.5.15.1 05.15.2007 no virus found AntiVir 7.4.0.15 05.15.2007 no virus found Authentium 4.93.8 05.15.2007 no virus found Avast 4.7.997.0 05.15.2007 no virus found AVG 7.5.0.467 05.15.2007 no virus found BitDefender 7.2 05.16.2007 no virus found CAT-QuickHeal 9.00 05.15.2007 no virus found ClamAV devel-20070416 05.15.2007 no virus found DrWeb 4.33 05.16.2007 no virus found eSafe 7.0.15.0 05.15.2007 no virus found eTrust-Vet 30.7.3634 05.15.2007 no virus found Aditional Information File size: 385024 bytes MD5: 0d4e3d3495ccdc0232d9196e0d27b23d SHA1: 88b35d74c07a20b237a14abbc8cac6d61e4d04c6

voici le rapport de ce programme STATUS: QUEUEDYour file "iFrmewrk.exe" is queued in position: 25. Estimated start time is between 4 and 6 minutes. Antivirus Version Update Result Aditional Information VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

j'ai trouve ce nomdans program file intel proset wireless

Le processus est IFRMEWRK.EXE Désolé pour la faute en recopiant je ne trouve pas celui-ci non plus !

Bonsoir, Impossible de trouver le fichier sous system32 meme avec les manips demandées comment faire ?

bonsoir, voici la liste des processus : UC A 5/6% WINWORD.EXE : 42000 K0 SVCHOST.EXE : 39000 KO (system) BDSS.EXE : 30000 KO EXPLORER.EXE : 22000 KO VSSERV.EXE : 18800 KO IEXPLORER.EXE : 18000 KO DKSERVICE.EXE : 17000 KO WMPNETWK.EXE : 16200 KO TEATIMER.EXE : 13700 KO ZCFGSVC.EXE : 9000 KO IFMEWRK.EXE : 8800 KO EOUWIZ.EXE : 8000 KO EVTENG.EXE : 7600 KO SVCHOST.EXE : 7200 KO (service local) WLKEEPER.EXE : 6500 KO 1XCONFIG.EXE : 5400 KO SPOOLSV.EXE : 5200 KO SVCHOST.EXE : 5000 KO (SYSTEM) S24EVMON.EXE : 4700 KO SVCHOST.EXE : 4700 KO (SYSTEM) SVCHOST.EXE : 4500 KO (SERVICE RESEAU) J'ai compté 7 svchost au totalsur les 48 processus en fonction Voici le rapport : Merci beaucoup cordialement StartupList report, 15/05/2007, 22:39:41 StartupList version: 1.52.2 Started from : C:\Documents and Settings\Stanislas BOYER\Bureau\HijackThis.EXE Detected: Windows XP SP2 (WinNT 5.01.2600) Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180) * Using default options * Including empty and uninteresting sections * Showing rarely important sections ================================================== Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\ATKKBService.exe C:\Program Files\Executive Software\Diskeeper\DkService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe C:\progra~1\softwin\bitdef~1\bdswitch.exe C:\progra~1\softwin\bitdef~1\bdnagent.exe C:\Program Files\Softwin\BitDefender9\bdoesrv.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\SkypePM.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe C:\Program Files\Softwin\BitDefender9\vsserv.exe c:\progra~1\softwin\bitdef~1\bdmcon.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Stanislas BOYER\Bureau\HijackThis.exe -------------------------------------------------- Listing of startup folders: Shell folders Startup: [C:\Documents and Settings\Stanislas BOYER\Menu Démarrer\Programmes\Démarrage] *No files* Shell folders AltStartup: *Folder not found* User shell folders Startup: *Folder not found* User shell folders AltStartup: *Folder not found* Shell folders Common Startup: [C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage] *No files* Shell folders Common AltStartup: *Folder not found* User shell folders Common Startup: *Folder not found* User shell folders Alternate Common Startup: *Folder not found* -------------------------------------------------- Checking Windows NT UserInit: [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINDOWS\system32\userinit.exe, [HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* [HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] *Registry value not found* [HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon] *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\Run Power_Gear = C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1 IntelZeroConfig = C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe IntelWireless = C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless EOUApp = C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe BDSwitchAgent = "c:\progra~1\softwin\bitdef~1\bdswitch.exe" BDMCon = c:\progra~1\softwin\bitdef~1\bdmcon.exe BDNewsAgent = "c:\progra~1\softwin\bitdef~1\bdnagent.exe" BDOESRV = "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe" SunJavaUpdateSched = "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" QuickTime Task = "C:\Program Files\QuickTime\qttask.exe" -atboottime -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\Run SpybotSD TeaTimer = C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe swg = C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *No values found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *No values found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\Run [OptionalComponents] *No values found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\Run *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce *No subkeys found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- Autorun entries in Registry subkeys of: HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run *Registry key not found* -------------------------------------------------- File association entry for .EXE: HKEY_CLASSES_ROOT\exefile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .COM: HKEY_CLASSES_ROOT\comfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .BAT: HKEY_CLASSES_ROOT\batfile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .PIF: HKEY_CLASSES_ROOT\piffile\shell\open\command (Default) = "%1" %* -------------------------------------------------- File association entry for .SCR: HKEY_CLASSES_ROOT\scrfile\shell\open\command (Default) = "%1" /S -------------------------------------------------- File association entry for .HTA: HKEY_CLASSES_ROOT\htafile\shell\open\command (Default) = C:\WINDOWS\system32\mshta.exe "%1" %* -------------------------------------------------- File association entry for .TXT: HKEY_CLASSES_ROOT\txtfile\shell\open\command (Default) = %SystemRoot%\system32\NOTEPAD.EXE %1 -------------------------------------------------- Enumerating Active Setup stub paths: HKLM\Software\Microsoft\Active Setup\Installed Components (* = disabled by HKCU twin) [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP [>{26923b43-4d38-484f-9b9e-de460746276c}] * StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE [>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] * StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] * StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE [{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] * StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT [{5945c046-1e7d-11d1-bc44-00c04fd912be}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] * StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub [{7790769C-0471-11d2-AF11-00C04FA35D02}] * StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install [{89820200-ECBD-11cf-8B85-00AA005B4340}] * StubPath = regsvr32.exe /s /n /i:U shell32.dll [{89820200-ECBD-11cf-8B85-00AA005B4383}] * StubPath = %SystemRoot%\system32\ie4uinit.exe [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] * StubPath = C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install -------------------------------------------------- Enumerating ICQ Agent Autostart apps: HKCU\Software\Mirabilis\ICQ\Agent\Apps *Registry key not found* -------------------------------------------------- Load/Run keys from C:\WINDOWS\WIN.INI: load=*INI section not found* run=*INI section not found* Load/Run keys from Registry: HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found* HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found* HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found* HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found* HKCU\..\Windows NT\CurrentVersion\Windows: load= HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found* HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=sockspy.dll -------------------------------------------------- Shell & screensaver key from C:\WINDOWS\SYSTEM.INI: Shell=*INI section not found* SCRNSAVE.EXE=*INI section not found* drivers=*INI section not found* Shell & screensaver key from Registry: Shell=Explorer.exe SCRNSAVE.EXE=*Registry value not found* drivers=*Registry value not found* Policies Shell key: HKCU\..\Policies: Shell=*Registry value not found* HKLM\..\Policies: Shell=*Registry value not found* -------------------------------------------------- Checking for EXPLORER.EXE instances: C:\WINDOWS\Explorer.exe: PRESENT! C:\Explorer.exe: not present C:\WINDOWS\Explorer\Explorer.exe: not present C:\WINDOWS\System\Explorer.exe: not present C:\WINDOWS\System32\Explorer.exe: not present C:\WINDOWS\Command\Explorer.exe: not present C:\WINDOWS\Fonts\Explorer.exe: not present -------------------------------------------------- Checking for superhidden extensions: .lnk: HIDDEN! (arrow overlay: yes) .pif: HIDDEN! (arrow overlay: yes) .exe: not hidden .com: not hidden .bat: not hidden .hta: not hidden .scr: not hidden .shs: HIDDEN! .shb: HIDDEN! .vbs: not hidden .vbe: not hidden .wsh: not hidden .scf: HIDDEN! (arrow overlay: NO!) .url: HIDDEN! (arrow overlay: yes) .js: not hidden .jse: not hidden -------------------------------------------------- Verifying REGEDIT.EXE integrity: - Regedit.exe found in C:\WINDOWS - .reg open command is normal (regedit.exe %1) - Regedit.exe has no CompanyName property! It is either missing or named something else. - Regedit.exe has no OriginalFilename property! It is either missing or named something else. - Regedit.exe has no FileDescription property! It is either missing or named something else. Registry check failed! -------------------------------------------------- Enumerating Browser Helper Objects: Skype add-on (mastermind) - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} (no name) - (no file) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} (no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F} (no name) - (no file) - {64F56FC1-1272-44CD-BA6E-39723696E350} (no name) - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (no name) - c:\program files\google\googletoolbar3.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7} -------------------------------------------------- Enumerating Task Scheduler jobs: AppleSoftwareUpdate.job -------------------------------------------------- Enumerating Download Program Files: [asusTek_sysctrl Class] InProcServer32 = C:\WINDOWS\DOWNLO~1\ASUSTE~1.DLL CODEBASE = http://support.asus.com/common/asusTek_sys_ctrl.cab [CKAVWebScan Object] InProcServer32 = C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll CODEBASE = http://webscanner.kaspersky.fr/kavwebscan_unicode.cab [shockwave ActiveX Control] InProcServer32 = C:\WINDOWS\system32\macromed\Director\SwDir.dll CODEBASE = http://download.macromedia.com/pub/shockwa...director/sw.cab [Windows Genuine Advantage Validation Tool] InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204 [installerBehaviorFactory Class] InProcServer32 = C:\WINDOWS\Downloaded Program Files\MsnInstC.dll CODEBASE = https://signup.msn.com/pages/MsnInstC.cab [ewidoOnlineScan Control] InProcServer32 = C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL CODEBASE = http://downloads.ewido.net/ewidoOnlineScan.cab [Trend Micro ActiveX Scan Agent 6.6] InProcServer32 = C:\WINDOWS\Downloaded Program Files\Housecall_ActiveX.dll CODEBASE = http://eu-housecall.trendmicro-europe.com/...ivex/hcImpl.cab [shockwave ActiveX Control] InProcServer32 = C:\WINDOWS\system32\Macromed\Director\SwDir.dll CODEBASE = http://fpdownload.macromedia.com/pub/shock...director/sw.cab [Office Update Installation Engine] InProcServer32 = C:\WINDOWS\opuc.dll CODEBASE = http://office.microsoft.com/officeupdate/content/opuc3.cab [symantec RuFSI Utility Class] InProcServer32 = C:\WINDOWS\Downloaded Program Files\rufsi.dll CODEBASE = http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab [MUWebControl Class] InProcServer32 = C:\WINDOWS\system32\muweb.dll CODEBASE = http://update.microsoft.com/microsoftupdat...b?1129121560234 [HouseCall Control] InProcServer32 = C:\WINDOWS\DOWNLO~1\xscan53.ocx CODEBASE = http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab [Java Plug-in 1.6.0_01] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll CODEBASE = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab [{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}] CODEBASE = http://fpdownload.macromedia.com/get/flash...t/ultrashim.cab [ActiveScan Installer Class] InProcServer32 = C:\WINDOWS\Downloaded Program Files\asinst.dll CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab [MsnMessengerSetupDownloadControl Class] InProcServer32 = C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx CODEBASE = http://messenger.msn.com/download/MsnMesse...pDownloader.cab [Java Plug-in 1.5.0_09] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [Java Plug-in 1.5.0_10] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [Java Plug-in 1.6.0_01] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll CODEBASE = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab [Java Plug-in 1.6.0_01] InProcServer32 = C:\Program Files\Java\jre1.6.0_01\bin\npjpi160_01.dll CODEBASE = http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab [shockwave Flash Object] InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx CODEBASE = http://fpdownload.macromedia.com/get/flash...ent/swflash.cab -------------------------------------------------- Enumerating Winsock LSP files: NameSpace #1: C:\WINDOWS\System32\mswsock.dll NameSpace #2: C:\WINDOWS\System32\winrnr.dll NameSpace #3: C:\WINDOWS\System32\mswsock.dll Protocol #1: C:\WINDOWS\system32\mswsock.dll Protocol #2: C:\WINDOWS\system32\mswsock.dll Protocol #3: C:\WINDOWS\system32\mswsock.dll Protocol #4: C:\WINDOWS\system32\mswsock.dll Protocol #5: C:\WINDOWS\system32\rsvpsp.dll Protocol #6: C:\WINDOWS\system32\rsvpsp.dll Protocol #7: C:\WINDOWS\system32\mswsock.dll Protocol #8: C:\WINDOWS\system32\mswsock.dll Protocol #9: C:\WINDOWS\system32\mswsock.dll Protocol #10: C:\WINDOWS\system32\mswsock.dll Protocol #11: C:\WINDOWS\system32\mswsock.dll Protocol #12: C:\WINDOWS\system32\mswsock.dll Protocol #13: C:\WINDOWS\system32\mswsock.dll Protocol #14: C:\WINDOWS\system32\mswsock.dll Protocol #15: C:\WINDOWS\system32\mswsock.dll Protocol #16: C:\WINDOWS\system32\mswsock.dll Protocol #17: C:\WINDOWS\system32\mswsock.dll Protocol #18: C:\WINDOWS\system32\mswsock.dll Protocol #19: C:\WINDOWS\system32\mswsock.dll Protocol #20: C:\WINDOWS\system32\mswsock.dll Protocol #21: C:\WINDOWS\system32\mswsock.dll Protocol #22: C:\WINDOWS\system32\mswsock.dll Protocol #23: C:\WINDOWS\system32\mswsock.dll Protocol #24: C:\WINDOWS\system32\mswsock.dll -------------------------------------------------- Enumerating Windows NT/2000/XP services Pilote ACPI Microsoft: system32\DRIVERS\ACPI.sys (system) Pilote de contrôleur intégré Microsoft: system32\DRIVERS\ACPIEC.sys (system) Adobe LM Service: "C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe" (manual start) Suppresseur d'écho acoustique (Noyau Microsoft): system32\drivers\aec.sys (manual start) AEGIS Protocol (IEEE 802.1x) v3.2.0.3: system32\DRIVERS\AegisP.sys (autostart) AFD: \SystemRoot\System32\drivers\afd.sys (system) Avertissement: %SystemRoot%\system32\svchost.exe -k LocalService (disabled) Service de la passerelle de la couche Application: %SystemRoot%\System32\alg.exe (manual start) Gestion d'applications: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Protocole client ARP 1394: system32\DRIVERS\arp1394.sys (manual start) aslm75: \??\C:\WINDOWS\system32\drivers\aslm75.sys (system) Service d'état ASP.NET: %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (manual start) Asushwio: \??\C:\WINDOWS\system32\drivers\Asushwio.sys (manual start) Enhanced Display Driver Helper Service: system32\drivers\atkkbnt.sys (system) Pilote de média asynchrone RAS: system32\DRIVERS\asyncmac.sys (manual start) Contrôleur de disque dur IDE/ESDI standard: system32\DRIVERS\atapi.sys (system) Ati HotKey Poller: %SystemRoot%\system32\Ati2evxx.exe (autostart) ati2mtag: system32\DRIVERS\ati2mtag.sys (manual start) ATK Keyboard Service: C:\WINDOWS\ATKKBService.exe (autostart) Protocole client ATM ARP: system32\DRIVERS\atmarpc.sys (manual start) Audio Windows: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote audio Stub: system32\DRIVERS\audstub.sys (manual start) bdfdll: \??\C:\Program Files\Softwin\BitDefender9\bdfdll.sys (manual start) BDFsDrv: \??\C:\Program Files\Softwin\BitDefender9\bdfsdrv.sys (manual start) BDRsDrv: \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys (manual start) BitDefender Scan Server: "C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (autostart) Service de transfert intelligent en arrière-plan: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Explorateur d'ordinateur: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Décodeur sous-titre fermé: system32\DRIVERS\CCDECODE.sys (manual start) Pilote de CD-ROM: system32\DRIVERS\cdrom.sys (system) Service d'indexation: %SystemRoot%\system32\cisvc.exe (manual start) Gestionnaire de l'Album: %SystemRoot%\system32\clipsrv.exe (disabled) .NET Runtime Optimization Service v2.0.50727_X86: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (manual start) Pilote pour Batterie à méthode de contrôle ACPI Microsoft: system32\DRIVERS\CmBatt.sys (manual start) Pilote de batterie composite Microsoft: system32\DRIVERS\compbatt.sys (system) Application système COM+: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start) Services de cryptographie: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Lanceur de processus serveur DCOM: %SystemRoot%\system32\svchost -k DcomLaunch (autostart) Client DHCP: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Pilote de disque: system32\DRIVERS\disk.sys (system) Diskeeper: "C:\Program Files\Executive Software\Diskeeper\DkService.exe" (autostart) Service d'administration du Gestionnaire de disque logique: %SystemRoot%\System32\dmadmin.exe /com (manual start) dmboot: System32\drivers\dmboot.sys (disabled) Pilote de Gestionnaire de disque logique: System32\drivers\dmio.sys (system) dmload: System32\drivers\dmload.sys (system) Gestionnaire de disque logique: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Synthétiseur DLS du noyau Microsoft: system32\drivers\DMusic.sys (manual start) Client DNS: %SystemRoot%\system32\svchost.exe -k NetworkService (autostart) Filtre de décodeur DRM (Noyau Microsoft): system32\drivers\drmkaud.sys (manual start) Service de rapport d'erreurs: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Journal des événements: %SystemRoot%\system32\services.exe (autostart) Système d'événements de COM+: C:\WINDOWS\system32\svchost.exe -k netsvcs (manual start) EvtEng: C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (autostart) Compatibilité avec le Changement rapide d'utilisateur: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) FILESpy: \??\C:\Program Files\Softwin\BitDefender9\filespy.sys (autostart) FltMgr: system32\DRIVERS\fltMgr.sys (system) Windows Presentation Foundation Font Cache 3.0.0.0: C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (manual start) Pilote du Gestionnaire de volume: system32\DRIVERS\ftdisk.sys (system) GEARAspiWDM: System32\Drivers\GEARAspiWDM.sys (manual start) gmer: System32\DRIVERS\gmer.sys (manual start) Classificateur de paquets générique: system32\DRIVERS\msgpc.sys (manual start) Google Updater Service: "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" (manual start) Pilote de fonction Microsoft UAA pour Service High Definition Audio: system32\drivers\HdAudio.sys (manual start) Pilote de bus Microsoft UAA pour High Definition Audio: system32\DRIVERS\HDAudBus.sys (manual start) Aide et support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) HID Input Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote de classe HID Microsoft: system32\DRIVERS\hidusb.sys (manual start) HSFHWAZL: system32\DRIVERS\HSFHWAZL.sys (manual start) HSF_DP: system32\DRIVERS\HSF_DP.sys (manual start) HTTP: System32\Drivers\HTTP.sys (manual start) HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start) Pilote pour clavier i8042 et souris sur port PS/2: system32\DRIVERS\i8042prt.sys (system) InstallDriver Table Manager: "C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe" (manual start) Windows CardSpace: "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" (manual start) Pilote de filtre de gravure CD: system32\DRIVERS\imapi.sys (system) Service COM de gravage de CD IMAPI: C:\WINDOWS\system32\imapi.exe (manual start) Service for Realtek HD Audio (WDM): system32\drivers\RtkHDAud.sys (manual start) IntelIde: system32\DRIVERS\intelide.sys (system) Pilote de processeur Intel: system32\DRIVERS\intelppm.sys (system) Pilote du pare-feu Windows IPv6: system32\DRIVERS\Ip6Fw.sys (manual start) Pilote de filtre de trafic IP: system32\DRIVERS\ipfltdrv.sys (manual start) Pilote de tunnelage IP dans IP: system32\DRIVERS\ipinip.sys (manual start) Traducteur d'adresses réseau IP: system32\DRIVERS\ipnat.sys (manual start) Service de l'iPod: "C:\Program Files\iPod\bin\iPodService.exe" (manual start) Pilote IPSEC: system32\DRIVERS\ipsec.sys (system) Protocole IrDA: system32\DRIVERS\irda.sys (autostart) Service énumérateur IR: system32\DRIVERS\irenum.sys (manual start) Moniteur infrarouge: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Pilote série infrarouge Microsoft: system32\DRIVERS\irsir.sys (manual start) Pilote de bus Plug-and-Play ISA/EISA: system32\DRIVERS\isapnp.sys (system) Intel Wireless Connection Agent Miniport for Win XP: system32\DRIVERS\iwca.sys (manual start) Pilote de la classe Clavier: system32\DRIVERS\kbdclass.sys (system) Pilote HID de clavier: system32\DRIVERS\kbdhid.sys (system) Mélangeur audio Wave de noyau Microsoft: system32\drivers\kmixer.sys (manual start) Serveur: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Station de travail: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) BitDefender Desktop Update Service: "C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (autostart) Assistance TCP/IP NetBIOS: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) Machine Debug Manager: "C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE" (autostart) mdmxsdk: system32\DRIVERS\mdmxsdk.sys (autostart) Affichage des messages: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled) Partage de Bureau à distance NetMeeting: C:\WINDOWS\system32\mnmsrvc.exe (manual start) Pilote de la classe Souris: system32\DRIVERS\mouclass.sys (system) Pilote HID de souris: system32\DRIVERS\mouhid.sys (manual start) Redirecteur client WebDav: system32\DRIVERS\mrxdav.sys (manual start) MRXSMB: system32\DRIVERS\mrxsmb.sys (system) Distributed Transaction Coordinator: C:\WINDOWS\system32\msdtc.exe (manual start) Windows Installer: C:\WINDOWS\system32\msiexec.exe /V (manual start) Proxy de service de répartition Microsoft: system32\drivers\MSKSSRV.sys (manual start) Proxy d'horloge de répartition Microsoft: system32\drivers\MSPCLOCK.sys (manual start) Proxy de gestion de qualité de répartition Microsoft: system32\drivers\MSPQM.sys (manual start) Pilote BIOS de gestion de systèmes Microsoft: system32\DRIVERS\mssmbios.sys (manual start) Convertisseur en T/site-à-site de répartition Microsoft: system32\drivers\MSTEE.sys (manual start) ATK0100 ACPI UTILITY: system32\DRIVERS\ATKACPI.sys (manual start) Codec NABTS/FEC VBI: system32\DRIVERS\NABTSFEC.sys (manual start) Connection TV/vidéo Microsoft: system32\DRIVERS\NdisIP.sys (manual start) Pilote TAPI NDIS d'accès distant: system32\DRIVERS\ndistapi.sys (manual start) NDIS mode utilisateur E/S Protocole: system32\DRIVERS\ndisuio.sys (manual start) Pilote réseau étendu NDIS d'accès distant: system32\DRIVERS\ndiswan.sys (manual start) Interface NetBIOS: system32\DRIVERS\netbios.sys (system) NetBIOS sur TCP/IP: system32\DRIVERS\netbt.sys (system) DDE réseau: %SystemRoot%\system32\netdde.exe (disabled) DSDM DDE réseau: %SystemRoot%\system32\netdde.exe (disabled) Ouverture de session réseau: %SystemRoot%\system32\lsass.exe (manual start) Connexions réseau: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Net.Tcp Port Sharing Service: "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" (disabled) Pilote réseau 1394: system32\DRIVERS\nic1394.sys (manual start) NLA (Network Location Awareness): %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Fournisseur de la prise en charge de sécurité LM NT: %SystemRoot%\system32\lsass.exe (manual start) Stockage amovible: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Pilote de filtre de trafic IPX: system32\DRIVERS\nwlnkflt.sys (manual start) Pilote de transfert de trafic IPX: system32\DRIVERS\nwlnkfwd.sys (manual start) Contrôleurs hôte IEEE 1394 compatible OHCI: system32\DRIVERS\ohci1394.sys (system) Office Source Engine: "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE" (manual start) OwnershipProtocol: C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe (autostart) Pilote de port parallèle: system32\DRIVERS\parport.sys (manual start) Pilote de bus PCI: system32\DRIVERS\pci.sys (system) PCIIde: system32\DRIVERS\pciide.sys (system) Pcmcia: system32\DRIVERS\pcmcia.sys (system) Plug-and-Play: %SystemRoot%\system32\services.exe (autostart) Services IPSEC: %SystemRoot%\system32\lsass.exe (autostart) Miniport réseau étendu (PPTP): system32\DRIVERS\raspptp.sys (manual start) Emplacement protégé: %SystemRoot%\system32\lsass.exe (autostart) Planificateur de paquets QoS: system32\DRIVERS\psched.sys (manual start) Pilote de liaison parallèle directe: system32\DRIVERS\ptilink.sys (manual start) R592: system32\DRIVERS\R592.sys (system) Pilote de connexion automatique d'accès distant: system32\DRIVERS\rasacd.sys (system) Gestionnaire de connexion automatique d'accès distant: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Miniport réseau étendu (IrDA): system32\DRIVERS\rasirda.sys (manual start) Miniport réseau étendu (L2TP): system32\DRIVERS\rasl2tp.sys (manual start) Gestionnaire de connexions d'accès distant: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start) Pilote PPPOE d'accès à distance: system32\DRIVERS\raspppoe.sys (manual start) Parallèle direct: system32\DRIVERS\raspti.sys (manual start) Rdbss: system32\DRIVERS\rdbss.sys (system) RDPCDD: System32\DRIVERS\RDPCDD.sys (system) Pilote de redirecteur de périphérique Terminal Server: system32\DRIVERS\rdpdr.sys (manual start) Gestionnaire de session d'aide sur le Bureau à distance: C:\WINDOWS\system32\sessmgr.exe (manual start) Pilote de filtre de lecture digitale de CD audio: system32\DRIVERS\redbook.sys (system) REGSpy: \??\C:\Program Files\Softwin\BitDefender9\regspy.sys (autostart) RegSrvc: C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (autostart) Routage et accès distant: %SystemRoot%\system32\svchost.exe -k netsvcs (disabled) Accès à distance au Registre: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) risdpntk: system32\DRIVERS\risdpntk.sys (system) Localisateur d'appels de procédure distante (RPC): %SystemRoot%\system32\locator.exe (manual start) Appel de procédure distante (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart) QoS RSVP: %SystemRoot%\system32\rsvp.exe (manual start) Spectrum24 Event Monitor: C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (autostart) Transport RLAN: system32\DRIVERS\s24trans.sys (autostart) Gestionnaire de comptes de sécurité: %SystemRoot%\system32\lsass.exe (autostart) Pilote de bus de transport/protocole SBP-2: system32\DRIVERS\sbp2port.sys (system) Carte à puce: %SystemRoot%\System32\SCardSvr.exe (manual start) Planificateur de tâches: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) sdbus: system32\DRIVERS\sdbus.sys (manual start) Secdrv: system32\DRIVERS\secdrv.sys (manual start) Connexion secondaire: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Notification d'événement système: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Pare-feu Windows / Partage de connexion Internet: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Détection matériel noyau: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Détrameur décalage BDA: system32\DRIVERS\SLIP.sys (manual start) Splitter audio du noyau Microsoft: system32\drivers\splitter.sys (manual start) Spouleur d'impression: %SystemRoot%\system32\spoolsv.exe (autostart) Pilote de filtre de restauration système: system32\DRIVERS\sr.sys (system) Service de restauration système: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Srv: system32\DRIVERS\srv.sys (manual start) Service de découvertes SSDP: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) Acquisition d'image Windows (WIA): %SystemRoot%\system32\svchost.exe -k imgsvc (autostart) BDA IPSink: system32\DRIVERS\StreamIP.sys (manual start) Pilote de bus logiciel: system32\DRIVERS\swenum.sys (manual start) Synthétiseur de table de sons GC noyau Microsoft: system32\drivers\swmidi.sys (manual start) MS Software Shadow Copy Provider: C:\WINDOWS\system32\dllhost.exe /Processid:{F90F3D88-61C2-41AD-B4EE-46A2C59AD088} (manual start) USB2.0 1.3M Web Cam: System32\Drivers\SynMini.sys (manual start) USB2.0 1.3M Web Cam Still Image: System32\Drivers\SynScan.sys (manual start) Synaptics TouchPad Driver: system32\DRIVERS\SynTP.sys (manual start) Périphérique audio système du noyau Microsoft: system32\drivers\sysaudio.sys (manual start) Journaux et alertes de performance: %SystemRoot%\system32\smlogsvc.exe (manual start) Téléphonie: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Pilote du protocole TCP/IP: system32\DRIVERS\tcpip.sys (system) Pilote de périphérique terminal: system32\DRIVERS\termdd.sys (system) Services Terminal Server: %SystemRoot%\System32\svchost -k DComLaunch (manual start) Thèmes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Telnet: C:\WINDOWS\system32\tlntsvr.exe (disabled) TLRecAgent: \??\C:\WINDOWS\system32\drivers\TLRecAgent.sys (autostart) tmcomm: \??\C:\WINDOWS\system32\drivers\tmcomm.sys (autostart) Client de suivi de lien distribué: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart) Pilote de mise à jour microcode: system32\DRIVERS\update.sys (manual start) Hôte de périphérique universel Plug-and-Play: %SystemRoot%\system32\svchost.exe -k LocalService (manual start) Onduleur: %SystemRoot%\System32\ups.exe (manual start) Pilote USB audio (WDM): system32\drivers\usbaudio.sys (manual start) Pilote parent générique USB Microsoft: system32\DRIVERS\usbccgp.sys (manual start) Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0: system32\DRIVERS\usbehci.sys (manual start) Concentrateur USB2: system32\DRIVERS\usbhub.sys (manual start) Pilote de stockage de masse USB: system32\DRIVERS\USBSTOR.SYS (manual start) Pilote miniport de contrôleur hôte universel USB Microsoft: system32\DRIVERS\usbuhci.sys (manual start) VgaSave: \SystemRoot\System32\drivers\vga.sys (system) ASUS Video3D Service: System32\Drivers\Video3D.sys (manual start) Cliché instantané de volume: %SystemRoot%\System32\vssvc.exe (manual start) BitDefender Virus Shield: "C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (autostart) Pilote de carte de connexion réseau Intel® PRO/Wireless 2200BG pour Windows XP: system32\DRIVERS\w29n51.sys (manual start) Horloge Windows: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Pilote ARP IP d'accès distant: system32\DRIVERS\wanarp.sys (manual start) Pilote WINMM de compatibilité audio WDM Microsoft: system32\drivers\wdmaud.sys (manual start) WebClient: %SystemRoot%\system32\svchost.exe -k LocalService (autostart) winachsf: system32\DRIVERS\HSF_CNXT.sys (manual start) Infrastructure de gestion Windows: %systemroot%\system32\svchost.exe -k netsvcs (autostart) WLANKEEPER: C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe (autostart) Service de numéro de série du lecteur multimédia portable: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Extensions du pilote WMI: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) Carte de performance WMI: C:\WINDOWS\system32\wbem\wmiapsrv.exe (manual start) Service Partage réseau du Lecteur Windows Media: "C:\Program Files\Windows Media Player\WMPNetwk.exe" (autostart) Centre de sécurité: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) Codec Teletext standard: system32\DRIVERS\WSTCODEC.SYS (manual start) Mises à jour automatiques: %systemroot%\system32\svchost.exe -k netsvcs (autostart) Windows Driver Foundation - User-mode Driver Framework Platform Driver: system32\DRIVERS\WudfPf.sys (manual start) Windows Driver Foundation - User-mode Driver Framework Reflector: system32\DRIVERS\wudfrd.sys (manual start) Windows Driver Foundation - User-mode Driver Framework: %SystemRoot%\system32\svchost.exe -k WudfServiceGroup (manual start) Configuration automatique sans fil: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart) BitDefender Communicator: "C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (autostart) Service d'approvisionnement réseau: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start) NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller: system32\DRIVERS\yk51x86.sys (manual start) -------------------------------------------------- Enumerating Windows NT logon/logoff scripts: *No scripts set to run* Windows NT checkdisk command: BootExecute = autocheck autochk * Windows NT 'Wininit.ini': PendingFileRenameOperations: *Registry value not found* -------------------------------------------------- Enumerating ShellServiceObjectDelayLoad items: PostBootReminder: C:\WINDOWS\system32\SHELL32.dll CDBurn: C:\WINDOWS\system32\SHELL32.dll WebCheck: C:\WINDOWS\system32\webcheck.dll SysTray: C:\WINDOWS\system32\stobject.dll WPDShServiceObj: C:\WINDOWS\system32\WPDShServiceObj.dll -------------------------------------------------- Autorun entries from Registry: HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *Registry key not found* -------------------------------------------------- Autorun entries from Registry: HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run *No values found* -------------------------------------------------- End of report, 41 871 bytes Report generated in 0,109 seconds Command line options: /verbose - to add additional info on each section /complete - to include empty sections and unsuspicious data /full - to include several rarely-important sections /force9x - to include Win9x-only startups even if running on WinNT /forcent - to include WinNT-only startups even if running on Win9x /forceall - to include all Win9x and WinNT startups, regardless of platform /history - to list version history only

Ok, tout est fait. Cela à l'air mieux c vrai, en ce moment l'UC tourne à 4/6% avec 49 processus... je n'ai que internet d'ouvert. De plus il à demarré plus vite et l'UC n'est restée que qq secondes à 100% ce qui n'était pasle cas au début de mon message J'ai une bonne dizaine de processus qui utilisent + de 5000ko de mémoire, c'est normal ?

Bonjour, Tu vois la liste des applications qui se lancent ? Oui je veux bien - attention je suis novice en informatique en espérant que cela ne soit pas compliqué. Merci

OUI c'est directement au démarrage, L'UC reste à 100% pendant 5/8minutes sans que rien ne soit lancé. Si je veux tenter de lancer qq chose pendant cette période là c'est encore plus long. Toutefois, depuis aujourd'hui et pour la première fois depuis le début de mon message je n'ai pas eu de soucis pour demarrer. Ce que je trouve bizarre, c'est d'avoir entre 50 et 60 processus qui tournent dont certains qui utilisent beaucoup de mémoire...mais je n'y connait rien! Voici le rapport - Merci FPort v2.0 - TCP/IP Process to Port Mapper Copyright 2000 by Foundstone, Inc. http://www.foundstone.com Pid Process Port Proto Path 1620 -> 10243 TCP 1684 -> 1029 TCP 1436 -> 135 TCP 1992 -> 2869 TCP 760 DkService -> 31038 TCP C:\Program Files\Executive Software\Diskeeper\DkService.exe 0 System -> 135 TCP 4 System -> 139 TCP 4 System -> 445 TCP 984 msnmsgr -> 1940 TCP C:\Program Files\MSN Messenger\msnmsgr.exe 984 msnmsgr -> 1943 TCP C:\Program Files\MSN Messenger\msnmsgr.exe 984 msnmsgr -> 1944 TCP C:\Program Files\MSN Messenger\msnmsgr.exe 2904 vsserv -> 10025 TCP C:\Program Files\Softwin\BitDefender9\vsserv.exe 2904 vsserv -> 10110 TCP C:\Program Files\Softwin\BitDefender9\vsserv.exe 1992 -> 1025 UDP 1620 -> 1076 UDP 1684 -> 1900 UDP 1436 -> 445 UDP 760 DkService -> 1373 UDP C:\Program Files\Executive Software\Diskeeper\DkService.exe 0 System -> 1886 UDP 0 System -> 1900 UDP 0 System -> 1905 UDP 0 System -> 4500 UDP 4 System -> 500 UDP 4 System -> 9 UDP 984 msnmsgr -> 123 UDP C:\Program Files\MSN Messenger\msnmsgr.exe 984 msnmsgr -> 137 UDP C:\Program Files\MSN Messenger\msnmsgr.exe 984 msnmsgr -> 138 UDP C:\Program Files\MSN Messenger\msnmsgr.exe 2904 vsserv -> 123 UDP C:\Program Files\Softwin\BitDefender9\vsserv.exe 2904 vsserv -> 1230 UDP C:\Program Files\Softwin\BitDefender9\vsserv.exe PsList 1.26 - Process Information Lister Copyright © 1999-2004 Mark Russinovich Sysinternals - www.sysinternals.com Process information for SB-PORTABLE: Name Pid Pri Thd Hnd VM WS Priv Idle 0 0 1 0 0 28 0 System 4 8 71 887 1904 264 0 smss 948 11 3 21 3828 704 168 csrss 1044 13 11 650 26560 6136 1660 winlogon 1088 13 25 540 57836 892 8104 services 1132 9 15 319 21436 6088 1780 iPodService 488 8 11 120 36844 7420 2664 spoolsv 644 8 10 140 47416 11684 3340 ATKKBService 740 8 2 26 14944 3492 328 DkService 760 8 14 272 89672 24436 13796 svchost 844 8 8 92 36636 9836 1544 MDM 860 8 4 90 34740 8140 1032 OProtSvc 896 8 6 119 32236 6536 1436 RegSrvc 972 8 3 75 21316 5328 680 wmiapsrv 1216 8 3 146 36804 10576 1596 ati2evxx 1296 8 5 61 20320 5204 572 svchost 1328 8 20 221 65112 11924 3280 1XConfig 4092 8 11 228 39552 8884 2404 svchost 1436 8 10 449 37924 10380 2020 svchost 1492 8 6 125 38328 11056 2704 xcommsvr 1592 8 2 126 13700 5272 292 wmpnetwk 1620 8 16 307 81752 22208 10740 svchost 1636 8 79 1561 138464 29936 14144 EvtEng 1680 8 8 132 181808 13532 4140 alg 1684 8 5 104 33264 9296 1372 S24EvMon 1788 8 7 178 43592 10728 2720 WLKEEPER 1824 8 5 110 44096 12776 3076 svchost 1888 8 4 77 29420 9228 1248 svchost 1992 8 20 282 48264 13916 3624 bdss 2672 8 6 171 77348 30912 29220 vsserv 2904 8 13 322 71980 18964 16076 livesrv 3648 8 3 143 25240 3364 1120 lsass 1144 9 18 374 40900 1320 3780 ZCfgSvc 3424 8 5 139 53632 14904 4284 ati2evxx 3544 8 6 64 26288 5712 920 bdmcon 2572 8 10 228 70628 2312 8688 explorer 3680 8 17 612 117368 33492 23508 bdnagent 536 8 1 11 7656 2560 272 acrotray 676 8 2 30 30144 8232 988 IEXPLORE 688 8 11 822 186856 60952 39456 msnmsgr 984 8 11 532 114724 9068 15264 wmpnscfg 1016 8 6 118 35852 9384 1600 bdoesrv 1560 8 1 16 25276 6472 952 cmd 2060 8 1 21 14464 1720 1684 pslist 2960 13 2 104 18360 1916 1048 wcourier 2388 8 1 19 27848 7484 1132 SynTPLpr 2396 8 4 72 23436 5468 1012 SynTPEnh 2408 8 4 91 36932 9820 1740 BatteryLife 2452 8 1 33 25428 6748 872 iFrmewrk 2508 8 4 141 52980 14932 5572 HControl 2524 8 4 161 50132 13288 5188 ATKOSD 3988 8 1 20 27784 8696 1024 EOUWiz 2536 8 4 134 48272 13828 4124 bdswitch 3172 8 1 27 15400 4124 648 atiptaxx 3348 8 2 92 37244 10168 3488 realsched 3384 8 4 102 36692 220 1420 iTunesHelper 3532 8 4 89 41680 10512 1908 softmngr 3540 8 1 55 32152 200 1380 TeaTimer 3824 4 3 80 47816 19636 12252 GoogleToolbarNotifier 4016 8 6 194 50756 1844 3464 ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ explorer.exe pid: 3680 Command line: C:\WINDOWS\Explorer.EXE Base Size Version Path 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x77ef0000 0x47000 5.01.2600.3099 C:\WINDOWS\system32\GDI32.dll 0x7e390000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f40000 0x76000 6.00.2900.3086 C:\WINDOWS\system32\SHLWAPI.dll 0x7c9d0000 0x823000 6.00.2900.3051 C:\WINDOWS\system32\SHELL32.dll 0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x75f10000 0xfd000 6.00.2900.3086 C:\WINDOWS\system32\BROWSEUI.dll 0x7e210000 0x16f000 6.00.2900.3086 C:\WINDOWS\system32\SHDOCVW.dll 0x6fee0000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77aa0000 0xa7000 6.00.2900.3086 C:\WINDOWS\system32\WININET.dll 0x10000000 0x36000 C:\WINDOWS\system32\sockspy.dll 0x77390000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76920000 0x8000 5.01.2600.2751 C:\WINDOWS\system32\LINKINFO.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x7df30000 0xa0000 6.00.2900.3086 C:\WINDOWS\system32\urlmon.dll 0x76d10000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x63000000 0x13000 7.12.0009.0000 C:\WINDOWS\system32\SynTPFcs.dll 0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll 0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll 0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll 0x72c60000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x01860000 0x20000 9.00.0000.0000 C:\Program Files\Softwin\BitDefender9\bdoe.dll 0x01ad0000 0x15000 1.08.0011.0000 C:\WINDOWS\system32\XCOMM.dll 0x7c340000 0x56000 7.10.3052.0004 C:\WINDOWS\system32\MSVCR71.dll 0x011e0000 0x1c000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll 0x01350000 0xa000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.FRA 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x77210000 0xb1000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x01c60000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x02850000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x16200000 0x6000 4.01.0000.0000 C:\PROGRA~1\WINZIP\WZSHLSTB.DLL 0x029d0000 0x8e000 7.00.0000.1333 C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll 0x7c140000 0x103000 7.10.3077.0000 C:\WINDOWS\system32\MFC71.DLL 0x7c3a0000 0x7b000 7.10.3077.0000 C:\WINDOWS\system32\MSVCP71.dll 0x5d360000 0xf000 7.10.3077.0000 C:\WINDOWS\system32\MFC71FRA.DLL 0x01c10000 0x4e000 7.00.0000.1333 C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.fra 0x01440000 0x12000 1.00.0000.0003 C:\Program Files\Softwin\BitDefender9\bdshelxt.dll 0x02a60000 0x27e000 5.02.5721.5145 C:\WINDOWS\system32\wpdshext.dll 0x07160000 0x46000 5.02.5721.5145 C:\WINDOWS\system32\Audiodev.dll 0x15110000 0x25a000 11.00.5721.5145 C:\WINDOWS\system32\WMVCore.DLL 0x11c70000 0x39000 11.00.5721.5145 C:\WINDOWS\system32\WMASF.DLL 0x748f0000 0x10e000 8.70.1113.0000 C:\WINDOWS\system32\msxml3.dll 0x75be0000 0x6e000 5.06.0000.8831 C:\WINDOWS\system32\jscript.dll 0x76ed0000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76f70000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x60510000 0x18000 2.00.50727.0042 C:\WINDOWS\system32\dfshim.dll 0x79000000 0x45000 2.00.50727.0042 C:\WINDOWS\system32\mscoree.dll 0x641f0000 0x1d000 2.00.50727.0042 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Shfusion.dll 0x78130000 0x9b000 8.00.50727.0042 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll 0x60610000 0x6000 2.00.50727.0042 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Fusion.dll 0x60340000 0x8000 2.00.50727.0042 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll 0x64220000 0x18000 2.00.50727.0042 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fr\ShFusRes.dll 0x01e00000 0xd5000 1.04.0000.0000 C:\PROGRA~1\SPYBOT~1\SDHelper.dll 0x325c0000 0x12000 11.00.5510.0000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll 0x60980000 0x7000 3.01.4000.1823 C:\WINDOWS\system32\MSISIP.DLL 0x74e10000 0x10000 5.06.0000.8820 C:\WINDOWS\system32\wshext.dll 0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL 0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL 0x59000000 0xe000 5.06.0000.6626 C:\WINDOWS\system32\wshFR.DLL 0x36d30000 0x1a000 11.00.6551.0000 C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ IEXPLORE.EXE pid: 688 Command line: "C:\Program Files\Internet Explorer\IEXPLORE.EXE" Base Size Version Path 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x7e390000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77ef0000 0x47000 5.01.2600.3099 C:\WINDOWS\system32\GDI32.dll 0x77f40000 0x76000 6.00.2900.3086 C:\WINDOWS\system32\SHLWAPI.dll 0x7e210000 0x16f000 6.00.2900.3086 C:\WINDOWS\system32\SHDOCVW.dll 0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x6fee0000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77aa0000 0xa7000 6.00.2900.3086 C:\WINDOWS\system32\WININET.dll 0x10000000 0x36000 C:\WINDOWS\system32\sockspy.dll 0x77390000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x7c9d0000 0x823000 6.00.2900.3051 C:\WINDOWS\system32\SHELL32.dll 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x00a60000 0x20000 9.00.0000.0000 C:\Program Files\Softwin\BitDefender9\bdoe.dll 0x00a80000 0x15000 1.08.0011.0000 C:\WINDOWS\system32\XCOMM.dll 0x7c340000 0x56000 7.10.3052.0004 C:\WINDOWS\system32\MSVCR71.dll 0x63000000 0x13000 7.12.0009.0000 C:\WINDOWS\system32\SynTPFcs.dll 0x75f10000 0xfd000 6.00.2900.3086 C:\WINDOWS\system32\BROWSEUI.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x7df30000 0xa0000 6.00.2900.3086 C:\WINDOWS\system32\urlmon.dll 0x01230000 0x387000 4.00.1601.4978 c:\program files\google\googletoolbar3.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x748f0000 0x10e000 8.70.1113.0000 C:\WINDOWS\system32\msxml3.dll 0x76d10000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll 0x01ec0000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x011f0000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x02010000 0xb1000 2.02.0000.0078 C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL 0x74bf0000 0x2c000 4.02.5406.0000 C:\WINDOWS\system32\OLEACC.dll 0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x02300000 0x1c9000 1.00.0001.0150 C:\Program Files\Skype\toolbars\Shared\SPhoneParser.dll 0x77210000 0xb1000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x035d0000 0xd5000 1.04.0000.0000 C:\PROGRA~1\SPYBOT~1\SDHelper.dll 0x6d7c0000 0x79000 6.00.0010.0006 C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll 0x76ed0000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76f70000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x7dbf0000 0x2f5000 6.00.2900.3086 C:\WINDOWS\system32\mshtml.dll 0x019c0000 0x27000 3.10.0349.0000 C:\WINDOWS\system32\msls31.dll 0x325c0000 0x12000 11.00.5510.0000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll 0x75be0000 0x6e000 5.06.0000.8831 C:\WINDOWS\system32\jscript.dll 0x672b0000 0x40000 6.00.2900.3086 C:\WINDOWS\system32\iepeers.dll 0x6c270000 0x36000 6.03.2900.3086 C:\WINDOWS\system32\dxtrans.dll 0x6c2b0000 0x5a000 6.03.2900.3086 C:\WINDOWS\system32\dxtmsft.dll 0x5e680000 0xc000 6.00.2900.3086 C:\WINDOWS\system32\pngfilt.dll 0x761c0000 0x71000 6.00.2900.3086 C:\WINDOWS\system32\mshtmled.dll 0x30000000 0x2ef000 9.00.0045.0000 C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx 0x72c60000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x07120000 0x1c000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll 0x07160000 0xa000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.FRA 0x72fd0000 0x1c000 5.01.2600.0000 C:\WINDOWS\system32\rsvpsp.dll 0x73250000 0x67000 5.06.0000.8820 C:\WINDOWS\system32\vbscript.dll 0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL 0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL 0x79000000 0x45000 2.00.50727.0042 C:\WINDOWS\system32\mscoree.dll 0x63f00000 0xc000 2.00.50727.0042 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll 0x78130000 0x9b000 8.00.50727.0042 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ winlogon.exe pid: 1088 Command line: winlogon.exe Base Size Version Path 0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x77680000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll 0x7e390000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77ef0000 0x47000 5.01.2600.3099 C:\WINDOWS\system32\GDI32.dll 0x6fee0000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x7c9d0000 0x823000 6.00.2900.3051 C:\WINDOWS\system32\SHELL32.dll 0x77f40000 0x76000 6.00.2900.3086 C:\WINDOWS\system32\SHLWAPI.dll 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x77390000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x776a0000 0x24000 6.00.2900.3051 C:\WINDOWS\system32\SHSVCS.dll 0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x21000000 0x2e000 9.00.0002.0011 C:\WINDOWS\system32\IWPDGINA.DLL 0x10000000 0xd000 9.00.0002.0011 C:\Program Files\Intel\Wireless\Bin\SsoGnFRA.dll 0x77210000 0xb1000 5.01.2600.3019 C:\WINDOWS\system32\sxs.dll 0x00fe0000 0x10000 6.14.0010.4114 C:\WINDOWS\system32\Ati2evxx.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x76d10000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x01110000 0x1e000 9.00.0002.0011 C:\Program Files\Intel\Wireless\Bin\LgNotify.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x72c60000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x76ed0000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ services.exe pid: 1132 Command line: C:\WINDOWS\system32\services.exe Base Size Version Path 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x7e390000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77ef0000 0x47000 5.01.2600.3099 C:\WINDOWS\system32\GDI32.dll 0x77680000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll 0x7dbc0000 0x21000 5.01.2600.2744 C:\WINDOWS\system32\umpnpmgr.dll 0x6fee0000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x47260000 0xf000 5.01.2600.3008 C:\WINDOWS\AppPatch\AcAdProc.dll Le volume dans le lecteur C s'appelle Disque local Le numéro de série du volume est 685F-7DAD Répertoire de C:\Program Files 14/05/2007 23:27 <REP> . 14/05/2007 23:27 <REP> .. 06/11/2006 17:35 <REP> ACD Systems 07/10/2005 15:08 <REP> Adobe 15/09/2006 23:39 <REP> Album Cover Art Downloader 06/11/2006 17:43 <REP> ASUS 28/09/2005 18:32 <REP> ATI Technologies 09/05/2007 21:47 <REP> CCleaner 03/02/2006 00:40 <REP> Cloanto 28/09/2005 18:42 <REP> Conexant 27/02/2007 23:25 <REP> Connection Free téléphonique 27/08/2006 12:02 <REP> Connexion Santa Ponsa 05/10/2005 15:49 <REP> DivX 27/10/2006 18:13 <REP> eBay 24/11/2005 18:27 <REP> El Juky 28/09/2005 20:01 <REP> Executive Software 04/05/2007 22:48 <REP> Fichiers communs 08/05/2007 01:19 <REP> FLV Player 08/05/2007 01:07 25 990 392 FLV PlayerRCSetup.exe 21/02/2007 11:22 <REP> Free 21/02/2007 11:23 <REP> FreeDial 14/05/2007 21:52 <REP> Google 06/11/2006 00:11 <REP> HDD Health 30/09/2005 13:52 <REP> HighMAT CD Writing Wizard 28/09/2005 19:06 <REP> Intel 14/05/2007 21:52 <REP> Internet Explorer 18/03/2007 15:35 <REP> iPod 14/05/2007 21:53 <REP> iTunes 14/05/2007 23:26 <REP> Java 29/11/2005 16:50 <REP> Lavalys 11/10/2005 14:05 <REP> Lavasoft 28/09/2005 19:44 <REP> Messenger 18/10/2005 17:55 <REP> Micro Application 28/09/2005 18:10 <REP> microsoft frontpage 09/05/2006 18:47 <REP> Microsoft Office 28/09/2005 20:20 <REP> Microsoft Visual Studio 13/02/2006 00:22 <REP> Microsoft Works 28/09/2005 18:06 <REP> Movie Maker 05/05/2007 13:52 <REP> MSBuild 28/09/2005 18:04 <REP> MSN 28/09/2005 18:05 <REP> MSN Gaming Zone 05/05/2007 02:01 <REP> MSN Messenger 20/10/2006 20:11 <REP> MSXML 4.0 05/05/2007 13:55 <REP> MSXML 6.0 05/10/2005 15:49 <REP> MUSK Codec Pack v5 28/09/2005 18:07 <REP> NetMeeting 01/10/2006 12:33 <REP> OfficeUpdate11 28/09/2005 18:05 <REP> Online Services 13/12/2006 19:18 <REP> Outlook Express 08/03/2007 21:46 <REP> QuickTime 13/09/2006 23:52 <REP> QuickTime(2) 02/02/2006 20:13 <REP> Real 28/09/2005 18:36 <REP> Realtek 05/05/2007 13:47 <REP> Reference Assemblies 24/11/2005 19:15 <REP> RegCleaner 08/05/2007 01:07 <REP> Replay Converter 28/09/2005 18:07 <REP> Services en ligne 20/02/2007 01:19 <REP> Skype 28/09/2005 19:17 <REP> Softwin 14/05/2007 21:59 <REP> Spybot - Search & Destroy 28/09/2005 18:42 <REP> Synaptics 27/10/2006 18:17 <REP> TLink 28/09/2005 22:34 <REP> Voissa anonymo 15/12/2005 17:28 <REP> Windows Media Connect 27/01/2007 01:24 <REP> Windows Media Connect 2 14/05/2007 21:59 <REP> Windows Media Player 28/09/2005 18:04 <REP> Windows NT 05/11/2006 23:43 <REP> WinRAR 05/05/2007 02:03 <REP> WinZip 28/09/2005 18:10 <REP> xerox 1 fichier(s) 25 990 392 octets 69 Rép(s) 23 760 445 440 octets libres Le volume dans le lecteur C s'appelle Disque local Le numéro de série du volume est 685F-7DAD Répertoire de C:\ 12/05/2007 18:22 68 096 diff.exe 12/05/2007 18:22 103 424 grep.exe Répertoire de C:\ 12/05/2007 18:22 68 096 diff.exe 12/05/2007 18:22 103 424 grep.exe 4 fichier(s) 343 040 octets 0 Rép(s) 23 760 441 344 octets libres C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.1.1.5\iTunesSetupAdmin.exe C:\Documents and Settings\Stanislas BOYER\.housecall6.6\getMac.exe C:\Documents and Settings\Stanislas BOYER\.housecall6.6\patch.exe C:\Documents and Settings\Stanislas BOYER\.housecall6.6\tsc.exe C:\Documents and Settings\Stanislas BOYER\Application Data\EoRezo\tmp.exe C:\Documents and Settings\Stanislas BOYER\Application Data\Macromedia\Flash Player\#SharedObjects\TLRLMM3E\localhost\Program Files\FLV Player\FLVPlayer.exe C:\Documents and Settings\Stanislas BOYER\Application Data\Microsoft\Installer\{8212DB78-3A02-43DF-9097-55281ADC558C}\ARPPRODUCTICON.exe C:\Documents and Settings\Stanislas BOYER\Application Data\Microsoft\Installer\{8212DB78-3A02-43DF-9097-55281ADC558C}\EuroCalculator.exe C:\Documents and Settings\Stanislas BOYER\Application Data\Microsoft\Installer\{8212DB78-3A02-43DF-9097-55281ADC558C}\NewShortcut3.exe C:\Documents and Settings\Stanislas BOYER\Application Data\Microsoft\Installer\{8212DB78-3A02-43DF-9097-55281ADC558C}\NewShortcut4.exe C:\Documents and Settings\Stanislas BOYER\Bureau\gmer.exe C:\Documents and Settings\Stanislas BOYER\Bureau\HijackThis.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\catchme.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\diff.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\dumphive.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\FilesInfoCmd.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\find2.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\Fport.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\grep.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\LFiles.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\LISTDLLS.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\pslist.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\streams.exe C:\Documents and Settings\Stanislas BOYER\Bureau\DiagHelp\swreg.exe C:\Documents and Settings\Stanislas BOYER\Local Settings\Temporary Internet Files\Content.IE5\S7M5SHEH\CA4TY7W9.exe%26spell%3D1&cc=100&flash=9&u_h=800&u_w=1280&u_ah=800&u_aw=1280&u_cd=32&u_tz=120&u_java=true

Voici le rapport, Ok pour le reste de la procédure demandée Merci Cordialement GMER 1.0.12.12244 - http://www.gmer.net Rootkit scan 2007-05-14 23:51:32 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.12 ---- SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwClose SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwCreateKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwDeleteKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwDeleteValueKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwEnumerateKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwEnumerateValueKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwFlushKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwLoadKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwOpenKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwQueryKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwQueryValueKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwSetValueKey SSDT \??\C:\Program Files\Softwin\BitDefender9\bdrsdrv.sys ZwUnloadKey ---- Kernel code sections - GMER 1.0.12 ---- ? C:\WINDOWS\system32\DRIVERS\update.sys ---- User code sections - GMER 1.0.12 ---- .text C:\Program Files\iPod\bin\iPodService.exe[488] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Adobe\Acrobat 7.0\Distillr\acrotray.exe[676] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 10002D10 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 10002CA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!bind 719F3E00 5 Bytes JMP 10003020 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!connect 719F406A 5 Bytes JMP 10002DA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!send 719F428A 5 Bytes JMP 10002AA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 10002D70 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!listen 719F88D3 5 Bytes JMP 10002A60 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 10003060 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\MSN Messenger\msnmsgr.exe[984] WS2_32.dll!accept 71A01028 5 Bytes JMP 10002F30 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Windows Media Player\wmpnscfg.exe[1016] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\system32\wbem\wmiapsrv.exe[1216] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Softwin\BitDefender9\bdoesrv.exe[1560] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 10002D10 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 10002CA0 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!bind 719F3E00 5 Bytes JMP 10003020 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!connect 719F406A 5 Bytes JMP 10002DA0 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!send 719F428A 5 Bytes JMP 10002AA0 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 10002D70 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!listen 719F88D3 5 Bytes JMP 10002A60 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 10003060 C:\WINDOWS\System32\sockspy.dll .text C:\WINDOWS\system32\alg.exe[1684] WS2_32.dll!accept 71A01028 5 Bytes JMP 10002F30 C:\WINDOWS\System32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 10002D10 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 10002CA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!bind 719F3E00 5 Bytes JMP 10003020 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!connect 719F406A 5 Bytes JMP 10002DA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!send 719F428A 5 Bytes JMP 10002AA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 10002D70 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!listen 719F88D3 5 Bytes JMP 10002A60 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 10003060 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Internet Explorer\IEXPLORE.EXE[1860] WS2_32.dll!accept 71A01028 5 Bytes JMP 10002F30 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\ASUS\Wireless Console\wcourier.exe[2388] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Synaptics\SynTP\SynTPLpr.exe[2396] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[2408] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe[2452] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 00843090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe[2508] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 00363090 C:\WINDOWS\system32\sockspy.dll .text ... .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 00B42D10 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 00B42CA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!bind 719F3E00 5 Bytes JMP 00B43020 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!connect 719F406A 5 Bytes JMP 00B42DA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!send 719F428A 5 Bytes JMP 00B42AA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 00B42D70 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!listen 719F88D3 5 Bytes JMP 00B42A60 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 00B43060 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe[2536] WS2_32.dll!accept 71A01028 5 Bytes JMP 00B42F30 C:\WINDOWS\system32\sockspy.dll .text C:\Documents and Settings\Stanislas BOYER\Bureau\gmer.exe[2588] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe[3172] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[3348] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe[3384] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 00AB3090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 00AB2D10 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 00AB2CA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!bind 719F3E00 5 Bytes JMP 00AB3020 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!connect 719F406A 5 Bytes JMP 00AB2DA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!send 719F428A 5 Bytes JMP 00AB2AA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 00AB2D70 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!listen 719F88D3 5 Bytes JMP 00AB2A60 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 00AB3060 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe[3424] WS2_32.dll!accept 71A01028 5 Bytes JMP 00AB2F30 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\iTunes\iTunesHelper.exe[3532] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 10002D10 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 10002CA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!bind 719F3E00 5 Bytes JMP 10003020 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!connect 719F406A 5 Bytes JMP 10002DA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!send 719F428A 5 Bytes JMP 10002AA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 10002D70 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!listen 719F88D3 5 Bytes JMP 10002A60 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 10003060 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Fichiers communs\Cloanto\Software Manager\softmngr.exe[3540] WS2_32.dll!accept 71A01028 5 Bytes JMP 10002F30 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\system32\ati2evxx.exe[3544] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 10002D10 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 10002CA0 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!bind 719F3E00 5 Bytes JMP 10003020 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!connect 719F406A 5 Bytes JMP 10002DA0 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!send 719F428A 5 Bytes JMP 10002AA0 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 10002D70 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!listen 719F88D3 5 Bytes JMP 10002A60 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 10003060 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\explorer.exe[3680] WS2_32.dll!accept 71A01028 5 Bytes JMP 10002F30 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[3824] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\WINDOWS\ATK0100\ATKOSD.exe[3988] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10003090 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 10002D10 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 10002CA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!bind 719F3E00 5 Bytes JMP 10003020 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!connect 719F406A 5 Bytes JMP 10002DA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!send 719F428A 5 Bytes JMP 10002AA0 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 10002D70 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!listen 719F88D3 5 Bytes JMP 10002A60 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 10003060 C:\WINDOWS\system32\sockspy.dll .text C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe[4016] WS2_32.dll!accept 71A01028 5 Bytes JMP 10002F30 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 003C3090 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!sendto 719F2C69 5 Bytes JMP 003C2D10 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!recvfrom 719F2D0F 5 Bytes JMP 003C2CA0 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!bind 719F3E00 5 Bytes JMP 003C3020 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!connect 719F406A 5 Bytes JMP 003C2DA0 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!send 719F428A 5 Bytes JMP 003C2AA0 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!gethostbyname 719F4FD4 5 Bytes JMP 003C2D70 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!listen 719F88D3 5 Bytes JMP 003C2A60 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!closesocket 719F9639 5 Bytes JMP 003C3060 C:\WINDOWS\system32\sockspy.dll .text C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe[4092] WS2_32.dll!accept 71A01028 5 Bytes JMP 003C2F30 C:\WINDOWS\system32\sockspy.dll ---- EOF - GMER 1.0.12 ----