lorette

Coucou ! Bonjour à vous tous Voilà, le changement de pile est fait, j'ai aussi nettoyé le ventilateur, j'ai tout rebranché, et allumé mon ordi. au démarrage, beaucoup de bruit, je me suis dit que j'avais mal revissé le ventilateur , ou qu' il fallait peut-être mettre de la pâte thermique que j'avais endommagé .... Coté BIOS, nikel ! Donc je fais un redemarrage, et la Woaouh ! plus aucun bruit à peine un doux ronronnement de chat qui dort en s'approchant tout pret de la colonne .... et l'heure à nouveau en place, trop bien ! Vraiement je vous remercie, sans vous tous, jamais je n'aurais osé faire tout ça ! Et en prime, je sais que j'ai un ordi qui n'est pas infecté ! Voilà, le sujet est clos, merci, et bonne continuation à votre équipe de choc super sympatique !

Après réflexion , je pense que la première chose à faire c'est de changer la pile ... Je reviendrais vous voir dés que c'est fait, pour finir le nettoyage. Bonne soirée Jeanmimigab, et toute l'équipe, à trés bientôt ! ( je croise les doigts quand même, même si j'ai déjà réussi à réparer ma mobylette, ma machine à coudre, ma chasse d'eau, et la serrure de ma boite aux lettres

ZHPfiixe s'est effacé lui même, mais c'est tout , tout le reste est resté, et le redémarrage à été difficile, en plusieurs fois ... il faut que je le réinstalle et recommence ?

Voilà ! l'ordinateur ne trouve "eorezo" que dans les fichiers ZHP, donc je pense que c'est bon ! Par contre, je me souviens l'avoir déjà supprimé il y a longtemps avec d'ailleurs l'aide de votre équipe (Falkra, je crois ) Comment est-il revenu ? associé à autre chose ? Et puis aujourdh'ui, ma page internet s'ouvre avec MSN , que je ne veux pas utiliser, et pareil, il s'installe tout seul ? Ma fille qui partage ma connection avec son ordinateur portable l'utilise... Est ce pour celà ? Sinon, j'aimerai bien nettoyer vraiement toutes sortes de choses que mon fils avait installer, dont il reste des traces me semble-il, magrés l'utilisation de Glary Utilities ... ( Dofus, Cyberlink ...) En fait je ne voudrais garder que le nécéssaire. Sinon, demain j'irai acheter une pile, et je la changerai moi même si possible, mais je ne trouve plus le tuto que j'avais repéré hier sur le forum ... Et encore merci, merci merci !

Bonjour Jeanmimibag, voici le rapport : Rapport de ZHPFix 1.12.3249 par Nicolas Coolman, Update du 03/02/2011 Fichier d'export Registre : Run by Méthylène at 06/02/2011 11:27:08 Windows Vista Home Basic Edition, 32-bit (Build 6000) Web site : ZHPFix Fix de rapport Contact : nicolascoolman@yahoo.fr ========== Clé(s) du Registre ========== P2 - FPN: [HKLM] [@bittorrent.com/BitTorrentDNA] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DNA\plugins\npbtdna.dll (.not file.) => Clé supprimée avec succès HKLM\Software\BrowserChoice => Clé supprimée avec succès O64 - Services: CurCS - (.not file.) - bfastfao (bfastfao) .(.Pas de propriétaire - Pas de description.) - LEGACY_BFASTFAO => Clé supprimée avec succès ========== Valeur(s) du Registre ========== R3 - URLSearchHook: (no name) - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} Clé orpheline => Valeur absente O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll => Valeur supprimée avec succès O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll => Valeur supprimée avec succès TCP Query User{5962D0F2-A15C-4AD1-8BC5-21EE572ACCE9}C:\program files\eorezo\eodesk3d\itstv.exe => Valeur supprimée avec succès UDP Query User{5E8396DE-00F5-4685-B851-F4EAA903F8D0}C:\program files\eorezo\eodesk3d\itstv.exe => Valeur supprimée avec succès ========== Fichier(s) ========== c:\program files\dna\plugins\npbtdna.dll => Fichier absent oobefldr.dll => Fichier absent c:\documents and settings\méthylène\desktop\ad-r.exe - raccourci.lnk => Supprimé et mis en quarantaine c:\users\méthylène\downloads\ad-r.exe => Fichier absent c:\users\méthylène\desktop\ad-r.exe - raccourci.lnk => Fichier absent c:\users\méthylène\appdata\roaming\microsoft\internet explorer\quick launch\corbeille - raccourci.lnk => Supprimé et mis en quarantaine c:\program files\eorezo => Fichier absent ========== Récapitulatif ========== 3 : Clé(s) du Registre 5 : Valeur(s) du Registre 7 : Fichier(s) End of the scan

Jeanmmigab, comme il est tard, je te souhaite une bonne nuit, ainsi qu'à toute votre équipe ! hé oui, j'espère que vous arrivez à deccrocher un peu de tout ce boulot pour vous reposer ! Et encore merci pour cette aide sympathique !

Alors c'est celui là ! Rapport de ZHPDiag v1.27.1525 par Nicolas Coolman, Update du 04/02/2011 Run by Méthylène at 05/02/2011 22:00:49 Web site : ZHPDiag Outil de diagnostic Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18904 ---\\ System Information Windows Vista Home Basic Edition, 32-bit (Build 6000) Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 446 MB (29% free) System Restore: Activé (Enable) System drive C: has 23 GB (32%) free of 71 GB ---\\ Logged in mode Computer Name: PC-DE-UTILISATE User Name: Méthylène All Users Names: Méthylène, Jean-Claude, Administrateur, Unselected Option: O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ Environnement Variables %AppData%=%USERPROFILE%\AppData\Roaming %LocalAppData%=%USERPROFILE%\AppData\Local %StartMenu%=%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu ---\\ DOS/Devices A:\ Floppy drive, Flash card reader, USB Key (Not Inserted) C:\ Hard drive, Flash drive, Thumb drive (Free 23 Go of 71 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 71 Go of 71 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK ---\\ Recherche particulière de fichiers génériques [MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.29/10/2008 07:20:29.) -- C:\Windows\Explorer.exe [2923520] [MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.02/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744] [MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.02/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224] [MD5.B35CFCEF838382AB6490B321C87EDF17] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.31/05/2008 02:15:35.) -- C:\Windows\System32\drivers\atapi.sys [21560] [MD5.37430AA7A66D7A63407ADC2C0D05E9F6] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/05/2008 02:16:07.) -- C:\Windows\System32\drivers\ntfs.sys [1060920] ---\\ Processus lancés [MD5.5B415BF2C6C572C63A9D8FCA0750F17D] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [625152] ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@bittorrent.com/BitTorrentDNA] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DNA\plugins\npbtdna.dll (.not file.) P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Web Player\npdivx32.dll (.not file.) P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_23 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.) ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook (R0,R1,R3) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN : Hotmail, Messenger, Bing, Actualité et Sport R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN : Hotmail, Messenger, Bing, Actualité et Sport R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Sign In R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Sign In R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R3 - URLSearchHook: (no name) - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} Clé orpheline R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\AD-R.exe - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Downloads\AD-R.exe (.not file.) O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\AD-R.lnk . (.Pas de propriétaire.) -- C:\Program Files\Ad-Remover\main.exe O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\Downloads - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\Downloads O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\Lamastre en scène - Janvier 2011 - - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Jean-Claude\Pictures\Lamastre\Lamastre en scène - Janvier 2011 -.jpg O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\OTL.exe - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Méthylène\Downloads\OTL.exe O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\tdsskiller.zip - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Downloads\tdsskiller.zip O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\TFC.exe - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Méthylène\Downloads\TFC.exe O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\ZHPDiag analyse du 05.02.11 à 15h.17 - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\ZHPDiag analyse du 05.02.11 à 15h.17 O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\ZHPDiag.Txt 05.02.11 21h.17.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\ZHPDiag.Txt 05.02.11 21h.17 O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\Méthylène\Desktop\AD-R.exe - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Downloads\AD-R.exe (.not file.) O4 - Global Startup: C:\Users\Méthylène\Desktop\AD-R.lnk . (.Pas de propriétaire.) -- C:\Program Files\Ad-Remover\main.exe O4 - Global Startup: C:\Users\Méthylène\Desktop\Downloads - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\Downloads O4 - Global Startup: C:\Users\Méthylène\Desktop\Lamastre en scène - Janvier 2011 - - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Jean-Claude\Pictures\Lamastre\Lamastre en scène - Janvier 2011 -.jpg O4 - Global Startup: C:\Users\Méthylène\Desktop\OTL.exe - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Méthylène\Downloads\OTL.exe O4 - Global Startup: C:\Users\Méthylène\Desktop\tdsskiller.zip - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Downloads\tdsskiller.zip O4 - Global Startup: C:\Users\Méthylène\Desktop\TFC.exe - Raccourci.lnk . (.OldTimer Tools.) -- C:\Users\Méthylène\Downloads\TFC.exe O4 - Global Startup: C:\Users\Méthylène\Desktop\ZHPDiag analyse du 05.02.11 à 15h.17 - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\ZHPDiag analyse du 05.02.11 à 15h.17 O4 - Global Startup: C:\Users\Méthylène\Desktop\ZHPDiag.Txt 05.02.11 21h.17.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\ZHPDiag.Txt 05.02.11 21h.17 O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Adobe Reader 8.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Avira AntiVir Control Center.lnk . (.Avira GmbH.) -- C:\Program Files\Avira\AntiVir Desktop\avcenter.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk . (.Pas de propriétaire.) -- C:\Program Files\BitTorrent\bittorrent.exe (.not file.) O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Choix de navigateur .lnk . (.Microsoft Corporation.) -- C:\Windows\System32\browserchoice.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Corbeille - Raccourci.lnk - Clé orpheline O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\AppData\Roaming\Desktopicon\eBayShortcuts.exe (.not file.) O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Notepad.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\notepad.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Paint.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\mspaint.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoFiltre.lnk . (.Pas de propriétaire.) -- C:\Program Files\PhotoFiltre\PhotoFiltre.exe (.not file.) O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Wordpad.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows NT\Accessories\wordpad.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{249F92C2-9DDB-4DB7-9377-F637A15A8603}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{249F92C2-9DDB-4DB7-9377-F637A15A8603}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{249F92C2-9DDB-4DB7-9377-F637A15A8603}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (aawservice) . (.Lavasoft - Ad-Aware Service.) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe O23 - Service: (CLCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLCapSvc.exe O23 - Service: (CLSched) . (.Pas de propriétaire - CLSched Module.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLSched.exe O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.) ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job [MD5.6745EF9F67D02E1BDDE0D3A1E4C9E7C8] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe [MD5.36932522D014499D7F7B1BB921D05842] [APT] [{38400038-1B91-4FF7-8C92-80AEEF5A8F9B}] (.InstallShield Software Corporation.) -- C:\Windows\IsUn040c.exe [MD5.00000000000000000000000000000000] [APT] [{3ADBE876-B623-4140-B92B-B170BBB9BC18}] (.Pas de propriétaire.) -- c:\Users\kalifa_le_boss!\Downloads\INSTALL_MSN_MESSENGER_NT.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{47FDE0C0-F6B2-4CF9-83A2-04E9D44A8D23}] (.Pas de propriétaire.) -- C:\Users\M‚thylŠne\AppData\Roaming\Mozilla\Firefox\Profiles\ztwj9hls.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{4D9A19FE-1C79-4531-BC5D-3B88435102CD}] (.Pas de propriétaire.) -- C:\Program Files\EA SPORTS\LFP Manager 06\EAUninstall.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{B5D7D6BD-5AC9-4AD5-9991-65C8B8F79A62}] (.Pas de propriétaire.) -- C:\Users\M‚thylŠne\TransXP_2.2\Install3D.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{CA35EFC5-F420-476A-BFEF-DC0FD6ACB643}] (.Pas de propriétaire.) -- C:\Users\M‚thylŠne\Desktop\OpenOffice.org 2.3 Installation Files\instmsiw.exe (.not file.) ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\System32\DRIVERS\avipbb.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ---\\ Logiciels installés (O42) O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2} O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35} O42 - Logiciel: Acer eDataSecurity Management - (.Acer Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A35} O42 - Logiciel: Acer eMode Management - (.Pas de propriétaire.) [HKLM] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761} O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643} O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- {DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {B194272D-1F92-46DF-99EB-8D5CE91CB4EC} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 8.2.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A82000000003} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: Détecteur de flux Windows Live Toolbar (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM] -- {175B7C4A-CAF8-437A-B597-73E0D2D970FE} O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1} O42 - Logiciel: GameSpy Arcade - (.Pas de propriétaire.) [HKLM] -- GameSpy Arcade O42 - Logiciel: Glary Utilities 2.31.0.1098 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Encoder (KB929182) - (.Microsoft Corporation.) [HKLM] -- KB929182 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31} O42 - Logiciel: Java 6 Update 23 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216010FF} O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050} O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7} O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5} O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d} O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre O42 - Logiciel: Phototool 1.8 - (.Telepix Imaging Inc.) [HKLM] -- Phototool 1.8 O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Sid Meier's Civilization 4 - (.Firaxis Games.) [HKCU] -- {CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8} O42 - Logiciel: USB Video Driver - (.EETI.) [HKLM] -- {2758691A-2CDE-4942-A4AC-0E8F61FE2067} O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52} O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353} ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ATI Technologies Inc.] [HKCU\Software\Ad-Remover] [HKCU\Software\Adobe] [HKCU\Software\America Online] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\Yahoo] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Avira] [HKCU\Software\Battle.net] [HKCU\Software\Blizzard Entertainment] [HKCU\Software\Bugsplat] [HKCU\Software\Camfrog] [HKCU\Software\ClassesB] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CyberLink] [HKCU\Software\DivXNetworks] [HKCU\Software\GameSpy] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\IM Providers] [HKCU\Software\INCAInternet] [HKCU\Software\InstallShield] [HKCU\Software\JavaSoft] [HKCU\Software\Lavasoft] [HKCU\Software\Lexmark 5400 Series] [HKCU\Software\Lexmark] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\NewTech Infosystems] [HKCU\Software\Ntreev] [HKCU\Software\Oberon Media] [HKCU\Software\PHOTOTOOL] [HKCU\Software\Parisprog] [HKCU\Software\Pointsoft] [HKCU\Software\Policies] [HKCU\Software\Primal] [HKCU\Software\RegDokFR] [HKCU\Software\SSSI] [HKCU\Software\SecuROM] [HKCU\Software\Stoik Screen Savers] [HKCU\Software\Symantec] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\Valve] [HKCU\Software\Winamp Toolbar] [HKCU\Software\Wise Solutions] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yahoo] [HKCU\Software\Zylom] [HKCU\Software\acer] [HKCU\Software\ej-technologies] [HKLM\Software\ABBYY] [HKLM\Software\ATI Technologies] [HKLM\Software\Acer] [HKLM\Software\Adobe] [HKLM\Software\America Online] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Avira] [HKLM\Software\Borland] [HKLM\Software\BrowserChoice] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CyberLink] [HKLM\Software\Dofus 2] [HKLM\Software\DsNETCorp] [HKLM\Software\EA SPORTS] [HKLM\Software\Electronic Arts] [HKLM\Software\Firaxis Games] [HKLM\Software\FullCircle] [HKLM\Software\GlarySoft] [HKLM\Software\Google] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Lavasoft] [HKLM\Software\Lexmark] [HKLM\Software\Licenses] [HKLM\Software\LightScribe] [HKLM\Software\Macrogaming] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Neuf] [HKLM\Software\NewTech Infosystems] [HKLM\Software\Ntreev] [HKLM\Software\ODBC] [HKLM\Software\OldTimer Tools] [HKLM\Software\Policies] [HKLM\Software\RegisteredApplications] [HKLM\Software\Sierra OnLine] [HKLM\Software\SkyMessager] [HKLM\Software\SymDebug] [HKLM\Software\Symantec] [HKLM\Software\Valve] [HKLM\Software\Volatile] [HKLM\Software\Winamp Toolbar] [HKLM\Software\X-AVCSD] [HKLM\Software\Yahoo] [HKLM\Software\Zemi Interactive] [HKLM\Software\mozilla.org] ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 05/02/2011 - 13:53:40 ----D- C:\Program Files\Ad-Remover O43 - CFD: 22/01/2011 - 08:27:06 ----D- C:\Program Files\Adobe O43 - CFD: 04/07/2009 - 05:35:54 ----D- C:\Program Files\Avira O43 - CFD: 03/02/2011 - 15:27:22 ----D- C:\Program Files\Common Files O43 - CFD: 06/10/2010 - 08:30:12 ----D- C:\Program Files\CyberLink O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\Program Files\Fichiers communs O43 - CFD: 22/01/2011 - 08:38:14 ----D- C:\Program Files\GameSpy Arcade O43 - CFD: 16/01/2011 - 22:46:08 ----D- C:\Program Files\Glary Utilities O43 - CFD: 22/01/2011 - 14:53:00 ----D- C:\Program Files\Google O43 - CFD: 21/01/2011 - 15:52:20 --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 09/10/2010 - 14:33:22 ----D- C:\Program Files\Internet Explorer O43 - CFD: 28/12/2010 - 11:01:00 ----D- C:\Program Files\Java O43 - CFD: 29/05/2008 - 16:52:46 ----D- C:\Program Files\Lavasoft O43 - CFD: 27/08/2010 - 09:31:42 ----D- C:\Program Files\Lx_cats O43 - CFD: 06/10/2010 - 08:35:02 ----D- C:\Program Files\ma-config.com O43 - CFD: 31/03/2008 - 09:11:38 ----D- C:\Program Files\Macrogaming O43 - CFD: 05/12/2006 - 00:01:20 ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 19/01/2011 - 16:32:34 ----D- C:\Program Files\Mega Bloc Notes O43 - CFD: 17/12/2008 - 14:08:10 ----D- C:\Program Files\Microsoft O43 - CFD: 12/12/2007 - 07:41:10 ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 28/11/2010 - 14:47:00 ----D- C:\Program Files\Microsoft Games O43 - CFD: 17/12/2008 - 14:11:36 ----D- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 17/12/2008 - 14:15:12 ----D- C:\Program Files\Microsoft Sync Framework O43 - CFD: 12/03/2010 - 14:10:20 ----D- C:\Program Files\Movie Maker O43 - CFD: 02/11/2006 - 13:35:52 ----D- C:\Program Files\MSBuild O43 - CFD: 02/11/2006 - 13:35:52 ----D- C:\Program Files\MSN O43 - CFD: 06/06/2010 - 13:10:58 ----D- C:\Program Files\Navilog1 O43 - CFD: 11/12/2007 - 10:39:30 ----D- C:\Program Files\Neuf O43 - CFD: 18/01/2011 - 10:17:02 ----D- C:\Program Files\NewTech Infosystems O43 - CFD: 22/01/2011 - 08:38:12 ----D- C:\Program Files\PhotoFiltre O43 - CFD: 22/01/2011 - 08:38:12 ----D- C:\Program Files\Phototool O43 - CFD: 09/10/2010 - 14:38:46 ----D- C:\Program Files\QuickTime O43 - CFD: 02/11/2006 - 13:35:52 ----D- C:\Program Files\Reference Assemblies O43 - CFD: 09/11/2010 - 09:24:44 ----D- C:\Program Files\TalonSoft O43 - CFD: 04/02/2011 - 09:00:40 ----D- C:\Program Files\trend micro O43 - CFD: 17/09/2010 - 12:32:20 ----D- C:\Program Files\Ubi Soft O43 - CFD: 21/09/2009 - 08:19:42 ----D- C:\Program Files\USB TV O43 - CFD: 12/12/2007 - 07:59:02 ----D- C:\Program Files\Windows Calendar O43 - CFD: 02/11/2006 - 13:40:02 ----D- C:\Program Files\Windows Collaboration O43 - CFD: 12/12/2007 - 07:58:58 ----D- C:\Program Files\Windows Defender O43 - CFD: 21/01/2011 - 15:54:14 ----D- C:\Program Files\Windows Live O43 - CFD: 17/12/2008 - 14:07:08 ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD: 17/12/2008 - 14:15:54 ----D- C:\Program Files\Windows Live Toolbar O43 - CFD: 14/04/2010 - 12:52:44 ----D- C:\Program Files\Windows Mail O43 - CFD: 10/05/2010 - 07:48:34 ----D- C:\Program Files\Windows Media Player O43 - CFD: 24/02/2007 - 10:32:54 ----D- C:\Program Files\Windows NT O43 - CFD: 02/11/2006 - 13:40:02 ----D- C:\Program Files\Windows Photo Gallery O43 - CFD: 31/05/2008 - 02:20:12 ----D- C:\Program Files\Windows Sidebar O43 - CFD: 05/02/2011 - 22:01:08 ----D- C:\Program Files\ZHPDiag O43 - CFD: 14/04/2010 - 13:08:16 ----D- C:\Program Files\Common Files\Adobe O43 - CFD: 28/08/2010 - 15:19:44 ----D- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 03/02/2011 - 15:27:22 ----D- C:\Program Files\Common Files\Borland Shared O43 - CFD: 21/09/2008 - 07:11:16 ----D- C:\Program Files\Common Files\EasyInfo O43 - CFD: 24/02/2007 - 10:43:56 ----D- C:\Program Files\Common Files\InstallShield O43 - CFD: 28/10/2010 - 15:16:36 ----D- C:\Program Files\Common Files\Java O43 - CFD: 15/12/2006 - 16:15:42 ----D- C:\Program Files\Common Files\LightScribe O43 - CFD: 18/01/2011 - 22:27:30 ----D- C:\Program Files\Common Files\microsoft shared O43 - CFD: 09/05/2008 - 06:14:18 ----D- C:\Program Files\Common Files\NSV O43 - CFD: 14/07/2009 - 12:58:18 ----D- C:\Program Files\Common Files\PX Storage Engine O43 - CFD: 02/11/2006 - 12:18:34 ----D- C:\Program Files\Common Files\Services O43 - CFD: 02/11/2006 - 12:18:34 ----D- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 02/07/2008 - 07:43:56 ----D- C:\Program Files\Common Files\Steam O43 - CFD: 06/04/2009 - 18:27:04 ----D- C:\Program Files\Common Files\Symantec Shared O43 - CFD: 12/12/2007 - 07:59:00 ----D- C:\Program Files\Common Files\System O43 - CFD: 17/12/2008 - 13:55:48 ----D- C:\Program Files\Common Files\Windows Live O43 - CFD: 11/12/2007 - 13:50:32 -SH-D- C:\Program Files\Common Files\WindowsLiveInstaller O43 - CFD: 04/12/2006 - 23:04:50 ----D- C:\ProgramData\Adobe O43 - CFD: 03/09/2009 - 13:29:30 ----D- C:\ProgramData\AOL Downloads O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Application Data O43 - CFD: 04/07/2009 - 05:35:54 ----D- C:\ProgramData\Avira O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Bureau O43 - CFD: 17/05/2008 - 09:33:34 ----D- C:\ProgramData\CyberLink O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Desktop O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Documents O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Favoris O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Favorites O43 - CFD: 01/01/2008 - 18:04:20 ----D- C:\ProgramData\Google O43 - CFD: 24/02/2007 - 10:44:10 ----D- C:\ProgramData\InstallShield O43 - CFD: 10/05/2010 - 07:48:34 ----D- C:\ProgramData\Lavasoft O43 - CFD: 06/10/2010 - 08:35:02 ----D- C:\ProgramData\ma-config.com O43 - CFD: 27/02/2009 - 19:06:08 ----D- C:\ProgramData\Malwarebytes O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Menu Démarrer O43 - CFD: 05/12/2006 - 00:22:10 -S--D- C:\ProgramData\Microsoft O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Modèles O43 - CFD: 10/03/2008 - 15:25:32 ----D- C:\ProgramData\pixelStorm O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Start Menu O43 - CFD: 27/04/2010 - 19:33:22 ----D- C:\ProgramData\Sun O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Templates O43 - CFD: 14/07/2009 - 12:59:16 ----D- C:\ProgramData\Winamp Toolbar O43 - CFD: 16/03/2008 - 09:44:38 ----D- C:\ProgramData\WLInstaller O43 - CFD: 02/05/2008 - 09:00:42 ----D- C:\Users\Méthylène\AppData\Roaming\5400 Series O43 - CFD: 02/12/2009 - 16:42:44 ----D- C:\Users\Méthylène\AppData\Roaming\Adobe O43 - CFD: 01/03/2007 - 23:52:52 ----D- C:\Users\Méthylène\AppData\Roaming\AdobeUM O43 - CFD: 02/12/2009 - 17:03:58 ----D- C:\Users\Méthylène\AppData\Roaming\app O43 - CFD: 19/01/2011 - 16:32:36 ----D- C:\Users\Méthylène\AppData\Roaming\Audacity O43 - CFD: 06/06/2010 - 12:41:02 ----D- C:\Users\Méthylène\AppData\Roaming\AVP 2009 O43 - CFD: 28/12/2010 - 13:38:32 ----D- C:\Users\Méthylène\AppData\Roaming\BitTorrent O43 - CFD: 08/07/2008 - 18:54:10 ----D- C:\Users\Méthylène\AppData\Roaming\Camfrog O43 - CFD: 07/03/2007 - 14:57:14 ----D- C:\Users\Méthylène\AppData\Roaming\CyberLink O43 - CFD: 29/11/2010 - 23:23:54 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus 2 O43 - CFD: 20/04/2010 - 09:55:14 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 20/04/2010 - 16:27:56 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 20/04/2010 - 09:58:58 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 13/05/2010 - 08:21:36 ----D- C:\Users\Méthylène\AppData\Roaming\Firaxis Games O43 - CFD: 10/05/2010 - 08:39:58 ----D- C:\Users\Méthylène\AppData\Roaming\GlarySoft O43 - CFD: 08/06/2008 - 19:06:20 ----D- C:\Users\Méthylène\AppData\Roaming\Google O43 - CFD: 26/02/2008 - 05:44:00 ----D- C:\Users\Méthylène\AppData\Roaming\Identities O43 - CFD: 10/05/2010 - 08:29:06 ----D- C:\Users\Méthylène\AppData\Roaming\InstallShield O43 - CFD: 22/01/2011 - 14:29:28 ----D- C:\Users\Méthylène\AppData\Roaming\InstallShield Installation Information O43 - CFD: 25/06/2010 - 20:38:58 ----D- C:\Users\Méthylène\AppData\Roaming\Macromedia O43 - CFD: 27/02/2009 - 19:06:24 ----D- C:\Users\Méthylène\AppData\Roaming\Malwarebytes O43 - CFD: 03/10/2010 - 22:26:44 -S--D- C:\Users\Méthylène\AppData\Roaming\Microsoft O43 - CFD: 01/05/2010 - 08:59:30 ----D- C:\Users\Méthylène\AppData\Roaming\Mozilla O43 - CFD: 08/06/2008 - 18:03:06 ----D- C:\Users\Méthylène\AppData\Roaming\MP-Manager O43 - CFD: 08/06/2008 - 17:44:26 ----D- C:\Users\Méthylène\AppData\Roaming\MPMAN O43 - CFD: 21/01/2011 - 15:51:34 ----D- C:\Users\Méthylène\AppData\Roaming\My Games O43 - CFD: 23/03/2008 - 22:22:46 ----D- C:\Users\Méthylène\AppData\Roaming\OpenOffice.org2 O43 - CFD: 04/10/2008 - 04:36:06 ----D- C:\Users\Méthylène\AppData\Roaming\Real O43 - CFD: 02/12/2009 - 17:03:58 ----D- C:\Users\Méthylène\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 21/09/2008 - 03:32:34 R-H-D- C:\Users\Méthylène\AppData\Roaming\SecuROM O43 - CFD: 14/12/2007 - 09:55:12 ----D- C:\Users\Méthylène\AppData\Roaming\Talkback O43 - CFD: 25/02/2010 - 14:32:44 ----D- C:\Users\Méthylène\AppData\Roaming\U3 O43 - CFD: 23/06/2009 - 08:43:24 ----D- C:\Users\Méthylène\AppData\Roaming\WinRAR O43 - CFD: 26/02/2008 - 05:44:00 ----D- C:\Users\Méthylène\AppData\Roaming\Zylom ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.B4ED1200D8DC487600FCFD7F88EE1200] - 05/02/2011 - 21:55:53 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1735222] O44 - LFC:[MD5.D3FF977B8EA6F2BAF82CD26C20EEFB17] - 05/02/2011 - 17:28:54 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\TDSSKiller.2.4.16.0_05.02.2011_17.26.59_log.txt [57960] O44 - LFC:[MD5.2FE7E303267D61C912F6E716172A8199] - 05/02/2011 - 13:55:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Ad-Report-CLEAN[1].txt [7223] O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 03/02/2011 - 15:27:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\DBCLIENT.DLL [210032] O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 03/02/2011 - 15:27:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\BDEADMIN.CPL [183808] O44 - LFC:[MD5.13A1617D6DFDE3FBB0CAC2EC8377F0E3] - 14/01/2011 - 18:45:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [1181284] O44 - LFC:[MD5.681015AB610B0A66BACB4DB58C742E22] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [288770] O44 - LFC:[MD5.A0A4810A23FDE01A82A193A7E2F16EC4] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [246108] O44 - LFC:[MD5.0E1A71FD0D787E88D857DD4AD2A1A7B9] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [279178] O44 - LFC:[MD5.5BA684DCCC048F19B65B8719F827E46E] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [758662] ---\\ Export de clé d'application autorisée (O47) O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe" [Enabled] .(.Acer Inc. - eDataSecurity Management.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\encryption.exe" [Enabled] .(.HiTRUST - Encryption Application.) -- C:\Acer\Empowering Technology\eDataSecurity\encryption.exe O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\decryption.exe" [Enabled] .(.HiTRUST - Decryption Application.) -- C:\Acer\Empowering Technology\eDataSecurity\decryption.exe O47 - AAKE:Key Export SP - "D:\bittorent\BitTorrent\bittorrent.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- D:\bittorent\BitTorrent\bittorrent.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\BitTorrent\bittorrent.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- C:\Program Files\BitTorrent\bittorrent.exe (.not file.) ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{cb38ffde-3559-11dd-b74e-001921493cca}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\cmd \C launch.bat (.not file.) O51 - MPSK:{cb38ffde-3559-11dd-b74e-001921493cca}\Shell\auto\command - Clé orpheline O51 - MPSK:{d5923b97-21e7-11df-8dc5-001921493cca}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- K:\LaunchU3.exe (.not file.) O51 - MPSK:{fb8238d1-74af-11dd-bb4a-001921493cca}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- J:\EmDesk.exe (.not file.) ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"msacm.l3codecp"="" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm O52 - TDSD: \drivers.desc\"C:\Acer\EMPOWE~1\eMode\PCM\Kernel\Burner\MKDMP3Enc.ACM"="MP3 PowerEncoder" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=1 O55 - MWPS:[HKCU\...\Policies\System] - "LogonHoursAction"=2 O55 - MWPS:[HKCU\...\Policies\System] - "DontDisplayLogonHoursWarnings"=1 ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 02/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968] O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 02/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576] O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 02/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408] O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 02/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048] O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 02/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952] O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 02/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688] O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 02/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688] O58 - SDL:[MD5.554685122B4F973E21D66C2BAAF29543] - 24/11/2006 - 14:46:36 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [2085888] O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 12/12/2009 - 14:06:43 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [56816] O58 - SDL:[MD5.AD9BD66A862116E79CB45BB6BE46055F] - 30/03/2009 - 09:32:47 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\Windows\system32\drivers\avipbb.sys [96104] O58 - SDL:[MD5.124E75B7C483E5D646F99EF5ACFD61B8] - 29/04/2008 - 10:19:50 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Process protection.) -- C:\Windows\system32\drivers\Awrtpd.sys [12960] O58 - SDL:[MD5.973E80FEB99243D150FA3CA490698EB0] - 29/04/2008 - 10:19:54 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Registry Protection.) -- C:\Windows\system32\drivers\Awrtrd.sys [15648] O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568] O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248] O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808] O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336] O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160] O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904] O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 02/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488] O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272] O58 - SDL:[MD5.5C5333981FA953F2F9082A09A9D1814F] - 01/11/2008 - 08:35:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\dump_wmimmc.sys [141612] O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 02/11/2006 - 08:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760] O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 02/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520] O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 02/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480] O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 02/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040] O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576] O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944] O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944] O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 02/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640] O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640] O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 02/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640] O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 02/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776] O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384] O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160] O58 - SDL:[MD5.AC3E7DB45F04EBD40F4C1E0A0D774269] - 29/04/2008 - 10:20:00 ---A- . (.Lavasoft AB - Driver for Ad-Watch network monitoring.) -- C:\Windows\system32\drivers\NSDriver.sys [15648] O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 15/12/2006 - 16:14:55 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144] O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608] O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 02/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680] O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 02/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040] O58 - SDL:[MD5.88B72D2A800300EB05C69F3C6C3180F2] - 10/11/2006 - 15:10:50 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [10624] O58 - SDL:[MD5.9649E11FC5459BF6B2C9E8E327E45C3A] - 10/11/2006 - 15:21:16 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [7936] O58 - SDL:[MD5.3D0BE1373B9DFE9FC7B64F090E4D59E3] - 08/11/2006 - 16:11:30 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [53760] O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 02/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712] O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088] O58 - SDL:[MD5.959EF612D2CCFDB6D9E443F8E3655013] - 02/11/2006 - 08:30:56 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100 NDIS 5.1 Driver.) -- C:\Windows\system32\drivers\Rtnicxp.sys [47104] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 02/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504] O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 02/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784] O58 - SDL:[MD5.D5DFFEAA1E15D4EFFABB9D9A3068AC5B] - 17/08/2005 - 06:45:00 ---A- . (.MCCI - SAMSUNG USB Composite Device Driver.) -- C:\Windows\system32\drivers\sscdbus.sys [58352] O58 - SDL:[MD5.74BFEB686334586BB489FFA81DBE6E48] - 17/08/2005 - 06:47:42 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdcm.sys [6176] O58 - SDL:[MD5.74BFEB686334586BB489FFA81DBE6E48] - 17/08/2005 - 06:47:42 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdcmnt.sys [6176] O58 - SDL:[MD5.8A1BE0C347814F482F493AEA619D57F6] - 17/08/2005 - 06:46:20 ---A- . (.MCCI - SAMSUNG CDMA Modem Filter Driver.) -- C:\Windows\system32\drivers\sscdmdfl.sys [8272] O58 - SDL:[MD5.5AB0B1987F682A59B15B78F84C6AD7D0] - 17/08/2005 - 06:46:26 ---A- . (.MCCI - SAMSUNG CDMA Modem WDM.) -- C:\Windows\system32\drivers\sscdmdm.sys [93872] O58 - SDL:[MD5.003DA106812F5FB22970104AC7295DF2] - 17/08/2005 - 06:44:56 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdwh.sys [5840] O58 - SDL:[MD5.003DA106812F5FB22970104AC7295DF2] - 17/08/2005 - 06:44:56 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdwhnt.sys [5840] O58 - SDL:[MD5.3AD0362CF68DE3AC500E981700242CCA] - 13/07/2009 - 10:01:17 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [28520] O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944] O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848] O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920] O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 02/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112] O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408] O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 02/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816] O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 02/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512] O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 02/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232] O58 - SDL:[MD5.7D1F3B131D503EF43EE594B5A2B9B427] - 02/11/2006 - 08:30:56 ---A- . (.Marvell - Pilote miniport NDIS6.0 pour contrôleur Ethernet Marvell Yukon.) -- C:\Windows\system32\drivers\yk60x86.sys [194048] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS [9029] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys [27097] O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS [4768] O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS [42537] O58 - SDL:[MD5.9131FE60ADFAB595C8DA53AD6A06AA31] - 04/01/2005 - 19:43:08 ---A- . (.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) -- C:\Windows\system32\npptNT2.sys [4682] O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS [27866] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS [29146] O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS [33952] O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS [34672] O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS [35776] O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS [35536] O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS [34672] ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: Ad-Remover By C_XX - (.C_XX.) [HKLM] -- Ad-Remover O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: RSIT - (.random/random.) O63 - Logiciel: Toolbar SD - (.IDN Team.) ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK O64 - Services: CurCS - (.not file.) - aswMonFlt (aswMonFlt) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMONFLT O64 - Services: CurCS - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR O64 - Services: CurCS - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP O64 - Services: CurCS - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - C:\Windows\System32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - C:\Windows\System32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - (.not file.) - bfastfao (bfastfao) .(.Pas de propriétaire - Pas de description.) - LEGACY_BFASTFAO O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER O64 - Services: CurCS - (.not file.) - catchme (catchme) .(.Pas de propriétaire - Pas de description.) - LEGACY_CATCHME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC O64 - Services: CurCS - C:\Windows\system32\Drivers\DUMP_WMIMMC.sys - dump_wmimmc (dump_wmimmc) .(.Pas de propriétaire - Pas de description.) - LEGACY_DUMP_WMIMMC O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL O64 - Services: CurCS - C:\Windows\System32\drivers\ecache.sys - ReadyBoost Caching Driver (Ecache) .(.Microsoft Corporation - Special Memory Device Cache.) - LEGACY_ECACHE O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(.Pas de propriétaire - Pas de description.) - LEGACY_EECTRL O64 - Services: CurCS - (.not file.) - EraserUtilDrv10631 (EraserUtilDrv10631) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRV10631 O64 - Services: CurCS - (.not file.) - EraserUtilRebootDrv (EraserUtilRebootDrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILREBOOTDRV O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP O64 - Services: CurCS - (.not file.) - Symantec Intrusion Prevention Driver (IDSvix86) .(.Pas de propriétaire - Pas de description.) - LEGACY_IDSVIX86 O64 - Services: CurCS - (.not file.) - File Security Driver (IKFileSec) .(.Pas de propriétaire - Pas de description.) - LEGACY_IKFILESEC O64 - Services: CurCS - (.not file.) - System Filter Driver (IKSysFlt) .(.Pas de propriétaire - Pas de description.) - LEGACY_IKSYSFLT O64 - Services: CurCS - (.not file.) - System Security Driver (IKSysSec) .(.Pas de propriétaire - Pas de description.) - LEGACY_IKSYSSEC O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(.Pas de propriétaire - Pas de description.) - LEGACY_INT15 O64 - Services: CurCS - (.not file.) - klmd25 (klmd25) .(.Pas de propriétaire - Pas de description.) - LEGACY_KLMD25 O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV O64 - Services: CurCS - (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - (.not file.) - mchInjDrv (mchInjDrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_MCHINJDRV O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20 O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - ISA/EISA Class Driver (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - NativeWiFi Miniport Driver.) - LEGACY_NATIVEWIFIP O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\Windows\system32\npptNT2.sys - NPPTNT2 (NPPTNT2) .(.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) - LEGACY_NPPTNT2 O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR O64 - Services: CurCS - (.not file.) - SRTSPX (SRTSPX) .(.Pas de propriétaire - Pas de description.) - LEGACY_SRTSPX O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - (.not file.) - SYMTDI (SYMTDI) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMTDI O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX O64 - Services: CurCS - (.not file.) - UBHelper (UBHelper) .(.Pas de propriétaire - Pas de description.) - LEGACY_UBHELPER O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\system32\w32time.dll (W32Time) .(.Microsoft Corporation - Service de temps Windows.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6 O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - WDF dynamique.) - LEGACY_WDF01000 ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] ${searchCLSID} - (@ieframe.dll,-12512) - Bing O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - Bing O69 - SBI: SearchScopes [HKCU] {18EAB056-9057-F224-FD4C-1F6569C4D8D2} - (Ask) - Search Plus! O69 - SBI: SearchScopes [HKCU] {55275674-3800-47E1-8305-84C30758A69B} [DefaultScope] - (Google) - Google O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Live Search) - Bing O69 - SBI: SearchScopes [HKCU] {A1840035-2658-4CE6-BCC0-D41B8DCF75D5} - (Live Search) - search live - Bing O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.706D165D785525B11B26C2399FD61785] [sPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\Méthylène\AppData\Local\Temp\WER-76877-0.sysdata.xml [109196] ---\\ Recherche d'infection Rogue (O86) C:\Users\Méthylène\AppData\Roaming\5400 Series ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "{DCFB3237-C037-4DD8-9E93-E79F15E6B041}" | In - Public - P6 - TRUE | .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Acer\Empowering Technology\eMode\PCM\PCMService.exe O87 - FAEL: "{18954091-BD17-43EA-B34D-097E286447AF}" | In - Public - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Acer\Empowering Technology\eMode\PCM\PCMService.exe O87 - FAEL: "{334367E5-ED15-4DF0-9637-5A5A53866104}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "{24EEC957-305D-4D42-BA8E-07DAC4C920AE}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Electronic Arts\La Bataille pour la Terre du Milieu II\game.dat (.not file.) O87 - FAEL: "{2DBE078B-0C6B-4C93-81B8-C923D39FB387}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Electronic Arts\La Bataille pour la Terre du Milieu II\game.dat (.not file.) O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe O87 - FAEL: "{DEC4995C-E9A2-469A-A030-FC4F2FEDF321}" |In - Public - P6 - TRUE | .(...) -- C:\Windows\System32\lxctcoms.exe (.not file.) O87 - FAEL: "{9ED5A202-C3E2-4009-8379-750AFBE40D77}" |In - Public - P17 - TRUE | .(...) -- C:\Windows\System32\lxctcoms.exe (.not file.) O87 - FAEL: "{C434436B-38AD-4CEF-8507-D083A1A489B9}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\lxctmon.exe (.not file.) O87 - FAEL: "{DE43FF9F-8389-462E-855D-8B1EF7DB4B60}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\lxctmon.exe (.not file.) O87 - FAEL: "{C70CD91E-5238-45B6-A30A-12A3539903BC}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe (.not file.) O87 - FAEL: "{E253D546-B09D-4062-AAE1-94C374038B25}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe (.not file.) O87 - FAEL: "{2FD9FF71-A923-4048-9946-B3FB331918D8}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{8D70725B-9AF9-4AFC-BC48-D33316BF2E22}" |In - Domain - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{5DE367C5-DC6F-409E-A650-5003CAE44946}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{6A495E56-50B1-4B8A-A31A-28BCADD703FE}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{99B2A81B-157C-419A-9237-362A8E77221A}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{D1FE05EF-59F6-49E1-8ACA-C7FF9D4FC2E4}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "TCP Query User{E83156D7-EFA1-48FC-8B2A-10E0BD0A3A92}D:\nouveau dossier\nouveau dossier\emule\emule.exe" |In - Public - P6 - TRUE | .(...) -- D:\nouveau dossier\nouveau dossier\emule\emule.exe (.not file.) O87 - FAEL: "UDP Query User{88A3189D-E8C4-42CE-B6AD-AABFEC59D0A4}D:\nouveau dossier\nouveau dossier\emule\emule.exe" |In - Public - P17 - TRUE | .(...) -- D:\nouveau dossier\nouveau dossier\emule\emule.exe (.not file.) O87 - FAEL: "TCP Query User{5962D0F2-A15C-4AD1-8BC5-21EE572ACCE9}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) O87 - FAEL: "UDP Query User{5E8396DE-00F5-4685-B851-F4EAA903F8D0}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) O87 - FAEL: "{1224D76A-6008-4732-9D22-B18FABBD00D4}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\DNA\btdna.exe (.not file.) O87 - FAEL: "{E556290A-EBD4-43D1-8BF8-65220600F0BC}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\DNA\btdna.exe (.not file.) O87 - FAEL: "{21F96593-3804-4D39-9F51-0416FF336368}" |In - Public - P6 - TRUE | .(...) -- D:\bittorent\BitTorrent\bittorrent.exe (.not file.) O87 - FAEL: "{6EC433F5-AC0C-4710-89FA-306312C238D0}" |In - Public - P17 - TRUE | .(...) -- D:\bittorent\BitTorrent\bittorrent.exe (.not file.) O87 - FAEL: "TCP Query User{DDD52DE3-CDA1-4538-B04E-DB667EBB15CE}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "UDP Query User{9B7102F4-DDA3-4D29-9C35-341FD87FEF9B}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "TCP Query User{B7B94084-6FB6-4AF0-A980-D318B196BB29}D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe" |In - Public - P6 - TRUE | .(...) -- D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe (.not file.) O87 - FAEL: "UDP Query User{70580409-3BE2-4DFF-BC16-C8A3C582C1CD}D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe" |In - Public - P17 - TRUE | .(...) -- D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe (.not file.) O87 - FAEL: "{819922AE-6386-4755-A3C5-D82CB09BA1FF}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\Orb.exe (.not file.) O87 - FAEL: "{2DDF639B-4958-4444-B150-E87EEB96329B}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\Orb.exe (.not file.) O87 - FAEL: "{FF76929F-8ADC-4D66-810B-45DB1B23B8EA}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbTray.exe (.not file.) O87 - FAEL: "{F5707102-E008-40FD-BB2C-13CCFE143916}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbTray.exe (.not file.) O87 - FAEL: "{416D8A15-6388-4D2F-8BB8-29D0858F370C}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe (.not file.) O87 - FAEL: "{610D7A22-5F7F-42FA-88A6-46262BE174EF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe (.not file.) O87 - FAEL: "TCP Query User{3CDB774E-4F83-45A9-86B0-219BF1819433}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "UDP Query User{D1D20F44-DA5D-40CF-8C58-0033E7D880D6}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "TCP Query User{C28017CF-B273-4C3F-A099-A3F85BDBFDD4}C:\program files\emule\emule.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "UDP Query User{D81F9B75-A656-4A36-8361-B9A3D9DB5808}C:\program files\emule\emule.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "TCP Query User{D01A2419-7D59-4792-B7EC-0D40478B8ECD}C:\program files\utorrent\utorrent.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\utorrent\utorrent.exe (.not file.) O87 - FAEL: "UDP Query User{6AB004A8-80D0-4EC6-BF24-7C67EEB3706A}C:\program files\utorrent\utorrent.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\utorrent\utorrent.exe (.not file.) O87 - FAEL: "TCP Query User{E5EA967A-8406-4465-8576-0B49A6D764F2}C:\program files\warcraft iii\war3.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\warcraft iii\war3.exe (.not file.) O87 - FAEL: "UDP Query User{AA135F62-81C2-4E80-B664-F46627388447}C:\program files\warcraft iii\war3.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\warcraft iii\war3.exe (.not file.) O87 - FAEL: "TCP Query User{66346B1A-2492-4589-B49D-3D1DAD988127}D:\warcraft iii\war3.exe" |In - Public - P6 - TRUE | .(...) -- D:\warcraft iii\war3.exe (.not file.) O87 - FAEL: "UDP Query User{B9C8A60D-70A4-4D72-BCA5-C5299B1072C8}D:\warcraft iii\war3.exe" |In - Public - P17 - TRUE | .(...) -- D:\warcraft iii\war3.exe (.not file.) O87 - FAEL: "TCP Query User{ED0C39D2-6D0E-4A55-A35E-59401342D68D}C:\program files\mozilla firefox\firefox.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "UDP Query User{B78B82A2-7E12-4EF6-9E22-72D15E71F810}C:\program files\mozilla firefox\firefox.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "TCP Query User{79B3EB5F-86B2-4C30-946D-FE93D3F15785}C:\program files\bittorrent\bittorrent.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "UDP Query User{B820872F-42EF-4243-B267-474014B80B2C}C:\program files\bittorrent\bittorrent.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "TCP Query User{F07FCFCA-E3BE-47EF-8CC3-E3CFB46A23AD}C:\program files\mozilla firefox\firefox.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "UDP Query User{EB2D1B4E-5C8F-4F29-964B-49B131E68205}C:\program files\mozilla firefox\firefox.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "TCP Query User{83E1B042-9E5B-4BE9-AD3D-406738CA0C87}C:\program files\bittorrent\bittorrent.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "UDP Query User{CEF8FD4C-8EBF-4BE7-AE36-3DF875DAAC77}C:\program files\bittorrent\bittorrent.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "TCP Query User{D944452A-1DAA-4024-AB41-8A3861CE55FE}C:\program files\metin2_france\metin2.bin" |In - Private - P6 - TRUE | .(...) -- C:\program files\metin2_france\metin2.bin (.not file.) O87 - FAEL: "UDP Query User{236735D1-7CB6-44D5-B13A-11985F3690B0}C:\program files\metin2_france\metin2.bin" |In - Private - P17 - TRUE | .(...) -- C:\program files\metin2_france\metin2.bin (.not file.) O87 - FAEL: "{E3763DF6-34A6-453B-9681-39D8428B6744}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O87 - FAEL: "{F8257732-2646-4DE6-9327-D807C154F2F5}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O87 - FAEL: "TCP Query User{0CBB7365-E5C1-43ED-AB1F-4B2777D88D49}C:\program files\dsnet corp\atube catcher 1.0\smh.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\dsnet corp\atube catcher 1.0\smh.exe (.not file.) O87 - FAEL: "UDP Query User{C75CD936-66A5-4EDA-9701-65008E8858E5}C:\program files\dsnet corp\atube catcher 1.0\smh.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\dsnet corp\atube catcher 1.0\smh.exe (.not file.) O87 - FAEL: "TCP Query User{AAC13CB8-CFF7-4BEA-A067-E1A2F7CF3BE0}C:\users\public\games\world of warcraft trial\backgrounddownloader.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\public\games\world of warcraft trial\backgrounddownloader.exe (.not file.) O87 - FAEL: "UDP Query User{1D07154A-C21D-499C-A3CB-2997798E386F}C:\users\public\games\world of warcraft trial\backgrounddownloader.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\public\games\world of warcraft trial\backgrounddownloader.exe (.not file.) O87 - FAEL: "TCP Query User{0CB84482-D6E3-4EAE-9B61-2E041F363171}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "UDP Query User{038D7162-EF23-4D93-B634-670A9BCAD0CA}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "TCP Query User{FDEA6399-DBBB-4030-A95C-8449D3DD7CFF}C:\program files\metin2\metin2.bin" |In - Private - P6 - TRUE | .(...) -- C:\program files\metin2\metin2.bin (.not file.) O87 - FAEL: "UDP Query User{5C71E40F-CFC4-47F3-86DB-83A90A36C6EF}C:\program files\metin2\metin2.bin" |In - Private - P17 - TRUE | .(...) -- C:\program files\metin2\metin2.bin (.not file.) O87 - FAEL: "TCP Query User{07208B3B-B394-4519-A6CE-230E7B3F82C4}C:\program files\metin2\metin2client.bin" |In - Private - P6 - TRUE | .(...) -- C:\program files\metin2\metin2client.bin (.not file.) O87 - FAEL: "UDP Query User{697A57E0-B6E1-4EFE-B90F-9BAB4D0EC49F}C:\program files\metin2\metin2client.bin" |In - Private - P17 - TRUE | .(...) -- C:\program files\metin2\metin2client.bin (.not file.) O87 - FAEL: "TCP Query User{DB7CF5A0-DFB1-4FAA-8280-7450F78394E2}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "UDP Query User{2C9F1F88-77BB-4223-B5D5-142560F487F3}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "TCP Query User{D88C9CEC-4502-4AE5-BD6F-55D70F98AF59}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "UDP Query User{995A6AC9-1D7A-4AE2-B6EC-C23015D5F5EA}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "TCP Query User{A56C9F79-69B8-48CD-BEF4-DAD19B1A3FB1}C:\sierra\empire earth\empire earth.exe" |In - Private - P6 - TRUE | .(...) -- C:\sierra\empire earth\empire earth.exe (.not file.) O87 - FAEL: "UDP Query User{6FC3CD9B-FE4D-41D1-9D00-1EC68A316D2A}C:\sierra\empire earth\empire earth.exe" |In - Private - P17 - TRUE | .(...) -- C:\sierra\empire earth\empire earth.exe (.not file.) O87 - FAEL: "TCP Query User{053F9AC5-5219-445E-9564-E1C9760DE123}D:\films\program files\bittorrent\bittorrent.exe" |In - Private - P6 - TRUE | .(...) -- D:\films\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "UDP Query User{5AF5DAA7-3453-4ADE-B10A-9029AC682ADB}D:\films\program files\bittorrent\bittorrent.exe" |In - Private - P17 - TRUE | .(...) -- D:\films\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "{F292E393-27F6-4218-8C5E-18A905298775}" |In - Private - P6 - TRUE | .(...) -- D:\Civilization4.exe (.not file.) O87 - FAEL: "{EE39813A-3A0A-4EF6-9D10-25381B0B19EB}" |In - Private - P17 - TRUE | .(...) -- D:\Civilization4.exe (.not file.) ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 14/06/2008 611664 | (aawservice) . (.Lavasoft.) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe SR - | Auto 12/11/2006 24576 | (AcerMemUsageCheckService) . (.Pas de propriétaire.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe SR - | Auto 13/07/2009 108289 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe SR - | Auto 18/08/2009 185089 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe SR - | Auto 24/11/2006 557056 | (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\system32\Ati2evxx.exe SR - | Auto 25/11/2006 274520 | (CLCapSvc) . (.Pas de propriétaire.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLCapSvc.exe SR - | Auto 25/11/2006 118870 | (CLSched) . (.Pas de propriétaire.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLSched.exe SR - | Auto 08/12/2006 45056 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe SS - | Demand 13/02/2008 138168 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe SR - | Auto 19/10/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 24/11/2006 262247 | (RichVideo) . (.Pas de propriétaire.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe SS - | Demand 27/06/2008 87288 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe SR - | Auto 02/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, GMER - Rootkit Detector and Remover ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Méthylène at 05/02/2011 22:02:59 Use the desktop link 'MBRCheck' to have full report ---\\ Infection Rogue/FakeAlert (Possible) O87 - FAEL: "TCP Query User{5962D0F2-A15C-4AD1-8BC5-21EE572ACCE9}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) O87 - FAEL: "UDP Query User{5E8396DE-00F5-4685-B851-F4EAA903F8D0}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) End of the scan (963 lines in 02mn 10s)(0)

D'accord ! ZHP Diag me fait un rapport que je ne peux pas copier coller, le met dans un dossier "17" que je ne peux pas utiliser ... Je ne me rapelle plus comment je dois procéder ... Sinon, tu crois que juste changer la pile va tout régler, ou il y a quand même en plus une infection ?

Sur ma page au redémarrage de l'ordi (écriture blanche sur fond noir ),entre d'autres choses que je ne comprend pas, il y a ça : CMOS Battery Low CMOS Date/Time Not Set

Voilà ! j'ai un peu du mal à m'y retrouver avec toutes ces icônes sur le bureau, mais je crois que c'est ça : MBRCheck, version 1.2.3 © 2010, AD Command-line: Windows Version: Windows Vista Home Basic Edition Windows Information: (build 6000), 32-bit Logical Drives Mask: 0x000001fd Kernel Drivers (total 149): 0x82800000 \SystemRoot\system32\ntkrnlpa.exe 0x82BA1000 \SystemRoot\system32\hal.dll 0x804C6000 \SystemRoot\system32\kdcom.dll 0x80466000 \SystemRoot\system32\mcupdate_GenuineIntel.dll 0x8045D000 \SystemRoot\system32\PSHED.dll 0x80455000 \SystemRoot\system32\BOOTVID.dll 0x8041A000 \SystemRoot\system32\CLFS.SYS 0x8071F000 \SystemRoot\system32\CI.dll 0x806A4000 \SystemRoot\system32\drivers\Wdf01000.sys 0x8040D000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x80661000 \SystemRoot\system32\drivers\acpi.sys 0x80404000 \SystemRoot\system32\drivers\WMILIB.SYS 0x80659000 \SystemRoot\system32\drivers\msisadrv.sys 0x80634000 \SystemRoot\system32\drivers\pci.sys 0x80625000 \SystemRoot\system32\drivers\volmgr.sys 0x80615000 \SystemRoot\System32\drivers\mountmgr.sys 0x8060E000 \SystemRoot\system32\drivers\pciide.sys 0x80600000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x831B6000 \SystemRoot\System32\drivers\volmgrx.sys 0x831AE000 \SystemRoot\system32\drivers\atapi.sys 0x83190000 \SystemRoot\system32\drivers\ataport.SYS 0x8315F000 \SystemRoot\system32\drivers\fltmgr.sys 0x8314F000 \SystemRoot\system32\drivers\fileinfo.sys 0x80401000 \SystemRoot\system32\DRIVERS\psdfilter.sys 0x8304B000 \SystemRoot\system32\drivers\ndis.sys 0x83020000 \SystemRoot\system32\drivers\msrpc.sys 0x833C7000 \SystemRoot\system32\drivers\NETIO.SYS 0x832BF000 \SystemRoot\System32\Drivers\Ntfs.sys 0x83255000 \SystemRoot\System32\Drivers\ksecdd.sys 0x83018000 \SystemRoot\system32\drivers\wd.sys 0x8321F000 \SystemRoot\system32\drivers\volsnap.sys 0x83010000 \SystemRoot\System32\Drivers\spldr.sys 0x8320D000 \SystemRoot\system32\drivers\psdvdisk.sys 0x8300E000 \SystemRoot\system32\drivers\PSDNServ.sys 0x849F1000 \SystemRoot\System32\drivers\partmgr.sys 0x849E2000 \SystemRoot\System32\Drivers\mup.sys 0x849BD000 \SystemRoot\System32\drivers\ecache.sys 0x849AC000 \SystemRoot\system32\drivers\disk.sys 0x8498B000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x83005000 \SystemRoot\system32\drivers\crcdisk.sys 0x89ED2000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x8A608000 \SystemRoot\system32\DRIVERS\intelppm.sys 0x8C0CF000 \SystemRoot\system32\DRIVERS\atikmdag.sys 0x8C963000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x8BA1F000 \SystemRoot\System32\drivers\watchdog.sys 0x85636000 \SystemRoot\system32\DRIVERS\usbohci.sys 0x8BC0E000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x856A5000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x85675000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x857EA000 \SystemRoot\system32\DRIVERS\NTIDrvr.sys 0x85663000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x8B818000 \SystemRoot\system32\DRIVERS\fdc.sys 0x8564B000 \SystemRoot\system32\DRIVERS\parport.sys 0x8B823000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x8B82E000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x89E51000 \SystemRoot\system32\DRIVERS\serial.sys 0x85605000 \SystemRoot\system32\DRIVERS\serenum.sys 0x85371000 \SystemRoot\system32\DRIVERS\ohci1394.sys 0x8B428000 \SystemRoot\system32\DRIVERS\1394BUS.SYS 0x89E0D000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x8A620000 \SystemRoot\system32\DRIVERS\storport.sys 0x8B839000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x8B411000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x8B844000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x8B7BA000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x8B628000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8B43E000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8B637000 \SystemRoot\system32\DRIVERS\termdd.sys 0x857EE000 \SystemRoot\system32\DRIVERS\swenum.sys 0x8B738000 \SystemRoot\system32\DRIVERS\ks.sys 0x89F60000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x8BA2C000 \SystemRoot\system32\DRIVERS\umbus.sys 0x8BFE9000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x89F6A000 \SystemRoot\system32\DRIVERS\flpydisk.sys 0x8CAA7000 \SystemRoot\system32\drivers\HdAudio.sys 0x8CA7A000 \SystemRoot\system32\drivers\portcls.sys 0x8CA55000 \SystemRoot\system32\drivers\drmk.sys 0x852A1000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x89F1A000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x8B95F000 \SystemRoot\System32\Drivers\Null.SYS 0x8B966000 \SystemRoot\System32\Drivers\Beep.SYS 0x8B96D000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x8A684000 \SystemRoot\System32\drivers\vga.sys 0x89E83000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x85747000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x8574F000 \SystemRoot\system32\drivers\rdpencdd.sys 0x8B891000 \SystemRoot\System32\Drivers\Msfs.SYS 0x8A73C000 \SystemRoot\System32\Drivers\Npfs.SYS 0x89F35000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x8B4D3000 \SystemRoot\System32\drivers\tcpip.sys 0x89E38000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x89E6E000 \SystemRoot\system32\DRIVERS\tdx.sys 0x8B4BF000 \SystemRoot\system32\DRIVERS\smb.sys 0x8B478000 \SystemRoot\system32\drivers\afd.sys 0x8B788000 \SystemRoot\System32\DRIVERS\netbt.sys 0x8B462000 \SystemRoot\system32\DRIVERS\pacer.sys 0x8A74A000 \SystemRoot\system32\DRIVERS\netbios.sys 0x89EA4000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x8B5DA000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0x8B7DD000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x89F88000 \SystemRoot\system32\drivers\nsiproxy.sys 0x8B721000 \SystemRoot\System32\Drivers\dfsc.sys 0x8B76C000 \SystemRoot\system32\DRIVERS\avipbb.sys 0x857E0000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys 0x8BA08000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x857F0000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x89EB7000 \SystemRoot\system32\DRIVERS\hidusb.sys 0x852E1000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0x85757000 \SystemRoot\system32\DRIVERS\mouhid.sys 0x89EC0000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0x8B9F6000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0x8BA7A000 \SystemRoot\System32\Drivers\crashdmp.sys 0x8B89C000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x856F7000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x99800000 \SystemRoot\System32\win32k.sys 0x89FB0000 \SystemRoot\System32\drivers\Dxapi.sys 0x8B682000 \SystemRoot\system32\DRIVERS\monitor.sys 0x99C00000 \SystemRoot\System32\TSDDD.dll 0x99C10000 \SystemRoot\System32\cdd.dll 0x8BD7B000 \SystemRoot\system32\drivers\luafv.sys 0x8BFD5000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0x8BD30000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x8C88E000 \SystemRoot\system32\DRIVERS\nwifi.sys 0x89FCE000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x8BE36000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x8CB17000 \SystemRoot\system32\drivers\HTTP.sys 0x8CAFC000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x9A06C000 \SystemRoot\system32\DRIVERS\bowser.sys 0x9A058000 \SystemRoot\System32\drivers\mpsdrv.sys 0x9A038000 \SystemRoot\system32\drivers\mrxdav.sys 0x9A01A000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x9B3C7000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x8C01D000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x9B3A3000 \SystemRoot\System32\DRIVERS\srv2.sys 0x9B312000 \SystemRoot\System32\DRIVERS\srv.sys 0x9B572000 \SystemRoot\system32\drivers\spsys.sys 0x8B989000 \SystemRoot\system32\DRIVERS\parvdm.sys 0x9B6DD000 \??\C:\Acer\Empowering Technology\eRecovery\int15.sys 0x9C522000 \SystemRoot\system32\drivers\peauth.sys 0x89FE2000 \SystemRoot\System32\Drivers\secdrv.SYS 0x8B870000 \SystemRoot\System32\drivers\tcpipreg.sys 0x9B628000 \SystemRoot\system32\DRIVERS\WUDFRd.sys 0x9B616000 \SystemRoot\system32\DRIVERS\WUDFPf.sys 0x9B7AA000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x9E0D2000 \SystemRoot\system32\DRIVERS\yk60x86.sys 0x8B8B2000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x9E2BD000 \SystemRoot\System32\Drivers\fastfat.SYS 0x8B9BA000 \??\C:\Users\MTHYLN~1\AppData\Local\Temp\mbr.sys 0x77560000 \Windows\System32\ntdll.dll Processes (total 50): 0 System Idle Process 4 System 368 C:\Windows\System32\smss.exe 452 csrss.exe 528 C:\Windows\System32\wininit.exe 548 csrss.exe 580 C:\Windows\System32\services.exe 592 C:\Windows\System32\lsass.exe 600 C:\Windows\System32\lsm.exe 740 C:\Windows\System32\winlogon.exe 832 C:\Windows\System32\svchost.exe 908 C:\Windows\System32\svchost.exe 944 C:\Windows\System32\svchost.exe 1032 C:\Windows\System32\Ati2evxx.exe 1048 C:\Windows\System32\svchost.exe 1072 C:\Windows\System32\svchost.exe 1092 C:\Windows\System32\svchost.exe 1220 C:\Windows\System32\audiodg.exe 1248 C:\Windows\System32\svchost.exe 1264 C:\Windows\System32\SLsvc.exe 1332 C:\Windows\System32\svchost.exe 1440 C:\Windows\System32\Ati2evxx.exe 1448 C:\Windows\System32\svchost.exe 1668 C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe 1768 C:\Windows\System32\spoolsv.exe 1792 C:\Program Files\Avira\AntiVir Desktop\sched.exe 1804 C:\Windows\System32\svchost.exe 412 C:\Acer\Empowering Technology\ePerformance\MemCheck.exe 596 C:\Windows\System32\dwm.exe 1084 C:\Windows\explorer.exe 1388 C:\Program Files\Avira\AntiVir Desktop\avguard.exe 572 C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLCapSvc.exe 468 C:\Program Files\Common Files\LightScribe\LSSrvc.exe 2212 C:\Windows\System32\svchost.exe 2224 C:\Program Files\CyberLink\Shared Files\RichVideo.exe 2264 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2308 C:\Windows\System32\svchost.exe 2340 C:\Windows\System32\svchost.exe 2368 C:\Windows\System32\SearchIndexer.exe 2472 C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe 2496 WUDFHost.exe 2784 C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLSched.exe 3088 C:\Windows\System32\mobsync.exe 3668 C:\Windows\System32\taskeng.exe 1724 C:\Windows\System32\taskeng.exe 3416 C:\Windows\System32\wbem\unsecapp.exe 3496 WmiPrvSE.exe 4040 C:\Windows\System32\svchost.exe 3260 C:\Windows\System32\conime.exe 2980 C:\Program Files\ZHPDiag\mbrcheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000001`b550f800 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000013`873b2a00 (NTFS) PhysicalDrive0 Model Number: HitachiHDS721616PLA380, Rev: P22OA70A Size Device Name MBR Status -------------------------------------------- 153 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 Done!

Yes ! (l'espoir revient), merci Jeanmimigab

Voilà, MalwareBytes n'a rien détecté d'anormal : Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 5673 Windows 6.0.6000 Internet Explorer 8.0.6001.18904 05/02/2011 20:51:25 mbam-log-2011-02-05 (20-51-25).txt Type d'examen: Examen rapide Elément(s) analysé(s): 143586 Temps écoulé: 5 minute(s), 58 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté)

"Changer la pile de la carte mère " !!! je viens de lire ça sur le forum ! Ce serait peut-être une bonne idée ? ( je ne savais même pas qu'il y avait une pile ....)

Bonsoir TDSSkiller n'a détecté aucun virus, et j'ai enfin trouvé le mode sans échec ... et l'ordinateur m'a quand même lâché pendant l'analyse par OTLH, et là je ne suis pas sûre d'arriver au bout de ce mesage, je désespère un peu ... Mais bon, il est tard, demain c'est dimanche, je peux patienter ... pour attendre d'autres suggestions ... Merci !

Voili voilà ... F8 ne répond pas ... il n'y a que F2 qui lance la machine ... Donc voici le rapport AD-R.exe : ======= RAPPORT D'AD-REMOVER 2.0.0.2,D | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 29/01/11 à 16:00 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: TeamXscript : AD-Remover - FindyKill - UsbFix C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 13:53:39 le 05/02/2011, Mode normal Microsoft® Windows Vista™ Édition Familiale Basique (X86) Méthylène@PC-DE-UTILISATE ( ) ============== ACTION(S) ============== Fichier supprimé: C:\Windows\system32\f3PSSavr.scr Fichier supprimé: C:\Users\Jean-Claude\AppData\Roaming\Mozilla\FireFox\Profiles\urzjhfe3.default\searchplugins\mywebsearch.xml Dossier supprimé: C:\Users\Méthylène\AppData\Roaming\DesktopIcon Dossier supprimé: C:\Users\Méthylène\AppData\LocalLow\Fun Web Products Dossier supprimé: C:\Users\Méthylène\AppData\LocalLow\FunWebProducts Dossier supprimé: C:\Users\Méthylène\AppData\LocalLow\MyWebSearch Dossier supprimé: C:\ProgramData\Trymedia Dossier supprimé: C:\Users\Méthylène\AppData\Roaming\EoRezo Dossier supprimé: C:\Users\Jean-Claude\AppData\Roaming\EoRezo Dossier supprimé: C:\Users\Méthylène\AppData\Roaming\ItsLabel Fichier supprimé: C:\Program Files\Windows Live\Messenger\Riched20.dll (!) -- Fichiers temporaires supprimés. -- Fichier ouvert: C:\Users\Jean-Claude\AppData\Roaming\Mozilla\FireFox\Profiles\urzjhfe3.default\Prefs.js -- Ligne supprimée: user_pref("browser.search.selectedEngine", "MyWebSearch"); Ligne supprimée: user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05,{CAFEEFAC-0016-0... Ligne supprimée: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdEnabled", true); Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties"); Ligne supprimée: user_pref("keyword.URL", "hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZJfox000&fl=0&ptb=eCYUB2x... -- Fichier Fermé -- Clé supprimée: HKLM\Software\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA} Clé supprimée: HKLM\Software\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390} Clé supprimée: HKLM\Software\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728} Clé supprimée: HKLM\Software\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A} Clé supprimée: HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC} Clé supprimée: HKLM\Software\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82} Clé supprimée: HKLM\Software\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C} Clé supprimée: HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF} Clé supprimée: HKLM\Software\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9} Clé supprimée: HKLM\Software\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9} Clé supprimée: HKLM\Software\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9} Clé supprimée: HKLM\Software\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8} Clé supprimée: HKLM\Software\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69} Clé supprimée: HKLM\Software\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC} Clé supprimée: HKLM\Software\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D} Clé supprimée: HKLM\Software\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1} Clé supprimée: HKLM\Software\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477} Clé supprimée: HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F} Clé supprimée: HKLM\Software\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612} Clé supprimée: HKLM\Software\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612} Clé supprimée: HKLM\Software\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8} Clé supprimée: HKLM\Software\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978} Clé supprimée: HKLM\Software\Classes\AppID\EoRezoBHO.DLL Clé supprimée: HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9} Clé supprimée: HKLM\Software\ItsLabel Clé supprimée: HKLM\Software\Trymedia Systems Clé supprimée: HKCU\Software\ItsLabel Clé supprimée: HKCU\Software\FunWebProducts Clé supprimée: HKCU\Software\GamesBar Clé supprimée: HKCU\Software\AppDataLow\Software\FocusInteractive Clé supprimée: HKCU\Software\AppDataLow\Software\Fun Web Products Clé supprimée: HKCU\Software\AppDataLow\Software\FunWebProducts Clé supprimée: HKCU\Software\AppDataLow\Software\MyWebSearch Clé supprimée: HKU\.DEFAULT\Software\EoRezo Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F6D63A65-BD23-46F3-B9A3-87F442423481} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} Clé supprimée: HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|m3ffxtbr@mywebsearch.com Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== SCAN ADDITIONNEL ============== ** Mozilla Firefox Version [impossible d'obtenir la version] ** -- C:\Users\Jean-Claude\AppData\Roaming\Mozilla\FireFox\Profiles\urzjhfe3.default\Prefs.js -- browser.download.dir, C:\\Users\\Jean-Claude\\Downloads browser.download.lastDir, C:\\Users\\Jean-Claude\\Desktop browser.startup.homepage_override.mstone, rv:1.9.1.7 ======================================== ** Internet Explorer Version [8.0.6001.18904] ** [HKCU\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Do404Search: 0x01000000 Enable Browser Extensions: yes Local Page: C:\Windows\system32\blank.htm Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896 Show_ToolBar: yes Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\Main] AutoHide: yes Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Delete_Temp_Files_On_Exit: yes Local Page: C:\Windows\System32\blank.htm Search bar: hxxp://search.msn.com/spbasic.htm Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Start Page: hxxp://fr.msn.com/ [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] Tabs: res://ieframe.dll/tabswelcome.htm Blank: res://mshtml.dll/blank.htm ======================================== C:\Program Files\Ad-Remover\Quarantine: 100 Fichier(s) C:\Program Files\Ad-Remover\Backup: 16 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 05/02/2011 (7093 Octet(s)) Fin à: 13:55:02, 05/02/2011 ============== E.O.F ==============

Voilà, au deuxième essai, pareil, l'ordi lâche ... Je n'y connait rien, mais quand je regarde dans les performances du gestionnaire des tâches, la mémoire libre est de 6, voir 7 alors que je ne fais rien ... cela m'a toujours paru trés peu, et j'ai pensé que l'ordi n'avait pas assez de mémoire (vive ?) pour fonctionner ... c'est là que j'ai supprimer plein de trucs que mon fils avait enregistré, et finalement vidé Data ... un peu à l'arrache, j'avoue ... mais rien n'y a fait, et celà empire de jours en jours ... J'ai l'impression que chaque mise à jour de Windows Defender, ou Avira rempli encore un peu plus le Disque C qui est déjà bien plein, et je ne sais pas comment équilbrer C et D. Sinon, , comment je fais pour passer en mode sans échec ? Merci à toi

Bonjour Jeanmimigab , l'ordinateur m'a lâcher pendant l'analyse .... après redémarrage, il ya quelques nouvelles icônes, transparentes ("Folder.jpg", "AlbumArtSmal", "desktop.ini"). Je réessaie ...

Merci aussi à Tonton, et à Thorgal !

Merci Bleuet !

Bonjour, je recommence un sujet que Tonton et Thorgal ont déjà en partie traité, et demandé de le mettre par içi ! voilà le lien : http://forum.zebulon.fr/findpost-t182736-p1534194.html Merci pour votre aide !

D'accord ! Merci Tonton ! Et merci à thorgal aussi et toute votre équipe Je fais suivre dans le bon sujet ... " erreur de post ", désolée !

voilà, je pense que c'est ça : Rapport de ZHPDiag v1.27.1525 par Nicolas Coolman, Update du 04/02/2011 Run by Méthylène at 04/02/2011 15:31:13 Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html Contact : nicolascoolman@yahoo.fr ---\\ Web Browser MSIE: Internet Explorer v8.0.6001.18904 ---\\ System Information Windows Vista Home Basic Edition, 32-bit (Build 6000) Processor: x86 Family 15 Model 6 Stepping 2, GenuineIntel Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 446 MB (31% free) System Restore: Activé (Enable) System drive C: has 22 GB (31%) free of 71 GB ---\\ Logged in mode Computer Name: PC-DE-UTILISATE User Name: Méthylène All Users Names: Méthylène, Jean-Claude, Administrateur, Unselected Option: O45,O61,O62,O65,O66,O82 Logged in as Administrator ---\\ Environnement Variables %AppData%=%USERPROFILE%\AppData\Roaming %LocalAppData%=%USERPROFILE%\AppData\Local %StartMenu%=%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu ---\\ DOS/Devices A:\ Floppy drive, Flash card reader, USB Key (Not Inserted) C:\ Hard drive, Flash drive, Thumb drive (Free 22 Go of 71 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 71 Go of 71 Go) E:\ CD-ROM drive (Not Inserted) F:\ Floppy drive, Flash card reader, USB Key (Not Inserted) G:\ Floppy drive, Flash card reader, USB Key (Not Inserted) H:\ Floppy drive, Flash card reader, USB Key (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableTaskMgr: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] DisableRegistryTools: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] NoDispScrSavPage: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK ---\\ Recherche particulière de fichiers génériques [MD5.37440D09DEAE0B672A04DCCF7ABF06BE] - (.Microsoft Corporation - Explorateur Windows.) (.29/10/2008 07:20:29.) -- C:\Windows\Explorer.exe [2923520] [MD5.D4385B03E8CCCEE6F0EE249F827C1F3E] - (.Microsoft Corporation - Application de démarrage de Windows.) (.02/11/2006 10:45:57.) -- C:\Windows\System32\Wininit.exe [95744] [MD5.9F75392B9128A91ABAFB044EA350BAAD] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.02/11/2006 10:45:57.) -- C:\Windows\System32\Winlogon.exe [308224] [MD5.B35CFCEF838382AB6490B321C87EDF17] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.31/05/2008 02:15:35.) -- C:\Windows\System32\drivers\atapi.sys [21560] [MD5.37430AA7A66D7A63407ADC2C0D05E9F6] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.31/05/2008 02:16:07.) -- C:\Windows\System32\drivers\ntfs.sys [1060920] ---\\ Processus lancés [MD5.9AD9E2FB2811123DA13DE84CC154AB77] - (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe [1006264] [MD5.05CB3DA78A4BBD9B799A5957F9D101CC] - (.Microsoft Corporation - Console IME.) -- C:\Windows\system32\conime.exe [68608] [MD5.5B415BF2C6C572C63A9D8FCA0750F17D] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [625152] ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2) P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32.dll P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 11.5.) -- C:\Windows\system32\Adobe\Director\np32dsw.dll P2 - FPN: [HKLM] [@bittorrent.com/BitTorrentDNA] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DNA\plugins\npbtdna.dll (.not file.) P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\DivX\DivX Web Player\npdivx32.dll (.not file.) P2 - FPN: [HKLM] [@java.com/JavaPlugin] - (.Sun Microsystems, Inc. - Next Generation Java Plug-in 1.6.0_23 for Mozilla browsers.) -- C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll P2 - FPN: [HKLM] [@microsoft.com/WLPG,version=14.0.8081.0709] - (.Microsoft Corporation - NPWLPG.) -- C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll P2 - FPN: [HKLM] [@microsoft.com/WPF,version=3.5] - (.Microsoft Corporation - Windows Presentation Foundation (WPF) plug-in for Mozilla browsers.) -- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll P2 - FPN: [HKLM] [@mywebsearch.com/Plugin] - (.Pas de propriétaire - Pas de description.) -- (.not file.) P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (.not file.) ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook (R0,R1,R3) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com'>http://www.google.com'>http://www.google.com'>http://www.google.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://home.microsoft.com/access/allinone.asp R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R3 - URLSearchHook: (no name) - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} Clé orpheline R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Internet Explorer.) (8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)) -- C:\Windows\system32\ieframe.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} . (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (.Google Inc. - Barre d'outils pour IE.) -- c:\program files\google\googletoolbar2.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} . (.HiTRUST - eDStoolbar Module.) -- C:\Windows\system32\eDStoolbar.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll ---\\ Autres liens utilisateurs (O4) O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\Lamastre en scène - Janvier 2011 - - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Jean-Claude\Pictures\Lamastre\Lamastre en scène - Janvier 2011 -.jpg O4 - Global Startup: C:\Documents And Settings\Méthylène\Desktop\ZHPDiag analyse du 05.02.11 à 15h.17 - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\ZHPDiag analyse du 05.02.11 à 15h.17 O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Mail\WinMail.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\Méthylène\Desktop\Lamastre en scène - Janvier 2011 - - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Jean-Claude\Pictures\Lamastre\Lamastre en scène - Janvier 2011 -.jpg O4 - Global Startup: C:\Users\Méthylène\Desktop\ZHPDiag analyse du 05.02.11 à 15h.17 - Raccourci.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\Documents\ZHPDiag analyse du 05.02.11 à 15h.17 O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Adobe Reader 8.lnk . (.Adobe Systems Incorporated.) -- C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Avira AntiVir Control Center.lnk . (.Avira GmbH.) -- C:\Program Files\Avira\AntiVir Desktop\avcenter.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk . (.Pas de propriétaire.) -- C:\Program Files\BitTorrent\bittorrent.exe (.not file.) O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Choix de navigateur .lnk . (.Microsoft Corporation.) -- C:\Windows\System32\browserchoice.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Corbeille - Raccourci.lnk - Clé orpheline O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.lnk . (.Pas de propriétaire.) -- C:\Users\Méthylène\AppData\Roaming\Desktopicon\eBayShortcuts.exe (.not file.) O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Glary Utilities.lnk . (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\Integrator.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Notepad.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\notepad.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Paint.lnk . (.Microsoft Corporation.) -- C:\Windows\System32\mspaint.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PhotoFiltre.lnk . (.Pas de propriétaire.) -- C:\Program Files\PhotoFiltre\PhotoFiltre.exe (.not file.) O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Player\wmplayer.exe O4 - Global Startup: C:\Users\Méthylène\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Wordpad.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows NT\Accessories\wordpad.exe ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{249F92C2-9DDB-4DB7-9377-F637A15A8603}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{249F92C2-9DDB-4DB7-9377-F637A15A8603}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{249F92C2-9DDB-4DB7-9377-F637A15A8603}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} . (.Microsoft Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\system32\browseui.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: (aawservice) . (.Lavasoft - Ad-Aware Service.) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: (AcerMemUsageCheckService) . (.Pas de propriétaire - MemCheck.Service.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: (AntiVirSchedulerService) . (.Avira GmbH - Antivirus Scheduler.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: (AntiVirService) . (.Avira GmbH - Antivirus On-Access Service.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: (Ati External Event Utility) . (.ATI Technologies Inc. - ATI External Event Utility EXE Module.) - C:\Windows\system32\Ati2evxx.exe O23 - Service: (CLCapSvc) . (.Pas de propriétaire - CLCapSvc Module.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLCapSvc.exe O23 - Service: (CLSched) . (.Pas de propriétaire - CLSched Module.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLSched.exe O23 - Service: (eRecoveryService) . (.Acer Inc. - eRecoveryService.) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: (LightScribeService) . (.Hewlett-Packard Company - Pas de description.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: (RichVideo) . (.Pas de propriétaire - RichVideo Module.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.) ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GlaryInitialize.job [MD5.6745EF9F67D02E1BDDE0D3A1E4C9E7C8] [APT] [GlaryInitialize] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities\initialize.exe [MD5.36932522D014499D7F7B1BB921D05842] [APT] [{38400038-1B91-4FF7-8C92-80AEEF5A8F9B}] (.InstallShield Software Corporation.) -- C:\Windows\IsUn040c.exe [MD5.00000000000000000000000000000000] [APT] [{3ADBE876-B623-4140-B92B-B170BBB9BC18}] (.Pas de propriétaire.) -- c:\Users\kalifa_le_boss!\Downloads\INSTALL_MSN_MESSENGER_NT.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{47FDE0C0-F6B2-4CF9-83A2-04E9D44A8D23}] (.Pas de propriétaire.) -- C:\Users\M‚thylŠne\AppData\Roaming\Mozilla\Firefox\Profiles\ztwj9hls.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\uninstall.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{4D9A19FE-1C79-4531-BC5D-3B88435102CD}] (.Pas de propriétaire.) -- C:\Program Files\EA SPORTS\LFP Manager 06\EAUninstall.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{B5D7D6BD-5AC9-4AD5-9991-65C8B8F79A62}] (.Pas de propriétaire.) -- C:\Users\M‚thylŠne\TransXP_2.2\Install3D.exe (.not file.) [MD5.00000000000000000000000000000000] [APT] [{CA35EFC5-F420-476A-BFEF-DC0FD6ACB643}] (.Pas de propriétaire.) -- C:\Users\M‚thylŠne\Desktop\OpenOffice.org 2.3 Installation Files\instmsiw.exe (.not file.) ---\\ Pilotes lancés au démarrage (O41) O41 - Driver: (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (avgio) . (.Avira GmbH - Avira AntiVir Support for Minifilter.) - C:\Program Files\Avira\AntiVir Desktop\avgio.sys O41 - Driver: (avipbb) . (.Avira GmbH - Avira Driver for RootKit Detection.) - C:\Windows\System32\DRIVERS\avipbb.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: (DfsC) . (.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: (i8042prt) . (.Microsoft Corporation - Pilote de port i8042.) - C:\Windows\System32\DRIVERS\i8042prt.sys O41 - Driver: (kbdclass) . (.Microsoft Corporation - Pilote de la classe Clavier.) - C:\Windows\System32\DRIVERS\kbdclass.sys O41 - Driver: (kbdhid) . (.Microsoft Corporation - Pilote de filtre clavier HID.) - C:\Windows\System32\DRIVERS\kbdhid.sys O41 - Driver: (mouclass) . (.Microsoft Corporation - Pilote de la classe Souris.) - C:\Windows\System32\DRIVERS\mouclass.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: (netbt) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\system32\drivers\pacer.sys (PSched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: (RasAcd) . (.Microsoft Corporation - RAS Automatic Connection Driver.) - C:\Windows\System32\DRIVERS\rasacd.sys O41 - Driver: (rdbss) . (.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: (RDPENCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: (Serial) . (.Microsoft Corporation - Pilote de périphérique série.) - C:\Windows\System32\DRIVERS\serial.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Smb) . (.Microsoft Corporation - SMB Transport driver.) - C:\Windows\System32\DRIVERS\smb.sys O41 - Driver: (ssmdrv) . (.Avira GmbH - AVIRA SnapShot Driver.) - C:\Windows\System32\DRIVERS\ssmdrv.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (Tcpip) . (.Microsoft Corporation - TCP/IP Driver.) - C:\Windows\System32\drivers\tcpip.sys O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Terminal Server Driver.) - C:\Windows\System32\DRIVERS\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys ---\\ Logiciels installés (O42) O42 - Logiciel: Acer Empowering Technology - (.Acer Inc..) [HKLM] -- {AB6097D9-D722-4987-BD9E-A076E2848EE2} O42 - Logiciel: Acer ScreenSaver - (.Acer Inc..) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} O42 - Logiciel: Acer Tour - (.Acer Inc..) [HKLM] -- {94389919-B0AA-4882-9BE8-9F0B004ECA35} O42 - Logiciel: Acer eDataSecurity Management - (.Acer Inc..) [HKLM] -- {AEEAE013-92F1-4515-B278-139F1A692A35} O42 - Logiciel: Acer eMode Management - (.Pas de propriétaire.) [HKLM] -- {2637C347-9DAD-11D6-9EA2-00055D0CA761} O42 - Logiciel: Acer ePerformance Management - (.Acer Inc..) [HKLM] -- {D462BF9E-0C35-4705-BF9B-3DF9F3816643} O42 - Logiciel: Ad-Aware - (.Lavasoft.) [HKLM] -- {DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM] -- {B194272D-1F92-46DF-99EB-8D5CE91CB4EC} O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player Plugin O42 - Logiciel: Adobe Reader 8.2.5 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A82000000003} O42 - Logiciel: Adobe Shockwave Player 11.5 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player O42 - Logiciel: Avira AntiVir Personal - Free Antivirus - (.Avira GmbH.) [HKLM] -- Avira AntiVir Desktop O42 - Logiciel: Détecteur de flux Windows Live Toolbar (Windows Live Toolbar) - (.Microsoft Corporation.) [HKLM] -- {175B7C4A-CAF8-437A-B597-73E0D2D970FE} O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1} O42 - Logiciel: GameSpy Arcade - (.Pas de propriétaire.) [HKLM] -- GameSpy Arcade O42 - Logiciel: Glary Utilities 2.31.0.1098 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities_is1 O42 - Logiciel: Google Toolbar for Internet Explorer - (.Pas de propriétaire.) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595 O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484 O42 - Logiciel: Hotfix for Windows Media Encoder (KB929182) - (.Microsoft Corporation.) [HKLM] -- KB929182 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3 O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31} O42 - Logiciel: Java 6 Update 23 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216010FF} O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050} O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94} O42 - Logiciel: MSXML 4.0 SP2 (KB936181) - (.Microsoft Corporation.) [HKLM] -- {C04E32E0-0416-434D-AFB9-6969D703A9EF} O42 - Logiciel: MSXML 4.0 SP2 (KB941833) - (.Microsoft Corporation.) [HKLM] -- {C523D256-313D-4866-B36A-F3DE528246EF} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Malwarebytes' Anti-Malware - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes' Anti-Malware_is1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570} O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8} O42 - Logiciel: Microsoft Search Enhancement Pack - (.Microsoft Corporation.) [HKLM] -- {4CBA3D4C-8F51-4D60-B27E-F6B641C571E7} O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {8A74E887-8F0F-4017-AF53-CBA42211AAA5} O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) - (.Microsoft Corporation.) [HKLM] -- {BD64AF4A-8C80-4152-AD77-FCDDF05208AB} O42 - Logiciel: Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 - (.Microsoft Corporation.) [HKLM] -- {770657D0-A123-3C07-8E44-1C83EC895118} O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {7299052b-02a4-4627-81f2-1818da5d550d} O42 - Logiciel: Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475} O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238} O42 - Logiciel: PhotoFiltre - (.Pas de propriétaire.) [HKLM] -- PhotoFiltre O42 - Logiciel: Phototool 1.8 - (.Telepix Imaging Inc.) [HKLM] -- Phototool 1.8 O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM] -- SFR_Kit O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- KB931906 O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Sid Meier's Civilization 4 - (.Firaxis Games.) [HKCU] -- {CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8} O42 - Logiciel: SweetIM For Internet Explorer 3.0b - (.Macrogaming LTD..) [HKLM] -- {F6D63A65-BD23-46F3-B9A3-87F442423481} O42 - Logiciel: USB Video Driver - (.EETI.) [HKLM] -- {2758691A-2CDE-4942-A4AC-0E8F61FE2067} O42 - Logiciel: Update for Microsoft .NET Framework 3.5 SP1 (KB963707) - (.Microsoft Corporation.) [HKLM] -- {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707 O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52} O42 - Logiciel: Windows Live Toolbar - (.Microsoft Corporation.) [HKLM] -- {F7D27C70-90F5-49B9-B188-0A133C0CE353} ---\\ HKCU & HKLM Software Keys [HKCU\Software\ABBYY] [HKCU\Software\ATI Technologies Inc.] [HKCU\Software\Adobe] [HKCU\Software\America Online] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\FocusInteractive] [HKCU\Software\AppDataLow\Software\Fun Web Products] [HKCU\Software\AppDataLow\Software\FunWebProducts] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\Microsoft] [HKCU\Software\AppDataLow\Software\MyWebSearch] [HKCU\Software\AppDataLow\Software\Yahoo] [HKCU\Software\AppDataLow\Software] [HKCU\Software\AppDataLow] [HKCU\Software\Avira] [HKCU\Software\Battle.net] [HKCU\Software\Blizzard Entertainment] [HKCU\Software\Bugsplat] [HKCU\Software\Camfrog] [HKCU\Software\ClassesB] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\CyberLink] [HKCU\Software\DivXNetworks] [HKCU\Software\FunWebProducts] [HKCU\Software\GameSpy] [HKCU\Software\GamesBar] [HKCU\Software\GlarySoft] [HKCU\Software\Google] [HKCU\Software\IM Providers] [HKCU\Software\INCAInternet] [HKCU\Software\InstallShield] [HKCU\Software\ItsLabel] [HKCU\Software\JavaSoft] [HKCU\Software\Lavasoft] [HKCU\Software\Lexmark 5400 Series] [HKCU\Software\Lexmark] [HKCU\Software\Macromedia] [HKCU\Software\Malwarebytes' Anti-Malware] [HKCU\Software\MozillaPlugins] [HKCU\Software\Mozilla] [HKCU\Software\Netscape] [HKCU\Software\NewTech Infosystems] [HKCU\Software\Ntreev] [HKCU\Software\Oberon Media] [HKCU\Software\PHOTOTOOL] [HKCU\Software\Parisprog] [HKCU\Software\Pointsoft] [HKCU\Software\Policies] [HKCU\Software\Primal] [HKCU\Software\RegDokFR] [HKCU\Software\SSSI] [HKCU\Software\SecuROM] [HKCU\Software\Stoik Screen Savers] [HKCU\Software\Symantec] [HKCU\Software\VB and VBA Program Settings] [HKCU\Software\Valve] [HKCU\Software\Winamp Toolbar] [HKCU\Software\Wise Solutions] [HKCU\Software\YahooPartnerToolbar] [HKCU\Software\Yahoo] [HKCU\Software\Zylom] [HKCU\Software\acer] [HKCU\Software\ej-technologies] [HKLM\Software\ABBYY] [HKLM\Software\ATI Technologies] [HKLM\Software\Acer] [HKLM\Software\Adobe] [HKLM\Software\America Online] [HKLM\Software\AppDataLow] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Avira] [HKLM\Software\Borland] [HKLM\Software\BrowserChoice] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\CyberLink] [HKLM\Software\Dofus 2] [HKLM\Software\DsNETCorp] [HKLM\Software\EA SPORTS] [HKLM\Software\Electronic Arts] [HKLM\Software\Firaxis Games] [HKLM\Software\FullCircle] [HKLM\Software\GlarySoft] [HKLM\Software\Google] [HKLM\Software\InstallShield] [HKLM\Software\Intel] [HKLM\Software\ItsLabel] [HKLM\Software\JavaSoft] [HKLM\Software\JreMetrics] [HKLM\Software\Lavasoft] [HKLM\Software\Lexmark] [HKLM\Software\Licenses] [HKLM\Software\LightScribe] [HKLM\Software\Macrogaming] [HKLM\Software\Macromedia] [HKLM\Software\Malwarebytes' Anti-Malware] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\Neuf] [HKLM\Software\NewTech Infosystems] [HKLM\Software\Ntreev] [HKLM\Software\ODBC] [HKLM\Software\Policies] [HKLM\Software\RegisteredApplications] [HKLM\Software\Sierra OnLine] [HKLM\Software\SkyMessager] [HKLM\Software\SymDebug] [HKLM\Software\Symantec] [HKLM\Software\Trymedia Systems] [HKLM\Software\Valve] [HKLM\Software\Volatile] [HKLM\Software\Winamp Toolbar] [HKLM\Software\X-AVCSD] [HKLM\Software\Yahoo] [HKLM\Software\Zemi Interactive] [HKLM\Software\mozilla.org] ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 22/01/2011 - 08:27:06 ----D- C:\Program Files\Adobe O43 - CFD: 04/07/2009 - 05:35:54 ----D- C:\Program Files\Avira O43 - CFD: 03/02/2011 - 15:27:22 ----D- C:\Program Files\Common Files O43 - CFD: 06/10/2010 - 08:30:12 ----D- C:\Program Files\CyberLink O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\Program Files\Fichiers communs O43 - CFD: 22/01/2011 - 08:38:14 ----D- C:\Program Files\GameSpy Arcade O43 - CFD: 16/01/2011 - 22:46:08 ----D- C:\Program Files\Glary Utilities O43 - CFD: 22/01/2011 - 14:53:00 ----D- C:\Program Files\Google O43 - CFD: 21/01/2011 - 15:52:20 --H-D- C:\Program Files\InstallShield Installation Information O43 - CFD: 09/10/2010 - 14:33:22 ----D- C:\Program Files\Internet Explorer O43 - CFD: 28/12/2010 - 11:01:00 ----D- C:\Program Files\Java O43 - CFD: 29/05/2008 - 16:52:46 ----D- C:\Program Files\Lavasoft O43 - CFD: 27/08/2010 - 09:31:42 ----D- C:\Program Files\Lx_cats O43 - CFD: 06/10/2010 - 08:35:02 ----D- C:\Program Files\ma-config.com O43 - CFD: 31/03/2008 - 09:11:38 ----D- C:\Program Files\Macrogaming O43 - CFD: 05/12/2006 - 00:01:20 ----D- C:\Program Files\Malwarebytes' Anti-Malware O43 - CFD: 19/01/2011 - 16:32:34 ----D- C:\Program Files\Mega Bloc Notes O43 - CFD: 17/12/2008 - 14:08:10 ----D- C:\Program Files\Microsoft O43 - CFD: 12/12/2007 - 07:41:10 ----D- C:\Program Files\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 28/11/2010 - 14:47:00 ----D- C:\Program Files\Microsoft Games O43 - CFD: 17/12/2008 - 14:11:36 ----D- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 17/12/2008 - 14:15:12 ----D- C:\Program Files\Microsoft Sync Framework O43 - CFD: 12/03/2010 - 14:10:20 ----D- C:\Program Files\Movie Maker O43 - CFD: 02/11/2006 - 13:35:52 ----D- C:\Program Files\MSBuild O43 - CFD: 02/11/2006 - 13:35:52 ----D- C:\Program Files\MSN O43 - CFD: 06/06/2010 - 13:10:58 ----D- C:\Program Files\Navilog1 O43 - CFD: 11/12/2007 - 10:39:30 ----D- C:\Program Files\Neuf O43 - CFD: 18/01/2011 - 10:17:02 ----D- C:\Program Files\NewTech Infosystems O43 - CFD: 22/01/2011 - 08:38:12 ----D- C:\Program Files\PhotoFiltre O43 - CFD: 22/01/2011 - 08:38:12 ----D- C:\Program Files\Phototool O43 - CFD: 09/10/2010 - 14:38:46 ----D- C:\Program Files\QuickTime O43 - CFD: 02/11/2006 - 13:35:52 ----D- C:\Program Files\Reference Assemblies O43 - CFD: 09/11/2010 - 09:24:44 ----D- C:\Program Files\TalonSoft O43 - CFD: 04/02/2011 - 09:00:40 ----D- C:\Program Files\trend micro O43 - CFD: 17/09/2010 - 12:32:20 ----D- C:\Program Files\Ubi Soft O43 - CFD: 21/09/2009 - 08:19:42 ----D- C:\Program Files\USB TV O43 - CFD: 12/12/2007 - 07:59:02 ----D- C:\Program Files\Windows Calendar O43 - CFD: 02/11/2006 - 13:40:02 ----D- C:\Program Files\Windows Collaboration O43 - CFD: 12/12/2007 - 07:58:58 ----D- C:\Program Files\Windows Defender O43 - CFD: 21/01/2011 - 15:54:14 ----D- C:\Program Files\Windows Live O43 - CFD: 17/12/2008 - 14:07:08 ----D- C:\Program Files\Windows Live SkyDrive O43 - CFD: 17/12/2008 - 14:15:54 ----D- C:\Program Files\Windows Live Toolbar O43 - CFD: 14/04/2010 - 12:52:44 ----D- C:\Program Files\Windows Mail O43 - CFD: 10/05/2010 - 07:48:34 ----D- C:\Program Files\Windows Media Player O43 - CFD: 24/02/2007 - 10:32:54 ----D- C:\Program Files\Windows NT O43 - CFD: 02/11/2006 - 13:40:02 ----D- C:\Program Files\Windows Photo Gallery O43 - CFD: 31/05/2008 - 02:20:12 ----D- C:\Program Files\Windows Sidebar O43 - CFD: 04/02/2011 - 15:31:24 ----D- C:\Program Files\ZHPDiag O43 - CFD: 14/04/2010 - 13:08:16 ----D- C:\Program Files\Common Files\Adobe O43 - CFD: 28/08/2010 - 15:19:44 ----D- C:\Program Files\Common Files\Adobe AIR O43 - CFD: 03/02/2011 - 15:27:22 ----D- C:\Program Files\Common Files\Borland Shared O43 - CFD: 21/09/2008 - 07:11:16 ----D- C:\Program Files\Common Files\EasyInfo O43 - CFD: 24/02/2007 - 10:43:56 ----D- C:\Program Files\Common Files\InstallShield O43 - CFD: 28/10/2010 - 15:16:36 ----D- C:\Program Files\Common Files\Java O43 - CFD: 15/12/2006 - 16:15:42 ----D- C:\Program Files\Common Files\LightScribe O43 - CFD: 18/01/2011 - 22:27:30 ----D- C:\Program Files\Common Files\microsoft shared O43 - CFD: 09/05/2008 - 06:14:18 ----D- C:\Program Files\Common Files\NSV O43 - CFD: 14/07/2009 - 12:58:18 ----D- C:\Program Files\Common Files\PX Storage Engine O43 - CFD: 02/11/2006 - 12:18:34 ----D- C:\Program Files\Common Files\Services O43 - CFD: 02/11/2006 - 12:18:34 ----D- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 02/07/2008 - 07:43:56 ----D- C:\Program Files\Common Files\Steam O43 - CFD: 06/04/2009 - 18:27:04 ----D- C:\Program Files\Common Files\Symantec Shared O43 - CFD: 12/12/2007 - 07:59:00 ----D- C:\Program Files\Common Files\System O43 - CFD: 17/12/2008 - 13:55:48 ----D- C:\Program Files\Common Files\Windows Live O43 - CFD: 11/12/2007 - 13:50:32 -SH-D- C:\Program Files\Common Files\WindowsLiveInstaller O43 - CFD: 04/12/2006 - 23:04:50 ----D- C:\ProgramData\Adobe O43 - CFD: 03/09/2009 - 13:29:30 ----D- C:\ProgramData\AOL Downloads O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Application Data O43 - CFD: 04/07/2009 - 05:35:54 ----D- C:\ProgramData\Avira O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Bureau O43 - CFD: 17/05/2008 - 09:33:34 ----D- C:\ProgramData\CyberLink O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Desktop O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Documents O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Favoris O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Favorites O43 - CFD: 01/01/2008 - 18:04:20 ----D- C:\ProgramData\Google O43 - CFD: 24/02/2007 - 10:44:10 ----D- C:\ProgramData\InstallShield O43 - CFD: 10/05/2010 - 07:48:34 ----D- C:\ProgramData\Lavasoft O43 - CFD: 06/10/2010 - 08:35:02 ----D- C:\ProgramData\ma-config.com O43 - CFD: 27/02/2009 - 19:06:08 ----D- C:\ProgramData\Malwarebytes O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Menu Démarrer O43 - CFD: 05/12/2006 - 00:22:10 -S--D- C:\ProgramData\Microsoft O43 - CFD: 24/02/2007 - 10:32:54 -SH-D- C:\ProgramData\Modèles O43 - CFD: 10/03/2008 - 15:25:32 ----D- C:\ProgramData\pixelStorm O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Start Menu O43 - CFD: 27/04/2010 - 19:33:22 ----D- C:\ProgramData\Sun O43 - CFD: 02/11/2006 - 13:59:46 -SH-D- C:\ProgramData\Templates O43 - CFD: 10/05/2010 - 07:48:34 ----D- C:\ProgramData\Trymedia O43 - CFD: 14/07/2009 - 12:59:16 ----D- C:\ProgramData\Winamp Toolbar O43 - CFD: 16/03/2008 - 09:44:38 ----D- C:\ProgramData\WLInstaller O43 - CFD: 02/05/2008 - 09:00:42 ----D- C:\Users\Méthylène\AppData\Roaming\5400 Series O43 - CFD: 02/12/2009 - 16:42:44 ----D- C:\Users\Méthylène\AppData\Roaming\Adobe O43 - CFD: 01/03/2007 - 23:52:52 ----D- C:\Users\Méthylène\AppData\Roaming\AdobeUM O43 - CFD: 02/12/2009 - 17:03:58 ----D- C:\Users\Méthylène\AppData\Roaming\app O43 - CFD: 19/01/2011 - 16:32:36 ----D- C:\Users\Méthylène\AppData\Roaming\Audacity O43 - CFD: 06/06/2010 - 12:41:02 ----D- C:\Users\Méthylène\AppData\Roaming\AVP 2009 O43 - CFD: 28/12/2010 - 13:38:32 ----D- C:\Users\Méthylène\AppData\Roaming\BitTorrent O43 - CFD: 08/07/2008 - 18:54:10 ----D- C:\Users\Méthylène\AppData\Roaming\Camfrog O43 - CFD: 07/03/2007 - 14:57:14 ----D- C:\Users\Méthylène\AppData\Roaming\CyberLink O43 - CFD: 04/02/2011 - 13:10:18 ----D- C:\Users\Méthylène\AppData\Roaming\Desktopicon O43 - CFD: 29/11/2010 - 23:23:54 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus 2 O43 - CFD: 20/04/2010 - 09:55:14 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 20/04/2010 - 16:27:56 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 20/04/2010 - 09:58:58 ----D- C:\Users\Méthylène\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 28/02/2009 - 18:09:44 ----D- C:\Users\Méthylène\AppData\Roaming\EoRezo O43 - CFD: 13/05/2010 - 08:21:36 ----D- C:\Users\Méthylène\AppData\Roaming\Firaxis Games O43 - CFD: 10/05/2010 - 08:39:58 ----D- C:\Users\Méthylène\AppData\Roaming\GlarySoft O43 - CFD: 08/06/2008 - 19:06:20 ----D- C:\Users\Méthylène\AppData\Roaming\Google O43 - CFD: 26/02/2008 - 05:44:00 ----D- C:\Users\Méthylène\AppData\Roaming\Identities O43 - CFD: 10/05/2010 - 08:29:06 ----D- C:\Users\Méthylène\AppData\Roaming\InstallShield O43 - CFD: 22/01/2011 - 14:29:28 ----D- C:\Users\Méthylène\AppData\Roaming\InstallShield Installation Information O43 - CFD: 28/02/2008 - 07:20:26 ----D- C:\Users\Méthylène\AppData\Roaming\ItsLabel O43 - CFD: 25/06/2010 - 20:38:58 ----D- C:\Users\Méthylène\AppData\Roaming\Macromedia O43 - CFD: 27/02/2009 - 19:06:24 ----D- C:\Users\Méthylène\AppData\Roaming\Malwarebytes O43 - CFD: 03/10/2010 - 22:26:44 -S--D- C:\Users\Méthylène\AppData\Roaming\Microsoft O43 - CFD: 01/05/2010 - 08:59:30 ----D- C:\Users\Méthylène\AppData\Roaming\Mozilla O43 - CFD: 08/06/2008 - 18:03:06 ----D- C:\Users\Méthylène\AppData\Roaming\MP-Manager O43 - CFD: 08/06/2008 - 17:44:26 ----D- C:\Users\Méthylène\AppData\Roaming\MPMAN O43 - CFD: 21/01/2011 - 15:51:34 ----D- C:\Users\Méthylène\AppData\Roaming\My Games O43 - CFD: 23/03/2008 - 22:22:46 ----D- C:\Users\Méthylène\AppData\Roaming\OpenOffice.org2 O43 - CFD: 04/10/2008 - 04:36:06 ----D- C:\Users\Méthylène\AppData\Roaming\Real O43 - CFD: 02/12/2009 - 17:03:58 ----D- C:\Users\Méthylène\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 21/09/2008 - 03:32:34 R-H-D- C:\Users\Méthylène\AppData\Roaming\SecuROM O43 - CFD: 14/12/2007 - 09:55:12 ----D- C:\Users\Méthylène\AppData\Roaming\Talkback O43 - CFD: 25/02/2010 - 14:32:44 ----D- C:\Users\Méthylène\AppData\Roaming\U3 O43 - CFD: 23/06/2009 - 08:43:24 ----D- C:\Users\Méthylène\AppData\Roaming\WinRAR O43 - CFD: 26/02/2008 - 05:44:00 ----D- C:\Users\Méthylène\AppData\Roaming\Zylom ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.B4ED1200D8DCB87600FCFD7F88EE1200] - 04/02/2011 - 14:52:32 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\WindowsUpdate.log [1692220] O44 - LFC:[MD5.8C25E347F5E2C2BCA9B5258A68B72AE7] - 03/02/2011 - 15:27:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\DBCLIENT.DLL [210032] O44 - LFC:[MD5.4BC02BD73338C3A26265F5C64DBEC770] - 03/02/2011 - 15:27:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\BDEADMIN.CPL [183808] O44 - LFC:[MD5.13A1617D6DFDE3FBB0CAC2EC8377F0E3] - 14/01/2011 - 18:45:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [1181284] O44 - LFC:[MD5.681015AB610B0A66BACB4DB58C742E22] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [288770] O44 - LFC:[MD5.A0A4810A23FDE01A82A193A7E2F16EC4] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [246108] O44 - LFC:[MD5.0E1A71FD0D787E88D857DD4AD2A1A7B9] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [279178] O44 - LFC:[MD5.5BA684DCCC048F19B65B8719F827E46E] - 14/01/2011 - 18:45:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [758662] ---\\ Export de clé d'application autorisée (O47) O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe" [Enabled] .(.Acer Inc. - eDataSecurity Management.) -- C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\encryption.exe" [Enabled] .(.HiTRUST - Encryption Application.) -- C:\Acer\Empowering Technology\eDataSecurity\encryption.exe O47 - AAKE:Key Export SP - "C:\Acer\Empowering Technology\eDataSecurity\decryption.exe" [Enabled] .(.HiTRUST - Decryption Application.) -- C:\Acer\Empowering Technology\eDataSecurity\decryption.exe O47 - AAKE:Key Export SP - "D:\bittorent\BitTorrent\bittorrent.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- D:\bittorent\BitTorrent\bittorrent.exe (.not file.) O47 - AAKE:Key Export SP - "C:\Program Files\BitTorrent\bittorrent.exe" [Enabled] .(.Pas de propriétaire - Pas de description.) -- C:\Program Files\BitTorrent\bittorrent.exe (.not file.) ---\\ MountPoints2 Shell Key (O51) O51 - MPSK:{cb38ffde-3559-11dd-b74e-001921493cca}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\cmd \C launch.bat (.not file.) O51 - MPSK:{cb38ffde-3559-11dd-b74e-001921493cca}\Shell\auto\command - Clé orpheline O51 - MPSK:{d5923b97-21e7-11df-8dc5-001921493cca}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- K:\LaunchU3.exe (.not file.) O51 - MPSK:{fb8238d1-74af-11dd-bb4a-001921493cca}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- J:\EmDesk.exe (.not file.) ---\\ Trojan Driver Search Data (HKLM) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll O52 - TDSD: \Drivers32\"msacm.l3codecp"="" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"wdmaud.drv"="Pilote de fonction UAA 1.1 Microsoft pour High Definition Audio" . (.Pas de propriétaire - Pas de description.) -- (.not file.) O52 - TDSD: \drivers.desc\"l3codecp.acm"="" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Audio Layer-3 Codec for MSACM.) -- C:\Windows\System32\l3codecp.acm O52 - TDSD: \drivers.desc\"C:\Acer\EMPOWE~1\eMode\PCM\Kernel\Burner\MKDMP3Enc.ACM"="MP3 PowerEncoder" . (.Pas de propriétaire - Pas de description.) -- (.not file.) ---\\ Microsoft Control Security Providers (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - TS Single Sign On Security Package.) -- C:\Windows\system32\credssp.dll ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=2 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"= O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"= O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=1 O55 - MWPS:[HKCU\...\Policies\System] - "LogonHoursAction"=2 O55 - MWPS:[HKCU\...\Policies\System] - "DontDisplayLogonHoursWarnings"=1 ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145 ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2EDC5BBAC6C651ECE337BDE8ED97C9FB] - 02/11/2006 - 10:51:38 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [420968] O58 - SDL:[MD5.B84088CA3CDCA97DA44A984C6CE1CCAD] - 02/11/2006 - 10:51:32 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297576] O58 - SDL:[MD5.7880C67BCCC27C86FD05AA2AFB5EA469] - 02/11/2006 - 10:50:35 ---A- . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\system32\drivers\adpu160m.sys [98408] O58 - SDL:[MD5.9AE713F8E30EFC2ABCCD84904333DF4D] - 02/11/2006 - 10:51:00 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [147048] O58 - SDL:[MD5.90395B64600EBB4552E26E178C94B2E4] - 02/11/2006 - 10:49:20 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14952] O58 - SDL:[MD5.5F673180268BB1FDB69C99B6619FE379] - 02/11/2006 - 10:50:09 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [67688] O58 - SDL:[MD5.957F7540B5E7F602E44648C7DE5A1C05] - 02/11/2006 - 10:50:10 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [67688] O58 - SDL:[MD5.554685122B4F973E21D66C2BAAF29543] - 24/11/2006 - 14:46:36 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\system32\drivers\atikmdag.sys [2085888] O58 - SDL:[MD5.14FE36D8F2C6A2435275338D061A0B66] - 12/12/2009 - 14:06:43 ---A- . (.Avira GmbH - Avira Minifilter Driver.) -- C:\Windows\system32\drivers\avgntflt.sys [56816] O58 - SDL:[MD5.AD9BD66A862116E79CB45BB6BE46055F] - 30/03/2009 - 09:32:47 ---A- . (.Avira GmbH - Avira Driver for RootKit Detection.) -- C:\Windows\system32\drivers\avipbb.sys [96104] O58 - SDL:[MD5.124E75B7C483E5D646F99EF5ACFD61B8] - 29/04/2008 - 10:19:50 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Process protection.) -- C:\Windows\system32\drivers\Awrtpd.sys [12960] O58 - SDL:[MD5.973E80FEB99243D150FA3CA490698EB0] - 29/04/2008 - 10:19:54 ---A- . (.Lavasoft AB - Driver for Ad-Watch Real-Time Registry Protection.) -- C:\Windows\system32\drivers\Awrtrd.sys [15648] O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 02/11/2006 - 09:24:45 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568] O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 02/11/2006 - 09:24:46 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248] O58 - SDL:[MD5.B304E75CFF293029EDDF094246747113] - 02/11/2006 - 09:25:24 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [71808] O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336] O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 02/11/2006 - 09:24:44 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160] O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 02/11/2006 - 09:24:47 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904] O58 - SDL:[MD5.45201046C776FFDAF3FC8A0029C581C8] - 02/11/2006 - 10:49:28 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [16488] O58 - SDL:[MD5.AE1FDF7BF7BB6C6A70F67699D880592A] - 02/11/2006 - 10:50:11 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [71272] O58 - SDL:[MD5.5C5333981FA953F2F9082A09A9D1814F] - 01/11/2008 - 08:35:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\dump_wmimmc.sys [141612] O58 - SDL:[MD5.F88FB26547FD2CE6D0A5AF2985892C48] - 02/11/2006 - 08:30:54 ---A- . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel® PRO/1000.) -- C:\Windows\system32\drivers\E1G60I32.sys [117760] O58 - SDL:[MD5.E8F3F21A71720C84BCF423B80028359F] - 02/11/2006 - 10:51:34 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [316520] O58 - SDL:[MD5.DF353B401001246853763C4B7AAA6F50] - 02/11/2006 - 10:50:10 ---A- . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\system32\drivers\HpCISSs.sys [37480] O58 - SDL:[MD5.C957BF4B5D80B46C5017BF0101E6C906] - 02/11/2006 - 10:51:25 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\system32\drivers\iaStorV.sys [232040] O58 - SDL:[MD5.2D077BF86E843F901D8DB709C95B49A5] - 02/11/2006 - 10:50:17 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41576] O58 - SDL:[MD5.BCED60D16156E428F8DF8CF27B0DF150] - 02/11/2006 - 10:50:07 ---A- . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\system32\drivers\iteatapi.sys [35944] O58 - SDL:[MD5.06FA654504A498C30ADCA8BEC4E87E7E] - 02/11/2006 - 10:50:09 ---A- . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\system32\drivers\iteraid.sys [35944] O58 - SDL:[MD5.A2262FB9F28935E862B4DB46438C80D2] - 02/11/2006 - 10:50:04 ---A- . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [65640] O58 - SDL:[MD5.30D73327D390F72A62F32C103DAF1D6D] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [65640] O58 - SDL:[MD5.E1E36FEFD45849A95F1AB81DE0159FE3] - 02/11/2006 - 10:50:10 ---A- . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [65640] O58 - SDL:[MD5.836E0E09CA9869BE7EB39EF2CF3602C7] - 20/12/2010 - 18:08:40 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbam.sys [20952] O58 - SDL:[MD5.D68E165C3123ABA3B1282EDDB4213BD8] - 20/12/2010 - 18:09:00 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Windows\system32\drivers\mbamswissarmy.sys [38224] O58 - SDL:[MD5.D153B14FC6598EAE8422A2037553ADCE] - 02/11/2006 - 10:49:53 ---A- . (.LSI Logic Corporation - MEGASAS RAID Controller Driver for Windows Vista/Longhorn for x.) -- C:\Windows\system32\drivers\megasas.sys [28776] O58 - SDL:[MD5.4FBBB70D30FD20EC51F80061703B001E] - 02/11/2006 - 10:49:59 ---A- . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows Vista/Longhorn for.) -- C:\Windows\system32\drivers\Mraid35x.sys [33384] O58 - SDL:[MD5.2E7FB731D4790A1BC6270ACCEFACB36E] - 02/11/2006 - 10:50:19 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [45160] O58 - SDL:[MD5.AC3E7DB45F04EBD40F4C1E0A0D774269] - 29/04/2008 - 10:20:00 ---A- . (.Lavasoft AB - Driver for Ad-Watch network monitoring.) -- C:\Windows\system32\drivers\NSDriver.sys [15648] O58 - SDL:[MD5.7F1C1F78D709C4A54CBB46EDE7E0B48D] - 15/12/2006 - 16:14:55 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\system32\drivers\NTIDrvr.sys [6144] O58 - SDL:[MD5.E875C093AEC0C978A90F30C9E0DFBB72] - 02/11/2006 - 08:36:50 ---A- . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablette N-trig.) -- C:\Windows\system32\drivers\ntrigdigi.sys [20608] O58 - SDL:[MD5.E69E946F80C1C31C53003BFBF50CBB7C] - 02/11/2006 - 10:50:24 ---A- . (.NVIDIA Corporation - NVIDIA® nForce RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [88680] O58 - SDL:[MD5.9E0BA19A28C498A6D323D065DB76DFFC] - 02/11/2006 - 10:50:13 ---A- . (.NVIDIA Corporation - NVIDIA® nForce Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [40040] O58 - SDL:[MD5.88B72D2A800300EB05C69F3C6C3180F2] - 10/11/2006 - 15:10:50 ---A- . (.HiTRUST - PSD Filter Driver.) -- C:\Windows\system32\drivers\psdfilter.sys [10624] O58 - SDL:[MD5.9649E11FC5459BF6B2C9E8E327E45C3A] - 10/11/2006 - 15:21:16 ---A- . (.HiTRUST - PSD Named Pipe Driver.) -- C:\Windows\system32\drivers\PSDNServ.sys [7936] O58 - SDL:[MD5.3D0BE1373B9DFE9FC7B64F090E4D59E3] - 08/11/2006 - 16:11:30 ---A- . (.HiTRUST - PSD Virtual Disk Driver.) -- C:\Windows\system32\drivers\psdvdisk.sys [53760] O58 - SDL:[MD5.CCDAC889326317792480C0A67156A1EC] - 02/11/2006 - 10:51:45 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [900712] O58 - SDL:[MD5.81A7E5C076E59995D54BC1ED3A16E60B] - 02/11/2006 - 10:50:35 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106088] O58 - SDL:[MD5.959EF612D2CCFDB6D9E443F8E3655013] - 02/11/2006 - 08:30:56 ---A- . (.Realtek Semiconductor Corporation - Realtek 10/100 NDIS 5.1 Driver.) -- C:\Windows\system32\drivers\Rtnicxp.sys [47104] O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 02/11/2006 - 07:37:21 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480] O58 - SDL:[MD5.CEDD6F4E7D84E9F98B34B3FE988373AA] - 02/11/2006 - 10:50:10 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [38504] O58 - SDL:[MD5.DF843C528C4F69D12CE41CE462E973A7] - 02/11/2006 - 10:50:16 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [71784] O58 - SDL:[MD5.D5DFFEAA1E15D4EFFABB9D9A3068AC5B] - 17/08/2005 - 06:45:00 ---A- . (.MCCI - SAMSUNG USB Composite Device Driver.) -- C:\Windows\system32\drivers\sscdbus.sys [58352] O58 - SDL:[MD5.74BFEB686334586BB489FFA81DBE6E48] - 17/08/2005 - 06:47:42 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdcm.sys [6176] O58 - SDL:[MD5.74BFEB686334586BB489FFA81DBE6E48] - 17/08/2005 - 06:47:42 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdcmnt.sys [6176] O58 - SDL:[MD5.8A1BE0C347814F482F493AEA619D57F6] - 17/08/2005 - 06:46:20 ---A- . (.MCCI - SAMSUNG CDMA Modem Filter Driver.) -- C:\Windows\system32\drivers\sscdmdfl.sys [8272] O58 - SDL:[MD5.5AB0B1987F682A59B15B78F84C6AD7D0] - 17/08/2005 - 06:46:26 ---A- . (.MCCI - SAMSUNG CDMA Modem WDM.) -- C:\Windows\system32\drivers\sscdmdm.sys [93872] O58 - SDL:[MD5.003DA106812F5FB22970104AC7295DF2] - 17/08/2005 - 06:44:56 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdwh.sys [5840] O58 - SDL:[MD5.003DA106812F5FB22970104AC7295DF2] - 17/08/2005 - 06:44:56 ---A- . (.MCCI - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\sscdwhnt.sys [5840] O58 - SDL:[MD5.3AD0362CF68DE3AC500E981700242CCA] - 13/07/2009 - 10:01:17 ---A- . (.Avira GmbH - AVIRA SnapShot Driver.) -- C:\Windows\system32\drivers\ssmdrv.sys [28520] O58 - SDL:[MD5.192AA3AC01DF071B541094F251DEED10] - 02/11/2006 - 10:50:05 ---A- . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\system32\drivers\symc8xx.sys [35944] O58 - SDL:[MD5.8C8EB8C76736EBAF3B13B633B2E64125] - 02/11/2006 - 10:49:56 ---A- . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_hi.sys [31848] O58 - SDL:[MD5.8072AF52B5FD103BBBA387A1E49F62CB] - 02/11/2006 - 10:50:03 ---A- . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\system32\drivers\sym_u3.sys [34920] O58 - SDL:[MD5.3CD4EA35A6221B85DCC25DAA46313F8D] - 02/11/2006 - 10:51:25 ---A- . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\system32\drivers\uliahci.sys [235112] O58 - SDL:[MD5.8514D0E5CD0534467C5FC61BE94A569F] - 02/11/2006 - 10:50:35 ---A- . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win2003.) -- C:\Windows\system32\drivers\ulsata.sys [98408] O58 - SDL:[MD5.38C3C6E62B157A6BC46594FADA45C62B] - 02/11/2006 - 10:50:45 ---A- . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\system32\drivers\ulsata2.sys [115816] O58 - SDL:[MD5.FD2E3175FCADA350C7AB4521DCA187EC] - 02/11/2006 - 10:49:30 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [17512] O58 - SDL:[MD5.D984439746D42B30FC65A4C3546C6829] - 02/11/2006 - 10:50:41 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\Windows\system32\drivers\vsmraid.sys [112232] O58 - SDL:[MD5.7D1F3B131D503EF43EE594B5A2B9B427] - 02/11/2006 - 08:30:56 ---A- . (.Marvell - Pilote miniport NDIS6.0 pour contrôleur Ethernet Marvell Yukon.) -- C:\Windows\system32\drivers\yk60x86.sys [194048] O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 02/11/2006 - 08:09:42 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS [9029] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/11/2006 - 08:09:45 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys [27097] O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 02/11/2006 - 08:09:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS [4768] O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/11/2006 - 08:09:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS [42537] O58 - SDL:[MD5.9131FE60ADFAB595C8DA53AD6A06AA31] - 04/01/2005 - 19:43:08 ---A- . (.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) -- C:\Windows\system32\npptNT2.sys [4682] O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 02/11/2006 - 08:09:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS [27866] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/11/2006 - 08:09:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/11/2006 - 08:09:38 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/11/2006 - 08:09:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/11/2006 - 08:09:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS [29146] O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 02/11/2006 - 08:09:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS [33952] O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 02/11/2006 - 08:09:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS [34672] O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 02/11/2006 - 08:09:24 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS [35776] O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 02/11/2006 - 08:09:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS [35536] O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 02/11/2006 - 08:09:22 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS [34672] ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 O63 - Logiciel: RSIT - (.random/random.) O63 - Logiciel: Toolbar SD - (.IDN Team.) ---\\ Liste des services Legacy (O64) O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys - Ancilliary Function Driver for Winsock (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD O64 - Services: CurCS - (.not file.) - aswFsBlk (aswFsBlk) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWFSBLK O64 - Services: CurCS - (.not file.) - aswMonFlt (aswMonFlt) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWMONFLT O64 - Services: CurCS - (.not file.) - aswRdr (aswRdr) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWRDR O64 - Services: CurCS - (.not file.) - avast! Self Protection (aswSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWSP O64 - Services: CurCS - (.not file.) - avast! Network Shield Support (aswTdi) .(.Pas de propriétaire - Pas de description.) - LEGACY_ASWTDI O64 - Services: CurCS - C:\Program Files\Avira\AntiVir Desktop\avgio.sys - avgio (avgio) .(.Avira GmbH - Avira AntiVir Support for Minifilter.) - LEGACY_AVGIO O64 - Services: CurCS - C:\Windows\System32\DRIVERS\avgntflt.sys - avgntflt (avgntflt) .(.Avira GmbH - Avira Minifilter Driver.) - LEGACY_AVGNTFLT O64 - Services: CurCS - C:\Windows\System32\DRIVERS\avipbb.sys - avipbb (avipbb) .(.Avira GmbH - Avira Driver for RootKit Detection.) - LEGACY_AVIPBB O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP O64 - Services: CurCS - (.not file.) - bfastfao (bfastfao) .(.Pas de propriétaire - Pas de description.) - LEGACY_BFASTFAO O64 - Services: CurCS - C:\Windows\System32\DRIVERS\bowser.sys - Bowser (bowser) .(.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) - LEGACY_BOWSER O64 - Services: CurCS - (.not file.) - catchme (catchme) .(.Pas de propriétaire - Pas de description.) - LEGACY_CATCHME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS O64 - Services: CurCS - C:\Windows\System32\CLFS.sys - Common Log (CLFS) (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS O64 - Services: CurCS - C:\Windows\System32\drivers\crcdisk.sys - Crcdisk Filter Driver (crcdisk) .(.Microsoft Corporation - Disk Block Verification Filter Driver.) - LEGACY_CRCDISK O64 - Services: CurCS - C:\Windows\System32\Drivers\dfsc.sys - Dfs Client Driver (DfsC) .(.Microsoft Corporation - DFS Client MUP Surrogate Driver.) - LEGACY_DFSC O64 - Services: CurCS - C:\Windows\system32\Drivers\DUMP_WMIMMC.sys - dump_wmimmc (dump_wmimmc) .(.Pas de propriétaire - Pas de description.) - LEGACY_DUMP_WMIMMC O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL O64 - Services: CurCS - C:\Windows\System32\drivers\ecache.sys - ReadyBoost Caching Driver (Ecache) .(.Microsoft Corporation - Special Memory Device Cache.) - LEGACY_ECACHE O64 - Services: CurCS - (.not file.) - Symantec Eraser Control driver (eeCtrl) .(.Pas de propriétaire - Pas de description.) - LEGACY_EECTRL O64 - Services: CurCS - (.not file.) - EraserUtilDrv10631 (EraserUtilDrv10631) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILDRV10631 O64 - Services: CurCS - (.not file.) - EraserUtilRebootDrv (EraserUtilRebootDrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_ERASERUTILREBOOTDRV O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT O64 - Services: CurCS - C:\Windows\System32\drivers\fileinfo.sys - File Information FS MiniFilter (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO O64 - Services: CurCS - C:\Windows\System32\drivers\fltmgr.sys - FltMgr (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC O64 - Services: CurCS - C:\Windows\System32\drivers\HTTP.sys - HTTP (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP O64 - Services: CurCS - (.not file.) - Symantec Intrusion Prevention Driver (IDSvix86) .(.Pas de propriétaire - Pas de description.) - LEGACY_IDSVIX86 O64 - Services: CurCS - (.not file.) - File Security Driver (IKFileSec) .(.Pas de propriétaire - Pas de description.) - LEGACY_IKFILESEC O64 - Services: CurCS - (.not file.) - System Filter Driver (IKSysFlt) .(.Pas de propriétaire - Pas de description.) - LEGACY_IKSYSFLT O64 - Services: CurCS - (.not file.) - System Security Driver (IKSysSec) .(.Pas de propriétaire - Pas de description.) - LEGACY_IKSYSSEC O64 - Services: CurCS - C:\Acer\Empowering Technology\eRecovery\int15.sys - int15 (int15) .(.Pas de propriétaire - Pas de description.) - LEGACY_INT15 O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys - UAC File Virtualization (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV O64 - Services: CurCS - C:\Windows\system32\drivers\mbamswissarmy.sys - MBAMSwissArmy (MBAMSwissArmy) .(.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) - LEGACY_MBAMSWISSARMY O64 - Services: CurCS - C:\Users\MTHYLN~1\AppData\Local\Temp\mbr.sys (.not file.) - mbr (mbr) .(.Pas de propriétaire - Pas de description.) - LEGACY_MBR O64 - Services: CurCS - (.not file.) - mchInjDrv (mchInjDrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_MCHINJDRV O64 - Services: CurCS - C:\Windows\System32\drivers\mountmgr.sys - Mount Point Manager (MountMgr) .(.Microsoft Corporation - Mount Point Manager.) - LEGACY_MOUNTMGR O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV O64 - Services: CurCS - C:\Windows\system32\drivers\mrxdav.sys - WebDav Client Redirector Driver (MRxDAV) .(.Microsoft Corporation - Windows NT WebDav Minirdr.) - LEGACY_MRXDAV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb.sys - SMB MiniRedirector Wrapper and Engine (mrxsmb) .(.Microsoft Corporation - Windows NT SMB Minirdr.) - LEGACY_MRXSMB O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb10.sys - SMB 1.x MiniRedirector (mrxsmb10) .(.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - LEGACY_MRXSMB10 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\mrxsmb20.sys - SMB 2.0 MiniRedirector (mrxsmb20) .(.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) - LEGACY_MRXSMB20 O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - ISA/EISA Class Driver (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV O64 - Services: CurCS - C:\Windows\System32\Drivers\mup.sys - Mup (Mup) .(.Microsoft Corporation - Multiple UNC Provider driver.) - LEGACY_MUP O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - NativeWiFi Miniport Driver.) - LEGACY_NATIVEWIFIP O64 - Services: CurCS - C:\Windows\System32\drivers\ndis.sys - NDIS System Driver (NDIS) .(.Microsoft Corporation - NDIS 6.0 wrapper driver.) - LEGACY_NDIS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - NDIS User mode I/O driver.) - LEGACY_NDISUIO O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbt.sys - NETBT (netbt) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS O64 - Services: CurCS - C:\Windows\system32\npptNT2.sys - NPPTNT2 (NPPTNT2) .(.INCA Internet Co., Ltd. - nProtect NPSC Kernel Mode Driver for NT.) - LEGACY_NPPTNT2 O64 - Services: CurCS - C:\Windows\System32\drivers\nsiproxy.sys - NSI proxy service (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (PSched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED O64 - Services: CurCS - C:\Windows\System32\DRIVERS\psdfilter.sys - PSDFilter (PSDFilter) .(.HiTRUST - PSD Filter Driver.) - LEGACY_PSDFILTER O64 - Services: CurCS - C:\Windows\System32\drivers\PSDNServ.sys - PSDNSERVER (PSDNServ) .(.HiTRUST - PSD Named Pipe Driver.) - LEGACY_PSDNSERV O64 - Services: CurCS - C:\Windows\System32\drivers\psdvdisk.sys - psdvdisk (psdvdisk) .(.HiTRUST - PSD Virtual Disk Driver.) - LEGACY_PSDVDISK O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rasacd.sys - Remote Access Auto Connection Driver (RasAcd) .(.Microsoft Corporation - RAS Automatic Connection Driver.) - LEGACY_RASACD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rdbss.sys - Redirected Buffering Sub Sysytem (rdbss) .(.Microsoft Corporation - Redirected Drive Buffering SubSystem Driver.) - LEGACY_RDBSS O64 - Services: CurCS - C:\Windows\System32\DRIVERS\RDPCDD.sys - RDPCDD (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD O64 - Services: CurCS - C:\Windows\System32\drivers\rdpencdd.sys - RDP Encoder Mirror Driver (RDPENCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPENCDD O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Smb) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_SMB O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR O64 - Services: CurCS - (.not file.) - SRTSPX (SRTSPX) .(.Pas de propriétaire - Pas de description.) - LEGACY_SRTSPX O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv.sys - srv (srv) .(.Microsoft Corporation - Server driver.) - LEGACY_SRV O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srv2.sys - srv2 (srv2) .(.Microsoft Corporation - Smb 2.0 Server driver.) - LEGACY_SRV2 O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ssmdrv.sys - ssmdrv (ssmdrv) .(.Avira GmbH - AVIRA SnapShot Driver.) - LEGACY_SSMDRV O64 - Services: CurCS - (.not file.) - SYMTDI (SYMTDI) .(.Pas de propriétaire - Pas de description.) - LEGACY_SYMTDI O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX O64 - Services: CurCS - (.not file.) - UBHelper (UBHelper) .(.Pas de propriétaire - Pas de description.) - LEGACY_UBHELPER O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE O64 - Services: CurCS - C:\Windows\System32\drivers\volmgrx.sys - Dynamic Volume Manager (volmgrx) .(.Microsoft Corporation - Volume Manager Extension Driver.) - LEGACY_VOLMGRX O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP O64 - Services: CurCS - C:\Windows\system32\w32time.dll (W32Time) .(.Microsoft Corporation - Service de temps Windows.) - LEGACY_W32TIME O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wanarp.sys - Remote Access IPv6 ARP Driver (Wanarpv6) .(.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - LEGACY_WANARPV6 O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - WDF dynamique.) - LEGACY_WDF01000 ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] "%1" %* (.not file.) O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ---\\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://search.live.com'>http://search.live.com'>http://search.live.com O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Ask Search) - http://websearch.ask.com'>http://websearch.ask.com O69 - SBI: SearchScopes [HKCU] {18EAB056-9057-F224-FD4C-1F6569C4D8D2} - (Ask) - http://www.plusnetwork.com O69 - SBI: SearchScopes [HKCU] {55275674-3800-47E1-8305-84C30758A69B} [DefaultScope] - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {9D5BD211-422C-4164-9298-BB4186A30F31} - (Live Search) - http://search.live.com O69 - SBI: SearchScopes [HKCU] {A1840035-2658-4CE6-BCC0-D41B8DCF75D5} - (Live Search) - http://search.live.co O69 - SBI: SearchScopes [HKCU] {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} - (Winamp Search) - http://slirsredirect.search.aol.com ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.BFD203827AB373DE4650A8898DCD7E6A] [sPRF] (.Macromedia, Inc. - Macromedia Flash Player 6.0 r21.) -- C:\Users\Méthylène\AppData\Local\Temp\First15.exe [1453843] [MD5.5B2DA96D90C95228239806D40B720BD2] [sPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\Méthylène\AppData\Local\Temp\VP6.reg [340] [MD5.1410ADCB69C267916EE702E2A443E93F] [sPRF] (.Pas de propriétaire - Pas de description.) -- C:\Users\Méthylène\AppData\Local\Temp\VP6Install.exe [23040] [MD5.4D6F38D3CDA2D0BA502BC1C499A622CF] [sPRF] (.On2.com - VP6 VIDEO FOR WINDOWS CODEC.) -- C:\Users\Méthylène\AppData\Local\Temp\VP6VFW.dll [442368] ---\\ Recherche d'infection Rogue (O86) C:\Users\Méthylène\AppData\Roaming\5400 Series ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "RemoteSvcAdmin-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "RemoteSvcAdmin-In-TCP" | In - Public - P6 - FALSE | .(.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\Windows\system32\services.exe O87 - FAEL: "WinCollab-DFSR-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-DFSR-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Distributed File System Replication.) -- C:\Windows\system32\dfsr.exe O87 - FAEL: "WinCollab-In-TCP" | In - Domain - P6 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-TCP" | Out - Domain - P6 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-In-UDP" | In - Domain - P17 - TRUE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "WinCollab-Out-UDP" | Out - Domain - P17 - FALSE | .(.Microsoft Corporation - Windows Meeting Space.) -- C:\Program Files\Windows Collaboration\WinCollab.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP-NoScope" | In - Domain - P6 - FALSE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "FPS-SpoolSvc-In-TCP" | In - Private - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "{DCFB3237-C037-4DD8-9E93-E79F15E6B041}" | In - Public - P6 - TRUE | .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Acer\Empowering Technology\eMode\PCM\PCMService.exe O87 - FAEL: "{18954091-BD17-43EA-B34D-097E286447AF}" | In - Public - P17 - TRUE | .(.CyberLink Corp. - CyberLink PowerCinema Resident Program.) -- C:\Acer\Empowering Technology\eMode\PCM\PCMService.exe O87 - FAEL: "{334367E5-ED15-4DF0-9637-5A5A53866104}" | In - Public - P6 - TRUE | .(.Microsoft Corporation - Application sous-système spouleur.) -- C:\Windows\system32\spoolsv.exe O87 - FAEL: "{24EEC957-305D-4D42-BA8E-07DAC4C920AE}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Electronic Arts\La Bataille pour la Terre du Milieu II\game.dat (.not file.) O87 - FAEL: "{2DBE078B-0C6B-4C93-81B8-C923D39FB387}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Electronic Arts\La Bataille pour la Terre du Milieu II\game.dat (.not file.) O87 - FAEL: "CoreNet-GP-LSASS-Out-TCP" | Out - Domain - P6 - TRUE | .(.Microsoft Corporation - Processus de l’autorité de sécurité locale.) -- C:\Windows\system32\lsass.exe O87 - FAEL: "{DEC4995C-E9A2-469A-A030-FC4F2FEDF321}" |In - Public - P6 - TRUE | .(...) -- C:\Windows\System32\lxctcoms.exe (.not file.) O87 - FAEL: "{9ED5A202-C3E2-4009-8379-750AFBE40D77}" |In - Public - P17 - TRUE | .(...) -- C:\Windows\System32\lxctcoms.exe (.not file.) O87 - FAEL: "{C434436B-38AD-4CEF-8507-D083A1A489B9}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\lxctmon.exe (.not file.) O87 - FAEL: "{DE43FF9F-8389-462E-855D-8B1EF7DB4B60}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\lxctmon.exe (.not file.) O87 - FAEL: "{C70CD91E-5238-45B6-A30A-12A3539903BC}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe (.not file.) O87 - FAEL: "{E253D546-B09D-4062-AAE1-94C374038B25}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe (.not file.) O87 - FAEL: "{2FD9FF71-A923-4048-9946-B3FB331918D8}" |In - Domain - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{8D70725B-9AF9-4AFC-BC48-D33316BF2E22}" |In - Domain - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{5DE367C5-DC6F-409E-A650-5003CAE44946}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{6A495E56-50B1-4B8A-A31A-28BCADD703FE}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{99B2A81B-157C-419A-9237-362A8E77221A}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "{D1FE05EF-59F6-49E1-8ACA-C7FF9D4FC2E4}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\MSN Messenger\msnmsgr.exe (.not file.) O87 - FAEL: "TCP Query User{E83156D7-EFA1-48FC-8B2A-10E0BD0A3A92}D:\nouveau dossier\nouveau dossier\emule\emule.exe" |In - Public - P6 - TRUE | .(...) -- D:\nouveau dossier\nouveau dossier\emule\emule.exe (.not file.) O87 - FAEL: "UDP Query User{88A3189D-E8C4-42CE-B6AD-AABFEC59D0A4}D:\nouveau dossier\nouveau dossier\emule\emule.exe" |In - Public - P17 - TRUE | .(...) -- D:\nouveau dossier\nouveau dossier\emule\emule.exe (.not file.) O87 - FAEL: "TCP Query User{5962D0F2-A15C-4AD1-8BC5-21EE572ACCE9}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) O87 - FAEL: "UDP Query User{5E8396DE-00F5-4685-B851-F4EAA903F8D0}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) O87 - FAEL: "{1224D76A-6008-4732-9D22-B18FABBD00D4}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\DNA\btdna.exe (.not file.) O87 - FAEL: "{E556290A-EBD4-43D1-8BF8-65220600F0BC}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\DNA\btdna.exe (.not file.) O87 - FAEL: "{21F96593-3804-4D39-9F51-0416FF336368}" |In - Public - P6 - TRUE | .(...) -- D:\bittorent\BitTorrent\bittorrent.exe (.not file.) O87 - FAEL: "{6EC433F5-AC0C-4710-89FA-306312C238D0}" |In - Public - P17 - TRUE | .(...) -- D:\bittorent\BitTorrent\bittorrent.exe (.not file.) O87 - FAEL: "TCP Query User{DDD52DE3-CDA1-4538-B04E-DB667EBB15CE}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "UDP Query User{9B7102F4-DDA3-4D29-9C35-341FD87FEF9B}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "TCP Query User{B7B94084-6FB6-4AF0-A980-D318B196BB29}D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe" |In - Public - P6 - TRUE | .(...) -- D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe (.not file.) O87 - FAEL: "UDP Query User{70580409-3BE2-4DFF-BC16-C8A3C582C1CD}D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe" |In - Public - P17 - TRUE | .(...) -- D:\counter strike source\steamapps\ookalifaoo\counter-strike source\hl2.exe (.not file.) O87 - FAEL: "{819922AE-6386-4755-A3C5-D82CB09BA1FF}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\Orb.exe (.not file.) O87 - FAEL: "{2DDF639B-4958-4444-B150-E87EEB96329B}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\Orb.exe (.not file.) O87 - FAEL: "{FF76929F-8ADC-4D66-810B-45DB1B23B8EA}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbTray.exe (.not file.) O87 - FAEL: "{F5707102-E008-40FD-BB2C-13CCFE143916}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbTray.exe (.not file.) O87 - FAEL: "{416D8A15-6388-4D2F-8BB8-29D0858F370C}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe (.not file.) O87 - FAEL: "{610D7A22-5F7F-42FA-88A6-46262BE174EF}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe (.not file.) O87 - FAEL: "TCP Query User{3CDB774E-4F83-45A9-86B0-219BF1819433}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "UDP Query User{D1D20F44-DA5D-40CF-8C58-0033E7D880D6}C:\program files\camfrog\camfrog video chat\camfrog video chat.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\camfrog\camfrog video chat\camfrog video chat.exe (.not file.) O87 - FAEL: "TCP Query User{C28017CF-B273-4C3F-A099-A3F85BDBFDD4}C:\program files\emule\emule.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "UDP Query User{D81F9B75-A656-4A36-8361-B9A3D9DB5808}C:\program files\emule\emule.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\emule\emule.exe (.not file.) O87 - FAEL: "TCP Query User{D01A2419-7D59-4792-B7EC-0D40478B8ECD}C:\program files\utorrent\utorrent.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\utorrent\utorrent.exe (.not file.) O87 - FAEL: "UDP Query User{6AB004A8-80D0-4EC6-BF24-7C67EEB3706A}C:\program files\utorrent\utorrent.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\utorrent\utorrent.exe (.not file.) O87 - FAEL: "TCP Query User{E5EA967A-8406-4465-8576-0B49A6D764F2}C:\program files\warcraft iii\war3.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\warcraft iii\war3.exe (.not file.) O87 - FAEL: "UDP Query User{AA135F62-81C2-4E80-B664-F46627388447}C:\program files\warcraft iii\war3.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\warcraft iii\war3.exe (.not file.) O87 - FAEL: "TCP Query User{66346B1A-2492-4589-B49D-3D1DAD988127}D:\warcraft iii\war3.exe" |In - Public - P6 - TRUE | .(...) -- D:\warcraft iii\war3.exe (.not file.) O87 - FAEL: "UDP Query User{B9C8A60D-70A4-4D72-BCA5-C5299B1072C8}D:\warcraft iii\war3.exe" |In - Public - P17 - TRUE | .(...) -- D:\warcraft iii\war3.exe (.not file.) O87 - FAEL: "TCP Query User{ED0C39D2-6D0E-4A55-A35E-59401342D68D}C:\program files\mozilla firefox\firefox.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "UDP Query User{B78B82A2-7E12-4EF6-9E22-72D15E71F810}C:\program files\mozilla firefox\firefox.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "TCP Query User{79B3EB5F-86B2-4C30-946D-FE93D3F15785}C:\program files\bittorrent\bittorrent.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "UDP Query User{B820872F-42EF-4243-B267-474014B80B2C}C:\program files\bittorrent\bittorrent.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "TCP Query User{F07FCFCA-E3BE-47EF-8CC3-E3CFB46A23AD}C:\program files\mozilla firefox\firefox.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "UDP Query User{EB2D1B4E-5C8F-4F29-964B-49B131E68205}C:\program files\mozilla firefox\firefox.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\mozilla firefox\firefox.exe (.not file.) O87 - FAEL: "TCP Query User{83E1B042-9E5B-4BE9-AD3D-406738CA0C87}C:\program files\bittorrent\bittorrent.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "UDP Query User{CEF8FD4C-8EBF-4BE7-AE36-3DF875DAAC77}C:\program files\bittorrent\bittorrent.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "TCP Query User{D944452A-1DAA-4024-AB41-8A3861CE55FE}C:\program files\metin2_france\metin2.bin" |In - Private - P6 - TRUE | .(...) -- C:\program files\metin2_france\metin2.bin (.not file.) O87 - FAEL: "UDP Query User{236735D1-7CB6-44D5-B13A-11985F3690B0}C:\program files\metin2_france\metin2.bin" |In - Private - P17 - TRUE | .(...) -- C:\program files\metin2_france\metin2.bin (.not file.) O87 - FAEL: "{E3763DF6-34A6-453B-9681-39D8428B6744}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O87 - FAEL: "{F8257732-2646-4DE6-9327-D807C154F2F5}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files\ma-config.com\maconfservice.exe (.not file.) O87 - FAEL: "TCP Query User{0CBB7365-E5C1-43ED-AB1F-4B2777D88D49}C:\program files\dsnet corp\atube catcher 1.0\smh.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\dsnet corp\atube catcher 1.0\smh.exe (.not file.) O87 - FAEL: "UDP Query User{C75CD936-66A5-4EDA-9701-65008E8858E5}C:\program files\dsnet corp\atube catcher 1.0\smh.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\dsnet corp\atube catcher 1.0\smh.exe (.not file.) O87 - FAEL: "TCP Query User{AAC13CB8-CFF7-4BEA-A067-E1A2F7CF3BE0}C:\users\public\games\world of warcraft trial\backgrounddownloader.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\public\games\world of warcraft trial\backgrounddownloader.exe (.not file.) O87 - FAEL: "UDP Query User{1D07154A-C21D-499C-A3CB-2997798E386F}C:\users\public\games\world of warcraft trial\backgrounddownloader.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\public\games\world of warcraft trial\backgrounddownloader.exe (.not file.) O87 - FAEL: "TCP Query User{0CB84482-D6E3-4EAE-9B61-2E041F363171}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "UDP Query User{038D7162-EF23-4D93-B634-670A9BCAD0CA}C:\users\kalifa_le_boss!\program files\dna\btdna.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\kalifa_le_boss!\program files\dna\btdna.exe (.not file.) O87 - FAEL: "TCP Query User{FDEA6399-DBBB-4030-A95C-8449D3DD7CFF}C:\program files\metin2\metin2.bin" |In - Private - P6 - TRUE | .(...) -- C:\program files\metin2\metin2.bin (.not file.) O87 - FAEL: "UDP Query User{5C71E40F-CFC4-47F3-86DB-83A90A36C6EF}C:\program files\metin2\metin2.bin" |In - Private - P17 - TRUE | .(...) -- C:\program files\metin2\metin2.bin (.not file.) O87 - FAEL: "TCP Query User{07208B3B-B394-4519-A6CE-230E7B3F82C4}C:\program files\metin2\metin2client.bin" |In - Private - P6 - TRUE | .(...) -- C:\program files\metin2\metin2client.bin (.not file.) O87 - FAEL: "UDP Query User{697A57E0-B6E1-4EFE-B90F-9BAB4D0EC49F}C:\program files\metin2\metin2client.bin" |In - Private - P17 - TRUE | .(...) -- C:\program files\metin2\metin2client.bin (.not file.) O87 - FAEL: "TCP Query User{DB7CF5A0-DFB1-4FAA-8280-7450F78394E2}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "UDP Query User{2C9F1F88-77BB-4223-B5D5-142560F487F3}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "TCP Query User{D88C9CEC-4502-4AE5-BD6F-55D70F98AF59}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "UDP Query User{995A6AC9-1D7A-4AE2-B6EC-C23015D5F5EA}C:\program files\team17 software ltd\worms forts under siege\wf.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\team17 software ltd\worms forts under siege\wf.exe (.not file.) O87 - FAEL: "TCP Query User{A56C9F79-69B8-48CD-BEF4-DAD19B1A3FB1}C:\sierra\empire earth\empire earth.exe" |In - Private - P6 - TRUE | .(...) -- C:\sierra\empire earth\empire earth.exe (.not file.) O87 - FAEL: "UDP Query User{6FC3CD9B-FE4D-41D1-9D00-1EC68A316D2A}C:\sierra\empire earth\empire earth.exe" |In - Private - P17 - TRUE | .(...) -- C:\sierra\empire earth\empire earth.exe (.not file.) O87 - FAEL: "TCP Query User{053F9AC5-5219-445E-9564-E1C9760DE123}D:\films\program files\bittorrent\bittorrent.exe" |In - Private - P6 - TRUE | .(...) -- D:\films\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "UDP Query User{5AF5DAA7-3453-4ADE-B10A-9029AC682ADB}D:\films\program files\bittorrent\bittorrent.exe" |In - Private - P17 - TRUE | .(...) -- D:\films\program files\bittorrent\bittorrent.exe (.not file.) O87 - FAEL: "{F292E393-27F6-4218-8C5E-18A905298775}" |In - Private - P6 - TRUE | .(...) -- D:\Civilization4.exe (.not file.) O87 - FAEL: "{EE39813A-3A0A-4EF6-9D10-25381B0B19EB}" |In - Private - P17 - TRUE | .(...) -- D:\Civilization4.exe (.not file.) ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 14/06/2008 611664 | (aawservice) . (.Lavasoft.) - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe SR - | Auto 12/11/2006 24576 | (AcerMemUsageCheckService) . (.Pas de propriétaire.) - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe SR - | Auto 13/07/2009 108289 | (AntiVirSchedulerService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\sched.exe SR - | Auto 18/08/2009 185089 | (AntiVirService) . (.Avira GmbH.) - C:\Program Files\Avira\AntiVir Desktop\avguard.exe SR - | Auto 24/11/2006 557056 | (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\system32\Ati2evxx.exe SR - | Auto 25/11/2006 274520 | (CLCapSvc) . (.Pas de propriétaire.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLCapSvc.exe SR - | Auto 25/11/2006 118870 | (CLSched) . (.Pas de propriétaire.) - C:\Acer\Empowering Technology\eMode\PCM\Kernel\TV\CLSched.exe SR - | Auto 08/12/2006 45056 | (eRecoveryService) . (.Acer Inc..) - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe SS - | Demand 13/02/2008 138168 | (gusvc) . (.Google.) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 04/04/2005 69632 | (IDriverT) . (.Macrovision Corporation.) - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe SR - | Auto 19/10/2006 61440 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe SR - | Auto 24/11/2006 262247 | (RichVideo) . (.Pas de propriétaire.) - C:\Program Files\CyberLink\Shared Files\RichVideo.exe SS - | Demand 27/06/2008 87288 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files\Common Files\Steam\SteamService.exe SR - | Auto 02/11/2006 22016 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe ---\\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net Run by Méthylène at 04/02/2011 15:31:42 device: opened successfully user: MBR read successfully Disk trace: called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys PCIIDEX.SYS atapi.sys tcpip.sys NETIO.SYS win32k.sys cdd.dll dxgkrnl.sys atikmdag.sys watchdog.sys C:\Windows\system32\DRIVERS\atikmdag.sys ATI Technologies Inc. ATI Radeon Family 1 ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Harddisk0\DR0[0x83FA8030] 3 ntkrnlpa[0x828B07E2] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> [0x83EEA868] 5 acpi[0x8064E32A] -> ntkrnlpa!IofCallDriver[0x82827F3B] -> \Device\Ide\IdeDeviceP0T0L0-0[0x83EF2BB0] kernel: MBR read successfully user & kernel MBR OK ---\\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Méthylène at 04/02/2011 15:31:42 Use the desktop link 'MBRCheck' to have full report ---\\ Infection Rogue/FakeAlert (Possible) O87 - FAEL: "TCP Query User{5962D0F2-A15C-4AD1-8BC5-21EE572ACCE9}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) O87 - FAEL: "UDP Query User{5E8396DE-00F5-4685-B851-F4EAA903F8D0}C:\program files\eorezo\eodesk3d\itstv.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files\eorezo\eodesk3d\itstv.exe (.not file.) ---\\ Infection BT - BHO/Toolbar (Possible) [HKCU\Software\AppDataLow\Software\MyWebSearch] [HKCU\Software\GamesBar] O69 - SBI: SearchScopes [HKCU] {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} - (Ask Search) - http://websearch.ask.com End of the scan (983 lines in 00mn 29s)(0)

" Les fichiers avec l'extension 17 ne peuvent pas être déposés " ... j'ai fais une fausse manoeuvre ?

Antivir m'a signalé un cheval de troie dont j'ai refuser l'accés ... Ensuite effectivement Malware a redemarrer l'ordinateur, et, comme d'habitude j'ai dû passer par F2, et ensuite rerégler la date et l'heure .... Pourquoi il me fait ça tout l'temps ? Ensuite Windows a refuser l'application au démarrage de Malware, donc je l'ai autorisé ... L'ordinateur fait toujours beaucoup de bruit, mais ne chauffe pas, l'acces Internet plus lent que d'habitude, mais ça ce n'est pas grave ... Je vais chercher ZHPdiag et je vous recontacte , merçi à tous pour votre aide ....

voilà le rapport, il fait peur ! Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 5673 Windows 6.0.6000 Internet Explorer 8.0.6001.18904 04/02/2011 13:10:29 mbam-log-2011-02-04 (13-10-29).txt Type d'examen: Examen complet (C:\|D:\|) Elément(s) analysé(s): 231663 Temps écoulé: 50 minute(s), 51 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 128 Valeur(s) du Registre infectée(s): 6 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 17 Fichier(s) infecté(s): 84 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MyWebSearchService (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\243B60DF-796C-409E-BE55-0AD5C9710BA4 (Adware.Platrium) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearchToolBar.SettingsPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearchToolBar.SettingsPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1093995A-BA37-41D2-836E-091067C4AD17} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.IECookiesManager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.IECookiesManager (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.DataControl.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.DataControl (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearchToolBar.ToolbarPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearchToolBar.ToolbarPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterSettingsControl.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterSettingsControl (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.PseudoTransparentPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.PseudoTransparentPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterBarButton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterBarButton (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ScreenSaverControl.ScreenSaverInstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\ScreenSaverControl.ScreenSaverInstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.OutlookAddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.KillerObjManager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.KillerObjManager (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.HistoryKillerScheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.HistoryKillerScheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.HistorySwatterControlBar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProducts.HistorySwatterControlBar (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.ChatSessionPlugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.ChatSessionPlugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{F42228FB-E84E-479E-B922-FBBD096E792C} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{B12ACA14-C7FB-44FE-883B-6121FD02BAD3} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{D53E4ACF-EDF5-4071-903B-F84B64FC1EA2} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{94EB08EF-C96F-425F-BCD3-4EB7C4847E56} (Adware.Platrium) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.HTMLPanel (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\MyWebSearch.HTMLPanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\bc.DLL (Adware.Platrium) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Cognac (Rogue.Multiple) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\IGB (Rogue.Residue) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Value: f3PopularScreensavers -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Value: FunWebProducts -> Quarantined and deleted successfully. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): c:\Users\jean-claude\AppData\Roaming\Platrium (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherdpa (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherdpa\weather_xml (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weather_xml (Adware.Zango) -> Quarantined and deleted successfully. c:\program files\mywebsearch (Adware.MyWebSearch) -> Delete on reboot. c:\program files\mywebsearch\bar (Adware.MyWebSearch) -> Delete on reboot. c:\program files\mywebsearch\bar\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin (Adware.MyWebSearch) -> Delete on reboot. c:\program files\mywebsearch\bar\Avatar (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\firefox (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\firefox\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Game (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\icons (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Message (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully. Fichier(s) infecté(s): c:\Program Files\MyWebSearch\bar\2.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Delete on reboot. c:\program files\mywebsearch\bar\2.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\windows live\messenger\riched20.dll (PUP.FunWebProducts) -> Not selected for removal. c:\program files\mywebsearch\bar\1.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3PSSAVR.SCR (PUP.FunWebProducts) -> Not selected for removal. c:\program files\mywebsearch\bar\2.bin\F3REGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3RESTUB.DLL (PUP.FunWebProducts) -> Not selected for removal. c:\program files\mywebsearch\bar\2.bin\F3SCHMON.EXE (PUP.FunWebProducts) -> Not selected for removal. c:\program files\mywebsearch\bar\2.bin\M3AUXSTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3DLGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\firefox\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\Users\méthylène\setup.exe (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\méthylène\backups\backup-20090228-133429-159.dll (Rogue.Eorezo) -> Quarantined and deleted successfully. c:\Users\méthylène\AppData\Roaming\desktopicon\ebayshortcuts.exe (Adware.ADON) -> Quarantined and deleted successfully. c:\Users\méthylène\AppData\Roaming\EoRezo\softwareupdate\softwareupdatehp.exe (Rogue.Eorezo) -> Quarantined and deleted successfully. c:\Windows\System32\f3PSSavr.scr (PUP.FunWebProducts) -> Not selected for removal. c:\Windows\Tasks\{783af354-b514-42d6-970e-3e8bf0a5279c}.job (Trojan.Downloader) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherstartup.xml (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherdpa\Links (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherdpa\weatherpreferences (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherdpa\weather_xml\Display (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherdpa\weather_xml\Loading (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weatherdpa\weather_xml\screen2 (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weather_xml\Default (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weather_xml\Genera1 (Adware.Zango) -> Quarantined and deleted successfully. c:\Users\jean-claude\AppData\Roaming\Platrium\Weather\weather_xml\General (Adware.Zango) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\1.bin\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\1.bin\m3ffxtbr.manifest (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\1.bin\M3NTSTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\1.bin\m3ntstbr.manifest (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\2.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\firefox\chrome.manifest (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\firefox\INSTALL.RDF (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\firefox\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\mywebsearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.