nemonemonemo

2011/12/19 15:10:31.0760 4332 TDSS rootkit removing tool 2.5.1.0 May 13 2011 13:20:29 2011/12/19 15:10:33.0055 4332 ================================================================================ 2011/12/19 15:10:33.0055 4332 SystemInfo: 2011/12/19 15:10:33.0055 4332 2011/12/19 15:10:33.0055 4332 OS Version: 6.0.6002 ServicePack: 2.0 2011/12/19 15:10:33.0055 4332 Product type: Workstation 2011/12/19 15:10:33.0055 4332 ComputerName: PC-DE-ZORRO 2011/12/19 15:10:33.0055 4332 UserName: zorro 2011/12/19 15:10:33.0055 4332 Windows directory: C:\Windows 2011/12/19 15:10:33.0055 4332 System windows directory: C:\Windows 2011/12/19 15:10:33.0055 4332 Processor architecture: Intel x86 2011/12/19 15:10:33.0055 4332 Number of processors: 2 2011/12/19 15:10:33.0055 4332 Page size: 0x1000 2011/12/19 15:10:33.0055 4332 Boot type: Normal boot 2011/12/19 15:10:33.0055 4332 ================================================================================ 2011/12/19 15:10:33.0710 4332 Initialize success 2011/12/19 15:11:33.0458 3204 ================================================================================ 2011/12/19 15:11:33.0458 3204 Scan started 2011/12/19 15:11:33.0458 3204 Mode: Manual; 2011/12/19 15:11:33.0458 3204 ================================================================================ 2011/12/19 15:11:34.0207 3204 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 2011/12/19 15:11:34.0488 3204 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys 2011/12/19 15:11:34.0769 3204 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys 2011/12/19 15:11:35.0003 3204 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys 2011/12/19 15:11:35.0221 3204 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys 2011/12/19 15:11:35.0720 3204 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys 2011/12/19 15:11:35.0954 3204 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys 2011/12/19 15:11:36.0173 3204 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 2011/12/19 15:11:36.0422 3204 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys 2011/12/19 15:11:36.0641 3204 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys 2011/12/19 15:11:36.0828 3204 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys 2011/12/19 15:11:37.0046 3204 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys 2011/12/19 15:11:37.0468 3204 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys 2011/12/19 15:11:37.0717 3204 ApfiltrService (0a0fbc30de483233124cdaef8e5cbcdd) C:\Windows\system32\DRIVERS\Apfiltr.sys 2011/12/19 15:11:37.0936 3204 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys 2011/12/19 15:11:38.0216 3204 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys 2011/12/19 15:11:38.0716 3204 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 2011/12/19 15:11:39.0558 3204 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 2011/12/19 15:11:39.0901 3204 b57nd60x (aa6b367ca7da571dfc3374ec137d87a5) C:\Windows\system32\DRIVERS\b57nd60x.sys 2011/12/19 15:11:40.0120 3204 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 2011/12/19 15:11:40.0400 3204 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys 2011/12/19 15:11:40.0759 3204 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 2011/12/19 15:11:40.0884 3204 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 2011/12/19 15:11:41.0118 3204 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 2011/12/19 15:11:41.0399 3204 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 2011/12/19 15:11:41.0945 3204 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 2011/12/19 15:11:42.0132 3204 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 2011/12/19 15:11:42.0335 3204 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 2011/12/19 15:11:42.0772 3204 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys 2011/12/19 15:11:42.0974 3204 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 2011/12/19 15:11:43.0224 3204 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 2011/12/19 15:11:43.0458 3204 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys 2011/12/19 15:11:43.0910 3204 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 2011/12/19 15:11:44.0129 3204 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys 2011/12/19 15:11:44.0410 3204 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys 2011/12/19 15:11:44.0597 3204 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys 2011/12/19 15:11:44.0846 3204 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys 2011/12/19 15:11:45.0034 3204 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys 2011/12/19 15:11:45.0190 3204 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys 2011/12/19 15:11:45.0486 3204 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 2011/12/19 15:11:45.0736 3204 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 2011/12/19 15:11:46.0360 3204 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 2011/12/19 15:11:46.0531 3204 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys 2011/12/19 15:11:47.0483 3204 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 2011/12/19 15:11:47.0935 3204 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys 2011/12/19 15:11:48.0232 3204 enecir (29dcaeb81dde6f154aa4d36b18ecbb1f) C:\Windows\system32\DRIVERS\enecir.sys 2011/12/19 15:11:48.0450 3204 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys 2011/12/19 15:11:48.0949 3204 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 2011/12/19 15:11:49.0199 3204 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 2011/12/19 15:11:49.0370 3204 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 2011/12/19 15:11:49.0620 3204 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 2011/12/19 15:11:49.0745 3204 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 2011/12/19 15:11:49.0948 3204 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 2011/12/19 15:11:50.0197 3204 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 2011/12/19 15:11:50.0416 3204 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 2011/12/19 15:11:50.0572 3204 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys 2011/12/19 15:11:50.0868 3204 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys 2011/12/19 15:11:51.0086 3204 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 2011/12/19 15:11:51.0164 3204 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 2011/12/19 15:11:51.0258 3204 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys 2011/12/19 15:11:51.0352 3204 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 2011/12/19 15:11:51.0430 3204 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys 2011/12/19 15:11:51.0554 3204 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS 2011/12/19 15:11:51.0679 3204 HSF_DPV (3f53b4af98f8fd83b7f0b8b65d2d90a7) C:\Windows\system32\DRIVERS\HSX_DPV.sys 2011/12/19 15:11:51.0820 3204 HSXHWAZL (194bc52fc0f53e540faf9de8a9c05255) C:\Windows\system32\DRIVERS\HSXHWAZL.sys 2011/12/19 15:11:51.0976 3204 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 2011/12/19 15:11:52.0054 3204 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys 2011/12/19 15:11:52.0178 3204 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 2011/12/19 15:11:52.0319 3204 iaStor (2358c53f30cb9dcd1d3843c4e2f299b2) C:\Windows\system32\DRIVERS\iaStor.sys 2011/12/19 15:11:52.0350 3204 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys 2011/12/19 15:11:52.0506 3204 igfx (c134e69ce901422d1f2d7ea8d69098fe) C:\Windows\system32\DRIVERS\igdkmd32.sys 2011/12/19 15:11:52.0631 3204 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 2011/12/19 15:11:52.0849 3204 int15 (c6e5276c00ebdeb096bb5ef4b797d1b6) C:\Acer\Empowering Technology\eRecovery\int15.sys 2011/12/19 15:11:53.0083 3204 IntcAzAudAddService (0f16d98c3af2138fabfa20adde4e01fe) C:\Windows\system32\drivers\RTKVHDA.sys 2011/12/19 15:11:53.0224 3204 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 2011/12/19 15:11:53.0255 3204 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 2011/12/19 15:11:53.0317 3204 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2011/12/19 15:11:53.0442 3204 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys 2011/12/19 15:11:53.0504 3204 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 2011/12/19 15:11:53.0567 3204 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 2011/12/19 15:11:53.0629 3204 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys 2011/12/19 15:11:53.0707 3204 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 2011/12/19 15:11:53.0754 3204 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 2011/12/19 15:11:53.0863 3204 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 2011/12/19 15:11:53.0957 3204 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 2011/12/19 15:11:54.0082 3204 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys 2011/12/19 15:11:54.0690 3204 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys 2011/12/19 15:11:55.0720 3204 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 2011/12/19 15:11:56.0562 3204 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys 2011/12/19 15:11:57.0701 3204 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys 2011/12/19 15:11:57.0982 3204 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys 2011/12/19 15:11:58.0715 3204 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 2011/12/19 15:11:59.0120 3204 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys 2011/12/19 15:11:59.0339 3204 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys 2011/12/19 15:11:59.0526 3204 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys 2011/12/19 15:11:59.0635 3204 mfeavfk (21dd45cae791d0cde10631b80f16f653) C:\Windows\system32\drivers\mfeavfk.sys 2011/12/19 15:12:00.0025 3204 mfebopk (decde1c615c256fa2893b5962b0b91e5) C:\Windows\system32\drivers\mfebopk.sys 2011/12/19 15:12:00.0072 3204 mfehidk (f85cd2b918202b7ee49757c361c7eac2) C:\Windows\system32\drivers\mfehidk.sys 2011/12/19 15:12:00.0134 3204 mferkdk (5f33a57f904b64d1c6a548eca47a8656) C:\Windows\system32\drivers\mferkdk.sys 2011/12/19 15:12:00.0727 3204 mfesmfk (299a86b780c9627aaa24e74292363ed2) C:\Windows\system32\drivers\mfesmfk.sys 2011/12/19 15:12:00.0868 3204 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 2011/12/19 15:12:01.0055 3204 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 2011/12/19 15:12:01.0086 3204 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 2011/12/19 15:12:01.0741 3204 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 2011/12/19 15:12:02.0084 3204 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 2011/12/19 15:12:02.0786 3204 MPFP (96cf5286bc370b558735a7b891232d92) C:\Windows\system32\Drivers\Mpfp.sys 2011/12/19 15:12:03.0005 3204 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys 2011/12/19 15:12:04.0128 3204 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 2011/12/19 15:12:04.0799 3204 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 2011/12/19 15:12:05.0189 3204 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 2011/12/19 15:12:05.0267 3204 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys 2011/12/19 15:12:05.0782 3204 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2011/12/19 15:12:06.0842 3204 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2011/12/19 15:12:07.0014 3204 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys 2011/12/19 15:12:07.0123 3204 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys 2011/12/19 15:12:07.0778 3204 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 2011/12/19 15:12:07.0841 3204 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 2011/12/19 15:12:08.0122 3204 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 2011/12/19 15:12:08.0886 3204 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 2011/12/19 15:12:09.0151 3204 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 2011/12/19 15:12:09.0869 3204 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 2011/12/19 15:12:10.0243 3204 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 2011/12/19 15:12:10.0290 3204 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 2011/12/19 15:12:10.0742 3204 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 2011/12/19 15:12:10.0852 3204 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 2011/12/19 15:12:11.0117 3204 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 2011/12/19 15:12:11.0210 3204 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 2011/12/19 15:12:11.0881 3204 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 2011/12/19 15:12:12.0068 3204 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 2011/12/19 15:12:12.0224 3204 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 2011/12/19 15:12:12.0302 3204 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 2011/12/19 15:12:12.0380 3204 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 2011/12/19 15:12:12.0630 3204 NETw3v32 (35d5458d9a1b26b2005abffbf4c1c5e7) C:\Windows\system32\DRIVERS\NETw3v32.sys 2011/12/19 15:12:13.0051 3204 NETw4v32 (38d720e0c8b0ecb9a019980265679798) C:\Windows\system32\DRIVERS\NETw4v32.sys 2011/12/19 15:12:13.0426 3204 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 2011/12/19 15:12:14.0377 3204 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 2011/12/19 15:12:14.0471 3204 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 2011/12/19 15:12:14.0658 3204 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 2011/12/19 15:12:14.0705 3204 NTIDrvr (7f1c1f78d709c4a54cbb46ede7e0b48d) C:\Windows\system32\DRIVERS\NTIDrvr.sys 2011/12/19 15:12:14.0783 3204 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 2011/12/19 15:12:14.0845 3204 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 2011/12/19 15:12:14.0923 3204 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys 2011/12/19 15:12:15.0017 3204 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys 2011/12/19 15:12:15.0126 3204 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys 2011/12/19 15:12:15.0298 3204 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys 2011/12/19 15:12:15.0376 3204 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 2011/12/19 15:12:15.0469 3204 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 2011/12/19 15:12:15.0516 3204 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 2011/12/19 15:12:15.0594 3204 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 2011/12/19 15:12:15.0641 3204 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys 2011/12/19 15:12:15.0719 3204 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 2011/12/19 15:12:15.0844 3204 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 2011/12/19 15:12:16.0000 3204 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 2011/12/19 15:12:16.0078 3204 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys 2011/12/19 15:12:16.0171 3204 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 2011/12/19 15:12:16.0265 3204 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys 2011/12/19 15:12:16.0374 3204 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 2011/12/19 15:12:16.0483 3204 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 2011/12/19 15:12:16.0577 3204 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 2011/12/19 15:12:16.0670 3204 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 2011/12/19 15:12:16.0780 3204 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 2011/12/19 15:12:16.0873 3204 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 2011/12/19 15:12:16.0982 3204 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 2011/12/19 15:12:17.0014 3204 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 2011/12/19 15:12:17.0076 3204 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys 2011/12/19 15:12:17.0138 3204 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 2011/12/19 15:12:17.0216 3204 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys 2011/12/19 15:12:17.0310 3204 rimmptsk (c35ca13d3627ebd9dd12a23ce781bc3d) C:\Windows\system32\DRIVERS\rimmptsk.sys 2011/12/19 15:12:17.0404 3204 rimsptsk (c398bca91216755b098679a8da8a2300) C:\Windows\system32\DRIVERS\rimsptsk.sys 2011/12/19 15:12:17.0482 3204 rismxdp (2a2554cb24506e0a0508fc395c4a1b42) C:\Windows\system32\DRIVERS\rixdptsk.sys 2011/12/19 15:12:18.0355 3204 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 2011/12/19 15:12:19.0088 3204 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 2011/12/19 15:12:19.0369 3204 sdbus (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys 2011/12/19 15:12:20.0056 3204 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 2011/12/19 15:12:20.0461 3204 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 2011/12/19 15:12:20.0820 3204 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 2011/12/19 15:12:21.0428 3204 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 2011/12/19 15:12:22.0099 3204 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\DRIVERS\sffdisk.sys 2011/12/19 15:12:23.0129 3204 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys 2011/12/19 15:12:23.0503 3204 sffp_sd (9f66a46c55d6f1ccabc79bb7afccc545) C:\Windows\system32\DRIVERS\sffp_sd.sys 2011/12/19 15:12:24.0190 3204 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 2011/12/19 15:12:25.0188 3204 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys 2011/12/19 15:12:25.0516 3204 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys 2011/12/19 15:12:25.0812 3204 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys 2011/12/19 15:12:26.0093 3204 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 2011/12/19 15:12:26.0514 3204 SNP2UVC (d79fe8ff4c1a11cd650a8bbeac62be9f) C:\Windows\system32\DRIVERS\snp2uvc.sys 2011/12/19 15:12:27.0200 3204 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 2011/12/19 15:12:27.0809 3204 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 2011/12/19 15:12:28.0604 3204 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys 2011/12/19 15:12:29.0228 3204 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys 2011/12/19 15:12:29.0509 3204 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 2011/12/19 15:12:30.0492 3204 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 2011/12/19 15:12:30.0960 3204 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 2011/12/19 15:12:31.0210 3204 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 2011/12/19 15:12:31.0537 3204 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys 2011/12/19 15:12:31.0943 3204 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys 2011/12/19 15:12:32.0286 3204 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 2011/12/19 15:12:33.0175 3204 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 2011/12/19 15:12:33.0596 3204 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 2011/12/19 15:12:34.0517 3204 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 2011/12/19 15:12:34.0829 3204 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 2011/12/19 15:12:35.0344 3204 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 2011/12/19 15:12:35.0578 3204 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 2011/12/19 15:12:35.0952 3204 tunnel (119b8184e106baedc83fce5ddf3950da) C:\Windows\system32\DRIVERS\tunnel.sys 2011/12/19 15:12:36.0124 3204 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys 2011/12/19 15:12:36.0233 3204 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 2011/12/19 15:12:36.0326 3204 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys 2011/12/19 15:12:36.0467 3204 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys 2011/12/19 15:12:36.0576 3204 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 2011/12/19 15:12:36.0685 3204 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 2011/12/19 15:12:36.0779 3204 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 2011/12/19 15:12:36.0872 3204 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 2011/12/19 15:12:36.0935 3204 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 2011/12/19 15:12:37.0013 3204 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 2011/12/19 15:12:37.0122 3204 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 2011/12/19 15:12:37.0216 3204 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys 2011/12/19 15:12:37.0309 3204 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 2011/12/19 15:12:37.0418 3204 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 2011/12/19 15:12:37.0512 3204 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 2011/12/19 15:12:37.0606 3204 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 2011/12/19 15:12:37.0699 3204 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 2011/12/19 15:12:37.0777 3204 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 2011/12/19 15:12:37.0840 3204 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys 2011/12/19 15:12:37.0902 3204 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys 2011/12/19 15:12:37.0964 3204 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys 2011/12/19 15:12:38.0042 3204 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 2011/12/19 15:12:38.0120 3204 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 2011/12/19 15:12:38.0167 3204 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 2011/12/19 15:12:38.0214 3204 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys 2011/12/19 15:12:38.0339 3204 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 2011/12/19 15:12:38.0432 3204 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/12/19 15:12:38.0510 3204 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 2011/12/19 15:12:38.0620 3204 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys 2011/12/19 15:12:38.0713 3204 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 2011/12/19 15:12:38.0807 3204 winachsf (c9c63410d8cf98f621b9cc62243fb877) C:\Windows\system32\DRIVERS\HSX_CNXT.sys 2011/12/19 15:12:38.0963 3204 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys 2011/12/19 15:12:39.0072 3204 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys 2011/12/19 15:12:39.0166 3204 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 2011/12/19 15:12:39.0275 3204 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 2011/12/19 15:12:39.0306 3204 XAudio (2e579520e114a9ca309f13bf40ad8292) C:\Windows\system32\DRIVERS\xaudio.sys 2011/12/19 15:12:39.0384 3204 \HardDisk0 - detected Rootkit.Win32.TDSS.tdl4 (0) 2011/12/19 15:12:39.0400 3204 ================================================================================ 2011/12/19 15:12:39.0400 3204 Scan finished 2011/12/19 15:12:39.0400 3204 ================================================================================ 2011/12/19 15:12:39.0415 6600 Detected object count: 1 2011/12/19 15:13:16.0637 6600 \HardDisk0 (Rootkit.Win32.TDSS.tdl4) - will be cured after reboot 2011/12/19 15:13:16.0637 6600 \HardDisk0 - ok 2011/12/19 15:13:16.0652 6600 Rootkit.Win32.TDSS.tdl4(\HardDisk0) - User select action: Cure 2011/12/19 15:13:27.0744 6848 Deinitialize success Et dans un second txt : 2011/12/19 15:10:16.0880 3884 TDSS rootkit removing tool 2.5.1.0 May 13 2011 13:20:29 2011/12/19 15:10:22.0277 3884 Perform update action was selected 2011/12/19 15:10:22.0277 6232 Deinitialize success Visiblement cela a règlé le pb. Merci Appollo t'es pas allé sur la lune, tu fréquentes pas les mêmes latitudes que moi mais tu as été très bien quand même !!

Lien CJoint.com ALtnKC59aBw Bon j'ai réussi mais j'ai du changer d'ordi ; sur le mien quand je veux faire une réponse forum ou cjoint j'ai une page de déconnection qui s'affiche Mon lien Pour le delco, pas de ma faute si je dois lui dire 3X comment je m'appelle..

__

Bonjour. J'ai un gros virus qui me fait passer des nuits blanches.. Mozilla ou explorer ouvre une trentaine de navigateurs et d'onglets.... Je n'ai pas de possibilité de restauration système (j'ignore si c'est lié). Merci à ceux qui voudront bien se pencher sur mon cas. Voici le rapport ADCleaner # AdwCleaner v1.402 - Rapport créé le 17/12/2011 à 15:23:43 # Mis à jour le 11/12/11 à 19h par Xplode # Système d'exploitation : Windows Vista Home Premium Service Pack 2 (32 bits) # Nom d'utilisateur : zorro - PC-DE-ZORRO (Administrateur) # Exécuté depuis : C:\Users\zorro\Desktop\adwcleaner.exe # Option [suppression] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Supprimé : C:\Users\zorro\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} Dossier Supprimé : C:\Users\zorro\AppData\LocalLow\BabylonToolbar Dossier Supprimé : C:\Users\zorro\AppData\LocalLow\searchquband Dossier Supprimé : C:\Program Files\Windows iLivid Toolbar Dossier Supprimé : C:\Users\zorro\AppData\Roaming\Mozilla\Firefox\Profiles\1f5d6mlw.default\searchqutoolbar Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml Fichier Supprimé : C:\Users\zorro\AppData\Roaming\Mozilla\Firefox\Profiles\1f5d6mlw.default\searchplugins\SearchResults.xml ***** [Registre] ***** Clé Supprimée : HKCU\Software\ilivid Clé Supprimée : HKCU\Software\AppDataLow\Software\searchqutoolbar Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4 Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212 Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4f12-8568-69135F087DB0} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC} Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079a25-328f-4bd4-be04-00955acaa0a7}] ***** [Navigateurs] ***** -\\ Internet Explorer v8.0.6001.19170 [OK] Le registre ne contient aucune entrée illégitime. -\\ Mozilla Firefox v8.0.1 (fr) Profil : 1f5d6mlw.default Fichier : C:\Users\zorro\AppData\Roaming\Mozilla\Firefox\Profiles\1f5d6mlw.default\prefs.js Supprimée : user_pref("CT2458416.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Supprimée : user_pref("CT2458416.CTID", "CT2458416"); Supprimée : user_pref("CT2458416.CurrentServerDate", "5-6-2011"); Supprimée : user_pref("CT2458416.DialogsAlignMode", "LTR"); Supprimée : user_pref("CT2458416.DownloadReferralCookieData", ""); Supprimée : user_pref("CT2458416.FeedLastCount129370096938300543", 193); Supprimée : user_pref("CT2458416.FeedPollDate128957027962613495", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.FeedPollDate129369652795800559", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.FeedPollDate129369652795800560", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.FeedPollDate129370096938613045", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.FeedPollDate129370096938613046", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.FeedTTL128957027962613495", 40); Supprimée : user_pref("CT2458416.FeedTTL129369652795800559", 40); Supprimée : user_pref("CT2458416.FeedTTL129369652795800560", 40); Supprimée : user_pref("CT2458416.FeedTTL129370096938613045", 40); Supprimée : user_pref("CT2458416.FeedTTL129370096938613046", 40); Supprimée : user_pref("CT2458416.FirstServerDate", "17-5-2011"); Supprimée : user_pref("CT2458416.FirstTime", true); Supprimée : user_pref("CT2458416.FirstTimeFF3", true); Supprimée : user_pref("CT2458416.FirstTimeSettingsDone", true); Supprimée : user_pref("CT2458416.FixPageNotFoundErrors", true); Supprimée : user_pref("CT2458416.GroupingServerCheckInterval", 1440); Supprimée : user_pref("CT2458416.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Supprimée : user_pref("CT2458416.Initialize", true); Supprimée : user_pref("CT2458416.InitializeCommonPrefs", true); Supprimée : user_pref("CT2458416.InstallationAndCookieDataSentCount", 3); Supprimée : user_pref("CT2458416.InstalledDate", "Tue May 17 2011 18:12:07 GMT+0200"); Supprimée : user_pref("CT2458416.InvalidateCache", false); Supprimée : user_pref("CT2458416.IsGrouping", false); Supprimée : user_pref("CT2458416.IsMulticommunity", false); Supprimée : user_pref("CT2458416.IsOpenThankYouPage", true); Supprimée : user_pref("CT2458416.IsOpenUninstallPage", true); Supprimée : user_pref("CT2458416.LanguagePackLastCheckTime", "Sun Jun 05 2011 11:45:02 GMT+0200"); Supprimée : user_pref("CT2458416.LanguagePackReloadIntervalMM", 1440); Supprimée : user_pref("CT2458416.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Supprimée : user_pref("CT2458416.LastLogin_2.6.0.15", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.LatestVersion", "3.2.5.2"); Supprimée : user_pref("CT2458416.Locale", "en"); Supprimée : user_pref("CT2458416.LoginCache", 4); Supprimée : user_pref("CT2458416.MCDetectTooltipHeight", "83"); Supprimée : user_pref("CT2458416.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Supprimée : user_pref("CT2458416.MCDetectTooltipWidth", "295"); Supprimée : user_pref("CT2458416.RadioIsPodcast", false); Supprimée : user_pref("CT2458416.RadioLastCheckTime", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.RadioLastUpdateIPServer", "3"); Supprimée : user_pref("CT2458416.RadioLastUpdateServer", "129337107420200000"); Supprimée : user_pref("CT2458416.RadioMediaID", "21538853"); Supprimée : user_pref("CT2458416.RadioMediaType", "Media Player"); Supprimée : user_pref("CT2458416.RadioMenuSelectedID", "EBRadioMenu_CT245841621538853"); Supprimée : user_pref("CT2458416.RadioStationName", "Danceradio"); Supprimée : user_pref("CT2458416.RadioStationURL", "hxxp://101danceradio.com/wmx/classicrockjukebox64k.wmx"); Supprimée : user_pref("CT2458416.SHRINK_TOOLBAR", 1); Supprimée : user_pref("CT2458416.SearchFromAddressBarIsInit", true); Supprimée : user_pref("CT2458416.SearchInNewTabEnabled", true); Supprimée : user_pref("CT2458416.SearchInNewTabIntervalMM", 1440); Supprimée : user_pref("CT2458416.SearchInNewTabLastCheckTime", "Sun Jun 05 2011 11:45:01 GMT+0200"); Supprimée : user_pref("CT2458416.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Supprimée : user_pref("CT2458416.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Supprimée : user_pref("CT2458416.SettingsCheckIntervalMin", 120); Supprimée : user_pref("CT2458416.SettingsLastCheckTime", "Sun Jun 05 2011 11:45:00 GMT+0200"); Supprimée : user_pref("CT2458416.SettingsLastUpdate", "1298583930"); Supprimée : user_pref("CT2458416.ThirdPartyComponentsInterval", 504); Supprimée : user_pref("CT2458416.ThirdPartyComponentsLastCheck", "Sat May 28 2011 15:42:24 GMT+0200"); Supprimée : user_pref("CT2458416.ThirdPartyComponentsLastUpdate", "1246786978"); Supprimée : user_pref("CT2458416.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID"); Supprimée : user_pref("CT2458416.UserID", "UN29017116477851119"); Supprimée : user_pref("CT2458416.ValidationData_Toolbar", 2); Supprimée : user_pref("CT2458416.alertChannelId", "852145"); Supprimée : user_pref("CT2458416.clientLogIsEnabled", true); Supprimée : user_pref("CT2458416.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...] Supprimée : user_pref("CT2458416.myStuffEnabled", true); Supprimée : user_pref("CT2458416.myStuffPublihserMinWidth", 400); Supprimée : user_pref("CT2458416.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Supprimée : user_pref("CT2458416.myStuffServiceIntervalMM", 1440); Supprimée : user_pref("CT2458416.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Supprimée : user_pref("CT2458416.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...] Supprimée : user_pref("browser.search.defaultenginename", "Search the web (Babylon)"); Supprimée : user_pref("browser.search.selectedEngine", "Search the web (Babylon)"); Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", 14); Supprimée : user_pref("extensions.BabylonToolbar.cntry", "FR"); Supprimée : user_pref("extensions.BabylonToolbar.firstRun", false); Supprimée : user_pref("extensions.BabylonToolbar.hdrMd5", "4A8E36437CF25360CEB0166BA926AB36"); Supprimée : user_pref("extensions.BabylonToolbar.id", "217b576fac7e41459340de7be49e2649"); Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15154"); Supprimée : user_pref("extensions.BabylonToolbar.lastActv", "14"); Supprimée : user_pref("extensions.BabylonToolbar.lastDP", 14); Supprimée : user_pref("extensions.BabylonToolbar.newTab", true); Supprimée : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Supprimée : user_pref("extensions.BabylonToolbar.propectorlck", 62451599); Supprimée : user_pref("extensions.BabylonToolbar.prtkDS", 1); Supprimée : user_pref("extensions.BabylonToolbar.ptch_0717", true); Supprimée : user_pref("extensions.BabylonToolbar.sid", "217b576fac7e41459340de7be49e2649"); -\\ Google Chrome v0.0.0.0 Fichier : C:\Users\zorro\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Le fichier ne contient aucune entrée illégitime. ************************* AdwCleaner[s1].txt - [333 octets] - [17/12/2011 15:23:22] AdwCleaner[R1].txt - [10102 octets] - [17/12/2011 15:23:35] AdwCleaner[s2].txt - [10147 octets] - [17/12/2011 15:23:43] ************************* Dossier Temporaire : 171 dossier(s)et 7 fichier(s) supprimés ########## EOF - C:\AdwCleaner[s2].txt - [10369 octets] ########## Et celui d'ad remover ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: TeamXscript : AD-Remover - FindyKill - UsbFix - SEAF C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 14:36:54 le 17/12/2011, Mode normal Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) zorro@PC-DE-ZORRO (Acer Aspire 7720) ============== ACTION(S) ============== (!) -- Fichiers temporaires supprimés. -- Fichier ouvert: C:\Users\zorro\AppData\Roaming\Mozilla\FireFox\Profiles\1f5d6mlw.default\Prefs.js -- Ligne supprimée: user_pref("CT2458416.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... Ligne supprimée: user_pref("CT2458416.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT245... Ligne supprimée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr... Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList", "CT2458416"); Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList2", "CT2458416"); Ligne supprimée: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jun 05 2011 11:45:01 GMT+0200"); Ligne supprimée: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2458416"); Ligne supprimée: user_pref("CommunityToolbar.twitter.user_11348282.LastCheckTime", "Sun Jun 05 2011 11:45:03 GMT+0200... Ligne supprimée: user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Sun Jun 05 2011 11:45:03 GMT+0200... Ligne supprimée: user_pref("CommunityToolbar.twitter.user_2883841.LastCheckTime", "Sun Jun 05 2011 11:45:03 GMT+0200"... Ligne supprimée: user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Sun Jun 05 2011 11:45:03 GMT+0200")... Ligne supprimée: user_pref("CommunityToolbar.twitter.user_82177895.LastCheckTime", "Sun Jun 05 2011 11:45:03 GMT+0200... Ligne supprimée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2458416&Sea... Ligne supprimée: user_pref("keyword.URL", "hxxp://www.searchqu.com/web?src=ffb&appid=146&systemid=406&sr=0&q="); -- Fichier Fermé -- ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [8.0.1 (fr)] **** HKLM_MozillaPlugins\@mcafee.com/SAFFPlugin (x) Searchplugins\babylon.xml (hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=b4cdc2e6000000000000001f3c604d36&tlver=1.4.19.19&ss=1&affID=18026/) Searchplugins\bing.xml ( hxxp://www.bing.com/search) Searchplugins\SearchResults.xml ( hxxp://www.searchqu.com/web?src=ffb&appid=146&systemid=406&sr=0&q={searchTerms}/) Components\browsercomps.dll (Mozilla Foundation) Extensions\{ab420b03-23d5-4470-9528-daea1bf952f8} (MVS-Player Toolbar) HKLM_Extensions|{4ED1F68A-5463-4931-9384-8FFF5ED91D92} - C:\Program Files\McAfee\SiteAdvisor -- C:\Users\zorro\AppData\Roaming\Mozilla\FireFox\Profiles\1f5d6mlw.default -- Searchplugins\SearchResults.xml ( hxxp://www.searchqu.com/web?src=ffb&appid=146&systemid=406&sr=0&q={searchTerms}/) Prefs.js - browser.download.dir, C:\\Users\\zorro\\Downloads Prefs.js - browser.search.defaultenginename, Search the web (Babylon) Prefs.js - browser.search.selectedEngine, Search the web (Babylon) Prefs.js - browser.startup.homepage, hxxp://www.google.fr/ Prefs.js - browser.startup.homepage_override.buildID, 20111120135848 Prefs.js - browser.startup.homepage_override.mstone, rv:8.0.1 ======================================== **** Internet Explorer Version [8.0.6001.19170] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - "McAfee SiteAdvisor Toolbar" (c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll) HKCU_URLSearchHooks|{b9d63c58-90cc-428b-8d3b-cbb88eb07e7e} (x) HKCU_URLSearchHooks|{ab420b03-23d5-4470-9528-daea1bf952f8} - "MVS-Player Toolbar" (C:\Program Files\MVS-Player\tbMVS-.dll) HKCU_URLSearchHooks|{413fd347-bd90-4b1c-a502-2cabe7714e66} - "Radio Arcadie Toolbar" (C:\Program Files\Radio_Arcadie\prxtbRad0.dll) HKLM_URLSearchHooks|{ab420b03-23d5-4470-9528-daea1bf952f8} - "MVS-Player Toolbar" (C:\Program Files\MVS-Player\tbMVS-.dll) HKLM_URLSearchHooks|{413fd347-bd90-4b1c-a502-2cabe7714e66} - "Radio Arcadie Toolbar" (C:\Program Files\Radio_Arcadie\prxtbRad0.dll) HKCU_Toolbar\ShellBrowser|{5CBE3B7C-1E47-477E-A7DD-396DB0476E29} (x) HKCU_Toolbar\WebBrowser|{B9D63C58-90CC-428B-8D3B-CBB88EB07E7E} (x) HKCU_Toolbar\WebBrowser|{47833539-D0C5-4125-9FA8-0819E2EAAC93} (C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll) HKCU_Toolbar\WebBrowser|{AB420B03-23D5-4470-9528-DAEA1BF952F8} (C:\Program Files\MVS-Player\tbMVS-.dll) HKCU_Toolbar\WebBrowser|{413FD347-BD90-4B1C-A502-2CABE7714E66} (C:\Program Files\Radio_Arcadie\prxtbRad0.dll) HKLM_Toolbar|{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} (c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll) HKLM_Toolbar|{47833539-D0C5-4125-9FA8-0819E2EAAC93} (C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll) HKLM_Toolbar|{ab420b03-23d5-4470-9528-daea1bf952f8} (C:\Program Files\MVS-Player\tbMVS-.dll) HKLM_Toolbar|{413fd347-bd90-4b1c-a502-2cabe7714e66} (C:\Program Files\Radio_Arcadie\prxtbRad0.dll) HKLM_Toolbar|{99079a25-328f-4bd4-be04-00955acaa0a7} (x) HKCU_ElevationPolicy\{B4256A73-837C-4195-BD10-0ADEE51BEFF6} - C:\Program Files\NOS\bin\getPlusPlus_Adobe.exe (x) HKLM_ElevationPolicy\b7714cc8-e688-46d4-b3b3-ab0de6d64dd9 - C:\Program Files\MVS-Player\MVS-PlayerToolbarHelper.exe (?) HKLM_ElevationPolicy\{074A2810-2D22-493e-8BD5-3CF8FE918E67} - C:\Program Files\McAfee\MSK\MskAgent.exe (McAfee, Inc.) HKLM_ElevationPolicy\{0ACD1B4D-FD93-4CF1-B24E-23897E3FA37F} - C:\Users\zorro\AppData\Local\Conduit\CT2453342\Radio_ArcadieAutoUpdateHelper.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{74351F14-5437-4d87-805B-04D409B09976} - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (x) HKLM_ElevationPolicy\{AF8166F7-0AB5-4915-907E-B03E874F531F} - C:\PROGRA~1\WI371A~1\Datamngr\ToolBar\dtUser.exe (Visicom Media Inc.) HKLM_ElevationPolicy\{DA2330A6-99F4-4719-950A-358E077355BF} - C:\Program Files\Radio_Arcadie\Radio_ArcadieToolbarHelper1.exe (?) HKLM_ElevationPolicy\{DAABE21E-DB8C-49b8-9511-9E6547ECBC5F} - c:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.) HKLM_ElevationPolicy\{ECEC282B-90B3-4c94-A3EA-70D053103AC3} - %ProgramFiles(x86)%\McAfee\MSK\MskAgent.exe (x) HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?) BHO\{02478D38-C3F9-4efb-9B51-7695ECA05670} (?) BHO\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - "Adobe PDF Reader Link Helper" (C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll) BHO\{377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - "McAfee Phishing Filter" (c:\PROGRA~1\mcafee\msk\mcapbho.dll) BHO\{413fd347-bd90-4b1c-a502-2cabe7714e66} - "Radio Arcadie Toolbar" (C:\Program Files\Radio_Arcadie\prxtbRad0.dll) BHO\{7DB2D5A0-7241-4E79-B68D-6309F01C5231} - "scriptproxy" (C:\Program Files\McAfee\VirusScan\scriptsn.dll) BHO\{83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} (?) BHO\{ab420b03-23d5-4470-9528-daea1bf952f8} - "MVS-Player Toolbar" (C:\Program Files\MVS-Player\tbMVS-.dll) BHO\{B164E929-A1B6-4A06-B104-2CD0E90A88FF} - "McAfee SiteAdvisor BHO" (c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll) ======================================== C:\Program Files\Ad-Remover\Quarantine: 521 Fichier(s) C:\Program Files\Ad-Remover\Backup: 32 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 15/12/2011 19:40:27 (11332 Octet(s)) C:\Ad-Report-CLEAN[2].txt - 17/12/2011 14:38:09 (8310 Octet(s)) C:\Ad-Report-SCAN[1].txt - 15/12/2011 20:23:43 (8714 Octet(s)) Fin à: 14:39:18, 17/12/2011 ============== E.O.F ==============