Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

mon option cacher les dossiers est encore disparue

petit pain
 Partager

Messages recommandés

petit pain Mega Power Member

petit pain

Posté(e)
  • Auteur
Posté(e)
Dis moi, à quoi ça sert de se décarcasser pour nettoyer ta bécane si c'est pour reformater après ou la réinfecter avec un crack ? Soyons logiques...

je disais ça en désespoir de cause car l'arrêt au bout de 5 minutes ça fait peur :P ,là je viens de suivre les instructions d'oGu et tout remarche nickel :P

j'ai scanné avec MBAM et antivir ma psp et mon appareil photo (qui était également infecté), je crois que maintenant tout est désinfecté

merci pour votre aide :P

petit pain Mega Power Member

petit pain

Posté(e)
  • Auteur
Posté(e)

apparemment, j'avais oublié de scanner avec antivir :P

voici les derniers scans:

 

Avira AntiVir Personal

Report file date: mercredi 2 juillet 2008 17:36

 

Scanning for 1374729 virus strains and unwanted programs.

 

Licensed to: Avira AntiVir PersonalEdition Classic

Serial number: 0000149996-ADJIE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Boot mode: Normally booted

Username: SYSTEM

Computer name: XPSP2-E1603CC91

 

Version information:

BUILD.DAT : 8.1.0.308 16478 Bytes 28/05/2008 17:03:00

AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56

AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37

LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23

LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40

ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34

ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 20:51:42

ANTIVIR2.VDF : 7.0.5.20 142336 Bytes 30/06/2008 20:49:24

ANTIVIR3.VDF : 7.0.5.39 84480 Bytes 02/07/2008 15:35:44

Engineversion : 8.1.0.64

AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21

AESCRIPT.DLL : 8.1.0.46 283002 Bytes 02/07/2008 15:36:06

AESCN.DLL : 8.1.0.22 119157 Bytes 29/06/2008 20:52:20

AERDL.DLL : 8.1.0.20 418165 Bytes 29/06/2008 20:52:18

AEPACK.DLL : 8.1.1.6 364918 Bytes 29/06/2008 20:52:14

AEOFFICE.DLL : 8.1.0.20 192891 Bytes 29/06/2008 20:52:13

AEHEUR.DLL : 8.1.0.35 1298806 Bytes 02/07/2008 15:36:03

AEHELP.DLL : 8.1.0.15 115063 Bytes 29/06/2008 20:51:59

AEGEN.DLL : 8.1.0.29 307573 Bytes 29/06/2008 20:51:58

AEEMU.DLL : 8.1.0.6 430451 Bytes 29/06/2008 20:51:53

AECORE.DLL : 8.1.0.32 168311 Bytes 02/07/2008 15:35:49

AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53

AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50

AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47

AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49

AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23

AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31

SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02

SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39

NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10

RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25

RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11

 

Configuration settings for the scan:

Jobname..........................: Complete system scan

Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp

Logging..........................: low

Primary action...................: interactive

Secondary action.................: ignore

Scan master boot sector..........: on

Scan boot sector.................: on

Boot sectors.....................: C:, M:,

Scan memory......................: on

Process scan.....................: on

Scan registry....................: on

Search for rootkits..............: off

Scan all files...................: Intelligent file selection

Scan archives....................: on

Recursion depth..................: 20

Smart extensions.................: on

Macro heuristic..................: on

File heuristic...................: medium

 

Start of the scan: mercredi 2 juillet 2008 17:36

 

The scan of running processes will be started

Scan process 'avscan.exe' - '1' Module(s) have been scanned

Scan process 'avcenter.exe' - '1' Module(s) have been scanned

Scan process 'avgnt.exe' - '1' Module(s) have been scanned

Scan process 'usnsvc.exe' - '1' Module(s) have been scanned

Scan process 'wuauclt.exe' - '1' Module(s) have been scanned

Scan process 'alg.exe' - '1' Module(s) have been scanned

Scan process 'FNPLicensingService.exe' - '1' Module(s) have been scanned

Scan process 'WgaTray.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned

Scan process 'ctfmon.exe' - '1' Module(s) have been scanned

Scan process 'Integrator.exe' - '1' Module(s) have been scanned

Scan process 'jusched.exe' - '1' Module(s) have been scanned

Scan process 'oopmagent.exe' - '1' Module(s) have been scanned

Scan process 'acrotray.exe' - '1' Module(s) have been scanned

Scan process 'hpztsb07.exe' - '1' Module(s) have been scanned

Scan process 'winvnc.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned

Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned

Scan process 'avguard.exe' - '1' Module(s) have been scanned

Scan process 'explorer.exe' - '1' Module(s) have been scanned

Scan process 'sched.exe' - '1' Module(s) have been scanned

Scan process 'spoolsv.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'svchost.exe' - '1' Module(s) have been scanned

Scan process 'lsass.exe' - '1' Module(s) have been scanned

Scan process 'services.exe' - '1' Module(s) have been scanned

Scan process 'winlogon.exe' - '1' Module(s) have been scanned

Scan process 'csrss.exe' - '1' Module(s) have been scanned

Scan process 'smss.exe' - '1' Module(s) have been scanned

32 processes with 32 modules were scanned

 

Starting master boot sector scan:

Master boot sector HD0

[iNFO] No virus was found!

 

Start scanning boot sectors:

Boot sector 'C:\'

[iNFO] No virus was found!

Boot sector 'M:\'

[iNFO] No virus was found!

 

Starting to scan the registry.

The registry was scanned ( '20' files ).

 

 

Starting the file scan:

 

Begin scan in 'C:\'

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\QooBox\Quarantine\C\WINDOWS\system32\mdelk.exe.vir

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '48d0a40b.qua'!

C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\mdelk.exe.vir

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '48d0a415.qua'!

C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\downld\116234.exe.vir

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '48a1a3e3.qua'!

C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\downld\94046.exe.vir

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '489ba3e6.qua'!

C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\downld\97812.exe.vir

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '48a3a3ea.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP39\A0005739.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba3ee.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP39\A0005740.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba3ef.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP39\A0005742.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c21e9c8.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0005859.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba3f3.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0005861.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c21e9cc.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0005906.sys

[DETECTION] Is the Trojan horse TR/Rootkit.Gen

[NOTE] The file was moved to '489ba3f4.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0005907.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba3f5.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0005908.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c21e9ce.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0006017.exe

[DETECTION] Is the Trojan horse TR/Trash.Gen

[NOTE] The file was moved to '489ba3f9.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0006028.exe

[DETECTION] Is the Trojan horse TR/Trash.Gen

[NOTE] The file was moved to '489ba3fa.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0006031.exe

[DETECTION] Is the Trojan horse TR/Trash.Gen

[NOTE] The file was moved to '4c21e9c3.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0006032.exe

[DETECTION] Is the Trojan horse TR/Trash.Gen

[NOTE] The file was moved to '489ba3fc.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0006033.exe

[DETECTION] Is the Trojan horse TR/Trash.Gen

[NOTE] The file was moved to '489ba3fb.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0006034.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c21e9c4.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0007031.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba3ff.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0007032.sys

[DETECTION] Is the Trojan horse TR/Rootkit.Gen

[NOTE] The file was moved to '4c21ee38.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0008031.sys

[DETECTION] Is the Trojan horse TR/Rootkit.Gen

[NOTE] The file was moved to '489ba403.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP40\A0008032.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c21ee3c.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0008149.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba405.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0008150.sys

[DETECTION] Is the Trojan horse TR/Rootkit.Gen

[NOTE] The file was moved to '4c2190e6.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0008215.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba407.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0008221.exe

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '4c2190e8.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0009221.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba408.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0010221.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c2190e9.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0011221.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba40a.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0012221.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba409.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0014221.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c2190ea.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0017228.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c2190eb.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018226.exe

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '489ba40c.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018227.sys

[DETECTION] Is the Trojan horse TR/Rootkit.Gen

[NOTE] The file was moved to '4c2190ed.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018228.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '489ba40b.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018229.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c2190ec.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018233.exe

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '489ba40e.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018239.exe

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '4c2190ef.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018240.exe

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '489ba410.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018241.exe

[DETECTION] Is the Trojan horse TR/Bagle.Gen.B

[NOTE] The file was moved to '489ba40d.qua'!

C:\System Volume Information\_restore{1E96E424-F8F8-4E15-A05E-998951665825}\RP41\A0018242.exe

[DETECTION] Is the Trojan horse TR/Dldr.Bagle.QI

[NOTE] The file was moved to '4c2190ee.qua'!

Begin scan in 'M:\' <mickael>

 

 

End of the scan: mercredi 2 juillet 2008 18:33

Used time: 56:14 min

 

The scan has been done completely.

 

11026 Scanning directories

474643 Files were scanned

42 viruses and/or unwanted programs were found

0 Files were classified as suspicious:

0 files were deleted

0 files were repaired

42 files were moved to quarantine

0 files were renamed

1 Files cannot be scanned

474601 Files not concerned

1955 Archives were scanned

1 Warnings

42 Notes

 

------------------------------------------------------------------------------------------------------------------------

 

Malwarebytes' Anti-Malware 1.19

Version de la base de données: 914

Windows 5.1.2600 Service Pack 2

 

19:17:41 02/07/2008

mbam-log-7-2-2008 (19-17-41).txt

 

Type de recherche: Examen complet (C:\|M:\|)

Eléments examinés: 163601

Temps écoulé: 38 minute(s), 56 second(s)

 

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 0

Valeur(s) du Registre infectée(s): 0

Elément(s) de données du Registre infecté(s): 0

Dossier(s) infecté(s): 0

Fichier(s) infecté(s): 0

 

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

 

Clé(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Valeur(s) du Registre infectée(s):

(Aucun élément nuisible détecté)

 

Elément(s) de données du Registre infecté(s):

(Aucun élément nuisible détecté)

 

Dossier(s) infecté(s):

(Aucun élément nuisible détecté)

 

Fichier(s) infecté(s):

(Aucun élément nuisible détecté)

 

----------------------------------------------------------------------------------------------------------------------------

 

ewido: 3 spyware risque moyen

oGu Godlike Member

oGu

Posté(e)
Posté(e) (modifié)

Edit: envoie le log Ewido !

 

Bon, j'espère que ça fonctionnera maintenant, et que tu ne crackeras plus tes logiciels :P !!

 

 

On va terminer le nettoyage avec 2-3 bricoles:

 

 

flechedroitets2.pngREPARATION DU MSE

 

Télécharge sur ton Bureau puis exécute systemsr4.pngSafeBootKeyRepair de sUBs

 

 

 

flechedroitets2.pngDESINSTALLER COMBOFIX

  • Copie cette ligne en rouge
    ComboFix /u
     
  • Clique sur Démarrer, puis sur Exécuter: une fenêtre d'invite s'ouvre.
  • Colle la ligne rouge que tu as préalablement copiée dans la fenêtre d'invite
    20080629180121lz8.jpg
  • Appuie sur OK pour valider
     
  • Supprime ensuite le dossier suivant: (dis-moi s'il n'apparaît pas, pour optimiser mes procédures :P!)
    • C:\Qoobox

 

 

 

flechedroitets2.pngTOOLSCLEANER

  • ToolsCleaner va supprimer les outils que nous avons utilisé:
  • Télécharge systemsr4.pngTools Cleaner de A.Rothstein et DJQUIOU sur ton Bureau
  • Lance-le avec un double-clic
  • Clique sur "rechercher"
  • Clique sur "suppression"
  • Ferme Tools Cleaner et efface-le

 

Enfin:

 

flechedroitets2.pngNETTOYER LES POINTS DE RESTAURATION

  • Aller dans le menu "Démarrer"
  • Cliquer droit sur l'icone "Poste de travail"
  • Dans l'onglet "Restauration du système", sélectionner "Désactiver la Restauration du système sur tous les lecteurs".
  • Cliquer sur "Appliquer."
  • Lorsque le message de confirmation apparaît, cliquer sur "Oui"

  • Cliquer enfin sur "OK".
  • Redémarrer
  • Puis:
  • Aller dans le menu "Démarrer"
  • Cliquer droit sur l'icone "Poste de travail"
  • Dans l'onglet "Restauration du système", décocher la case "Désactiver la Restauration du système sur tous les lecteurs".
  • Cliquer sur "Appliquer."
  • Lorsque le message de confirmation apparaît, cliquer sur "Oui"

  • Cliquer enfin sur "OK".

 

 

 

Et ça devrait rouler now! Oublie pas de réinstaller Antivir qui a du souffrir avec Bagle.

Modifié par oGu
petit pain Mega Power Member

petit pain

Posté(e)
  • Auteur
Posté(e)

Reg export of SafeBoot key after repair:

========================

 

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot]

"AlternateShell"="cmd.exe"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal]

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\AppMgmt]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Base]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot Bus Extender]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Boot file system]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\CryptSvc]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\DcomLaunch]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmadmin]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmboot.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmio.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmload.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\dmserver]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\EventLog]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\File system]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Filter]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\HelpSvc]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Netlogon]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PCI Configuration]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PlugPlay]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PNP Filter]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\Primary disk]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\PSEXESVC]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\RpcSs]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sacsvr]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SCSI Class]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sermouse.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sglfb.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\sr.sys]

@="FSFilter System Recovery"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\SRService]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\System Bus Extender]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\tga.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vds]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vga.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\vgasave.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\wd.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\WinMgmt]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

@="Universal Serial Bus controllers"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

@="CD-ROM Drive"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

@="DiskDrive"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

@="Standard floppy disk controller"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

@="Hdc"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

@="Keyboard"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

@="Mouse"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

@="PCMCIA Adapters"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

@="SCSIAdapter"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

@="System"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

@="Floppy disk drive"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

@="Volume shadow copy"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

@="Volume"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

@="Human Interface Devices"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network]

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AFD]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\AppMgmt]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Base]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot Bus Extender]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Boot file system]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Browser]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\CryptSvc]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DcomLaunch]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Dhcp]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmadmin]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmboot.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmio.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmload.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\dmserver]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\DnsCache]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\EventLog]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\File system]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Filter]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\HelpSvc]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ip6fw.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ipnat.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanServer]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LanmanWorkstation]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\LmHosts]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Messenger]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NBF]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\nbf.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NDIS Wrapper]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Ndisuio]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOS]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBIOSGroup]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetBT]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetDDEGroup]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Netlogon]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetMan]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Network]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NetworkProvider]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\nm]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\nm.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\NtLmSsp]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PCI Configuration]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PlugPlay]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP Filter]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PNP_TDI]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Primary disk]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\ProtectedStorage]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\PSEXESVC]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpcdd.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpdd.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdpwd.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\rdsessmgr]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\RpcSs]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sacsvr]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SCSI Class]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sermouse.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sglfb.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sharedaccess]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\sr.sys]

@="FSFilter System Recovery"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\SRService]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Streams Drivers]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\System Bus Extender]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\Tcpip]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\TDI]

@="Driver Group"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\tdpipe.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\tdtcp.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\termservice]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\tga.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\UploadMgr]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vds]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vga.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\vgasave.sys]

@="Driver"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WinMgmt]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\WZCSVC]

@="Service"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{36FC9E60-C465-11CF-8056-444553540000}]

@="Universal Serial Bus controllers"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

@="CD-ROM Drive"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

@="DiskDrive"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

@="Standard floppy disk controller"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

@="Hdc"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

@="Keyboard"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

@="Mouse"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

@="Net"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

@="NetClient"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

@="NetService"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

@="NetTrans"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

@="PCMCIA Adapters"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

@="SCSIAdapter"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

@="System"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

@="Floppy disk drive"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

@="Volume shadow copy"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

@="Volume"

 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

@="Human Interface Devices"

 

========================

 

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\PSEXESVC

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sacsvr

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\wd.sys

 

------------------------------------------------------------------------------------------------------------------------------------

 

je ne vois pas le dossier qoobox dans C:\

oGu Godlike Member

oGu

Posté(e)
Posté(e)
je ne vois pas le dossier qoobox dans C:\

 

 

Merci de l'info, je modifie ma procédure en conséquence :P !

 

Un petit trapport Ewido por favor? Sauf si tu l'as plus bien sûr!

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...