Backdoor.Win32.Agent.amjd [Résolu]

Bonjour,

Télécharge la dernière version de ZHPDiag

Enregistre le sur ton Bureau.

Une fois le téléchargement achevé,fais un double clic sur ZHPDiag.exe et suis les instructions.

N'oublie pas de cocher la case qui permet de mettre un raccourci sur le Bureau.

pour Xp :Double clique sur le raccourci ZHPDiag sur ton Bureau.

pour vista et Seven : fais un clic droit sur le raccourci ZHPDiag sur ton Bureau et choisis "exécuter en tant qu'administrateur".

/|\ l'outil a créé 2 icônes ZHPDiag et ZHPFix.

Clique sur la loupe pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long.

Ferme ZHPDiag en fin d'analyse.


Pour transmettre le rapport clique sur Cijoint

Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).

Sélectionne le fichier ZHPDiag.txt.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

===


1) Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

2) Télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau.

hxxp://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html

3) A la fin du téléchargement, ferme toutes les fenêtres et programmes, y compris celui-ci.

4) Double-clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation.

5) Pendant l'installation, suis les indications (en particulier le choix de la langue et l'autorisation d'accession à Internet). N'apporte aucune modification aux réglages par défaut et, en fin d'installation, vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées.

6) MBAM démarrera automatiquement et enverra un message demandant à mettre à jour le programme avant de lancer une analyse. Comme MBAM se met automatiquement à jour en fin d'installation, clique sur OK pour fermer la boîte de dialogue. La fenêtre principale de MBAM s'affiche :

7) Dans l'onglet analyse, vérifie que "Exécuter une analyse rapide" est coché et clique sur le bouton Rechercher pour démarrer l'analyse.

8) MBAM analyse ton ordinateur. L'analyse peut prendre un certain temps. Il suffit de vérifier de temps en temps son avancement.

9) A la fin de l'analyse, un message s'affiche indiquant la fin de l'analyse. Clique sur OK pour poursuivre.

10) Si des malwares ont été détectés, leur liste s'affiche.
En cliquant sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

11) MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs)

12) Ferme MBAM en cliquant sur Quitter.

13) Poste le rapport dans ta réponse

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3692
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

Merci voici les info:
http://www.cijoint.fr/cjlink.php?file=cj201002/cijbzWGW96.txt



2010-02-05 06:30:30
mbam-log-2010-02-05 (06-30-30).txt

Type de recherche: Examen rapide
Eléments examinés: 126589
Temps écoulé: 3 minute(s), 43 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 6
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 20
Fichier(s) infecté(s): 97

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\gdi3232.dll (Trojan.Tracur) -> Delete on reboot.
C:\WINDOWS\system32\1B.tmp (Trojan.Tracur) -> Delete on reboot.
C:\WINDOWS\system32\cfgbkend32.dll (Trojan.Tracur) -> Delete on reboot.
C:\WINDOWS\system32\dmloader32.dll (Trojan.Tracur) -> Delete on reboot.
C:\WINDOWS\system32\__c008C48D.dat (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\__c00F92A1.dat (Trojan.Agent) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0e4780e4-e32c-4a41-a43c-d70761631931} (Trojan.BHO.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0e4780e4-e32c-4a41-a43c-d70761631931} (Trojan.BHO.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dc72b61e757 (Trojan.Tracur) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0e4780e4-e32c-4a41-a43c-d70761631931} (Trojan.Tracur) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1b032e13-3c17-830d-fcba-06669f7b2cfb (Adware.AdRotator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c008c48d (Trojan.Agent) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Malware.Trace) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\rthdbpl (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Tracur) -> Data: c:\windows\system32\gdi3232.dll -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Tracur) -> Data: system32\gdi3232.dll -> Delete on reboot.

Dossier(s) infecté(s):
C:\Program Files\FBrowserAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\iCheck (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\ppcbooster (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\VnrBlock (Trojan.Agent) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-0243336031-4052116379-881863308-0851 (Trojan.Agent) -> Quarantined and deleted successfully.
C:\resycled (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\LocalService32 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32 (Worm.Archive) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Antimalware Defender (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Documents and Settings\Raymond Leduc\Menu Démarrer\Programmes\Antimalware Defender (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Program Files\Antimalware Defender (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\dmloader32.dll (Trojan.BHO.H) -> Delete on reboot.
C:\WINDOWS\system32\gdi3232.dll (Trojan.Tracur) -> Delete on reboot.
C:\WINDOWS\system32\1B.tmp (Trojan.Tracur) -> Delete on reboot.
C:\WINDOWS\system32\cfgbkend32.dll (Trojan.Tracur) -> Delete on reboot.
C:\Documents and Settings\Raymond Leduc\Mes documents\downloads\QuickTime_Update_KB673901.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\cyieqw.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\1b032e13-3c17-830d-fcba-06669f7b2cfb.exe (Adware.AdRotator) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\gpkcsp32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\fdco1ins32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\filemgmt32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\d3dx9_2732.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dnsapi32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dpwsock32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drmstor32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dxdiagn32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dxtmsft32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\iassvcs32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\diskcopy32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dmband32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cpt12_thread32.dll (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c00C9EA4.dat (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c00F5149.dat (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Raymond Leduc\Local Settings\Temp\1C.tmp (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Raymond Leduc\Local Settings\Temp\4D.tmp (Trojan.Tracur) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\IR4RATOD\vrrsfssgt[1].htm.XXX (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\IR4RATOD\bxyyyyl[1].htm.XXX (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\IR4RATOD\ccsuper3[1].htm.XXX (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\KXM7KL67\aqmznana[1].htm.XXX (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\KXM7KL67\cclmmmzmna[1].txt (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\KXM7KL67\ccsuper1[1].htm.XXX (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\MJQ1KF6N\ccsuper2[1].htm.XXX (Spyware.Passwords) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\MJQ1KF6N\730f[1].exe.XXX (Backdoor.KeyStart) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\OMITAFYW\liivvwf[1].htm.XXX (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Service plus Ultra\Local Settings\Temporary Internet Files\Content.IE5\OMITAFYW\qmzhr[1].htm.XXX (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\FBrowsingAdvisor\Logo.png (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\FBrowsingAdvisor\main.db (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\FBrowsingAdvisor\unins000.dat (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\FBrowsingAdvisor\unins000.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll.XXX (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\Program Files\iCheck\Uninstall.exe.XXX (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History\search3 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\VnrBlock\xtarga.gz (Trojan.Agent) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-0243336031-4052116379-881863308-0851\Desktop.ini (Trojan.Agent) -> Quarantined and deleted successfully.
C:\resycled\boot.com (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\@i103345220v4 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\@i103345220v6 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\@i103345220v7 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\@u103345220v0 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\@u103345220v1 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\@u103345220v2 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\@u103345220v3 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mi103345220v4 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mi103345220v4.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mi103345220v6 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mi103345220v6.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mi103345220v7 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mi103345220v7.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mu103345220v5 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\mu103345220v5.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v0 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v0.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v1 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v1.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v2 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v2.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v3 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\wu103345220v3.kwd (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_i103345220v4 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_i103345220v6 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_i103345220v7 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_u103345220v0 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_u103345220v1 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_u103345220v2 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_u103345220v3 (Worm.Archive) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\SysWoW32\_u103345220v5 (Worm.Archive) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Antimalware Defender\Antimalware Defender.lnk (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Documents and Settings\Raymond Leduc\Menu Démarrer\Programmes\Antimalware Defender\Antimalware Defender.lnk (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Program Files\Antimalware Defender\Antimalware Defender.dll (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Documents and Settings\Raymond Leduc\Bureau\Antimalware Defender.LNK (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users.WINDOWS\Application Data\e8e75eb6-51a1-43e0-9155-a4e5bb0c3f67_7.ico (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Documents and Settings\Raymond Leduc\Application Data\e8e75eb6-51a1-43e0-9155-a4e5bb0c3f67_7.ico (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\e8e75eb6-51a1-43e0-9155-a4e5bb0c3f67_7.ico (Rogue.AntimalwareDefender) -> Quarantined and deleted successfully.
C:\Documents and Settings\Raymond Leduc\Application Data\SystemProc\lsass.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c00364C0.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c0048A38.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c006A651.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c0076F20.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c008C48D.dat (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\__c00BCB61.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c00C3744.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c00D291B.dat (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c00F92A1.dat (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\__c00464B5.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\__c008645A.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\GnuHashes.ini (Malware.Trace) -> Quarantined and deleted successfully.

Bonjour,

je ne vois aucun antivirus

Tu es sévèrement infecté.


Télécharge et installe Antivir. C'est une priorité absolue.

Tutoriel et lien de téléchargement :

http://www.malekal.com/tutorial_antivir.php

===

Ensuite, fais redémarrer l'ordi.

Double clique sur le raccourci ZHPDiag sur ton Bureau.

Clique sur le tournevis.

Coche, en plus de celles qui sont pré-cochées, les case devant les lignes O61 et O65.

Clique sur la loupe pour lancer l'analyse.

A la fin de l'analyse, clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

Ouvre le fichier sauvegardé (ZHPDiag.txt)avec le Bloc-Notes et copie son contenu dans un lien Cijoint.

Rapport de ZHPDiag/MD5 v1.25.11 par Nicolas Coolman
Run by Raymond Leduc at 2010-02-05 08:11:33
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702

---\\ System Information
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
Processor: x86 Family 15 Model 107 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (56% free)
System drive C: has 167 GB (76%) free of 218 GB

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 167 Go of 218 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)
F:\ Hard drive, Flash drive, Thumb drive (Free 37 Go of 39 Go)
G:\ Hard drive, Flash drive, Thumb drive (Free 23 Go of 35 Go)
H:\ Hard drive, Flash drive, Thumb drive (Free 48 Go of 80 Go)
J:\ CD-ROM drive (Not Inserted)


---\\ Processus lancés
[MD5.F0871538C13492F65105201A92215410] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
[MD5.451F50010740471BAD72BAC771F26390] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\NVIDIA Corporation\nView\nwiz.exe
[MD5.87D8967A5F0DA349CC53943016ABB5B0] - (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe
[MD5.3A0647BDED81DBE0BCBB51D70B22C9E0] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe
[MD5.7E8A58D9859D79083B09C2FE83F5A670] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe
[MD5.466CE40EAA865752F4930A472563E4E1] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
[MD5.73BB442A717B9BB0097C243374C14A3E] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
[MD5.55D7A219AD8D0DB8980528944152A6FD] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
[MD5.C45617113F717A1A155844A6F3FF4A52] - (.SAMSUNG ELECTRONICS - SMSTray.exe.) -- C:\Program Files\Samsung\EmoDio\SMSTray.exe
[MD5.8CA340A0929B4595BF7A75E45CF90F84] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
[MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
[MD5.536FCD2CEC5161BFCC91CC21726B9DB2] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[MD5.E4BDF223CD75478BF44567B4D5C2634D] - (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\System32\svchost.exe
[MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
[MD5.C3FB1D70CB88722267949694BA51759E] - (.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\WINDOWS\system32\services.exe
[MD5.B81F8778F5BB485F3B75114F0C99A49F] - (.Apache Software Foundation - Apache HTTP Server.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.39133291CB607BDD87CFC565A4A1E7A5] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe
[MD5.BDF6DBA93D6EB5FD511CFD0DA49AE2B3] - (.NVIDIA Corporation - ActiveArmor Firewall IP Service.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
[MD5.2317FCB8587049873ACE9B90EF56514E] - (.NVIDIA Corporation - nSvcLog.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
[MD5.CC9275DB74AD57AC0C3EE823F9922298] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 190.3.) -- C:\WINDOWS\system32\nvsvc32.exe
[MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\system32\lsass.exe
[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - (.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
[MD5.460E4CE148BD07218DA0B6A3D31885A9] - (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe
[MD5.B1691AF4A072CB674D600DB16DD7308E] - (.Rocket Division Software - StarWind iSCSI Target (Alcohol Edition).) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
[MD5.672C02AB4589875ACB3A2D625A993A22] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe
[MD5.7778BDFA3F6F6FBA0E75B9594098F737] - (.Microsoft Corporation - Microsoft Windows Search Indexer.) -- C:\WINDOWS\system32\SearchIndexer.exe


---\\ Internet Explorer URLSearchHook (R3)
[MD5.3CF9A6F04A2708646FB2DEF4DB92688B] - (.Microsoft Corporation - Internet Explorer.) -- C:\WINDOWS\system32\ieframe.dll


---\\ Browser Helper Objects de navigateur (O2)
[MD5.DC1E56092CC57FB4605B088D3DCCBF7A] - (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
[MD5.F655CDD5506FBB4C40C08C9C6A66F7C8] - (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
[MD5.1A82C1B9BB43385695EFC3A84F6756A2] - (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
[MD5.C9EDE29F223A27873E187D9FB6045EA6] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
[MD5.28455424E3C8B81661C5A40E18066BB1] - (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
[MD5.DEE8F03D1EACE0C8F914A2C76568EA32] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll


---\\ Internet Explorer Toolbars (O3)
[MD5.28455424E3C8B81661C5A40E18066BB1] - (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll


---\\ Applications démarrées automatiquement par le registre (O4)
[MD5.A5E4CD281C93E174181C5873FAFD4F16] - (.Logitech - LDM Configuration Application.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
[MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe


---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
[MD5.35B49E4A50B8E8F39E1723070F302705] - (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE


---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)


---\\ Winsock hijacker (Layered Service Provider) (O10)
[MD5.58AF8498C62E1E1DAB5AE59C6E08C180] - (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll
[MD5.EF4092F4129A220AEAADC04C229CD5BF] - (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
[MD5.58AF8498C62E1E1DAB5AE59C6E08C180] - (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll
[MD5.292F92469EFB2FD402E00742C06D539D] - (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll


---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
[MD5.CC8915DB4E33E8FB29CA0D2DBF75306E] - (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
[MD5.9689FCC8C26C3D6AFAC892A6C5D1B81A] - (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
[MD5.045E228F71C31901084B64BE59093499] - (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
[MD5.BA3677A2A4043114DC437AD68F71743E] - (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll


---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)


---\\ Liste des services NT non Microsoft et non désactivés (O23)
[MD5.536FCD2CEC5161BFCC91CC21726B9DB2] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
[MD5.B81F8778F5BB485F3B75114F0C99A49F] - (.Apache Software Foundation - Apache HTTP Server.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.39133291CB607BDD87CFC565A4A1E7A5] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe
[MD5.BDF6DBA93D6EB5FD511CFD0DA49AE2B3] - (.NVIDIA Corporation - ActiveArmor Firewall IP Service.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
[MD5.2317FCB8587049873ACE9B90EF56514E] - (.NVIDIA Corporation - nSvcLog.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
[MD5.CC9275DB74AD57AC0C3EE823F9922298] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 190.3.) -- C:\WINDOWS\system32\nvsvc32.exe
[MD5.B1691AF4A072CB674D600DB16DD7308E] - (.Rocket Division Software - StarWind iSCSI Target (Alcohol Edition).) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
[MD5.672C02AB4589875ACB3A2D625A993A22] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe


---\\ Tâches planifiées en automatique (O39)
[MD5.D25B21AEA2D62CB03507FBBC042A91E3] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[MD5.B26489E5283D6AD50A4D394E34564303] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[MD5.A6C9F8C88DC974BFA028F75C2DDC393C] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.9E96A34F6ABCDD9D6A7C59C196B4046E] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-1960408961-725345543-1004Core.job
[MD5.B4B5A9951A2BEB113A4334D187FFEF1E] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-1960408961-725345543-1004UA.job
[MD5.46BC8E58902A2B8166582AFB0297BE37] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\ParetoLogic Registration.job
[MD5.4B773426DFF9BDA30C8476AD7C8281D4] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{F0BD69F0-803F-4D76-B0D2-D077390E2E1E}.job


---\\ Composants installés (ActiveSetup Installed Components) (O40)
[MD5.E36A9CD11E12C348E167064E89926B9A] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
[MD5.EEBC64EB73D80A9A51BE69EEE770EE6F] - (.Macromedia, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Macromed\Director\SwDir.dll
[MD5.C5AA69ED6CE6F2962A79F03039A87084] - (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r42.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10d.ocx


---\\ Pilotes lancés au démarrage (O41)


---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 2010-01-07 - 16:07:04 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys
O44 - LFC:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 2010-01-07 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
O44 - LFC:[MD5.BCC667EA91092F84B5EBC766E77F82E4] - 2010-01-24 - 12:55:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl
O44 - LFC:[MD5.F7C23CD5D2EA3C77C68405111B8616C6] - 2010-01-31 - 02:52:06 -SH-- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\unrar.exe
O44 - LFC:[MD5.5D3F90904196DC3C8313406A6D460704] - 2010-02-02 - 18:04:24 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\e8e75eb6-51a1-43e0-9155-a4e5bb0c3f67_7.avi
O44 - LFC:[MD5.FCDF2E7A6A469E3994576F91F0BB3DF1] - 2010-02-04 - 05:23:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.BAK
O44 - LFC:[MD5.5E3A727D90417A6FFC45EE815A65AA39] - 2010-02-04 - 08:27:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\cf2b119
O44 - LFC:[MD5.060B0320B605FF7F9A7FC2C736892A1B] - 2010-02-04 - 19:15:24 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\203613774
O44 - LFC:[MD5.7EDE0C7E9BE190786697FEA457A918E9] - 2010-02-04 - 20:48:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\xcrashdump.dat
O44 - LFC:[MD5.87314C64F056368B069477C73ECAFD8E] - 2010-02-05 - 05:22:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\1551021598
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:32:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 2010-02-05 - 06:33:30 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-02-05 - 06:34:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:34:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:34:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-02-05 - 06:34:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nmp.log
O44 - LFC:[MD5.7CA6A4CB005640529EAEEEF4EE05A168] - 2010-02-05 - 06:34:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\NvApps.xml
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:35:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log
O44 - LFC:[MD5.D8422A1732BAB862012D12115E8F9620] - 2010-02-05 - 07:53:34 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\vsconfig.xml
O44 - LFC:[MD5.45ABFB5CD932EAAEF15F79CC94A4DBCC] - 2010-02-05 - 07:59:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\rollback.ini


---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)


---\\ Image File Execution Options (IFEO) (O50)


---\\ MountPoints2 Shell Key (MPSK) (O51)


---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.D392183CC5379E302E50CEBA635248EB] - 2005-10-05 - 04:21:10 R--A- . (.Analog Devices, Inc. - High Definition Audio Function Driver(Release Candidate 1).) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys
O58 - SDL:[MD5.9F59AE2DE835641FBB0C6AFD80D8FA9B] - 2005-03-04 - 07:53:00 R--A- . (.Andrea Electronics Corporation - Andrea Audio Noise Cancellation Driver.) -- C:\WINDOWS\system32\drivers\aeaudio.sys
O58 - SDL:[MD5.62271FF14BAA810323AC816C5D355BA9] - 2005-03-09 - 14:53:00 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdK8.sys
O58 - SDL:[MD5.033448D435E65C4BD72E70521FD05C76] - 2007-04-16 - 20:46:00 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdPPM.sys
O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 2004-08-12 - 21:56:20 R--A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ASACPI.sys
O58 - SDL:[MD5.DE91D0D73C3E61E6826D98FAC2FAC729] - 2004-04-27 - 02:26:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 2006-03-02 - 07:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 2006-03-02 - 07:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 2009-05-18 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
O58 - SDL:[MD5.9C53FF8D94F45166B23F8A410EFE9F06] - 2008-12-11 - 21:32:42 ---A- . (.Kaspersky Lab - Klif Mini-Filter.) -- C:\WINDOWS\system32\drivers\klif.sys
O58 - SDL:[MD5.4938408C87C88CA398EF293475FAE41B] - 2004-10-21 - 12:32:12 ---A- . (.Logitech, Inc. - Logitech PS2 Keyboard Filter Driver..) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys
O58 - SDL:[MD5.452ECFC32A4B5D9A761E113F149E1B9E] - 2004-10-21 - 13:30:38 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidKE.Sys
O58 - SDL:[MD5.9C92312DD1AB42E627710FB89BBBCD1E] - 2004-10-21 - 13:31:14 ---A- . (.Logitech, Inc. - Logitech USB Mouse Function Driver..) -- C:\WINDOWS\system32\drivers\LHidUsbK.sys
O58 - SDL:[MD5.95871E8C4AECFED95F884D2D10B8BCFB] - 2004-10-21 - 13:30:56 ---A- . (.Logitech, Inc. - Logitech Filter Driver for Mouse Class..) -- C:\WINDOWS\system32\drivers\LMouKE.Sys
O58 - SDL:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 2010-01-07 - 16:07:04 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys
O58 - SDL:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 2010-01-07 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
O58 - SDL:[MD5.E91FC8B52D21E38317DC61A3C7CCFA4B] - 2009-04-03 - 23:01:49 ---A- . (.MusicMatch, Inc. - MusicMatch Access Layer KMD.) -- C:\WINDOWS\system32\drivers\MxlW2k.sys
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 2006-03-02 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys
O58 - SDL:[MD5.F85E109844787668CE8AAB54EF14362A] - 2009-07-14 - 13:54:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 190.38.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys
O58 - SDL:[MD5.ADD0334F4F6E0B339A40FE4854205215] - 2006-07-11 - 01:04:40 R--A- . (.NVIDIA Corporation - NVIDIA Networking Function Driver..) -- C:\WINDOWS\system32\drivers\NVENETFD.sys
O58 - SDL:[MD5.A1EF67BB96D5D6492C99F4DC4DC32CC5] - 2006-07-11 - 01:04:42 R--A- . (.NVIDIA Corporation - NVIDIA Networking Bus Driver..) -- C:\WINDOWS\system32\drivers\nvnetbus.sys
O58 - SDL:[MD5.64FBCB8DAACCC10D89B8E6416069A62F] - 2006-07-11 - 01:04:24 R--A- . (.NVIDIA Corporation - NVIDIA Network Resource Manager..) -- C:\WINDOWS\system32\drivers\nvnrm.sys
O58 - SDL:[MD5.0E7782CB077F7FD3B8238B16B6F437A4] - 2006-07-11 - 01:04:12 R--A- . (.NVIDIA Corporation - NVIDIA Networking Soft-NPU Driver..) -- C:\WINDOWS\system32\drivers\nvsnpu.sys
O58 - SDL:[MD5.5767170BC1B422FBEFBC69CBD208351C] - 2006-07-11 - 01:04:32 R--A- . (.NVIDIA Corporation - NVIDIA Networking Protocol Driver..) -- C:\WINDOWS\system32\drivers\nvtcp.sys
O58 - SDL:[MD5.4228630829C0E521C43D882A00533374] - 2002-09-16 - 16:14:32 ---A- . (.PowerQuest Corporation - PowerQuest Boot Mode Driver..) -- C:\WINDOWS\system32\drivers\PQNTDRV.sys
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 2006-03-02 - 07:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys
O58 - SDL:[MD5.49452BFCEC22F36A7A9B9C2181BC3042] - 2008-11-20 - 14:19:06 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\drivers\pxhelp20.sys
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 2006-03-02 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 2006-03-02 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys
O58 - SDL:[MD5.D507C1400284176573224903819FFDA3] - 2004-08-03 - 17:31:34 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8139 NDIS 5.0 Driver.) -- C:\WINDOWS\system32\drivers\RTL8139.sys
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2008-04-13 - 11:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys
O58 - SDL:[MD5.ECA77BEEB2BE8D573CF1B265E44FBFBD] - 2005-08-11 - 00:49:28 R--A- . (.Sensaura - Sensaura WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\senfilt.sys
O58 - SDL:[MD5.00000000000000000000000000000000] - 2009-03-20 - 08:50:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 2006-03-02 - 07:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 2006-03-02 - 07:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys
O58 - SDL:[MD5.3C3037D132FF9F4AA5642E866327E8F5] - 2009-06-17 - 16:05:36 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Bus Enumerator Driver.) -- C:\WINDOWS\system32\drivers\WmBEnum.sys
O58 - SDL:[MD5.9E9DBC245A4B0193A5DA79C928B9FA04] - 2009-06-17 - 16:05:46 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Hid Filter Driver.) -- C:\WINDOWS\system32\drivers\WmFilter.sys
O58 - SDL:[MD5.7CF6B117A80246930FB89750DA231324] - 2009-06-17 - 16:06:06 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Hid Device Driver.) -- C:\WINDOWS\system32\drivers\WmVirHid.sys
O58 - SDL:[MD5.CD49242418CAD9946F2F81165BC72FDB] - 2009-06-17 - 16:06:16 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Translation Driver.) -- C:\WINDOWS\system32\drivers\WmXlCore.sys
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys
O58 - SDL:[MD5.B9518EFB399C489993FB16984FD69599] - 2009-02-18 - 22:10:22 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\system32\vsdatant.sys



End of the scan (229 lines)

Rapport de ZHPDiag/MD5 v1.25.11 par Nicolas Coolman
Run by Raymond Leduc at 2010-02-05 08:11:33
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html

---\\ Web Browser
MSIE: Internet Explorer v8.0.6001.18702

---\\ System Information
Platform : Microsoft Windows XP (5.1.2600) Service Pack 3
Processor: x86 Family 15 Model 107 Stepping 2, AuthenticAMD
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2046 MB (56% free)
System drive C: has 167 GB (76%) free of 218 GB

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 167 Go of 218 Go)
D:\ CD-ROM drive (Not Inserted)
E:\ CD-ROM drive (Not Inserted)
F:\ Hard drive, Flash drive, Thumb drive (Free 37 Go of 39 Go)
G:\ Hard drive, Flash drive, Thumb drive (Free 23 Go of 35 Go)
H:\ Hard drive, Flash drive, Thumb drive (Free 48 Go of 80 Go)
J:\ CD-ROM drive (Not Inserted)


---\\ Processus lancés
[MD5.F0871538C13492F65105201A92215410] - (.Check Point Software Technologies LTD - ZoneAlarm Client.) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
[MD5.451F50010740471BAD72BAC771F26390] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\NVIDIA Corporation\nView\nwiz.exe
[MD5.87D8967A5F0DA349CC53943016ABB5B0] - (.Logicool Co. Ltd. - Logicool WingMan Event Monitor.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe
[MD5.3A0647BDED81DBE0BCBB51D70B22C9E0] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe
[MD5.7E8A58D9859D79083B09C2FE83F5A670] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files\IncrediMail\bin\IncMail.exe
[MD5.466CE40EAA865752F4930A472563E4E1] - (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
[MD5.73BB442A717B9BB0097C243374C14A3E] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
[MD5.55D7A219AD8D0DB8980528944152A6FD] - (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe
[MD5.C45617113F717A1A155844A6F3FF4A52] - (.SAMSUNG ELECTRONICS - SMSTray.exe.) -- C:\Program Files\Samsung\EmoDio\SMSTray.exe
[MD5.8CA340A0929B4595BF7A75E45CF90F84] - (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
[MD5.B9B7084F7DB3D1B036C0B9178472E96A] - (.Logicool - Logicool Desktop Messenger.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
[MD5.59DC5BB82E4C8E0B3EADCFDBC44BA6E4] - (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe
[MD5.536FCD2CEC5161BFCC91CC21726B9DB2] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[MD5.E4BDF223CD75478BF44567B4D5C2634D] - (.Microsoft Corporation - Generic Host Process for Win32 Services.) -- C:\WINDOWS\System32\svchost.exe
[MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
[MD5.C3FB1D70CB88722267949694BA51759E] - (.Microsoft Corporation - Applications Services et Contrôleur.) -- C:\WINDOWS\system32\services.exe
[MD5.B81F8778F5BB485F3B75114F0C99A49F] - (.Apache Software Foundation - Apache HTTP Server.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.39133291CB607BDD87CFC565A4A1E7A5] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe
[MD5.BDF6DBA93D6EB5FD511CFD0DA49AE2B3] - (.NVIDIA Corporation - ActiveArmor Firewall IP Service.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
[MD5.2317FCB8587049873ACE9B90EF56514E] - (.NVIDIA Corporation - nSvcLog.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
[MD5.CC9275DB74AD57AC0C3EE823F9922298] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 190.3.) -- C:\WINDOWS\system32\nvsvc32.exe
[MD5.91E6024D6D4DCDECDB36C43ECF9BBECB] - (.Microsoft Corporation - LSA Shell (Export Version).) -- C:\WINDOWS\system32\lsass.exe
[MD5.271077B91D7AD1B616F8AFDFE8E3F981] - (.Microsoft Corporation - Microsoft SeaPort Search Enhancement Broker.) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
[MD5.460E4CE148BD07218DA0B6A3D31885A9] - (.Microsoft Corporation - Spooler SubSystem App.) -- C:\WINDOWS\system32\spoolsv.exe
[MD5.B1691AF4A072CB674D600DB16DD7308E] - (.Rocket Division Software - StarWind iSCSI Target (Alcohol Edition).) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
[MD5.672C02AB4589875ACB3A2D625A993A22] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe
[MD5.7778BDFA3F6F6FBA0E75B9594098F737] - (.Microsoft Corporation - Microsoft Windows Search Indexer.) -- C:\WINDOWS\system32\SearchIndexer.exe


---\\ Internet Explorer URLSearchHook (R3)
[MD5.3CF9A6F04A2708646FB2DEF4DB92688B] - (.Microsoft Corporation - Internet Explorer.) -- C:\WINDOWS\system32\ieframe.dll


---\\ Browser Helper Objects de navigateur (O2)
[MD5.DC1E56092CC57FB4605B088D3DCCBF7A] - (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
[MD5.F655CDD5506FBB4C40C08C9C6A66F7C8] - (.Microsoft Corporation - Search Helper for Internet Explorer.) -- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
[MD5.1A82C1B9BB43385695EFC3A84F6756A2] - (.Microsoft Corporation - WindowsLiveLogin.dll.) -- C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
[MD5.C9EDE29F223A27873E187D9FB6045EA6] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll
[MD5.28455424E3C8B81661C5A40E18066BB1] - (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
[MD5.DEE8F03D1EACE0C8F914A2C76568EA32] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter binary.) -- C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll


---\\ Internet Explorer Toolbars (O3)
[MD5.28455424E3C8B81661C5A40E18066BB1] - (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll


---\\ Applications démarrées automatiquement par le registre (O4)
[MD5.A5E4CD281C93E174181C5873FAFD4F16] - (.Logitech - LDM Configuration Application.) -- C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
[MD5.B75637DA0A24B4B9D12A87D02FC437FE] - (.Logitech Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPoint\KEM.exe


---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
[MD5.35B49E4A50B8E8F39E1723070F302705] - (.Microsoft Corporation - Microsoft Office Excel.) -- C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE


---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)


---\\ Winsock hijacker (Layered Service Provider) (O10)
[MD5.58AF8498C62E1E1DAB5AE59C6E08C180] - (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll
[MD5.EF4092F4129A220AEAADC04C229CD5BF] - (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
[MD5.58AF8498C62E1E1DAB5AE59C6E08C180] - (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll
[MD5.292F92469EFB2FD402E00742C06D539D] - (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files\Bonjour\mdnsNSP.dll


---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSODL) (O21)
[MD5.CC8915DB4E33E8FB29CA0D2DBF75306E] - (.Microsoft Corporation - Web Site Monitor.) -- C:\WINDOWS\system32\webcheck.dll
[MD5.9689FCC8C26C3D6AFAC892A6C5D1B81A] - (.Microsoft Corporation - Objet du service d'environnement Systray.) -- C:\WINDOWS\system32\stobject.dll
[MD5.045E228F71C31901084B64BE59093499] - (.Microsoft Corporation - Windows Portable Device Shell Service Objec.) -- C:\WINDOWS\system32\WPDShServiceObj.dll
[MD5.BA3677A2A4043114DC437AD68F71743E] - (.Microsoft Corporation - Moniteur et dossier UPNP Tray.) -- C:\WINDOWS\system32\upnpui.dll


---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)


---\\ Liste des services NT non Microsoft et non désactivés (O23)
[MD5.536FCD2CEC5161BFCC91CC21726B9DB2] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe
[MD5.B81F8778F5BB485F3B75114F0C99A49F] - (.Apache Software Foundation - Apache HTTP Server.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
[MD5.8F0DE4FEF8201E306F9938B0905AC96A] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.39133291CB607BDD87CFC565A4A1E7A5] - (.Sun Microsystems, Inc. - Java(TM) Quick Starter Service.) -- C:\Program Files\Java\jre6\bin\jqs.exe
[MD5.BDF6DBA93D6EB5FD511CFD0DA49AE2B3] - (.NVIDIA Corporation - ActiveArmor Firewall IP Service.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
[MD5.2317FCB8587049873ACE9B90EF56514E] - (.NVIDIA Corporation - nSvcLog.) -- C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
[MD5.CC9275DB74AD57AC0C3EE823F9922298] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 190.3.) -- C:\WINDOWS\system32\nvsvc32.exe
[MD5.B1691AF4A072CB674D600DB16DD7308E] - (.Rocket Division Software - StarWind iSCSI Target (Alcohol Edition).) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
[MD5.672C02AB4589875ACB3A2D625A993A22] - (.Check Point Software Technologies LTD - TrueVector Service.) -- C:\WINDOWS\system32\ZoneLabs\vsmon.exe


---\\ Tâches planifiées en automatique (O39)
[MD5.D25B21AEA2D62CB03507FBBC042A91E3] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[MD5.B26489E5283D6AD50A4D394E34564303] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[MD5.A6C9F8C88DC974BFA028F75C2DDC393C] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[MD5.9E96A34F6ABCDD9D6A7C59C196B4046E] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-1960408961-725345543-1004Core.job
[MD5.B4B5A9951A2BEB113A4334D187FFEF1E] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1214440339-1960408961-725345543-1004UA.job
[MD5.46BC8E58902A2B8166582AFB0297BE37] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\ParetoLogic Registration.job
[MD5.4B773426DFF9BDA30C8476AD7C8281D4] - (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{F0BD69F0-803F-4D76-B0D2-D077390E2E1E}.job


---\\ Composants installés (ActiveSetup Installed Components) (O40)
[MD5.E36A9CD11E12C348E167064E89926B9A] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\regutils.dll
[MD5.EEBC64EB73D80A9A51BE69EEE770EE6F] - (.Macromedia, Inc. - Shockwave ActiveX Control.) -- C:\WINDOWS\system32\Macromed\Director\SwDir.dll
[MD5.C5AA69ED6CE6F2962A79F03039A87084] - (.Adobe Systems, Inc. - Adobe Flash Player 10.0 r42.) -- C:\WINDOWS\system32\Macromed\Flash\Flash10d.ocx


---\\ Pilotes lancés au démarrage (O41)


---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 2010-01-07 - 16:07:04 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys
O44 - LFC:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 2010-01-07 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
O44 - LFC:[MD5.BCC667EA91092F84B5EBC766E77F82E4] - 2010-01-24 - 12:55:25 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\wpa.dbl
O44 - LFC:[MD5.F7C23CD5D2EA3C77C68405111B8616C6] - 2010-01-31 - 02:52:06 -SH-- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\unrar.exe
O44 - LFC:[MD5.5D3F90904196DC3C8313406A6D460704] - 2010-02-02 - 18:04:24 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\e8e75eb6-51a1-43e0-9155-a4e5bb0c3f67_7.avi
O44 - LFC:[MD5.FCDF2E7A6A469E3994576F91F0BB3DF1] - 2010-02-04 - 05:23:50 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\imsins.BAK
O44 - LFC:[MD5.5E3A727D90417A6FFC45EE815A65AA39] - 2010-02-04 - 08:27:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\cf2b119
O44 - LFC:[MD5.060B0320B605FF7F9A7FC2C736892A1B] - 2010-02-04 - 19:15:24 -SHA- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\203613774
O44 - LFC:[MD5.7EDE0C7E9BE190786697FEA457A918E9] - 2010-02-04 - 20:48:26 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\xcrashdump.dat
O44 - LFC:[MD5.87314C64F056368B069477C73ECAFD8E] - 2010-02-05 - 05:22:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\1551021598
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:32:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\SchedLgU.Txt
O44 - LFC:[MD5.6A2CB42966136854F4464516FBB4AE72] - 2010-02-05 - 06:33:30 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\bootstat.dat
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-02-05 - 06:34:01 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\0.log
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:34:02 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiaservc.log
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:34:03 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\wiadebug.log
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 2010-02-05 - 06:34:30 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\nmp.log
O44 - LFC:[MD5.7CA6A4CB005640529EAEEEF4EE05A168] - 2010-02-05 - 06:34:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\NvApps.xml
O44 - LFC:[MD5.00000000000000000000000000000000] - 2010-02-05 - 06:35:47 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\WindowsUpdate.log
O44 - LFC:[MD5.D8422A1732BAB862012D12115E8F9620] - 2010-02-05 - 07:53:34 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\System32\vsconfig.xml
O44 - LFC:[MD5.45ABFB5CD932EAAEF15F79CC94A4DBCC] - 2010-02-05 - 07:59:57 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\rollback.ini


---\\ Opérations et fonctions au démarrage de Windows Explorer (O46)


---\\ Image File Execution Options (IFEO) (O50)


---\\ MountPoints2 Shell Key (MPSK) (O51)


---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.D392183CC5379E302E50CEBA635248EB] - 2005-10-05 - 04:21:10 R--A- . (.Analog Devices, Inc. - High Definition Audio Function Driver(Release Candidate 1).) -- C:\WINDOWS\system32\drivers\ADIHdAud.sys
O58 - SDL:[MD5.9F59AE2DE835641FBB0C6AFD80D8FA9B] - 2005-03-04 - 07:53:00 R--A- . (.Andrea Electronics Corporation - Andrea Audio Noise Cancellation Driver.) -- C:\WINDOWS\system32\drivers\aeaudio.sys
O58 - SDL:[MD5.62271FF14BAA810323AC816C5D355BA9] - 2005-03-09 - 14:53:00 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdK8.sys
O58 - SDL:[MD5.033448D435E65C4BD72E70521FD05C76] - 2007-04-16 - 20:46:00 ---A- . (.Advanced Micro Devices - AMD Processor Driver.) -- C:\WINDOWS\system32\drivers\AmdPPM.sys
O58 - SDL:[MD5.D48659BB24C48345D926ECB45C1EBDF5] - 2004-08-12 - 21:56:20 R--A- . (.Pas de propriétaire - ATK0110 ACPI Utility.) -- C:\WINDOWS\system32\drivers\ASACPI.sys
O58 - SDL:[MD5.DE91D0D73C3E61E6826D98FAC2FAC729] - 2004-04-27 - 02:26:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
O58 - SDL:[MD5.C9B25AE9B8ABD983C5AD3F8CBFAB0F9C] - 2006-03-02 - 07:00:00 ---A- . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\system32\drivers\cinemst2.sys
O58 - SDL:[MD5.9624293E55AD405415862B504CA95B73] - 2006-03-02 - 07:00:00 ---A- . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\system32\drivers\cpqdap01.sys
O58 - SDL:[MD5.8182FF89C65E4D38B2DE4BB0FB18564E] - 2009-05-18 - 13:17:00 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
O58 - SDL:[MD5.9C53FF8D94F45166B23F8A410EFE9F06] - 2008-12-11 - 21:32:42 ---A- . (.Kaspersky Lab - Klif Mini-Filter.) -- C:\WINDOWS\system32\drivers\klif.sys
O58 - SDL:[MD5.4938408C87C88CA398EF293475FAE41B] - 2004-10-21 - 12:32:12 ---A- . (.Logitech, Inc. - Logitech PS2 Keyboard Filter Driver..) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys
O58 - SDL:[MD5.452ECFC32A4B5D9A761E113F149E1B9E] - 2004-10-21 - 13:30:38 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\WINDOWS\system32\drivers\LHidKE.Sys
O58 - SDL:[MD5.9C92312DD1AB42E627710FB89BBBCD1E] - 2004-10-21 - 13:31:14 ---A- . (.Logitech, Inc. - Logitech USB Mouse Function Driver..) -- C:\WINDOWS\system32\drivers\LHidUsbK.sys
O58 - SDL:[MD5.95871E8C4AECFED95F884D2D10B8BCFB] - 2004-10-21 - 13:30:56 ---A- . (.Logitech, Inc. - Logitech Filter Driver for Mouse Class..) -- C:\WINDOWS\system32\drivers\LMouKE.Sys
O58 - SDL:[MD5.654A3F014903DC62CAF5E037F3D316D2] - 2010-01-07 - 16:07:04 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbam.sys
O58 - SDL:[MD5.C0D40BEAA6DFC05602FC8F484696F7F5] - 2010-01-07 - 16:07:14 ---A- . (.Malwarebytes Corporation - Malwarebytes' Anti-Malware.) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
O58 - SDL:[MD5.E91FC8B52D21E38317DC61A3C7CCFA4B] - 2009-04-03 - 23:01:49 ---A- . (.MusicMatch, Inc. - MusicMatch Access Layer KMD.) -- C:\WINDOWS\system32\drivers\MxlW2k.sys
O58 - SDL:[MD5.BE984D604D91C217355CDD3737AAD25D] - 2006-03-02 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\nikedrv.sys
O58 - SDL:[MD5.F85E109844787668CE8AAB54EF14362A] - 2009-07-14 - 13:54:00 ---A- . (.NVIDIA Corporation - NVIDIA Compatible Windows 2000 Miniport Driver, Version 190.38.) -- C:\WINDOWS\system32\drivers\nv4_mini.sys
O58 - SDL:[MD5.ADD0334F4F6E0B339A40FE4854205215] - 2006-07-11 - 01:04:40 R--A- . (.NVIDIA Corporation - NVIDIA Networking Function Driver..) -- C:\WINDOWS\system32\drivers\NVENETFD.sys
O58 - SDL:[MD5.A1EF67BB96D5D6492C99F4DC4DC32CC5] - 2006-07-11 - 01:04:42 R--A- . (.NVIDIA Corporation - NVIDIA Networking Bus Driver..) -- C:\WINDOWS\system32\drivers\nvnetbus.sys
O58 - SDL:[MD5.64FBCB8DAACCC10D89B8E6416069A62F] - 2006-07-11 - 01:04:24 R--A- . (.NVIDIA Corporation - NVIDIA Network Resource Manager..) -- C:\WINDOWS\system32\drivers\nvnrm.sys
O58 - SDL:[MD5.0E7782CB077F7FD3B8238B16B6F437A4] - 2006-07-11 - 01:04:12 R--A- . (.NVIDIA Corporation - NVIDIA Networking Soft-NPU Driver..) -- C:\WINDOWS\system32\drivers\nvsnpu.sys
O58 - SDL:[MD5.5767170BC1B422FBEFBC69CBD208351C] - 2006-07-11 - 01:04:32 R--A- . (.NVIDIA Corporation - NVIDIA Networking Protocol Driver..) -- C:\WINDOWS\system32\drivers\nvtcp.sys
O58 - SDL:[MD5.4228630829C0E521C43D882A00533374] - 2002-09-16 - 16:14:32 ---A- . (.PowerQuest Corporation - PowerQuest Boot Mode Driver..) -- C:\WINDOWS\system32\drivers\PQNTDRV.sys
O58 - SDL:[MD5.80D317BD1C3DBC5D4FE7B1678C60CADD] - 2006-03-02 - 07:00:00 ---A- . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Library.) -- C:\WINDOWS\system32\drivers\ptilink.sys
O58 - SDL:[MD5.49452BFCEC22F36A7A9B9C2181BC3042] - 2008-11-20 - 14:19:06 ---A- . (.Sonic Solutions - Px Engine Device Driver for Windows 2000/XP.) -- C:\WINDOWS\system32\drivers\pxhelp20.sys
O58 - SDL:[MD5.A56FE08EC7473E8580A390BB1081CDD7] - 2006-03-02 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\system32\drivers\rio8drv.sys
O58 - SDL:[MD5.0A854DF84C77A0BE205BFEAB2AE4F0EC] - 2006-03-02 - 07:00:00 ---A- . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\system32\drivers\riodrv.sys
O58 - SDL:[MD5.D507C1400284176573224903819FFDA3] - 2004-08-03 - 17:31:34 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL8139 NDIS 5.0 Driver.) -- C:\WINDOWS\system32\drivers\RTL8139.sys
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2008-04-13 - 11:39:15 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\WINDOWS\system32\drivers\secdrv.sys
O58 - SDL:[MD5.ECA77BEEB2BE8D573CF1B265E44FBFBD] - 2005-08-11 - 00:49:28 R--A- . (.Sensaura - Sensaura WDM 3D Audio Driver.) -- C:\WINDOWS\system32\drivers\senfilt.sys
O58 - SDL:[MD5.00000000000000000000000000000000] - 2009-03-20 - 08:50:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\drivers\sptd.sys
O58 - SDL:[MD5.D74A8EC75305F1D3CFDE7C7FC1BD62A9] - 2006-03-02 - 07:00:00 ---A- . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\system32\drivers\tsbvcap.sys
O58 - SDL:[MD5.55E01061C74A8CEFFF58DC36114A8D3F] - 2006-03-02 - 07:00:00 ---A- . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\system32\drivers\vdmindvd.sys
O58 - SDL:[MD5.3C3037D132FF9F4AA5642E866327E8F5] - 2009-06-17 - 16:05:36 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Bus Enumerator Driver.) -- C:\WINDOWS\system32\drivers\WmBEnum.sys
O58 - SDL:[MD5.9E9DBC245A4B0193A5DA79C928B9FA04] - 2009-06-17 - 16:05:46 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Hid Filter Driver.) -- C:\WINDOWS\system32\drivers\WmFilter.sys
O58 - SDL:[MD5.7CF6B117A80246930FB89750DA231324] - 2009-06-17 - 16:06:06 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Virtual Hid Device Driver.) -- C:\WINDOWS\system32\drivers\WmVirHid.sys
O58 - SDL:[MD5.CD49242418CAD9946F2F81165BC72FDB] - 2009-06-17 - 16:06:16 ---A- . (.Logicool Co. Ltd. - Logicool WingMan Translation Driver.) -- C:\WINDOWS\system32\drivers\WmXlCore.sys
O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ansi.sys
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\country.sys
O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\himem.sys
O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\key01.sys
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\keyboard.sys
O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos.sys
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos404.sys
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos411.sys
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos412.sys
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntdos804.sys
O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio.sys
O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio404.sys
O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio411.sys
O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio412.sys
O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 2006-03-02 - 07:00:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\system32\ntio804.sys
O58 - SDL:[MD5.B9518EFB399C489993FB16984FD69599] - 2009-02-18 - 22:10:22 ---A- . (.Check Point Software Technologies LTD - TrueVector Device Driver.) -- C:\WINDOWS\system32\vsdatant.sys



End of the scan (229 lines)

Re,

si tu ne fais pas ce que je demande, c'est parfaitement inutile :

- tu n'as pas installé d'antivirus

- je doute que tu ais coché les lignes O61 et O65 comme demandé

- tu n'as pas mis le rapport dans un lien Cijoint (ce que tu avais fait la première fois).

Fais exactement ce que j'ai demandé au post 3

Je m'exuse. j'ai déjà Zone Lab Security Suite mais je l'avais désactivé. J'ai suivi tes instructions. Merci de me venir en aide,j'apprécie .
http://www.cijoint.fr/cjlink.php?file=cj201002/cij6JsW2os.txt

Salut Lyionnais92, as-tu reçu mon dernier message envoyé le 5/02 à 23:49 ? Si oui j'attends la suite. Merci

Bonjour,

as tu installé Winrar ?

Je voudrais vérifier un fichier :


Rends toi sur ce site :

http://www.virustotal.com/

Clique sur parcourir et cherche ce fichier : c:\windows\system32\cp21_comeai.dll

Clique sur Send File.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse.

Si VirusTotal indique que le fichier a déjà été analysé, cliquer sur le bouton Reanalyse le fichier maintenant

Résultat: 0/39 (0%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: 3.
L'heure estimée de démarrage est entre 60 et 85 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.
Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée. Email:


Antivirus Version Dernière mise à jour Résultat
a-squared 4.5.0.50 2010.02.06 -
AhnLab-V3 5.0.0.2 2010.02.06 -
AntiVir 7.9.1.158 2010.02.05 -
Antiy-AVL 2.0.3.7 2010.02.05 -
Authentium 5.2.0.5 2010.02.06 -
Avast 4.8.1351.0 2010.02.06 -
AVG 9.0.0.730 2010.02.06 -
BitDefender 7.2 2010.02.06 -
CAT-QuickHeal 10.00 2010.02.06 -
ClamAV 0.96.0.0-git 2010.02.06 -
Comodo 3844 2010.02.06 -
DrWeb 5.0.1.12222 2010.02.06 -
eSafe 7.0.17.0 2010.02.04 -
eTrust-Vet 35.2.7286 2010.02.05 -
F-Prot 4.5.1.85 2010.02.06 -
F-Secure 9.0.15370.0 2010.02.06 -
Fortinet 4.0.14.0 2010.02.06 -
GData 19 2010.02.06 -
Ikarus T3.1.1.80.0 2010.02.06 -
Jiangmin 13.0.900 2010.02.06 -
K7AntiVirus 7.10.968 2010.02.06 -
Kaspersky 7.0.0.125 2010.02.06 -
McAfee 5884 2010.02.06 -
McAfee+Artemis 5884 2010.02.06 -
McAfee-GW-Edition 6.8.5 2010.02.06 -
Microsoft 1.5406 2010.02.06 -
NOD32 4842 2010.02.06 -
Norman 6.04.03 2010.02.06 -
nProtect 2009.1.8.0 2010.02.06 -
Panda 10.0.2.2 2010.02.06 -
PCTools 7.0.3.5 2010.02.06 -
Rising 22.33.05.04 2010.02.06 -
Sophos 4.50.0 2010.02.06 -
Sunbelt 3.2.1858.2 2010.02.06 -
TheHacker 6.5.1.0.181 2010.02.06 -
TrendMicro 9.120.0.1004 2010.02.06 -
VBA32 3.12.12.1 2010.02.05 -
ViRobot 2010.2.5.2174 2010.02.05 -
VirusBuster 5.0.21.0 2010.02.06 -
Information additionnelle
File size: 260096 bytes
MD5...: 8c3f80b30b4e6ed3dcf095dc16fd21af
SHA1..: 392dff5a64d340af710d03b1815dc53999273f01
SHA256: 3fb541b9f194f6e96caf5b7cc782a33b1605d6ef0d4a27be6c897923777c4ad0
ssdeep: 6144:6X1UBsZOkeIgX9/N8tfj6qwL7EsynFFhYQoZNoIYb/48c:qUp+YQMm

PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x18c40
timedatestamp.....: 0x355c69a0 (Fri May 15 16:13:20 1998)
machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1a828 0x1aa00 6.18 c8a52085e034431ac32e5af79f144fa7
.rdata 0x1c000 0xadd0 0xae00 4.06 2a10294c55e1d7a091eb7871db85e39b
.data 0x27000 0x4de8 0x4e00 5.09 837de8ba70e6a32fdb3e7eb5836f8e99
.idata 0x2c000 0xa1a 0xc00 4.53 c0ce060d0305d5802debfbc9d1217142
.rsrc 0x2d000 0xf0f0 0xf200 5.46 3ca940b54a9b340505d91ad1535800f1
.reloc 0x3d000 0x4964 0x4a00 5.86 f30b092add17ca862c1f6ac84ae79e6f

( 9 imports )
> cpt12_math.dll: _getValue@CptVec2f@@QBEXAAM0@Z, _setValue@CptVec2f@@QAEAAV1@MM@Z, _getValue@CptVec3f@@QBEXAAM00@Z, __0CptVec3f@@QAE@XZ, __0CptVec2f@@QAE@XZ, __0CptRotation@@QAE@XZ
> KERNEL32.dll: lstrcpyA, InterlockedIncrement, GetModuleFileNameA, WideCharToMultiByte, MultiByteToWideChar, LoadLibraryExA, FindResourceA, GetLastError, LoadResource, SizeofResource, FreeLibrary, lstrcpynA, lstrcmpiA, lstrlenA, EnterCriticalSection, LeaveCriticalSection, InterlockedDecrement, InitializeCriticalSection, DeleteCriticalSection, lstrlenW, lstrcatA, HeapDestroy, DisableThreadLibraryCalls
> USER32.dll: CharNextA
> ADVAPI32.dll: RegEnumKeyExA, RegSetValueExA, RegOpenKeyExA, RegCreateKeyExA, RegCloseKey, RegDeleteValueA, RegDeleteKeyA, RegQueryValueExA, RegQueryInfoKeyA
> ole32.dll: CoTaskMemRealloc, CoTaskMemAlloc, CoTaskMemFree
> OLEAUT32.dll: -, -, -, -
> cp21_basic.DLL: -, -, -, _theLog@CpLog@@2PAV1@A, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> cp21_main.DLL: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
> MSVCRT.dll: _ftol, realloc, malloc, _purecall, floor, _terminate@@YAXXZ, _initterm, _adjust_fdiv, __1type_info@@UAE@XZ, _except_handler3, free, __CxxFrameHandler, __2@YAPAXI@Z, __3@YAXPAX@Z

( 6 exports )
CPComFireThread, CreateVrmlExBrowser, DllCanUnloadNow, DllGetClassObject, DllRegisterServer, DllUnregisterServer

RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: DirectShow filter (58.3%)
Windows OCX File (35.7%)
Win32 Executable Generic (2.4%)
Win32 Dynamic Link Library (generic) (2.1%)
Generic Win/DOS Executable (0.5%)
sigcheck:
publisher....:
copyright....: Copyright 1997
product......: cpcomeai Module
description..: cpcomeai Module
original name: CPCOMEAI.DLL
internal name: CPCOMEAI
file version.: 1, 0, 0, 1
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

Re,

as tu installé Winrar ?

Non, je vais l'installer...mais j'utilise 7Zip ...c'est installé.

Bonjour,

Ouvre ce lien : http://www.cijoint.fr/cjlink.php?file=cj201002/cijIttFzEu.txt

Ouvre le fichier.

Copie dans le Presse-papier son contenu (sélectionne le avec la souris et fais simultanément Ctrl et C)

Déconnecte toi d'Internet et ferme toutes les applications ouvertes.


Pour Xp : Double clique sur l'icône ZHPFix.exe sur ton Bureau.



Clique successivement sur l'icône H (pour effacer le rapport qui s'est affiché) puis sur l'icône de la malette cachée par la feuille.

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

Clique sur OK, ce qui fait apparaître un carré à gauche de chaque ligne.

Clique sur "Tous" puis sur "Nettoyer".

Laisse l'outil travailler.

Si il te demande de redémarrer l'ordi pour achever le nettoyage, fais le immédiatement.

Le rapport d'exécution va apparaître dans la fenêtre.

Copie le dans ta réponse.

Je ne sais pas si je devais fermer aussi les antivirus. voici le rapport

ZHPFix v1.12.31 by Nicolas Coolman - Rapport de suppression du 2010-02-07 05:27:26
Fichier d'export Registre : C:\ZHPExportRegistry-2010-02-07-05-27-26.txt
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html


Processus mémoire :
(Néant)

Module mémoire :
(Néant)

Clé du Registre :
(Néant)

Valeur du Registre :
(Néant)

Elément de données du Registre :
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;localhost => Donnée supprimée avec succès

Dossier :
C:\Program Files\IEToolbar => Supprimé et mis en quarantaine

Fichier :
c:\windows\system32\unrar.exe => Supprimé et mis en quarantaine

Logiciel :
(Néant)

Script Registre :
(Néant)

Autre :
(Néant)


Récapitulatif :
Processus mémoire : 0
Module mémoire : 0
Clé du Registre : 0
Valeur du Registre : 0
Elément de données du Registre : 1
Dossier : 1
Fichier : 1
Logiciel : 0
Autre : 0


End of the scan

Re,

ça s'est déroulé comme prévu.

Toujours des alertes ?

Mets à jour ta console java :

Télécharge JavaRa.zip de Paul McLain et Fred de Vries.

http://raproducts.org/click/click.php?id=1

* Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
* Double-clique sur le répertoire JavaRa.
* Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
* Choisis Français puis clique sur Select.
* Clique sur Recherche de mises à jour.
* Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher.
* Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes.
* L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions.
* Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK.
* Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
* Ferme l'application.

Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

Voici le rapport:
JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Feb 07 06:59:03 2010

Found and removed: C:\Program Files\Java\jre1.5.0_03

Found and removed: C:\Program Files\Java\jre1.6.0_03

Found and removed: C:\Program Files\Java\jre1.6.0_05

Found and removed: C:\Program Files\Java\jre1.6.0_07

Found and removed: C:\Documents and Settings\Raymond Leduc\Application Data\Sun\Java\jre1.6.0_12

Found and removed: C:\Documents and Settings\Raymond Leduc\Application Data\Sun\Java\jre1.6.0_13

Found and removed: C:\Documents and Settings\Raymond Leduc\Application Data\Sun\Java\jre1.6.0_15

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sun Feb 07 07:02:19 2010

Found and removed: C:\Documents and Settings\Raymond Leduc\Application Data\Sun\Java\jre1.6.0_17

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

------------------------------------

Finished reporting.

Re,

Toujours des alertes ?

antivir Avira a encore des virus en quarantaine et Zone Alarm aussi...Backdoor32 ect.

Re,

vide tes quarantaines.

A part ça ?

Salut, J'ai vidé ma boîte et j'ai fait un scan complet. Tout est nettoyé. Ca roule beaucoup mieux. Merci beaucoup de ton aide. Quel conseil me donne -tu, garder antivir ou zone lab security.