Problème démarrage Windows 7Fermé

Question

Bonjour, 

Je vous expose le problème, le PC d'un collègue ne démarre plus, enfin si mais il charge systématiquement sur l'outil de réparation système, qui me dit que le problème ne peut pas être résolu automatiquement. Quand j'affiche le rapport d'erreur détaillé, voila ce que j'obtient :

Nom de l'évènement de problème: StartupRepairOffline
Signature du problème 1: 6.1.7600.16385
Signature du problème 2: 6.1.7600.16385
Signature du problème 3: unknown
Signature du problème 4: 21200955
Signature du problème 5: AutoFailover
Signature du problème 6: 45
Signature du problème 7: CorruptFile
Versions du système: 6.1.7600.2.0.0.256.1
Identificateur de paramètre régionaux: 1036

Le pc tourne sous 7 pro 64bits.

Quelqu'un aurait-il une solution?

J'ai déjà tenté de faire depuis l'invite de commande un chkdsk -f, le pc me répond qu'il n'y a pas de problème sur le disque...

Merci d'avance pour vos réponses.

Cordialement, Jérémie

athena223 · Answer

Bonjour , 

Tu as essayé le démarrage a partir du CD ou la réparation a partir de celui ci ?

Pense tu que le pc a pu etre infecter d'une manière ou d'une autre ?

Jerem89 · Answer

J'ai effectivement pu démarrer sur le CD d'installation de Win 7, lancer la réparation depuis ce dernier mais ça n'a pas résolu mon problème.

D'après ce qu'il m'a dit, il était en train de copier des photos depuis son appareil photo numérique sur son pc quand ce dernier s'est éteint tout seul et depuis impossible de le démmarer, il va directement sur l'outil de résolution des problème.

J'ai également essayer de faire une restauration système à une date ultérieur, idem, pas de résultat.

Jerem89 · Answer

Oui oui je peux accéder aux diverses options proposées sans soucis.

moment de grace · Answer

hello

pour voir un peu

Télécharge ZHPDiag ( de Nicolas coolman ). 
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html 


(outil de diagnostic)

 Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut ( N'oublie pas de cocher " Créer une icône sur le bureau " )
 
Lance ZHPDiag en double cliquant sur l'icône présente sur ton bureau (Clique droit -> Executer en tant qu'admin ( vista/Seven ) 

Clique sur la loupe en haut à gauche, puis laisse l'outil scanner. 

Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton bureau. 

Rend toi sur http://pjjoint.malekal.com/ 

Clique sur "Parcourir "  

Sélectionne le rapport ZHPdiag.txt qui se trouve sur ton bureau  

Clique ensuite sur "Envoyer le fichier " et copie/colle le lien dans ton prochain message

moment de grace · Answer

effectivement c'est pas simple

on peux tenter ca si tu veux

On va créer un LiveCD permettant de supprimer les Malwares ou autres, empêchant le démarrage d'un système. 

Procédure a effectuer sur un PC fonctionnel : 

Télécharge OTLPE.iso sur ton bureau. 
https://forum.malekal.com/viewtopic.php?t=23453&start=



- Insère un CD vierge dans ton graveur, si une fenêtre s'ouvre te demandant ce que tu veux faire, ferme cette fenêtre. 
- Fais un double-clic sur l'icône d'OTLPE.iso et si tu as un logiciel de gravure ISO sur ton pc, celui ci s'ouvrira automatiquement, il ne te reste qu'a suivre les instructions indiquées par celui ci. 


Par contre si aucun logiciel de gravure ne se lance, fais cela... 

Télécharge BurnAtOnce (bao0995.exe) sur ton bureau. 
http://dl.commentcamarche.net/www.commentcamarche.net/download/files/bao0995.exe 

- Installe le sans modifier les paramètres proposés lors du processus d'installation. 
- A la fin de l'installation, clique sue "Finish" pour lancer BurnAtOnce, une fenêtre de "License agreement" s'ouvre, coche la case "I am a non commercial user and accept the license agreement" et clique sur "Next". 
- BurnAtOnce est maintenant en fonctionnement. 

Fais un "glisser/déposer"du fichier "OTLPE.iso" sur le raccourci de "BurnAtOnce" comme sur cette capture : 
https://www.sfr.fr/fermeture-des-pages-perso.html 

- Clique sur Simulation 
- La gravure du CD va alors démarrer 
- Tu peux regarder cette vidéo (merci à jeanmimigab) en cas de problème : 
https://www.youtube.com/watch?v=EG3lOgt3ugE 


Faut maintenant insérer le CD créer dans le lecteur du PC malade et redémarrer l'ordinateur sur le CD : 
https://forum.malekal.com/viewtopic.php?t=9447&start= 

* une fois le bureau de reatogo chargé , tu lances OTLPE , l'icone jaune 

* Double-click sur l'icone OTLPE 
* Quand demandé "Do you wish to load the remote registry", select Yes 
* Quand demandé "Do you wish to load remote user profile(s) for scanning", select Yes 
* Vérifier que "Automatically Load All Remaining Users" est sélectionné et press OK 

* Sous Custom Scan box copie_colle le contenu en gras ci dessous: 

netsvcs 
msconfig 
safebootminimal 
safebootnetwork 
activex 
drivers32 
%ALLUSERSPROFILE%\Application Data\*. 
%ALLUSERSPROFILE%\Application Data\*.exe /s 
%APPDATA%\*. 
%APPDATA%\*.exe /s 
%SYSTEMDRIVE%\*.* 
%SYSTEMDRIVE%\*.exe 
%PROGRAMFILES%\*.* 
%PROGRAMFILES%\*. 
/md5start 
eventlog.dll 
scecli.dll 
netlogon.dll 
cngaudit.dll 
sceclt.dll 
ntelogon.dll 
logevent.dll 
iaStor.sys 
nvstor.sys 
atapi.sys 
IdeChnDr.sys 
viasraid.sys 
AGP440.sys 
vaxscsi.sys 
nvatabus.sys 
viamraid.sys 
nvata.sys 
nvgts.sys 
iastorv.sys 
ViPrt.sys 
eNetHook.dll 
explorer.exe 
svchost.exe 
userinit.exe 
qmgr.dll 
ws2_32.dll 
proquota.exe 
imm32.dll 
kernel32.dll 
ndis.sys 
autochk.exe 
spoolsv.exe 
xmlprov.dll 
ntmssvc.dll 
mswsock.dll 
Beep.SYS 
ntfs.sys 
termsrv.dll 
sfcfiles.dll 
st3shark.sys 
/md5stop 
%systemroot%\*. /mp /s 
%systemroot%\system32\*.dll /lockedfiles 
%systemroot%\Tasks\*.job /lockedfiles 
%systemroot%\system32\drivers\*.sys /lockedfiles 
%systemroot%\System32\config\*.sav 
c:\$recycle.bin\*.* /s 


* clic Run Scan pour démarrer le scan. 
* une fois terminé , le fichier se trouve là C:\OTL.txt 
* copie_colle le contenu dans ta prochaine réponse

jerem789 · Answer

voici le résultat OTL logfile created on: 10/4/2011 4:31:03 PM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE 64bit-Windows 7 Professional (Version = 6.1.7600) - Type = System Internet Explorer (Version = 8.0.7600.16385) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free 3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = E: | %SystemRoot% = E:\Windows | %ProgramFiles% = E:\Program Files (x86) Drive C: | 100.00 Mb Total Space | 75.86 Mb Free Space | 75.87% Space Free | Partition Type: NTFS Drive D: | 931.51 Gb Total Space | 642.66 Gb Free Space | 68.99% Space Free | Partition Type: NTFS Drive E: | 148.95 Gb Total Space | 79.04 Gb Free Space | 53.07% Space Free | Partition Type: NTFS Drive F: | 7.47 Gb Total Space | 7.47 Gb Free Space | 100.00% Space Free | Partition Type: FAT32 Drive X: | 284.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet001 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2011/01/25 10:48:56 | 000,203,776 | ---- | M] (AMD) [Auto] -- E:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto] -- E:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009/07/13 21:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand] -- E:\Windows\System32\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2009/06/05 05:42:04 | 000,111,616 | ---- | M] (Andrea Electronics Corporation) [Auto] -- E:\Windows\System32\AEADISRV.EXE -- (AEADIFilters) SRV:[b]64bit:[/b] - [2008/05/01 20:49:54 | 000,160,272 | ---- | M] (Logitech, Inc.) [On_Demand] -- E:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV - [2011/08/31 11:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto] -- E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011/01/25 10:52:56 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand] -- E:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010/12/16 12:03:08 | 000,008,192 | ---- | M] () [Auto] -- E:\Windows\BackupIP\service.exe -- (sdmBackupIP) SRV - [2010/08/13 08:43:14 | 000,259,440 | ---- | M] (CybelSoft) [On_Demand] -- E:\Program Files (x86)\ma-config.com\maconfservice.exe -- (maconfservice) SRV - [2010/03/25 08:39:22 | 000,490,280 | ---- | M] (Nero AG) [Auto] -- E:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86) SRV - [2010/02/19 07:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- E:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009/12/23 17:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto] -- E:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009/08/19 07:56:38 | 000,090,112 | R--- | M] (ASUSTeK Computer Inc.) [Auto] -- E:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService) SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand] -- E:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009/02/18 15:31:28 | 000,315,392 | -H-- | M] (DeviceVM) [Auto] -- E:\ASUS.SYS\CONFIG\DVMExportService.exe -- (MDES) SRV - [2008/03/26 10:34:49 | 000,147,201 | ---- | M] (Avira GmbH) [Auto] -- E:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avguard.exe -- (AntiVirService) SRV - [2008/03/07 07:00:08 | 000,068,865 | ---- | M] (Avira GmbH) [Auto] -- E:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\sched.exe -- (AntiVirScheduler) SRV - [2007/09/25 13:27:50 | 000,065,536 | ---- | M] (France Telecom SA) [Auto] -- E:\Program Files (x86)\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe -- (FTRTSVC) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011/08/31 11:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand] -- E:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2011/01/25 10:48:31 | 008,120,320 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2011/01/25 10:48:31 | 008,120,320 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011/01/25 10:47:35 | 000,289,792 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011/01/25 10:47:28 | 000,116,752 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2010/09/04 02:14:02 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- E:\Windows\System32\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2009/09/30 06:34:30 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009/07/15 23:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand] -- E:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- E:\Windows\System32\wbem tfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- E:\Windows\system32\DRIVERS\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- E:\Windows\system32\DRIVERS\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand] -- E:\Windows\System32\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/05/20 05:10:00 | 000,393,728 | ---- | M] (Marvell) [Kernel | On_Demand] -- E:\Windows\System32\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2009/05/11 18:49:10 | 000,178,728 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot] -- E:\Windows\System32\drivers\mv61xx.sys -- (mv61xx) DRV:[b]64bit:[/b] - [2008/02/28 21:17:08 | 000,041,488 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt) DRV:[b]64bit:[/b] - [2008/02/28 21:16:52 | 000,057,360 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2008/02/28 21:16:44 | 000,054,800 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand] -- E:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2009/08/28 12:36:26 | 000,146,928 | ---- | M] (CyberLink Corp.) [2010/10/05 09:48:04] [Kernel | Auto] -- E:\Program Files (x86)\CyberLink\PowerDVD8\000.fcl -- ({FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}) DRV - [2006/07/24 11:05:00 | 000,005,632 | ---- | M] () [File_System | System] -- E:\Windows\SysWow64\drivers\StarOpen.sys -- (StarOpen) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Christophe_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl IE - HKU\Christophe_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = https://www.msn.com/fr-fr?ocid=iehp IE - HKU\Christophe_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr IE - HKU\Christophe_ON_E\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 68 F6 63 91 4A 80 CB 01 [binary data] IE - HKU\Christophe_ON_E\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - Reg Error: Key error. File not found IE - HKU\Christophe_ON_E\..\URLSearchHook: {364d4e0c-543f-4b85-abe3-19551139da4f} - Reg Error: Key error. File not found IE - HKU\Christophe_ON_E\..\URLSearchHook: {77f8c945-4b74-4bd6-a073-e0d1997edce8} - Reg Error: Key error. File not found IE - HKU\Christophe_ON_E\..\URLSearchHook: {e84cc2c1-b722-48fc-a39c-edb8b525c777} - Reg Error: Key error. File not found IE - HKU\Christophe_ON_E\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found IE - HKU\Christophe_ON_E\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: E:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer: E:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\Wow6432Node\MozillaPlugins\@ma-config.com/HardwareDetection: E:\Program Files (x86)\ma-config.com phardwaredetection.dll (Cybelsoft) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE: File not found FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: E:\Program Files (x86)\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: E:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3: E:\Program Files (x86)\Google\Update\1.3.21.65 pGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9: E:\Program Files (x86)\Google\Update\1.3.21.65 pGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: E:\Users\Christophe\AppData\Local\Google\Update\1.3.21.65 pGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: E:\Users\Christophe\AppData\Local\Google\Update\1.3.21.65 pGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\wow6432node\mozilla\Firefox\Extensions\offerboxffx@offerbox.com: C:\Program Files (x86)\OfferBox\offerboxffx@offerbox.com [2011/02/12 14:58:03 | 000,000,000 | ---D | M] O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | ---- | M]) - E:\Windows\System32\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg64.dll (Google Inc.) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - E:\Program Files (x86)\ConduitEngine\ConduitEngin.dll (Conduit Ltd.) O2 - BHO: (Softonic France Toolbar) - {364d4e0c-543f-4b85-abe3-19551139da4f} - E:\Program Files (x86)\Softonic_France bSof0.dll (Conduit Ltd.) O2 - BHO: (midicair Toolbar) - {77f8c945-4b74-4bd6-a073-e0d1997edce8} - E:\Program Files (x86)\midicair bmidi.dll (Conduit Ltd.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.) O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuz2.dll (Conduit Ltd.) O2 - BHO: (EOBHO Class) - {C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} - File not found O2 - BHO: (Productivity 2.2 Toolbar) - {e84cc2c1-b722-48fc-a39c-edb8b525c777} - E:\Program Files (x86)\Productivity_2.2\prxtbPro0.dll (Conduit Ltd.) O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - E:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O2 - BHO: (OfferBox) - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - E:\Program Files (x86)\OfferBox\OfferBoxBHO.dll (Secure Digital Services Limited) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - E:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - E:\Program Files (x86)\ConduitEngine\ConduitEngin.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Softonic France Toolbar) - {364d4e0c-543f-4b85-abe3-19551139da4f} - E:\Program Files (x86)\Softonic_France bSof0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Iadah Toolbar) - {3EA8D036-C9E7-4721-BCDF-C13D00C4CC39} - E:\Program Files (x86)\DevNet\Toolbar\DevNet.dll (DevNet) O3 - HKLM\..\Toolbar: (midicair Toolbar) - {77f8c945-4b74-4bd6-a073-e0d1997edce8} - E:\Program Files (x86)\midicair bmidi.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - E:\Program Files (x86)\Vuze_Remote\prxtbVuz2.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Productivity 2.2 Toolbar) - {e84cc2c1-b722-48fc-a39c-edb8b525c777} - E:\Program Files (x86)\Productivity_2.2\prxtbPro0.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - E:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3:[b]64bit:[/b] - HKU\Christophe_ON_E\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - E:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKU\Christophe_ON_E\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - E:\Program Files (x86)\ConduitEngine\ConduitEngin.dll (Conduit Ltd.) O3 - HKU\Christophe_ON_E\..\Toolbar\WebBrowser: (Softonic France Toolbar) - {364D4E0C-543F-4B85-ABE3-19551139DA4F} - E:\Program Files (x86)\Softonic_France bSof0.dll (Conduit Ltd.) O3 - HKU\Christophe_ON_E\..\Toolbar\WebBrowser: (midicair Toolbar) - {77F8C945-4B74-4BD6-A073-E0D1997EDCE8} - E:\Program Files (x86)\midicair bmidi.dll (Conduit Ltd.) O3 - HKU\Christophe_ON_E\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - E:\Program Files (x86)\Vuze_Remote\prxtbVuz2.dll (Conduit Ltd.) O3 - HKU\Christophe_ON_E\..\Toolbar\WebBrowser: (Productivity 2.2 Toolbar) - {E84CC2C1-B722-48FC-A39C-EDB8B525C777} - E:\Program Files (x86)\Productivity_2.2\prxtbPro0.dll (Conduit Ltd.) O3 - HKU\Christophe_ON_E\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - E:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] E:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [Kernel and Hardware Abstraction Layer] E:\Windows\KHALMNPR.Exe (Logitech, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [SoundMAX] E:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [AdobeCS5ServiceManager] E:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [ATICustomerCare] E:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [avgnt] E:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [BDRegion] E:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink) O4 - HKLM..\Run: [CLMLServer] E:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) O4 - HKLM..\Run: [LGODDFU] E:\Program Files (x86)\lg_fwupdate\fwupdate.exe (BitLeader) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] E:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [MDS_Menu] E:\Program Files (x86)\CyberLink\MediaShow4\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [NBAgent] E:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG) O4 - HKLM..\Run: [ORAHSSSessionManager] E:\Program Files (x86)\Orange\SessionManager\SessionManager.exe (France Telecom SA) O4 - HKLM..\Run: [PDVD8LanguageShortcut] E:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.) O4 - HKLM..\Run: [RemoteControl8] E:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [StartCCC] E:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SweetIM] E:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [SwitchBoard] E:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [SystrayORAHSS] E:\Program Files (x86)\Orange\Systray\SystrayApp.exe (France Telecom SA) O4 - HKLM..\Run: [TurboV] E:\Program Files\ASUS\TurboV\TurboV.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [UpdateLBPShortCut] E:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateP2GoShortCut] E:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePPShortCut] E:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePSTShortCut] E:\Program Files (x86)\CyberLink\Blu-ray Disc Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKU\Christophe_ON_E..\Run: [AlcoholAutomount] E:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe (Alcohol Soft Development Team) O4 - HKU\Christophe_ON_E..\Run: [Raptr] E:\Program Files (x86)\Raptr aptrstub.exe (Raptr, Inc) O4 - HKU\LocalService_ON_E..\Run: [Sidebar] E:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\NetworkService_ON_E..\Run: [Sidebar] E:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\RunOnce: [*Restore] E:\Windows\System32 strui.exe (Microsoft Corporation) O4 - HKU\LocalService_ON_E..\RunOnce: [mctadmin] File not found O4 - HKU\NetworkService_ON_E..\RunOnce: [mctadmin] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O8:[b]64bit:[/b] - Extra context menu item: Google Sidewiki... - E:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.) O8 - Extra context menu item: Google Sidewiki... - E:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.) O13:[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O15:[b]64bit:[/b] - Christophe_ON_E\..Trusted Domains: orange.fr ([www] http in Trusted sites) O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} http://www.ma-config.com/plugins/MaConfig_4_2_1_1.cab ("Ma-Config.com control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - Reg Error: Key error. File not found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - E:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - E:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - E:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{ca768b0b-b7eb-11df-bfe8-485b39187050}\Shell - "" = AutoRun O33 - MountPoints2\{ca768b0b-b7eb-11df-bfe8-485b39187050}\Shell\AutoRun\command - "" = G:\Setup.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found [b]64bit:[/b] O35 - HKLM\..comfile [open] -- "%1" %* File not found [b]64bit:[/b] O35 - HKLM\..exefile [open] -- "%1" %* File not found O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:[b]64bit:[/b] AppMgmt - E:\Windows\System32\appmgmts.dll (Microsoft Corporation) MsConfig:64bit - StartUpReg: [b]Steam[/b] - hkey= - key= - E:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) SafeBootMin:[b]64bit:[/b] AppMgmt - E:\Windows\System32\appmgmts.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - E:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - E:\Windows\System32\appmgmts.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - E:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:[b]64bit:[/b] {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:[b]64bit:[/b] >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:[b]64bit:[/b] >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32 undll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32 egsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32 hemeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32 undll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP Drivers32:[b]64bit:[/b] aux - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] aux1 - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midi - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midi1 - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] midimapper - E:\Windows\System32\midimap.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] mixer - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] mixer1 - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.imaadpcm - E:\Windows\System32\imaadp32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.l3acm - E:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32:[b]64bit:[/b] msacm.msadpcm - E:\Windows\System32\msadp32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.msg711 - E:\Windows\System32\msg711.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] msacm.msgsm610 - E:\Windows\System32\msgsm32.acm (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.i420 - E:\Windows\System32\iyuv_32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.iyuv - E:\Windows\System32\iyuv_32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.mrle - E:\Windows\System32\msrle32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.msvc - E:\Windows\System32\msvidc32.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.uyvy - E:\Windows\System32\msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.yuy2 - E:\Windows\System32\msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.yvu9 - E:\Windows\System32 sbyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] vidc.yvyu - E:\Windows\System32\msyuv.dll (Microsoft Corporation) Drivers32:[b]64bit:[/b] wave - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] wave1 - E:\Windows\System32\wdmaud.drv (Microsoft Corporation) Drivers32:[b]64bit:[/b] wavemapper - E:\Windows\System32\msacm32.drv (Microsoft Corporation) Drivers32: msacm.l3acm - E:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/09/20 05:11:20 | 000,000,000 | ---D | C] -- E:\ProgramData\gA21703EeJdC21703 [2011/09/20 04:39:24 | 000,000,000 | ---D | C] -- E:\Users\Christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jeux [2011/09/20 04:39:23 | 000,000,000 | ---D | C] -- E:\Windows\jeux [2011/09/07 02:32:32 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- E:\Windows\SysWow64\FlashPlayerCPLApp.cpl [1 E:\Windows\SysWow64\*.tmp files -> E:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/10/03 08:25:48 | 000,067,584 | --S- | M] () -- E:\Windows\bootstat.dat [2011/10/03 08:00:29 | 000,000,000 | ---D | M] -- E:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/10/03 07:25:06 | 000,024,576 | ---- | M] () -- E:\BCD_Backup [2011/10/03 07:10:13 | 000,024,576 | ---- | M] () -- E:\boot [2011/10/03 06:54:45 | 000,000,000 | ---- | M] () -- E:\cd [2011/09/20 05:11:45 | 000,000,208 | ---- | M] () -- E:\Users\Christophe\Desktop\0 [2011/09/20 05:03:25 | 000,000,177 | -H-- | M] () -- E:\dvmexp.idx [2011/09/20 03:06:00 | 000,001,098 | ---- | M] () -- E:\Windows asks\GoogleUpdateTaskUserS-1-5-21-3670947380-2919923597-3956905642-1000UA.job [2011/09/20 03:06:00 | 000,001,076 | ---- | M] () -- E:\Windows asks\GoogleUpdateTaskMachineUA.job [2011/09/20 03:00:38 | 000,000,382 | ---- | M] () -- E:\Windows\lgfwup.ini [2011/09/20 02:59:13 | 000,697,522 | ---- | M] () -- E:\Windows\System32\perfh00C.dat [2011/09/20 02:59:13 | 000,609,896 | ---- | M] () -- E:\Windows\System32\perfh009.dat [2011/09/20 02:59:13 | 000,128,356 | ---- | M] () -- E:\Windows\System32\perfc00C.dat [2011/09/20 02:59:13 | 000,104,214 | ---- | M] () -- E:\Windows\System32\perfc009.dat [2011/09/20 02:52:53 | 000,001,072 | ---- | M] () -- E:\Windows asks\GoogleUpdateTaskMachineCore.job [2011/09/20 02:52:41 | 529,883,135 | -HS- | M] () -- E:\hiberfil.sys [2011/09/20 02:51:52 | 000,020,624 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/09/20 02:51:52 | 000,020,624 | -H-- | M] () -- E:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/09/20 01:51:20 | 000,001,120 | ---- | M] () -- E:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011/09/07 13:06:00 | 000,001,046 | ---- | M] () -- E:\Windows asks\GoogleUpdateTaskUserS-1-5-21-3670947380-2919923597-3956905642-1000Core.job [2011/09/07 02:32:32 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- E:\Windows\SysWow64\FlashPlayerCPLApp.cpl [1 E:\Windows\SysWow64\*.tmp files -> E:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/10/03 07:10:13 | 000,024,576 | ---- | C] () -- E:\boot [2011/10/03 07:02:27 | 000,024,576 | ---- | C] () -- E:\BCD_Backup [2011/10/03 06:54:45 | 000,000,000 | ---- | C] () -- E:\cd [2011/09/20 05:11:45 | 000,000,208 | ---- | C] () -- E:\Users\Christophe\Desktop\0 [2011/06/11 04:33:19 | 000,000,571 | ---- | C] () -- E:\Windows\SysWow64\FeMakro.ini [2011/06/11 04:33:19 | 000,000,497 | ---- | C] () -- E:\Windows\SysWow64\FeAnim.ini [2011/04/09 12:55:28 | 000,179,261 | ---- | C] () -- E:\Windows\SysWow64\xlive.dll.cat [2011/02/25 05:13:19 | 000,004,096 | -H-- | C] () -- E:\Users\Christophe\AppData\Local\keyfile3.drm [2011/02/12 06:47:58 | 000,212,440 | ---- | C] () -- E:\Windows\SysWow64\DBCLIENT.DLL [2011/01/25 10:47:45 | 000,002,888 | ---- | C] () -- E:\Windows\SysWow64\atipblag.dat [2011/01/19 08:26:04 | 000,000,000 | ---- | C] () -- E:\ProgramData\LauncherAccess.dt [2011/01/19 08:25:25 | 000,005,632 | ---- | C] () -- E:\Windows\SysWow64\drivers\StarOpen.sys [2010/12/18 04:06:23 | 000,011,264 | ---- | C] () -- E:\Windows\SysWow64\Utils.dll [2010/10/05 03:50:18 | 000,000,382 | ---- | C] () -- E:\Windows\lgfwup.ini [2010/09/04 08:00:47 | 000,024,576 | R--- | C] () -- E:\Windows\SysWow64\AsIO.dll [2010/09/04 08:00:47 | 000,013,440 | R--- | C] () -- E:\Windows\SysWow64\drivers\AsIO.sys [2010/09/04 08:00:44 | 000,011,832 | ---- | C] () -- E:\Windows\SysWow64\drivers\AsInsHelp64.sys [2010/09/04 08:00:44 | 000,010,216 | ---- | C] () -- E:\Windows\SysWow64\drivers\AsInsHelp32.sys [2010/09/04 07:51:21 | 000,036,743 | ---- | C] () -- E:\Windows\Ascd_log.ini [2010/09/04 07:51:06 | 000,025,801 | ---- | C] () -- E:\Windows\Ascd_tmp.ini [2010/09/04 02:08:35 | 000,000,000 | ---- | C] () -- E:\Windows\ativpsrm.bin [2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- E:\Windows\bootstat.dat [2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- E:\Windows\SysWow64\NOISE.DAT [2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- E:\Windows\SysWow64\dssec.dat [2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- E:\Windows\mib.bin [2009/07/13 20:02:54 | 000,245,248 | ---- | C] () -- E:\Windows\SysWow64\DShowRdpFilter.dll [2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- E:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 18:25:04 | 000,197,632 | ---- | C] () -- E:\Windows\SysWow64\ir32_32.dll [2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- E:\Windows\SysWow64\msjetoledb40.dll [2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- E:\Windows\SysWow64\mlang.dat [2008/12/01 12:32:32 | 000,362,029 | ---- | C] () -- E:\Windows\SysWow64\sqlite3.dll [2007/12/28 03:22:02 | 000,010,296 | ---- | C] () -- E:\Windows\SysWow64\drivers\ASUSHWIO.SYS [color=#E56717]========== LOP Check ==========[/color] [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Application Data [2010/08/29 20:57:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Bureau [2010/09/06 12:05:08 | 000,000,000 | ---D | M] -- E:\ProgramData\Codemasters [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Desktop [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Documents [2011/01/20 10:04:11 | 000,000,000 | ---D | M] -- E:\ProgramData\Driver Mender [2011/01/25 06:53:50 | 000,000,000 | ---D | M] -- E:\ProgramData\Driver Whiz [2011/01/25 07:04:10 | 000,000,000 | ---D | M] -- E:\ProgramData\DriverBoost [2010/08/29 20:57:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Favoris [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Favorites [2011/09/20 06:13:51 | 000,000,000 | ---D | M] -- E:\ProgramData\gA21703EeJdC21703 [2010/09/04 02:47:39 | 000,000,000 | ---D | M] -- E:\ProgramData\LightScribe [2010/09/04 03:45:28 | 000,000,000 | ---D | M] -- E:\ProgramData\ma-config.com [2010/08/29 20:57:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Menu Démarrer [2010/08/29 20:57:29 | 000,000,000 | -HSD | M] -- E:\ProgramData\Modèles [2011/01/25 06:44:13 | 000,000,000 | ---D | M] -- E:\ProgramData\PC Drivers HeadQuarters [2010/09/04 02:53:47 | 000,000,000 | ---D | M] -- E:\ProgramData egid.1986-12.com.adobe [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Start Menu [2010/10/22 11:35:34 | 000,000,000 | ---D | M] -- E:\ProgramData\SweetIM [2010/10/05 03:50:32 | 000,000,000 | ---D | M] -- E:\ProgramData\Temp [2009/07/14 01:08:56 | 000,000,000 | -HSD | M] -- E:\ProgramData\Templates [2011/06/25 02:57:35 | 000,032,482 | ---- | M] () -- E:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] Invalid Environment Variable: %ALLUSERSPROFILE%\Application Data\*. Invalid Environment Variable: %ALLUSERSPROFILE%\Application Data\*.exe Invalid Environment Variable: %APPDATA%\*. Invalid Environment Variable: %APPDATA%\*.exe [color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color] [2011/10/03 07:12:13 | 000,021,504 | -HS- | M] () -- E:\BCD.LOG [2011/10/03 07:12:13 | 000,000,000 | -HS- | M] () -- E:\BCD.LOG1 [2011/10/03 07:12:13 | 000,000,000 | -HS- | M] () -- E:\BCD.LOG2 [2011/10/03 07:25:06 | 000,024,576 | ---- | M] () -- E:\BCD_Backup [2011/10/03 07:25:06 | 000,021,504 | -HS- | M] () -- E:\BCD_Backup.LOG [2011/10/03 07:02:27 | 000,000,000 | -HS- | M] () -- E:\BCD_Backup.LOG1 [2011/10/03 07:02:27 | 000,000,000 | -HS- | M] () -- E:\BCD_Backup.LOG2 [2011/10/03 07:10:13 | 000,024,576 | ---- | M] () -- E:\boot [2011/10/03 07:10:13 | 000,021,504 | -HS- | M] () -- E:\boot.LOG [2011/10/03 07:10:13 | 000,000,000 | -HS- | M] () -- E:\boot.LOG1 [2011/10/03 07:10:13 | 000,000,000 | -HS- | M] () -- E:\boot.LOG2 [2011/10/03 06:54:45 | 000,000,000 | ---- | M] () -- E:\cd [2011/09/20 05:03:25 | 000,000,177 | -H-- | M] () -- E:\dvmexp.idx [2011/09/20 02:52:41 | 529,883,135 | -HS- | M] () -- E:\hiberfil.sys [2011/09/20 02:52:46 | 2138,169,343 | -HS- | M] () -- E:\pagefile.sys [2011/02/12 07:17:13 | 000,013,030 | ---- | M] () -- E:\PDOXUSRS.NET [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< %PROGRAMFILES%\*.* >[/color] [2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () -- E:\Program Files\desktop.ini [color=#A23BEC]< %PROGRAMFILES%\*. >[/color] [2010/10/18 11:26:37 | 000,000,000 | ---D | M] -- E:\Program Files\Adobe [2010/09/04 08:00:55 | 000,000,000 | ---D | M] -- E:\Program Files\ASUS [2010/09/04 02:03:54 | 000,000,000 | ---D | M] -- E:\Program Files\ATI [2011/01/25 10:50:41 | 000,000,000 | ---D | M] -- E:\Program Files\ATI Technologies [2011/02/25 04:08:05 | 000,000,000 | ---D | M] -- E:\Program Files\CCleaner [2011/09/03 03:16:50 | 000,000,000 | ---D | M] -- E:\Program Files\Common Files [2009/07/14 07:22:12 | 000,000,000 | ---D | M] -- E:\Program Files\DVD Maker [2010/08/29 20:57:29 | 000,000,000 | -HSD | M] -- E:\Program Files\Fichiers communs [2011/02/25 04:07:52 | 000,000,000 | ---D | M] -- E:\Program Files\Google [2011/10/03 08:00:28 | 000,000,000 | ---D | M] -- E:\Program Files\Installer [2011/08/27 01:12:53 | 000,000,000 | ---D | M] -- E:\Program Files\Internet Explorer [2011/09/03 03:18:05 | 000,000,000 | ---D | M] -- E:\Program Files\Logitech [2010/09/04 02:21:23 | 000,000,000 | ---D | M] -- E:\Program Files\Microsoft Analysis Services [2010/09/04 02:22:17 | 000,000,000 | ---D | M] -- E:\Program Files\Microsoft Office [2010/09/04 02:22:16 | 000,000,000 | ---D | M] -- E:\Program Files\Microsoft SQL Server Compact Edition [2010/09/04 02:22:16 | 000,000,000 | ---D | M] -- E:\Program Files\Microsoft Sync Framework [2010/09/04 02:22:36 | 000,000,000 | ---D | M] -- E:\Program Files\Microsoft Synchronization Services [2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- E:\Program Files\MSBuild [2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- E:\Program Files\Reference Assemblies [2009/07/14 01:09:26 | 000,000,000 | -H-D | M] -- E:\Program Files\Uninstall Information [2009/07/14 07:02:44 | 000,000,000 | ---D | M] -- E:\Program Files\Windows Defender [2009/07/14 07:22:11 | 000,000,000 | ---D | M] -- E:\Program Files\Windows Journal [2010/12/17 04:08:04 | 000,000,000 | ---D | M] -- E:\Program Files\Windows Mail [2010/10/17 02:37:38 | 000,000,000 | ---D | M] -- E:\Program Files\Windows Media Player [2010/08/29 20:57:29 | 000,000,000 | ---D | M] -- E:\Program Files\Windows NT [2009/07/14 07:02:44 | 000,000,000 | ---D | M] -- E:\Program Files\Windows Photo Viewer [2009/07/14 01:32:38 | 000,000,000 | ---D | M] -- E:\Program Files\Windows Portable Devices [2009/07/14 07:02:44 | 000,000,000 | ---D | M] -- E:\Program Files\Windows Sidebar [2010/09/04 02:18:35 | 000,000,000 | ---D | M] -- E:\Program Files\WinRAR [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- E:\Windows\System32\drivers\AGP440.sys [2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- E:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- E:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys [2009/07/13 21:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- E:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- E:\Windows\System32\drivers\atapi.sys [2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- E:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- E:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [2009/07/13 21:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- E:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys [color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color] [2010/11/20 09:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- E:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe [2009/07/13 21:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- E:\Windows\SysWOW64\autochk.exe [2009/07/13 21:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- E:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe [2009/07/13 21:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- E:\Windows\System32\autochk.exe [2009/07/13 21:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- E:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe [2010/11/20 08:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- E:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009/07/13 20:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- E:\Windows\System32\drivers\beep.sys [2009/07/13 20:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- E:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color] [2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- E:\Windows\SysWOW64\cngaudit.dll [2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- E:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll [2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- E:\Windows\System32\cngaudit.dll [2009/07/13 21:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- E:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2009/07/13 21:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- E:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2009/10/31 01:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- E:\Windows\SysWOW64\explorer.exe [2009/10/31 01:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- E:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe [2010/11/20 08:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- E:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe [2009/08/03 02:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- E:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe [2009/10/31 02:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- E:\Windows\explorer.exe [2009/10/31 02:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- E:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe [2009/08/03 01:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- E:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe [2010/11/20 09:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- E:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe [2009/10/31 02:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- E:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe [2009/08/03 01:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- E:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe [2009/07/13 21:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- E:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_

moment de grace · Answer

le rapport ne doit pas être complet

peux tu l'heberger ici   http://pjjoint.malekal.com/

moment de grace · Answer

bon 

apres lecture du rapport en mp, nous ne voyons pas d'infection responsable de ton soucis 
certes tes navigateurs sont pollués mais ne justifient pas un problème de demarrage...alors apres, à part réparer à partir du cd mais ca ne semble pas suffire selon les réponses ci dessus 
CONTRIBUTEUR SECURITE 

En désinfection, c'est la fin le plus important ! 
"Restez" jusqu'au bout...merci

athena223 · Answer

C'
est se que je regardais aussi .

On va faire un petit controle du reste de ton pc pour voir .
Télécharge Ultimatebootcd .
C'est une image ISO , si tu ne sais pas se que c'est , tu clic sur ISO c'est expliquer .


Une fois fait grave le .
Et lance le sur ton pc .
Si necessaire change l'ordre du boot dans le Bios .
la tu lance un teste de HDD ( de préférence de la marque du constructeur de ton disque dur )

Ensuite pareil pour ton processeur et ram .

Ensuite essaye de boot depuis la partition de restauration ou depuis le cd de windows .
-- 
Faire des recherche sois même avant de posté sur CCM est la ­plus rapide solution !  
Je suis nul en français , mais j'assume !

jerem789 · Answer

Salut, j'ai effectué les tests, aucune erreur n'a été trouvé... Je suppose que c'est une bonne nouvelle mais que ca ne nous avance pas beaucoup...

athena223 · Answer

On va essayé autre chose :

Télécharge Ubuntu ( c'est un fichier ISO )
Grave le ( li le tuto sur les fichier ISO et comment les graver )

Lance le sur le pc en live CD ( en gros on lance tous un OS et son sont environnement sans l'installer ) .

Une fois sous Ubuntu , commence par faire une copie de sauvegarde de tous se qui est important ( dans le doute )

Ensuite regarde si le pc reste stable pendant quelque heures en s'en servant ( internet , musique , ... )

Si tous va bien cela nous limitera a un gros probléme de windows .

jerem789 · Answer

salut,

Désolé j'étais pris ces derniers temps. 

J'ai fait le test avec ubuntu, pas de problème, j'ai pu me balader dans les disques, lancer des applis,...

Du coup que dois-je faire maintenant?

Cordialement,
Jérémie

Problème démarrage Windows 7

12 réponses

Newsletters