probleme !! le pc plante tt le temps

salut!! depuis deux jours je rame com c po possible serieux c relou!! et le pire c que mon antivirus ne trouve rien (j'ai kaspersky) et j'ai essaye edwido e lui nn plus ne trouve rien lol!! si Q1Q1 pt m'aider ca serait cool! il fo que je fasse quoi? que je mette un rapport hijakthis ou c un truc ds le genre? dsl m'y connait po enormement en info !! merci d'avance et surtt repondez c urgent ds fois suis oblige de demarrer mon pc 2 ou 3 fois avant quil marche a peu pres!!

Merci d'éviter le SMS ici.

et aussi j'ai le processus explorer.exe qui prends de 50 a 100% de charge uc !! c po normal?

re,
Commence par désinstaller l'un des deux antivirus
Télécharge Smitfraudfix (de S!ri) ici:
http://siri.urz.free.fr/Fix/SmitfraudFix.exe
Enregistre-le sur ton bureau.
Lance SmitfraudFix.exe (le .exe peut ne pas apparaitre).
Choisis l'Option 1 (Recherche)
Poste le premier rapport ici.

désactive kaspersky le temps de faire le scan
après réactive-le (smitfraudfix utilise un script détecté comme dangereux, mais pas dangereux, même si tu vois dans l'alerte: risktool qui veut dire outil qui pose un risque mais pas virus )

tu tapes 1 puis tu fais entrer

je ne sais pas de quoi tu te plains, je fais un autre essai (pour voir s'il y a des saloperies quelques part...)
Télécharge Clean.zip (de Malekal) ici:
http://www.malekal.com/download/clean.zip
Décompresse-le sur ton bureau (Clique-Droit/Extraire tout), tu dois obtenir un dossier Clean.
Ouvre le dossier clean, double-clique sur clean.cmd.
Choisis l'option 1 puis patiente. Poste ensuite le contenu du rapport.

j'ai jamais trouvé un cas aussi rapide que toi
je pense qu'avec toi on finit cette nuit même

Redémarre en mode sans échec

Ouvre le dossier clean, double-clique sur clean.cmd.
Choisis l'option 2 puis patiente.

Redémarre normalement

- Poste le rapport clean : C:\rapport_clean.txt

fais ça et on voit après
l'important c'est qu'il y a encore un fichier infecté

Tu n'auras pas accès à Internet pendant la partie de la procédure qui reste. Enregistre cette page pour pouvoir la consulter hors-connexion : Fichier > Enregistrer sous ...
Dans "Type", choisis "Page Web, complète" et donne-lui un nom.

Télécharge AVG antispyware 7.5 (version d'évaluation) ici:
http://www.ewido.net/en/download/


* Lance AVG et clique sur "Mise à jour" dans la barre d'outils.
* Sous "Mise à jour manuelle" clique sur "Commencer la mise à jour".
* Une fois la mise à jour terminée, ferme AVG. Ne le lance pas tout de suite.


Télécharge et installe CCleaner ici:
http://www.ccleaner.com/download/builds.aspx



Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :


* Redémarre ton ordinateur.
* Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
* A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
* Choisis la première option pour exécuter Windows en mode sans échec, puis appuie sur "[Entrée]".
* Choisis ton compte.


Lance Ccleaner,
clique sur la touche "Analyse", puis sur le bouton "Lancer le nettoyage".
A la fin du nettoyage clique sur le bouton "Erreurs" et repare les erreurs.

Relance AVG Antispyware 7.5


* Clique sur "Analyse" dans la barre d'outils puis sur "Paramètres".
* Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine".
* Reclique sur "Analyse" puis sur "Analyse complète du système". Le scan peut durer, sois patient.
* AVG affichera une liste des fichiers détectés, sur la gauche.
* Si un fichier infecté est détecté en fin d'analyse, clique sur le bouton "Appliquer toutes les actions".
* AVG affichera "Toutes les actions ont été appliquées", à droite.
* Clique sur "Enregistrer le rapport", puis "Enregistrer le rapport sous". Ceci génère un rapport en fichier texte.
* Sauvegarde ce rapport dans un endroit sûr (sur ton Bureau, par exemple).


Redémarre en mode normal.

Poste le rapport AVG antispyware.

je préfère les antispywares comme AVG antispyware et Spybot, Clean c'est utilisé plus pour les cas spéciaux et atroces
mais tu peux tout de même le passer sans danger
reposte un rapport hijackthis pour voir s'il reste encore des choses (pour ton problème de reboot)

salut ! laisse tomber ce rapport stp c bon j'ai inscrit ma mere sur un forum o moins elle pourra regler c probleme e ca lui permettra de comprendre un peu plus comment fonctionne son ordi!! par contre te poste un rapport hijack de mo pc pour les problemes de reboot! c bizar qd meme il tourne niquel e ds fois il plante jne c po pourquoi!lol
of HijackThis v1.99.1
Scan saved at 14:56:21, on 08/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\SiteAdvisor\6021\SiteAdv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Emule\emule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hijack&KillProc\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6021\SiteAdv.exe
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKCU\..\Run: [i8kfangui] C:\Program Files\I8kfanGUI\I8kfanGUI.exe /startup
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/micros [...] 1535992859
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6028\SiteAdv.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\Fsk\SonySCSIHelperService.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

03/09/07 12:58:08 [Info]: BlackLight Engine 1.0.55 initialized
03/09/07 12:58:08 [Info]: OS: 5.1 build 2600 (Service Pack 2)
03/09/07 12:58:09 [Note]: 7019 4
03/09/07 12:58:09 [Note]: 7005 0
03/09/07 12:58:11 [Error]: 6027 5
03/09/07 12:58:11 [Error]: 6002 0
03/09/07 12:58:38 [Note]: 7006 0
03/09/07 12:58:38 [Note]: 7011 1692
03/09/07 12:59:05 [Note]: 7027 13
03/09/07 12:59:05 [Note]: 7027 3
03/09/07 12:59:05 [Note]: 7027 0
03/09/07 12:59:06 [Error]: 6034 5
03/09/07 12:59:09 [Note]: 7006 0
03/09/07 12:59:09 [Note]: 7011 1692
03/09/07 12:59:18 [Note]: 8001 2
03/09/07 12:59:23 [Note]: FSRAW library version 1.7.1021
03/09/07 13:08:12 [Note]: 7007 0

GMER 1.0.12.12086 - http://www.gmer.net
Rootkit scan 2007-03-09 20:21:57
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.12 ----

SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwClose
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcessEx
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSection
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSymbolicLinkObject
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDuplicateObject
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwFlushKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwInitializeRegistry
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey2
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwNotifyChangeKey
SSDT kl1.sys ZwOpenFile
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenKey
SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwOpenProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenSection
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryMultipleValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQuerySystemInformation
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwReplaceKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwRestoreKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwResumeThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSaveKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetContextThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationFile
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSuspendThread
SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwTerminateProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwUnloadKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwWriteVirtualMemory
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[284]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[285]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[286]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[287]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[288]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[289]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[290]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[291]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[292]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[293]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[294]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[295]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[296]

Code \??\C:\WINDOWS\system32\drivers\klif.sys FsRtlCheckLockForReadAccess
Code \??\C:\WINDOWS\system32\drivers\klif.sys IoIsOperationSynchronous

---- Kernel code sections - GMER 1.0.12 ----

.text ntkrnlpa.exe!FsRtlCheckLockForReadAccess 804EAE54 5 Bytes JMP F417B6C0 \??\C:\WINDOWS\system32\drivers\klif.sys
.text ntkrnlpa.exe!IoIsOperationSynchronous 804EF648 5 Bytes JMP F417BB50 \??\C:\WINDOWS\system32\drivers\klif.sys
.text ntkrnlpa.exe!KiDispatchInterrupt + 100 80544AB0 7 Bytes JMP F417DE10 \??\C:\WINDOWS\system32\drivers\klif.sys
? C:\WINDOWS\system32\drivers\sptd.sys Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus.
.text USBPORT.SYS!DllUnload F691562C 5 Bytes JMP 8A87C1B8

---- Devices - GMER 1.0.12 ----

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 8A87B1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 8A87B1D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 8A68A980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 8A68A980
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 8A87D1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 8A87D1D8
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_PNP 8A68A980
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_PNP 8A68A980
Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CREATE 8A5D01D8
Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CLOSE 8A5D01D8
Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_DEVICE_CONTROL 8A5D01D8
Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A5D01D8
Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_POWER 8A5D01D8
Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_SYSTEM_CONTROL 8A5D01D8
Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_PNP 8A5D01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 8A8F01D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 8A667980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 8A667980
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CREATE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CLOSE 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_INTERNAL_DEVICE_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_POWER 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_SYSTEM_CONTROL 8A8EF1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_PNP 8A8EF1D8
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_PNP 8A68A980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_PNP 8A68A980
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_PNP 8A68A980
Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CREATE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CLOSE 8A68A980
Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_POWER 8A68A980
Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_SYSTEM_CONTROL 8A68A980
Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_PNP 8A68A980
Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CREATE 8A5D01D8
Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CLOSE 8A5D01D8
Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_DEVICE_CONTROL 8A5D01D8
Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 8A5D01D8
Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_POWER 8A5D01D8
Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_SYSTEM_CONTROL 8A5D01D8
Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_PNP 8A5D01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 8A8F01D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 8A8F01D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 893AE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 893AE980

---- Threads - GMER 1.0.12 ----

Thread 4:168 8A6CF8E0
Thread 4:172 8A6CF8E0
Thread 4:176 8A6A88D0
Thread 4:180 8A6A88D0
Thread 4:184 8A6A88D0
Thread 4:372 8A6CF8E0
Thread 4:420 8A6CF8E0
Thread 4:496 8A6CF8E0
Thread 4:2272 8916F4A0
---- Processes - GMER 1.0.12 ----

Library C:\Program (*** hidden *** ) @ C:\Config.Msi\21f98f.rbfe\VirtualDrive\VHD\RDTask.exe [1212] 0x00400000
Library C:\Program (*** hidden *** ) @ C:\Config.Msi\21f98f.rbfe\VirtualDrive\VHD\RDTask.exe [1212] 0x10000000
Library C:\Program (*** hidden *** ) @ C:\Config.Msi\21f98f.rbfe\VirtualDrive\VHD\RDTask.exe [1212] 0x00320000
Library C:\Program (*** hidden *** ) @ C:\Config.Msi\21f98f.rbfe\VirtualDrive\VHD\RDTask.exe [1212] 0x008F0000
Library C:\WINDOWS\system32\vgdshell.dll (*** hidden *** ) @ C:\WINDOWS\explorer.exe [1692] 0x01350000
Library C:\WINDOWS\system32\VGDShlRc.dll (*** hidden *** ) @ C:\WINDOWS\explorer.exe [1692] 0x01370000
Library C:\Program (*** hidden *** ) @ C:\WINDOWS\explorer.exe [1692] 0x01380000
Library C:\Program (*** hidden *** ) @ C:\WINDOWS\explorer.exe [1692] 0x00A80000

---- EOF - GMER 1.0.12 ----

Rapport clean par Malekal_morte - http://www.malekal.com
Option 1, executee le 12/03/2007 a 19:01:48,96

*** Recherche de fichiers sur C:

*** Recherche des fichiers dans C:\WINDOWS\

*** Recherche des fichiers dans C:\WINDOWS\system32

*** Fin du rapport !

NN c tt clean ! je te remercie grace a toi je n'ai plus de probleme!