fenetre publicitaire intempestive Résolu/Fermé

Question

Bonjour,
je viens vers vous pour un probleme d'ouverture de fenetre publicitaire intempestive

C'est le pc portable de mon beau pere un toshiba satellite windows xp, ie 8, antivir d'avira, zone alarme comme pare feu.
j'ai vire quelques cookies, virus avec l'antivirus, ccleaner et spybot.

Une reponse rapide serait souhaitée car il n'y connait rien et moi je passe quelques jours chez lui en vacances.

Merci par avance et bonnes vacances pour les aoutiens et bon courage pour les autres

archet9 · Answer

Bonsoir philthebest91

Télécharges RSIT (de random/random) sur le bureau :

- Double clique sur RSIT.exe qui est sur le bureau
- Clique sur Continue dans la fenêtre
- RSIT téléchargera HijackThis si il n’est pas présent où détecté, alors il faudra accepter la licence
- Poste le contenu de log.txt plus info.txt (réduit ds la barre de taches) à la fin de l’analyse .

Les rapports sont dans le dossier ici C:\rsit
a+

philthebest91 · Answer

merci de t'occuper de moi si rapidement et desole pour le temps de reponse mais le pc rame un peu.
Voila ce que tu m'as demande

info.txt logfile of random's system information tool 1.06 2009-08-02 22:06:47

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
24 Jeux de Cartes-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{35E34743-1E7A-4764-896F-50CCB2305143}\SETUP.EXE" -l0x40c 
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 9 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
Alps Touch Pad-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Apoint2K\Apoint.isu" -c"C:\Program Files\Apoint2K\ApInst.dll"
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
a-squared Free 4.5-->"C:\Program Files\a-squared Free\unins000.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\System32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP Pro 3-->MsiExec.exe /I{896D642C-7125-44F0-AC49-A23ABF82209C}
Console  TOSHIBA-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3CF0858D-1AC5-4308-9DE7-AD15288A8BDC}\Setup.exe"  -uninst 
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
CutePDF Writer 2.2-->C:\WINDOWS\system32\uninscpw.exe C:\Program Files\
DAEMON Tools-->MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}
Data Lifeguard Diagnostic for Windows-->MsiExec.exe /X{E40CE517-0D42-4198-96B4-C8232B257EB5}
Disc2Phone-->MsiExec.exe /I{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}
DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2-->"C:\Program Files\DVD Shrink\unins000.exe"
eMule-->"C:\Program Files\eMule\Uninstall.exe"
Enemy Engaged Comanche Vs Hokum-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\WINDOWS\uninstall\Razorworks\Enemy Engaged Comanche Vs Hokum\setup.exe" 
Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
Favorit-->"c:\documents and settings\user\local settings\application data\iicqa.exe" -uninstall
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_9DE96A29E721D90A.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
Intel(R) PRO Ethernet Adapter and Software-->Prounstl.exe
Java 2 Runtime Environment, SE v1.4.2-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142000}
Java(TM) 6 Update 14-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216014FF}
Lecteur Windows Media 10-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
LogMeIn-->MsiExec.exe /I{ED0042CA-CBEA-4ADF-B262-FE0518AF2221}
Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 8 (KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"
Mise à jour pour Windows Internet Explorer 8 (KB972636)-->"C:\WINDOWS\ie8updates\KB972636-IE8\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Notepad++-->C:\Program Files\Notepad++\uninstall.exe
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{6D7F8D4B-D1A4-402A-973E-31E90940E585}
Philips SPC315NC Webcam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D95F0670-EBA8-46B2-8ABE-9DDA2BC3DC7E}\setup.exe" -l0x40c 
Philips VLounge-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9AD34A56-EFBB-459D-99B9-9FE38C6FBE11}\Setup.exe" -l0x40c 
QuickTime-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{0B69DA57-BC7D-461D-B7D6-2AA9F08869CD} /l1036 
SAMSUNG Mobile Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio 3 USB Driver Installer-->"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -runfromtemp -l0x040c -removeonly
Samsung PC Studio 3-->"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x040c -removeonly
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
SFR - Kit de connexion-->C:\Program Files\SFR\Kit\uninstall.exe
SFR - Media Center-->C:\Program Files\SFR\Media Center\uninstall.exe
Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
TOSHIBA Software Modem-->Tosmreg -U
V2000 (Remove Only)-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Grolier Interactive\V2000\Uninst.isu"
VirtualCloneDrive-->"C:\Program Files\Elaborate Bytes\VirtualCloneDrive\vcd-uninst.exe" /D="C:\Program Files\Elaborate Bytes\VirtualCloneDrive"
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Genuine Advantage v1.3.0254.0-->MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Connect-->msiexec.exe /I {F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
Windows Media Connect-->MsiExec.exe /I{F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
ZoneAlarm-->C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe

======Hosts File======

127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com

======Security center information======

AV: AntiVir Desktop
FW: ZoneAlarm Firewall

======System event log======

Computer Name: TOSHIBA
Event Code: 17
Message: AVGNTFLT successfully loaded

Record Number: 32350
Source Name: avgntflt
Time Written: 20090606144128.000000+120
Event Type: Informations
User: 

Computer Name: TOSHIBA
Event Code: 105
Message: The service was started.

Record Number: 32349
Source Name: Ati HotKey Poller
Time Written: 20090606144118.000000+120
Event Type: Informations
User: 

Computer Name: TOSHIBA
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 32348
Source Name: EventLog
Time Written: 20090606144102.000000+120
Event Type: Informations
User: 

Computer Name: TOSHIBA
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.

Record Number: 32347
Source Name: EventLog
Time Written: 20090606144102.000000+120
Event Type: Informations
User: 

Computer Name: TOSHIBA
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 32346
Source Name: EventLog
Time Written: 20090605095842.000000+120
Event Type: Informations
User: 

=====Application event log=====

Computer Name: TOSHIBA
Event Code: 100
Message: The Service has started.

Record Number: 5
Source Name: LogMeIn
Time Written: 20090619111952.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: TOSHIBA
Event Code: 4112
Message: Une erreur s'est produite lors de la recherche d'une ressource du système d'exploitation.
La ressource 'ThreadInit' n'a pas été attribuée.
La cause pourrait être une mémoire principale insuffisante ou une autre erreur système.
Code d'erreur : 24

Record Number: 4
Source Name: Avira AntiVir
Time Written: 20090619091628.000000+120
Event Type: erreur
User: AUTORITE NT\SYSTEM

Computer Name: TOSHIBA
Event Code: 4096
Message: Le service AntiVir a bien démarré!

Record Number: 3
Source Name: Avira AntiVir
Time Written: 20090619090313.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: TOSHIBA
Event Code: 1800
Message: Le service Centre de sécurité Windows a démarré.

Record Number: 2
Source Name: SecurityCenter
Time Written: 20090619090226.000000+120
Event Type: Informations
User: 

Computer Name: TOSHIBA
Event Code: 100
Message: The Service has started.

Record Number: 1
Source Name: LogMeIn
Time Written: 20090619090209.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Samsung\Samsung PC Studio 3
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 1 Stepping 2, GenuineIntel
"PROCESSOR_REVISION"=0102
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"CLASSPATH"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
"tvdumpflags"=8

-----------------EOF-----------------
Logfile of random's system information tool 1.06 (written by random/random)
Run by user at 2009-08-02 22:04:33
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 3 GB (15%) free of 19 GB
Total RAM: 255 MB (16% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:06:19, on 02/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\atiptaxx.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Philips\Philips SPC315NC Webcam\TrayMin315.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\user\Bureau\RSIT.exe
C:\Program Files	rend micro\user.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwaprops.cpl,CrystalControlWnd
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE %;USB\VID_0AC8&PID_0302.DeviceDesc%
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [iicqa] "c:\documents and settings\user\local settings\application data\iicqa.exe" iicqa
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: TrayMin315.exe.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Control) - https://plugins.valueactive.eu/flashax/iefax.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

archet9 · Answer

re philthebest91 Deux infectons notoires: Une ici: O4 - HKCU\..\Run: [iicqa] "c:\documents and settings\user\local settings\application data\iicqa.exe" iicqa "iicqa"=c:\documents and settings\user\local settings\application data\iicqa.exe [2009-07-26 253952] ==> Infection NAVIPROMO.... L'autre la: shell\configure\command - E:\install.exe shell\install\command - E:\install.exe ==> Infection liée a un support amovible (clé usb,DDextrene etc...) EN CONSEQUENCES: 1)Clique sur ce lien : http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe Clique sur navilog1.exe pour le télécharger Choisis Enregistrer et enregistre-le sur ton bureau. Ensuite double clique sur navilog1.exe pour lancer l'installation. Une fois l'installation terminée, le fix s'exécutera automatiquement. (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau). Laisse-toi guider. Au menu principal, choisis 1 et valide. Patiente jusqu'au message : *** Analyse Terminée le ..... *** Appuie sur une touche comme demandé, le bloc note va s'ouvrir. Copie-colle l'intégralité dans une réponse. Referme le bloc note. Le rapport est en outre sauvegardé à la racine du disque (C:\fixnavi.txt) poste le rapport obtenu 2)• Télécharge et installe UsbFix par Chiquitine29 (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectés sans les ouvrir • Double clic sur le raccourci UsbFix présent sur ton bureau . • Au menu principal choisis l'option " F " pour français et tape sur [entrée] . • Au second menu Choisis l'option " 2 " (Suppression) et tape sur [entrée] • Laisse travailler l'outil. • Ensuite post le rapport UsbFix.txt qui apparaitra. • Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt ) ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) • Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. a+

philthebest91 · Answer

merci encore a toi a cette heure tardive.

Navilog est en cours. Concernat usbfix, il n'y a que 2 ports usb et 3 supports amovibles donc je le ferais en 2 fois.
A tout de suite

philthebest91 · Answer

voila pour le rapport navilog1

Fix Navipromo version 4.0.1 commencé le 02/08/2009 23:08:45,27

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files
avilog1

Mise à jour le 18.07.2009 à 11h00 par IL-MAFIOSO

Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free :               Intel(R) Pentium(R) 4 CPU 1.70GHz )
BIOS : PhoenixBIOS 4.0 Release 6.0. .15
USER : user ( Administrator )
BOOT : Normal boot

Antivirus : AntiVir Desktop 9.0.1.30 (Activated)
Firewall  : ZoneAlarm Firewall 7.0.483.000 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:18 Go (Free:2 Go)
D:\ (CD or DVD)


Recherche executée en mode normal 

Nettoyage exécuté au redémarrage de l'ordinateur


C:\WINDOWS\prefetch\iicqa*.pf supprimé !
C:\Documents and Settings\user\locals~1\applic~1\iicqa.exe supprimé !
C:\Documents and Settings\user\locals~1\applic~1\iicqa.dat supprimé !
C:\Documents and Settings\user\locals~1\applic~1\iicqa_nav.dat supprimé !
C:\Documents and Settings\user\locals~1\applic~1\iicqa_navps.dat supprimé !


Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\user\locals~1\Temp effectué !


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok





*** Scan terminé 02/08/2009 23:35:41,57 ***

je m'occupe d'Usbfix

archet9 · Answer

Ok a demain donc...(dodo ce soir)

Un problème déja règlé:
==>  normalement tu n'auras plus de pubs intempestives....

je te répondrai des que j'aurais le/ les  rapports:USBFIX puisque tu les feras en deux fois...

à te lire...

philthebest91 · Answer

merci de ta patience et bonne nuit. J'y vais aussi mais d'abord voila le premier rapport Usbfix


############################## | UsbFix V6.012 |

User : user (Administrateurs) # TOSHIBA
Update on 01/08/09 by Chiquitine29 & C_XX
Start at: 00:28:38 | 03/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

              Intel(R) Pentium(R) 4 CPU 1.70GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.30 [ Enabled | Updated ]
FW : ZoneAlarm Firewall[ Enabled ]7.0.483.000

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 18,62 Go (2,75 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque amovible # 1,96 Go (607,43 Mo free) [CLE USB] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wuauclt.exe

################## | Fichiers # Dossiers infectieux |


################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |


################## | Listing des fichiers présent |

[09/08/2008 01:47|--a------|1024] -> C:\.rnd 
[14/10/2005 14:55|--a------|0] -> C:\AUTOEXEC.BAT 
[14/10/2005 23:05|-rahs----|216] -> C:\boot.ini 
[22/07/2003 18:31|-rahs----|4952] -> C:\Bootfont.bin 
[02/08/2009 23:35|--a------|1524] -> C:\cleannavi.txt 
[14/10/2005 14:55|--a------|0] -> C:\CONFIG.SYS 
[?|?|?] -> C:\hiberfil.sys 
[14/10/2005 14:55|-rahs----|0] -> C:\IO.SYS 
[14/10/2005 14:55|-rahs----|0] -> C:\MSDOS.SYS 
[14/10/2005 22:55|-rahs----|47564] -> C:\NTDETECT.COM 
[28/07/2009 00:50|-rahs----|252240] -> C:
tldr 
[?|?|?] -> C:\pagefile.sys 
[18/05/2009 18:33|--ah-----|268] -> C:\sqmdata00.sqm 
[19/05/2009 08:34|--ah-----|268] -> C:\sqmdata01.sqm 
[20/05/2009 20:37|--ah-----|268] -> C:\sqmdata02.sqm 
[23/05/2009 18:36|--ah-----|268] -> C:\sqmdata03.sqm 
[25/05/2009 19:45|--ah-----|268] -> C:\sqmdata04.sqm 
[28/05/2009 11:09|--ah-----|268] -> C:\sqmdata05.sqm 
[28/06/2009 22:57|--ah-----|268] -> C:\sqmdata06.sqm 
[30/06/2009 11:19|--ah-----|268] -> C:\sqmdata07.sqm 
[02/07/2009 10:06|--ah-----|268] -> C:\sqmdata08.sqm 
[13/02/2009 23:12|--ah-----|268] -> C:\sqmdata09.sqm 
[14/02/2009 00:57|--ah-----|268] -> C:\sqmdata10.sqm 
[02/03/2009 09:39|--ah-----|268] -> C:\sqmdata11.sqm 
[04/03/2009 11:43|--ah-----|232] -> C:\sqmdata12.sqm 
[19/03/2009 08:24|--ah-----|268] -> C:\sqmdata13.sqm 
[19/03/2009 15:26|--ah-----|268] -> C:\sqmdata14.sqm 
[19/03/2009 16:46|--ah-----|268] -> C:\sqmdata15.sqm 
[02/04/2009 19:15|--ah-----|268] -> C:\sqmdata16.sqm 
[03/04/2009 11:41|--ah-----|268] -> C:\sqmdata17.sqm 
[18/04/2009 15:22|--ah-----|268] -> C:\sqmdata18.sqm 
[18/04/2009 17:09|--ah-----|268] -> C:\sqmdata19.sqm 
[18/05/2009 18:33|--ah-----|244] -> C:\sqmnoopt00.sqm 
[19/05/2009 08:34|--ah-----|244] -> C:\sqmnoopt01.sqm 
[20/05/2009 20:37|--ah-----|244] -> C:\sqmnoopt02.sqm 
[23/05/2009 18:36|--ah-----|244] -> C:\sqmnoopt03.sqm 
[25/05/2009 19:45|--ah-----|244] -> C:\sqmnoopt04.sqm 
[28/05/2009 11:09|--ah-----|244] -> C:\sqmnoopt05.sqm 
[28/06/2009 22:57|--ah-----|244] -> C:\sqmnoopt06.sqm 
[30/06/2009 11:19|--ah-----|244] -> C:\sqmnoopt07.sqm 
[02/07/2009 10:06|--ah-----|244] -> C:\sqmnoopt08.sqm 
[13/02/2009 23:12|--ah-----|244] -> C:\sqmnoopt09.sqm 
[14/02/2009 00:57|--ah-----|244] -> C:\sqmnoopt10.sqm 
[02/03/2009 09:39|--ah-----|244] -> C:\sqmnoopt11.sqm 
[04/03/2009 11:43|--ah-----|244] -> C:\sqmnoopt12.sqm 
[19/03/2009 08:24|--ah-----|244] -> C:\sqmnoopt13.sqm 
[19/03/2009 15:26|--ah-----|244] -> C:\sqmnoopt14.sqm 
[19/03/2009 16:46|--ah-----|244] -> C:\sqmnoopt15.sqm 
[02/04/2009 19:15|--ah-----|244] -> C:\sqmnoopt16.sqm 
[03/04/2009 11:41|--ah-----|244] -> C:\sqmnoopt17.sqm 
[18/04/2009 15:22|--ah-----|244] -> C:\sqmnoopt18.sqm 
[18/04/2009 17:09|--ah-----|244] -> C:\sqmnoopt19.sqm 
[03/08/2009 00:34|--a------|4812] -> C:\UsbFix.txt 
[30/11/2008 00:35|--a------|69563] -> E:\PSG.jpg 

################## | Vaccination |

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.  
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.  

################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.012 ! |

Le second je te le fais parvenir demain dans la matinée. Erreur de manip de ma part (j'ai effacé le rapport)

A tres bientot

philthebest91 · Answer

Bonjour Archet9,

voila le second rapport


############################## | UsbFix V6.012 |

User : user (Administrateurs) # TOSHIBA
Update on 01/08/09 by Chiquitine29 & C_XX
Start at: 10:57:39 | 03/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html

              Intel(R) Pentium(R) 4 CPU 1.70GHz
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.30 [ Enabled | Updated ]
FW : ZoneAlarm Firewall[ Enabled ]7.0.483.000

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 18,62 Go (2,71 Go free) # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM # 4,32 Mo (0 Mo free) [U3 System] # CDFS
F:\ -> Disque fixe local # 232,83 Go (205,62 Go free) [My Passport] # FAT32
G:\ -> Disque amovible # 3,83 Go (294,78 Mo free) [EMTEC] # FAT32

############################## | Processus actifs |

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Avira\AntiVir Desktop\avwsc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe

################## | Fichiers # Dossiers infectieux |

(!) Non supprimé ! E:\autorun.inf  
(!) Non supprimé ! F:\autorun.inf  

################## | Registre # Clés Run infectieuses |


################## | Registre # Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\E\Shell\AutoRun\Command  

################## | Listing des fichiers présent |

[09/08/2008 01:47|--a------|1024] -> C:\.rnd 
[14/10/2005 14:55|--a------|0] -> C:\AUTOEXEC.BAT 
[14/10/2005 23:05|-rahs----|216] -> C:\boot.ini 
[22/07/2003 18:31|-rahs----|4952] -> C:\Bootfont.bin 
[02/08/2009 23:35|--a------|1524] -> C:\cleannavi.txt 
[14/10/2005 14:55|--a------|0] -> C:\CONFIG.SYS 
[?|?|?] -> C:\hiberfil.sys 
[14/10/2005 14:55|-rahs----|0] -> C:\IO.SYS 
[14/10/2005 14:55|-rahs----|0] -> C:\MSDOS.SYS 
[14/10/2005 22:55|-rahs----|47564] -> C:\NTDETECT.COM 
[28/07/2009 00:50|-rahs----|252240] -> C:
tldr 
[?|?|?] -> C:\pagefile.sys 
[18/05/2009 18:33|--ah-----|268] -> C:\sqmdata00.sqm 
[19/05/2009 08:34|--ah-----|268] -> C:\sqmdata01.sqm 
[20/05/2009 20:37|--ah-----|268] -> C:\sqmdata02.sqm 
[23/05/2009 18:36|--ah-----|268] -> C:\sqmdata03.sqm 
[25/05/2009 19:45|--ah-----|268] -> C:\sqmdata04.sqm 
[28/05/2009 11:09|--ah-----|268] -> C:\sqmdata05.sqm 
[28/06/2009 22:57|--ah-----|268] -> C:\sqmdata06.sqm 
[30/06/2009 11:19|--ah-----|268] -> C:\sqmdata07.sqm 
[02/07/2009 10:06|--ah-----|268] -> C:\sqmdata08.sqm 
[13/02/2009 23:12|--ah-----|268] -> C:\sqmdata09.sqm 
[14/02/2009 00:57|--ah-----|268] -> C:\sqmdata10.sqm 
[02/03/2009 09:39|--ah-----|268] -> C:\sqmdata11.sqm 
[04/03/2009 11:43|--ah-----|232] -> C:\sqmdata12.sqm 
[19/03/2009 08:24|--ah-----|268] -> C:\sqmdata13.sqm 
[19/03/2009 15:26|--ah-----|268] -> C:\sqmdata14.sqm 
[19/03/2009 16:46|--ah-----|268] -> C:\sqmdata15.sqm 
[02/04/2009 19:15|--ah-----|268] -> C:\sqmdata16.sqm 
[03/04/2009 11:41|--ah-----|268] -> C:\sqmdata17.sqm 
[18/04/2009 15:22|--ah-----|268] -> C:\sqmdata18.sqm 
[18/04/2009 17:09|--ah-----|268] -> C:\sqmdata19.sqm 
[18/05/2009 18:33|--ah-----|244] -> C:\sqmnoopt00.sqm 
[19/05/2009 08:34|--ah-----|244] -> C:\sqmnoopt01.sqm 
[20/05/2009 20:37|--ah-----|244] -> C:\sqmnoopt02.sqm 
[23/05/2009 18:36|--ah-----|244] -> C:\sqmnoopt03.sqm 
[25/05/2009 19:45|--ah-----|244] -> C:\sqmnoopt04.sqm 
[28/05/2009 11:09|--ah-----|244] -> C:\sqmnoopt05.sqm 
[28/06/2009 22:57|--ah-----|244] -> C:\sqmnoopt06.sqm 
[30/06/2009 11:19|--ah-----|244] -> C:\sqmnoopt07.sqm 
[02/07/2009 10:06|--ah-----|244] -> C:\sqmnoopt08.sqm 
[13/02/2009 23:12|--ah-----|244] -> C:\sqmnoopt09.sqm 
[14/02/2009 00:57|--ah-----|244] -> C:\sqmnoopt10.sqm 
[02/03/2009 09:39|--ah-----|244] -> C:\sqmnoopt11.sqm 
[04/03/2009 11:43|--ah-----|244] -> C:\sqmnoopt12.sqm 
[19/03/2009 08:24|--ah-----|244] -> C:\sqmnoopt13.sqm 
[19/03/2009 15:26|--ah-----|244] -> C:\sqmnoopt14.sqm 
[19/03/2009 16:46|--ah-----|244] -> C:\sqmnoopt15.sqm 
[02/04/2009 19:15|--ah-----|244] -> C:\sqmnoopt16.sqm 
[03/04/2009 11:41|--ah-----|244] -> C:\sqmnoopt17.sqm 
[18/04/2009 15:22|--ah-----|244] -> C:\sqmnoopt18.sqm 
[18/04/2009 17:09|--ah-----|244] -> C:\sqmnoopt19.sqm 
[03/08/2009 11:04|--a------|5176] -> C:\UsbFix.txt 
[16/11/2006 11:51|-r-------|159] -> E:\autorun.inf 
[16/11/2006 13:26|-r-------|1095224] -> E:\LaunchU3.exe 
[02/02/2007 13:06|-r-------|3375339] -> E:\LaunchPad.zip 
[24/04/2004 12:38|--a------|37888] -> F:\JSTART.exe 
[16/07/2008 09:14|--a------|42760] -> F:\WDInstaller.xml 
[08/07/2008 11:53|--a------|1760039] -> F:\WDSetup.exe 
[08/02/2008 13:44|--a------|4574208] -> F:\WDSync.exe 
[10/01/2009 17:56|--a------|22] -> F:\wdEULA.log 
[10/01/2009 17:56|--a------|14] -> F:\wdstatus.log 
[10/01/2009 18:08|--a------|278] -> F:\wdinstaller.log 
[10/01/2009 18:08|---hs----|32768] -> F:\System Volume Information 
[30/05/2008 09:31|--ah-----|54] -> F:\autorun.in_2.org 
[03/01/2009 18:51|--a------|153486] -> F:\cc_20090103_185134.reg 
[09/11/2008 19:18|--a------|72] -> F:\cle_wifi.txt 
[03/12/2008 11:31|--a------|2630317] -> F:\IMGP2166(1).JPG 
[31/01/2007 09:21|--a------|3708] -> F:\WinDlg.txt 
[10/01/2009 12:51|--a------|4458698] -> F:\WinDLG.zip 
[12/11/2008 17:27|--a------|2690304] -> F:\foxit-pdf-reader_foxit_pdf_reader_2.3_build_3309_francais_13808.exe 
[30/01/2008 22:54|--a------|117] -> F:\crack jewel.txt 
[12/01/2009 13:59|--a------|32064469] -> F:
Force_5.10_WinXP2K_WHQL_international.exe 
[16/11/2006 13:26|-ra------|1095224] -> G:\LaunchU3.exe 
[09/10/2007 19:35|---hs----|8192] -> G:\Thumbs.db 

################## | Vaccination |

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.  
# G:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.  

################## | Cracks / Keygens / Serials |


################## | ! Fin du rapport # UsbFix V6.012 ! |

En te souhaitant une tres bonne journée

archet9 · Answer

Re,

Fais un scan avec cet antispyware :
TelechargesMalwarebytes + tutoriel
 
Tu l´installes; mets le a jour...(onglet mise a jour)
Click maintenant sur l´onglet recherche et coche la case : "executer un examen rapide".
Puis click sur "rechercher". 
Laisses le scanner le pc...
Si des elements on ete trouvés > click sur supprimer la selection.
si il t´es demandé de redemarrer > click sur "oui".
A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vue de le poster sur le forum.
Copies et colles le rapport stp.  

a+

philthebest91 · Answer

me revoila apres quelques difficultes le pc rame a mort

Malwarebytes' Anti-Malware 1.39
Version de la base de données: 2421
Windows 5.1.2600 Service Pack 3

03/08/2009 14:48:38
mbam-log-2009-08-03 (14-48-38).txt

Type de recherche: Examen rapide
Eléments examinés: 84317
Temps écoulé: 14 minute(s), 1 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\WINDOWS\casino1.ini (Malware.Trace) -> Quarantined and deleted successfully.

archet9 · Answer

Re


Telecharge GENPROC
lien +tuto :
http://www.alt-shift-return.org/Info/GenProc-HowTo.html
Copie et colle le rapport stp...


a+

philthebest91 · Answer

Re,

voici comme tu me l'as si gentiment demandé le rapport GRapport GenProc 2.611 [1] - 03/08/2009 à 19:14:34 
@ Windows XP Service Pack 3 - Mode normal
@ Internet Explorer (8.0.6001.18702) [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante : 


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :  
C:\Program Files\EsetOnlineScanner\log.txt

 


~~~~ INFORMATION COMPLEMENTAIRE ~~~~
 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:21:30, on 03/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\atiptaxx.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Philips\Philips SPC315NC Webcam\TrayMin315.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\user\Bureau\GenProc\outil\user_GenProc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwaprops.cpl,CrystalControlWnd
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE %;USB\VID_0AC8&PID_0302.DeviceDesc%
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe"  /autorun
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: TrayMin315.exe.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash Casino Helper Control) - https://plugins.valueactive.eu/flashax/iefax.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

archet9 · Answer

Re philthebest91

@ Windows XP Service Pack 3 - Mode normal 
@ Internet Explorer (8.0.6001.18702) [Navigateur par défaut] 

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante : 


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer) 
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport : 
C:\Program Files\EsetOnlineScanner\log.txt 


==> Pour plus de sureté,lance le scan Nod32 !

a+

philthebest91 · Answer

voila le rapport scan

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=6
# IEXPLORE.EXE=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
# OnlineScanner.ocx=1.0.0.5889
# api_version=3.0.2
# EOSSerial=93f22543aa723e44aacc08379ec32ca3
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2009-08-03 08:27:36
# local_time=2009-08-03 10:27:36 (+0100, Paris, Madrid)
# country="France"
# lang=1036
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=1797 21 100 100 2175552995712
# scanned=42106
# found=0
# cleaned=0
# scan_time=7648

archet9 · Answer

RE  philthebest91

# scanned=42106 
# found=0 
# cleaned=0 

Le pc  semble tout propre  !!!!

a+

philthebest91 · Answer

Bonjour, et tout d'abord merci.

je voudrais juste te demander une derniere chose.
Le pc rame beaucoup, en particulier a l'ouverture et au lancement d'internet explorer.
Comme le pc est clean, aurais tu une petite idee d'ou cela pourrait provenir?

Mais je ne veux pas abuser de ton temps car pour le nettoyage, superbe travail

archet9 · Answer

Re philthebest91 Il y a effectivement plusieurs applications inutiles qui se lancent au demarrage: ==> >Télécharge HiJackThis : https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/ - Lance le programme, puis sélectionne < do a system scan only > - Coches (fixes les lignes suivantes) : Tuto : si problème : http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = &cc=fr&toHttps=1&redig=F24CFEBCCA6B4073B5E378D522D508C3 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = &cc=fr&toHttps=1&redig=F24CFEBCCA6B4073B5E378D522D508C3 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = &cc=fr&toHttps=1&redig=F24CFEBCCA6B4073B5E378D522D508C3 O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 -noicon O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') Appuies ensuite sur : FIX CHECKED IMPORTANT: Redémarres le pc afin de valider ces modifs...!!! ENSUITE Pour desinstaller les outils utilisés: Telecharge ToolsCleaner2 --> http://pc-system.fr/ -Une fois téléchargé, installe-le et lance-le -Clique sur Recherche et laisse le scan se terminer -Clique sur SUPPRESSION -Clique sur Quitter pour que le rapport puisse se créer -Poste moi le rapport se trouvant ici--> C:\TCleaner.txt PUIS: * Lance Ccleaner. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc.... * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage. * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse(Sauvegarde la base de registre). * Décoche la case plus vieux que 48 h IMPORTANT ---> Il est nécessaire de désactiver redemarrer puis réactiver la restauration système pour la purger : XP: https://www.tayo.fr/desactiver-restauration-systeme-sur-windows-xp-tutoriel.php VISTA: https://www.tayo.fr/desactiver-restauration-windows-vista-tutoriel.php ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème : https://www.vulgarisation-informatique.com/creer-point-restauration.php a+

philthebest91 · Answer

voila le rapport tools cleaner 2

[ Rapport ToolsCleaner version 2.3.9 (par A.Rothstein & dj QUIOU) ]

--> Recherche: 

C:\UsbFix: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\user\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\user\Bureau\GenProc.zip: trouvé !
C:\Documents and Settings\user\Bureau\Navilog1.exe: trouvé !
C:\Documents and Settings\user\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\user\Bureau\UsbFix.exe: trouvé !
C:\Documents and Settings\user\Bureau\UsbFix.lnk: trouvé !
C:\Documents and Settings\user\Bureau\Rsit.exe: trouvé !
C:\Documents and Settings\user\Bureau\GenProc: trouvé !
C:\Documents and Settings\user\Bureau\GenProc\outil\hijackthis.log: trouvé !
C:\Documents and Settings\user\Bureau\GenProc\outil\mbr.exe: trouvé !
C:\Documents and Settings\user\Bureau\GenProc\Page\GenProc[*].html: trouvé !
C:\Documents and Settings\user\Menu Démarrer\Programmes\UsbFix: trouvé !
C:\Documents and Settings\user\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: trouvé !
C:\Documents and Settings\user\Recent\UsbFix.lnk: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Navilog1\catchme.exe: trouvé !
C:\Program Files	rend micro\HijackThis.exe: trouvé !
C:\Program Files	rend micro\hijackthis.log: trouvé !
C:\Program Files	rend micro\HijackThis: trouvé !
C:\Program Files	rend micro\HijackThis\HijackThis.exe: trouvé !

---------------------------------
--> Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\user\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\user\Bureau\GenProc.zip: supprimé !
C:\Documents and Settings\user\Bureau\Navilog1.exe: supprimé !
C:\Documents and Settings\user\Bureau\HJTInstall.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Navilog1\catchme.exe: supprimé !
C:\Program Files	rend micro\HijackThis.exe: supprimé !
C:\Program Files	rend micro\HijackThis\HijackThis.exe: supprimé !
C:\Documents and Settings\user\Bureau\UsbFix.exe: supprimé !
C:\Documents and Settings\user\Bureau\UsbFix.lnk: supprimé !
C:\Documents and Settings\user\Bureau\Rsit.exe: supprimé !
C:\Documents and Settings\user\Bureau\GenProc\outil\hijackthis.log: supprimé !
C:\Documents and Settings\user\Bureau\GenProc\outil\mbr.exe: supprimé !
C:\Documents and Settings\user\Bureau\GenProc\Page\GenProc[*].html: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\user\Menu Démarrer\Programmes\UsbFix\UsbFix.lnk: supprimé !
C:\Documents and Settings\user\Recent\UsbFix.lnk: supprimé !
C:\Program Files	rend micro\hijackthis.log: supprimé !
C:\UsbFix: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\user\Bureau\GenProc: supprimé !
C:\Documents and Settings\user\Menu Démarrer\Programmes\UsbFix: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files	rend micro\HijackThis: supprimé !

philthebest91 · Answer

bon j'ai passe CCleaner et effectue les differentes manips que tu m'as demandé.

Il reste 3 clés pas reparables et qui peuvent etre supprimées si je ne me trompe.

Au plaisir de te lire

archet9 · Answer

oui supprime....
a+

archet9 · Answer

PS:

La lenteur du pc s'explique aussi par ceci:

"Microsoft Windows XP Édition familiale Service Pack 3 
System drive C: has 3 GB (15%) free of 19 GB 
Total RAM: 255 MB (16% free) "

Espace DD  faible...
+
RAM (mémoire vive) insuffisante  !!!

==> A moins d'augmenter cette RAM, le pc n'aura jamais jamais de gandes performances en matiére de rapidité...

a+

philthebest91 · Answer

Encore merci pour ta disponibilite et pour la precision de tes explications.

Je vais voir pour supprimer certains logiciels dont il ne doit pas se servir (schrink par ex) et voir si il y a un moyen d'augmenter la memoire vive mais je ne vois pas trop comment.

Merci mille fois et excellente journée

archet9 · Answer

Re

"et voir si il y a un moyen d'augmenter la memoire vive mais je ne vois pas trop comment". 

==> il te faut acheter et remplacer(ou faire remplacer) la barette de RAM de 255mo par une 
barette de 500mo ou mieux 1go.... et la vitesse d'exécution sera démultipliée !!!!

a+

philthebest91 · Answer

merci encore de me repondre.

A tout hasard j'ai sorti ca avec le logiciel CPUID CPUZ. Quelle MO maxi je peux lui mettre?

 CPU-Z TXT Report
-------------------------------------------------------------------------

Binaries
-------------------------------------------------------------------------

CPU-Z version			1.52.1

Processors
-------------------------------------------------------------------------

Number of processors		1
Number of threads		1

APICs
-------------------------------------------------------------------------

Processor 0	
	-- Core 0	
		-- Thread 0	0

Processors Information
-------------------------------------------------------------------------

Processor 1			ID = 0
	Number of cores		1 (max 1)
	Number of threads	1 (max 1)
	Name			Intel Pentium 4
	Codename		Willamette
	Specification		Intel(R) Pentium(R) 4 CPU 1.70GHz
	Package (platform ID)	Socket 478 mPGA (0x2)
	CPUID			F.1.2
	Extended CPUID		F.1
	Brand ID		8
	Core Stepping		D0
	Technology		0.18 um
	Core Speed		1694.7 MHz
	Multiplier x FSB	17.0 x 99.7 MHz
	Rated Bus speed		398.8 MHz
	Stock frequency		1700 MHz
	Instructions sets	MMX, SSE, SSE2
	L1 Data cache		8 KBytes, 4-way set associative, 64-byte line size
	Trace cache		12 Kuops, 8-way set associative
	L2 cache		256 KBytes, 8-way set associative, 64-byte line size
	FID/VID Control		no


Thread dumps
-------------------------------------------------------------------------

CPU Thread 0	
	APIC ID			0
	Topology		Processor ID 0, Core ID 0, Thread ID 0
	Type			01001001h
	Max CPUID level		00000002h
	Max CPUID ext. level	80000004h
	Cache descriptor	Level 2, U, 256 KB, 1 thread(s)
	Cache descriptor	Level 1, T, 12 KB, 1 thread(s)
	Cache descriptor	Level 1, D, 8 KB, 1 thread(s)

	CPUID		 
	0x00000000		0x00000002	0x756E6547	0x6C65746E	0x49656E69
	0x00000001		0x00000F12	0x00010808	0x00000000	0x3FEBF9FF
	0x00000002		0x665B5001	0x00000000	0x00000000	0x007A7040
	0x80000000		0x80000004	0x00000000	0x00000000	0x00000000
	0x80000001		0x00000000	0x00000000	0x00000000	0x00000000
	0x80000002		0x20202020	0x20202020	0x20202020	0x6E492020
	0x80000003		0x286C6574	0x50202952	0x69746E65	0x52286D75
	0x80000004		0x20342029	0x20555043	0x30372E31	0x007A4847

	MSR 0x00000017		0x00080000	0x00000000
	MSR 0x0000002A		0x00000000	0x00004100
	MSR 0x000001A0		0x00000000	0x000000C1



Chipset
-------------------------------------------------------------------------

Northbridge			Intel i845 rev. 04
Southbridge			Intel 82801BA (ICH2) rev. 05
Graphic Interface		AGP
AGP Revision			2.0
AGP Transfer Rate		4x
AGP SBA				supported, enabled
Memory Type			SDRAM
Memory Size			256 MBytes
Memory Frequency		132.9 MHz (3:4)
CAS# latency (CL)		3.0
RAS# to CAS# delay (tRCD)	3
RAS# Precharge (tRP)		3
Cycle Time (tRAS)		6

Memory SPD
-------------------------------------------------------------------------

DIMM #				1
	SMBus address		0x50
	Memory type		SDRAM
	Manufacturer (ID)	Nanya Technology (7F7F7F0B00000000)
	Size			256 MBytes
	Max bandwidth		PC133 (133 MHz)
	Part number		NT256S64VH8A0GM-75
	Manufacturing date	Week 13/Year 02n
	Number of banks		2
	Data width		64 bits
	Correction		None
	Registered		no
	Buffered		no
	EPP			no
	XMP			no
JEDEC timings table		CL-tRCD-tRP-tRAS-tRC @ frequency
	JEDEC #1		2.0-2-2-5-0 @ 100 MHz
	JEDEC #2		3.0-3-3-6-0 @ 133 MHz
SPD registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	80 08 04 0D 09 02 40 00 01 75 54 00 82 10 00 01 
	10	0F 04 06 01 01 00 0E A0 60 00 00 14 0F 14 2D 20 
	20	15 08 15 08 00 00 00 00 00 00 00 00 00 00 00 00 
	30	00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 3A 
	40	7F 7F 7F 0B 00 00 00 00 03 4E 54 32 35 36 53 36 
	50	34 56 48 38 41 30 47 4D 2D 37 35 00 00 02 0D 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 FF 
	80	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
	90	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
	A0	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
	B0	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
	C0	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
	D0	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
	E0	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 
	F0	FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF 


Monitoring
-------------------------------------------------------------------------

Mainboard Model		ATR10 (0x00000148 - 0x00031380)

LPCIO
-------------------------------------------------------------------------

LPCIO Vendor		SMSC
LPCIO Vendor ID		0x55
LPCIO Chip ID		0xFC
Config Mode I/O address	0x2E
Config Mode LDN		0x8
Config Mode registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	28 94 80 70 00 00 FF 00 00 00 40 00 1E 5A 00 00 
	10	00 00 2E 00 02 00 01 03 00 00 00 00 00 00 00 00 
	20	FC 00 00 DE 00 FE 20 60 04 80 00 FF 01 03 00 00 
	30	00 00 00 00 00 00 00 00 00 80 00 00 00 00 00 00 
	40	28 94 80 70 00 00 FF 00 00 00 40 00 1E 5A 00 00 
	50	00 00 2E 00 02 00 01 03 00 00 00 00 00 00 00 00 
	60	FC 00 00 DE 00 FE 20 60 04 80 00 FF 01 03 00 00 
	70	00 00 00 00 00 00 00 00 00 80 00 00 00 00 00 00 

Hardware Monitors
-------------------------------------------------------------------------


PCI Device
-------------------------------------------------------------------------

Description			Host Bridge
Location			bus 0 (0x00), device 0 (0x00), function 0 (0x00)
Common header
	Vendor ID		0x8086
	Model ID		0x1A30
	Revision ID		0x04
	PI			0x00
	SubClass		0x00
	BaseClass		0x06
	Cache Line		0x00
	Latency			0x00
	Header			0x00
PCI header
	Address 0 (memory)	0xEC000000
	Subvendor ID		0x1179
	Subsystem ID		0xFF00
	Int. Line		0x00
	Int. Pin		0x00
PCI capability
	Caps class		Vendor Dependant
	Caps offset		0xE4
PCI capability
	Caps class		AGP
	Caps offset		0xA0
	Caps version		2.0
	Caps status		enabled
	Transfer rate		4x (max 4x)
	Queue lenght		1 (max 32)
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 30 1A 06 01 90 20 04 00 00 06 00 00 00 00 
	10	08 00 00 EC 00 00 00 00 00 00 00 00 00 00 00 00 
	20	00 00 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	30	00 00 00 00 E4 00 00 00 00 00 00 00 00 00 00 00 
	40	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	00 02 00 00 00 00 00 00 00 00 00 00 00 15 00 00 
	60	00 00 04 08 08 08 08 08 00 00 00 00 00 00 00 00 
	70	00 22 00 00 00 00 00 00 10 02 00 03 70 02 00 20 
	80	3A 00 82 00 00 00 00 00 00 80 00 00 00 00 00 00 
	90	10 11 11 00 30 30 11 00 41 19 00 00 00 1A 3D 00 
	A0	02 00 20 00 17 02 00 1F 04 03 00 00 00 00 00 00 
	B0	80 00 00 00 30 00 00 00 00 60 00 00 20 10 00 00 
	C0	44 40 50 11 00 10 05 08 00 C0 00 00 00 00 00 00 
	D0	02 28 00 0E 0B 00 00 33 AF 01 31 B5 00 00 0A 00 
	E0	00 00 00 00 09 A0 04 91 00 00 00 00 00 00 00 00 
	F0	00 00 01 00 74 FC 20 98 38 0F 00 00 04 00 00 00 

Description			PCI to PCI Bridge
Location			bus 0 (0x00), device 1 (0x01), function 0 (0x00)
Common header
	Vendor ID		0x8086
	Model ID		0x1A31
	Revision ID		0x04
	PI			0x00
	SubClass		0x04
	BaseClass		0x06
	Cache Line		0x00
	Latency			0x00
	Header			0x01
PCI header
	Primary bus		0x00
	Secondary bus		0x01
	Int. Line		0x00
	Int. Pin		0x00
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 31 1A 07 01 A0 00 04 00 04 06 00 00 01 00 
	10	00 00 00 00 00 00 00 00 00 01 01 40 30 30 A0 22 
	20	00 E8 00 E8 00 F0 F0 F7 00 00 00 00 00 00 00 00 
	30	00 00 00 00 00 00 00 00 00 00 00 00 00 00 0C 00 
	40	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	DD 92 FF AF 38 F4 01 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

Description			PCI to PCI Bridge
Location			bus 0 (0x00), device 30 (0x1E), function 0 (0x00)
Common header
	Vendor ID		0x8086
	Model ID		0x244E
	Revision ID		0x05
	PI			0x00
	SubClass		0x04
	BaseClass		0x06
	Cache Line		0x00
	Latency			0x00
	Header			0x01
PCI header
	Primary bus		0x00
	Secondary bus		0x02
	Int. Line		0x00
	Int. Pin		0x00
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 4E 24 07 01 80 00 05 00 04 06 00 00 01 00 
	10	00 00 00 00 00 00 00 00 00 02 57 00 40 40 80 22 
	20	10 E8 10 E8 F0 FF 00 00 00 00 00 00 00 00 00 00 
	30	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	40	00 28 20 20 00 00 00 00 00 00 00 00 00 00 00 00 
	50	02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 C0 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	10 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	01 00 02 00 00 00 C0 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			PCI to ISA Bridge
Location			bus 0 (0x00), device 31 (0x1F), function 0 (0x00)
Common header
	Vendor ID		0x8086
	Model ID		0x2440
	Revision ID		0x05
	PI			0x00
	SubClass		0x01
	BaseClass		0x06
	Cache Line		0x00
	Latency			0x00
	Header			0x80
PCI header
	Subvendor ID		0x0000
	Subsystem ID		0x0000
	Int. Line		0x00
	Int. Pin		0x00
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 40 24 0F 00 80 02 05 00 01 06 00 00 80 00 
	10	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	20	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	30	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	40	01 10 00 00 10 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 81 11 00 00 10 00 00 00 
	60	05 0B 80 05 D0 00 00 00 0B 80 80 05 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	FF FC 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 01 02 00 00 00 00 
	C0	00 00 00 00 00 FE 00 00 00 00 00 00 00 00 00 00 
	D0	02 28 00 00 02 0F 00 00 04 00 00 00 00 00 00 00 
	E0	10 00 00 FF 00 00 0D 00 33 22 11 00 00 00 67 45 
	F0	0F 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			IDE Controller
Location			bus 0 (0x00), device 31 (0x1F), function 1 (0x01)
Common header
	Vendor ID		0x8086
	Model ID		0x244B
	Revision ID		0x05
	PI			0x80
	SubClass		0x01
	BaseClass		0x01
	Cache Line		0x00
	Latency			0x00
	Header			0x00
PCI header
	Address 4 (port)	0x00001800
	Subvendor ID		0x1179
	Subsystem ID		0xFF00
	Int. Line		0x00
	Int. Pin		0x00
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 4B 24 05 00 80 02 05 80 01 01 00 00 00 00 
	10	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	20	01 18 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	30	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	40	47 A3 47 A3 00 00 00 00 01 00 01 00 00 00 00 00 
	50	00 00 00 00 11 14 10 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			USB Controller (UHCI)
Location			bus 0 (0x00), device 31 (0x1F), function 2 (0x02)
Common header
	Vendor ID		0x8086
	Model ID		0x2442
	Revision ID		0x05
	PI			0x00
	SubClass		0x03
	BaseClass		0x0C
	Cache Line		0x00
	Latency			0x00
	Header			0x00
PCI header
	Address 4 (port)	0x00001820
	Subvendor ID		0x1179
	Subsystem ID		0xFF00
	Int. Line		0x05
	Int. Pin		0x04
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 42 24 05 00 80 02 05 00 03 0C 00 00 00 00 
	10	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	20	21 18 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	30	00 00 00 00 00 00 00 00 00 00 00 00 05 04 00 00 
	40	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			SMBus Controller
Location			bus 0 (0x00), device 31 (0x1F), function 3 (0x03)
Common header
	Vendor ID		0x8086
	Model ID		0x2443
	Revision ID		0x05
	PI			0x00
	SubClass		0x05
	BaseClass		0x0C
	Cache Line		0x00
	Latency			0x00
	Header			0x00
PCI header
	Address 4 (port)	0x00001810
	Subvendor ID		0x1179
	Subsystem ID		0xFF00
	Int. Line		0x0B
	Int. Pin		0x02
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 43 24 01 00 80 02 05 00 05 0C 00 00 00 00 
	10	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	20	11 18 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	30	00 00 00 00 00 00 00 00 00 00 00 00 0B 02 00 00 
	40	01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			USB Controller (UHCI)
Location			bus 0 (0x00), device 31 (0x1F), function 4 (0x04)
Common header
	Vendor ID		0x8086
	Model ID		0x2444
	Revision ID		0x05
	PI			0x00
	SubClass		0x03
	BaseClass		0x0C
	Cache Line		0x00
	Latency			0x00
	Header			0x00
PCI header
	Address 4 (port)	0x00001840
	Subvendor ID		0x1179
	Subsystem ID		0xFF00
	Int. Line		0x05
	Int. Pin		0x03
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 44 24 05 00 80 02 05 00 03 0C 00 00 00 00 
	10	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	20	41 18 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	30	00 00 00 00 00 00 00 00 00 00 00 00 05 03 00 00 
	40	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 2F 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			Audio device
Location			bus 0 (0x00), device 31 (0x1F), function 5 (0x05)
Common header
	Vendor ID		0x8086
	Model ID		0x2445
	Revision ID		0x05
	PI			0x00
	SubClass		0x01
	BaseClass		0x04
	Cache Line		0x00
	Latency			0x00
	Header			0x00
PCI header
	Address 0 (port)	0x0000F600
	Address 1 (port)	0x0000FEC0
	Subvendor ID		0x1179
	Subsystem ID		0xFF00
	Int. Line		0x0B
	Int. Pin		0x02
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 45 24 05 00 80 02 05 00 01 04 00 00 00 00 
	10	01 F6 00 00 C1 FE 00 00 00 00 00 00 00 00 00 00 
	20	00 00 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	30	00 00 00 00 00 00 00 00 00 00 00 00 0B 02 00 00 
	40	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			Modem
Location			bus 0 (0x00), device 31 (0x1F), function 6 (0x06)
Common header
	Vendor ID		0x8086
	Model ID		0x2446
	Revision ID		0x05
	PI			0x00
	SubClass		0x03
	BaseClass		0x07
	Cache Line		0x00
	Latency			0x00
	Header			0x00
PCI header
	Address 0 (port)	0x0000F800
	Address 1 (port)	0x0000FF00
	Subvendor ID		0x1179
	Subsystem ID		0x0001
	Int. Line		0x0B
	Int. Pin		0x02
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 46 24 05 00 80 02 05 00 03 07 00 00 00 00 
	10	01 F8 00 00 01 FF 00 00 00 00 00 00 00 00 00 00 
	20	00 00 00 00 00 00 00 00 00 00 00 00 79 11 01 00 
	30	00 00 00 00 00 00 00 00 00 00 00 00 0B 02 00 00 
	40	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 47 0F 00 00 00 00 00 00 

Description			VGA Controller
Location			bus 1 (0x01), device 0 (0x00), function 0 (0x00)
Common header
	Vendor ID		0x1002
	Model ID		0x4C59
	Revision ID		0x00
	PI			0x00
	SubClass		0x00
	BaseClass		0x03
	Cache Line		0x08
	Latency			0x00
	Header			0x00
PCI header
	Address 0 (memory)	0xF0000000
	Address 1 (port)	0x00003000
	Address 2 (memory)	0xE8000000
	Subvendor ID		0x1179
	Subsystem ID		0xFF00
	Int. Line		0x05
	Int. Pin		0x01
PCI capability
	Caps class		AGP
	Caps offset		0x58
	Caps version		2.0
	Caps status		enabled
	Transfer rate		4x (max 4x)
	Queue lenght		1 (max 48)
PCI capability
	Caps class		Power Management
	Caps offset		0x50
	Caps version		1.1
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	02 10 59 4C 87 03 B0 02 00 00 00 03 08 00 00 00 
	10	08 00 00 F0 01 30 00 00 00 00 00 E8 00 00 00 00 
	20	00 00 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	30	00 00 00 00 58 00 00 00 00 00 00 00 05 01 08 00 
	40	00 00 00 00 00 00 00 00 00 00 00 00 79 11 00 FF 
	50	01 00 02 06 00 00 00 00 02 50 20 00 07 02 00 2F 
	60	04 03 00 1F 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

Description			PCI to CardBus Bridge
Location			bus 2 (0x02), device 0 (0x00), function 0 (0x00)
Common header
	Vendor ID		0x104C
	Model ID		0xAC51
	Revision ID		0x00
	PI			0x00
	SubClass		0x07
	BaseClass		0x06
	Cache Line		0x08
	Latency			0x00
	Header			0x82
PCI header
PCI capability
	Caps class		Power Management
	Caps offset		0xA0
	Caps version		1.0
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	4C 10 51 AC 07 00 10 02 00 00 07 06 08 00 82 00 
	10	00 F0 BF FE A0 00 00 02 02 03 03 00 00 E0 BF FE 
	20	00 E0 BF FE 00 E0 BF FA 00 D0 BF FE 00 FD 00 00 
	30	FC FD 00 00 00 FC 00 00 FC FC 00 00 05 01 C0 00 
	40	79 11 00 FF 01 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	61 90 44 00 00 00 00 00 00 00 00 00 22 1D CC 01 
	90	C0 22 66 60 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	01 00 11 FE 00 00 C0 00 0C 00 00 00 0B 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

Description			PCI to CardBus Bridge
Location			bus 2 (0x02), device 0 (0x00), function 1 (0x01)
Common header
	Vendor ID		0x104C
	Model ID		0xAC51
	Revision ID		0x00
	PI			0x00
	SubClass		0x07
	BaseClass		0x06
	Cache Line		0x08
	Latency			0x00
	Header			0x82
PCI header
PCI capability
	Caps class		Power Management
	Caps offset		0xA0
	Caps version		1.0
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	4C 10 51 AC 07 00 10 02 00 00 07 06 08 00 82 00 
	10	00 D0 BF FA A0 00 00 02 02 57 57 00 00 C0 BF FA 
	20	00 C0 BF FA 00 00 00 E4 00 F0 FF E7 00 FA 00 00 
	30	FC FA 00 00 00 F9 00 00 FC F9 00 00 0B 02 C0 00 
	40	79 11 00 FF 01 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	61 90 44 00 00 00 00 00 00 00 00 00 22 1D CC 01 
	90	C0 22 66 60 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	01 00 11 FE 00 00 C0 00 0C 00 00 00 0B 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	E0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 

Description			Ethernet Controller
Location			bus 2 (0x02), device 8 (0x08), function 0 (0x00)
Common header
	Vendor ID		0x8086
	Model ID		0x2449
	Revision ID		0x03
	PI			0x00
	SubClass		0x00
	BaseClass		0x02
	Cache Line		0x08
	Latency			0x00
	Header			0x00
PCI header
	Address 0 (memory)	0xE8100000
	Address 1 (port)	0x00004000
	Subvendor ID		0x1179
	Subsystem ID		0xFF01
	Int. Line		0x0B
	Int. Pin		0x01
PCI capability
	Caps class		Power Management
	Caps offset		0xDC
	Caps version		1.1
PCI registers	
		00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 
	00	86 80 49 24 17 01 90 02 03 00 00 02 08 00 00 00 
	10	00 00 10 E8 01 40 00 00 00 00 00 00 00 00 00 00 
	20	00 00 00 00 00 00 00 00 00 00 00 00 79 11 01 FF 
	30	00 00 00 00 DC 00 00 00 00 00 00 00 0B 01 08 38 
	40	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	50	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	60	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	70	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	80	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	90	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	A0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	B0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	C0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
	D0	00 00 00 00 00 00 00 00 00 00 00 00 01 00 22 FE 
	E0	00 40 00 3A 00 00 00 00 00 00 00 00 00 00 00 00 
	F0	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 


DMI
-------------------------------------------------------------------------

DMI BIOS		
	vendor			TOSHIBA
	version			V1.10
	date			02/08/02

DMI System Information		
	manufacturer		TOSHIBA
	product			S1900-102
	version			PS190E-00K48-FR
	serial			42860223GþSS190-00K48FR+0OL
	UUID			5C2946AF-4BDF11D6-A6730002-3F75DF07

DMI Baseboard		
	vendor			Null
	model			ATR10
	revision		Null
	serial			0123456789AB

DMI System Enclosure		
	manufacturer		TOSHIBA
	chassis type		1X
	chassis serial		None

DMI Processor		
	manufacturer		Intel
	model			A0
	clock speed		1700.0 MHz

DMI Memory Controller		
	correction		unknown
	Max module size		256 MBytes

DMI Memory Module		
	designation		M1
	size			256 MBytes (double bank)

DMI Memory Module		
	designation		M2

DMI Port Connector		
	designation		J1K1 (internal)
	designation		COM 1 (external)
	port type		Serial Port 16550A
	connector		9 Pin Dual Inline (pin 10 cut)
	connector		DB-9 male

DMI Port Connector		
	designation		J1J3 (internal)
	designation		Parallel (external)
	port type		Parallel Port ECP/EPP
	connector		25 Pin Dual Inline (pin 26 cut)
	connector		DB-25 female

DMI Port Connector		
	designation		J1M1 (internal)
	designation		Keyboard (external)
	port type		Keyboard Port
	connector		Circular DIN-8 male

DMI Port Connector		
	designation		J1M1 (internal)
	designation		PS/2 Mouse (external)
	port type		Keyboard Port
	connector		Circular DIN-8 male

DMI Extension Slot		
	designation		PCI Slot #1 - J1101I
	type			PCI
	width			32 bits

DMI Extension Slot		
	designation		PCI Slot #2 - J1001I
	type			PCI
	width			32 bits

DMI Extension Slot		
	designation		PCI Slot #3 - J901I
	type			PCI
	width			32 bits
	populated		no

DMI OEM Strings		
	string[0]		PS190EX00K47

DMI Physical Memory Array		
	location		Motherboard
	usage			System Memory
	correction		None
	max capacity		512 MBytes
	max# of devices		3

DMI Memory Device		
	designation		J6J1
	format			DIMM
	type			SDRAM

DMI Memory Device		
	designation		J6J2
	format			DIMM
	type			SDRAM
	total width		64 bits
	data width		64 bits
	size			256 MBytes

DMI Memory Device		
	designation		J7J1
	format			DIMM
	type			SDRAM


Graphics
-------------------------------------------------------------------------

Number of adapters		1

Graphic APIs
-------------------------------------------------------------------------

API				ATI I/O

Display Adapters
-------------------------------------------------------------------------

Display adapter 0	
	Display name		\.\DISPLAY1
	Name			MOBILITY M6
	PCI device		bus 1 (0x1), device 0 (0x0), function 0 (0x0)
	Vendor ID		0x1002 (0x1179)
	Model ID		0x4C59 (0xFF00)
	Performance Level	0


Software
-------------------------------------------------------------------------

Windows Version			Microsoft Windows XP Home Edition  Service Pack 3 (Build 2600) 
DirectX Version			9.0c

Merci mille fois

archet9 · Answer

Re...

JE te remercie à mon tour pour ta reconnaissance !!!! (cela n'est pas toujours le cas)

Je dois te dire que m'interressant principalement à la désinfection ton rapport ci dessus 
ne me parle qu'à moitié...
==> En conséquence, je t'invite vivement a poster un nouveau message concernant 
ce problème de:
 RAM insuffisante : SUR CE FORUM


à te lire...

philthebest91 · Answer

J'ai lu avec plaisir ta reponse et je suis déçu.

Décu que tu ne puisses pas me suivre dans cette nouvelle demande.
Mais très content de t'avoir rencontré sur ce forum.


A bientot peut etre pour d'autres aventures

Fenetre publicitaire intempestive

26 réponses

Discussions similaires