Le pc se fige

jeje -  
 jeje -
Bonjour,mon pc se fige puis repart y a t il quelque chose à faire merci
20 minutes pour écrire se méssage
Configuration: vista

3 réponses

  1. Narco!4 Messages postés 2446 Statut Contributeur 467
     
    Bonjour,

    télécharge GenProc http://www.genproc.com/GenProc.exe

    double-clique sur GenProc.exe et poste le contenu du rapport qui s'ouvre
    1
  2. jeje
     
    que dois je faire maintenant merci Rapport GenProc 2.655 [1] - 03/12/2009 à 13:30:11
    @ Windows VISTA Service Pack 1 - HP-Pavilion - Mode normal
    @ Internet Explorer 7.0.6001.18000 [Navigateur par défaut]

    GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :

    Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
    - coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
    C:\Program Files\EsetOnlineScanner\log.txt

    ~~~~ INFORMATION COMPLEMENTAIRE ~~~~

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-12-03 13:30:35
    Windows 6.0.6001 Service Pack 1

    scanning hidden services & system hive ...

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\0011f60abf5c]
    "001b33f60fe7"=hex:ca,66,c4,65,bc,c6,76,5d,f9,b0,e1,dd,4e,05,cd,4e
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\0011f60abf5c]
    "001b33f60fe7"=hex:ca,66,c4,65,bc,c6,76,5d,f9,b0,e1,dd,4e,05,cd,4e

    scanning hidden registry entries ...

    scan completed successfully
    hidden services: 0

    Rapport de ZHPDiag v1.24.35 par Nicolas Coolman
    Run by Hp at 03/12/2009 13:33:31
    Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
    Platform : Windows Vista (TM) Home Premium (6.0.6001) Service Pack 1
    MSIE: Internet Explorer v7.0.6001.18000

    Boot mode: Normal (Normal boot)
    Total RAM: 1014 MB (27% free)
    System drive C: has 16 GB (31%) free of 50 GB

    ---\\
    C:\Program Files\Windows Defender\MSASCui.exe
    c:\hp\support\hpsysdrv.exe
    C:\HP\KBD\KBD.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Windows\system32\igfxtray.exe
    C:\Windows\system32\hkcmd.exe
    C:\Windows\system32\igfxpers.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Windows\SMINST\launcher.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Windows\ehome\ehTray.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Electronic Arts\EADM\Core.exe
    C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe
    C:\Program Files\Windows Media Player\WMPNSCFG.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\lsass.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\SearchIndexer.exe

    ---\\
    F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: Shell=explorer.exe

    ---\\
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr

    ---\\
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;localhost

    ---\\
    R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll
    R3 - URLSearchHook: Microsoft Url Search Hook - {91C18ED5-5E1C-4AE5-A148-A861DE8C8E16} - C:\Program Files\SGPSA\mtwb3sh.dll

    ---\\
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Easy Gif Animator Toolbar Helper - {96372AB6-15EB-4316-B497-71C741BC548C} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    ---\\
    O3 - Toolbar: Easy Gif Animator Toolbar - {35065594-9169-4A34-B167-FC4865038E53} - C:\Program Files\Easy Gif Animator Extension\v3.3.0.1\EasyGifAnimator_Toolbar.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    ---\\
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - HKCU\..\Run: [MsnMsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
    O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
    O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - Global Startup: LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe
    O4 - Global Startup: OpenOffice.org 2.3.lnk - C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
    O4 - Global Startup: Outil de notification Live Search.lnk - C:\Users\Hp\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe

    ---\\
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

    ---\\
    O9 - Extra button: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll,201

    ---\\
    O10 - WLSP:\000000000001\Winsock LSP File - C:\Windows\system32\NLAapi.dll
    O10 - WLSP:\000000000002\Winsock LSP File - C:\Windows\system32\napinsp.dll
    O10 - WLSP:\000000000003\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000004\Winsock LSP File - C:\Windows\system32\pnrpnsp.dll
    O10 - WLSP:\000000000005\Winsock LSP File - C:\Windows\system32\mswsock.dll
    O10 - WLSP:\000000000006\Winsock LSP File - C:\Windows\system32\winrnr.dll
    O10 - WLSP:\000000000007\Winsock LSP File - C:\Windows\system32\wshbth.dll
    O10 - WLSP:\000000000008\Winsock LSP File - C:\Program Files\Bonjour\mdnsNSP.dll

    ---\\
    O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\system32\urlmon.dll
    O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll
    O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\system32\inetcomm.dll
    O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
    O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
    O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll
    O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll

    ---\\
    O20 - Winlogon Notify: igfxcui - C:\Windows\System32\igfxdev.dll

    ---\\
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll

    ---\\
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - %SystemRoot%\system32\browseui.dll

    ---\\
    O23 - Service: Ad-Aware 2007 Service (aawservice) - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Apple Mobile Device (Apple Mobile Device) - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus (avast! Antivirus) - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: Service Bonjour (Bonjour Service) - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
    O23 - Service: Google Software Updater (gusvc) - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: SeaPort (SeaPort) - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - C:\Windows\system32\SLsvc.exe
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - C:\Windows\System32\spoolsv.exe
    O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - C:\Windows\system32\SearchIndexer.exe /Embedding

    ---\\
    O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Google Software Updater.job

    ---\\
    O41 - Driver: Ancilliary Function Driver for Winsock (AFD) - C:\Windows\system32\drivers\afd.sys
    O41 - Driver: Pilote de CD-ROM (cdrom) - C:\WINDOWS\system32\DRIVERS\cdrom.sys
    O41 - Driver: @%systemroot%\system32\drivers\dfsc.sys,-101 (DfsC) - C:\WINDOWS\System32\Drivers\dfsc.sys
    O41 - Driver: Pilote pour clavier i8042 et souris sur port PS/2 (i8042prt) - C:\WINDOWS\system32\DRIVERS\i8042prt.sys
    O41 - Driver: Pilote de la classe Clavier (kbdclass) - C:\WINDOWS\system32\DRIVERS\kbdclass.sys
    O41 - Driver: Pilote de la classe Souris (mouclass) - C:\WINDOWS\system32\DRIVERS\mouclass.sys
    O41 - Driver: NetBIOS Interface (NetBIOS) - C:\WINDOWS\system32\DRIVERS\netbios.sys
    O41 - Driver: NETBT (netbt) - C:\WINDOWS\System32\DRIVERS\netbt.sys
    O41 - Driver: NSI proxy service (nsiproxy) - C:\WINDOWS\system32\drivers\nsiproxy.sys
    O41 - Driver: @%SystemRoot%\System32\drivers\pacer.sys,-101 (PSched) - C:\WINDOWS\system32\DRIVERS\pacer.sys
    O41 - Driver: Remote Access Auto Connection Driver (RasAcd) - C:\WINDOWS\System32\DRIVERS\rasacd.sys
    O41 - Driver: Redirected Buffering Sub Sysytem (rdbss) - C:\WINDOWS\system32\DRIVERS\rdbss.sys
    O41 - Driver: RDPCDD (RDPCDD) - C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
    O41 - Driver: RDP Encoder Mirror Driver (RDPENCDD) - C:\WINDOWS\system32\drivers\rdpencdd.sys
    O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - C:\WINDOWS\system32\DRIVERS\smb.sys
    O41 - Driver: @%SystemRoot%\system32\tcpipcfg.dll,-50004 (tdx) - C:\WINDOWS\system32\DRIVERS\tdx.sys
    O41 - Driver: Pilote de périphérique terminal (TermDD) - C:\WINDOWS\system32\DRIVERS\termdd.sys
    O41 - Driver: (no object) (VgaSave) - C:\Windows\System32\drivers\vga.sys
    O41 - Driver: Remote Access IPv6 ARP Driver (Wanarpv6) - C:\WINDOWS\system32\DRIVERS\wanarp.sys

    ---\\
    O42 - Logiciel: 7-Zip 4.42
    O42 - Logiciel: Ad-Aware 2007
    O42 - Logiciel: Ad-Remover By C_XX
    O42 - Logiciel: Adobe Flash Player 10 ActiveX
    O42 - Logiciel: Adobe Flash Player 10 Plugin
    O42 - Logiciel: Adobe Reader 7.0.8 - Français
    O42 - Logiciel: Adobe Shockwave Player
    O42 - Logiciel: Apple Mobile Device Support
    O42 - Logiciel: Apple Software Update
    O42 - Logiciel: Assistant de connexion Windows Live
    O42 - Logiciel: AviSynth 2.5
    O42 - Logiciel: Bonjour
    O42 - Logiciel: DIZZY
    O42 - Logiciel: EA Download Manager
    O42 - Logiciel: Easy Gif Animator Extension
    O42 - Logiciel: Extension de Windows Live Toolbar (Windows Live Toolbar)
    O42 - Logiciel: Fast Browser Search (My Web Tattoo)
    O42 - Logiciel: Galerie de photos Windows Live
    O42 - Logiciel: Google Toolbar for Internet Explorer
    O42 - Logiciel: HP Customer Experience Enhancements
    O42 - Logiciel: HP Easy Setup - Core
    O42 - Logiciel: HP Easy Setup - Frontend
    O42 - Logiciel: HP Picasso Media Center Add-In
    O42 - Logiciel: HP Update
    O42 - Logiciel: Inkscape 0.45.1
    O42 - Logiciel: Installation Windows Live
    O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver
    O42 - Logiciel: Intel(R) Matrix Storage Manager
    O42 - Logiciel: Intel(R) Network Connections Drivers
    O42 - Logiciel: Java(TM) 6 Update 12
    O42 - Logiciel: Java(TM) 6 Update 2
    O42 - Logiciel: Junk Mail filter update
    O42 - Logiciel: K-Lite Codec Pack 3.9.0 Standard
    O42 - Logiciel: Les Sims™ 3
    O42 - Logiciel: LimeWire 5.3.6
    O42 - Logiciel: MSVCRT
    O42 - Logiciel: MSXML 4.0 SP2 (KB936181)
    O42 - Logiciel: MSXML 4.0 SP2 (KB941833)
    O42 - Logiciel: MSXML 4.0 SP2 (KB954430)
    O42 - Logiciel: Menus intelligents (Windows Live Toolbar)
    O42 - Logiciel: Microsoft Choice Guard
    O42 - Logiciel: Microsoft Office PowerPoint Viewer 2003
    O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU]
    O42 - Logiciel: Microsoft Search Enhancement Pack
    O42 - Logiciel: Microsoft Silverlight
    O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86)
    O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86)
    O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable
    O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    O42 - Logiciel: Microsoft WSE 3.0 Runtime
    O42 - Logiciel: Microsoft Works
    O42 - Logiciel: Nero 8
    O42 - Logiciel: OcxSetup
    O42 - Logiciel: OpenOffice.org 2.3
    O42 - Logiciel: Outil de téléchargement Windows Live
    O42 - Logiciel: Outils de diagnostic du matériel
    O42 - Logiciel: Python 2.4.3
    O42 - Logiciel: QuickTime
    O42 - Logiciel: Realtek High Definition Audio Driver
    O42 - Logiciel: Roxio Creator Audio
    O42 - Logiciel: Roxio Creator Basic v9
    O42 - Logiciel: Roxio Creator Copy
    O42 - Logiciel: Roxio Creator Data
    O42 - Logiciel: Roxio Creator EasyArchive
    O42 - Logiciel: Roxio Creator Tools
    O42 - Logiciel: Roxio Express Labeler 3
    O42 - Logiciel: Security Update for CAPICOM (KB931906)
    O42 - Logiciel: Solution de clavier multimédia amélioré
    O42 - Logiciel: Surligneur (Windows Live Toolbar)
    O42 - Logiciel: VCRedistSetup
    O42 - Logiciel: VideoLAN VLC media player 0.8.6c
    O42 - Logiciel: Windows Live Call
    O42 - Logiciel: Windows Live Communications Platform
    O42 - Logiciel: Windows Live Favorites pour Windows Live Toolbar
    O42 - Logiciel: Windows Live FolderShare
    O42 - Logiciel: Windows Live Mail
    O42 - Logiciel: Windows Live Messenger
    O42 - Logiciel: Windows Live Movie Maker
    O42 - Logiciel: Windows Live Toolbar
    O42 - Logiciel: Windows Live Writer
    O42 - Logiciel: avast! Antivirus
    O42 - Logiciel: iTunes
    O42 - Logiciel: neroxml

    ---\\
    O44 - LFC:Last File Created 02/12/2009 - 10:55:02 ---A- C:\Ad-Report-CLEAN[1].log
    O44 - LFC:Last File Created 03/12/2009 - 11:11:03 -S-A- C:\Windows\bootstat.dat
    O44 - LFC:Last File Created 03/12/2009 - 11:15:10 ---A- C:\Windows\WindowsUpdate.log
    O44 - LFC:Last File Created 04/11/2009 - 16:35:51 ---A- C:\Windows\System32\perfh009.dat
    O44 - LFC:Last File Created 04/11/2009 - 16:36:03 ---A- C:\Windows\System32\PerfStringBackup.INI
    O44 - LFC:Last File Created 04/11/2009 - 16:36:03 ---A- C:\Windows\System32\perfc009.dat
    O44 - LFC:Last File Created 04/11/2009 - 17:32:38 ---A- C:\Windows\System32\perfc00C.dat
    O44 - LFC:Last File Created 04/11/2009 - 17:32:39 ---A- C:\Windows\System32\perfh00C.dat
    O44 - LFC:Last File Created 06/11/2009 - 19:16:05 ---A- C:\Windows\DirectX.log
    O44 - LFC:Last File Created 08/11/2009 - 22:12:42 ---A- C:\Windows\DUMP29cd.tmp
    O44 - LFC:Last File Created 12/11/2009 - 14:06:23 ---A- C:\Windows\WININIT.INI
    O44 - LFC:Last File Created 12/11/2009 - 14:08:18 ---A- C:\Windows\System32\Installer.log
    O44 - LFC:Last File Created 15/11/2009 - 19:56:41 ---A- C:\Windows\ntbtlog.txt
    O44 - LFC:Last File Created 24/11/2009 - 11:16:14 ---A- C:\Windows\PFRO.log
    O44 - LFC:Last File Created 24/11/2009 - 11:35:02 ---A- C:\updatedatfix.log
    O44 - LFC:Last File Created 26/11/2009 - 10:46:57 ---A- C:\Windows\setupact.log
    O44 - LFC:Last File Created 26/11/2009 - 10:46:57 ---A- C:\Windows\setuperr.log
    O44 - LFC:Last File Created 30/11/2009 - 12:36:33 ---A- C:\Ad-Report-SCAN[1].log
    O44 - LFC:Last File Created 30/11/2009 - 16:38:56 ---A- C:\Ad-Report-SCAN[2].log

    ---\\
    O51 - MPSK:{53a3871d-18f9-11dd-b36f-806e6f6e6963}\Shell\AutoRun\command - G:\Autorun.exe

    ---\\
    O63 - Logiciel: HijackThis 2.0.2
    O63 - Logiciel: GenProc

    End of the scan: 303 lines

    ----------------------------------------------------------------------
    Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
    ----------------------------------------------------------------------

    ~~ Fin à 13:34:07 ~~
    0
  3. Narco!4 Messages postés 2446 Statut Contributeur 467
     
    [*] Télécharge combofix (sUBs) http://download.bleepingcomputer.com/sUBs/ComboFix.exe sur ton Bureau
    [*] Double clique combofix.exe et suis les instructions.
    [*] Installe la console de récupération si proposé et continue.
    [*] Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

    NOTE : Le rapport se trouve également ici : C:\Combofix.txt
    0
    1. jeje
       
      ComboFix 09-12-06.A1 - Hp 07/12/2009 11:30.1.1 - x86
      Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.33.1036.18.1015.402 [GMT 1:00]
      Lancé depuis: c:\users\Hp\Downloads\ComboFix.exe
      AV: avast! antivirus 4.8.1169 [VPS 091206-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
      SP: avast! antivirus 4.8.1169 [VPS 091206-1] *disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
      SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      c:\$recycle.bin\S-1-5-21-2008502711-283026248-2233356386-500
      c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
      c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      c:\users\Hp\GenProc.exe

      .
      ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
      .

      -------\Service_Boonty Games


      ((((((((((((((((((((((((((((( Fichiers créés du 2009-11-07 au 2009-12-07 ))))))))))))))))))))))))))))))))))))
      .

      2009-12-07 10:46 . 2009-12-07 10:51 4096 d-----w- c:\users\Hp\AppData\Local\temp
      2009-12-07 10:46 . 2009-12-07 10:46 -------- d-----w- c:\users\Default\AppData\Local\temp
      2009-12-03 14:10 . 2009-12-03 14:10 -------- d-----w- c:\program files\CCleaner
      2009-12-03 12:30 . 2009-12-03 12:30 4096 dc----w- C:\GenProc
      2009-11-30 10:54 . 2009-11-30 11:45 1305703 ----a-w- c:\users\Hp\AD-R.exe
      2009-11-30 10:49 . 2009-12-02 09:55 -------- d-----w- c:\program files\Ad-Remover
      2009-11-29 17:19 . 2009-11-29 17:19 -------- d-----w- c:\users\Hp\AppData\Local\Apps
      2009-11-24 10:34 . 2009-11-25 12:32 4096 d-----w- c:\users\Hp\AppData\Roaming\HpUpdate
      2009-11-24 10:34 . 2009-11-24 10:34 -------- d-----w- c:\windows\Hewlett-Packard
      2009-11-24 09:29 . 2009-11-24 09:29 484976 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtb32C4.tmp.exe
      2009-11-13 05:11 . 2009-08-07 02:24 44768 ----a-w- c:\windows\system32\wups2.dll
      2009-11-13 05:11 . 2009-08-07 02:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
      2009-11-13 05:11 . 2009-08-07 01:45 2421760 ----a-w- c:\windows\system32\wucltux.dll
      2009-11-13 05:11 . 2009-08-07 02:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll
      2009-11-13 05:11 . 2009-08-07 02:24 35552 ----a-w- c:\windows\system32\wups.dll
      2009-11-13 05:11 . 2009-08-07 01:44 87552 ----a-w- c:\windows\system32\wudriver.dll
      2009-11-13 05:11 . 2009-08-07 02:23 575704 ----a-w- c:\windows\system32\wuapi.dll
      2009-11-13 05:11 . 2009-08-06 18:23 171608 ----a-w- c:\windows\system32\wuwebv.dll
      2009-11-13 05:11 . 2009-08-06 17:44 33792 ----a-w- c:\windows\system32\wuapp.exe

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2009-12-07 10:51 . 2008-05-09 15:22 8192 d-----w- c:\users\Hp\AppData\Roaming\LimeWire
      2009-12-07 10:51 . 2008-05-07 13:05 -------- d-----w- c:\users\Hp\AppData\Roaming\OpenOffice.org2
      2009-12-07 10:47 . 2008-05-13 17:06 12 ----a-w- c:\windows\bthservsdp.dat
      2009-12-07 10:20 . 2009-05-07 19:32 4096 d-----w- c:\programdata\Google Updater
      2009-12-03 10:19 . 2008-05-07 13:06 1 ----a-w- c:\users\Hp\AppData\Roaming\OpenOffice.org2\user\uno_packages\cache\stamp.sys
      2009-12-02 09:41 . 2009-08-30 18:33 12288 ----a-w- c:\users\Public\mtwb.dat
      2009-11-26 10:39 . 2006-12-05 08:13 -------- d-----w- c:\program files\HP
      2009-11-23 17:40 . 2006-12-05 08:24 12288 d-----w- c:\program files\Common Files\Symantec Shared
      2009-11-22 19:34 . 2008-06-02 17:39 -------- d-----w- c:\program files\Norton Security Scan
      2009-11-15 18:51 . 2008-04-28 06:12 5892 ----a-w- c:\users\Hp\AppData\Local\d3d9caps.dat
      2009-11-12 13:06 . 2006-12-05 08:07 4096 d--h--w- c:\program files\InstallShield Installation Information
      2009-11-12 13:06 . 2008-05-16 19:48 -------- d-----w- c:\program files\Logitech
      2009-11-08 21:12 . 2008-04-28 05:56 198211180 ----a-w- c:\windows\DUMP29cd.tmp
      2009-11-06 18:20 . 2009-11-06 18:20 -------- d-----w- c:\program files\Microsoft Silverlight
      2009-11-06 18:20 . 2008-05-09 15:04 4096 d-----w- c:\program files\Windows Live
      2009-11-06 18:19 . 2008-05-09 15:12 8192 d-----w- c:\program files\Windows Live Toolbar
      2009-11-06 18:18 . 2009-11-06 18:18 -------- d-----w- c:\program files\Microsoft Sync Framework
      2009-11-06 18:11 . 2009-11-06 18:11 -------- d-----w- c:\program files\Microsoft
      2009-11-06 18:10 . 2009-11-06 18:10 -------- d-----w- c:\program files\Windows Live SkyDrive
      2009-11-06 18:00 . 2009-11-06 17:59 1164624 ----a-w- c:\users\Hp\wlsetup-custom.exe
      2009-11-06 13:21 . 2009-11-06 13:21 -------- d-----w- c:\program files\Common Files\Windows Live
      2009-11-04 16:32 . 2006-12-05 16:48 654486 ----a-w- c:\windows\system32\perfh00C.dat
      2009-11-04 16:32 . 2006-12-05 16:48 118474 ----a-w- c:\windows\system32\perfc00C.dat
      2009-11-02 19:42 . 2009-10-03 00:18 195456 ------w- c:\windows\system32\MpSigStub.exe
      2009-11-02 12:41 . 2008-05-10 14:54 4096 d-----w- c:\program files\MSN Games
      2009-10-28 15:29 . 2009-08-16 17:20 8192 d-----w- c:\users\Hp\AppData\Roaming\Python-Eggs
      2009-10-28 15:19 . 2008-05-09 15:22 28672 d-----w- c:\program files\LimeWire
      2009-10-02 17:05 . 2008-12-11 11:51 688 ----a-w- c:\users\Hp\AppData\Roaming\wklnhst.dat
      2009-10-02 08:37 . 2009-10-28 15:29 61952 ----a-w- c:\users\Hp\AppData\Roaming\Python-Eggs\elisa_plugin_ffmpeg-0.1.101-py2.5.egg-tmp\elisa\plugins\ffmpeg\gstreamer\libgstrmtpsrc.dll
      .

      ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
      REGEDIT4

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
      "WindowsWelcomeCenter"="oobefldr.dll" [2008-01-19 2153472]
      "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
      "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
      "EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-09-03 3342336]
      "ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2005-02-16 221184]
      "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
      "hpsysdrv"="c:\hp\support\hpsysdrv.exe" [2006-09-28 65536]
      "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440]
      "RtHDVCpl"="RtHDVCpl.exe" [2008-01-15 4874240]
      "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 79224]
      "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-03-25 141848]
      "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-03-25 166424]
      "Persistence"="c:\windows\system32\igfxpers.exe" [2008-03-25 133656]
      "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-02-10 148888]
      "NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
      "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
      "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
      "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2008-06-02 178712]
      "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
      "Launcher"="c:\windows\SMINST\launcher.exe" [2006-11-24 44136]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

      c:\users\Hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
      LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2009-9-30 503808]
      OpenOffice.org 2.3.lnk - c:\program files\OpenOffice.org 2.3\program\quickstart.exe [2007-8-17 393216]
      Outil de notification Live Search.lnk - c:\users\Hp\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe [2008-7-22 143360]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "EnableUIADesktopToggle"= 0 (0x0)

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
      @="Service"

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
      @="Service"

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
      "DisableMonitoring"=dword:00000001

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
      "DisableMonitoring"=dword:00000001

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
      "DisableMonitoring"=dword:00000001

      R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [06/05/2008 15:55 75856]
      R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [06/05/2008 15:55 20560]
      R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [06/05/2008 15:55 50768]
      R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista;c:\windows\System32\drivers\netr73.sys [26/02/2008 08:17 493568]
      S3 AVEOFilterDriver;AVEO Camera filter driver;c:\windows\System32\drivers\aveofilter.sys [15/04/2008 23:55 120448]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
      bthsvcs REG_MULTI_SZ BthServ
      .
      ------- Examen supplémentaire -------
      .
      uInternet Settings,ProxyOverride = *.local;localhost
      IE: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
      .
      - - - - ORPHELINS SUPPRIMES - - - -

      HKCU-Run-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      AddRemove-Easy Gif Animator Extension - c:\windows\EasyGifAnimator_Toolbar_Uninstaller_4973.exe _?=c:\program files\Easy Gif Animator Extension



      **************************************************************************

      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2009-12-07 11:49
      Windows 6.0.6001 Service Pack 1 NTFS

      Recherche de processus cachés ...

      Recherche d'éléments en démarrage automatique cachés ...

      Recherche de fichiers cachés ...

      Scan terminé avec succès
      Fichiers cachés: 0

      **************************************************************************
      .
      --------------------- CLES DE REGISTRE BLOQUEES ---------------------

      [HKEY_USERS\S-1-5-21-3562070894-133776502-2678926322-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
      "??"=hex:11,dc,a7,ac,8e,1e,77,75,87,16,0a,74,58,2b,29,9f,01,5e,47,75,02,3f,d7,
      43,7a,2a,a2,ae,f7,06,3c,40,02,bf,04,e3,6f,57,11,6d,dd,19,be,32,86,72,4c,3f,\
      "??"=hex:32,20,11,00,1f,6d,30,d0,66,b4,45,10,6a,9f,e6,4e

      [HKEY_USERS\S-1-5-21-3562070894-133776502-2678926322-1000\Software\SecuROM\License information*]
      "datasecu"=hex:fa,94,10,7a,22,c7,a3,0b,4a,67,c9,9e,cf,7f,79,52,cc,18,91,92,79,
      5d,3d,6e,07,53,64,08,41,36,e7,88,26,10,f7,c1,fa,db,42,95,34,d1,e3,e7,f2,92,\
      "rkeysecu"=hex:c0,af,50,cf,20,f5,8b,38,d2,52,59,5e,f0,89,42,39

      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
      @Denied: (A) (Users)
      @Denied: (A) (Everyone)
      @Allowed: (B 1 2 3 4 5) (S-1-5-20)
      "BlindDial"=dword:00000000
      .
      --------------------- DLLs chargées dans les processus actifs ---------------------

      - - - - - - - > 'Explorer.exe'(3828)
      c:\program files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      .
      ------------------------ Autres processus actifs ------------------------
      .
      c:\program files\Lavasoft\Ad-Aware 2007\aawservice.exe
      c:\program files\Alwil Software\Avast4\aswUpdSv.exe
      c:\program files\Alwil Software\Avast4\ashServ.exe
      c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      c:\program files\Bonjour\mDNSResponder.exe
      c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
      c:\program files\Common Files\LightScribe\LSSrvc.exe
      c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      c:\windows\system32\WUDFHost.exe
      c:\program files\Alwil Software\Avast4\ashMaiSv.exe
      c:\program files\Alwil Software\Avast4\ashWebSv.exe
      c:\windows\RtHDVCpl.exe
      c:\program files\Alwil Software\Avast4\ashDisp.exe
      c:\program files\Windows Media Player\wmpnetwk.exe
      c:\windows\system32\wbem\unsecapp.exe
      c:\windows\system32\igfxsrvc.exe
      c:\windows\ehome\ehmsas.exe
      c:\users\Hp\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
      c:\program files\iPod\bin\iPodService.exe
      .
      **************************************************************************
      .
      Heure de fin: 2009-12-07 12:02 - La machine a redémarré
      ComboFix-quarantined-files.txt 2009-12-07 11:01

      Avant-CF: 15 781 888 000 octets libres
      Après-CF: 15 483 674 624 octets libres

      - - End Of File - - 0B69B4B05C83B279052858C865370A4C
      0