Erreur de chargement rundll

tay38 -  
 tay38 -
erreur de chargement de C:\DOCUME~1\CLIATE~1\LOCALS1\TEMP\jut1tq7w3r.dll
Bjr, j'ai ce message ci-dessus qui s'affiche au démarrage de mon pc.
J'ai eu un virus "violation des droits d'auteur" puis ai fait une désinfection par avira et mbam, et depuis, plus de son, et ce message dc, au démarrage. Merci de votre aide.

39 réponses

  • 1
  • 2
Résumé de la discussion

Une erreur de chargement associée au fichier temporaire jut1tq7w3r.dll apparaît au démarrage après une infection virale et une désinfection qui a laissé le système sans son sous Windows XP. Plusieurs réponses proposent des outils de détection et de nettoyage, notamment ComboFix, avec avertissements sur la désactivation temporaire de l'antivirus, puis la nécessité de ne toucher à rien pendant l'opération. D'autres interventions suggèrent de tester un autre navigateur et de vérifier les éléments de démarrage ainsi que les programmes susceptibles d'être malveillants, en restant prudent sur les clés Run. Enfin, le fil met en évidence l'importance d'évaluer l'impact sur la configuration réseau et les paramètres système, sans aboutir à une solution unique et en restant attentif à d'autres symptômes.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. gen-hackman
     
    salut :

    DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

    ▶ Télécharge List_Kill'em et enregistre le sur ton bureau

    double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

    Laisse coché :

    ♦ Executer Shortcut
    ♦ Executer List_Kill'em

    une fois terminée , clic sur "terminer" et le programme se lancera seul

    choisis l'option Search

    ▶ laisse travailler l'outil

    à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

    ▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"
    0
  2. tay38
     
    List'em by g3n-h@ckm@n 1.7.2.6

    User : Célia Terfas ()
    Update on 01/05/2010 by g3n-h@ckm@n ::::: 17.00
    Start at: 12:18:34 | 02/05/2010

    AMD Sempron(tm) Processor 3100+
    Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
    Internet Explorer 8.0.6001.18702
    Windows Firewall Status : Enabled
    AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]
    AV : avast! antivirus 4.7.1098 [VPS 080420-0] 4.7.1098 [ Enabled | Updated ]

    C:\ -> Disque fixe local | 72,33 Go (25,78 Go free) [ACER] | NTFS
    D:\ -> Disque fixe local | 72,8 Go (71,92 Go free) [ACERDATA] | FAT32
    E:\ -> Disque CD-ROM
    F:\ -> Disque fixe local | 111,79 Go (69,44 Go free) | NTFS
    G:\ -> Disque amovible
    H:\ -> Disque amovible
    I:\ -> Disque amovible
    J:\ -> Disque amovible

    Boot: Normal

    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\Spyware Doctor\pctsAuxs.exe
    C:\Program Files\Spyware Doctor\pctsSvc.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\List_Kill'em\List_Kill'em.exe
    C:\WINDOWS\system32\cmd.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe
    C:\Program Files\List_Kill'em\pv.exe

    ======================
    Keys "Run"
    ======================

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
    SpybotSD TeaTimer REG_SZ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    Google Update REG_SZ "C:\Documents and Settings\Célia Terfas\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    mcexecwin REG_SZ rundll32.exe C:\DOCUME~1\CLIATE~1\LOCALS~1\Temp\jut1tq7w3r.dll, RestoreWindows
    hsf87sdhfush87fsufhuie3fddf REG_SZ C:\DOCUME~1\CLIATE~1\LOCALS~1\Temp\zadzqin2us.exe
    hsf87efjhdsf87f3jfsdi7fhsujfd REG_SZ C:\DOCUME~1\CLIATE~1\LOCALS~1\Temp\avp32.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    IMJPMIG8.1 REG_SZ "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    PHIME2002ASync REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    PHIME2002A REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    VTTimer REG_SZ VTTimer.exe
    VTTrayp REG_SZ VTtrayp.exe
    MediaSync REG_SZ C:\Program Files\Acer\Acer eConsole\MediaSync.exe
    eRecoveryService REG_SZ C:\Acer\Empowering Technology\eRecovery\Monitor.exe
    BigDogPath REG_SZ C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera LTI301P
    NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
    Cmaudio REG_SZ RunDll32 cmicnfg.cpl,CMICtrlWnd
    AudioDeck REG_SZ C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
    EPSON Stylus DX5000 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S1FB.tmp" /EF "HKLM"
    WireLessMouse REG_SZ C:\Program Files\Multimedia Combo Set Driver\StartAutorun.exe MouseDrv.exe
    ISTray REG_SZ "C:\Program Files\Spyware Doctor\pctsTray.exe"
    avgnt REG_SZ "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    SSBkgdUpdate REG_SZ "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    IndexSearch REG_SZ "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
    PPort11reminder REG_SZ "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
    BrMfcWnd REG_SZ C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
    ControlCenter3 REG_SZ C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
    QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask .exe" -atboottime
    UserFaultCheck REG_EXPAND_SZ %systemroot%\system32\dumprep 0 -u

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    =====================
    Other Keys
    =====================

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    dontdisplaylastusername REG_DWORD 0 (0x0)
    legalnoticecaption REG_SZ
    legalnoticetext REG_SZ
    shutdownwithoutlogon REG_DWORD 1 (0x1)
    undockwithoutlogon REG_DWORD 1 (0x1)

    ===============

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    NoDriveTypeAutoRun REG_DWORD 145 (0x91)
    NoFolderOptions REG_DWORD 1 (0x1)

    ===============

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
    HonorAutoRunSetting REG_DWORD 1 (0x1)

    ===============

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    AppInit_DLLS REG_SZ

    ===============

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    AutoRestartShell REG_DWORD 1 (0x1)
    DefaultDomainName REG_SZ ACER-0912CA301A
    DefaultUserName REG_SZ Célia Terfas
    LegalNoticeCaption REG_SZ
    LegalNoticeText REG_SZ
    PowerdownAfterShutdown REG_SZ 0
    ReportBootOk REG_SZ 1
    Shell REG_SZ Explorer.exe
    ShutdownWithoutLogon REG_SZ 0
    System REG_SZ
    VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
    SfcQuota REG_DWORD -1 (0xffffffff)
    allocatecdroms REG_SZ 0
    allocatedasd REG_SZ 0
    allocatefloppies REG_SZ 0
    cachedlogonscount REG_SZ 10
    forceunlocklogon REG_DWORD 0 (0x0)
    passwordexpirywarning REG_DWORD 14 (0xe)
    scremoveoption REG_SZ 0
    AllowMultipleTSSessions REG_DWORD 1 (0x1)
    UIHost REG_EXPAND_SZ logonui.exe
    LogonType REG_DWORD 1 (0x1)
    Background REG_SZ 0 0 0
    DebugServerCommand REG_SZ no
    SFCDisable REG_DWORD 0 (0x0)
    WinStationsDisabled REG_SZ 0
    HibernationPreviouslyEnabled REG_DWORD 1 (0x1)
    ShowLogonOptions REG_DWORD 0 (0x0)
    AltDefaultUserName REG_SZ Célia Terfas
    AltDefaultDomainName REG_SZ ACER-0912CA301A
    ChangePasswordUseKerberos REG_DWORD 1 (0x1)
    Userinit REG_SZ C:\WINDOWS\system32\userinit.exe,

    ===============

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

    ===============

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    {AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ

    ===============

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
    C:\Program Files\Acer\Acer eConsole\MediaSync.exe REG_SZ C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer
    C:\Program Files\Acer\Acer eConsole\eConsole.exe REG_SZ C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole
    C:\Program Files\Acer\Acer eConsole\MediaServerService.exe REG_SZ C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server
    C:\Program Files\Messenger\msmsgs.exe REG_SZ C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
    C:\Program Files\MSN Messenger\msncall.exe REG_SZ C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)
    C:\Program Files\eMule\emule.exe REG_SZ C:\Program Files\eMule\emule.exe:*:Disabled:eMule
    C:\Program Files\IncrediMail\bin\IMApp.exe REG_SZ C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail
    C:\Program Files\IncrediMail\bin\IncMail.exe REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail
    C:\Program Files\IncrediMail\bin\ImpCnt.exe REG_SZ C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail
    C:\Program Files\MSN Messenger\livecall.exe REG_SZ C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
    C:\Program Files\LimeWire\LimeWire.exe REG_SZ C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
    %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
    C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe REG_SZ C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
    C:\Program Files\Yahoo!\Messenger\YServer.exe REG_SZ C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server
    C:\Program Files\VideoLAN\VLC\vlc.exe REG_SZ C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player
    C:\Program Files\eMulle\emule.exe REG_SZ C:\Program Files\eMulle\emule.exe:*:Enabled:eMule
    C:\Program Files\eMule49\emule.exe REG_SZ C:\Program Files\eMule49\emule.exe:*:Enabled:eMule
    C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
    C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare
    C:\Program Files\Internet Explorer\iexplore.exe REG_SZ C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
    C:\Program Files\MSN Messenger\msncall.exe REG_SZ C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)
    C:\Program Files\MSN Messenger\livecall.exe REG_SZ C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
    %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
    C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
    C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

    ===============
    ActivX controls
    ===============

    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{0972B098-DEE9-4279-AC7E-4BAAA029102D}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{17492023-C23A-453E-A040-C7C580BBF700}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{1E3F1348-4370-4BBE-A67A-CC7ED824CA85}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{20A60F0D-9AFA-4515-A0FD-83BD84642501}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{2917297F-F02B-4B9D-81DF-494B6333150B}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{32C3FEAE-0877-4767-8C20-62A5829A0945}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{4F1E5B1A-2A80-42CA-8532-2D05CB959537}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{56393399-041A-4650-94C7-13DFCB1F4665}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D6F45B3-9043-443D-A792-115447494D24}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5ED80217-570B-4DA9-BF44-BE107C0EC166}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{867E13F2-7F31-44FB-AC97-CD38E0DC46EF}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{88764F69-3831-4EC1-B40B-FF21D8381345}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8E0D4DE5-3180-4024-A327-4DFAD1796A8D}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{97E71027-0BA2-44F2-97DB-F84D808ED0B6}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{B8BE5E93-A60C-4D26-A2DC-220313175592}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{C3F79A2B-B9B4-4A66-B012-3EE46475B072}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{E6187999-9FEC-46A1-A20F-F4CA977D5643}]
    [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{F6BF0D00-0B2A-4A75-BF7B-F385591623AF}]

    ===============
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{1B320010-9D3D-429F-B71B-A4A30EA1E956}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{6f917037-4644-4742-9285-19af7cb0a8a6}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{0291E591-EA41-4c82-8106-3DC6CE7F7664}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{233C1507-6A77-46A4-9443-F871F945D258}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{30528230-99F7-4BB4-88D8-FA1D4F56A2AB}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{347B0667-C7ED-429B-BDE3-CC8D3BACAA31}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{411EDCF7-755D-414E-A74B-3DCD6583F589}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8b15971b-5355-4c82-8c07-7e181ea07608}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{94de52c8-2d59-4f1b-883e-79663d2d9a8c}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9A394342-4A68-4EBA-85A6-55B559F4E700}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}]
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}]

    ==============
    BHO :
    ======

    [<NO NAME> REG_SZ ]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{28D3F4C6-4C53-4945-A594-04A03A48E0B3}]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{A2BA40A0-74F1-52BD-F411-00B15A2C8953}]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]

    ===
    DNS
    ===

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{913B0503-91B4-4D06-8A9B-25138218CE71}: NameServer=213.36.80.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{913B0503-91B4-4D06-8A9B-25138218CE71}: NameServer=213.36.80.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{913B0503-91B4-4D06-8A9B-25138218CE71}: NameServer=213.36.80.1
    0
  3. tay38
     
    ================
    Internet Explorer :
    ================

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    Start Page REG_SZ http://go.microsoft.com/fwlink/?LinkId=69157
    Local Page REG_SZ C:\WINDOWS\system32\blank.htm
    Default_Search_URL REG_SZ http://go.microsoft.com/fwlink/?LinkId=54896
    Default_Page_URL REG_SZ http://go.microsoft.com/fwlink/?LinkId=69157
    Search Page REG_SZ http://go.microsoft.com/fwlink/?LinkId=54896

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    Start Page REG_SZ https://www.google.fr/?gws_rd=ssl
    Local Page REG_SZ C:\WINDOWS\system32\blank.htm
    Search Page REG_SZ https://www.google.com/?gws_rd=ssl

    ========
    Services
    ========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

    Ndisuio : 0x3 ( OK = 3 )
    EapHost : 0x3 ( OK = 2 )
    SharedAccess : 0x2 ( OK = 2 )
    wuauserv : 0x2 ( OK = 2 )

    ========
    Safemode
    ========

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot : OK !!
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal : OK !!
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network : OK !!

    =========
    Atapi.sys
    =========

    C:\WINDOWS\$NtServicePackUninstall$\atapi.sys :
    MD5 :: [cdfe4411a69c224bd1d11b2da92dac51]
    SHA256 :: [0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d]

    C:\WINDOWS\ServicePackFiles\i386\atapi.sys :
    MD5 :: [9f3a2f5aa6875c72bf062c712cfa2674]
    SHA256 :: [b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9]

    C:\WINDOWS\system32\drivers\atapi.sys :
    MD5 :: [9f3a2f5aa6875c72bf062c712cfa2674]
    SHA256 :: [b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9]

    Référence :
    ==========

    Win 2000_SP2 : ff953a8f08ca3f822127654375786bbe
    Win 2000_SP4 : 8c718aa8c77041b3285d55a0ce980867
    Win XP_32b : a64013e98426e1877cb653685c5c0009
    Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
    Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
    Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
    Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
    Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
    Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
    Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
    Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C
    Windows 7_32b_Ultimate : 338c86357871c167a96ab976519bf59e

    =======
    Drive :
    =======

    D'fragmenteur de disque Windows
    Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

    Rapport d'analyse
    72,33 Go total, 25,78 Go libre (35%), 30% fragment' (fragmentation du fichier 59%)

    Vous devriez d'fragmenter ce volume.

    ¤¤¤¤¤¤¤¤¤¤ Files/folders :

    Present !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
    Present !! : C:\WINDOWS\System32\drivers\Sonyhcp.dll"
    Present !! : C:\WINDOWS\System32\SET*.tmp
    Present !! : C:\WINDOWS\Tasks\At1.job
    Present !! : C:\WINDOWS\Tasks\At2.job
    Present !! : C:\WINDOWS\Tasks\At3.job
    Present !! : C:\WINDOWS\Tasks\At4.job
    Present !! : C:\WINDOWS\Tasks\At5.job
    Present !! : C:\WINDOWS\Tasks\At6.job
    Present !! : C:\WINDOWS\Tasks\At7.job
    Present !! : C:\WINDOWS\Tasks\At8.job
    Present !! : C:\WINDOWS\Tasks\At9.job
    Present !! : C:\WINDOWS\Tasks\At1.job
    Present !! : C:\WINDOWS\Tasks\At10.job
    Present !! : C:\WINDOWS\Tasks\At11.job
    Present !! : C:\WINDOWS\Tasks\At12.job
    Present !! : C:\WINDOWS\Tasks\At13.job
    Present !! : C:\WINDOWS\Tasks\At14.job
    Present !! : C:\WINDOWS\Tasks\At15.job
    Present !! : C:\WINDOWS\Tasks\At16.job
    Present !! : C:\WINDOWS\Tasks\At17.job
    Present !! : C:\WINDOWS\Tasks\At18.job
    Present !! : C:\WINDOWS\Tasks\At19.job
    Present !! : C:\WINDOWS\Tasks\At2.job
    Present !! : C:\WINDOWS\Tasks\At20.job
    Present !! : C:\WINDOWS\Tasks\At21.job
    Present !! : C:\WINDOWS\Tasks\At22.job
    Present !! : C:\WINDOWS\Tasks\At23.job
    Present !! : C:\WINDOWS\Tasks\At24.job
    Present !! : C:\WINDOWS\Tasks\At25.job
    Present !! : C:\WINDOWS\Tasks\At26.job
    Present !! : C:\WINDOWS\Tasks\At27.job
    Present !! : C:\WINDOWS\Tasks\At28.job
    Present !! : C:\WINDOWS\Tasks\At29.job
    Present !! : C:\WINDOWS\Tasks\At3.job
    Present !! : C:\WINDOWS\Tasks\At30.job
    Present !! : C:\WINDOWS\Tasks\At31.job
    Present !! : C:\WINDOWS\Tasks\At32.job
    Present !! : C:\WINDOWS\Tasks\At33.job
    Present !! : C:\WINDOWS\Tasks\At34.job
    Present !! : C:\WINDOWS\Tasks\At35.job
    Present !! : C:\WINDOWS\Tasks\At36.job
    Present !! : C:\WINDOWS\Tasks\At37.job
    Present !! : C:\WINDOWS\Tasks\At38.job
    Present !! : C:\WINDOWS\Tasks\At39.job
    Present !! : C:\WINDOWS\Tasks\At4.job
    Present !! : C:\WINDOWS\Tasks\At40.job
    Present !! : C:\WINDOWS\Tasks\At41.job
    Present !! : C:\WINDOWS\Tasks\At42.job
    Present !! : C:\WINDOWS\Tasks\At43.job
    Present !! : C:\WINDOWS\Tasks\At44.job
    Present !! : C:\WINDOWS\Tasks\At45.job
    Present !! : C:\WINDOWS\Tasks\At46.job
    Present !! : C:\WINDOWS\Tasks\At47.job
    Present !! : C:\WINDOWS\Tasks\At48.job
    Present !! : C:\WINDOWS\Tasks\At49.job
    Present !! : C:\WINDOWS\Tasks\At5.job
    Present !! : C:\WINDOWS\Tasks\At50.job
    Present !! : C:\WINDOWS\Tasks\At51.job
    Present !! : C:\WINDOWS\Tasks\At52.job
    Present !! : C:\WINDOWS\Tasks\At53.job
    Present !! : C:\WINDOWS\Tasks\At54.job
    Present !! : C:\WINDOWS\Tasks\At55.job
    Present !! : C:\WINDOWS\Tasks\At56.job
    Present !! : C:\WINDOWS\Tasks\At57.job
    Present !! : C:\WINDOWS\Tasks\At58.job
    Present !! : C:\WINDOWS\Tasks\At59.job
    Present !! : C:\WINDOWS\Tasks\At6.job
    Present !! : C:\WINDOWS\Tasks\At60.job
    Present !! : C:\WINDOWS\Tasks\At61.job
    Present !! : C:\WINDOWS\Tasks\At62.job
    Present !! : C:\WINDOWS\Tasks\At63.job
    Present !! : C:\WINDOWS\Tasks\At64.job
    Present !! : C:\WINDOWS\Tasks\At65.job
    Present !! : C:\WINDOWS\Tasks\At66.job
    Present !! : C:\WINDOWS\Tasks\At67.job
    Present !! : C:\WINDOWS\Tasks\At68.job
    Present !! : C:\WINDOWS\Tasks\At69.job
    Present !! : C:\WINDOWS\Tasks\At7.job
    Present !! : C:\WINDOWS\Tasks\At70.job
    Present !! : C:\WINDOWS\Tasks\At71.job
    Present !! : C:\WINDOWS\Tasks\At72.job
    Present !! : C:\WINDOWS\Tasks\At8.job
    Present !! : C:\WINDOWS\Tasks\At9.job
    Present !! : C:\WINDOWS\Temp\23544a79ec967b0a961b9e23.tmp
    Present !! : C:\WINDOWS\Temp\2dbf55e2f470901cbd9a5520.tmp
    Present !! : C:\WINDOWS\Temp\401150febf68dc4b170fa1a.tmp
    Present !! : C:\WINDOWS\Temp\42bb90bf3f024afd3987e8f5.tmp
    Present !! : C:\WINDOWS\Temp\474ad1a0b8b586af33ce215d.tmp
    Present !! : C:\WINDOWS\Temp\4a8610f3b7a565b04ced8850.tmp
    Present !! : C:\WINDOWS\Temp\62aacd71bedfe7d5e4ef90db.tmp
    Present !! : C:\WINDOWS\Temp\706b26eda3fbc4e4ed2ed017.tmp
    Present !! : C:\WINDOWS\Temp\8653dfe07151122e9d79647a.tmp
    Present !! : C:\WINDOWS\Temp\b0339b17551f48f651eb5bfa.tmp
    Present !! : C:\WINDOWS\Temp\c820671342a5057f2659bc2c.tmp
    Present !! : C:\WINDOWS\Temp\cf2a89d18df87bc4f5b0c9c.tmp
    Present !! : C:\WINDOWS\Temp\de7dfed05801da759f58fbbc.tmp
    Present !! : C:\WINDOWS\Temp\fla24.tmp
    Present !! : C:\WINDOWS\Temp\JET217D.tmp
    Present !! : C:\WINDOWS\Temp\JET4D50.tmp
    Present !! : C:\WINDOWS\Temp\JET4DAD.tmp
    Present !! : C:\WINDOWS\Temp\JET5FAF.tmp
    Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\GDIPFONTCACHEV1.DAT
    Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\wklnhst.dat
    Present !! : C:\Documents and Settings\C'lia Terfas\Application data\inst.exe
    Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\pcouffin.inf
    Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\pcouffin.log
    Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\GDIPFONTCACHEV1.DAT
    Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\wklnhst.dat
    Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\inst.exe

    ¤¤¤¤¤¤¤¤¤¤ Keys :

    Present !! : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\hsf87efjhdsf87f3jfsdi7fhsujfd
    Present !! : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\hsf87sdhfush87fsufhuie3fddf
    Present !! : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\mcexecwin
    Present !! : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
    Present !! : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions
    Present !! : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions
    Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
    Present !! : "HKCU\Software\Antimalware Doctor Inc"
    Present !! : "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor"
    Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
    Present !! : "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A2BA40A0-74F1-52BD-F411-00B15A2C8953}"
    Present !! : HKCR\secfile
    Present !! : HKCU\SOFTWARE\IGB
    Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a2ba40a0-74f1-52bd-f411-00b15a2c8953}

    ============

    catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-05-02 14:22:59
    Windows 5.1.2600 Service Pack 3 FAT NTAPI

    detected NTDLL code modification:
    ZwClose

    scanning hidden processes ...

    IPC error: 2 Le fichier spécifié est introuvable.
    scanning hidden services ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 0

    Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

    device: opened successfully
    user: MBR read successfully
    called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x860AEEE4]<<
    kernel: MBR read successfully
    user & kernel MBR OK
    copy of MBR has been found in sector 37 !

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    FirstRunDisabled REG_DWORD 1 (0x1)
    AntiVirusOverride REG_DWORD 0 (0x0)
    FirewallOverride REG_DWORD 0 (0x0)
    AntiVirusDisableNotify REG_DWORD 0 (0x0)
    FirewallDisableNotify REG_DWORD 0 (0x0)
    UpdatesDisableNotify REG_DWORD 0 (0x0)

    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

    End of scan : 14:23:02,73
    0
  4. tay38
     
    plus personne?? oui je suis pressée je sais!!
    En tous cas, merci de m'aider!
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gen-hackman
     
    ▶ Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
    mais cette fois-ci :

    ▶ choisis l'Option Clean

    ton PC va redemarrer,

    laisse travailler l'outil.

    en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

    ▶ colle le contenu dans ta reponse
    0
  7. tay38
     
    Alors impossible de faire le "clean", une fenêtre apparaît, me disant "arrêt système" pui une autre qui veut me redémarrer l'ordi (teminer maintenant)
    C'est un blaster c'est ça?
    Que puis -je faire?
    J'ai aussi un soucis avec rundll.
    0
  8. gen-hackman
     
    non c'est le logiciel qui fait redemarrer le pc c'est expliqué dans l'enoncé
    0
  9. tay38
     
    oui je m'en suis aperçu après avoir posté... mais je n'ai aucun rapport, il ne se passe rien au redémarrage.
    Et là, la barre de tâches grise, à l'ancienne on dirait.
    0
  10. gen-hackman
     
    double clique sur :

    C:\Program Files\List_Kill'em\del_reg.bat (le ".bat" peut etre invisible)
    0
  11. gen-hackman
     
    sur ton bureau du nom de Kill'em.txt :)
    0
  12. tay38
     
    Désolée, je ne suis vraiment pas douée...
    Merci à toi en tous cas, je te poste ça demain, j'ai éteins l'ordi en question.
    Bonne nuit.
    0
  13. tay38
     
    An unexpected error has been detected by Java Runtime Environment:
    #
    # EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x255a255a, pid=3580, tid=2420
    #
    # Java VM: Java HotSpot(TM) Client VM (1.6.0_03-b05 mixed mode)
    # Problematic frame:
    # C 0x255a255a
    #
    # If you would like to submit a bug report, please visit:
    # https://bugreport.java.com/bugreport/crash.jsp
    #

    --------------- T H R E A D ---------------

    Current thread (0x18f78400): JavaThread "thread applet-AppletX" [_thread_in_native, id=2420]

    siginfo: ExceptionCode=0xc0000005, ExceptionInformation=0x00000008 0x255a255a

    Registers:
    EAX=0x00000000, EBX=0x218fcb58, ECX=0x174e7d70, EDX=0x00000000
    ESP=0x1954f9cc, EBP=0x255a255a, ESI=0x218fcb58, EDI=0x18f78400
    EIP=0x255a255a, EFLAGS=0x00210246

    Top of Stack: (sp=0x1954f9cc)
    0x1954f9cc: 0000001a 00000085 000002d4 1954f9d8
    0x1954f9dc: 218fcb58 1954fa0c 218fd220 00000000
    0x1954f9ec: 218fcb58 00000000 1954fa08 1954fa34
    0x1954f9fc: 14a12d93 00000000 14a18429 1b477b70
    0x1954fa0c: 1b4830c0 1b4830c0 1954fa14 218fcab7
    0x1954fa1c: 1954fa44 218fd220 00000000 218fcad8
    0x1954fa2c: 1954fa08 1954fa40 1954fa68 14a12cb1
    0x1954fa3c: 1b48bbe8 1b477b70 1b4830c0 1954fa48

    Instructions: (pc=0x255a255a)
    0x255a254a:
    [error occurred during error reporting, step 100, id 0xc0000005]

    Stack: [0x19450000,0x19550000), sp=0x1954f9cc, free space=1022k
    Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
    C 0x255a255a

    Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
    j com.sun.media.sound.HeadspaceSoundbank.nOpenResource(Ljava/lang/String;)J+0
    j com.sun.media.sound.HeadspaceSoundbank.initialize(Ljava/lang/String;)V+7
    j com.sun.media.sound.HeadspaceSoundbank.<init>(Ljava/net/URL;)V+89
    j com.sun.media.sound.HsbParser.getSoundbank(Ljava/net/URL;)Ljavax/sound/midi/Soundbank;+5
    j javax.sound.midi.MidiSystem.getSoundbank(Ljava/net/URL;)Ljavax/sound/midi/Soundbank;+36
    j AppletX.init()V+150
    j sun.applet.AppletPanel.run()V+205
    j java.lang.Thread.run()V+11
    v ~StubRoutines::call_stub

    --------------- P R O C E S S ---------------

    Java Threads: ( => current thread )
    0x16ab2400 JavaThread "Java Sound Event Dispatcher" daemon [_thread_blocked, id=760]
    0x1756e000 JavaThread "thread applet-myf.y.AppletX.class" [_thread_in_native, id=3868]
    =>0x18f78400 JavaThread "thread applet-AppletX" [_thread_in_native, id=2420]
    0x1753b800 JavaThread "CacheCleanUpThread" daemon [_thread_blocked, id=196]
    0x1752d400 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3352]
    0x1751c000 JavaThread "AWT-Windows" daemon [_thread_in_native, id=3200]
    0x17518800 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=2960]
    0x16a9f800 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=256]
    0x16a9ac00 JavaThread "CompilerThread0" daemon [_thread_blocked, id=2656]
    0x16a99800 JavaThread "Attach Listener" daemon [_thread_blocked, id=1144]
    0x16a98c00 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3416]
    0x16a8b000 JavaThread "Finalizer" daemon [_thread_blocked, id=3084]
    0x16a86800 JavaThread "Reference Handler" daemon [_thread_blocked, id=3144]

    Other Threads:
    0x16a82000 VMThread [id=3608]
    0x16ac2400 WatcherThread [id=1724]

    VM state:not at safepoint (normal execution)

    VM Mutex/Monitor currently owned by a thread: None

    Heap
    def new generation total 5568K, used 4209K [0x1b070000, 0x1b670000, 0x1b7d0000)
    eden space 4992K, 84% used [0x1b070000, 0x1b48c438, 0x1b550000)
    from space 576K, 0% used [0x1b5e0000, 0x1b5e00c0, 0x1b670000)
    to space 576K, 0% used [0x1b550000, 0x1b550000, 0x1b5e0000)
    tenured generation total 72860K, used 47810K [0x1b7d0000, 0x1fef7000, 0x21070000)
    the space 72860K, 65% used [0x1b7d0000, 0x1e680bf8, 0x1e680c00, 0x1fef7000)
    compacting perm gen total 12288K, used 8850K [0x21070000, 0x21c70000, 0x25070000)
    the space 12288K, 72% used [0x21070000, 0x21914af8, 0x21914c00, 0x21c70000)
    No shared spaces configured.

    Dynamic libraries:
    0x00400000 - 0x0049c000 C:\Program Files\Internet Explorer\iexplore.exe
    0x7c910000 - 0x7c9c9000 C:\WINDOWS\system32\ntdll.dll
    0x7c800000 - 0x7c906000 C:\WINDOWS\system32\kernel32.dll
    0x77da0000 - 0x77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
    0x77e50000 - 0x77ee2000 C:\WINDOWS\system32\RPCRT4.dll
    0x77fc0000 - 0x77fd1000 C:\WINDOWS\system32\Secur32.dll
    0x7e390000 - 0x7e421000 C:\WINDOWS\system32\USER32.dll
    0x77ef0000 - 0x77f39000 C:\WINDOWS\system32\GDI32.dll
    0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
    0x77f40000 - 0x77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
    0x7c9d0000 - 0x7d1f5000 C:\WINDOWS\system32\SHELL32.dll
    0x774a0000 - 0x775dd000 C:\WINDOWS\system32\ole32.dll
    0x40b40000 - 0x40d28000 C:\WINDOWS\system32\iertutil.dll
    0x45180000 - 0x452b3000 C:\WINDOWS\system32\urlmon.dll
    0x770e0000 - 0x7716b000 C:\WINDOWS\system32\OLEAUT32.dll
    0x5cea0000 - 0x5cec6000 C:\WINDOWS\system32\ShimEng.dll
    0x715c0000 - 0x71639000 C:\WINDOWS\AppPatch\AcLayers.DLL
    0x76960000 - 0x76a16000 C:\WINDOWS\system32\USERENV.dll
    0x72f50000 - 0x72f76000 C:\WINDOWS\system32\WINSPOOL.DRV
    0x76320000 - 0x7633d000 C:\WINDOWS\system32\IMM32.DLL
    0x62dc0000 - 0x62dc9000 C:\WINDOWS\system32\LPK.DLL
    0x753c0000 - 0x7542b000 C:\WINDOWS\system32\USP10.dll
    0x77390000 - 0x77493000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
    0x58b50000 - 0x58bea000 C:\WINDOWS\system32\comctl32.dll
    0x636e0000 - 0x63708000 C:\Program Files\Spyware Doctor\smumhook.dll
    0x76c40000 - 0x76c68000 C:\WINDOWS\system32\imagehlp.dll
    0x404a0000 - 0x40586000 C:\WINDOWS\system32\WININET.dll
    0x009c0000 - 0x009c9000 C:\WINDOWS\system32\Normaliz.dll
    0x71990000 - 0x719d0000 C:\WINDOWS\system32\mswsock.dll
    0x719f0000 - 0x71a07000 C:\WINDOWS\system32\WS2_32.dll
    0x719e0000 - 0x719e8000 C:\WINDOWS\system32\WS2HELP.dll
    0x71a10000 - 0x71a1a000 C:\WINDOWS\system32\wsock32.dll
    0x62e40000 - 0x62e99000 C:\WINDOWS\system32\hnetcfg.dll
    0x719d0000 - 0x719d8000 C:\WINDOWS\System32\wshtcpip.dll
    0x40d30000 - 0x417c3000 C:\WINDOWS\system32\IEFRAME.dll
    0x76340000 - 0x7638a000 C:\WINDOWS\system32\comdlg32.dll
    0x00ef0000 - 0x00ef6000 C:\Program Files\Internet Explorer\xpshims.dll
    0x5b090000 - 0x5b0c8000 C:\WINDOWS\system32\uxtheme.dll
    0x74690000 - 0x746dc000 C:\WINDOWS\system32\MSCTF.dll
    0x01af0000 - 0x01dca000 C:\WINDOWS\system32\xpsp2res.dll
    0x76f80000 - 0x76fff000 C:\WINDOWS\system32\CLBCATQ.DLL
    0x77000000 - 0x770d4000 C:\WINDOWS\system32\COMRes.dll
    0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
    0x45380000 - 0x453c0000 C:\Program Files\Internet Explorer\ieproxy.dll
    0x778e0000 - 0x779d8000 C:\WINDOWS\system32\SETUPAPI.dll
    0x75d30000 - 0x75dc1000 C:\WINDOWS\system32\MLANG.dll
    0x77b50000 - 0x77b72000 C:\WINDOWS\system32\apphelp.dll
    0x75140000 - 0x7516e000 C:\WINDOWS\system32\msctfime.ime
    0x62900000 - 0x629cb000 C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
    0x76ae0000 - 0x76b0f000 C:\WINDOWS\system32\WINMM.dll
    0x76310000 - 0x76315000 C:\WINDOWS\system32\MSIMG32.dll
    0x76d10000 - 0x76d29000 C:\WINDOWS\system32\iphlpapi.dll
    0x6fee0000 - 0x6ff35000 C:\WINDOWS\system32\NETAPI32.dll
    0x76e90000 - 0x76ecc000 C:\WINDOWS\system32\RASAPI32.dll
    0x76e40000 - 0x76e52000 C:\WINDOWS\system32\rasman.dll
    0x76e60000 - 0x76e8f000 C:\WINDOWS\system32\TAPI32.dll
    0x76e30000 - 0x76e3e000 C:\WINDOWS\system32\rtutils.dll
    0x77c40000 - 0x77c65000 C:\WINDOWS\system32\msv1_0.dll
    0x76730000 - 0x7673c000 C:\WINDOWS\system32\cryptdll.dll
    0x68000000 - 0x68036000 C:\WINDOWS\system32\rsaenh.dll
    0x72220000 - 0x72225000 C:\WINDOWS\system32\sensapi.dll
    0x77210000 - 0x772c1000 C:\WINDOWS\system32\SXS.DLL
    0x02990000 - 0x029b0000 c:\windows\system32\omghxuq.dll
    0x76ba0000 - 0x76bab000 C:\WINDOWS\system32\psapi.dll
    0x76ed0000 - 0x76ef7000 C:\WINDOWS\system32\dnsapi.dll
    0x5c390000 - 0x5c3a3000 C:\WINDOWS\system32\srclient.dll
    0x692c0000 - 0x692ee000 C:\WINDOWS\system32\framedyn.dll
    0x74bf0000 - 0x74c1c000 C:\WINDOWS\system32\oleacc.dll
    0x76010000 - 0x76075000 C:\WINDOWS\system32\MSVCP60.dll
    0x10000000 - 0x1005b000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    0x7d200000 - 0x7d4bc000 C:\WINDOWS\system32\msi.dll
    0x63000000 - 0x6305d000 C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTBM.dll
    0x40230000 - 0x4038a000 C:\WINDOWS\system32\msxml6.dll
    0x70de0000 - 0x70df3000 C:\WINDOWS\system32\asycfilt.dll
    0x76f60000 - 0x76f68000 C:\WINDOWS\System32\winrnr.dll
    0x76f10000 - 0x76f3d000 C:\WINDOWS\system32\WLDAP32.dll
    0x76f70000 - 0x76f76000 C:\WINDOWS\system32\rasadhlp.dll
    0x71ca0000 - 0x71cbb000 C:\WINDOWS\system32\actxprxy.dll
    0x40590000 - 0x40b3f000 C:\WINDOWS\system32\mshtml.dll
    0x038f0000 - 0x03919000 C:\WINDOWS\system32\msls31.dll
    0x72ea0000 - 0x72f0f000 C:\WINDOWS\system32\ieapfltr.dll
    0x779e0000 - 0x77a77000 C:\WINDOWS\system32\CRYPT32.dll
    0x77a80000 - 0x77a92000 C:\WINDOWS\system32\MSASN1.dll
    0x74660000 - 0x7468a000 C:\WINDOWS\system32\msimtf.dll
    0x76be0000 - 0x76c0e000 C:\WINDOWS\system32\wintrust.dll
    0x76790000 - 0x767b8000 C:\WINDOWS\system32\schannel.dll
    0x46fe0000 - 0x47001000 C:\WINDOWS\system32\XmlLite.dll
    0x68100000 - 0x68126000 C:\WINDOWS\system32\dssenh.dll
    0x77650000 - 0x77671000 C:\WINDOWS\system32\NTMARTA.DLL
    0x71b50000 - 0x71b63000 C:\WINDOWS\system32\SAMLIB.dll
    0x431d0000 - 0x431ff000 C:\WINDOWS\system32\iepeers.dll
    0x403e0000 - 0x40494000 c:\windows\system32\jscript.dll
    0x1b000000 - 0x1b00c000 C:\WINDOWS\system32\ImgUtil.dll
    0x1b060000 - 0x1b06e000 C:\WINDOWS\system32\pngfilt.dll
    0x07a00000 - 0x07e88000 C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx
    0x73a80000 - 0x73a95000 C:\WINDOWS\system32\mscms.dll
    0x748f0000 - 0x74a13000 C:\WINDOWS\system32\msxml3.dll
    0x6d8f0000 - 0x6d8fa000 C:\WINDOWS\system32\ddrawex.dll
    0x736b0000 - 0x736fb000 C:\WINDOWS\system32\DDRAW.dll
    0x73b10000 - 0x73b16000 C:\WINDOWS\system32\DCIMAN32.dll
    0x73250000 - 0x732ba000 c:\windows\system32\vbscript.dll
    0x6d120000 - 0x6d128000 C:\WINDOWS\system32\dispex.dll
    0x0cdf0000 - 0x0ce20000 C:\WINDOWS\system32\libssl32.dll
    0x0ce20000 - 0x0cf1b000 C:\WINDOWS\system32\LIBEAY32.dll
    0x7c360000 - 0x7c3b6000 C:\WINDOWS\system32\MSVCR71.dll
    0x79000000 - 0x79046000 C:\WINDOWS\system32\mscoree.dll
    0x63f00000 - 0x63f0c000 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    0x78130000 - 0x781cb000 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
    0x6d7c0000 - 0x6d839000 C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    0x6d6b0000 - 0x6d6d1000 C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
    0x6d4a0000 - 0x6d4bb000 C:\Program Files\Java\jre1.6.0_03\bin\jpiexp.dll
    0x6d250000 - 0x6d261000 C:\Program Files\Java\jre1.6.0_03\bin\deploy.dll
    0x6d4f0000 - 0x6d514000 C:\Program Files\Java\jre1.6.0_03\bin\jpishare.dll
    0x147c0000 - 0x14a0a000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\client\jvm.dll
    0x6d310000 - 0x6d318000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\hpi.dll
    0x6d770000 - 0x6d77c000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\verify.dll
    0x6d3b0000 - 0x6d3cf000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\java.dll
    0x6d7b0000 - 0x6d7bf000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\zip.dll
    0x17310000 - 0x174d3000 C:\Program Files\Java\jre1.6.0_03\bin\awt.dll
    0x6d2b0000 - 0x6d303000 C:\Program Files\Java\jre1.6.0_03\bin\fontmanager.dll
    0x6d480000 - 0x6d498000 C:\Program Files\Java\jre1.6.0_03\bin\jpicom.dll
    0x7d4d0000 - 0x7d4f2000 C:\WINDOWS\system32\DHCPCSVC.DLL
    0x77cd0000 - 0x77d03000 C:\WINDOWS\system32\netman.dll
    0x76cf0000 - 0x76d08000 C:\WINDOWS\system32\MPRAPI.dll
    0x77c90000 - 0x77cc2000 C:\WINDOWS\system32\ACTIVEDS.dll
    0x76dc0000 - 0x76de5000 C:\WINDOWS\system32\adsldpc.dll
    0x76ac0000 - 0x76ad1000 C:\WINDOWS\system32\ATL.DLL
    0x76390000 - 0x76539000 C:\WINDOWS\system32\netshell.dll

    VM Arguments:
    jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE16~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE16~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.6.0_03 -Djavaplugin.nodotversion=160_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE16~1.0_0 -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE16~1.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE16~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE16~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.6.0_03 -Djavaplugin.nodotversion=160_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE16~1.0_0
    java_command: <unknown>
    Launcher Type: generic

    Environment Variables:
    CLASSPATH=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
    PATH=C:\PROGRA~1\Java\JRE16~1.0_0\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Fichiers communs\Teleca Shared;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\QuickTime\QTSystem\;;C:\PROGRA~1\FICHIE~1\MUVEET~1\030625;.
    USERNAME=Célia Terfas
    OS=Windows_NT
    PROCESSOR_IDENTIFIER=x86 Family 15 Model 44 Stepping 2, AuthenticAMD

    --------------- S Y S T E M ---------------

    OS: Windows XP Build 2600 Service Pack 3

    CPU:total 1 (1 cores per cpu, 1 threads per core) family 15 model 44 stepping 2, cmov, cx8, fxsr, mmx, sse, sse2, sse3, mmxext, 3dnow, 3dnowext

    Memory: 4k page, physical 982512k(121768k free), swap 1583776k(391400k free)

    vm_info: Java HotSpot(TM) Client VM (1.6.0_03-b05) for windows-x86, built on Sep 24 2007 22:24:33 by "java_re" with unknown
    0
  14. tay38
     
    c'est ce qui figure sur le bureau aprés avoir rallumer l'ordi, après avoir cliquer sur clean.Je n'ai rien d'autre.
    0
  15. gen-hackman
     
    ca n'a rien a voir avec list_kill'em ca...
    0
  16. gen-hackman
     
    ▶ Télécharge ZHPDiag (de Nicolas Coolman)

    ou :ZHPDiag

    Enregistre le sur ton Bureau.

    Une fois le téléchargement achevé,

    ▶ lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.

    ▶ Clique sur le tournevis puis sur Tous pour cocher toutes les cases des options.

    ▶ Clique sur la loupe pour lancer l'analyse.

    A la fin de l'analyse,

    ▶ clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

    Pour me le transmettre clique sur ce lien :

    http://www.cijoint.fr/

    ▶ Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt

    ▶ Clique sur Ouvrir.

    ▶ Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

    est ajouté dans la page.

    ▶ Copie ce lien dans ta réponse.
    0
  17. tay38
     
    ça ne marche pas : erreur de connexion.
    Il me soul cet ordi, j'en ai vraiment ras le bol.
    0
  • 1
  • 2