Service spouler inexistant et avast spoolsv - Page 2

1/......

Fais analyser le(s) fichier(s) suivants sur Virustotal :

Virus Total

* * Colle directement le chemin des fichiers , un par un , dans l'espace "Parcourir" apres chaque analyse :

C:\WINDOWS\system32\zpoint32.exe
C:\Documents and Settings\All Users\Application Data\2EF1F7451D.sys
C:\WINDOWS\System32\2EF1F7451D.sys


* Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
* Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
* Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.

================================

2/.......

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur OTL.exe pour le lancer.

▶Copie la liste qui se trouve en gras ci-dessous,

▶ colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:OTL
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
O4 - HKLM..\Run: [auca] File not found
O4 - HKLM..\Run: [SigmatelSysTrayApp] File not found
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O20 - HKU\S-1-5-21-1606980848-1580818891-839522115-1003 Winlogon: Shell - ("C:\Documents and Settings\Utilisateur\bgvxxv.exe") - C:\Documents and Settings\Utilisateur\bgvxxv.exe File not found
O21 - SSODL: JyRDlgitAIgNu - {FC1F3F12-56B5-95B8-26AB-E0C4C7A5A25B} - C:\WINDOWS\system32\dkrc.dll ()

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"=-
"iTunesHelper"=-
"QuickTime Task"=-

:Files
C:\Documents and Settings\Utilisateur\Application Data\mdb.bin
@Alternate Data Stream - 269020 bytes -> C:\WINDOWS\Temp:temp

:commands
[emptytemp]
[start explorer]
[reboot]


▶ Clique sur "Correction" pour lancer la suppression.

▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

Voila les rapport VirusTotal

http://www.virustotal.com/file-scan/reanalysis.html?id=ae28fc0d5cfd2ace682ca651c9c4e8cf4cf62ed4e3997a8ec745e13f35db29db-1287745933

http://www.virustotal.com/file-scan/report.html?id=12a90539019783a3105832ba9bf3666d41e4c25ee3fcff0a6c2bc2d09aebe104-1287746006

http://www.virustotal.com/file-scan/report.html?id=447147cf06e773840f73bf2c957bb52744a77d0f688ac4f3cac1174e7e7411a2-1287746119

ok à lire la suite :)

Bonne Lecture :)

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== OTL ==========
Prefs.js: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 removed from extensions.enabledItems
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\auca deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SigmatelSysTrayApp deleted successfully.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry value HKEY_USERS\S-1-5-21-1606980848-1580818891-839522115-1003\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:"C:\Documents and Settings\Utilisateur\bgvxxv.exe" deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\JyRDlgitAIgNu deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FC1F3F12-56B5-95B8-26AB-E0C4C7A5A25B}\ deleted successfully.
File move failed. C:\WINDOWS\system32\dkrc.dll scheduled to be moved on reboot.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSScheduler deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
========== FILES ==========
C:\Documents and Settings\Utilisateur\Application Data\mdb.bin moved successfully.
ADS C:\WINDOWS\Temp:temp deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 7302204 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 128080193 bytes

User: Utilisateur
->Temp folder emptied: 1486722200 bytes
->Temporary Internet Files folder emptied: 8858691 bytes
->Java cache emptied: 80464547 bytes
->FireFox cache emptied: 41901202 bytes
->Google Chrome cache emptied: 131041355 bytes
->Flash cache emptied: 143788 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 30924958 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 89719652 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 107922 bytes
RecycleBin emptied: 153874 bytes

Total Files Cleaned = 1 913,00 mb

OTL by OldTimer - Version 3.2.16.0 log created on 10222010_131901

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\system32\dkrc.dll scheduled to be moved on reboot.

Registry entries deleted on Reboot...

regarde si tu as encore ceci :

C:\WINDOWS\system32\dkrc.dll

ouep

analyse-la sur virus total stp

le téléchargement du fichier sur virus total est hyper long ;o/

il pèse combien ?

que 32ko

bah alors c'est virus total qui sature ^^

ok je reessayerais plutard alors :)

oui il y a une jauge sur la page qui montre l'encombrement du site :)

hello

JE reviens vers vous pour vous donner des nouvelles, desolé, de ne repondre que mnt j'ai eu un accident de voiture la semaine derniere, ce qui m'a mis out pour quelques jours

Alors en fait, pour en terminer avec mon histoire de spouler, ce matin j'ai lancer l'outil de microsoft FIX IT, et miracle, mon spouler est de retour, reste mnt a reinstaller l'imprimante en réseau, et la c'est pas tres funky non plus

Merci en tout cas pour ton aide ! au moins, mon pc est propre :) :) :)

bonjour pas trop grave j'espere ?

essaie de voir si tu peux analyser sur virus total maintenant :

C:\WINDOWS\system32\dkrc.dll