Systeme 32

Réponse 1 / 21

Utilisateur anonyme
2 nov. 2006 à 17:33

prudence,
fait une procédure de nettoyage:
https://leblogdeclaude.blogspot.com/2006/10/informatique-procdure-de-nettoyage.html
Ensuite

je te conseille de faire un scan sur Panda...
http://pandasoftware.fr
colles le rapport ici

Réponse 2 / 21

rui
2 nov. 2006 à 17:46

merci philo.
je vais le faire tout de suite

Réponse 3 / 21

Utilisateur anonyme
2 nov. 2006 à 17:48

message reçu, ok.

Réponse 4 / 21

RUI
4 nov. 2006 à 11:59

c'est fait voici le rapport:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\Ahead\\NeroDigital\\settings.xml"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-cht.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-nld.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-fra.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-ita.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-jpn.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-kor.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-ptg.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-esp.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-sve.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\CoverDesigner\\covered-chs.nls"=dword:00000002

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Chs.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Cht.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Esp.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Fra.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Ita.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-kor.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Nld.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-Ptg.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero ShowTime\\ShowTime-sve.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Chs.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Cht.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Esp.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Fra.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Ita.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Kor.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Nld.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Ptg.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Sve.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_chs.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_cht.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_esp.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_fra.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_ita.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_jpn.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_kor.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_nld.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero StartSmart\\NeroStartSmart_ptg.chm"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\Programme\\Ahead\\Nero BackItUp\\BackItUp-Jpn.nls"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\System32\\DIMM.DLL"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Downloaded Program Files\\naviservice.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Downloaded Program Files\\naviagent.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Downloaded Program Files\\naviclient.exe"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Downloaded Program Files\\vrsncom_1_0_2.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Downloaded Program Files\\xcode_2_0_1.dll"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls]
"C:\\WINDOWS\\Downloaded Program Files\\i-nav_4_2_1.dll"=dword:00000001

[HKEY_CLASSES_ROOT\.dgr]
@="Viewer"

[HKEY_CLASSES_ROOT\.t31]
@="Viewer"

[HKEY_CLASSES_ROOT\.xlm]
@="ExcelViewer.Macrosheet"

[HKEY_CLASSES_ROOT\.xlw]
@="ExcelViewer.Workspace"

[HKEY_CLASSES_ROOT\ascxfile]

[HKEY_CLASSES_ROOT\asfile]

[HKEY_CLASSES_ROOT\aspxfile]

[HKEY_CLASSES_ROOT\asrfile]

[HKEY_CLASSES_ROOT\cfcfile]

[HKEY_CLASSES_ROOT\cfmfile]

[HKEY_CLASSES_ROOT\Dreamweaver.Library.Item]

[HKEY_CLASSES_ROOT\Dreamweaver.Site.Definition]

[HKEY_CLASSES_ROOT\Dreamweaver.Template]

[HKEY_CLASSES_ROOT\dwrfile]

[HKEY_CLASSES_ROOT\jspfile]

[HKEY_CLASSES_ROOT\Macromedia.DesignNotes]

[HKEY_CLASSES_ROOT\Macromedia.Extension.Information]

[HKEY_CLASSES_ROOT\Macromedia.Extension.Package]

[HKEY_CLASSES_ROOT\php3file]

[HKEY_CLASSES_ROOT\php4file]

[HKEY_CLASSES_ROOT\phpfile]

[HKEY_CLASSES_ROOT\SysmonLogManager.Snapin]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\OpenWithList]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dmg]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dmg\OpenWithList]
"a"="iexplore.exe"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.torrent]
"Application"="bittorrent.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ws]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ws\OpenWithList]
"a"="IEXPLORE.EXE"
"MRUList"="a"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\OpenWithList]

[HKEY_CLASSES_ROOT\acrobat\DefaultIcon]
@="C:\\Programme\\Adobe\\Acrobat 7.0\\Acrobat\\AcroRd32.exe"

[HKEY_CLASSES_ROOT\ADCS]
@="Directory Class Container"

[HKEY_CLASSES_ROOT\ADCS\CLSID]
@="{89E30300-764D-11d0-B282-00A0C90F56FC}"

[HKEY_CLASSES_ROOT\asaxfile]

[HKEY_CLASSES_ROOT\asaxfile\shell]

[HKEY_CLASSES_ROOT\ashxfile]

[HKEY_CLASSES_ROOT\ashxfile\shell]

[HKEY_CLASSES_ROOT\axdfile]

[HKEY_CLASSES_ROOT\axdfile\shell]

[HKEY_CLASSES_ROOT\cffile]

[HKEY_CLASSES_ROOT\cffile\shell]

[HKEY_CLASSES_ROOT\cfmlfile]

[HKEY_CLASSES_ROOT\cfmlfile\shell]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost]

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2]
@="Microsoft COM+ Runtime Meta Data"

[HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2\CLSID]
@="{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}"

[HKEY_CLASSES_ROOT\configfile]

[HKEY_CLASSES_ROOT\configfile\shell]

[HKEY_CLASSES_ROOT\Connection Manager Profile\DefaultIcon]
@="C:\\WINDOWS\\System32\\CMMGR32.EXE,1"

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\open\command]
@="C:\\WINDOWS\\System32\\CMMGR32.EXE \"%1\""

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...]

[HKEY_CLASSES_ROOT\Connection Manager Profile\shell\Settings...\command]
@="C:\\WINDOWS\\System32\\CMMGR32.EXE /settings \"%1\""

[HKEY_CLASSES_ROOT\csfile]

[HKEY_CLASSES_ROOT\csfile\shell]

[HKEY_CLASSES_ROOT\discofile]

[HKEY_CLASSES_ROOT\discofile\shell]

[HKEY_CLASSES_ROOT\Eyetide.CommandFile\shell\open]

[HKEY_CLASSES_ROOT\Eyetide.CommandFile\shell\open\command]
@="\"C:\\Programme\\Eyetide Media\\Eyetide Viewer\\EyetideController.exe\" /e \"%1\""

[HKEY_CLASSES_ROOT\HeaderFooter.HeaderFooter.1]
@="Template Printer class"

[HKEY_CLASSES_ROOT\HeaderFooter.HeaderFooter.1\CLSID]
@="{30c3f6cd-98b5-11cf-bb82-00aa00bdce0b}"

[HKEY_CLASSES_ROOT\htmlfile\shell\Edit]
@="&Modifier"

[HKEY_CLASSES_ROOT\htmlfile\shell\Edit\command]
@="\"C:\\Programme\\Microsoft Office\\OFFICE11\\msohtmed.exe\" %1"

[HKEY_CLASSES_ROOT\htmlfile\shell\Print]
@="&Imprimer"

[HKEY_CLASSES_ROOT\htmlfile\shell\Print\command]
@="\"C:\\Programme\\Microsoft Office\\OFFICE11\\msohtmed.exe\" /p %1"

[HKEY_CLASSES_ROOT\mhtmlfile\shell\Edit]
@="&Modifier"

[HKEY_CLASSES_ROOT\mhtmlfile\shell\Edit\command]
@="\"C:\\Programme\\Microsoft Office\\OFFICE11\\msohtmed.exe\" %1"

[HKEY_CLASSES_ROOT\mhtmlfile\shell\Print]
@="&Imprimer"

[HKEY_CLASSES_ROOT\mhtmlfile\shell\Print\command]
@="\"C:\\Programme\\Microsoft Office\\OFFICE11\\msohtmed.exe\" /p %1"

[HKEY_CLASSES_ROOT\odccubefile\DefaultIcon]
@="C:\\PROGRA~1\\GEMEIN~1\\MICROS~1\\OFFICE11\\MSO.DLL,22"

[HKEY_CLASSES_ROOT\odcdatabasefile\DefaultIcon]
@="C:\\PROGRA~1\\GEMEIN~1\\MICROS~1\\OFFICE11\\MSO.DLL,23"

[HKEY_CLASSES_ROOT\odcnewfile\DefaultIcon]
@="C:\\PROGRA~1\\GEMEIN~1\\MICROS~1\\OFFICE11\\MSO.DLL,24"

[HKEY_CLASSES_ROOT\odctablefile\DefaultIcon]
@="C:\\PROGRA~1\\GEMEIN~1\\MICROS~1\\OFFICE11\\MSO.DLL,21"

[HKEY_CLASSES_ROOT\Shareaza.SkinInfoExtractor.1]
@="Shareaza Skin Metadata Extractor"

[HKEY_CLASSES_ROOT\Shareaza.SkinInfoExtractor.1\CLSID]
@="{0EEDB912-C5FA-486F-8334-57288578C627}"

[HKEY_CLASSES_ROOT\shtmfile]

[HKEY_CLASSES_ROOT\shtmfile\shell]

[HKEY_CLASSES_ROOT\SymWriter.pdb]
@="Pdb based SymWriter"

[HKEY_CLASSES_ROOT\SymWriter.pdb\CLSID]
@="{520DC67A-752E-11D3-8D56-00C04F680B2B}"

[HKEY_CLASSES_ROOT\vbfile]

[HKEY_CLASSES_ROOT\vbfile\shell]

[HKEY_CLASSES_ROOT\WBEMComConnection]
@="WBEM Connection"

[HKEY_CLASSES_ROOT\WBEMComConnection\CLSID]
@="SOFTWARE\\CLASSES\\WBEMComConnection"

[HKEY_CLASSES_ROOT\WBEMComLocator]
@="WBEM Locator"

[HKEY_CLASSES_ROOT\WBEMComLocator\CLSID]
@="SOFTWARE\\CLASSES\\WBEMComLocator"

[HKEY_CLASSES_ROOT\webfile]

[HKEY_CLASSES_ROOT\webfile\shell]

[HKEY_CLASSES_ROOT\CLSID\{0A159E9F-8A03-4A6B-AFA6-F77196DF8ADD}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0A159E9F-8A03-4A6B-AFA6-F77196DF8ADD}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0A159E9F-8A03-4A6B-AFA6-F77196DF8ADD}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0A159E9F-8A03-4A6B-AFA6-F77196DF8ADD}\InprocServer32]
@="C:\\WINDOWS\\system32\\guard.tmp"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{1DD5B363-76B8-4842-9C23-33384D9CCEFC}]
@=""
"IDEx"="AD"

[HKEY_CLASSES_ROOT\CLSID\{1DD5B363-76B8-4842-9C23-33384D9CCEFC}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1DD5B363-76B8-4842-9C23-33384D9CCEFC}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1DD5B363-76B8-4842-9C23-33384D9CCEFC}\InprocServer32]
@="C:\\WINDOWS\\system32\\ivgutil.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{320154BB-D666-48F6-990E-172B32954620}]
@="eD2K downloadManager object"

[HKEY_CLASSES_ROOT\CLSID\{320154BB-D666-48F6-990E-172B32954620}\InProcServer32]
@="C:\\Programme\\eDonkey2000\\plugins\\ed2kie.dll"
"ThreadingModel"="Both"

[HKEY_CLASSES_ROOT\CLSID\{320154BB-D666-48F6-990E-172B32954620}\ProgID]
@="eD2KDownloadManager.object.1"

[HKEY_CLASSES_ROOT\CLSID\{320154BB-D666-48F6-990E-172B32954620}\TypeLib]
@="{379919F2-1612-45B7-B9F4-773F6D5214F5}"

[HKEY_CLASSES_ROOT\CLSID\{320154BB-D666-48F6-990E-172B32954620}\VersionIndependentProgID]
@="eD2KDownloadManager.object"

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}]

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\InprocServer32]
@="C:\\Programme\\Microsoft Office\\OFFICE11\\msohev.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon]

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile]

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\htmlfile\DefaultIcon]
@="C:\\Programme\\Internet Explorer\\iexplore.exe,1"

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile]

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\mhtmlfile\DefaultIcon]
@="C:\\Programme\\Internet Explorer\\iexplore.exe,22"

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version]

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\10]
@="C:\\Programme\\Microsoft Office\\Office10\\msohtmed.exe"

[HKEY_CLASSES_ROOT\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Version\11]
@="C:\\Programme\\Microsoft Office\\OFFICE11\\msohtmed.exe"

[HKEY_CLASSES_ROOT\CLSID\{4DE207A2-9DB3-4428-BDEF-C9C8FDB858F3}]
@=""
"IDEx"="ADDR"

[HKEY_CLASSES_ROOT\CLSID\{4DE207A2-9DB3-4428-BDEF-C9C8FDB858F3}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DE207A2-9DB3-4428-BDEF-C9C8FDB858F3}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4DE207A2-9DB3-4428-BDEF-C9C8FDB858F3}\InprocServer32]
@="C:\\WINDOWS\\system32\\udeg.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{5DD83E71-87F6-4C4C-9334-4D4209743E5C}]

[HKEY_CLASSES_ROOT\CLSID\{5DD83E71-87F6-4C4C-9334-4D4209743E5C}\LocalServer32]
@="C:\\Programme\\Microsoft Office\\OFFICE11\\WORDVIEW.EXE /IMG_WIA"

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}]
@="DeskbarBHO"

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\Implemented Categories]

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\InprocServer32]
@="C:\\Programme\\Deskbar\\deskbar.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\ProgID]
@="DBTB00001.deskbarBHO.1"

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\TypeLib]
@="{A4C8F181-6CDB-4dcc-9FC9-BB9933C81E1F}"

[HKEY_CLASSES_ROOT\CLSID\{A8B28872-3324-4CD2-8AA3-7D555C872D96}\VersionIndependentProgID]
@="DBTB00001.deskbarBHO"

[HKEY_CLASSES_ROOT\CLSID\{B23B70DA-11DD-42D2-87CE-D5F2CEF4DB43}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B23B70DA-11DD-42D2-87CE-D5F2CEF4DB43}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B23B70DA-11DD-42D2-87CE-D5F2CEF4DB43}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{B23B70DA-11DD-42D2-87CE-D5F2CEF4DB43}\InprocServer32]
@="C:\\WINDOWS\\system32\\jmsh400.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}]
@="Search Bar"

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\Implemented Categories]

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\InprocServer32]
@="C:\\Programme\\Deskbar\\deskbar.dll"
"ThreadingModel"="Apartment"

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\ProgID]
@="DBTB00001.DBTB00001.1"

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\Programmable]

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\TypeLib]
@="{A4C8F181-6CDB-4dcc-9FC9-BB9933C81E1F}"

[HKEY_CLASSES_ROOT\CLSID\{D7CC80D4-376C-4586-B023-4F35C2CEB28E}\VersionIndependentProgID]
@="DBTB00001.DBTB00001"

[HKEY_CLASSES_ROOT\CLSID\{D8C2D4B4-EEAF-4EC4-B1F8-9B6ED15D5A38}]
@="DeskbarEnabler"

[HKEY_CLASSES_ROOT\CLSID\{D8C2D4B4-EEAF-4EC4-B1F8-9B6ED15D5A38}\InprocServer32]
@="C:\\Programme\\Deskbar\\deskbar.dll"
"ThreadingModel"="both"

[HKEY_CLASSES_ROOT\CLSID\{D8C2D4B4-EEAF-4EC4-B1F8-9B6ED15D5A38}\ProgID]
@="DBTB00001.DeskbarEnabler.1"

[HKEY_CLASSES_ROOT\CLSID\{D8C2D4B4-EEAF-4EC4-B1F8-9B6ED15D5A38}\VersionIndependentProgID]
@="DBTB00001.DeskbarEnabler"

[HKEY_CLASSES_ROOT\CLSID\{DDFB45E4-B605-4DFA-BEDD-7C10A06A4D84}]
@="BitTorrent Property Page"

[HKEY_CLASSES_ROOT\CLSID\{DDFB45E4-B605-4DFA-BEDD-7C10A06A4D84}\InprocServer32]
@="C:\\PROGRA~1\\BITTOR~1\\BITTOR~1.DLL"

[HKEY_CLASSES_ROOT\Applications\bittorrent.exe\shell\open]

[HKEY_CLASSES_ROOT\Applications\bittorrent.exe\shell\open\command]
@="\"C:\\Programme\\BitTorrent\\bittorrent.exe\" \"%1\""

[HKEY_CLASSES_ROOT\Applications\moviemk.exe]

[HKEY_CLASSES_ROOT\Applications\moviemk.exe\shell]
"FriendlyCache"="Movie Maker"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\amdcpu.exe]
"Path"="C:\\Programme\\AMD\\Athlon 64 Processor Driver"
@="C:\\Programme\\AMD\\Athlon 64 Processor Driver\\amdcpu.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe]
@="C:\\WINDOWS\\System32\\cmmgr32.exe"
"Path"="C:\\WINDOWS\\System32"
"CmstpExtensionDll"="C:\\WINDOWS\\System32\\cmcfg32.dll"
"CMInternalVersion"="1.2"
"CmNative"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\yourapp.Exe]
"Path"="C:\\Program Files\\HP\\Non Driver CIO Components"
@="C:\\Program Files\\HP\\Non Driver CIO Components\\yourapp.Exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\HTML Help]
"vbaod10.chm"="C:\\Programme\\Microsoft Office\\Office10\\1036\\"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KB842773]
"DisplayName"="Windows XP-Hotfix - KB842773"
"UninstallString"="C:\\WINDOWS\\$NtUninstallKB842773$\\spuninst\\spuninst.exe"
"TSAware"=dword:00000001
"NoModify"=dword:00000001
"Publisher"="Microsoft Corporation"
"NoRepair"=dword:00000001
"HelpLink"="https://support.microsoft.com/en-us/help/842773"
"URLInfoAbout"="https://support.microsoft.com/en-us"
"DisplayVersion"="20040805.140010"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{B005394D-5A4D-6AE4-CB08-F59CDC9A255C}]
"SlowInfoCache"=hex:28,02,00,00,00,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{FE64AE29-0883-4C70-8388-DC026019C900}]
"SlowInfoCache"=hex:28,02,00,00,01,00,00,00,00,f0,89,00,00,00,00,00,64,3e,a7,\
d1,23,ee,c6,01,00,00,00,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,\
61,00,6d,00,6d,00,65,00,5c,00,48,00,50,00,5c,00,44,00,69,00,67,00,69,00,74,\
00,61,00,6c,00,20,00,49,00,6d,00,61,00,67,00,69,00,6e,00,67,00,5c,00,62,00,\
69,00,6e,00,5c,00,68,00,70,00,71,00,74,00,68,00,62,00,30,00,38,00,2e,00,65,\
00,78,00,65,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,00,00,00,00
"Changed"=dword:00000000

[HKEY_CURRENT_USER\Software\3rd Eye Solutions]

[HKEY_CURRENT_USER\Software\Eyetide]

[HKEY_CURRENT_USER\Software\SCSSoft]

[HKEY_LOCAL_MACHINE\Software\ICE]

[HKEY_LOCAL_MACHINE\Software\SCSSoft]

[HKEY_LOCAL_MACHINE\Software\Sonic]

[HKEY_LOCAL_MACHINE\Software\Tmp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NWEReboot"=""

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent"="\"C:\\Programme\\BitTorrent\\bittorrent.exe\" --force_start_minimized"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\DOKUME~1\\Teixeira\\LOKALE~1\\Temp\\_iu14D2N.tmp"="Setup/Uninstall"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\DOKUME~1\\Teixeira\\LOKALE~1\\Temp\\is-MMQ2V.tmp\\is-FTTJA.tmp"="Setup/Uninstall"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\E21JGEFF\\aawsepersonal[1].exe"="Ad-Aware SE Personal"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\C6VTZ7S1\\pllangs[1].exe"="Language pack for Ad-Aware SE Installation"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\DOKUME~1\\Teixeira\\LOKALE~1\\Temp\\is-44RV4.tmp\\is-ODGP8.tmp"="Setup/Uninstall"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\DOKUME~1\\Teixeira\\LOKALE~1\\Temp\\is-BKLJN.tmp\\is-AVDTJ.tmp"="Setup/Uninstall"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\C6VTZ7S1\\avgas-setup-7.5.0.50[1].exe"="avgas-setup-7.5.0.50[1]"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\C6VTZ7S1\\CleanUp452[1].exe"="CleanUp452[1]"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\K63UQH6I\\ATF-Cleaner[1].exe"="ATF Cleaner.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\E21JGEFF\\notracks[1].exe"="notracks[1]"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\K63UQH6I\\ccsetup134[1].exe"="CCleaner Installer"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"C:\\Dokumente und Einstellungen\\Teixeira\\Lokale Einstellungen\\Temporary Internet Files\\Content.IE5\\C6VTZ7S1\\notracks[1].exe"="notracks[1]"

Réponse 5 / 21

Utilisateur anonyme
4 nov. 2006 à 12:44

tu as encore le problème ?

Réponse 6 / 21

Rui
4 nov. 2006 à 13:03

je fait quoi maintenant?

Réponse 7 / 21

Utilisateur anonyme
4 nov. 2006 à 15:48

Tu es certain que c'est le rapport de Panda active scan ?
(Windows Registry Editor Version 5.00 )

Réponse 8 / 21

RUI
5 nov. 2006 à 12:02

Voici la fin de analyse du Active scan

Analyse terminée Arrêter
101487 Fichiers analysés C:\WINDOWS\WMSysPr9.prxRapport d'analyse Sauvegarder le rapport
Recommencer l'analyse
Envoyer au laboratoire
Sauvegarder le rapport
Recommencer l'analyse
ActiveScan ne désinfecte que les virus. Pour une désinfection totale, achetez ou testez un produit de sécurité recommandé. ActiveScan vous offre une analyse approfondie permettant de confirmer le niveau de sécurité de votre PC. Détecté Désinfecté
Virus 0 0
Logiciel espion 0 0
Outils de piratage et outils indésirables 0 0
Numéroteurs 0 0
Risques de sécurité 0 0
Fichiers suspects 0 0

mais maintenant il m'apparait ce ci: C:Windows\systeme32\nlc.exe n'as pas pu etre trouve
Que faire donc?
Merci pour ton aide

Réponse 9 / 21

Utilisateur anonyme
5 nov. 2006 à 12:10

Bien, nous allons faire un scan Hijackthis:
va voir sur mon lien ici:
lis bien ce qui est écrit, être attentif à l'install et le renomer.

installer dans :
c:\hijackthis
https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html
colles stp le log ici, merci .

Réponse 10 / 21

RUI
5 nov. 2006 à 12:20

Voila le log:

Logfile of HijackThis v1.99.1
Scan saved at 12:18:26, on 05.11.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\AVENGINE.EXE
c:\programme\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\VeriSign\NAVI\naviagent.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\apvxdwin.exe
C:\WINDOWS\Explorer.exe
c:\programme\panda software\panda antivirus + firewall 2007\WebProxy.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programme\Hijackthis Version Française\hijackthis vf.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\psimreal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.fcporto.pt/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\blank.htm
R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\nlc.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O9 - Extra 'Tools' menuitem: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O9 - Extra 'Tools' menuitem: Optionen für i-Nav - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/runaware.download.akamai.com/25175/citrix/wficat-no-eula.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O20 - Winlogon Notify: DIFxApp - C:\WINDOWS\system32\guard.tmp (file missing)
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: VeriSign Updater (navi) - VeriSign, Inc. - C:\Programme\VeriSign\NAVI\naviagent.exe
O23 - Service: Windows Network Latency Controller (nlc) - Unknown owner - C:\WINDOWS\system32\nlc.exe (file missing)
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software International - c:\programme\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe

Réponse 11 / 21

Utilisateur anonyme
5 nov. 2006 à 12:56

Bien,
coche et fix avec hijackthis:
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\nlc.exe
O23 - Service: Windows Network Latency Controller (nlc) - Unknown owner - C:\WINDOWS\system32\nlc.exe (file missing)
O9 - Extra button: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O9 - Extra 'Tools' menuitem: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing)
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/.
O20 - Winlogon Notify: DIFxApp - C:\WINDOWS\system32\guard.tmp (file missing)
O23 - Service: Windows Network Latency Controller (nlc) - Unknown owner - C:\WINDOWS\system32\nlc.exe (file missing)

Réponse 12 / 21

RUI
5 nov. 2006 à 13:03

apres ca je fait quoi?
Je relance scan?

Réponse 13 / 21

Utilisateur anonyme
5 nov. 2006 à 13:05

refait un log hijackthis
il est posible que la ligne 023 réapparaisse...

Réponse 14 / 21

RUI
5 nov. 2006 à 13:09

Je te revoie le nouveau log:

Logfile of HijackThis v1.99.1
Scan saved at 13:08:20, on 05.11.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\AVENGINE.EXE
c:\programme\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\VeriSign\NAVI\naviagent.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\apvxdwin.exe
C:\WINDOWS\Explorer.exe
c:\programme\panda software\panda antivirus + firewall 2007\WebProxy.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programme\eMule\emule.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\Hijackthis Version Française\hijackthis vf.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\psimreal.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.fcporto.pt/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\blank.htm
R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\nlc.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background
O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O9 - Extra 'Tools' menuitem: Optionen für i-Nav - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: VeriSign Updater (navi) - VeriSign, Inc. - C:\Programme\VeriSign\NAVI\naviagent.exe
O23 - Service: Windows Network Latency Controller (nlc) - Unknown owner - C:\WINDOWS\system32\nlc.exe (file missing)
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software International - c:\programme\panda software\panda antivirus + firewall 2007\firewall\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Programme\Panda Software\Panda Antivirus + Firewall 2007\TPSrv.exe

Réponse 15 / 21

Utilisateur anonyme
5 nov. 2006 à 14:14

C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
a supprimer dans msconfig, onglet démarrage.
---------------------------------------------------------------------------
coche + fix

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\blank.htm
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\nlc.exe
O23 - Service: Windows Network Latency Controller (nlc) - Unknown owner - C:\WINDOWS\system32\nlc.exe (file missing)
--------------------------------------------------------------------------------
-----------------
Faire
Démarrer==> Exécuter ==> tapes ceci:
services.msc
Dans la fenêtre qui s’ouvre cherches :
Windows Network Latency Controller (nlc)
Double-clic dessus==> dans type de démarrage ==>Désactiver ==> en dessous
Arrêter
Puis tu vas dans Hijackthis

-Ouvrir la section outils
- Enlever un NT service
- coller dans la case :
Windows Network Latency Controller (nlc)
tu valides ok

Réponse 16 / 21

RUI
5 nov. 2006 à 16:56

C#est fait:
voila le nouveau log:

Logfile of HijackThis v1.99.1
Scan saved at 16:37:21, on 05.11.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
C:\Programme\Alwil Software\Avast4\ashServ.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\VeriSign\NAVI\naviagent.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Alwil Software\Avast4\ashWebSv.exe
C:\Programme\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\Explorer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programme\Alwil Software\Avast4\ashSimpl.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.fcporto.pt/
R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programme\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: VeriSign Updater (navi) - VeriSign, Inc. - C:\Programme\VeriSign\NAVI\naviagent.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

Réponse 17 / 21

Utilisateur anonyme
5 nov. 2006 à 18:59

personnellement , je crois que tout est ok dans ton log.
Tu as encore le problème ?
Je te suggère de terminer avec un coup de CCleaner.
Normalement tu dois l'avoir sur ton PC, si tu as suivis la procédure de nettoyage standart perso.
https://www.ccleaner.com/download

Réponse 18 / 21

RUI
5 nov. 2006 à 19:37

C'est reglé merci a toi philo.

J'aurait encore une question?
J'ai plus d'audio sur mon pc compaq proliant 800.
Comment faire pour reinstaller? A parament il se trouve qu'il n'y a plus de Hardware installer!

Pourrait tu m'aider?
Encore une fois merci

Réponse 19 / 21

Utilisateur anonyme
5 nov. 2006 à 19:42

je te suggère de cloturer ce post-ci et d'en refaire un autre, avec une description détaillée du soucis.
Et si possible avec un résumé Everest de ce PC.
https://leblogdeclaude.blogspot.com/2006/11/informatique-comment-coller-un-rsum-du.html

Juste pour faciliter la gestion de mes posts en cour....je te remercie d'avance.Bonne soirée.
a+

Réponse 20 / 21

RUI
5 nov. 2006 à 19:50

c'est fait!
Tu le trouveras avec mon nom RUI
Merci d'avance

Systeme 32

21 réponses

Discussions similaires

Newsletters