Mon ordinateur redémarre quand je scanne anti

Résolu
sergino17 Messages postés 36 Statut Membre -  
Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   -
Bonjour
mon ordi redémarre lorsque je veux faire un scan avec un anti-spyyware,ou avec avast, parfois il se bloque;
j'ai essayé les conseil du forum mais ca continue
si quelqu'un a une idée de ce qu'il m'arrive, merci
Logfile of HijackThis v1.99.1
Scan saved at 20:15:52, on 14/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\Propriétaire.SERGE.001\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?e5a4a23e5af94ac78d85653648984880
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?e5a4a23e5af94ac78d85653648984880
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 5.5 for Check Point™ FireWall-1® (kav4cpf1) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Check Point FireWall\Kav4cpf1.exe (file missing)
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
Configuration: Windows XP
Firefox 2.0.0.2

70 réponses

  • 1
  • 2
  • 3
  • 4
Résumé de la discussion

Le problème central est qu'un ordinateur redémarre lors des scans avec un anti-spyware ou Avast, et que le système peut se bloquer malgré les tentatives de diagnostic. Plusieurs réponses évoquent les éléments en cause, notamment les services de sécurité et les outils de nettoyage, avec des conseils allant du contrôle des processus au nettoyage des éléments de démarrage. D'autres proposent des outils en ligne pour diagnostiquer les malwares et vérifier les téléchargements, tout en restant prudent sur les modifications nécessaires et leurs implications système. Une remarque complémentaire précise qu’un diagnostic a été possible via des analyses de logs et des résultats de scanners, montrant que certains modules de sécurité peuvent entrer en conflit et nécessiter une révision des configurations.

Bobot (l'IA à votre service)
  1. sergino17 Messages postés 36 Statut Membre 2
     
    Salut
    comme je risque d'en avoir pour un moment avant d'avoir fait tout ca meme si c'est superbement bien expliqué , je tiens a te remercier de ta réponse
    a +
    1
  2. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut

    Essaie en mode sans echec

    a+
    0
    1. sergino17
       
      merci de la réponse, je me sens moins seul
      j'ai essayé en mode sans échec mais il redémarre aussi, je m'en sers pour éteindre l'ordi.
      il redémarre aussi parfois lorsque lorsque je veux ouvrir un dossier ou un fichier.
      je vais tout de meme réessayer apres avoir envoyé le mail
      0
  3. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut

    Installe AVG Anti-Spyware :

    https://www.malekal.com/avg-antivirus-free-antivirus-gratuit-pour-proteger-son-pc-des-virus/

    ¤ Lance AVG Anti-Spyware

    Clique sur le bouton Analyse (de la barre d'outils)

    Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.

    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

    A la fin du scan, choisis l'option 3

    "Appliquer toutes les actions " en bas.

    Clique sur "Enregistrer le rapport".

    Copie/colle le rapport sur le forum.
    0
    1. sergino17 Messages postés 36 Statut Membre 2
       
      Salut
      J'ai analysé avec AVG, et après un moment l'ordi a redémarré
      j'ai refait le scann en mode sans échec, ca a duré plus longtemps mais il a redémarré aussi, j'ai refait le scann 3 fois de suite, a chaque foi il redémarre.
      J'ai filmé la scène mais quand je veux mettre mon film sur l'ordi avec movie maker, au bout d'un moment il se bloque;
      Voici ce sue j'ai vu:
      Tracking cookie.247Realmedia......................moyen
      " .double click "
      " .207 "
      " .Weborama "
      " .smartadserver "

      2ème scann : identique

      lorsque l'ordi a redémarré",il scannait:
      C\Documents and setting\Propriétaire SERGE 001\s...

      merci
      0
  4. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut

    Ton CPU monte a 100%?
    Combien as tu de RAM?

    A+
    0
    1. sergino17 Messages postés 36 Statut Membre 2
       
      CPU, c'est bien l'ordinateur?
      j'ai ouvert le logiciel everest, j'ai vu:
      mémoire virtuelle
      total:2643mo
      utilisé:631mo
      zone de swap 1875
      326

      SPD taille du module 256mo (1rank,4bants)
      64bits
      ai je bien compris ce que tu me demandes
      merci a toi
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. sergino17 Messages postés 36 Statut Membre 2
     
    Salut
    j'ai trouvé ceci au sujet du processeur:EVEREST Ultimate Edition 2006 © 2003-2006 Lavalys, Inc.

    Version EVEREST v3.50.761/fr
    Module de benchmark 2.1.169.0
    Site web http://www.lavalys.com/
    Type de rapport Rapport rapide [ TRIAL VERSION ]
    Ordinateur SERGE
    Générateur Propriétaire
    Système d'exploitation Microsoft Windows XP Home Edition 5.1.2600 (WinXP Retail)
    Date 2007-03-21
    Heure 18:07

    Processeur

    Propriétés du processeur:
    Type de processeur AMD Athlon XP, 2100 MHz (12.5 x 168) 2600+
    Alias du processeur Thoroughbred-B
    Stepping du processeur B0
    Jeu d'instructions x86, MMX, 3DNow!, SSE
    Cache de code de niveau 1 64 Ko
    Cache de données de niveau 1 [ TRIAL VERSION ]
    Cache de niveau 2 256 Ko (On-Die, Full-Speed)

    Informations physiques:
    Forme du composant 453 Pin PGA
    Taille du composant 4.95 cm x 4.95 cm
    Transistors [ TRIAL VERSION ] million(s)
    Technologie utilisée 6Mi, 0.13 um, CMOS, Cu
    Taille interne [ TRIAL VERSION ] mm2
    Voltage au coeur 1.50 - 1.65 V
    Voltage d'entrée/sortie 1.6 V
    Puissance typique 44.0 - 64.0 W (dépendant de la vitesse d'horloge)
    Puissance maximale 48.5 - 74.3 W (dépendant de la vitesse d'horloge)

    Fabricant du processeur:
    Nom de l'entreprise Advanced Micro Devices, Inc.
    Information sur le produit http://www.amd.com/us-en/Processors/ProductInformation/0,,30_118,00.html

    Utilisation du processeur:
    Processeur nº1 0 %

    Debug - PCI

    B00 D00 F00: VIA VT8377A Apollo KT400A Chipset - System Controller

    Offset 00: 06 11 89 31 06 00 30 22 80 00 00 06 00 08 00 00
    Offset 10: 08 00 00 D0 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 06 11 89 31
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00
    Offset 40: 00 19 88 80 82 44 01 00 1B 19 88 80 82 44 00 00
    Offset 50: C0 00 00 00 C0 85 30 30 EE 00 10 10 30 30 30 30
    Offset 60: 40 AA 00 20 26 99 00 1C D7 ED 43 D0 01 D0 00 00
    Offset 70: 82 C8 00 01 41 09 50 00 01 00 00 00 00 00 00 02
    Offset 80: 02 C0 35 00 0B 0A 00 1F 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 20 0F 01 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 21 98 00 C8
    Offset B0: 7F 00 02 02 24 00 00 02 48 00 00 01 00 00 00 8C
    Offset C0: 01 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 17 A3 6B EA 0F 1C F1 19 21 FF 00 00 61 32 74 00
    Offset E0: 00 00 00 00 00 FF 01 00 9A 77 CC 00 04 9A 23 00
    Offset F0: 00 00 00 00 00 80 83 00 00 00 30 00 01 04 89 31

    B00 D01 F00: VIA VT8377A Apollo KT400A Chipset - AGP Controller

    Offset 00: 06 11 98 B1 07 01 30 22 00 00 04 06 00 00 01 00
    Offset 10: 00 00 00 00 00 00 00 00 00 01 01 00 90 90 20 22
    Offset 20: 00 E0 F0 E1 00 D8 F0 DF 00 00 00 00 00 00 00 00
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 00 00 0C 00
    Offset 40: 81 C0 80 44 35 72 98 B1 00 00 00 00 00 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 02 02 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    B00 D09 F00: VIA Vectro VT6212 PCI-USB Universal Host Controller

    Offset 00: 06 11 38 30 07 00 10 02 61 00 03 0C 08 20 80 00
    Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 01 A0 00 00 00 00 00 00 00 00 00 00 06 11 38 30
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 10 01 00 00
    Offset 40: 40 10 03 00 00 00 00 00 00 0B 00 00 00 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 C2 FF 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00

    B00 D09 F01: VIA Vectro VT6212 PCI-USB Universal Host Controller

    Offset 00: 06 11 38 30 07 00 10 02 61 00 03 0C 08 20 80 00
    Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 01 A4 00 00 00 00 00 00 00 00 00 00 06 11 38 30
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 11 02 00 00
    Offset 40: 40 10 03 00 00 00 00 00 00 0B 00 00 00 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 C2 FF 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00

    B00 D09 F02: VIA Vectro VT6212 USB 2.0 Enhanced Host Controller

    Offset 00: 06 11 04 31 07 00 10 02 63 20 03 0C 08 20 80 00
    Offset 10: 00 20 00 E3 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 06 11 04 31
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 12 03 00 00
    Offset 40: 00 00 0B 00 00 00 00 00 A0 20 00 09 00 00 FF FF
    Offset 50: 00 5A 00 80 00 00 00 00 04 0B 88 88 33 00 00 00
    Offset 60: 20 20 01 00 00 00 00 00 01 00 00 00 00 00 00 C0
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 C2 FF 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00

    B00 D0A F00: VIA VT6306 Fire II IEEE1394 Host Controller

    Offset 00: 06 11 44 30 07 00 10 02 46 10 00 0C 08 20 00 00
    Offset 10: 00 00 00 E3 01 A8 00 00 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 06 11 44 30
    Offset 30: 00 00 00 00 50 00 00 00 00 00 00 00 11 01 00 20
    Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 50: 01 00 02 E4 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    B00 D0B F00: PCtel HSP MicroModem 56

    Offset 00: 4D 13 92 78 00 00 10 02 02 04 03 07 00 00 00 00
    Offset 10: 01 AC 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 80 02 00 00 4D 13 01 00
    Offset 30: 00 00 00 00 40 00 00 00 00 00 00 00 12 01 00 00
    Offset 40: 01 00 62 EC 03 01 00 00 00 00 00 00 00 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    B00 D0C F00: Realtek RTL8139 PCI Fast Ethernet Adapter [A/B/C]

    Offset 00: EC 10 39 81 05 00 90 02 10 00 00 02 00 80 00 00
    Offset 10: 01 B0 00 00 00 10 00 E3 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 EC 10 39 81
    Offset 30: 00 00 00 00 50 00 00 00 00 00 00 00 13 01 20 40
    Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 50: 01 00 C2 F7 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    B00 D10 F00: VIA VT8235 USB Universal Host Controller

    Offset 00: 06 11 38 30 07 00 10 02 80 00 03 0C 08 20 80 00
    Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 01 B4 00 00 00 00 00 00 00 00 00 00 06 11 38 30
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 15 01 00 00
    Offset 40: 40 10 03 00 00 00 00 00 00 0B 00 00 00 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 C2 FF 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00

    B00 D10 F01: VIA VT8235 USB Universal Host Controller

    Offset 00: 06 11 38 30 07 00 10 02 80 00 03 0C 08 20 80 00
    Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 01 B8 00 00 00 00 00 00 00 00 00 00 06 11 38 30
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 15 02 00 00
    Offset 40: 40 10 03 00 00 00 00 00 00 0B 00 00 00 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 C2 FF 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00

    B00 D10 F02: VIA VT8235 USB Universal Host Controller

    Offset 00: 06 11 38 30 07 00 10 02 80 00 03 0C 08 20 80 00
    Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 01 BC 00 00 00 00 00 00 00 00 00 00 06 11 38 30
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 15 03 00 00
    Offset 40: 40 10 03 00 00 00 00 00 00 0B 00 00 00 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 C2 FF 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00

    B00 D10 F03: VIA VT8235 USB 2.0 Enhanced Host Controller

    Offset 00: 06 11 04 31 07 00 10 02 82 20 03 0C 08 20 00 00
    Offset 10: 00 30 00 E3 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 06 11 04 31
    Offset 30: 00 00 00 00 80 00 00 00 00 00 00 00 15 04 00 00
    Offset 40: 00 00 03 00 00 00 00 00 80 10 00 89 00 00 00 00
    Offset 50: 00 5A 00 80 00 00 00 00 04 0B 66 88 53 66 00 00
    Offset 60: 20 20 01 00 00 00 00 00 01 00 00 00 00 00 00 C0
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 01 00 C2 FF 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00

    B00 D11 F00: VIA VT8233A/8235 PCI-ISA Bridge

    Offset 00: 06 11 77 31 87 00 10 02 00 00 01 06 00 00 80 00
    Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 06 11 77 31
    Offset 30: 00 00 00 00 C0 00 00 00 00 00 00 00 00 00 00 00
    Offset 40: 44 00 F8 0B 00 00 00 00 0C 20 00 00 44 00 08 08
    Offset 50: 81 0D 09 00 00 00 22 00 43 80 00 00 00 00 00 00
    Offset 60: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00
    Offset 70: 06 11 77 31 00 00 00 00 00 00 00 00 20 00 00 00
    Offset 80: 20 84 59 00 FA 30 00 00 01 40 00 00 00 00 00 00
    Offset 90: 00 7F 1F 88 B0 40 05 00 00 12 26 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 01 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 01 50 01 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00

    B00 D11 F01: VIA IDE Controller

    Offset 00: 06 11 71 05 07 00 90 02 06 8A 01 01 00 20 00 00
    Offset 10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 01 C0 00 00 00 00 00 00 00 00 00 00 06 11 71 05
    Offset 30: 00 00 00 00 C0 00 00 00 00 00 00 00 FF 01 00 00
    Offset 40: 0B F2 09 05 18 1C C0 00 20 20 20 20 FF 00 B6 B6
    Offset 50: F6 F6 17 F1 0C 03 00 00 A8 A8 A8 A8 00 00 00 00
    Offset 60: 00 02 00 00 00 00 00 00 00 02 00 00 00 00 00 00
    Offset 70: 02 01 00 00 00 00 00 00 02 01 00 00 00 00 00 00
    Offset 80: F8 AE 72 03 00 00 00 00 C8 D9 74 03 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 01 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 06 00 71 05 06 11 71 05 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00

    B00 D11 F05: VIA AC'97 Enhanced Audio Controller

    Offset 00: 06 11 59 30 01 00 10 02 50 00 01 04 00 00 00 00
    Offset 10: 01 C4 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 0F 27 7E 75
    Offset 30: 00 00 00 00 C0 00 00 00 00 00 00 00 16 03 00 00
    Offset 40: 01 CC 00 00 00 00 00 00 00 00 00 00 3F 00 00 00
    Offset 50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 01 00 02 06 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 01 00 02 06 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    B01 D00 F00: Gigabyte Radeon 9200 SE Video Adapter

    Offset 00: 02 10 64 59 07 00 B0 02 01 00 00 03 08 FF 80 00
    Offset 10: 08 00 00 D8 01 90 00 00 00 00 00 E1 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 58 14 18 40
    Offset 30: 00 00 00 00 58 00 00 00 00 00 00 00 10 01 08 00
    Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 58 14 18 40
    Offset 50: 01 00 02 06 00 00 00 00 02 50 30 00 1B 02 00 FF
    Offset 60: 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    B01 D00 F01: Gigabyte Radeon 9200 SE - Secondary Video Adapter

    Offset 00: 02 10 44 5D 07 00 B0 02 01 00 80 03 08 20 00 00
    Offset 10: 08 00 00 DC 00 00 FF E1 00 00 00 00 00 00 00 00
    Offset 20: 00 00 00 00 00 00 00 00 00 00 00 00 58 14 19 40
    Offset 30: 00 00 00 00 50 00 00 00 00 00 00 00 FF 00 08 00
    Offset 40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 50: 01 00 02 06 00 00 00 00 02 50 30 00 1B 02 00 FF
    Offset 60: 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset 90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
    Offset F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

    Debug - Video BIOS

    C000:0000 U.`.....................\.....IBM'.............. 761295520......
    C000:0040 ??..............2003/07/28 02:11.....>...p......DvN7.X..@.......
    C000:0080 ..R92S64T F1...(C) 1988-2003, ATI Technologies Inc. BK-ATI VER00
    C000:00C0 8.015.028.000. dagba166.f1 v611 .V280AGP DGD1UN...f.......f...\W
    C000:0100 ................X..@dY.........qVg..$.0...>...$TVS<...........Ax
    C000:0140 ....H.......................PCIR..dY........`.......ATI RADEON 9
    C000:0180 200.kk..........*{...).:.j{..3..................................
    C000:01C0 ...................VfW..0 ..3Q0`..........CD..<..... ....P ....
    C000:0200 P`........X .A`.X`........hA...............}..`................
    C000:0240 ...A.........M.......[......t...........0....px..r..|...........
    C000:0280 ...`..........UU..........UU..........I............Q...........Q
    C000:02C0 ...............M.......[.A...........@.....L.. .'H.....T..tWw..0
    C000:0300 .0.D.#S9.X.2.2u......dM..........................dM.........H...
    C000:0340 ....@.M.........D........4`...s.....H......o......H......f..M...
    C000:0380 ..............A...............A.................A...............
    C000:03C0 A...................A...............A........................H..

    Debug - Unknown

    Monitor ID LTN021E: Écran Plug-and-Play [NoDB]
    Monitor Model K15ANC/R/A

    The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
    a utilisation du processeur, le chiffre varie de 0 a 13 %
    Si j'ai bien compris, je n'ai pas de spyware mais mon problème viendrait des ram
    Merci
    0
  7. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut,

    Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
    • Redémarre ton ordinateur
    • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
    • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
    • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
    • Choisis ton compte.
    Déroule la liste des instructions ci-dessous :
    • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
    • Appuie sur Y pour commencer le processus de nettoyage.
    • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
    • Appuie sur une touche pour redémarrer le PC.
    • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
    • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
    • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
    • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
    • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !
    0
  8. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Coucou

    C'est rapide et de rien !

    a+
    0
  9. sergino17 Messages postés 36 Statut Membre 2
     
    hello,
    effectivement, c'est plus facile que je le pensait
    voici le report sdfix en attendant le hidjackthis

    SDFix: Version 1.74

    Run by Propri‚taire - 21/03/2007 - 23:19:37,20

    Microsoft Windows XP [version 5.1.2600]

    Running From: C:\SDFix

    Safe Mode:
    Checking Services:

    Restoring Windows Registry Entries
    Restoring Default Hosts File

    Rebooting...

    Normal Mode:
    Checking Files:

    No Trojan Files Found...

    ADS Check:

    C:\WINDOWS\system32
    No streams found.

    Final Check:

    Remaining Services:
    ------------------

    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\adslTV\\adslTV.exe"="C:\\Program Files\\adslTV\\adslTV.exe:*:Enabled:adslTV"
    "C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"="C:\\Program Files\\Freeplayer\\vlc\\vlc.exe:*:Enabled:VLC media player"
    "C:\\Program Files\\adslTV\\vlc.exe"="C:\\Program Files\\adslTV\\vlc.exe:*:Enabled:VLC media player"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
    "C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe"="C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe:*:Enabled:FreeEasyZap"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    Remaining Files:
    ---------------

    Checking For Files with Hidden Attributes :

    C:\WINDOWS\Temp\cpmyyz04.TMP

    Finished
    merci et

    en route pour un monde meilleur
    0
  10. sergino17 Messages postés 36 Statut Membre 2
     
    re hello
    je deviens un pro
    voici le hidjackthisLogfile of HijackThis v1.99.1
    Scan saved at 23:32:35, on 21/03/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16414)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\WINDOWS\system32\pctspk.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\notepad.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\WINDOWS\system32\cidaemon.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Documents and Settings\Propriétaire.SERGE.001\Bureau\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?e5a4a23e5af94ac78d85653648984880
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?e5a4a23e5af94ac78d85653648984880
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Kaspersky Anti-Virus 5.5 for Check Point™ FireWall-1® (kav4cpf1) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Check Point FireWall\Kav4cpf1.exe (file missing)
    O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe

    super
    a+
    0
  11. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut

    lol

    Vas sur le site https://virusscan.jotti.org/
    - Clic en haut à droite sur "Parcourir", navigue dans les dossiers et sélectionne ce fichier : C:\WINDOWS\Temp\cpmyyz04.TMP
    - Clic sur submit toujours en haut à droite
    - Le scan va se lancer, ça va prendre un petit instant
    - En bas, tu as le résultat du scan, copie/colle le résultat complet du scan ici.
    Aide : https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId662799
    0
  12. sergino17 Messages postés 36 Statut Membre 2
     
    Salut Regis
    je viens d'envoyer le résultat sur le site.
    je crois que j'approche du but (?)
    merci de ta patience et de ta gentillesse pour te mettre a ma portée
    A +
    0
  13. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut

    Lorsque tu le scannes, a la fin, il donne un rapport, tu l as vu?

    A+
    0
  14. sergino17 Messages postés 36 Statut Membre 2
     
    Salut
    je t'envoie le résultat de ce que j'ai fait
    j'ai été sur le site malekal pour mettre le résultat
    le t'envoie le tout :phpMyVisites
    je crois que j'ai envoyé le rapport au mauvais endroit
    merci
    A+

    Malekal.com site d''aide informatique

    - Malekal's forum - forum d'aide informatique Index du Forum » VIRUS : Aide Malwares (vers, trojans, spywares, hijack) » infection malware
    News du forum

    Bienvenue sur le forum malekal.com
    Logo malware complaints

    Pour les novices des forums, voici un petit tutorial qui vous explique Comment créer un sujet sur le forum

    La date/heure actuelle est Ven 23 Mar , 20:46 pm 2007
    Voir le sujet précédent | Voir le sujet suivant
    Répondre au sujet Page 1 sur 1

    infection malware
    Auteur Message
    sergelevine
    Invité

    Répondre en citant
    Message infection malware
    Last file scanned at least one scanner reported something about: server.exe (MD5: 65ea309e1e4526e05261ff36682d456c, size: 44032 bytes), detected by:

    Scanner Malware name
    AntiVir TR/Delphi.Downloader.Gen
    ArcaVir Trojan.Downloader.Banload.Btw
    Avast X
    AVG Antivirus Downloader.Generic3.YVE
    BitDefender Trojan.Downloader.Banload.BTW
    ClamAV Trojan.Downloader-2292
    Dr.Web Trojan.DownLoader.18418
    F-Prot Antivirus X
    F-Secure Anti-Virus Trojan-Downloader.Win32.Banload.btw
    Fortinet X
    Kaspersky Anti-Virus Trojan-Downloader.Win32.Banload.btw
    NOD32 a variant of Win32/TrojanDownloader.Banload.NMG
    Norman Virus Control W32/Banload.LEN
    Panda Antivirus X
    VirusBuster X
    VBA32 Trojan-Downloader.Win32.Banload.btw
    Bonjour a tou
    j'espere avoir bien compris ce que Régis(encore merci) m'a demandé
    voici le resultat
    merci d'avance

    Jeu 22 Mar , 22:27 pm 2007
    Malekal_morte
    Site Admin
    Site Admin
    Inscrit le: 10 Sep 2005
    Messages: 7934

    Répondre en citant
    Message
    Salut,

    Heuuuuuu tu peux me donner plus d'infos là ??!!
    Il t'a demandé quoi regis?

    _________________
    Sécuriser votre machine contre les malwares!
    Malware Complaints - Stand up and be Counted!
    Soutenez malekal.com en effectuant un don!
    - http://www.malekal.com -
    Jeu 22 Mar , 22:29 pm 2007 Voir le profil de l'utilisateur Envoyer un message privé [ Invisible ] Visiter le site web du posteur
    Invité

    Répondre en citant
    Message
    Vas sur le site https://virusscan.jotti.org/
    - Clic en haut à droite sur "Parcourir", navigue dans les dossiers et sélectionne ce fichier : C:\WINDOWS\Temp\cpmyyz04.TMP
    - Clic sur submit toujours en haut à droite
    - Le scan va se lancer, ça va prendre un petit instant
    - En bas, tu as le résultat du scan, copie/colle le résultat complet du scan ici.
    Aide : https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId662799
    ---Salut
    voici ce que Regis m'a donc demandé, j'espère avoir compris.
    merci

    Ven 23 Mar , 17:14 pm 2007
    Malekal_morte
    Site Admin
    Site Admin
    Inscrit le: 10 Sep 2005
    Messages: 7934

    Répondre en citant
    Message
    Je vois pas le rapport avec le forum...
    Tu devrais relire ce qui est inscri
    0
  15. sergino17 Messages postés 36 Statut Membre 2
     
    Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1
    File to upload & scan: Virus

    Service
    Service load:
    0% 100%
    File: cpmyyz04.TMP
    Status:
    OK(Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
    MD5 79fcad4e94ed64b1d285c7da6bbac73c
    Packers detected:
    -
    Scanner results
    Scan taken on 23 Mar 2007 19:55:45 (GMT)
    AntiVir
    Found nothing
    ArcaVir
    Found nothing
    Avast
    Found nothing
    AVG Antivirus
    Found nothing
    BitDefender
    Found nothing
    ClamAV
    Found nothing
    Dr.Web
    Found nothing
    F-Prot Antivirus
    Found nothing
    F-Secure Anti-Virus
    Found nothing
    Fortinet
    Found nothing
    Kaspersky Anti-Virus
    Found nothing
    NOD32
    Found nothing
    Norman Virus Control
    Found nothing
    Panda Antivirus
    Found nothing
    VirusBuster
    Found nothing
    VBA32
    Found nothing

    Powered by
    images/antivir.png images/arcabit.png images/avast.png images/avg.gif images/bitdefender.png images/clamav-logo1.png images/drweb.gif images/f-prot.png images/f-secure_logo.gif images/fortinet.gif images/kaspersky.png images/nod32.gif images/norman.png images/panda.png images/virusbuster.gif images/vba32.png
    Disclaimer
    This service is by no means 100% safe. If this scanner says 'OK', it does not necessarily mean the file is clean. There could be a whole new virus on the loose. NEVER EVER rely on one single product only, not even this service, even though it utilizes several products. Therefore, We cannot and will not be held responsible for any damage caused by results presented by this non-profit online service.

    Also, we are aware of the implications of a setup like this. We are sure this whole thing is by no means scientifically correct, since this is a fully automated service (although manual correction is possible). We are aware, in spite of efforts to proactively counter these, false positives might occur, for example. We do not consider this a very big issue, so please do not e-mail us about it. This is a simple online scan service, not the university of Wichita.

    Scanning can take a while, since several scanners are being used, plus the fact some scanners use very high levels of (time consuming) heuristics. Scanners used are Linux versions, differences with Windows scanners may or may not occur. Another note: some scanners will only report one virus when scanning archives with multiple pieces of malware.

    Virus definitions are updated every hour. There is a 15Mb limit per file. Please refrain from uploading tons of hex-edited or repacked variants of the same sample.

    Please do not ask for viruses uploaded here, unless you work for an anti-virus vendor. They are not for trade. This is a legitimate service, not a VX site. Viruses uploaded here will be distributed to antivirus vendors without exception. Read more about this in our privacy policy. If you do not want your files to be distributed, please do not send them at all.

    Sponsored by donations (in random order) from: Stormbyte Technologies LLC, The ClamAV project, Steve S., Eric Johansen, Eric Schechter, Paul Bokel, Wilders Security, Wilfried Lilie, Prevx, SonicWALL, Lance Mueller, Ewido networks, HotelScraper.com, people who donated in the past, and some people who prefer to remain anonymous... many thanks to all!
    Statistics
    Last file scanned at least one scanner reported something about: BootingRevamped.exe (MD5: c7643c5d36903176401e1ebd209f5b81, size: 1338451 bytes), detected by:

    Scanner Malware name
    AntiVir HEUR/Crypted
    ArcaVir X
    Avast X
    AVG Antivirus X
    BitDefender DeepScan:Generic.Malware.G!SKI!!FLMWX!!Bg.1FDF1674
    ClamAV X
    Dr.Web X
    F-Prot Antivirus X
    F-Secure Anti-Virus X
    Fortinet X
    Kaspersky Anti-Virus X
    NOD32 X
    Norman Virus Control X
    Panda Antivirus X
    VirusBuster X
    VBA32 X

    You're free to (mis)interpret these automated, flawed statistics at your own discretion. For antivirus comparisons, visit AV comparatives
    We are not affiliated with any third parties that conduct tests using this service.

    Frequently asked questions - Feedback - Privacy policy

    Debian

    Page generated by JTPL

    Copyright © 2004-2007 Jordi Bosveld <jotti@jotti.org>
    je me sui endu compte que j'avais mis le rapport au mauvais endreoit
    voici un autre rapport fait a l'instant
    merci
    a+
    0
  16. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut

    Supprime:

    C:\WINDOWS\Temp\cpmyyz04.TMP

    A+
    0
  17. sergino17 Messages postés 36 Statut Membre 2
     
    Salut
    j'essaie de trouver ce fichier, le seul moyen que je connaisse c'est de lancer une recherche, ou il ne trouve pas, ou il redémarre au bout d'un moment j'ai essayé en mode sans échec.
    A un moment, il s'est mis a redémarrer tellement vite que plus rien ne répondait, ni F10, F5, F8, échap, delete, je suis en sueur mais j'ai réussi a le remettre en route.
    comment faire apparaitre ce fichier?
    merci
    0
  18. Regis59 Messages postés 21143 Date d'inscription   Statut Contributeur sécurité Dernière intervention   1 349
     
    Salut,

    Execute ceci:

    Clean Up 40:
    http://pageperso.aol.fr/balltrap34/CleanUp40.exe
    -aide en image:(merci à Balltrap34).
    http://pageperso.aol.fr/balltrap34/democleanup.htm

    Si tu as le moindre probleme, signale le moi.

    Puis relance SDfix, copie colle le rapport.

    A+
    0
  19. sergino17 Messages postés 36 Statut Membre 2
     
    salut je me depeche
    SDFix: Version 1.74

    Run by Propri‚taire - 24/03/2007 - 16:04:48,20

    Microsoft Windows XP [version 5.1.2600]

    Running From: C:\SDFix

    Safe Mode:
    Checking Services:

    Restoring Windows Registry Entries
    Restoring Default Hosts File

    Rebooting...

    Normal Mode:
    Checking Files:

    No Trojan Files Found...

    ADS Check:

    C:\WINDOWS\system32
    No streams found.

    Final Check:

    Remaining Services:
    ------------------

    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "C:\\Program Files\\adslTV\\adslTV.exe"="C:\\Program Files\\adslTV\\adslTV.exe:*:Enabled:adslTV"
    "C:\\Program Files\\Freeplayer\\vlc\\vlc.exe"="C:\\Program Files\\Freeplayer\\vlc\\vlc.exe:*:Enabled:VLC media player"
    "C:\\Program Files\\adslTV\\vlc.exe"="C:\\Program Files\\adslTV\\vlc.exe:*:Enabled:VLC media player"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
    "C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe"="C:\\Program Files\\FreeEasyZap\\FreeEasyZap.exe:*:Enabled:FreeEasyZap"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    Remaining Files:
    ---------------

    Checking For Files with Hidden Attributes :

    Finished
    merci
    0
  20. sergino17 Messages postés 36 Statut Membre 2
     
    Logfile of HijackThis v1.99.1
    Scan saved at 16:49:19, on 24/03/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16414)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\WINDOWS\system32\pctspk.exe
    C:\WINDOWS\System32\snmp.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\notepad.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Documents and Settings\Propriétaire.SERGE.001\Bureau\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?e5a4a23e5af94ac78d85653648984880
    O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?e5a4a23e5af94ac78d85653648984880
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Kaspersky Anti-Virus 5.5 for Check Point™ FireWall-1® (kav4cpf1) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Check Point FireWall\Kav4cpf1.exe (file missing)
    O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe

    a+
    il re démarre souvent
    0
  21. sergino17
     
    salut
    meme en mode sans echec il redemarre
    pas facile pour moi mais je m'en sort
    a+
    0
  • 1
  • 2
  • 3
  • 4