Sujet Précédent Sujet Suivant

Windows reboot et page bleue

chandler132 Messages postés 24 Statut Membre -  
Zempachi Messages postés 7572 Statut Contributeur -
bonjour a Tous !

Page bleue + vidage memoire
Je ne fais que d'avoir ce probleme
Windows XP pro 64-bits SP2
Ordi neuf : 4 mois
Processor : AMD ATHLON 64 4000+ 2.41ghz
RAM: 1Gb 3200 DDR Crucial ( 2x512mb)
PAE " activé "
Motherboard : NVIDIA nForce4-A939
Graphic Card : NVIDIA GeForce 7950 GT

Je vous post 2 rapport 1 kaspersky et 1 Hijackthis apres avoir lancer des scan de Adware and spybot.

J'ai réinstallé Windows XP pro 64bits apres avoir formaté mon HD,le prob revient et a n'importe quel moment.

LOG FROM KASPERSKY:

Tuesday, May 08, 2007 4:18:08 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 8/05/2007
Kaspersky Anti-Virus database records: 315445
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
F:\
G:\
H:\
I:\
Scan Statistics
Total number of scanned objects 19119
Number of viruses found 1
Number of infected objects 1
Number of suspicious objects 0
Duration of the scan process 00:20:27

Infected Object Name Virus Name Last Action
C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\cert8.db Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\history.dat Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\key3.db Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\parent.lock Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\call256.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\callmember256.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\chat256.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\chat512.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\chatmember256.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\chatmsg256.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\chatsync\f8\f84e681c4c0f4957.dat Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\contactgroup256.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\dyncontent\bundle.dat Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\index2.dat Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\profile16384.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\user1024.dbb Object is locked skipped
C:\Documents and Settings\Admin\Application Data\Skype\kate.and.rudi\user16384.dbb Object is locked skipped
C:\Documents and Settings\Admin\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Application Data\Mozilla\Firefox\Profiles\1bten2jl.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Temp\~DF9DC9.tmp Object is locked skipped
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Admin\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Admin\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\MailBuddy.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\Internet Logs\XPSP2-F014093EE.ldb Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{9A75C9EC-F766-4314-8241-0B1C3364A58B}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.idx Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\ZLT00a21.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT03636.TMP Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
I:\Install\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.e skipped
Scan process completed.

LOG FROM HIJACKTHIS

Logfile of HijackThis v1.99.1
Scan saved at 15:58:34, on 08/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZoneLabs\avsys\ScanningProcess.exe
C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\MagicTune Premium\GammaTray.exe
C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Admin\Mes documents\Downloads\Compressed\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://meteofrance.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/toolbar/ie8/sidebar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files\neuf telecom\neuf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - Global Startup: GammaTray.lnk = ?
O4 - Global Startup: NaturalColorLoad.lnk = ?
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1686C385-8891-4CC6-9667-796AF7FDF2D0}: NameServer = 86.64.145.141,84.103.237.141
O17 - HKLM\System\CS1\Services\Tcpip\..\{1686C385-8891-4CC6-9667-796AF7FDF2D0}: NameServer = 86.64.145.141,84.103.237.141
O17 - HKLM\System\CS2\Services\Tcpip\..\{1686C385-8891-4CC6-9667-796AF7FDF2D0}: NameServer = 86.64.145.141,84.103.237.141
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)
O23 - Service: MagicTuneEngine - Unknown owner - C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Configuration: Windows XP SP2 PRO 64bits
Firefox 2.0.0.3
A voir également:

3 réponses

Réponse 1 / 3
ouafnico Messages postés 27 Statut Membre 2
 
quel est le message d'erreur à ton écran bleu ?
0
Réponse 2 / 3
chandler132 Messages postés 24 Statut Membre
 
ca peut etre : memory_management ou autre chose. Ca n'est jamais la meme chose.Des fois, windows reboot sans aucune page bleue ou erreur.
mes prb sont toujours la et ca me prend la tete.
l'ordi redemarre sans prévenir, les ecran bleu sont toujours là.
J'ai remplacé Zone Alarm par Kaspersky => ca ne change rien.

J'ai tenté de faire un démarrage sélectif : msconfig :

*démarrage sélectif => onglet service, j'ai masqué tous les services microsoft et j'ai déselectionné les reste => ca ne change rien.

*démarrage en mode diagnostique : ne change rien non plus

*j'utilise CCleaner pour nettoyer mon ordi, et j'ai corrigé des clé de registre.

*quand ca plante, des fois dans Emule j'ai des téléchargements qui disparaissent

A l'aide !! est ce que ca peut etre du hardware ?
0
Réponse 3 / 3
Zempachi Messages postés 7572 Statut Contributeur 906
 
Et bien on a déjà une piste quand on voit ton log kaspersky, on peut lire:

Number of viruses found 1
Number of infected objects 1

Sans parler de la longue liste des objets touchés!!

Quant au log heijackthis me semble pas poser de pb sauf peut etre ceci:
O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)
M'enfin comme il s'agit d'un fichier manquant, ca devrait pas venir de là.
0