PC bureau
tatawii
Messages postés
44
Statut
Membre
-
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,
Je vous envoie un rapport d'hijackthis de mon PC car depuis quelques temps il ne démarre plus assez bien, il se bloque sur la page de démarrage et il plante très souvent. C'est un PC que j'utilise plus pour aller sur le net, je vais m'en servir pour des jeux et pour graver seulement, donc j'ai désinstallé pas mal de programmes.
Par la suite, j'ai fait un nettoyage complet, CCleaner, regcleaner, tune up (1203 problèmes résolus!), défragmentation.....
J'aimerai savoir si il y a des gros soucis dans le Windows XP, si vous me conseillez de le formater....
Bref, besoin de conseils, merci.
Voici le rapport:
Logfile of HijackThis v1.99.1
Scan saved at 22:28:58, on 13/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\lclock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Documents and Settings\vero\Bureau\nett\hijack\test.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] c:\progra~1\fichie~1\installshield\updateservice\isuspm.exe -startup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LClock] lclock.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLL
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) -
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
Je vous envoie un rapport d'hijackthis de mon PC car depuis quelques temps il ne démarre plus assez bien, il se bloque sur la page de démarrage et il plante très souvent. C'est un PC que j'utilise plus pour aller sur le net, je vais m'en servir pour des jeux et pour graver seulement, donc j'ai désinstallé pas mal de programmes.
Par la suite, j'ai fait un nettoyage complet, CCleaner, regcleaner, tune up (1203 problèmes résolus!), défragmentation.....
J'aimerai savoir si il y a des gros soucis dans le Windows XP, si vous me conseillez de le formater....
Bref, besoin de conseils, merci.
Voici le rapport:
Logfile of HijackThis v1.99.1
Scan saved at 22:28:58, on 13/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\lclock.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Documents and Settings\vero\Bureau\nett\hijack\test.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] c:\progra~1\fichie~1\installshield\updateservice\isuspm.exe -startup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LClock] lclock.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLL
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) -
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
A voir également:
- PC bureau
- Reinitialiser pc - Guide
- Pc lent - Guide
- Downloader for pc - Télécharger - Téléchargement & Transfert
- Double ecran pc - Guide
- Forcer demarrage pc - Guide
7 réponses
slt
cela peut venir d'un soucis materiel
mais comme tu n'as aucune protection cela peut etre une infection
installe un antivirus et antiespion et scan avec
scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
installe antivir: et scan avec et colle le rapport:
https://www.malekal.com/avira-free-security-antivirus-gratuit/
cela peut venir d'un soucis materiel
mais comme tu n'as aucune protection cela peut etre une infection
installe un antivirus et antiespion et scan avec
scan avec
MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
installe antivir: et scan avec et colle le rapport:
https://www.malekal.com/avira-free-security-antivirus-gratuit/
Bonsoir,
J'ai fait tout ce que vous m'avez dit:
Rapport Malwarebyte:
Malwarebytes' Anti-Malware 1.12
Version de la base de données: 722
Type de recherche: Examen rapide
Eléments examinés: 34208
Temps écoulé: 3 minute(s), 3 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> No action taken.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
J'ai mis les deux infections en quarantaine, faut il que je les supprimes?
Rapport antivir:
Avira AntiVir Personal
Report file date: mercredi 14 mai 2008 19:58
Scanning for 1165085 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: LSDBOT-III
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.3.62 337408 Bytes 21/03/2008 19:12:34
ANTIVIR3.VDF : 7.0.3.68 57856 Bytes 25/03/2008 08:27:50
Engineversion : 8.1.0.28
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.19 229754 Bytes 07/04/2008 15:34:44
AESCN.DLL : 8.1.0.12 115060 Bytes 07/04/2008 15:34:44
AERDL.DLL : 8.1.0.19 418164 Bytes 07/04/2008 15:34:44
AEPACK.DLL : 8.1.1.0 364918 Bytes 18/03/2008 11:20:42
AEOFFICE.DLL : 8.1.0.15 192889 Bytes 07/04/2008 15:34:44
AEHEUR.DLL : 8.1.0.15 1147253 Bytes 07/04/2008 15:34:44
AEHELP.DLL : 8.1.0.11 115061 Bytes 07/04/2008 15:34:43
AEGEN.DLL : 8.1.0.15 299379 Bytes 07/04/2008 15:34:43
AEEMU.DLL : 8.1.0.5 430450 Bytes 07/04/2008 15:34:43
AECORE.DLL : 8.1.0.25 168309 Bytes 08/04/2008 09:58:32
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: mercredi 14 mai 2008 19:58
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'LClock.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'issch.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'msdtc.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
27 processes with 27 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '31' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <stockage>
End of the scan: mercredi 14 mai 2008 20:24
Used time: 26:19 min
The scan has been done completely.
4382 Scanning directories
199170 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
199170 Files not concerned
817 Archives were scanned
2 Warnings
0 Notes
Il démarre toujours très mal, je verrai si il plante encore.
Voila, vu que mon PC n'est pas connecté a internet, suis je obligé de laisser ces logiciels installés?
Merci de votre aide.
J'ai fait tout ce que vous m'avez dit:
Rapport Malwarebyte:
Malwarebytes' Anti-Malware 1.12
Version de la base de données: 722
Type de recherche: Examen rapide
Eléments examinés: 34208
Temps écoulé: 3 minute(s), 3 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> No action taken.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
J'ai mis les deux infections en quarantaine, faut il que je les supprimes?
Rapport antivir:
Avira AntiVir Personal
Report file date: mercredi 14 mai 2008 19:58
Scanning for 1165085 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: LSDBOT-III
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.3.62 337408 Bytes 21/03/2008 19:12:34
ANTIVIR3.VDF : 7.0.3.68 57856 Bytes 25/03/2008 08:27:50
Engineversion : 8.1.0.28
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.19 229754 Bytes 07/04/2008 15:34:44
AESCN.DLL : 8.1.0.12 115060 Bytes 07/04/2008 15:34:44
AERDL.DLL : 8.1.0.19 418164 Bytes 07/04/2008 15:34:44
AEPACK.DLL : 8.1.1.0 364918 Bytes 18/03/2008 11:20:42
AEOFFICE.DLL : 8.1.0.15 192889 Bytes 07/04/2008 15:34:44
AEHEUR.DLL : 8.1.0.15 1147253 Bytes 07/04/2008 15:34:44
AEHELP.DLL : 8.1.0.11 115061 Bytes 07/04/2008 15:34:43
AEGEN.DLL : 8.1.0.15 299379 Bytes 07/04/2008 15:34:43
AEEMU.DLL : 8.1.0.5 430450 Bytes 07/04/2008 15:34:43
AECORE.DLL : 8.1.0.25 168309 Bytes 08/04/2008 09:58:32
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: mercredi 14 mai 2008 19:58
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'LClock.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'issch.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'msdtc.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
27 processes with 27 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '31' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <stockage>
End of the scan: mercredi 14 mai 2008 20:24
Used time: 26:19 min
The scan has been done completely.
4382 Scanning directories
199170 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
2 Files cannot be scanned
199170 Files not concerned
817 Archives were scanned
2 Warnings
0 Notes
Il démarre toujours très mal, je verrai si il plante encore.
Voila, vu que mon PC n'est pas connecté a internet, suis je obligé de laisser ces logiciels installés?
Merci de votre aide.
ok encore des problèmes???
si oui:
télécharge combofix (par sUBs) ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et enregistre le sur le bureau.
déconnecte toi d'internet et ferme toutes tes applications.
désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)
double-clique sur combofix.exe et suis les instructions
à la fin, il va produire un rapport C:\ComboFix.txt
réactive ton parefeu, ton antivirus, la garde de ton antispyware
copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.
Tu as un tutoriel complet ici :
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
si oui:
télécharge combofix (par sUBs) ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et enregistre le sur le bureau.
déconnecte toi d'internet et ferme toutes tes applications.
désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)
double-clique sur combofix.exe et suis les instructions
à la fin, il va produire un rapport C:\ComboFix.txt
réactive ton parefeu, ton antivirus, la garde de ton antispyware
copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.
Tu as un tutoriel complet ici :
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
bonjour, voici mon rapport combo:
ComboFix 08-05-12.1 - vero 2008-05-17 2:22:39.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.301 [GMT 2:00]
Endroit: C:\Documents and Settings\vero\Bureau\nett\combo\ComboFix.exe
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-17 to 2008-05-17 ))))))))))))))))))))))))))))))))))))
.
2008-05-17 01:22 . 2008-05-17 01:34 <REP> d-------- C:\Documents and Settings\vero\Application Data\smc
2008-05-17 00:46 . 2008-05-17 00:46 <REP> d-------- C:\TEMP\gm_ttt_11406
2008-05-17 00:42 . 2008-05-17 00:42 <REP> d-------- C:\Program Files\DatawareGames
2008-05-17 00:38 . 2008-05-17 00:41 <REP> d-------- C:\Program Files\DOSBox-0.70
2008-05-17 00:20 . 2008-05-17 00:20 <REP> d-------- C:\Program Files\microsoft frontpage
2008-05-14 19:53 . 2008-05-14 19:53 <REP> d-------- C:\Program Files\Avira
2008-05-14 19:26 . 2008-05-14 19:30 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-14 19:26 . 2008-05-14 19:26 <REP> d-------- C:\Documents and Settings\vero\Application Data\Malwarebytes
2008-05-14 19:26 . 2008-05-14 19:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-14 19:26 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-14 19:26 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-13 21:39 . 2008-05-13 21:39 0 --ah----- C:\Documents and Settings\vero\ntuser.dat_TU_59569.LOG
2008-05-13 21:39 . 2008-05-13 21:39 0 --ah----- C:\Documents and Settings\NetworkService\NTUSER.DAT_TU_14818.LOG
2008-05-13 21:39 . 2008-05-13 21:39 0 --ah----- C:\Documents and Settings\LocalService\NTUSER.DAT_TU_33103.LOG
2008-05-12 19:22 . 2008-05-12 19:39 724,992 --a------ C:\WINDOWS\iun6002.exe
2008-05-12 18:47 . 2008-05-12 18:47 <REP> d-------- C:\Program Files\ReflexiveArcade
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-14 17:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira
2008-05-12 11:05 --------- d-----w C:\Program Files\Java
2008-05-12 11:03 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-12 11:07 --------- d-----w C:\Documents and Settings\vero\Application Data\Zylom
2008-04-12 11:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Awem
2008-04-07 18:14 --------- d-----w C:\Documents and Settings\vero\Application Data\TheScruffs
2008-03-30 10:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\SpinTop Games
2008-03-21 23:03 --------- d-----w C:\Program Files\VideoLAN
2008-03-21 23:03 --------- d-----w C:\Documents and Settings\vero\Application Data\vlc
2007-01-05 01:34 16,384 -csha-w C:\WINDOWS\system32\%USERPROFILE%\Local Settings\Temp\Cookies\index.dat
2007-01-05 01:34 32,768 -csha-w C:\WINDOWS\system32\%USERPROFILE%\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat
2007-01-05 01:34 16,384 -csha-w C:\WINDOWS\system32\%USERPROFILE%\Local Settings\Temp\History\History.IE5\index.dat
.
------- Sigcheck -------
2007-02-28 18:08 2184192 8e244108562e0e452eb68dff64cb08a9 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
2007-02-28 18:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
2007-02-28 18:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\system32\dllcache\ntoskrnl.exe
.
((((((((((((((((((((((((((((( snapshot@2008-05-16_23.54.28,43 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-16 21:49:41 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-16 23:59:15 2,048 --s-a-w C:\WINDOWS\bootstat.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-07-31 11:45 139264]
"LClock"="lclock.exe" [2004-12-08 19:06 65536 C:\WINDOWS\LClock.exe]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 18:09 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 17:12 131072]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-17 08:15 81920]
"ISUSPM Startup"="c:\progra~1\fichie~1\installshield\updateservice\isuspm.exe" [2005-02-17 08:15 221184]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00 132496]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 18:09 15360]
"ALUAlert"="C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"LSD_III"="C:\WINDOWS\LSD\end.cmd" [2005-07-14 18:39 2310]
"tscuninstall"="C:\WINDOWS\system32\tscupgrd.exe" [2004-08-19 17:52 44544]
"nlpo_01"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_02"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_03"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_04"="cmd.exe" [2004-08-19 18:09 400896 C:\WINDOWS\system32\cmd.exe]
"nlpo_05"="cmd.exe" [2004-08-19 18:09 400896 C:\WINDOWS\system32\cmd.exe]
"nlpo_06"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_07"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-01-01 03:16:14 113664]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoSMBalloonTip"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.avrn"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avidavicodec.dll
"vidc.advj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avidavicodec.dll
"vidc.mszh"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avimszh.dll
"vidc.zlib"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avizlib.dll
"vidc.cscd"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\camcodec.dll
"vidc.cvid"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\iccvid.dll
"msacm.trspch"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\tssoft32.acm
"vidc.em2v"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\etxcodec.dll
"vidc.mkvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\kmvidc32.dll
"vidc.hfyu"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\huffyuv.dll
"msacm.lameacm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\lameacm.acm
"msacm.lhacm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\lhacm.acm
"msacm.l3acm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\l3codecp.acm
"vidc.sjpg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\pmjpeg32.dll
"vidc.dmb2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\pmjpeg32.dll
"vidc.gepj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\pmjpeg32.dll
"vidc.qpeg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Qpeg32.dll
"vidc.q1.0"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Qpeg32.dll
"msacm.sl_anet"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\sl_anet.acm
"vidc.tscc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\tsccvid.dll
"vidc.vifp"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\vfcodec.dll
"vidc.wrpr"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\aviwrap.dll
"vidc.wnv1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\wnvplay1.dll
"vidc.advs"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Adaptec\Dvc.dll
"vidc.aflc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\flccodec32.dll
"vidc.afli"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\flccodec32.dll
"vidc.aasc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\Aasc32.dll
"vidc.aas4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\Aasc32.dll
"vidc.asv1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ASUS\asusasv1.dll
"vidc.asv2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ASUS\asusasv2.dll
"vidc.asvx"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ASUS\asusasv2.dll
"vidc.vcr1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ATI\ativcr1.dll
"vidc.vcr2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ATI\ativcr2.dll
"vidc.yv12"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ATI\atiyuv12.DLL
"vidc.mwv1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Aware\icmw_32.dll
"vidc.bt20"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Brooktree\btvvc32.drv
"vidc.y41p"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Brooktree\btvvc32.drv
"msacm.pcdv"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Canopus\pcdv.acm
"vidc.cdvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Canopus\CSCCDVC.DLL
"vidc.ddvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Canopus\CSCdvsd.DLL
"vidc.png1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Core\CorePNG_vfw.dll
"msacm.CoreFLAC_ACM"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Core\CoreFLAC_ACM.acm
"vidc.davc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\dicas\davcvfw.dll
"vidc.div3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32.dll
"vidc.div5"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32.dll
"vidc.mpg3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32.dll
"vidc.div4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32f.dll
"vidc.div6"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32f.dll
"vidc.ap41"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32f.dll
"vidc.dvx4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\divx4.dll
"vidc.divx"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivX520.dll
"msacm.divxa32"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\divxa32.acm
"vidc.frwd"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwd.dll
"vidc.frwt"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwd.dll
"vidc.frwa"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwt.dll
"vidc.frwu"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwu.dll
"vidc.glzw"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Gabest\GLZW.dll
"vidc.gpeg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Gabest\GPEG.dll
"vidc.i263"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\i263_32.drv
"vidc.iv30"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv33"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv34"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv35"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv36"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv37"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv38"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv39"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv40"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv41"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv42"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv43"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv44"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv45"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv46"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv47"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv48"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv49"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.ir21"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\IR21_R.DLL
"vidc.rt21"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\IR21_R.DLL
"msacm.imc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\IMC32.ACM
"vidc.lead"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\LEAD\LCODCCMP.DLL
"vidc.dvsd"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCDVD_32.DLL
"vidc.dvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCDVD_32.DLL
"vidc.dvcs"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCDVD_32.DLL
"vidc.dcmj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCMJPG32.DLL
"vidc.avi1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCMJPG32.DLL
"vidc.avi2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCMJPG32.DLL
"vidc.dv25"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.dv50"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.msmc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mmjp"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx5"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx6"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx7"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx8"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx9"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mmes"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"msacm.msadpcm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msadp32.acm
"msacm.imaadpcm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\imaadp32.acm
"msacm.msg711"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msg711.acm
"msacm.msg723"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msg723.acm
"msacm.msgsm610"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msgsm32.acm
"vidc.m261"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msh261.drv
"vidc.m263"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msh263.drv
"vidc.mrle"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msrle32.dll
"vidc.msvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msvidc32.dll
"vidc.cram"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msvidc32.dll
"vidc.mpg4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp41"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp42"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp43"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp4s"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp4v"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.wmv3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\WMV9VCM.dll
"msacm.msaudio1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msaud32.acm
"vidc.vixl"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Miro\miroxl32.dll
"vidc.nt00"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Newtek\ntcodec.dll
"msacm.vorbis"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\OGG\vorbis.acm
"vidc.vp30"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp31vfw.dll
"vidc.vp31"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp31vfw.dll
"vidc.vp60"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp6vfw.dll
"vidc.vp61"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp6vfw.dll
"vidc.pdvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Panasonic\idvcodec.dll
"vidc.ipdv"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Panasonic\idvcodec.dll
"vidc.pvw2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pegasus\pvwv220.dll
"vidc.pimj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pegasus\pvljpg20.dll
"vidc.mjpx"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pegasus\pvmjpg21.dll
"vidc.miro"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\mirodv2avi.dll
"vidc.dcap"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\mirodv2avi.dll
"vidc.mjpa"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\rtmjpgcdc.dll
"vidc.gpjm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\rtmjpgcdc.dll
"vidc.pim1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\pclepim1.dll
"msacm.qmpeg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\QDesign\qmpeg.acm
"vidc.rmp4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\REALmagic\rmp4.dll
"vidc.rud0"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Rududu\rududu.dll
"msacm.at3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\SONY\atrac3.acm
"vidc.sony"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\SONY\sonydv.dll
"vidc.dvcp"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\SONY\sonydv.dll
"vidc.s422"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Tekram\tekyuv.dll
"vidc.t420"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Toshiba\tsbyuv.dll
"vidc.y411"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Toshiba\tsbyuv.dll
"vidc.vssv"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Vanguard Software Sollutions\vsscodec.dll
"msacm.voxacm160"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\VoxWare\vct3216.acm
"vidc.xvid"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\XviD\xvidvfw.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"CmPCIaudio"=RunDll32 CMICNFG3.CPL,CMICtrlWnd
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime
"Controleur de calendrier pour Ulead Photo Express"=D:\mes doc\fichier\log photo\photo\calcheck.exe
R0 nvcchflt;NVIDIA Disk Cache Filter Driver;C:\WINDOWS\system32\DRIVERS\nvcchflt.sys [2005-02-11 20:11]
R0 Si3112r;Silicon Image SiI 3112 SATARaid Controller;C:\WINDOWS\system32\DRIVERS\SI3112r.sys [2004-02-09 18:15]
R3 ati2mtaa;ati2mtaa;C:\WINDOWS\system32\DRIVERS\ati2mtaa.sys [2004-08-19 17:53]
S0 ElbyVCD;ElbyVCD;C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys []
S1 pci32;Derkz864;C:\WINDOWS\system32\drivers\pci32.sys []
S2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 18:10]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-03-28 16:25:12 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
- C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-17 02:23:58
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-05-17 2:24:40
ComboFix-quarantined-files.txt 2008-05-17 00:24:35
ComboFix2.txt 2008-05-16 21:54:44
Pre-Run: 7,482,077,184 octets libres
Post-Run: 7,474,319,360 octets libres
269
Merci de votre aide.
ComboFix 08-05-12.1 - vero 2008-05-17 2:22:39.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.301 [GMT 2:00]
Endroit: C:\Documents and Settings\vero\Bureau\nett\combo\ComboFix.exe
[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.
((((((((((((((((((((((((((((( Fichiers créés 2008-04-17 to 2008-05-17 ))))))))))))))))))))))))))))))))))))
.
2008-05-17 01:22 . 2008-05-17 01:34 <REP> d-------- C:\Documents and Settings\vero\Application Data\smc
2008-05-17 00:46 . 2008-05-17 00:46 <REP> d-------- C:\TEMP\gm_ttt_11406
2008-05-17 00:42 . 2008-05-17 00:42 <REP> d-------- C:\Program Files\DatawareGames
2008-05-17 00:38 . 2008-05-17 00:41 <REP> d-------- C:\Program Files\DOSBox-0.70
2008-05-17 00:20 . 2008-05-17 00:20 <REP> d-------- C:\Program Files\microsoft frontpage
2008-05-14 19:53 . 2008-05-14 19:53 <REP> d-------- C:\Program Files\Avira
2008-05-14 19:26 . 2008-05-14 19:30 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-14 19:26 . 2008-05-14 19:26 <REP> d-------- C:\Documents and Settings\vero\Application Data\Malwarebytes
2008-05-14 19:26 . 2008-05-14 19:26 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-14 19:26 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-14 19:26 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-13 21:39 . 2008-05-13 21:39 0 --ah----- C:\Documents and Settings\vero\ntuser.dat_TU_59569.LOG
2008-05-13 21:39 . 2008-05-13 21:39 0 --ah----- C:\Documents and Settings\NetworkService\NTUSER.DAT_TU_14818.LOG
2008-05-13 21:39 . 2008-05-13 21:39 0 --ah----- C:\Documents and Settings\LocalService\NTUSER.DAT_TU_33103.LOG
2008-05-12 19:22 . 2008-05-12 19:39 724,992 --a------ C:\WINDOWS\iun6002.exe
2008-05-12 18:47 . 2008-05-12 18:47 <REP> d-------- C:\Program Files\ReflexiveArcade
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-14 17:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avira
2008-05-12 11:05 --------- d-----w C:\Program Files\Java
2008-05-12 11:03 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-04-12 11:07 --------- d-----w C:\Documents and Settings\vero\Application Data\Zylom
2008-04-12 11:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Awem
2008-04-07 18:14 --------- d-----w C:\Documents and Settings\vero\Application Data\TheScruffs
2008-03-30 10:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\SpinTop Games
2008-03-21 23:03 --------- d-----w C:\Program Files\VideoLAN
2008-03-21 23:03 --------- d-----w C:\Documents and Settings\vero\Application Data\vlc
2007-01-05 01:34 16,384 -csha-w C:\WINDOWS\system32\%USERPROFILE%\Local Settings\Temp\Cookies\index.dat
2007-01-05 01:34 32,768 -csha-w C:\WINDOWS\system32\%USERPROFILE%\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat
2007-01-05 01:34 16,384 -csha-w C:\WINDOWS\system32\%USERPROFILE%\Local Settings\Temp\History\History.IE5\index.dat
.
------- Sigcheck -------
2007-02-28 18:08 2184192 8e244108562e0e452eb68dff64cb08a9 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
2007-02-28 18:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
2007-02-28 18:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\system32\dllcache\ntoskrnl.exe
.
((((((((((((((((((((((((((((( snapshot@2008-05-16_23.54.28,43 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-16 21:49:41 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-16 23:59:15 2,048 --s-a-w C:\WINDOWS\bootstat.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2006-07-31 11:45 139264]
"LClock"="lclock.exe" [2004-12-08 19:06 65536 C:\WINDOWS\LClock.exe]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 18:09 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 17:12 131072]
"ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2005-02-17 08:15 81920]
"ISUSPM Startup"="c:\progra~1\fichie~1\installshield\updateservice\isuspm.exe" [2005-02-17 08:15 221184]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00 132496]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 18:09 15360]
"ALUAlert"="C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe" [ ]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"LSD_III"="C:\WINDOWS\LSD\end.cmd" [2005-07-14 18:39 2310]
"tscuninstall"="C:\WINDOWS\system32\tscupgrd.exe" [2004-08-19 17:52 44544]
"nlpo_01"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_02"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_03"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_04"="cmd.exe" [2004-08-19 18:09 400896 C:\WINDOWS\system32\cmd.exe]
"nlpo_05"="cmd.exe" [2004-08-19 18:09 400896 C:\WINDOWS\system32\cmd.exe]
"nlpo_06"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
"nlpo_07"="advpack.dll" [2007-12-07 04:08 124928 C:\WINDOWS\system32\advpack.dll]
C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe [2005-01-01 03:16:14 113664]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoSMBalloonTip"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.avrn"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avidavicodec.dll
"vidc.advj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avidavicodec.dll
"vidc.mszh"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avimszh.dll
"vidc.zlib"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\avizlib.dll
"vidc.cscd"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\camcodec.dll
"vidc.cvid"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\iccvid.dll
"msacm.trspch"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\tssoft32.acm
"vidc.em2v"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\etxcodec.dll
"vidc.mkvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\kmvidc32.dll
"vidc.hfyu"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\huffyuv.dll
"msacm.lameacm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\lameacm.acm
"msacm.lhacm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\lhacm.acm
"msacm.l3acm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\l3codecp.acm
"vidc.sjpg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\pmjpeg32.dll
"vidc.dmb2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\pmjpeg32.dll
"vidc.gepj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\pmjpeg32.dll
"vidc.qpeg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Qpeg32.dll
"vidc.q1.0"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Qpeg32.dll
"msacm.sl_anet"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\sl_anet.acm
"vidc.tscc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\tsccvid.dll
"vidc.vifp"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\vfcodec.dll
"vidc.wrpr"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\aviwrap.dll
"vidc.wnv1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\wnvplay1.dll
"vidc.advs"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Adaptec\Dvc.dll
"vidc.aflc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\flccodec32.dll
"vidc.afli"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\flccodec32.dll
"vidc.aasc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\Aasc32.dll
"vidc.aas4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Autodesk\Aasc32.dll
"vidc.asv1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ASUS\asusasv1.dll
"vidc.asv2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ASUS\asusasv2.dll
"vidc.asvx"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ASUS\asusasv2.dll
"vidc.vcr1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ATI\ativcr1.dll
"vidc.vcr2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ATI\ativcr2.dll
"vidc.yv12"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\ATI\atiyuv12.DLL
"vidc.mwv1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Aware\icmw_32.dll
"vidc.bt20"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Brooktree\btvvc32.drv
"vidc.y41p"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Brooktree\btvvc32.drv
"msacm.pcdv"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Canopus\pcdv.acm
"vidc.cdvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Canopus\CSCCDVC.DLL
"vidc.ddvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Canopus\CSCdvsd.DLL
"vidc.png1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Core\CorePNG_vfw.dll
"msacm.CoreFLAC_ACM"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Core\CoreFLAC_ACM.acm
"vidc.davc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\dicas\davcvfw.dll
"vidc.div3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32.dll
"vidc.div5"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32.dll
"vidc.mpg3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32.dll
"vidc.div4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32f.dll
"vidc.div6"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32f.dll
"vidc.ap41"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivXc32f.dll
"vidc.dvx4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\divx4.dll
"vidc.divx"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\DivX520.dll
"msacm.divxa32"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\DivX\divxa32.acm
"vidc.frwd"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwd.dll
"vidc.frwt"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwd.dll
"vidc.frwa"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwt.dll
"vidc.frwu"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Forward\frwu.dll
"vidc.glzw"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Gabest\GLZW.dll
"vidc.gpeg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Gabest\GPEG.dll
"vidc.i263"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\i263_32.drv
"vidc.iv30"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv33"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv34"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv35"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv36"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv37"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv38"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv39"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir32_32.dll
"vidc.iv40"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv41"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv42"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv43"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv44"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv45"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv46"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv47"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv48"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.iv49"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\ir41_32.dll
"vidc.ir21"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\IR21_R.DLL
"vidc.rt21"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\IR21_R.DLL
"msacm.imc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Intel\IMC32.ACM
"vidc.lead"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\LEAD\LCODCCMP.DLL
"vidc.dvsd"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCDVD_32.DLL
"vidc.dvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCDVD_32.DLL
"vidc.dvcs"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCDVD_32.DLL
"vidc.dcmj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCMJPG32.DLL
"vidc.avi1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCMJPG32.DLL
"vidc.avi2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\MainConcept\MCMJPG32.DLL
"vidc.dv25"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.dv50"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.msmc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mmjp"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx5"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx6"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx7"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx8"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mtx9"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"vidc.mmes"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Matrox\DigiVCap.dll
"msacm.msadpcm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msadp32.acm
"msacm.imaadpcm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\imaadp32.acm
"msacm.msg711"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msg711.acm
"msacm.msg723"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msg723.acm
"msacm.msgsm610"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msgsm32.acm
"vidc.m261"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msh261.drv
"vidc.m263"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msh263.drv
"vidc.mrle"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msrle32.dll
"vidc.msvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msvidc32.dll
"vidc.cram"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msvidc32.dll
"vidc.mpg4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp41"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp42"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp43"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp4s"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.mp4v"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\mpg4c32.dll
"vidc.wmv3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\WMV9VCM.dll
"msacm.msaudio1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Microsoft\msaud32.acm
"vidc.vixl"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Miro\miroxl32.dll
"vidc.nt00"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Newtek\ntcodec.dll
"msacm.vorbis"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\OGG\vorbis.acm
"vidc.vp30"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp31vfw.dll
"vidc.vp31"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp31vfw.dll
"vidc.vp60"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp6vfw.dll
"vidc.vp61"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\On2 Technologies\vp6vfw.dll
"vidc.pdvc"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Panasonic\idvcodec.dll
"vidc.ipdv"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Panasonic\idvcodec.dll
"vidc.pvw2"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pegasus\pvwv220.dll
"vidc.pimj"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pegasus\pvljpg20.dll
"vidc.mjpx"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pegasus\pvmjpg21.dll
"vidc.miro"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\mirodv2avi.dll
"vidc.dcap"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\mirodv2avi.dll
"vidc.mjpa"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\rtmjpgcdc.dll
"vidc.gpjm"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\rtmjpgcdc.dll
"vidc.pim1"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Pinnacle\pclepim1.dll
"msacm.qmpeg"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\QDesign\qmpeg.acm
"vidc.rmp4"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\REALmagic\rmp4.dll
"vidc.rud0"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Rududu\rududu.dll
"msacm.at3"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\SONY\atrac3.acm
"vidc.sony"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\SONY\sonydv.dll
"vidc.dvcp"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\SONY\sonydv.dll
"vidc.s422"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Tekram\tekyuv.dll
"vidc.t420"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Toshiba\tsbyuv.dll
"vidc.y411"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Toshiba\tsbyuv.dll
"vidc.vssv"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\Vanguard Software Sollutions\vsscodec.dll
"msacm.voxacm160"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\VoxWare\vct3216.acm
"vidc.xvid"= C:\PROGRA~1\ACE Mega CoDecS Pack\SystemS\XviD\xvidvfw.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sglfb.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\tga.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"CmPCIaudio"=RunDll32 CMICNFG3.CPL,CMICtrlWnd
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime
"Controleur de calendrier pour Ulead Photo Express"=D:\mes doc\fichier\log photo\photo\calcheck.exe
R0 nvcchflt;NVIDIA Disk Cache Filter Driver;C:\WINDOWS\system32\DRIVERS\nvcchflt.sys [2005-02-11 20:11]
R0 Si3112r;Silicon Image SiI 3112 SATARaid Controller;C:\WINDOWS\system32\DRIVERS\SI3112r.sys [2004-02-09 18:15]
R3 ati2mtaa;ati2mtaa;C:\WINDOWS\system32\DRIVERS\ati2mtaa.sys [2004-08-19 17:53]
S0 ElbyVCD;ElbyVCD;C:\WINDOWS\system32\DRIVERS\ElbyVCD.sys []
S1 pci32;Derkz864;C:\WINDOWS\system32\drivers\pci32.sys []
S2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-19 18:10]
S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 23:08]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-03-28 16:25:12 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
- C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-17 02:23:58
Windows 5.1.2600 Service Pack 2 NTFS
Balayage processus cachés ...
Balayage caché autostart entries ...
Balayage des fichiers cachés ...
Scan terminé avec succès
Les fichiers cachés: 0
**************************************************************************
.
Temps d'accomplissement: 2008-05-17 2:24:40
ComboFix-quarantined-files.txt 2008-05-17 00:24:35
ComboFix2.txt 2008-05-16 21:54:44
Pre-Run: 7,482,077,184 octets libres
Post-Run: 7,474,319,360 octets libres
269
Merci de votre aide.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Il s'allume très mal, il reste bloqué sur page de démarrage, faut que j'appuie sur F1 pour qu'il se lance, il m'affiche souvent que windows n'a pas démarré normalement, il plante, il y a plein de trucs que je n'arrive pas a supprimer, je le nettoie souvent, je fait des analyses, il rame.
Je n'ai plus de connection internet sur ce PC, il est vieux et je pense qu'un formatage serait pas mal mais alors la je vais attendre un peu avant de me pencher réellement sur la question!
Merci pour votre aide.
Je n'ai plus de connection internet sur ce PC, il est vieux et je pense qu'un formatage serait pas mal mais alors la je vais attendre un peu avant de me pencher réellement sur la question!
Merci pour votre aide.
essaye de reparer windows:
https://www.pcastuces.com/pratique/windows/xp/default.htm
http://www.informatruc.com/reparer-windows-xp/
https://www.pcastuces.com/pratique/windows/xp/default.htm
http://www.informatruc.com/reparer-windows-xp/
