Je rame méchament sur internet
sousou13xque
Messages postés
158
Statut
Membre
-
Utilisateur anonyme -
Utilisateur anonyme -
Bonjour,
Comme c'est expliquer dans le titre je rame sur internet depuis que mon ordi a planter et que je l'es ramener a boulanger qui m'ont reformater mon pc!
J'ai un autre pc fixe qui tourne bien sur internet mais mon pc portable rame!
Es-ce qu'il y a une solution ou je vais devoir ramer toute ma vie??? (lol)
Comme c'est expliquer dans le titre je rame sur internet depuis que mon ordi a planter et que je l'es ramener a boulanger qui m'ont reformater mon pc!
J'ai un autre pc fixe qui tourne bien sur internet mais mon pc portable rame!
Es-ce qu'il y a une solution ou je vais devoir ramer toute ma vie??? (lol)
A voir également:
- Je rame méchament sur internet
- Pc qui rame - Guide
- Gps sans internet - Guide
- Internet explorer - Guide
- Complete internet repair - Télécharger - Web & Internet
- Comment nettoyer un mac qui rame - Guide
31 réponses
Salut alors désinstalle tous tes logiciel de sécurité. Et installe AntiVir,Malwarebytes Anti-Malware,Ccleaner et active le pare-feu Vista.
AntiVir: https://www.01net.com/outils/telecharger/windows/Securite/antivirus-antitrojan/fiches/tele13198.html
Tutoriel AntiVir: https://www.malekal.com/avira-free-security-antivirus-gratuit/
Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tutoriel Malwarebytes Anti-Malware: https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
Ccleaner: https://www.01net.com/outils/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/tele32599.html
Tutoriel Ccleaner: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php (Tu l'installe sans la bare d'outil Yahoo)
PS: TU LES INSTALLES SEULEMENT ET TU NE FAIS PAS D'ANALYSE. TU FAIS UNE MISE A JOUR A ANTIVIR ET MALWAREBYTES ANTI-MALWARE.
AntiVir: https://www.01net.com/outils/telecharger/windows/Securite/antivirus-antitrojan/fiches/tele13198.html
Tutoriel AntiVir: https://www.malekal.com/avira-free-security-antivirus-gratuit/
Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Tutoriel Malwarebytes Anti-Malware: https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
Ccleaner: https://www.01net.com/outils/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/tele32599.html
Tutoriel Ccleaner: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php (Tu l'installe sans la bare d'outil Yahoo)
PS: TU LES INSTALLES SEULEMENT ET TU NE FAIS PAS D'ANALYSE. TU FAIS UNE MISE A JOUR A ANTIVIR ET MALWAREBYTES ANTI-MALWARE.
Bonjour,
ça y es j'ai terminer! et maintenant je fais quoi???
ça y es j'ai terminer! et maintenant je fais quoi???
Tu fais un scan en mode sans échec avec AntiVir. Tu lances le scan et si il détecte un virus (normalement oui) tu cliques sur "delete" et "apply sélection to all following détections. (pour qu'il le supprimes automatiquement). A la fin du scan tu cliques sur "Report" puis normalement un bloc-note s'ouvrira tu l'enregistre sur ton bureau avec le titre "Rapport AntiVir"puis tu redémarre en mode normal puis tu me postes le rapport.
Mode sans Echec:
Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm
PS: JE TE CONSEILLE D'ENREGISTRER CE MESSAGE DANS TON BUREAU OU CAS OU.
Mode sans Echec:
Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm
PS: JE TE CONSEILLE D'ENREGISTRER CE MESSAGE DANS TON BUREAU OU CAS OU.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
je suis en train de faire un scan du local driver...
C'est bien ça??? je ne suis pas en train de me tromper au moins?
C'est bien ça??? je ne suis pas en train de me tromper au moins?
bon j'ai fini le scan du local driver...
je te file rapport depuis mon deuxième pc:
Avira AntiVir Personal
Report file date: samedi 7 juin 2008 12:59
Scanning for 1313263 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (plain) [6.0.6000]
Boot mode: Save mode
Username: Utilisateur
Computer name: PC-DE-UTILISATE
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.4.120 2206720 Bytes 01/06/2008 10:33:44
ANTIVIR3.VDF : 7.0.4.156 144896 Bytes 06/06/2008 10:33:45
Engineversion : 8.1.0.55
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.40 266618 Bytes 07/06/2008 10:33:55
AESCN.DLL : 8.1.0.21 119156 Bytes 07/06/2008 10:33:54
AERDL.DLL : 8.1.0.20 418165 Bytes 07/06/2008 10:33:54
AEPACK.DLL : 8.1.1.5 364918 Bytes 07/06/2008 10:33:53
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 07/06/2008 10:33:52
AEHEUR.DLL : 8.1.0.30 1253750 Bytes 07/06/2008 10:33:50
AEHELP.DLL : 8.1.0.15 115063 Bytes 07/06/2008 10:33:49
AEGEN.DLL : 8.1.0.28 307572 Bytes 07/06/2008 10:33:48
AEEMU.DLL : 8.1.0.6 430451 Bytes 07/06/2008 10:33:47
AECORE.DLL : 8.1.0.31 168310 Bytes 07/06/2008 10:33:46
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11
Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, E:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: samedi 7 juin 2008 12:59
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
18 processes with 18 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'E:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '15' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\pagefile.sys
[WARNING] The file could not be opened!
Begin scan in 'E:\'
Begin scan in 'D:\'
Search path D:\ could not be opened!
Le périphérique n'est pas prêt.
End of the scan: samedi 7 juin 2008 13:27
Used time: 27:59 min
The scan has been done completely.
13251 Scanning directories
180978 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
180978 Files not concerned
1367 Archives were scanned
1 Warnings
0 Notes
je te file rapport depuis mon deuxième pc:
Avira AntiVir Personal
Report file date: samedi 7 juin 2008 12:59
Scanning for 1313263 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (plain) [6.0.6000]
Boot mode: Save mode
Username: Utilisateur
Computer name: PC-DE-UTILISATE
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.4.120 2206720 Bytes 01/06/2008 10:33:44
ANTIVIR3.VDF : 7.0.4.156 144896 Bytes 06/06/2008 10:33:45
Engineversion : 8.1.0.55
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.40 266618 Bytes 07/06/2008 10:33:55
AESCN.DLL : 8.1.0.21 119156 Bytes 07/06/2008 10:33:54
AERDL.DLL : 8.1.0.20 418165 Bytes 07/06/2008 10:33:54
AEPACK.DLL : 8.1.1.5 364918 Bytes 07/06/2008 10:33:53
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 07/06/2008 10:33:52
AEHEUR.DLL : 8.1.0.30 1253750 Bytes 07/06/2008 10:33:50
AEHELP.DLL : 8.1.0.15 115063 Bytes 07/06/2008 10:33:49
AEGEN.DLL : 8.1.0.28 307572 Bytes 07/06/2008 10:33:48
AEEMU.DLL : 8.1.0.6 430451 Bytes 07/06/2008 10:33:47
AECORE.DLL : 8.1.0.31 168310 Bytes 07/06/2008 10:33:46
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11
Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, E:, D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: samedi 7 juin 2008 12:59
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
18 processes with 18 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'E:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '15' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\pagefile.sys
[WARNING] The file could not be opened!
Begin scan in 'E:\'
Begin scan in 'D:\'
Search path D:\ could not be opened!
Le périphérique n'est pas prêt.
End of the scan: samedi 7 juin 2008 13:27
Used time: 27:59 min
The scan has been done completely.
13251 Scanning directories
180978 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
180978 Files not concerned
1367 Archives were scanned
1 Warnings
0 Notes
le rapport local hard disk:
Avira AntiVir Personal
Report file date: samedi 7 juin 2008 13:31
Scanning for 1313263 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (plain) [6.0.6000]
Boot mode: Save mode
Username: Utilisateur
Computer name: PC-DE-UTILISATE
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.4.120 2206720 Bytes 01/06/2008 10:33:44
ANTIVIR3.VDF : 7.0.4.156 144896 Bytes 06/06/2008 10:33:45
Engineversion : 8.1.0.55
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.40 266618 Bytes 07/06/2008 10:33:55
AESCN.DLL : 8.1.0.21 119156 Bytes 07/06/2008 10:33:54
AERDL.DLL : 8.1.0.20 418165 Bytes 07/06/2008 10:33:54
AEPACK.DLL : 8.1.1.5 364918 Bytes 07/06/2008 10:33:53
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 07/06/2008 10:33:52
AEHEUR.DLL : 8.1.0.30 1253750 Bytes 07/06/2008 10:33:50
AEHELP.DLL : 8.1.0.15 115063 Bytes 07/06/2008 10:33:49
AEGEN.DLL : 8.1.0.28 307572 Bytes 07/06/2008 10:33:48
AEEMU.DLL : 8.1.0.6 430451 Bytes 07/06/2008 10:33:47
AECORE.DLL : 8.1.0.31 168310 Bytes 07/06/2008 10:33:46
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11
Configuration settings for the scan:
Jobname..........................: Local Hard Disks
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldiscs.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: samedi 7 juin 2008 13:31
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
17 processes with 17 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '15' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\pagefile.sys
[WARNING] The file could not be opened!
End of the scan: samedi 7 juin 2008 13:57
Used time: 26:01 min
The scan has been done completely.
13249 Scanning directories
180956 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
180956 Files not concerned
1367 Archives were scanned
1 Warnings
0 Notes
Avira AntiVir Personal
Report file date: samedi 7 juin 2008 13:31
Scanning for 1313263 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows Vista
Windows version: (plain) [6.0.6000]
Boot mode: Save mode
Username: Utilisateur
Computer name: PC-DE-UTILISATE
Version information:
BUILD.DAT : 8.1.00.295 16479 Bytes 09/04/2008 16:24:00
AVSCAN.EXE : 8.1.2.12 311553 Bytes 18/03/2008 09:02:56
AVSCAN.DLL : 8.1.1.0 53505 Bytes 07/02/2008 08:43:37
LUKE.DLL : 8.1.2.9 151809 Bytes 28/02/2008 08:41:23
LUKERES.DLL : 8.1.2.1 12033 Bytes 21/02/2008 08:28:40
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 13:08:58
ANTIVIR2.VDF : 7.0.4.120 2206720 Bytes 01/06/2008 10:33:44
ANTIVIR3.VDF : 7.0.4.156 144896 Bytes 06/06/2008 10:33:45
Engineversion : 8.1.0.55
AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:21
AESCRIPT.DLL : 8.1.0.40 266618 Bytes 07/06/2008 10:33:55
AESCN.DLL : 8.1.0.21 119156 Bytes 07/06/2008 10:33:54
AERDL.DLL : 8.1.0.20 418165 Bytes 07/06/2008 10:33:54
AEPACK.DLL : 8.1.1.5 364918 Bytes 07/06/2008 10:33:53
AEOFFICE.DLL : 8.1.0.18 192890 Bytes 07/06/2008 10:33:52
AEHEUR.DLL : 8.1.0.30 1253750 Bytes 07/06/2008 10:33:50
AEHELP.DLL : 8.1.0.15 115063 Bytes 07/06/2008 10:33:49
AEGEN.DLL : 8.1.0.28 307572 Bytes 07/06/2008 10:33:48
AEEMU.DLL : 8.1.0.6 430451 Bytes 07/06/2008 10:33:47
AECORE.DLL : 8.1.0.31 168310 Bytes 07/06/2008 10:33:46
AVWINLL.DLL : 1.0.0.7 14593 Bytes 23/01/2008 17:07:53
AVPREF.DLL : 8.0.0.1 25857 Bytes 18/02/2008 10:37:50
AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:26:47
AVREG.DLL : 8.0.0.0 30977 Bytes 23/01/2008 17:07:49
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:23
AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 28/02/2008 08:31:31
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.19 28929 Bytes 23/01/2008 17:08:39
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:10
RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 10/03/2008 14:37:25
RCTEXT.DLL : 8.0.32.0 86273 Bytes 06/03/2008 12:02:11
Configuration settings for the scan:
Jobname..........................: Local Hard Disks
Configuration file...............: c:\program files\avira\antivir personaledition classic\alldiscs.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: samedi 7 juin 2008 13:31
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsm.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'wininit.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
17 processes with 17 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '15' files ).
Starting the file scan:
Begin scan in 'C:\' <HDD>
C:\pagefile.sys
[WARNING] The file could not be opened!
End of the scan: samedi 7 juin 2008 13:57
Used time: 26:01 min
The scan has been done completely.
13249 Scanning directories
180956 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
180956 Files not concerned
1367 Archives were scanned
1 Warnings
0 Notes
1) Redémarre en "Mode sans échec"
Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm
Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.
2) Scan avec Malwarebyte's Anti-Malware
*Lance Malwarebyte's Anti-Malware
*Puis vs dans l'onglet "Recherche" puis coche "Exécuter un examen complet" puis "Rechercher sélectionne tes disques durs" puis clique sur "Lancer l’examen"
*A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
*Suppression des éléments détectés >>>> clique sur Supprimer la sélection
*S'il t'es demandé de redémarrer >>> clique sur "Yes"
*--> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse.
Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm
Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.
2) Scan avec Malwarebyte's Anti-Malware
*Lance Malwarebyte's Anti-Malware
*Puis vs dans l'onglet "Recherche" puis coche "Exécuter un examen complet" puis "Rechercher sélectionne tes disques durs" puis clique sur "Lancer l’examen"
*A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
*Suppression des éléments détectés >>>> clique sur Supprimer la sélection
*S'il t'es demandé de redémarrer >>> clique sur "Yes"
*--> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse.
le rapport anti malware:
Malwarebytes' Anti-Malware 1.15
Version de la base de données: 837
16:00:47 07/06/2008
mbam-log-6-7-2008 (16-00-47).txt
Type de recherche: Examen complet (C:\|D:\|F:\|)
Eléments examinés: 116851
Temps écoulé: 13 minute(s), 58 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
Malwarebytes' Anti-Malware 1.15
Version de la base de données: 837
16:00:47 07/06/2008
mbam-log-6-7-2008 (16-00-47).txt
Type de recherche: Examen complet (C:\|D:\|F:\|)
Eléments examinés: 116851
Temps écoulé: 13 minute(s), 58 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
Ok merci maintenant fais un scan en ligne avec Internet Explorer stp:
BitDefender en ligne: http://www.bitdefender.fr/scan_fr/scan8/ie.html
Tutoriel BitDefender en ligne: http://cybersecurite.xooit.com/t201-Scan-en-ligne-BitDefender.htm
Ps: N'oublies pas de me poster le rapport. Si tu as besoin d'aide aide toi tu tutoriel.
BitDefender en ligne: http://www.bitdefender.fr/scan_fr/scan8/ie.html
Tutoriel BitDefender en ligne: http://cybersecurite.xooit.com/t201-Scan-en-ligne-BitDefender.htm
Ps: N'oublies pas de me poster le rapport. Si tu as besoin d'aide aide toi tu tutoriel.
merci a toi surtout!
Je comprend pas! je suit le tuto mais quand je ckick sur I agree, bit defender dit que je ne suis pas administrateur et qu'il ne peut donc pas faire le scan... Pourtant je pense étre administrateur vue qu'il y a que moi qui utilise ce pc!
Qu'est que je dois faire???
Je comprend pas! je suit le tuto mais quand je ckick sur I agree, bit defender dit que je ne suis pas administrateur et qu'il ne peut donc pas faire le scan... Pourtant je pense étre administrateur vue qu'il y a que moi qui utilise ce pc!
Qu'est que je dois faire???
résultat du scan bit defender:
BitDefender Online Scanner
Scan report generated at: Sat, Jun 07, 2008 - 17:11:14
Scan path: C:\;D:\;
Statistics
Time
00:50:57
Files
145358
Folders
12945
Boot Sectors
3
Archives
1881
Packed Files
8141
Results
Identified Viruses
0
Infected Files
0
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
0
Engines Info
Virus Definitions
1256841
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
16
Archive plugins
42
Unpack plugins
7
E-mail plugins
6
System plugins
5
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
No virus found.
BitDefender Online Scanner
Scan report generated at: Sat, Jun 07, 2008 - 17:11:14
Scan path: C:\;D:\;
Statistics
Time
00:50:57
Files
145358
Folders
12945
Boot Sectors
3
Archives
1881
Packed Files
8141
Results
Identified Viruses
0
Infected Files
0
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
0
Engines Info
Virus Definitions
1256841
Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Scan plugins
16
Archive plugins
42
Unpack plugins
7
E-mail plugins
6
System plugins
5
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
No virus found.
j'ai pas tout compris la!
Ou je peut télécharger combofix??? c'est quoi un sUBs?
âpres le reste j'ai compris...
Ou je peut télécharger combofix??? c'est quoi un sUBs?
âpres le reste j'ai compris...
rapport combo fix:
ComboFix 08-06-06.6 - Utilisateur 2008-06-07 19:16:07.1 - NTFSx86 MINIMAL
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.2680 [GMT 2:00]
Endroit: C:\Users\Utilisateur\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((( Fichiers créés 2008-05-07 to 2008-06-07 ))))))))))))))))))))))))))))))))))))
.
Pas de nouveau fichier créé dans cet espace de temps
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-07 13:33 --------- d-----w C:\Program Files\Lx_cats
2008-06-07 10:39 --------- d-----w C:\Program Files\CCleaner
2008-06-07 10:36 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Malwarebytes
2008-06-07 10:36 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Malwarebytes
2008-06-07 10:36 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-06-07 10:36 --------- d-----w C:\PROGRA~2\Malwarebytes
2008-06-07 10:32 --------- d-----w C:\Program Files\Avira
2008-06-07 10:32 --------- d-----w C:\PROGRA~2\Avira
2008-06-06 19:06 --------- d-----w C:\Program Files\OrangeHSS
2008-06-05 21:51 --------- d-----w C:\PROGRA~2\Roxio
2008-06-05 16:57 --------- d-----w C:\Program Files\Wurth
2008-06-05 14:04 34,296 ----a-w C:\Windows\system32\drivers\mbamcatchme.sys
2008-06-05 14:04 15,864 ----a-w C:\Windows\system32\drivers\mbam.sys
2008-06-04 05:26 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Roxio
2008-06-04 05:26 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Roxio
2008-06-02 09:29 --------- d-----w C:\Program Files\Inventel
2008-05-31 11:58 --------- d-----w C:\Program Files\directx
2008-05-30 19:51 420 ----a-w C:\Users\Utilisateur\AppData\Roaming\wklnhst.dat
2008-05-30 19:51 420 ----a-w C:\Users\UTILIS~1\AppData\Roaming\wklnhst.dat
2008-05-30 19:36 --------- d-----w C:\Program Files\My Lockbox
2008-05-30 16:24 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\HiYo
2008-05-30 16:24 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\HiYo
2008-05-30 16:24 --------- d-----w C:\Program Files\HiYo
2008-05-30 16:24 --------- d-----w C:\PROGRA~2\HiYo
2008-05-28 16:00 --------- d-----w C:\Program Files\Common Files\BOONTY Shared
2008-05-28 16:00 --------- d-----w C:\PROGRA~2\BOONTY
2008-05-24 05:20 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\5400 Series
2008-05-24 05:20 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\5400 Series
2008-05-23 15:24 --------- d-----w C:\Program Files\Lexmark 5400 Series
2008-05-23 15:23 --------- d-----w C:\Program Files\Lexmark Toolbar
2008-05-23 15:23 --------- d-----w C:\PROGRA~2\5400 Series
2008-05-23 15:22 --------- d-----w C:\Program Files\Abbyy FineReader 6.0 Sprint
2008-05-23 10:21 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-22 19:55 --------- d-----w C:\Program Files\Windows Live
2008-05-22 05:33 --------- d-----w C:\PROGRA~2\Microsoft Help
2008-05-22 05:32 --------- d-----w C:\Program Files\Windows Mail
2008-05-22 05:31 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-05-21 16:06 --------- d-----w C:\Program Files\Java
2008-05-21 16:05 --------- d-----w C:\Program Files\Common Files\Java
2008-05-21 09:46 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition
2008-05-21 09:43 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-05-21 09:37 --------- d-----w C:\PROGRA~2\WLInstaller
2008-05-21 09:35 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Template
2008-05-21 09:35 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Template
2008-05-21 09:32 --------- d-----w C:\Program Files\Packard Bell
2008-05-21 09:25 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Talkback
2008-05-21 09:25 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Talkback
2008-05-21 09:21 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-05-21 09:21 --------- d-----w C:\PROGRA~2\Symantec
2008-05-21 09:19 --------- d-----w C:\Program Files\Norton 360
2008-05-21 09:02 --------- d-----w C:\PROGRA~2\Sonic
2008-05-21 09:01 --------- d-----w C:\Program Files\Google
2008-05-21 08:59 --------- d-----w C:\Program Files\Alwil Software
2008-05-21 08:51 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Packard Bell
2008-05-21 08:51 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Packard Bell
2008-05-07 17:12 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\CyberLink
2008-05-07 17:12 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\ATI
2008-05-07 17:12 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\CyberLink
2008-05-07 17:12 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\ATI
2008-05-07 16:58 --------- d-----w C:\Program Files\Windows Sidebar
2008-05-07 16:53 --------- d-sh--w C:\Program Files\Fichiers communs
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Modèles
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Menu Démarrer
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Favoris
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Bureau
2008-05-07 16:51 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-05-07 16:51 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-05-07 16:50 45,112 ----a-w C:\Windows\system32\drivers\pciidex.sys
2008-05-07 16:50 41,984 ----a-w C:\Windows\system32\drivers\monitor.sys
2008-05-07 16:50 3,504,696 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-05-07 16:50 3,470,392 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-05-07 16:50 211,000 ----a-w C:\Windows\system32\drivers\volsnap.sys
2008-05-07 16:50 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys
2008-05-07 16:50 154,624 ----a-w C:\Windows\system32\drivers\nwifi.sys
2008-05-07 16:50 15,928 ----a-w C:\Windows\system32\drivers\pciide.sys
2008-05-07 16:50 109,624 ----a-w C:\Windows\system32\drivers\ataport.sys
2008-05-07 16:50 1,060,920 ----a-w C:\Windows\system32\drivers\ntfs.sys
2008-05-07 16:49 803,328 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-05-07 16:49 24,064 ----a-w C:\Windows\System32\netcfg.exe
2008-05-07 16:49 22,016 ----a-w C:\Windows\System32\netiougc.exe
2008-05-07 16:49 216,632 ----a-w C:\Windows\system32\drivers\netio.sys
2008-05-07 16:49 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll
2008-05-07 16:49 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2008-05-07 16:46 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2008-05-07 16:46 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2008-05-07 16:46 2,048 ----a-w C:\Windows\System32\asferror.dll
2008-05-07 16:46 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2008-05-07 16:45 296,448 ----a-w C:\Windows\System32\gdi32.dll
2008-05-07 16:44 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-05-07 16:43 83,968 ----a-w C:\Windows\System32\dnsrslvr.dll
2008-05-07 16:43 24,576 ----a-w C:\Windows\System32\dnscacheugc.exe
2008-05-07 16:42 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2008-05-07 16:42 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-05-07 16:42 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2008-05-07 16:42 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-05-07 16:41 826,368 ----a-w C:\Windows\System32\wininet.dll
2008-05-07 16:41 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-05-07 16:41 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-05-07 16:41 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-05-07 16:39 --------- d-----w C:\Program Files\MSXML 4.0
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-05-07 18:44 1232896]
"SmpcSys"="C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe" [2007-07-19 15:32 1120568]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-01 15:24 857648]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-09 13:26 4702208 C:\Windows\RtHDVCpl.exe]
"Skytel"="Skytel.exe" [2007-08-03 07:22 1826816 C:\Windows\SkyTel.exe]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 12:40 232184]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-12-25 22:19 243200]
"MSPService"="C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe" [2007-06-13 00:36 102400]
"toolbar_eula_launcher"="C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 18:20 28672]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 04:28 144784]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"lxctmon.exe"="C:\Program Files\Lexmark 5400 Series\lxctmon.exe" [2006-11-22 11:11 291760]
"Lexmark 5400 Series Fax Server"="C:\Program Files\Lexmark 5400 Series\fm3032.exe" [2006-11-22 11:12 304048]
"EzPrint"="C:\Program Files\Lexmark 5400 Series\ezprint.exe" [2006-11-22 11:11 82864]
"LXCTCATS"="C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCTtime.dll" [2006-11-21 14:27 106496]
"HiYo"="C:\Program Files\HiYo\bin\HiYo.exe" [2008-05-21 12:19 143360]
"flockbox"="C:\Program Files\My Lockbox\flockbox.exe" [2007-12-14 16:59 1071472]
"SystrayORAHSS"="C:\Program Files\OrangeHSS\Systray\SystrayApp.exe" [ ]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"@"="" []
"GrpConv"="grpconv -o" []
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.mkdmp3enc"= C:\PROGRA~1\CYBERL~1\MAGICS~1\Kernel\Burner\MKDMP3Enc.ACM
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{24167210-07E6-417E-8CB9-41ED2E5CF75D}"= C:\Program Files\CyberLink\MagicSports\MagicSports.exe:CyberLink MagicSports
"{EE00DA9B-45FB-46B1-87B2-2BFC5B0E2A4D}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F5ED1475-B49C-4A87-B21B-C48E216D6C85}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{054C0A4D-3ABA-4905-A254-1C5D7688E5A4}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{CBB99583-BA13-4987-8B8C-4C473087ABE5}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{FCC046E9-94C5-483B-ABD5-F54207A9E4FD}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"{6AD05B9F-194C-4E13-A2CF-D880303F520C}"= UDP:C:\Windows\System32\lxctcoms.exe:Lexmark Communications System
"{44CB4585-63D6-427C-9D45-3FF54DE455F6}"= TCP:C:\Windows\System32\lxctcoms.exe:Lexmark Communications System
"{FF2EB8AB-074D-406C-A32C-926ACF744190}"= UDP:C:\Program Files\Lexmark 5400 Series\lxctmon.exe:Device Monitor
"{A993C08B-4484-4B7D-AAF9-09828BA29B60}"= TCP:C:\Program Files\Lexmark 5400 Series\lxctmon.exe:Device Monitor
"{C92B6EF2-1F50-4514-A236-620804C37BE0}"= UDP:C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe:All In One Center
"{343B220F-4795-452B-85BF-E76FE86E0C13}"= TCP:C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe:All In One Center
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-30 11:22]
R0 MPRIFL;MPRIFL;C:\Windows\system32\DRIVERS\MPRIFL.SYS [2007-12-13 20:13]
S3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-05-25 07:01]
S3 Boonty Games;Boonty Games;"C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe" [2008-05-28 18:00]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50.sys [2006-11-28 21:46]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50.sys [2006-11-28 21:46]
*Newly Created Service* - CATCHME
*Newly Created Service* - ECACHE
*Newly Created Service* - PXHELP20
.
ComboFix 08-06-06.6 - Utilisateur 2008-06-07 19:16:07.1 - NTFSx86 MINIMAL
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.1.1036.18.2680 [GMT 2:00]
Endroit: C:\Users\Utilisateur\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((( Fichiers créés 2008-05-07 to 2008-06-07 ))))))))))))))))))))))))))))))))))))
.
Pas de nouveau fichier créé dans cet espace de temps
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-07 13:33 --------- d-----w C:\Program Files\Lx_cats
2008-06-07 10:39 --------- d-----w C:\Program Files\CCleaner
2008-06-07 10:36 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Malwarebytes
2008-06-07 10:36 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Malwarebytes
2008-06-07 10:36 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-06-07 10:36 --------- d-----w C:\PROGRA~2\Malwarebytes
2008-06-07 10:32 --------- d-----w C:\Program Files\Avira
2008-06-07 10:32 --------- d-----w C:\PROGRA~2\Avira
2008-06-06 19:06 --------- d-----w C:\Program Files\OrangeHSS
2008-06-05 21:51 --------- d-----w C:\PROGRA~2\Roxio
2008-06-05 16:57 --------- d-----w C:\Program Files\Wurth
2008-06-05 14:04 34,296 ----a-w C:\Windows\system32\drivers\mbamcatchme.sys
2008-06-05 14:04 15,864 ----a-w C:\Windows\system32\drivers\mbam.sys
2008-06-04 05:26 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Roxio
2008-06-04 05:26 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Roxio
2008-06-02 09:29 --------- d-----w C:\Program Files\Inventel
2008-05-31 11:58 --------- d-----w C:\Program Files\directx
2008-05-30 19:51 420 ----a-w C:\Users\Utilisateur\AppData\Roaming\wklnhst.dat
2008-05-30 19:51 420 ----a-w C:\Users\UTILIS~1\AppData\Roaming\wklnhst.dat
2008-05-30 19:36 --------- d-----w C:\Program Files\My Lockbox
2008-05-30 16:24 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\HiYo
2008-05-30 16:24 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\HiYo
2008-05-30 16:24 --------- d-----w C:\Program Files\HiYo
2008-05-30 16:24 --------- d-----w C:\PROGRA~2\HiYo
2008-05-28 16:00 --------- d-----w C:\Program Files\Common Files\BOONTY Shared
2008-05-28 16:00 --------- d-----w C:\PROGRA~2\BOONTY
2008-05-24 05:20 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\5400 Series
2008-05-24 05:20 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\5400 Series
2008-05-23 15:24 --------- d-----w C:\Program Files\Lexmark 5400 Series
2008-05-23 15:23 --------- d-----w C:\Program Files\Lexmark Toolbar
2008-05-23 15:23 --------- d-----w C:\PROGRA~2\5400 Series
2008-05-23 15:22 --------- d-----w C:\Program Files\Abbyy FineReader 6.0 Sprint
2008-05-23 10:21 --------- d-----w C:\Program Files\Common Files\Adobe
2008-05-22 19:55 --------- d-----w C:\Program Files\Windows Live
2008-05-22 05:33 --------- d-----w C:\PROGRA~2\Microsoft Help
2008-05-22 05:32 --------- d-----w C:\Program Files\Windows Mail
2008-05-22 05:31 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-05-21 16:06 --------- d-----w C:\Program Files\Java
2008-05-21 16:05 --------- d-----w C:\Program Files\Common Files\Java
2008-05-21 09:46 --------- d-----w C:\Program Files\Microsoft SQL Server Compact Edition
2008-05-21 09:43 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-05-21 09:37 --------- d-----w C:\PROGRA~2\WLInstaller
2008-05-21 09:35 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Template
2008-05-21 09:35 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Template
2008-05-21 09:32 --------- d-----w C:\Program Files\Packard Bell
2008-05-21 09:25 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Talkback
2008-05-21 09:25 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Talkback
2008-05-21 09:21 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-05-21 09:21 --------- d-----w C:\PROGRA~2\Symantec
2008-05-21 09:19 --------- d-----w C:\Program Files\Norton 360
2008-05-21 09:02 --------- d-----w C:\PROGRA~2\Sonic
2008-05-21 09:01 --------- d-----w C:\Program Files\Google
2008-05-21 08:59 --------- d-----w C:\Program Files\Alwil Software
2008-05-21 08:51 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\Packard Bell
2008-05-21 08:51 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\Packard Bell
2008-05-07 17:12 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\CyberLink
2008-05-07 17:12 --------- d-----w C:\Users\Utilisateur\AppData\Roaming\ATI
2008-05-07 17:12 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\CyberLink
2008-05-07 17:12 --------- d-----w C:\Users\UTILIS~1\AppData\Roaming\ATI
2008-05-07 16:58 --------- d-----w C:\Program Files\Windows Sidebar
2008-05-07 16:53 --------- d-sh--w C:\Program Files\Fichiers communs
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Modèles
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Menu Démarrer
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Favoris
2008-05-07 16:53 --------- d-sh--w C:\PROGRA~2\Bureau
2008-05-07 16:51 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-05-07 16:51 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-05-07 16:50 45,112 ----a-w C:\Windows\system32\drivers\pciidex.sys
2008-05-07 16:50 41,984 ----a-w C:\Windows\system32\drivers\monitor.sys
2008-05-07 16:50 3,504,696 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-05-07 16:50 3,470,392 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-05-07 16:50 211,000 ----a-w C:\Windows\system32\drivers\volsnap.sys
2008-05-07 16:50 21,560 ----a-w C:\Windows\system32\drivers\atapi.sys
2008-05-07 16:50 154,624 ----a-w C:\Windows\system32\drivers\nwifi.sys
2008-05-07 16:50 15,928 ----a-w C:\Windows\system32\drivers\pciide.sys
2008-05-07 16:50 109,624 ----a-w C:\Windows\system32\drivers\ataport.sys
2008-05-07 16:50 1,060,920 ----a-w C:\Windows\system32\drivers\ntfs.sys
2008-05-07 16:49 803,328 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-05-07 16:49 24,064 ----a-w C:\Windows\System32\netcfg.exe
2008-05-07 16:49 22,016 ----a-w C:\Windows\System32\netiougc.exe
2008-05-07 16:49 216,632 ----a-w C:\Windows\system32\drivers\netio.sys
2008-05-07 16:49 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll
2008-05-07 16:49 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2008-05-07 16:46 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2008-05-07 16:46 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2008-05-07 16:46 2,048 ----a-w C:\Windows\System32\asferror.dll
2008-05-07 16:46 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2008-05-07 16:45 296,448 ----a-w C:\Windows\System32\gdi32.dll
2008-05-07 16:44 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2008-05-07 16:43 83,968 ----a-w C:\Windows\System32\dnsrslvr.dll
2008-05-07 16:43 24,576 ----a-w C:\Windows\System32\dnscacheugc.exe
2008-05-07 16:42 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2008-05-07 16:42 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-05-07 16:42 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2008-05-07 16:42 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2008-05-07 16:41 826,368 ----a-w C:\Windows\System32\wininet.dll
2008-05-07 16:41 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-05-07 16:41 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-05-07 16:41 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-05-07 16:39 --------- d-----w C:\Program Files\MSXML 4.0
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-05-07 18:44 1232896]
"SmpcSys"="C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe" [2007-07-19 15:32 1120568]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-01 15:24 857648]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35 90112]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-09 13:26 4702208 C:\Windows\RtHDVCpl.exe]
"Skytel"="Skytel.exe" [2007-08-03 07:22 1826816 C:\Windows\SkyTel.exe]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 12:40 232184]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-12-25 22:19 243200]
"MSPService"="C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe" [2007-06-13 00:36 102400]
"toolbar_eula_launcher"="C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe" [2007-02-20 18:20 28672]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [2008-03-25 04:28 144784]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"lxctmon.exe"="C:\Program Files\Lexmark 5400 Series\lxctmon.exe" [2006-11-22 11:11 291760]
"Lexmark 5400 Series Fax Server"="C:\Program Files\Lexmark 5400 Series\fm3032.exe" [2006-11-22 11:12 304048]
"EzPrint"="C:\Program Files\Lexmark 5400 Series\ezprint.exe" [2006-11-22 11:11 82864]
"LXCTCATS"="C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCTtime.dll" [2006-11-21 14:27 106496]
"HiYo"="C:\Program Files\HiYo\bin\HiYo.exe" [2008-05-21 12:19 143360]
"flockbox"="C:\Program Files\My Lockbox\flockbox.exe" [2007-12-14 16:59 1071472]
"SystrayORAHSS"="C:\Program Files\OrangeHSS\Systray\SystrayApp.exe" [ ]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"@"="" []
"GrpConv"="grpconv -o" []
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.mkdmp3enc"= C:\PROGRA~1\CYBERL~1\MAGICS~1\Kernel\Burner\MKDMP3Enc.ACM
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{24167210-07E6-417E-8CB9-41ED2E5CF75D}"= C:\Program Files\CyberLink\MagicSports\MagicSports.exe:CyberLink MagicSports
"{EE00DA9B-45FB-46B1-87B2-2BFC5B0E2A4D}"= UDP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{F5ED1475-B49C-4A87-B21B-C48E216D6C85}"= TCP:C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{054C0A4D-3ABA-4905-A254-1C5D7688E5A4}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{CBB99583-BA13-4987-8B8C-4C473087ABE5}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{FCC046E9-94C5-483B-ABD5-F54207A9E4FD}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"{6AD05B9F-194C-4E13-A2CF-D880303F520C}"= UDP:C:\Windows\System32\lxctcoms.exe:Lexmark Communications System
"{44CB4585-63D6-427C-9D45-3FF54DE455F6}"= TCP:C:\Windows\System32\lxctcoms.exe:Lexmark Communications System
"{FF2EB8AB-074D-406C-A32C-926ACF744190}"= UDP:C:\Program Files\Lexmark 5400 Series\lxctmon.exe:Device Monitor
"{A993C08B-4484-4B7D-AAF9-09828BA29B60}"= TCP:C:\Program Files\Lexmark 5400 Series\lxctmon.exe:Device Monitor
"{C92B6EF2-1F50-4514-A236-620804C37BE0}"= UDP:C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe:All In One Center
"{343B220F-4795-452B-85BF-E76FE86E0C13}"= TCP:C:\Program Files\Lexmark 5400 Series\LXCTaiox.exe:All In One Center
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|
R0 AtiPcie;ATI PCI Express (3GIO) Filter;C:\Windows\system32\DRIVERS\AtiPcie.sys [2006-10-30 11:22]
R0 MPRIFL;MPRIFL;C:\Windows\system32\DRIVERS\MPRIFL.SYS [2007-12-13 20:13]
S3 atikmdag;atikmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [2007-05-25 07:01]
S3 Boonty Games;Boonty Games;"C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe" [2008-05-28 18:00]
S3 PCAMp50;PCAMp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50.sys [2006-11-28 21:46]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50.sys [2006-11-28 21:46]
*Newly Created Service* - CATCHME
*Newly Created Service* - ECACHE
*Newly Created Service* - PXHELP20
.
rapport hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:19, on 2008-06-07
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Safe mode
Running processes:
C:\Windows\explorer.exe
C:\Users\Utilisateur\Desktop\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=8&key=IESTART
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [lxctmon.exe] "C:\Program Files\Lexmark 5400 Series\lxctmon.exe"
O4 - HKLM\..\Run: [Lexmark 5400 Series Fax Server] "C:\Program Files\Lexmark 5400 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 5400 Series\ezprint.exe"
O4 - HKLM\..\Run: [LXCTCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCTtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [HiYo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKLM\..\Run: [flockbox] C:\Program Files\My Lockbox\flockbox.exe /a
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxct_device - - C:\Windows\system32\lxctcoms.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:19, on 2008-06-07
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Safe mode
Running processes:
C:\Windows\explorer.exe
C:\Users\Utilisateur\Desktop\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://format.packardbell.com/cgi-bin/redirect/?country=FR&range=AD&phase=8&key=IESTART
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll (file missing)
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [lxctmon.exe] "C:\Program Files\Lexmark 5400 Series\lxctmon.exe"
O4 - HKLM\..\Run: [Lexmark 5400 Series Fax Server] "C:\Program Files\Lexmark 5400 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 5400 Series\ezprint.exe"
O4 - HKLM\..\Run: [LXCTCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCTtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [HiYo] C:\Program Files\HiYo\bin\HiYo.exe /RunFromStartup
O4 - HKLM\..\Run: [flockbox] C:\Program Files\My Lockbox\flockbox.exe /a
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxct_device - - C:\Windows\system32\lxctcoms.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Ok maintenant fais ceci:
Défragmenter le disque dur:
*Pour l'exécuter, cliquez sur le bouton Démarrer, sur Tous les programmes, sur Accessoires, Outils systèmes puis sur Défragmenteur de disque.
*Cliquez sur le bouton Analyser. Le logiciel examine alors votre disque dur.
*Cliquez sur le bouton Afficher le rapport. (enregistre le et poste le moi stp) (que si tu as XP).
*Cliquez sur le bouton Défragmenter.
Défragmenter le disque dur:
*Pour l'exécuter, cliquez sur le bouton Démarrer, sur Tous les programmes, sur Accessoires, Outils systèmes puis sur Défragmenteur de disque.
*Cliquez sur le bouton Analyser. Le logiciel examine alors votre disque dur.
*Cliquez sur le bouton Afficher le rapport. (enregistre le et poste le moi stp) (que si tu as XP).
*Cliquez sur le bouton Défragmenter.
bon appartement quand je suis sur internet ça ne rame plus trop! mais quand je vais sur prizee (pour jouer) ça recommence!
Ok ouvre "Ccleaner" vas dans l'onglet "Option" puis "Avancé" puis décoches "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures.". Puis vas dans l'onglet "Nettoyeur" fais "Analyse" puis "Lancer le nettoyage". Puis vas dans l'onglet "Registre" puis fait "Chercher des erreurs" puis "Réparer les erreurs sélectionnée". Tu refais tous ca 4-5 fois.
j'ai toujours le problème qui persiste!ça rame pas mal quand je joue a prizee...
*Allez sur le poste de travail
*Cliquez sur disque C:\ (c'est le disque ou se trouve votre système d'exploitation)
*Ensuite cliquez sur le dossier Windows C:\Windows
*ouvrez le dossier prefetch C:\Windows\prefetch (Tu fais Edition,Selectionner tout, puis avec ton clavier tu cliques sur Sppr)
*Supprimez tous les fichiers de ce dossier.
*Puis vide la corbeille.
*Cliquez sur disque C:\ (c'est le disque ou se trouve votre système d'exploitation)
*Ensuite cliquez sur le dossier Windows C:\Windows
*ouvrez le dossier prefetch C:\Windows\prefetch (Tu fais Edition,Selectionner tout, puis avec ton clavier tu cliques sur Sppr)
*Supprimez tous les fichiers de ce dossier.
*Puis vide la corbeille.
