Problème de connexion internet

Résolu

beauté numerique -

Bonjour,
Je viens par la présente vous faire part des problèmes de connexion internet que je renconte depuis 2 semaines.En effet, j'ai un pc portable hp pavillon dv 9970 em, et j'utilise le système d'exploitation Windows Vista. Donc, j'ai AVG anti-virus Free, ZoneAlarm, SUPERAntiSpyware, Uniblue SpyEraser, et Smart PC Professional (en version demonstration). Voici les détails des dysfonctionnement:Mon pc se deconnecte tout seul d'internet après 20 ou 30 min de connexion et puis je n'arrive plus à me connecter, et je suis oubligé d'eteindre le pc et le rallumer pour avoir de nouveau la connexion. Ma connexion internet est (wifi) sans fil, je navigue avec Internet explorer et Mozilla Firefox, j'ai un abonnement internet Numericable, au fait mon téléphone marche très bien, sauf la connexion internet.J'ai commencé par nettoyer le pc, j'ai désinstallé firefox et puis je l'ai installé, j'ai rétabli les paramétres d'internet explorer, mais, le problème persiste. Et en outre le pare-feu Windows a cessé de fonctionner, et la hp webcam intégrée ne fonctionne pas non plus, j'ai installé un pilote périphérique que j'ai pris sur le site web de hp, voici le pilote en question sp 37736 Essential system updates for windows vista. je croyais que ça allait marcher, mais pas du tout.Mais, j'ai un autre pare-feu qui fonctionne, c'est le pare-feu de zoneAlarm. Impossible de faire la restauration du système, impossoble aussi de le récupérer, et il me semble que le gestionnaire de récupération soit introuvable. Après avoir fait une vérification du gestionnaire de périphériques, il y a une fenêtre qui m'indique qu'il y a un dysfonctionnement au niveau des cartes réseau.Je vous donne les détails ci-dessous:6TO4 Adapter. Ce périphérique ne peut pas démarrer. (Code 10). isatap.{A38E3C78-3119-4121-A8F3-4FEA7E8DB47F}. Ce périphérique ne peut pas démarrer. (Code 10). isatap.{BC9AD58A-2674-4603-B964-8D9DB86A76EA}. Ce périphérique ne peut pas démarrer. (Code 10). isatap.{BC9AD58A-2674-4603-B964-8D9DB86A76EA}. Ce périphérique ne peut pas démarrer. (Code 10). Périphérique inconnu. Ce périphérique n'est pas configuré correctement. (Code 1)
Quand je démarre l'ordinateur, il y a ce message qui s'affiche à l'écran:Windows doit installer le pilote de votre périphérique inconnu.Et puis je fais une recerche automatique, la réponse est celle-ci:Windows n'a trouvé aucun pilote logiciel pour votre périphérique ou Windows n'a pas pu intaller votre périphérique inconnu.
Aidez-moi svp

Configuration: Windows Vista
Internet Explorer 7.0

Afficher la suite

34 réponses

Résumé de la discussion

Les problèmes de connexion Internet surviennent sur un PC portable sous Windows Vista, où la connexion wifi se coupe après 20 à 30 minutes et nécessite un redémarrage pour rétablir l’accès. Le diagnostic évoque des dysfonctionnements de cartes réseau et des codes d’erreur Code 10, des pilotes inconnus et des conflits avec plusieurs outils de sécurité qui compliquent la stabilité de la connexion. La solution préconisée prioritaire s’appuie sur des nettoyages de système et des analyses anti-malware, avec des étapes sur hijackthis, Navifix et CCleaner, puis la suppression des points de restauration et la création d’un point sain.

Réponse 1 / 34
ric025
Pourquoi tu m'as remis un rapport combofix?

Cette manip:
```
Pour combofix: Clique sur "Démarrer >> Exécuter" et tape: combofix /u 
```
est faite pour désinstaller combofix.

==================

Relance hijackthis, choisis "Do a system scan only".

La liste créée, coche les lignes suivantes:
```
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) 

O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) 

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" 

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime 

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" 

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background 

O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized 

O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab

O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab

O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com 
```
Puis clique sur "Fix Checked".

==========================

Repasse un coup de ccleaner, registre compris.

==========================

Redémarre.

Si tout va bien, désinstalle hijackthis.

Puis fais la suite:

!! TRES IMPORTANT !!:

Supprimer les anciens points de restauration:

Procédure sous Vista: /!\Désactive la restauration puis réactive-la /!\ Cela purgera la restauration du système.
http://www.commentcamarche.net/faq/sujet 13214 desactiver reactiver la restauration systeme de vista

Les points sont supprimés.

Création d'un nouveau point:

Procédure de création d'un point de restauration "sain" sous Vista: https://forums.cnetfrance.fr

Nomme-le par exemple: "Après désinfection CCM" pour te rappeler.

======================

Pour une navigation plus sûre et plus rapide: Choisis Firefox

Addon à ajouter à firefox pour le sécuriser:

Ici : WOT : https://addons.mozilla.org/en-US/firefox/addon/wot-safe-browsing-tool/
Explications/Demo ici : http://www.mywot.com/fr/demo

+ ceux-ci: https://www.malekal.com/securiser-le-navigateur-web-firefox-2/
=============

Quelques liens utiles:

https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf

Important: http://www.commentcamarche.net/faq/sujet 13362 prevention mettre a jour son pc contre les failles de securite

==============

Si tu n'as plus de question et/ou problème, pour moi, c'est ok!

Bonne lecture, bon surf.

;))
1

Réagir
Réponse 2 / 34
ric025
Pourquoi tu m'as remis un rapport combofix?

Cette manip:
```
Pour combofix: Clique sur "Démarrer >> Exécuter" et tape: combofix /u 
```
est faite pour désinstaller combofix.

==================

Relance hijackthis, choisis "Do a system scan only".

La liste créée, coche les lignes suivantes:

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)

O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab

O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab

O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com

Puis clique sur "Fix Checked".

==========================

Repasse un coup de ccleaner, registre compris.

==========================

Redémarre.

Si tout va bien, désinstalle hijackthis.

Puis fais la suite:

!! TRES IMPORTANT !!:

Supprimer les anciens points de restauration:

Procédure sous Vista: /!\Désactive la restauration puis réactive-la /!\ Cela purgera la restauration du système.
http://www.commentcamarche.net/faq/sujet 13214 desactiver reactiver la restauration systeme de vista

Les points sont supprimés.

Création d'un nouveau point:

Procédure de création d'un point de restauration "sain" sous Vista: https://forums.cnetfrance.fr

Nomme-le par exemple: "Après désinfection CCM" pour te rappeler.

======================

Pour une navigation plus sûre et plus rapide: Choisis Firefox

Addon à ajouter à firefox pour le sécuriser:

Ici : WOT : https://addons.mozilla.org/en-US/firefox/addon/wot-safe-browsing-tool/
Explications/Demo ici : http://www.mywot.com/fr/demo

+ ceux-ci: https://www.malekal.com/securiser-le-navigateur-web-firefox-2/
=============

Quelques liens utiles:

https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf

Important: http://www.commentcamarche.net/faq/sujet 13362 prevention mettre a jour son pc contre les failles de securite

==============

Si tu n'as plus de question et/ou problème, pour moi, c'est ok!

Bonne lecture, bon surf.

;))
1

Réagir
Réponse 3 / 34
ric025
Ah oui, pour Rundll32,

Regarde ce que j'ai trouvé:

http://elguijaronegro.canalblog.com/archives/2008/05/13/9172954.html

Puis ici: http://www.commentcamarche.net/forum/affich 2651501 processus hote windows rundll32 a cesse de

Avec ce message en particulier: http://www.commentcamarche.net/forum/affich 2651501 processus hote windows rundll32 a cesse de#13

Également ceci, je ne sais pas: http://www.commentcamarche.net/forum/affich 1135752 comment restaurer rundll32 exe

Voilà, bonne lecture et bon courage.

A demain.

0

Réagir
1. beauté numerique Auteur
  
  Bonne nuit, voici le rapport de combofix.
  
  ComboFix 09-03-03.01 - anne 2009-03-05 3:34:07.2 - NTFSx86
  Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.3070.1683 [GMT 1:00]
  Lancé depuis: c:\users\anne\Desktop\ComboFix.exe
  Commutateurs utilisés :: / u
  FW: ZoneAlarm Firewall *enabled*
  * Un nouveau point de restauration a été créé
  * Resident AV is active
  
  .
  
  ((((((((((((((((((((((((((((( Fichiers créés du 2009-02-05 au 2009-03-05 ))))))))))))))))))))))))))))))))))))
  .
  
  2009-03-02 19:45 . 2009-03-02 19:46 <REP> d-------- c:\program files\EasyPHP 3.0
  2009-03-01 22:19 . 2009-01-22 14:28 290,816 --a------ c:\windows\System32\decdll.dll
  2009-02-28 01:10 . 2009-02-28 01:10 <REP> d-------- c:\windows\System32\RTCOM
  2009-02-27 21:58 . 2009-02-27 21:58 <REP> d-------- c:\program files\Lavalys
  2009-02-27 03:45 . 2009-03-05 03:34 <REP> d--h----- C:\$AVG8.VAULT$
  2009-02-27 03:41 . 2009-03-04 11:08 <REP> d-------- c:\windows\System32\drivers\Avg
  2009-02-27 03:41 . 2009-02-27 03:41 <REP> d-------- c:\program files\AVG
  2009-02-27 03:41 . 2009-02-27 03:41 325,128 --a------ c:\windows\System32\drivers\avgldx86.sys
  2009-02-27 03:41 . 2009-02-27 03:41 107,272 --a------ c:\windows\System32\drivers\avgtdix.sys
  2009-02-27 03:41 . 2009-02-27 03:41 10,520 --a------ c:\windows\System32\avgrsstx.dll
  2009-02-27 03:40 . 2009-02-27 03:41 <REP> d-------- c:\users\All Users\avg8
  2009-02-27 03:40 . 2009-02-27 03:41 <REP> d-------- c:\programdata\avg8
  2009-02-26 21:03 . 2009-02-27 00:05 <REP> d-------- c:\program files\Ad-remover
  2009-02-26 10:19 . 2009-02-26 10:19 <REP> d-------- c:\windows\System32\AGEIA
  2009-02-26 10:19 . 2009-02-26 10:19 <REP> d-------- c:\program files\AGEIA Technologies
  2009-02-26 10:14 . 2009-02-26 10:14 <REP> d-------- C:\NVIDIA
  2009-02-26 00:04 . 2009-02-26 00:04 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
  2009-02-26 00:04 . 2009-02-11 10:19 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
  2009-02-26 00:04 . 2009-02-11 10:19 15,504 --a------ c:\windows\System32\drivers\mbam.sys
  2009-02-25 16:35 . 2009-02-25 16:35 56 --ah----- c:\windows\System32\ezsidmv.dat
  2009-02-25 15:47 . 2009-03-05 02:52 <REP> d-------- c:\program files\trend micro
  2009-02-25 14:53 . 2009-02-25 14:58 <REP> d--h----- c:\program files\Temp
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\users\All Users\ma-config.com
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\programdata\ma-config.com
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\program files\ma-config.com
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Public\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Invité\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Invité\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Default\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\anne\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\anne\AppData\Roaming\Intel
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\All Users\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\programdata\Roaming
  2009-02-25 03:55 . 2009-02-25 03:55 <REP> d-------- c:\program files\Common Files\Intel
  2009-02-25 03:55 . 2009-02-25 03:55 <REP> d-------- c:\program files\Cisco
  2009-02-25 03:54 . 2009-02-25 03:54 <REP> d-------- c:\users\All Users\Intel
  2009-02-25 03:54 . 2009-02-25 03:54 <REP> d-------- c:\programdata\Intel
  2009-02-25 01:32 . 2008-12-16 04:29 8,147,456 --a------ c:\windows\System32\wmploc.DLL
  2009-02-25 01:32 . 2008-12-16 06:31 7,680 --a------ c:\windows\System32\spwmp.dll
  2009-02-25 01:32 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\msdxm.ocx
  2009-02-25 01:32 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\dxmasf.dll
  2009-02-25 00:03 . 2009-02-25 00:03 <REP> d-------- c:\program files\CCleaner
  2009-02-22 22:05 . 2004-10-04 02:10 98,304 --a------ c:\windows\System32\tsccvid.dll
  2009-02-22 21:55 . 2009-02-22 21:55 <REP> d-------- c:\program files\Micro Application
  2009-02-22 16:48 . 2009-02-22 17:10 0 -rahs---- c:\windows\System32\drivers\103C_HP_cNB_Pavilion dv9700 Notebook PC_Y5335KV_0U_QCNF8221HVG_E480576-051_4A_I30CB_SQuanta_V79.2E_F.59_T081125_WV3-1_L40C_M3070_J250_7Intel_86FD_92.00_#080906_N10EC8168;80864222_(FM630EA#ABF)_XMOBILE_CN10_Z.MRK
  2009-02-21 19:47 . 2009-02-21 19:47 <REP> d-------- c:\program files\VS Revo Group
  2009-02-21 02:06 . 2009-02-21 02:06 <REP> d-------- c:\program files\IZArc
  2009-02-20 21:26 . 2009-02-20 21:26 <REP> d-------- c:\program files\AGI
  2009-02-17 20:30 . 2009-02-17 20:30 <REP> d-------- c:\program files\Smart PC Solutions
  2009-02-14 14:22 . 2009-02-17 13:29 <REP> d-------- c:\users\anne\{350c1f09-e06f-400e-b71c-20cc48eb7c5e}
  2009-02-14 14:22 . 2009-02-14 14:22 3,505 --a------ c:\windows\bcmCE65.tmp
  2009-02-13 22:00 . 2009-02-13 22:00 <REP> d-------- c:\program files\Broadcom
  2009-02-13 22:00 . 2009-02-14 14:16 135,168 --a------ c:\windows\bcmD515.tmp
  2009-02-13 22:00 . 2009-02-14 00:34 135,168 --a------ c:\windows\bcmD4E6.tmp
  2009-02-12 13:09 . 2009-02-12 13:09 <REP> d-------- c:\program files\Feneris
  2009-02-11 16:23 . 2009-02-11 16:23 <REP> d-------- c:\users\anne\AppData\Roaming\Mozilla(146)
  2009-02-06 19:39 . 2009-02-06 19:39 308,600 --a------ c:\windows\WLXPGSS.SCR
  2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\System32\sirenacm.dll
  2009-02-06 18:30 . 2009-02-06 18:30 <REP> d-------- c:\program files\Microsoft Sync Framework
  2009-02-06 18:30 . 2008-12-08 17:01 55,264 --a------ c:\windows\System32\drivers\fssfltr.sys
  2009-02-06 18:28 . 2009-02-06 18:28 <REP> d-------- c:\program files\Microsoft SQL Server Compact Edition
  2009-02-06 16:46 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll
  2009-02-06 16:46 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe
  2009-02-06 16:46 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe
  2009-02-06 16:46 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll
  2009-02-06 16:46 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll
  2009-02-06 16:46 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll
  2009-02-06 16:46 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl
  2009-02-06 16:46 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll
  2009-02-06 16:39 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll
  2009-02-06 16:39 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll
  2009-02-06 16:39 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll
  2009-02-06 16:39 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll
  2009-02-06 16:39 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2009-03-05 02:38 --------- d-----w c:\users\anne\AppData\Roaming\Skype
  2009-03-05 02:24 3,145,728 ----a-w c:\users\Invité\NTUSER.DAT
  2009-03-05 02:24 3,145,728 ----a-w c:\users\Invité\NTUSER.DAT
  2009-03-05 02:18 --------- d-----w c:\users\anne\AppData\Roaming\skypePM
  2009-03-05 02:16 352,616 ---ha-w c:\windows\system32\drivers\vsconfig.xml
  2009-03-02 16:31 1,770,496 ----a-w c:\windows\Internet Logs\xDBA6C9.tmp
  2009-03-01 21:19 --------- d-----w c:\program files\Free Video Converter
  2009-02-28 02:54 --------- d--h--w c:\program files\InstallShield Installation Information
  2009-02-28 00:14 1,750,528 ----a-w c:\windows\Internet Logs\xDBEDA8.tmp
  2009-02-27 02:39 --------- d-s---w c:\users\Invité\AppData\Roaming\Microsoft
  2009-02-27 01:58 31,776 ----a-w c:\users\All Users\nvModes.dat
  2009-02-27 01:58 31,776 ----a-w c:\programdata\nvModes.dat
  2009-02-27 01:35 --------- d-----w c:\programdata\Yahoo! Companion
  2009-02-26 23:49 --------- d-----w c:\program files\Yahoo!
  2009-02-26 11:01 --------- d-----w c:\program files\Microsoft Silverlight
  2009-02-26 09:22 --------- d-----w c:\programdata\NVIDIA
  2009-02-26 09:18 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
  2009-02-25 13:54 --------- d-----w c:\program files\Realtek
  2009-02-25 13:53 319,456 ----a-w c:\windows\DIFxAPI.dll
  2009-02-25 02:54 --------- d-----w c:\program files\Intel
  2009-02-25 00:53 --------- d-----w c:\program files\Mouse Driver
  2009-02-22 16:11 --------- d-----w c:\users\anne\AppData\Roaming\Hewlett-Packard
  2009-02-22 16:10 --------- d-----w c:\program files\Hewlett-Packard
  2009-02-20 16:29 1,678,848 ----a-w c:\windows\Internet Logs\xDBA64C.tmp
  2009-02-20 14:55 --------- d-----w c:\program files\Google
  2009-02-19 11:10 200,192 ----a-w c:\windows\Internet Logs\xDBA765.tmp
  2009-02-18 19:28 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(235).xml
  2009-02-18 17:14 --------- d-----w c:\program files\Windows Live
  2009-02-17 19:30 --------- d-----w c:\users\anne\AppData\Roaming\Smart PC Solutions
  2009-02-17 12:31 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(231).xml
  2009-02-17 12:29 --------- d-----w c:\users\anne\AppData\Roaming\vlc
  2009-02-17 12:29 --------- d-----w c:\users\anne\AppData\Roaming\dvdcss
  2009-02-15 20:02 --------- d-----w c:\users\anne\AppData\Roaming\Mozilla(193)
  2009-02-15 18:53 --------- d-----w c:\users\anne\AppData\Roaming\Apple Computer
  2009-02-15 12:59 --------- d-----w c:\programdata\Microsoft Help
  2009-02-14 14:03 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1193).xml
  2009-02-14 13:22 37,888 ----a-w c:\windows\Internet Logs\xDB9A6A.tmp
  2009-02-14 13:01 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(248).xml
  2009-02-14 03:10 1,625,088 ----a-w c:\windows\Internet Logs\xDBA506.tmp
  2009-02-14 03:10 1,604,096 ----a-w c:\windows\Internet Logs\xDBA43A.tmp
  2009-02-14 01:44 1,624,064 ----a-w c:\windows\Internet Logs\xDBA987.tmp
  2009-02-11 10:37 --------- d-----w c:\program files\Windows Mail
  2009-02-08 04:36 1,585,152 ----a-w c:\windows\Internet Logs\xDBA591.tmp
  2009-02-06 13:02 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(255).xml
  2009-02-06 00:14 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1716).xml
  2009-02-04 04:45 453,152 ----a-w c:\windows\System32\NVUNINST.EXE
  2009-02-03 19:11 --------- d-----w c:\users\anne\AppData\Roaming\LimeWire
  2009-02-02 21:57 --------- d-----w c:\program files\CDBurnerXP
  2009-02-02 14:20 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1697).xml
  2009-01-30 18:48 --------- d-----w c:\users\anne\AppData\Roaming\muvee Technologies
  2009-01-30 18:42 --------- d-----w c:\programdata\TEMP
  2009-01-30 18:09 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
  2009-01-30 17:58 --------- d-----w c:\program files\Samsung
  2009-01-29 18:11 339,968 ----a-w c:\windows\System32\pythoncom25.dll
  2009-01-29 18:11 2,117,632 ----a-w c:\windows\System32\python25.dll
  2009-01-29 18:11 114,688 ----a-w c:\windows\System32\pywintypes25.dll
  2009-01-27 21:56 --------- d-----w c:\programdata\Skype
  2009-01-27 21:56 --------- d-----w c:\program files\Skype
  2009-01-27 21:56 --------- d-----w c:\program files\Common Files\Skype
  2009-01-25 01:51 1,482,240 ----a-w c:\windows\Internet Logs\xDB9F5A.tmp
  2009-01-24 18:19 --------- d-----w c:\program files\DivX
  2009-01-23 02:08 --------- d-----w c:\users\anne\AppData\Roaming\Megaupload
  2009-01-23 02:03 --------- d-----w c:\programdata\Megaupload
  2009-01-23 02:03 --------- d-----w c:\programdata\EmailNotifier
  2009-01-23 02:03 --------- d-----w c:\program files\Megaupload
  2009-01-21 14:15 1,458,176 ----a-w c:\windows\Internet Logs\xDB90F8.tmp
  2009-01-21 00:27 1,454,080 ----a-w c:\windows\Internet Logs\xDB96A3.tmp
  2009-01-19 20:55 --------- d-----w c:\programdata\WildTangent
  2009-01-19 13:53 --------- d-----w c:\programdata\InternetFax
  2009-01-17 14:55 4,600,710 ----a-w c:\windows\Internet Logs\tvDebug.zip
  2009-01-17 14:45 --------- d-----w c:\programdata\tpfmon
  2009-01-17 14:45 --------- d-----w c:\program files\Alliance MCA
  2009-01-15 17:59 1,413,632 ----a-w c:\windows\Internet Logs\xDB86FB.tmp
  2009-01-15 17:59 1,167,872 ----a-w c:\windows\Internet Logs\xDB8545.tmp
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet(620).dll
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet(439).dll
  2009-01-15 06:11 1,166,336 ----a-w c:\windows\System32\urlmon(616).dll
  2009-01-15 06:11 1,166,336 ----a-w c:\windows\System32\urlmon(435).dll
  2009-01-15 06:07 270,336 ----a-w c:\windows\System32\iertutil(580).dll
  2009-01-15 06:07 270,336 ----a-w c:\windows\System32\iertutil(404).dll
  2009-01-14 11:36 410,984 ----a-w c:\windows\System32\deploytk.dll
  2009-01-14 11:36 --------- d-----w c:\program files\Java
  2009-01-14 01:31 --------- d-----w c:\program files\Aire&Volume 1.0
  2009-01-13 23:43 --------- d-----w c:\program files\MLSofts
  2009-01-11 13:36 --------- d-----w c:\program files\BurnAware Free Edition
  2009-01-10 21:14 --------- d-----w c:\users\anne\AppData\Roaming\SUPERAntiSpyware.com
  2009-01-10 21:14 --------- d-----w c:\program files\SUPERAntiSpyware
  2009-01-10 14:04 --------- d-----w c:\users\anne\AppData\Roaming\Uniblue
  2009-01-10 14:04 --------- d-----w c:\programdata\Uniblue
  2009-01-10 14:03 --------- d-----w c:\program files\Uniblue
  2009-01-10 00:23 --------- d-----w c:\program files\eMule
  2009-01-07 13:43 1,849,344 ----a-w c:\windows\Internet Logs\xDB909B.tmp
  2009-01-07 13:42 1,849,344 ----a-w c:\windows\Internet Logs\xDB90EA.tmp
  2009-01-06 08:35 --------- d-----w c:\users\anne\AppData\Roaming\TingleSoft
  2009-01-06 07:45 --------- d-----w c:\program files\NCH Software
  2009-01-06 07:21 396,800 ----a-w c:\windows\Internet Logs\xDB901E.tmp
  2009-01-06 07:21 1,843,200 ----a-w c:\windows\Internet Logs\xDB90BB.tmp
  2009-01-02 09:55 976,896 ----a-w c:\windows\Internet Logs\xDB81EB.tmp
  2008-12-27 15:38 1,812,992 ----a-w c:\windows\Internet Logs\xDB8C95.tmp
  2008-09-16 11:49 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  2008-09-16 11:49 32,768 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  2008-09-16 11:49 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  .
  
  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  REGEDIT4
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968]
  "HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2007-10-01 1783136]
  "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
  "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
  "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
  "Uniblue SpyEraser"="c:\program files\Uniblue\SpyEraser\SpyEraser.exe" [2008-11-24 1431816]
  "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-12-22 1830128]
  "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-18 21633320]
  "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
  "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
  "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]
  "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-19 468264]
  "OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
  "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
  "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-16 75008]
  "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
  "WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
  "WireLessMouse"="c:\program files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe" [2007-03-06 212992]
  "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-09-09 185896]
  "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-03-03 959976]
  "KMCONFIG"="c:\program files\Mouse Driver\StartAutorun.exe" [2007-03-06 212992]
  "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
  "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
  "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
  "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
  "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
  "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-14 136600]
  "fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
  "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-30 13605408]
  "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-30 92704]
  "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-27 1601304]
  "RtHDVCpl"="RtHDVCpl.exe" [2007-10-09 c:\windows\RtHDVCpl.exe]
  
  c:\users\anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-09-12 384000]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  "FilterAdministratorToken"= 1 (0x1)
  "EnableUIADesktopToggle"= 0 (0x0)
  
  [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
  2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
  "AppInit_DLLs"=avgrsstx.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  "msacm.l3codecp"= l3codecp.acm
  "vidc.xvid"= xvid.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "UacDisableNotify"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
  "DisableMonitoring"=dword:00000001
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
  "{CF56EE87-3255-4F75-9569-E4BD5033A6E6}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
  "{27DA28C7-00AD-4753-9858-0BDDED7D8752}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
  "{D587D31A-8B46-4EFA-B935-FF83EBF02909}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
  "{39D1E530-FF40-4E75-865F-3FCE8707DDDB}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
  "{5F15B3E8-9831-42CC-8BA6-1F91E2BD2DBE}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
  "{D6583C84-5578-40CF-B6E4-C70960B1266F}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
  "{8E7065D3-471B-481B-91E8-841ABF049266}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
  "{608CBAD9-11FB-45F6-846F-FADF580CA45C}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
  "{9B32574B-3E69-4617-BB65-7291B197A7AB}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
  "{370A4226-8445-4644-B556-1682BAB99844}"= UDP:58936:Pando P2P TCP Listening Port
  "{503BE8C3-119F-4473-88D6-C05E38B0A3A0}"= TCP:58936:Pando P2P UDP Listening Port
  "{05A79AB9-2A65-4894-B530-DDDB589388DA}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
  "{049AB5FD-B8B7-48CC-9806-9EC891235CA7}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
  "{A796F93F-1A1E-463D-86AC-055C5A731060}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
  "{A484FDC6-42EB-49DC-8824-42D8C2DF87C8}"= UDP:57960:Pando P2P TCP Listening Port
  "{7AF80DE4-2A45-407C-A3E3-D5D76FFE8AAB}"= TCP:57960:Pando P2P UDP Listening Port
  "{A04E3147-E7DB-4994-BA41-FE92D96FC7C3}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
  "{97BECF03-980C-46C1-8DC4-B650ADAB5059}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
  "{783FF91A-09F7-4C49-B590-239797FB57AA}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
  "{233BBDD1-5CD1-4A29-9668-1F85218F4650}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
  "{E60D48BD-5DE5-46C2-BF0B-715578C9FA65}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
  "{0CEE3E9A-8507-4574-AC4F-FC167117E90A}"= c:\program files\Skype\Phone\Skype.exe:Skype
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [2009-02-27 325128]
  R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [2009-02-27 107272]
  R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2008-12-22 8944]
  R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2008-12-22 55024]
  R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-02-27 298264]
  R2 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [2009-02-06 55264]
  R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
  R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
  R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [2008-06-26 3662848]
  R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2008-12-22 7408]
  S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [2009-02-27 26224]
  S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2009-01-24 216232]
  S3 ST50220;Sonix ST50220 USB Video Camera Driver;c:\windows\System32\drivers\ST50220.sys [2008-12-02 34224]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
  "c:\program files\Common Files\LightScribe\LSRunOnce.exe"
  .
  Contenu du dossier 'Tâches planifiées'
  
  2009-02-27 c:\windows\Tasks\Uniblue SpyEraser Nag.job
  - c:\program files\Uniblue\SpyEraser\SpyEraser.exe [2008-11-24 05:04]
  
  2009-02-22 c:\windows\Tasks\Uniblue SpyEraser.job
  - c:\program files\Uniblue\SpyEraser\SpyEraser.exe [2008-11-24 05:04]
  
  2009-03-04 c:\windows\Tasks\User_Feed_Synchronization-{EC0C4AAF-AFA3-4F00-A022-B12B375CEBEF}.job
  - c:\windows\system32\msfeedssync.exe [2008-01-21 03:24]
  .
  .
  ------- Examen supplémentaire -------
  .
  uStart Page = hxxp://www.google.fr/
  mWindow Title =
  uInternet Settings,ProxyOverride = *.local
  DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
  FF - ProfilePath - c:\users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\damnqyvm.default\
  FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
  FF - prefs.js: browser.search.selectedEngine - Google
  FF - prefs.js: browser.startup.homepage - www.lemonde.fr
  FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
  FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
  FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
  FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
  FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
  FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
  FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
  
  ---- PARAMETRES FIREFOX ----
  FF - user.js: yahoo.homepage.dontask - true.
  
  **************************************************************************
  
  catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2009-03-05 03:38:14
  Windows 6.0.6001 Service Pack 1 NTFS
  
  Recherche de processus cachés ...
  
  Recherche d'éléments en démarrage automatique cachés ...
  
  Recherche de fichiers cachés ...
  
  Scan terminé avec succès
  Fichiers cachés: 0
  
  **************************************************************************
  .
  Heure de fin: 2009-03-05 3:40:44
  ComboFix-quarantined-files.txt 2009-03-05 02:40:12
  
  Avant-CF: 4,369,539,072 octets libres
  Après-CF: 4,321,705,984 octets libres
  
  347 --- E O F --- 2009-03-02 18:57:21
  
  0
  
  Réagir
2. beauté numerique Auteur
  
  Salut Ric025,
  voici le rapport d'HIJACKTHIS;
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 17:27:32, on 05/03/2009
  Platform: Windows Vista SP1 (WinNT 6.00.1905)
  MSIE: Internet Explorer v7.00 (7.00.6001.18000)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\Explorer.EXE
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
  C:\Program Files\Hp\QuickPlay\QPService.exe
  C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
  C:\Program Files\Mouse Driver\StartAutorun.exe
  C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\Java\jre6\bin\jusched.exe
  C:\Program Files\Windows Live\Family Safety\fsui.exe
  C:\Windows\System32\rundll32.exe
  C:\Program Files\AVG\AVG8\avgtray.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
  C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
  C:\Windows\ehome\ehtray.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
  C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  C:\Program Files\Skype\Phone\Skype.exe
  C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe
  C:\Program Files\Mouse Driver\KMConfig.exe
  C:\Program Files\Windows Media Player\wmpnscfg.exe
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Mouse Driver\KMProcess.exe
  C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
  C:\Program Files\OpenOffice.org 3\program\soffice.exe
  C:\Program Files\OpenOffice.org 3\program\soffice.bin
  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  C:\Program Files\Windows Live\Contacts\wlcomm.exe
  C:\Program Files\Skype\Plugin Manager\skypePM.exe
  C:\Program Files\Internet Explorer\ieuser.exe
  C:\Program Files\Windows Live\Toolbar\wltuser.exe
  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
  O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
  O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
  O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
  O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
  O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
  O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
  O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  O4 - HKLM\..\Run: [WireLessMouse] C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
  O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files\Mouse Driver\StartAutorun.exe KMConfig.exe
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
  O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
  O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
  O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe" -m
  O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
  O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O13 - Gopher Prefix:
  O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
  O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
  O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
  O20 - AppInit_DLLs: avgrsstx.dll
  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
  O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
  O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
  O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
  O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
  O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
  O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
  O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
  O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
  
  0
  
  Réagir
Réponse 4 / 34
ric025
Ok! Supprime les fichiers en gras:

C:\Toolbar SD
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1

Pour combofix: Clique sur "Démarrer >> Exécuter" et tape: combofix /u

Valide par ok.

=============

Tu peux faire la suite que je verrai demain.

Bonne nuit.

A++

0

Réagir
Vous n’avez pas trouvé la réponse que vous recherchez ?

La communauté CCM répond en moyenne en moins de 2h.

Posez votre question
Réponse 5 / 34
ric025
Tu l'as bien lancé par clic-droit?

Relance-le une fois pour voir.

A+

0

Réagir
1. beauté numerique Auteur
  
  Enfin,
  voici le bon rapport de ToolsCleaner:
  
  [ Rapport ToolsCleaner version 2.3.2 (par A.Rothstein & dj QUIOU) ]
  
  -->- Recherche:
  
  C:\Combofix.txt: trouvé !
  C:\fixnavi.txt: trouvé !
  C:\cleannavi.txt: trouvé !
  C:\TB.txt: trouvé !
  C:\Toolbar SD: trouvé !
  C:\Program Files\Navilog1: trouvé !
  C:\Program Files\Navilog1\Navilog1.bat: trouvé !
  C:\Program Files\trend micro\HijackThis.exe: trouvé !
  C:\Program Files\trend micro\hijackthis.log: trouvé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
  C:\Users\anne\Desktop\ComboFix.exe: trouvé !
  
  ---------------------------------
  -->- Suppression:
  
  C:\Program Files\Navilog1\Navilog1.bat: supprimé !
  C:\Program Files\trend micro\HijackThis.exe: supprimé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: supprimé !
  C:\Users\anne\Desktop\ComboFix.exe: ERREUR DE SUPPRESSION !!
  C:\Combofix.txt: supprimé !
  C:\fixnavi.txt: supprimé !
  C:\cleannavi.txt: supprimé !
  C:\TB.txt: supprimé !
  C:\Program Files\trend micro\hijackthis.log: supprimé !
  C:\Toolbar SD: ERREUR DE SUPPRESSION !!
  C:\Program Files\Navilog1: supprimé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: ERREUR DE SUPPRESSION !!
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1: supprimé !
  
  0
  
  Réagir
Réponse 6 / 34
ric025
Ok! On termine proprement:

Nettoyage des outils:

Télécharge ToolsCleaner par A.Rothstein & dj QUIOU sur ton Bureau:

Toolscleaner

Lance-le par clic-droit puis "Exécuter en tant qu'administrateur".

Clique sur Recherche et laisse le scan se terminer. Même si tu reçois le message d'erreur "Ne répond pas", laisse -le tourner.

Clique, sur Suppression pour finaliser.

Clique sur Quitter, pour que le rapport puisse se créer.

Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).

===========

Télécharge CCleaner, version Slim, sans toolbar:

CCLEANER

Va dans "Options">>"Avancé". Décoche la première ligne.

Va dans la section "Nettoyeur". Lance l'analyse. La liste créée, lance le nettoyage deux fois de suite afin d'obtenir 0bytes supprimé!

Ensuite dans "Registre", lance une recherche des erreurs. La liste créée, fais-les réparer.

/!\ A ce moment CCleaner te demande normalement de sauvegarder le registre, fais-le. /!\

Recommence ensuite le cycle Recherche/Réparation des erreurs jusqu'à n'en trouver aucune lors de la recherche.

==========

Télécharge HIJACKTHIS

Tout est expliqué pour bien l'installer et savoir l'utiliser.

Comment copier/coller le rapport:

Quand tu as le rapport à l'écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

Ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.

Une explication des raccourcis clavier sont illustrés sur ce site web (merci à Geoffrey5) :

https://www.androidworld.fr/

A++ ;)

1

Réagir
1. beauté numerique Auteur
  
  Alo, Il est impossible de créer le fichier "C:\TCleaner.txt" sur la racine du disque dur. Accés refusé.
  Au fait, j'ai fait copier collé sur Tools Cleaner 2.3.2.
  
  Voici le rapport:
  [ Rapport ToolsCleaner version 2.3.2 (par A.Rothstein & dj QUIOU) ]
  
  -->- Recherche:
  
  C:\Combofix.txt: trouvé !
  C:\fixnavi.txt: trouvé !
  C:\cleannavi.txt: trouvé !
  C:\TB.txt: trouvé !
  C:\Combofix: trouvé !
  C:\Qoobox: trouvé !
  C:\_OtMoveIt: trouvé !
  C:\Toolbar SD: trouvé !
  C:\Rsit: trouvé !
  C:\Program Files\Navilog1: trouvé !
  C:\Program Files\Navilog1\Navilog1.bat: trouvé !
  C:\Program Files\trend micro\HijackThis.exe: trouvé !
  C:\Program Files\trend micro\hijackthis.log: trouvé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
  C:\Users\anne\Desktop\ComboFix.exe: trouvé !
  C:\Users\anne\Desktop\ToolBarSD.exe: trouvé !
  C:\Users\anne\Desktop\OTMoveIt3.exe: trouvé !
  C:\Users\anne\Desktop\Rsit.exe: trouvé !
  C:\Users\Public\Desktop\Navilog1.lnk: trouvé !
  
  ---------------------------------
  -->- Suppression:
  
  C:\Program Files\Navilog1\Navilog1.bat: ERREUR DE SUPPRESSION !!
  C:\Program Files\trend micro\HijackThis.exe: ERREUR DE SUPPRESSION !!
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: ERREUR DE SUPPRESSION !!
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: ERREUR DE SUPPRESSION !!
  C:\Users\anne\Desktop\ComboFix.exe: ERREUR DE SUPPRESSION !!
  C:\Users\anne\Desktop\ToolBarSD.exe: supprimé !
  C:\Users\Public\Desktop\Navilog1.lnk: supprimé !
  C:\Combofix.txt: ERREUR DE SUPPRESSION !!
  C:\fixnavi.txt: ERREUR DE SUPPRESSION !!
  C:\cleannavi.txt: ERREUR DE SUPPRESSION !!
  C:\TB.txt: ERREUR DE SUPPRESSION !!
  C:\Program Files\trend micro\hijackthis.log: ERREUR DE SUPPRESSION !!
  C:\Users\anne\Desktop\OTMoveIt3.exe: supprimé !
  C:\Users\anne\Desktop\Rsit.exe: supprimé !
  C:\Combofix: supprimé !
  C:\Qoobox: supprimé !
  C:\_OtMoveIt: supprimé !
  C:\Toolbar SD: ERREUR DE SUPPRESSION !!
  C:\Rsit: supprimé !
  C:\Program Files\Navilog1: ERREUR DE SUPPRESSION !!
  C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: ERREUR DE SUPPRESSION !!
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1: ERREUR DE SUPPRESSION !!
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\Navilog1: ERREUR DE SUPPRESSION !!
  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1: ERREUR DE SUPPRESSION !!
  
  0
  
  Réagir
Réponse 7 / 34
ric025
Re!

Plus infectée donc.

Où en sont les soucis?

A++

0

Réagir
1. beauté numerique Auteur
  
  alo ric025,
  je te remercie, je peux en deduire q le pbm a été réglé.
  
  sauf q je n'arrive pas à comprendre pq le Processus hôte Windows (rundll32.exe), a cessé de fonctionner.
  
  merci infiniment pour tout.
  du bon travail.
  
  0
  
  Réagir
Réponse 8 / 34
beauté numerique Auteur
je sors, je serai de retour vers 19h30.

je t'ai posté le rapport MBAM.
a+

0

Réagir
Réponse 9 / 34
ric025
Tu ne parais plus infectée.

Fais un scan Rapide avec MBAM.

A+

0

Réagir
1. beauté numerique Auteur
  
  le voilà, le rapport du scan MBAM;
  
  Malwarebytes' Anti-Malware 1.34
  Version de la base de données: 1813
  Windows 6.0.6001 Service Pack 1
  
  04/03/2009 17:07:57
  mbam-log-2009-03-04 (17-07-57).txt
  
  Type de recherche: Examen rapide
  Eléments examinés: 68457
  Temps écoulé: 3 minute(s), 2 second(s)
  
  Processus mémoire infecté(s): 0
  Module(s) mémoire infecté(s): 0
  Clé(s) du Registre infectée(s): 0
  Valeur(s) du Registre infectée(s): 0
  Elément(s) de données du Registre infecté(s): 0
  Dossier(s) infecté(s): 0
  Fichier(s) infecté(s): 0
  
  Processus mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Clé(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Valeur(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Elément(s) de données du Registre infecté(s):
  (Aucun élément nuisible détecté)
  
  Dossier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  Fichier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  0
  
  Réagir
2. beauté numerique Auteur
  
  ré ric025,
  
  je suis de retour, je t'ai posté le rapport MBAM
  a+
  
  0
  
  Réagir
3. beauté numerique Auteur
  
  ré,
  me voici de retour, j'espère q t'as reçu le rapport.
  merci de me tenir au courant.
  a+
  
  0
  
  Réagir
Réponse 10 / 34
ric025
Poste un nouveau rapport RSIT stp.

Pour rappel: http://www.commentcamarche.net/forum/affich 11228329 probleme de connexion internet#6

A++

0

Réagir
1. beauté numerique Auteur
  
  voici le rapport RSIT,
  
  Logfile of random's system information tool 1.05 (written by random/random)
  Run by anne at 2009-03-04 16:49:42
  Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
  System drive C: has 4 GB (2%) free of 227 GB
  Total RAM: 3070 MB (51% free)
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 16:49:48, on 04/03/2009
  Platform: Windows Vista SP1 (WinNT 6.00.1905)
  MSIE: Internet Explorer v7.00 (7.00.6001.18000)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\Explorer.EXE
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
  C:\Program Files\Hp\QuickPlay\QPService.exe
  C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
  C:\Program Files\Mouse Driver\StartAutorun.exe
  C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
  C:\Program Files\Mouse Driver\KMConfig.exe
  C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe
  C:\Program Files\Mouse Driver\KMProcess.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\Java\jre6\bin\jusched.exe
  C:\Program Files\Windows Live\Family Safety\fsui.exe
  C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
  C:\Windows\System32\rundll32.exe
  C:\Program Files\AVG\AVG8\avgtray.exe
  C:\Windows\RtHDVCpl.exe
  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
  C:\Windows\ehome\ehtray.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
  C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  C:\Program Files\Skype\Phone\Skype.exe
  C:\Program Files\Windows Media Player\wmpnscfg.exe
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\OpenOffice.org 3\program\soffice.exe
  C:\Program Files\OpenOffice.org 3\program\soffice.bin
  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  C:\Program Files\Windows Live\Contacts\wlcomm.exe
  C:\Program Files\Skype\Plugin Manager\skypePM.exe
  C:\Program Files\Internet Explorer\ieuser.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\Windows Live\Toolbar\wltuser.exe
  C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
  C:\Windows\system32\conime.exe
  C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
  C:\Users\anne\Desktop\RSIT.exe
  C:\Program Files\trend micro\anne.exe
  
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
  O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
  O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
  O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
  O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
  O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
  O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
  O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  O4 - HKLM\..\Run: [WireLessMouse] C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
  O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files\Mouse Driver\StartAutorun.exe KMConfig.exe
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
  O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
  O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
  O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
  O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe" -m
  O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
  O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O13 - Gopher Prefix:
  O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
  O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
  O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://support.norton.com/sp/en/us/home/current/info
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,avgrsstx.dll
  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
  O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
  O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
  O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
  O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
  O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
  O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
  O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
  O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
  
  0
  
  Réagir
Réponse 11 / 34
ric025
Salut!

Ok!

Comme ça on terminera proprement la désinfection.

A++

0

Réagir
1. beauté numerique Auteur
  
  Ré ric025,
  je viens de remarquer q depuis 2 jours, quand j'allume le pc il y a ce message;
  Processus hôte Windows (rundll32.exe), a cessé de fonctionner ou un programme l'empêche de fonctionner.
  Et je n'arribve pas à le récuperer...
  Merci
  
  0
  
  Réagir
Réponse 12 / 34
ric025
SAlut!

Tu peux répondre à ce message: http://www.commentcamarche.net/forum/affich 11228329 probleme de connexion internet?page=2#50

Pour OtMoveIt, nickel, ça a fonctionné.

Pour les deux fichiers, apparemment clean.

A++

0

Réagir
1. beauté numerique Auteur
  
  salut, ric025.
  merci pr tt le temps q t'as accordé à mon pbm.
  c'est 1 pbm dû au matériel, c au niveau du systéme wifi.
  au forum matériel, personne n'était en mesure de m'aider, j'ai appellé le service client, et ils ont mis les cartes réseau à jour, et modifié le canal.
  je suis en train de tester le pc...
  je te tiens au courant.
  A+
  
  0
  
  Réagir
Réponse 13 / 34
ric025
Re!

Alors voici une procédure, je serai absent aujourd'hui, donc prends ton temps:

* Télécharge OtmoveIT (de Old_Timer) sur ton Bureau

http://oldtimer.geekstogo.com/OTMoveIt3.exe

* Double-clique sur OTMoveIt.exe pour le lancer.

* Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

* Copie la liste qui se trouve en gras dans la citation ci-dessous et colle-la dans le cadre de gauche de OTMoveIt sous Paste List of Files/Folders to move.

-----------------------------

:processes
explorer.exe

:files
c:\users\anne\AppData\Roaming\EoRezo

:commands
[emptytemp]
[start explorer]

-----------------------------

* Clique sur MoveIt! pour lancer la suppression.

* Le résultat apparaitra dans le cadre "Results".

* Clique sur Exit pour fermer.

* Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

* Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

==========================

Il y a deux fichiers qui semblent suspects à analyser sur virus total:

Va sur ce site: https://www.virustotal.com/gui/

Fais parcourir, recherche ce fichier:
```
c:\windows\System32\ezsidmv.dat 
```
Fais ensuite "Envoyer le fichier".

Poste le rapport que tu obtiendras à la fin du scan.

===========================

Puis fais de même avec celui-ci:
```
c:\windows\System32\wininet.dll 
```
A++ ;)
1

Réagir
1. beauté numerique Auteur
  
  Alo, voila le rapport de OtmoveIT:
  
  ========== PROCESSES ==========
  Process explorer.exe killed successfully.
  ========== FILES ==========
  c:\users\anne\AppData\Roaming\EoRezo\SoftwareUpdate\Software moved successfully.
  c:\users\anne\AppData\Roaming\EoRezo\SoftwareUpdate\Download moved successfully.
  c:\users\anne\AppData\Roaming\EoRezo\SoftwareUpdate moved successfully.
  c:\users\anne\AppData\Roaming\EoRezo moved successfully.
  ========== COMMANDS ==========
  File delete failed. C:\Users\anne\AppData\Local\Temp\ehmsas.txt scheduled to be deleted on reboot.
  User's Temp folder emptied.
  User's Temporary Internet Files folder emptied.
  User's Internet Explorer cache folder emptied.
  Local Service Temp folder emptied.
  Local Service Temporary Internet Files folder emptied.
  File delete failed. C:\Windows\temp\avg8info.id scheduled to be deleted on reboot.
  File delete failed. C:\Windows\temp\ZLT07a8c.TMP scheduled to be deleted on reboot.
  File delete failed. C:\Windows\temp\ZLT07a92.TMP scheduled to be deleted on reboot.
  Windows Temp folder emptied.
  FireFox cache emptied.
  Temp folders emptied.
  Explorer started successfully
  
  OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02272009_155232
  
  0
  
  Réagir
2. beauté numerique Auteur
  
  Ric025, voici le 1er rapport de VirusTotal, nom du fichier: c:\windows\System32\ezsidmv.dat
  
  Antivirus Version Dernière mise à jour Résultat
  a-squared 4.0.0.101 2009.02.27 -
  AhnLab-V3 5.0.0.2 2009.02.27 -
  AntiVir 7.9.0.98 2009.02.27 -
  Authentium 5.1.0.4 2009.02.27 -
  Avast 4.8.1335.0 2009.02.26 -
  AVG 8.0.0.237 2009.02.27 -
  BitDefender 7.2 2009.02.27 -
  CAT-QuickHeal 10.00 2009.02.27 -
  ClamAV 0.94.1 2009.02.27 -
  Comodo 986 2009.02.20 -
  DrWeb 4.44.0.09170 2009.02.27 -
  eSafe 7.0.17.0 2009.02.26 -
  eTrust-Vet 31.6.6376 2009.02.27 -
  F-Prot 4.4.4.56 2009.02.26 -
  F-Secure 8.0.14470.0 2009.02.27 -
  Fortinet 3.117.0.0 2009.02.27 -
  GData 19 2009.02.27 -
  Ikarus T3.1.1.45.0 2009.02.27 -
  K7AntiVirus 7.10.648 2009.02.26 -
  Kaspersky 7.0.0.125 2009.02.27 -
  McAfee 5537 2009.02.26 -
  McAfee+Artemis 5537 2009.02.26 -
  Microsoft 1.4306 2009.02.27 -
  NOD32 3894 2009.02.27 -
  Norman 6.00.06 2009.02.27 -
  nProtect 2009.1.8.0 2009.02.27 -
  Panda 10.0.0.10 2009.02.26 -
  PCTools 4.4.2.0 2009.02.27 -
  Prevx1 V2 2009.02.27 -
  Rising 21.18.42.00 2009.02.27 -
  SecureWeb-Gateway 6.0.0 2009.02.27 -
  Sophos 4.39.0 2009.02.27 -
  Sunbelt 3.2.1858.2 2009.02.26 -
  Symantec 10 2009.02.27 -
  TheHacker 6.3.2.5.267 2009.02.27 -
  TrendMicro 8.700.0.1004 2009.02.27 -
  VBA32 3.12.10.1 2009.02.26 -
  ViRobot 2009.2.27.1627 2009.02.27 -
  VirusBuster 4.5.11.0 2009.02.26 -
  Information additionnelle
  File size: 56 bytes
  MD5...: 4fac1d26e021f940a0219f7c1d976ec9
  SHA1..: 842830ecb8465239fc1d38eb24515f55835d4051
  SHA256: 162e01e93ccd442afe0fbd4b8ed4da57276b6f5f20546d44e134d049579d497d
  SHA512: 5fe32f9489e069c6b8a2f5b7af843900cf8b0f2b3408800cf8278583eb565617
  e80e5b5c3525b508b6a437545b1fa99ab8f25bce4e4bd58096104cd3b68f027a
  ssdeep: 3:16UOMy2JgrPJQc8pVFgTn:1QBrPJJfn
  
  PEiD..: -
  TrID..: File type identification
  Unknown!
  PEInfo: -
  
  0
  
  Réagir
3. beauté numerique Auteur
  
  Ric025, je t'envoie le 2ème rapport VirusTotal du fichier c:\windows\System32\wininet.dll:
  
  Antivirus Version Dernière mise à jour Résultat
  a-squared 4.0.0.101 2009.02.27 -
  AhnLab-V3 5.0.0.2 2009.02.27 -
  AntiVir 7.9.0.98 2009.02.27 -
  Authentium 5.1.0.4 2009.02.27 -
  Avast 4.8.1335.0 2009.02.26 -
  AVG 8.0.0.237 2009.02.27 -
  BitDefender 7.2 2009.02.27 -
  CAT-QuickHeal 10.00 2009.02.27 -
  ClamAV 0.94.1 2009.02.27 -
  Comodo 986 2009.02.20 -
  DrWeb 4.44.0.09170 2009.02.27 -
  eSafe 7.0.17.0 2009.02.26 -
  eTrust-Vet 31.6.6376 2009.02.27 -
  F-Prot 4.4.4.56 2009.02.26 -
  F-Secure 8.0.14470.0 2009.02.27 -
  Fortinet 3.117.0.0 2009.02.27 -
  GData 19 2009.02.27 -
  Ikarus T3.1.1.45.0 2009.02.27 -
  K7AntiVirus 7.10.648 2009.02.26 -
  Kaspersky 7.0.0.125 2009.02.27 -
  McAfee 5537 2009.02.26 -
  McAfee+Artemis 5537 2009.02.26 -
  Microsoft 1.4306 2009.02.27 -
  NOD32 3894 2009.02.27 -
  Norman 6.00.06 2009.02.27 -
  nProtect 2009.1.8.0 2009.02.27 -
  Panda 10.0.0.10 2009.02.26 -
  PCTools 4.4.2.0 2009.02.27 -
  Prevx1 V2 2009.02.27 -
  Rising 21.18.42.00 2009.02.27 -
  SecureWeb-Gateway 6.7.6 2009.02.27 -
  Sophos 4.39.0 2009.02.27 -
  Sunbelt 3.2.1858.2 2009.02.26 -
  Symantec 10 2009.02.27 -
  TheHacker 6.3.2.5.267 2009.02.27 -
  TrendMicro 8.700.0.1004 2009.02.27 -
  VBA32 3.12.10.1 2009.02.26 -
  ViRobot 2009.2.27.1627 2009.02.27 -
  VirusBuster 4.5.11.0 2009.02.27 -
  Information additionnelle
  File size: 827392 bytes
  MD5...: fb79a2aa5e92653b9a394fe26d799bf8
  SHA1..: 43c9ec603bafd029fadd624b37f3a69fdabd8b06
  SHA256: 32078f9187c93831f73060894a79cca85cbc35f85434952ad45ab9df203ceb26
  SHA512: fc3259ec7c9c59f35d74d39f4aeb9daf4205501aa8aae6d0e32039cb26566c24
  3b8b0ee089a9bde249d39744b6f289e44e3d16cdc288ee6a3b979239c64c6121
  ssdeep: 12288:3k+p7d80EidHyru31JreaZ7xYgokqwONoTPIot32dkMMIMMutuEfXlf:Um
  hPvJBFj7xzOyTPjmdkMMIMMurl
  
  PEiD..: -
  TrID..: File type identification
  Win64 Executable Generic (59.6%)
  Win32 Executable MS Visual C++ (generic) (26.2%)
  Win32 Executable Generic (5.9%)
  Win32 Dynamic Link Library (generic) (5.2%)
  Generic Win/DOS Executable (1.3%)
  PEInfo: PE Structure information
  
  ( base data )
  entrypointaddress.: 0x169e
  timedatestamp.....: 0x496ed17b (Thu Jan 15 06:02:35 2009)
  machinetype.......: 0x14c (I386)
  
  ( 4 sections )
  name viradd virsiz rawdsiz ntrpy md5
  .text 0x1000 0x9b230 0x9b400 6.60 d663c0427f3837223fbe2d16bdec3b26
  .data 0x9d000 0x7798 0x4200 1.42 75410b0084e119c26f4e77bb0e9fc9b9
  .rsrc 0xa5000 0x24d58 0x24e00 4.73 fb53221d321a79956b7c441500d550d9
  .reloc 0xca000 0x56b0 0x5800 6.73 4903969d40cde619b28255e11242dd91
  
  ( 8 imports )
  > msvcrt.dll: _isatty, _write, _lseeki64, _fileno, __pioinfo, __badioinfo, wctomb, _itoa, _snprintf, _iob, isleadbyte, _onexit, _lock, __dllonexit, _unlock, _adjust_fdiv, _amsg_exit, _initterm, _XcptFilter, islower, __isascii, strtol, memmove, strrchr, atoi, realloc, free, malloc, wcstok, _vsnprintf, memcpy, memset, _vsnwprintf, wcsncmp, bsearch, _wcsnicmp, _wtoi, _wcsicmp, isupper, strncmp, wcsstr, _purecall, _mbstok, iscntrl, ispunct, strtoul, time, iswdigit, isalpha, atol, isalnum, _errno, isspace, strpbrk, isdigit, isxdigit, memchr
  > ntdll.dll: RtlConvertSidToUnicodeString, RtlUnwind, RtlMoveMemory
  > SHLWAPI.dll: SHRegGetValueW, PathAddBackslashW, -, SHRegGetValueA, StrRChrW, PathRemoveBackslashA, PathRemoveFileSpecA, -, PathRemoveBlanksA, PathAddBackslashA, -, PathAppendA, -, PathUnExpandEnvStringsA, PathRenameExtensionA, SHDeleteKeyA, SHDeleteValueW, StrCmpNIW, StrCmpNIA, StrStrA, -, StrChrW, StrChrA, -, -, UrlCombineW, UrlCanonicalizeW, -, PathCreateFromUrlW, UrlUnescapeA, UrlCombineA, UrlCanonicalizeA, StrToIntW, StrCmpW, StrCmpNA, StrRChrA, StrToIntA, StrStrIW, SHGetValueA, SHSetValueA, SHGetValueW, SHSetValueW, -, -, PathCombineW, PathFindFileNameW, StrStrIA
  > ADVAPI32.dll: RegDeleteKeyA, RegCreateKeyExW, RegDeleteValueW, RegSetValueExW, RegQueryValueExW, CryptAcquireContextA, CryptGenRandom, CryptReleaseContext, RegOpenKeyA, RegEnumKeyA, TraceEvent, DuplicateTokenEx, ConvertStringSidToSidA, GetLengthSid, SetTokenInformation, CreateProcessAsUserA, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSidSubAuthorityCount, GetSidSubAuthority, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, RegDeleteValueA, OpenThreadToken, OpenProcessToken, GetTokenInformation, RegOpenKeyExW, UnregisterTraceGuids, RegisterTraceGuidsA, RegQueryInfoKeyW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegQueryValueExA, RegQueryInfoKeyA, RegEnumKeyExA, RegCloseKey, GetUserNameA, OpenSCManagerA, OpenServiceA, CloseServiceHandle, QueryServiceStatus
  > KERNEL32.dll: DosDateTimeToFileTime, GetEnvironmentVariableA, GetShortPathNameA, GetShortPathNameW, FindFirstFileA, RemoveDirectoryA, FindNextFileA, FindClose, GetDiskFreeSpaceExA, CopyFileA, SetFileTime, CreateDirectoryA, GetWindowsDirectoryA, GetSystemDirectoryA, GetPrivateProfileStringA, GetFileAttributesA, SetFileAttributesA, GetFileAttributesExA, FileTimeToDosDateTime, GetFileSizeEx, lstrcmpW, RaiseException, MoveFileExA, MoveFileA, LocalFileTimeToFileTime, CreateSemaphoreA, ReleaseSemaphore, GetCurrentProcessId, GetFileTime, lstrcmpA, GetModuleHandleExA, ResumeThread, FreeLibraryAndExitThread, ExpandEnvironmentStringsA, GetSystemTimeAsFileTime, DeleteFileW, GetACP, InterlockedExchangeAdd, CreateThread, Sleep, OpenMutexA, GetModuleHandleA, FormatMessageA, SetErrorMode, FlushViewOfFile, SystemTimeToFileTime, GetTickCount, TlsFree, TlsGetValue, GetCurrentThreadId, TlsSetValue, TlsAlloc, GetDateFormatA, GetTimeFormatA, GlobalAlloc, InterlockedCompareExchange, GetCurrentThread, GetCurrentProcess, IsDBCSLeadByte, IsValidCodePage, GlobalFree, lstrlenW, DeleteFileA, FormatMessageW, GetSystemTime, WritePrivateProfileStringA, GetVersionExA, GetModuleFileNameA, WriteFile, SetFilePointer, CreateFileW, CreateFileA, GetFileSize, ReadFile, FileTimeToSystemTime, LocalReAlloc, InitializeCriticalSection, InterlockedDecrement, lstrlenA, lstrcmpiA, InterlockedIncrement, DeleteCriticalSection, ResetEvent, LocalFree, ReleaseMutex, CompareStringA, CreateMutexA, CreateEventA, MultiByteToWideChar, WideCharToMultiByte, WaitForSingleObject, OutputDebugStringA, UnmapViewOfFile, SetEndOfFile, MapViewOfFileEx, CreateFileMappingA, OpenFileMappingA, LoadLibraryW, HeapFree, HeapAlloc, GetProcessHeap, GetTimeFormatW, GetDateFormatW, GetUserDefaultLCID, GetModuleFileNameW, GetComputerNameA, LoadResource, FindResourceExW, LocalAlloc, LoadLibraryExW, MapViewOfFile, CreateFileMappingW, GetLocaleInfoW, GetVersionExW, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, FindResourceW, SearchPathW, CreateActCtxW, ReleaseActCtx, ActivateActCtx, DeactivateActCtx, SetFileAttributesW, InitializeCriticalSectionAndSpinCount, WritePrivateProfileStringW, GetFileAttributesW, GetModuleHandleW, GlobalUnlock, GlobalLock, QueryPerformanceCounter, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDBCSLeadByteEx, GetProcAddress, LoadLibraryA, FreeLibrary, SetEvent, InterlockedExchange, CloseHandle, GetLastError, SetLastError, EnterCriticalSection, LeaveCriticalSection, CompareStringW
  > USER32.dll: CheckDlgButton, SendMessageW, SendMessageA, IsDlgButtonChecked, DefWindowProcA, SetWindowLongA, GetWindowLongA, RegisterClassW, CreateWindowExW, SetTimer, GetWindowTextW, MessageBoxW, CharNextA, GetWindowInfo, CharToOemA, CharUpperA, CharLowerW, IsCharAlphaNumericA, GetWindowThreadProcessId, EnumChildWindows, IsWindowVisible, GetAncestor, EnumWindows, CharNextExA, PostMessageA, IsWindow, SetWindowPos, SetDlgItemTextW, DestroyIcon, SetForegroundWindow, GetWindow, GetWindowRect, EqualRect, IntersectRect, EndDialog, SetFocus, GetDlgItem, SetWindowTextW, EnableWindow, KillTimer, FindWindowW, RegisterWindowMessageW, PostMessageW, DestroyWindow, LoadStringW, DialogBoxParamW, GetDesktopWindow, SendDlgItemMessageA, LoadIconA, LoadImageA, LoadStringA, CharLowerA
  > Normaliz.dll: IdnToUnicode, IdnToAscii
  > iertutil.dll: -, -, -, -
  
  ( 229 exports )
  CommitUrlCacheEntryA, CommitUrlCacheEntryW, CreateMD5SSOHash, CreateUrlCacheContainerA, CreateUrlCacheContainerW, CreateUrlCacheEntryA, CreateUrlCacheEntryW, CreateUrlCacheGroup, DeleteIE3Cache, DeleteUrlCacheContainerA, DeleteUrlCacheContainerW, DeleteUrlCacheEntry, DeleteUrlCacheEntryA, DeleteUrlCacheEntryW, DeleteUrlCacheGroup, DetectAutoProxyUrl, DispatchAPICall, DllInstall, FindCloseUrlCache, FindFirstUrlCacheContainerA, FindFirstUrlCacheContainerW, FindFirstUrlCacheEntryA, FindFirstUrlCacheEntryExA, FindFirstUrlCacheEntryExW, FindFirstUrlCacheEntryW, FindFirstUrlCacheGroup, FindNextUrlCacheContainerA, FindNextUrlCacheContainerW, FindNextUrlCacheEntryA, FindNextUrlCacheEntryExA, FindNextUrlCacheEntryExW, FindNextUrlCacheEntryW, FindNextUrlCacheGroup, ForceNexusLookup, ForceNexusLookupExW, FreeUrlCacheSpaceA, FreeUrlCacheSpaceW, FtpCommandA, FtpCommandW, FtpCreateDirectoryA, FtpCreateDirectoryW, FtpDeleteFileA, FtpDeleteFileW, FtpFindFirstFileA, FtpFindFirstFileW, FtpGetCurrentDirectoryA, FtpGetCurrentDirectoryW, FtpGetFileA, FtpGetFileEx, FtpGetFileSize, FtpGetFileW, FtpOpenFileA, FtpOpenFileW, FtpPutFileA, FtpPutFileEx, FtpPutFileW, FtpRemoveDirectoryA, FtpRemoveDirectoryW, FtpRenameFileA, FtpRenameFileW, FtpSetCurrentDirectoryA, FtpSetCurrentDirectoryW, GetUrlCacheConfigInfoA, GetUrlCacheConfigInfoW, GetUrlCacheEntryInfoA, GetUrlCacheEntryInfoExA, GetUrlCacheEntryInfoExW, GetUrlCacheEntryInfoW, GetUrlCacheGroupAttributeA, GetUrlCacheGroupAttributeW, GetUrlCacheHeaderData, GopherCreateLocatorA, GopherCreateLocatorW, GopherFindFirstFileA, GopherFindFirstFileW, GopherGetAttributeA, GopherGetAttributeW, GopherGetLocatorTypeA, GopherGetLocatorTypeW, GopherOpenFileA, GopherOpenFileW, HttpAddRequestHeadersA, HttpAddRequestHeadersW, HttpCheckDavCompliance, HttpEndRequestA, HttpEndRequestW, HttpOpenRequestA, HttpOpenRequestW, HttpQueryInfoA, HttpQueryInfoW, HttpSendRequestA, HttpSendRequestExA, HttpSendRequestExW, HttpSendRequestW, IncrementUrlCacheHeaderData, InternetAlgIdToStringA, InternetAlgIdToStringW, InternetAttemptConnect, InternetAutodial, InternetAutodialCallback, InternetAutodialHangup, InternetCanonicalizeUrlA, InternetCanonicalizeUrlW, InternetCheckConnectionA, InternetCheckConnectionW, InternetClearAllPerSiteCookieDecisions, InternetCloseHandle, InternetCombineUrlA, InternetCombineUrlW, InternetConfirmZoneCrossing, InternetConfirmZoneCrossingA, InternetConfirmZoneCrossingW, InternetConnectA, InternetConnectW, InternetCrackUrlA, InternetCrackUrlW, InternetCreateUrlA, InternetCreateUrlW, InternetDial, InternetDialA, InternetDialW, InternetEnumPerSiteCookieDecisionA, InternetEnumPerSiteCookieDecisionW, InternetErrorDlg, InternetFindNextFileA, InternetFindNextFileW, InternetFortezzaCommand, InternetGetCertByURL, InternetGetCertByURLA, InternetGetConnectedState, InternetGetConnectedStateEx, InternetGetConnectedStateExA, InternetGetConnectedStateExW, InternetGetCookieA, InternetGetCookieExA, InternetGetCookieExW, InternetGetCookieW, InternetGetLastResponseInfoA, InternetGetLastResponseInfoW, InternetGetPerSiteCookieDecisionA, InternetGetPerSiteCookieDecisionW, InternetGetSecurityInfoByURL, InternetGetSecurityInfoByURLA, InternetGetSecurityInfoByURLW, InternetGoOnline, InternetGoOnlineA, InternetGoOnlineW, InternetHangUp, InternetInitializeAutoProxyDll, InternetLockRequestFile, InternetOpenA, InternetOpenUrlA, InternetOpenUrlW, InternetOpenW, InternetQueryDataAvailable, InternetQueryFortezzaStatus, InternetQueryOptionA, InternetQueryOptionW, InternetReadFile, InternetReadFileExA, InternetReadFileExW, InternetSecurityProtocolToStringA, InternetSecurityProtocolToStringW, InternetSetCookieA, InternetSetCookieExA, InternetSetCookieExW, InternetSetCookieW, InternetSetDialState, InternetSetDialStateA, InternetSetDialStateW, InternetSetFilePointer, InternetSetOptionA, InternetSetOptionExA, InternetSetOptionExW, InternetSetOptionW, InternetSetPerSiteCookieDecisionA, InternetSetPerSiteCookieDecisionW, InternetSetStatusCallback, InternetSetStatusCallbackA, InternetSetStatusCallbackW, InternetShowSecurityInfoByURL, InternetShowSecurityInfoByURLA, InternetShowSecurityInfoByURLW, InternetTimeFromSystemTime, InternetTimeFromSystemTimeA, InternetTimeFromSystemTimeW, InternetTimeToSystemTime, InternetTimeToSystemTimeA, InternetTimeToSystemTimeW, InternetUnlockRequestFile, InternetWriteFile, InternetWriteFileExA, InternetWriteFileExW, IsHostInProxyBypassList, IsUrlCacheEntryExpiredA, IsUrlCacheEntryExpiredW, LoadUrlCacheContent, ParseX509EncodedCertificateForListBoxEntry, PrivacyGetZonePreferenceW, PrivacySetZonePreferenceW, ReadUrlCacheEntryStream, RegisterUrlCacheNotification, ResumeSuspendedDownload, RetrieveUrlCacheEntryFileA, RetrieveUrlCacheEntryFileW, RetrieveUrlCacheEntryStreamA, RetrieveUrlCacheEntryStreamW, RunOnceUrlCache, SetUrlCacheConfigInfoA, SetUrlCacheConfigInfoW, SetUrlCacheEntryGroup, SetUrlCacheEntryGroupA, SetUrlCacheEntryGroupW, SetUrlCacheEntryInfoA, SetUrlCacheEntryInfoW, SetUrlCacheGroupAttributeA, SetUrlCacheGroupAttributeW, SetUrlCacheHeaderData, ShowCertificate, ShowClientAuthCerts, ShowSecurityInfo, ShowX509EncodedCertificate, UnlockUrlCacheEntryFile, UnlockUrlCacheEntryFileA, UnlockUrlCacheEntryFileW, UnlockUrlCacheEntryStream, UpdateUrlCacheContentPath, UrlZonesDetach, _GetFileExtensionFromUrl
  
  0
  
  Réagir
Réponse 14 / 34
ric025
Salut!

Et sur tous les drivers, tu ne peux pas avoir les pilotes?

A mon avis, ton soucis est matériel.

Je te propose de terminer la désinfection (j'attends une confirmation sur un de tes rapports) puis tu pourras poster une question sur le forum "Matériel", sûrement avec un rapport Everest.

A++

0

Réagir
1. beauté numerique Auteur
  
  Ric025,
  voilà le rapport que tu m'as demandé de faire hier, rapport ComboFix:
  
  ComboFix 09-02-26.02 - anne 2009-02-27 2:45:43.1 - NTFSx86
  Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.3070.1940 [GMT 1:00]
  Lancé depuis: c:\users\anne\Desktop\ComboFix.exe
  FW: ZoneAlarm Firewall *disabled*
  * Un nouveau point de restauration a été créé
  .
  
  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  c:\users\anne\AppData\Roaming\inst.exe
  c:\windows\system32\KBL.LOG
  
  .
  ((((((((((((((((((((((((((((( Fichiers créés du 2009-01-27 au 2009-02-27 ))))))))))))))))))))))))))))))))))))
  .
  
  2009-02-26 21:03 . 2009-02-27 00:05 <REP> d-------- c:\program files\Ad-remover
  2009-02-26 10:19 . 2009-02-26 10:19 <REP> d-------- c:\windows\System32\AGEIA
  2009-02-26 10:19 . 2009-02-26 10:19 <REP> d-------- c:\program files\AGEIA Technologies
  2009-02-26 10:14 . 2009-02-26 10:14 <REP> d-------- C:\NVIDIA
  2009-02-26 00:04 . 2009-02-26 00:04 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
  2009-02-26 00:04 . 2009-02-11 10:19 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
  2009-02-26 00:04 . 2009-02-11 10:19 15,504 --a------ c:\windows\System32\drivers\mbam.sys
  2009-02-25 22:41 . 2009-02-25 23:49 <REP> d-------- c:\program files\Navilog1
  2009-02-25 16:39 . 2009-02-25 16:57 <REP> d-------- C:\ToolBar SD
  2009-02-25 16:35 . 2009-02-25 16:35 56 --ah----- c:\windows\System32\ezsidmv.dat
  2009-02-25 15:47 . 2009-02-25 15:47 <REP> d-------- C:\rsit
  2009-02-25 15:47 . 2009-02-26 01:57 <REP> d-------- c:\program files\trend micro
  2009-02-25 14:53 . 2009-02-25 14:58 <REP> d--h----- c:\program files\Temp
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\users\All Users\ma-config.com
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\programdata\ma-config.com
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\program files\ma-config.com
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Public\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Invité\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Invité\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Default\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\anne\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\anne\AppData\Roaming\Intel
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\All Users\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\programdata\Roaming
  2009-02-25 03:55 . 2009-02-25 03:55 <REP> d-------- c:\program files\Common Files\Intel
  2009-02-25 03:55 . 2009-02-25 03:55 <REP> d-------- c:\program files\Cisco
  2009-02-25 03:54 . 2009-02-25 03:54 <REP> d-------- c:\users\All Users\Intel
  2009-02-25 03:54 . 2009-02-25 03:54 <REP> d-------- c:\programdata\Intel
  2009-02-25 01:32 . 2008-12-16 04:29 8,147,456 --a------ c:\windows\System32\wmploc.DLL
  2009-02-25 01:32 . 2008-12-16 06:31 7,680 --a------ c:\windows\System32\spwmp.dll
  2009-02-25 01:32 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\msdxm.ocx
  2009-02-25 01:32 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\dxmasf.dll
  2009-02-25 00:03 . 2009-02-25 00:03 <REP> d-------- c:\program files\CCleaner
  2009-02-22 22:05 . 2004-10-04 02:10 98,304 --a------ c:\windows\System32\tsccvid.dll
  2009-02-22 21:55 . 2009-02-22 21:55 <REP> d-------- c:\program files\Micro Application
  2009-02-22 16:48 . 2009-02-22 17:10 0 -rahs---- c:\windows\System32\drivers\103C_HP_cNB_Pavilion dv9700 Notebook PC_Y5335KV_0U_QCNF8221HVG_E480576-051_4A_I30CB_SQuanta_V79.2E_F.59_T081125_WV3-1_L40C_M3070_J250_7Intel_86FD_92.00_#080906_N10EC8168;80864222_(FM630EA#ABF)_XMOBILE_CN10_Z.MRK
  2009-02-21 19:47 . 2009-02-21 19:47 <REP> d-------- c:\program files\VS Revo Group
  2009-02-21 02:06 . 2009-02-21 02:06 <REP> d-------- c:\program files\IZArc
  2009-02-20 21:26 . 2009-02-20 21:26 <REP> d-------- c:\program files\AGI
  2009-02-17 20:30 . 2009-02-17 20:30 <REP> d-------- c:\program files\Smart PC Solutions
  2009-02-14 14:22 . 2009-02-17 13:29 <REP> d-------- c:\users\anne\{350c1f09-e06f-400e-b71c-20cc48eb7c5e}
  2009-02-14 14:22 . 2009-02-14 14:22 3,505 --a------ c:\windows\bcmCE65.tmp
  2009-02-13 22:00 . 2009-02-13 22:00 <REP> d-------- c:\program files\Broadcom
  2009-02-13 22:00 . 2009-02-14 14:16 135,168 --a------ c:\windows\bcmD515.tmp
  2009-02-13 22:00 . 2009-02-14 00:34 135,168 --a------ c:\windows\bcmD4E6.tmp
  2009-02-13 01:05 . 2009-02-17 13:28 <REP> d-------- c:\program files\Power IE
  2009-02-12 13:09 . 2009-02-12 13:09 <REP> d-------- c:\program files\Feneris
  2009-02-11 16:23 . 2009-02-11 16:23 <REP> d-------- c:\users\anne\AppData\Roaming\Mozilla(146)
  2009-02-06 19:39 . 2009-02-06 19:39 308,600 --a------ c:\windows\WLXPGSS.SCR
  2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\System32\sirenacm.dll
  2009-02-06 18:30 . 2009-02-06 18:30 <REP> d-------- c:\program files\Microsoft Sync Framework
  2009-02-06 18:30 . 2008-12-08 17:01 55,264 --a------ c:\windows\System32\drivers\fssfltr.sys
  2009-02-06 18:28 . 2009-02-06 18:28 <REP> d-------- c:\program files\Microsoft SQL Server Compact Edition
  2009-02-06 16:46 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll
  2009-02-06 16:46 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe
  2009-02-06 16:46 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe
  2009-02-06 16:46 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll
  2009-02-06 16:46 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll
  2009-02-06 16:46 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll
  2009-02-06 16:46 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl
  2009-02-06 16:46 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll
  2009-02-06 16:39 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll
  2009-02-06 16:39 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll
  2009-02-06 16:39 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll
  2009-02-06 16:39 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll
  2009-02-06 16:39 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll
  2009-02-02 22:57 . 2009-02-02 22:57 <REP> d-------- c:\program files\CDBurnerXP
  2009-01-30 20:02 . 2009-01-30 20:02 59 --a------ c:\windows\wininit.ini
  2009-01-30 19:44 . 2009-01-30 19:48 <REP> d-------- c:\users\anne\AppData\Roaming\muvee Technologies
  2009-01-30 19:42 . 2009-01-30 19:42 <REP> d-------- c:\users\All Users\TEMP
  2009-01-30 19:42 . 2009-01-30 19:42 <REP> d-------- c:\programdata\TEMP
  2009-01-30 19:09 . 2009-01-30 19:09 0 --ah----- c:\windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
  2009-01-30 18:58 . 2009-01-30 19:01 <REP> d-------- c:\windows\System32\Samsung_USB_Drivers
  2009-01-30 18:58 . 2009-01-30 18:58 <REP> d-------- c:\program files\Samsung
  2009-01-30 18:58 . 2005-08-28 20:51 766 --a------ c:\windows\System32\Uninstall.ico
  2009-01-29 19:11 . 2009-01-29 19:11 2,117,632 --a------ c:\windows\System32\python25.dll
  2009-01-29 19:11 . 2008-09-16 17:26 1,332,197 --a------ c:\windows\System32\pythondll.zip
  2009-01-29 19:11 . 2009-01-29 19:11 339,968 --a------ c:\windows\System32\pythoncom25.dll
  2009-01-29 19:11 . 2009-01-29 19:11 114,688 --a------ c:\windows\System32\pywintypes25.dll
  2009-01-27 23:01 . 2009-02-27 01:16 <REP> d-------- c:\users\anne\AppData\Roaming\skypePM
  2009-01-27 22:57 . 2009-02-27 02:48 <REP> d-------- c:\users\anne\AppData\Roaming\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\users\All Users\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\programdata\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\program files\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\program files\Common Files\Skype
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2009-02-27 01:45 2,879,488 ----a-w c:\users\Invité\NTUSER.DAT
  2009-02-27 01:45 2,879,488 ----a-w c:\users\Invité\NTUSER.DAT
  2009-02-27 01:35 --------- d-----w c:\programdata\Yahoo! Companion
  2009-02-27 01:33 31,776 ----a-w c:\users\All Users\nvModes.dat
  2009-02-27 01:33 31,776 ----a-w c:\programdata\nvModes.dat
  2009-02-27 01:32 352,616 ---ha-w c:\windows\system32\drivers\vsconfig.xml
  2009-02-27 01:30 --------- d-s---w c:\users\Invité\AppData\Roaming\Microsoft
  2009-02-27 01:17 --------- d-----w c:\users\anne\AppData\Roaming\EoRezo
  2009-02-26 23:49 --------- d-----w c:\program files\Yahoo!
  2009-02-26 11:01 --------- d-----w c:\program files\Microsoft Silverlight
  2009-02-26 09:22 --------- d-----w c:\programdata\NVIDIA
  2009-02-26 09:18 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
  2009-02-25 13:54 --------- d--h--w c:\program files\InstallShield Installation Information
  2009-02-25 13:54 --------- d-----w c:\program files\Realtek
  2009-02-25 13:53 319,456 ----a-w c:\windows\DIFxAPI.dll
  2009-02-25 02:54 --------- d-----w c:\program files\Intel
  2009-02-25 00:53 --------- d-----w c:\program files\Mouse Driver
  2009-02-22 16:11 --------- d-----w c:\users\anne\AppData\Roaming\Hewlett-Packard
  2009-02-22 16:10 --------- d-----w c:\program files\Hewlett-Packard
  2009-02-20 16:29 1,678,848 ----a-w c:\windows\Internet Logs\xDBA64C.tmp
  2009-02-20 14:55 --------- d-----w c:\program files\Google
  2009-02-19 11:10 200,192 ----a-w c:\windows\Internet Logs\xDBA765.tmp
  2009-02-18 19:28 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(235).xml
  2009-02-18 17:14 --------- d-----w c:\program files\Windows Live
  2009-02-17 19:30 --------- d-----w c:\users\anne\AppData\Roaming\Smart PC Solutions
  2009-02-17 12:31 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(231).xml
  2009-02-17 12:29 --------- d-----w c:\users\anne\AppData\Roaming\vlc
  2009-02-17 12:29 --------- d-----w c:\users\anne\AppData\Roaming\dvdcss
  2009-02-15 20:02 --------- d-----w c:\users\anne\AppData\Roaming\Mozilla(193)
  2009-02-15 18:53 --------- d-----w c:\users\anne\AppData\Roaming\Apple Computer
  2009-02-15 12:59 --------- d-----w c:\programdata\Microsoft Help
  2009-02-14 14:03 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1193).xml
  2009-02-14 13:22 37,888 ----a-w c:\windows\Internet Logs\xDB9A6A.tmp
  2009-02-14 13:01 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(248).xml
  2009-02-14 03:10 1,625,088 ----a-w c:\windows\Internet Logs\xDBA506.tmp
  2009-02-14 03:10 1,604,096 ----a-w c:\windows\Internet Logs\xDBA43A.tmp
  2009-02-14 01:44 1,624,064 ----a-w c:\windows\Internet Logs\xDBA987.tmp
  2009-02-11 10:37 --------- d-----w c:\program files\Windows Mail
  2009-02-08 04:36 1,585,152 ----a-w c:\windows\Internet Logs\xDBA591.tmp
  2009-02-06 13:02 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(255).xml
  2009-02-06 00:14 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1716).xml
  2009-02-04 04:45 453,152 ----a-w c:\windows\System32\NVUNINST.EXE
  2009-02-03 19:11 --------- d-----w c:\users\anne\AppData\Roaming\LimeWire
  2009-02-02 14:20 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1697).xml
  2009-01-25 01:51 1,482,240 ----a-w c:\windows\Internet Logs\xDB9F5A.tmp
  2009-01-24 18:19 --------- d-----w c:\program files\DivX
  2009-01-24 15:31 --------- d-----w c:\program files\Free Video Converter
  2009-01-23 02:08 --------- d-----w c:\users\anne\AppData\Roaming\Megaupload
  2009-01-23 02:03 --------- d-----w c:\programdata\Megaupload
  2009-01-23 02:03 --------- d-----w c:\programdata\EmailNotifier
  2009-01-23 02:03 --------- d-----w c:\program files\Megaupload
  2009-01-22 13:28 290,816 ----a-w c:\windows\System32\decdll.dll
  2009-01-21 14:15 1,458,176 ----a-w c:\windows\Internet Logs\xDB90F8.tmp
  2009-01-21 00:27 1,454,080 ----a-w c:\windows\Internet Logs\xDB96A3.tmp
  2009-01-19 20:55 --------- d-----w c:\programdata\WildTangent
  2009-01-19 13:53 --------- d-----w c:\programdata\InternetFax
  2009-01-17 14:55 4,600,710 ----a-w c:\windows\Internet Logs\tvDebug.zip
  2009-01-17 14:45 --------- d-----w c:\programdata\tpfmon
  2009-01-17 14:45 --------- d-----w c:\program files\Alliance MCA
  2009-01-15 17:59 1,413,632 ----a-w c:\windows\Internet Logs\xDB86FB.tmp
  2009-01-15 17:59 1,167,872 ----a-w c:\windows\Internet Logs\xDB8545.tmp
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet(620).dll
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet(439).dll
  2009-01-15 06:11 1,166,336 ----a-w c:\windows\System32\urlmon(616).dll
  2009-01-15 06:11 1,166,336 ----a-w c:\windows\System32\urlmon(435).dll
  2009-01-15 06:07 270,336 ----a-w c:\windows\System32\iertutil(580).dll
  2009-01-15 06:07 270,336 ----a-w c:\windows\System32\iertutil(404).dll
  2009-01-14 11:36 410,984 ----a-w c:\windows\System32\deploytk.dll
  2009-01-14 11:36 --------- d-----w c:\program files\Java
  2009-01-14 01:31 --------- d-----w c:\program files\Aire&Volume 1.0
  2009-01-13 23:43 --------- d-----w c:\program files\MLSofts
  2009-01-11 13:36 --------- d-----w c:\program files\BurnAware Free Edition
  2009-01-10 21:14 --------- d-----w c:\users\anne\AppData\Roaming\SUPERAntiSpyware.com
  2009-01-10 21:14 --------- d-----w c:\program files\SUPERAntiSpyware
  2009-01-10 14:04 --------- d-----w c:\users\anne\AppData\Roaming\Uniblue
  2009-01-10 14:04 --------- d-----w c:\programdata\Uniblue
  2009-01-10 14:03 --------- d-----w c:\program files\Uniblue
  2009-01-10 00:23 --------- d-----w c:\program files\eMule
  2009-01-07 13:43 1,849,344 ----a-w c:\windows\Internet Logs\xDB909B.tmp
  2009-01-07 13:42 1,849,344 ----a-w c:\windows\Internet Logs\xDB90EA.tmp
  2009-01-06 08:35 --------- d-----w c:\users\anne\AppData\Roaming\TingleSoft
  2009-01-06 07:45 --------- d-----w c:\program files\NCH Software
  2009-01-06 07:21 396,800 ----a-w c:\windows\Internet Logs\xDB901E.tmp
  2009-01-06 07:21 1,843,200 ----a-w c:\windows\Internet Logs\xDB90BB.tmp
  2009-01-05 23:58 152,904 ----a-w c:\windows\System32\vghd.scr
  2009-01-04 19:54 --------- d-----w c:\users\anne\AppData\Roaming\vghd
  2009-01-02 09:55 976,896 ----a-w c:\windows\Internet Logs\xDB81EB.tmp
  2009-01-01 20:16 --------- d-----w c:\users\anne\AppData\Roaming\GTek
  2009-01-01 16:15 --------- d-----w c:\program files\Bonjour
  2008-12-29 16:29 --------- d-----w c:\programdata\NCH Swift Sound
  2008-12-29 16:28 --------- d-----w c:\users\anne\AppData\Roaming\NCH Swift Sound
  2008-12-27 15:38 1,812,992 ----a-w c:\windows\Internet Logs\xDB8C95.tmp
  2008-12-27 01:19 --------- d-----w c:\users\anne\AppData\Roaming\NCH Software
  2008-12-27 01:15 --------- d-----w c:\programdata\NCH Software
  2008-12-26 21:51 1,806,336 ----a-w c:\windows\Internet Logs\xDB8600.tmp
  2008-12-23 01:19 223,744 ----a-w c:\windows\Internet Logs\xDB95D8.tmp
  2008-12-23 01:19 1,801,216 ----a-w c:\windows\Internet Logs\xDB96A4.tmp
  2008-12-20 16:59 237,568 ----a-w c:\windows\Internet Logs\xDBD0A6.tmp
  2008-12-18 21:05 2,070,528 ----a-w c:\windows\Internet Logs\xDBC9D3.tmp
  2008-09-16 11:49 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  2008-09-16 11:49 32,768 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  2008-09-16 11:49 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  .
  
  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  REGEDIT4
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968]
  "HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2007-10-01 1783136]
  "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
  "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
  "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
  "Uniblue SpyEraser"="c:\program files\Uniblue\SpyEraser\SpyEraser.exe" [2008-11-24 1431816]
  "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-12-22 1830128]
  "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-18 21633320]
  "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
  "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
  "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]
  "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-19 468264]
  "OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
  "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
  "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-16 75008]
  "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
  "WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
  "WireLessMouse"="c:\program files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe" [2007-03-06 212992]
  "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-09-09 185896]
  "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-03-03 959976]
  "KMCONFIG"="c:\program files\Mouse Driver\StartAutorun.exe" [2007-03-06 212992]
  "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
  "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
  "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
  "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
  "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
  "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-14 136600]
  "fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
  "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-30 13605408]
  "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-30 92704]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
  "SoftwareHelper"="c:\users\anne\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe" [2008-12-09 368224]
  
  c:\users\anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-09-12 384000]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  "EnableLUA"= 0 (0x0)
  "FilterAdministratorToken"= 1 (0x1)
  "EnableUIADesktopToggle"= 0 (0x0)
  
  [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
  2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
  "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GOEC62~1.DLL
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  "msacm.l3codecp"= l3codecp.acm
  "vidc.xvid"= xvid.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "UacDisableNotify"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
  "DisableMonitoring"=dword:00000001
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
  "{CF56EE87-3255-4F75-9569-E4BD5033A6E6}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
  "{27DA28C7-00AD-4753-9858-0BDDED7D8752}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
  "{D587D31A-8B46-4EFA-B935-FF83EBF02909}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
  "{39D1E530-FF40-4E75-865F-3FCE8707DDDB}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
  "{5F15B3E8-9831-42CC-8BA6-1F91E2BD2DBE}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
  "{D6583C84-5578-40CF-B6E4-C70960B1266F}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
  "{8E7065D3-471B-481B-91E8-841ABF049266}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
  "{608CBAD9-11FB-45F6-846F-FADF580CA45C}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
  "{9B32574B-3E69-4617-BB65-7291B197A7AB}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
  "{370A4226-8445-4644-B556-1682BAB99844}"= UDP:58936:Pando P2P TCP Listening Port
  "{503BE8C3-119F-4473-88D6-C05E38B0A3A0}"= TCP:58936:Pando P2P UDP Listening Port
  "{05A79AB9-2A65-4894-B530-DDDB589388DA}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
  "{049AB5FD-B8B7-48CC-9806-9EC891235CA7}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
  "{A796F93F-1A1E-463D-86AC-055C5A731060}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
  "{A484FDC6-42EB-49DC-8824-42D8C2DF87C8}"= UDP:57960:Pando P2P TCP Listening Port
  "{7AF80DE4-2A45-407C-A3E3-D5D76FFE8AAB}"= TCP:57960:Pando P2P UDP Listening Port
  "{A04E3147-E7DB-4994-BA41-FE92D96FC7C3}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
  "{97BECF03-980C-46C1-8DC4-B650ADAB5059}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
  "{783FF91A-09F7-4C49-B590-239797FB57AA}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
  "{233BBDD1-5CD1-4A29-9668-1F85218F4650}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
  "{E60D48BD-5DE5-46C2-BF0B-715578C9FA65}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
  "{0CEE3E9A-8507-4574-AC4F-FC167117E90A}"= c:\program files\Skype\Phone\Skype.exe:Skype
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2008-12-22 8944]
  R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2008-12-22 55024]
  R2 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [2009-02-06 55264]
  R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
  R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
  R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [2008-11-17 3668480]
  R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2008-12-22 7408]
  R3 ST50220;Sonix ST50220 USB Video Camera Driver;c:\windows\System32\drivers\ST50220.sys [2008-12-02 34224]
  S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2009-01-24 216232]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
  "c:\program files\Common Files\LightScribe\LSRunOnce.exe"
  .
  Contenu du dossier 'Tâches planifiées'
  
  2009-02-27 c:\windows\Tasks\Uniblue SpyEraser Nag.job
  - c:\program files\Uniblue\SpyEraser\SpyEraser.exe [2008-11-24 05:04]
  
  2009-02-22 c:\windows\Tasks\Uniblue SpyEraser.job
  - c:\program files\Uniblue\SpyEraser\SpyEraser.exe [2008-11-24 05:04]
  
  2009-02-27 c:\windows\Tasks\User_Feed_Synchronization-{EC0C4AAF-AFA3-4F00-A022-B12B375CEBEF}.job
  - c:\windows\system32\msfeedssync.exe [2008-01-21 03:24]
  .
  - - - - ORPHELINS SUPPRIMES - - - -
  
  WebBrowser-{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - (no file)
  HKLM-Run-EoEngine - (no file)
  
  .
  ------- Examen supplémentaire -------
  .
  uStart Page = hxxp://www.msn.fr/
  mWindow Title =
  uInternet Settings,ProxyOverride = *.local
  DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
  DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_1_1_0.cab
  FF - ProfilePath - c:\users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\damnqyvm.default\
  FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
  FF - prefs.js: browser.search.selectedEngine - Google
  FF - prefs.js: browser.startup.homepage - hxxp://go.microsoft.com/fwlink/?LinkId=69157
  FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
  1 fichier(s) déplacé(s).
  FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
  FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
  FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
  FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
  FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
  
  ---- PARAMETRES FIREFOX ----
  FF - user.js: yahoo.homepage.dontask - true.
  
  **************************************************************************
  
  catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2009-02-27 02:48:28
  Windows 6.0.6001 Service Pack 1 NTFS
  
  Recherche de processus cachés ...
  
  Recherche d'éléments en démarrage automatique cachés ...
  
  Recherche de fichiers cachés ...
  
  Scan terminé avec succès
  Fichiers cachés: 0
  
  **************************************************************************
  .
  Heure de fin: 2009-02-27 2:50:20
  ComboFix-quarantined-files.txt 2009-02-27 01:50:17
  
  Avant-CF: 4 865 503 232 octets libres
  Après-CF: 4,842,414,080 octets libres
  
  362 --- E O F --- 2009-02-26 09:26:45
  
  0
  
  Réagir
Réponse 15 / 34
ric025
Oui! Excuse-moi, c'est ma faute!

SDFix n'est pas compatible Vista! ;)

Sorry!

Tu as toujours les déconnexions intempestives? Est-ce qu'elles apparaissent régulièrement ou pas?

Je raccroche pour ce soir, alors à demain. Je te laisse une procédure.

===========================

/!\ Désactive tes protections résidentes (Antivirus, Antispywares, etc...) /!\

Télécharge ComboFix (de sUBs) sur ton Bureau.

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

* Double-clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
* Il va te demander d'installer la console de récupération : ACCEPTE!.
* Ne touche pas au pc durant le scan.
* Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\Combofix.txt) dans ta prochaine réponse.

Pour t'aider : Un Tutoriel sur l'utilisation de ComboFix (à lire avant de le lancer)

-->> https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

1

Réagir
1. beauté numerique Auteur
  
  oui, le pc commence à devenir lent àpartir de 40 min de connexion et puis il se deconnecte du net, en plus la webcam integré ne marche plus.
  merci pr tout.
  à demain
  
  0
  
  Réagir
2. beauté numerique Auteur
  
  Ric025, à demain.
  je te mets ci-dessous le rapport de Combofix:
  
  ComboFix 09-02-26.02 - anne 2009-02-27 2:45:43.1 - NTFSx86
  Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.3070.1940 [GMT 1:00]
  Lancé depuis: c:\users\anne\Desktop\ComboFix.exe
  FW: ZoneAlarm Firewall *disabled*
  * Un nouveau point de restauration a été créé
  .
  
  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  
  c:\users\anne\AppData\Roaming\inst.exe
  c:\windows\system32\KBL.LOG
  
  .
  ((((((((((((((((((((((((((((( Fichiers créés du 2009-01-27 au 2009-02-27 ))))))))))))))))))))))))))))))))))))
  .
  
  2009-02-26 21:03 . 2009-02-27 00:05 <REP> d-------- c:\program files\Ad-remover
  2009-02-26 10:19 . 2009-02-26 10:19 <REP> d-------- c:\windows\System32\AGEIA
  2009-02-26 10:19 . 2009-02-26 10:19 <REP> d-------- c:\program files\AGEIA Technologies
  2009-02-26 10:14 . 2009-02-26 10:14 <REP> d-------- C:\NVIDIA
  2009-02-26 00:04 . 2009-02-26 00:04 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
  2009-02-26 00:04 . 2009-02-11 10:19 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
  2009-02-26 00:04 . 2009-02-11 10:19 15,504 --a------ c:\windows\System32\drivers\mbam.sys
  2009-02-25 22:41 . 2009-02-25 23:49 <REP> d-------- c:\program files\Navilog1
  2009-02-25 16:39 . 2009-02-25 16:57 <REP> d-------- C:\ToolBar SD
  2009-02-25 16:35 . 2009-02-25 16:35 56 --ah----- c:\windows\System32\ezsidmv.dat
  2009-02-25 15:47 . 2009-02-25 15:47 <REP> d-------- C:\rsit
  2009-02-25 15:47 . 2009-02-26 01:57 <REP> d-------- c:\program files\trend micro
  2009-02-25 14:53 . 2009-02-25 14:58 <REP> d--h----- c:\program files\Temp
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\users\All Users\ma-config.com
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\programdata\ma-config.com
  2009-02-25 12:08 . 2009-02-25 12:08 <REP> d-------- c:\program files\ma-config.com
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Public\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Invité\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Invité\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\Default\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\anne\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\anne\AppData\Roaming\Intel
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\users\All Users\Roaming
  2009-02-25 03:56 . 2009-02-25 03:56 <REP> d-------- c:\programdata\Roaming
  2009-02-25 03:55 . 2009-02-25 03:55 <REP> d-------- c:\program files\Common Files\Intel
  2009-02-25 03:55 . 2009-02-25 03:55 <REP> d-------- c:\program files\Cisco
  2009-02-25 03:54 . 2009-02-25 03:54 <REP> d-------- c:\users\All Users\Intel
  2009-02-25 03:54 . 2009-02-25 03:54 <REP> d-------- c:\programdata\Intel
  2009-02-25 01:32 . 2008-12-16 04:29 8,147,456 --a------ c:\windows\System32\wmploc.DLL
  2009-02-25 01:32 . 2008-12-16 06:31 7,680 --a------ c:\windows\System32\spwmp.dll
  2009-02-25 01:32 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\msdxm.ocx
  2009-02-25 01:32 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\dxmasf.dll
  2009-02-25 00:03 . 2009-02-25 00:03 <REP> d-------- c:\program files\CCleaner
  2009-02-22 22:05 . 2004-10-04 02:10 98,304 --a------ c:\windows\System32\tsccvid.dll
  2009-02-22 21:55 . 2009-02-22 21:55 <REP> d-------- c:\program files\Micro Application
  2009-02-22 16:48 . 2009-02-22 17:10 0 -rahs---- c:\windows\System32\drivers\103C_HP_cNB_Pavilion dv9700 Notebook PC_Y5335KV_0U_QCNF8221HVG_E480576-051_4A_I30CB_SQuanta_V79.2E_F.59_T081125_WV3-1_L40C_M3070_J250_7Intel_86FD_92.00_#080906_N10EC8168;80864222_(FM630EA#ABF)_XMOBILE_CN10_Z.MRK
  2009-02-21 19:47 . 2009-02-21 19:47 <REP> d-------- c:\program files\VS Revo Group
  2009-02-21 02:06 . 2009-02-21 02:06 <REP> d-------- c:\program files\IZArc
  2009-02-20 21:26 . 2009-02-20 21:26 <REP> d-------- c:\program files\AGI
  2009-02-17 20:30 . 2009-02-17 20:30 <REP> d-------- c:\program files\Smart PC Solutions
  2009-02-14 14:22 . 2009-02-17 13:29 <REP> d-------- c:\users\anne\{350c1f09-e06f-400e-b71c-20cc48eb7c5e}
  2009-02-14 14:22 . 2009-02-14 14:22 3,505 --a------ c:\windows\bcmCE65.tmp
  2009-02-13 22:00 . 2009-02-13 22:00 <REP> d-------- c:\program files\Broadcom
  2009-02-13 22:00 . 2009-02-14 14:16 135,168 --a------ c:\windows\bcmD515.tmp
  2009-02-13 22:00 . 2009-02-14 00:34 135,168 --a------ c:\windows\bcmD4E6.tmp
  2009-02-13 01:05 . 2009-02-17 13:28 <REP> d-------- c:\program files\Power IE
  2009-02-12 13:09 . 2009-02-12 13:09 <REP> d-------- c:\program files\Feneris
  2009-02-11 16:23 . 2009-02-11 16:23 <REP> d-------- c:\users\anne\AppData\Roaming\Mozilla(146)
  2009-02-06 19:39 . 2009-02-06 19:39 308,600 --a------ c:\windows\WLXPGSS.SCR
  2009-02-06 18:52 . 2009-02-06 18:52 49,504 --a------ c:\windows\System32\sirenacm.dll
  2009-02-06 18:30 . 2009-02-06 18:30 <REP> d-------- c:\program files\Microsoft Sync Framework
  2009-02-06 18:30 . 2008-12-08 17:01 55,264 --a------ c:\windows\System32\drivers\fssfltr.sys
  2009-02-06 18:28 . 2009-02-06 18:28 <REP> d-------- c:\program files\Microsoft SQL Server Compact Edition
  2009-02-06 16:46 . 2008-06-20 02:14 781,344 --a------ c:\windows\System32\PresentationNative_v0300.dll
  2009-02-06 16:46 . 2008-06-20 02:14 622,080 --a------ c:\windows\System32\icardagt.exe
  2009-02-06 16:46 . 2008-06-20 02:14 326,160 --a------ c:\windows\System32\PresentationHost.exe
  2009-02-06 16:46 . 2008-06-20 02:14 105,016 --a------ c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll
  2009-02-06 16:46 . 2008-06-20 02:14 97,800 --a------ c:\windows\System32\infocardapi.dll
  2009-02-06 16:46 . 2008-06-20 02:14 43,544 --a------ c:\windows\System32\PresentationHostProxy.dll
  2009-02-06 16:46 . 2008-06-20 02:14 37,384 --a------ c:\windows\System32\infocardcpl.cpl
  2009-02-06 16:46 . 2008-06-20 02:14 11,264 --a------ c:\windows\System32\icardres.dll
  2009-02-06 16:39 . 2008-07-27 19:03 282,112 --a------ c:\windows\System32\mscoree.dll
  2009-02-06 16:39 . 2008-07-27 19:03 158,720 --a------ c:\windows\System32\mscorier.dll
  2009-02-06 16:39 . 2008-07-27 19:03 96,760 --a------ c:\windows\System32\dfshim.dll
  2009-02-06 16:39 . 2008-07-27 19:03 83,968 --a------ c:\windows\System32\mscories.dll
  2009-02-06 16:39 . 2008-07-27 19:03 41,984 --a------ c:\windows\System32\netfxperf.dll
  2009-02-02 22:57 . 2009-02-02 22:57 <REP> d-------- c:\program files\CDBurnerXP
  2009-01-30 20:02 . 2009-01-30 20:02 59 --a------ c:\windows\wininit.ini
  2009-01-30 19:44 . 2009-01-30 19:48 <REP> d-------- c:\users\anne\AppData\Roaming\muvee Technologies
  2009-01-30 19:42 . 2009-01-30 19:42 <REP> d-------- c:\users\All Users\TEMP
  2009-01-30 19:42 . 2009-01-30 19:42 <REP> d-------- c:\programdata\TEMP
  2009-01-30 19:09 . 2009-01-30 19:09 0 --ah----- c:\windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
  2009-01-30 18:58 . 2009-01-30 19:01 <REP> d-------- c:\windows\System32\Samsung_USB_Drivers
  2009-01-30 18:58 . 2009-01-30 18:58 <REP> d-------- c:\program files\Samsung
  2009-01-30 18:58 . 2005-08-28 20:51 766 --a------ c:\windows\System32\Uninstall.ico
  2009-01-29 19:11 . 2009-01-29 19:11 2,117,632 --a------ c:\windows\System32\python25.dll
  2009-01-29 19:11 . 2008-09-16 17:26 1,332,197 --a------ c:\windows\System32\pythondll.zip
  2009-01-29 19:11 . 2009-01-29 19:11 339,968 --a------ c:\windows\System32\pythoncom25.dll
  2009-01-29 19:11 . 2009-01-29 19:11 114,688 --a------ c:\windows\System32\pywintypes25.dll
  2009-01-27 23:01 . 2009-02-27 01:16 <REP> d-------- c:\users\anne\AppData\Roaming\skypePM
  2009-01-27 22:57 . 2009-02-27 02:48 <REP> d-------- c:\users\anne\AppData\Roaming\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\users\All Users\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\programdata\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\program files\Skype
  2009-01-27 22:56 . 2009-01-27 22:56 <REP> d-------- c:\program files\Common Files\Skype
  
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2009-02-27 01:45 2,879,488 ----a-w c:\users\Invité\NTUSER.DAT
  2009-02-27 01:45 2,879,488 ----a-w c:\users\Invité\NTUSER.DAT
  2009-02-27 01:35 --------- d-----w c:\programdata\Yahoo! Companion
  2009-02-27 01:33 31,776 ----a-w c:\users\All Users\nvModes.dat
  2009-02-27 01:33 31,776 ----a-w c:\programdata\nvModes.dat
  2009-02-27 01:32 352,616 ---ha-w c:\windows\system32\drivers\vsconfig.xml
  2009-02-27 01:30 --------- d-s---w c:\users\Invité\AppData\Roaming\Microsoft
  2009-02-27 01:17 --------- d-----w c:\users\anne\AppData\Roaming\EoRezo
  2009-02-26 23:49 --------- d-----w c:\program files\Yahoo!
  2009-02-26 11:01 --------- d-----w c:\program files\Microsoft Silverlight
  2009-02-26 09:22 --------- d-----w c:\programdata\NVIDIA
  2009-02-26 09:18 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
  2009-02-25 13:54 --------- d--h--w c:\program files\InstallShield Installation Information
  2009-02-25 13:54 --------- d-----w c:\program files\Realtek
  2009-02-25 13:53 319,456 ----a-w c:\windows\DIFxAPI.dll
  2009-02-25 02:54 --------- d-----w c:\program files\Intel
  2009-02-25 00:53 --------- d-----w c:\program files\Mouse Driver
  2009-02-22 16:11 --------- d-----w c:\users\anne\AppData\Roaming\Hewlett-Packard
  2009-02-22 16:10 --------- d-----w c:\program files\Hewlett-Packard
  2009-02-20 16:29 1,678,848 ----a-w c:\windows\Internet Logs\xDBA64C.tmp
  2009-02-20 14:55 --------- d-----w c:\program files\Google
  2009-02-19 11:10 200,192 ----a-w c:\windows\Internet Logs\xDBA765.tmp
  2009-02-18 19:28 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(235).xml
  2009-02-18 17:14 --------- d-----w c:\program files\Windows Live
  2009-02-17 19:30 --------- d-----w c:\users\anne\AppData\Roaming\Smart PC Solutions
  2009-02-17 12:31 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(231).xml
  2009-02-17 12:29 --------- d-----w c:\users\anne\AppData\Roaming\vlc
  2009-02-17 12:29 --------- d-----w c:\users\anne\AppData\Roaming\dvdcss
  2009-02-15 20:02 --------- d-----w c:\users\anne\AppData\Roaming\Mozilla(193)
  2009-02-15 18:53 --------- d-----w c:\users\anne\AppData\Roaming\Apple Computer
  2009-02-15 12:59 --------- d-----w c:\programdata\Microsoft Help
  2009-02-14 14:03 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1193).xml
  2009-02-14 13:22 37,888 ----a-w c:\windows\Internet Logs\xDB9A6A.tmp
  2009-02-14 13:01 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(248).xml
  2009-02-14 03:10 1,625,088 ----a-w c:\windows\Internet Logs\xDBA506.tmp
  2009-02-14 03:10 1,604,096 ----a-w c:\windows\Internet Logs\xDBA43A.tmp
  2009-02-14 01:44 1,624,064 ----a-w c:\windows\Internet Logs\xDBA987.tmp
  2009-02-11 10:37 --------- d-----w c:\program files\Windows Mail
  2009-02-08 04:36 1,585,152 ----a-w c:\windows\Internet Logs\xDBA591.tmp
  2009-02-06 13:02 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(255).xml
  2009-02-06 00:14 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1716).xml
  2009-02-04 04:45 453,152 ----a-w c:\windows\System32\NVUNINST.EXE
  2009-02-03 19:11 --------- d-----w c:\users\anne\AppData\Roaming\LimeWire
  2009-02-02 14:20 352,616 ---ha-w c:\windows\system32\drivers\vsconfig(1697).xml
  2009-01-25 01:51 1,482,240 ----a-w c:\windows\Internet Logs\xDB9F5A.tmp
  2009-01-24 18:19 --------- d-----w c:\program files\DivX
  2009-01-24 15:31 --------- d-----w c:\program files\Free Video Converter
  2009-01-23 02:08 --------- d-----w c:\users\anne\AppData\Roaming\Megaupload
  2009-01-23 02:03 --------- d-----w c:\programdata\Megaupload
  2009-01-23 02:03 --------- d-----w c:\programdata\EmailNotifier
  2009-01-23 02:03 --------- d-----w c:\program files\Megaupload
  2009-01-22 13:28 290,816 ----a-w c:\windows\System32\decdll.dll
  2009-01-21 14:15 1,458,176 ----a-w c:\windows\Internet Logs\xDB90F8.tmp
  2009-01-21 00:27 1,454,080 ----a-w c:\windows\Internet Logs\xDB96A3.tmp
  2009-01-19 20:55 --------- d-----w c:\programdata\WildTangent
  2009-01-19 13:53 --------- d-----w c:\programdata\InternetFax
  2009-01-17 14:55 4,600,710 ----a-w c:\windows\Internet Logs\tvDebug.zip
  2009-01-17 14:45 --------- d-----w c:\programdata\tpfmon
  2009-01-17 14:45 --------- d-----w c:\program files\Alliance MCA
  2009-01-15 17:59 1,413,632 ----a-w c:\windows\Internet Logs\xDB86FB.tmp
  2009-01-15 17:59 1,167,872 ----a-w c:\windows\Internet Logs\xDB8545.tmp
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet(620).dll
  2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet(439).dll
  2009-01-15 06:11 1,166,336 ----a-w c:\windows\System32\urlmon(616).dll
  2009-01-15 06:11 1,166,336 ----a-w c:\windows\System32\urlmon(435).dll
  2009-01-15 06:07 270,336 ----a-w c:\windows\System32\iertutil(580).dll
  2009-01-15 06:07 270,336 ----a-w c:\windows\System32\iertutil(404).dll
  2009-01-14 11:36 410,984 ----a-w c:\windows\System32\deploytk.dll
  2009-01-14 11:36 --------- d-----w c:\program files\Java
  2009-01-14 01:31 --------- d-----w c:\program files\Aire&Volume 1.0
  2009-01-13 23:43 --------- d-----w c:\program files\MLSofts
  2009-01-11 13:36 --------- d-----w c:\program files\BurnAware Free Edition
  2009-01-10 21:14 --------- d-----w c:\users\anne\AppData\Roaming\SUPERAntiSpyware.com
  2009-01-10 21:14 --------- d-----w c:\program files\SUPERAntiSpyware
  2009-01-10 14:04 --------- d-----w c:\users\anne\AppData\Roaming\Uniblue
  2009-01-10 14:04 --------- d-----w c:\programdata\Uniblue
  2009-01-10 14:03 --------- d-----w c:\program files\Uniblue
  2009-01-10 00:23 --------- d-----w c:\program files\eMule
  2009-01-07 13:43 1,849,344 ----a-w c:\windows\Internet Logs\xDB909B.tmp
  2009-01-07 13:42 1,849,344 ----a-w c:\windows\Internet Logs\xDB90EA.tmp
  2009-01-06 08:35 --------- d-----w c:\users\anne\AppData\Roaming\TingleSoft
  2009-01-06 07:45 --------- d-----w c:\program files\NCH Software
  2009-01-06 07:21 396,800 ----a-w c:\windows\Internet Logs\xDB901E.tmp
  2009-01-06 07:21 1,843,200 ----a-w c:\windows\Internet Logs\xDB90BB.tmp
  2009-01-05 23:58 152,904 ----a-w c:\windows\System32\vghd.scr
  2009-01-04 19:54 --------- d-----w c:\users\anne\AppData\Roaming\vghd
  2009-01-02 09:55 976,896 ----a-w c:\windows\Internet Logs\xDB81EB.tmp
  2009-01-01 20:16 --------- d-----w c:\users\anne\AppData\Roaming\GTek
  2009-01-01 16:15 --------- d-----w c:\program files\Bonjour
  2008-12-29 16:29 --------- d-----w c:\programdata\NCH Swift Sound
  2008-12-29 16:28 --------- d-----w c:\users\anne\AppData\Roaming\NCH Swift Sound
  2008-12-27 15:38 1,812,992 ----a-w c:\windows\Internet Logs\xDB8C95.tmp
  2008-12-27 01:19 --------- d-----w c:\users\anne\AppData\Roaming\NCH Software
  2008-12-27 01:15 --------- d-----w c:\programdata\NCH Software
  2008-12-26 21:51 1,806,336 ----a-w c:\windows\Internet Logs\xDB8600.tmp
  2008-12-23 01:19 223,744 ----a-w c:\windows\Internet Logs\xDB95D8.tmp
  2008-12-23 01:19 1,801,216 ----a-w c:\windows\Internet Logs\xDB96A4.tmp
  2008-12-20 16:59 237,568 ----a-w c:\windows\Internet Logs\xDBD0A6.tmp
  2008-12-18 21:05 2,070,528 ----a-w c:\windows\Internet Logs\xDBC9D3.tmp
  2008-09-16 11:49 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
  2008-09-16 11:49 32,768 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
  2008-09-16 11:49 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
  .
  
  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  REGEDIT4
  
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968]
  "HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2007-10-01 1783136]
  "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
  "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
  "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
  "Uniblue SpyEraser"="c:\program files\Uniblue\SpyEraser\SpyEraser.exe" [2008-11-24 1431816]
  "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-12-22 1830128]
  "Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-11-18 21633320]
  "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
  "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880]
  "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2008-04-15 178712]
  "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-19 468264]
  "OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
  "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
  "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-16 75008]
  "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
  "WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
  "WireLessMouse"="c:\program files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe" [2007-03-06 212992]
  "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-09-09 185896]
  "ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2008-03-03 959976]
  "KMCONFIG"="c:\program files\Mouse Driver\StartAutorun.exe" [2007-03-06 212992]
  "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
  "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
  "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
  "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-11-07 111936]
  "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
  "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
  "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-14 136600]
  "fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" [2009-02-06 454000]
  "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-30 13605408]
  "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-30 92704]
  
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
  "SoftwareHelper"="c:\users\anne\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe" [2008-12-09 368224]
  
  c:\users\anne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
  OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-09-12 384000]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  "EnableLUA"= 0 (0x0)
  "FilterAdministratorToken"= 1 (0x1)
  "EnableUIADesktopToggle"= 0 (0x0)
  
  [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
  "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
  2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
  "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GOEC62~1.DLL
  
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  "msacm.l3codecp"= l3codecp.acm
  "vidc.xvid"= xvid.dll
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "UacDisableNotify"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
  "DisableMonitoring"=dword:00000001
  
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
  "DisableMonitoring"=dword:00000001
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
  "{CF56EE87-3255-4F75-9569-E4BD5033A6E6}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
  "{27DA28C7-00AD-4753-9858-0BDDED7D8752}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader
  "{D587D31A-8B46-4EFA-B935-FF83EBF02909}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
  "{39D1E530-FF40-4E75-865F-3FCE8707DDDB}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
  "{5F15B3E8-9831-42CC-8BA6-1F91E2BD2DBE}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
  "{D6583C84-5578-40CF-B6E4-C70960B1266F}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
  "{8E7065D3-471B-481B-91E8-841ABF049266}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
  "{608CBAD9-11FB-45F6-846F-FADF580CA45C}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
  "{9B32574B-3E69-4617-BB65-7291B197A7AB}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
  "{370A4226-8445-4644-B556-1682BAB99844}"= UDP:58936:Pando P2P TCP Listening Port
  "{503BE8C3-119F-4473-88D6-C05E38B0A3A0}"= TCP:58936:Pando P2P UDP Listening Port
  "{05A79AB9-2A65-4894-B530-DDDB589388DA}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
  "{049AB5FD-B8B7-48CC-9806-9EC891235CA7}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
  "{A796F93F-1A1E-463D-86AC-055C5A731060}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
  "{A484FDC6-42EB-49DC-8824-42D8C2DF87C8}"= UDP:57960:Pando P2P TCP Listening Port
  "{7AF80DE4-2A45-407C-A3E3-D5D76FFE8AAB}"= TCP:57960:Pando P2P UDP Listening Port
  "{A04E3147-E7DB-4994-BA41-FE92D96FC7C3}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
  "{97BECF03-980C-46C1-8DC4-B650ADAB5059}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
  "{783FF91A-09F7-4C49-B590-239797FB57AA}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
  "{233BBDD1-5CD1-4A29-9668-1F85218F4650}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
  "{E60D48BD-5DE5-46C2-BF0B-715578C9FA65}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
  "{0CEE3E9A-8507-4574-AC4F-FC167117E90A}"= c:\program files\Skype\Phone\Skype.exe:Skype
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
  "DefaultOutboundAction"= 0 (0x0)
  "DefaultInboundAction"= 1 (0x1)
  
  R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2008-12-22 8944]
  R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2008-12-22 55024]
  R2 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [2009-02-06 55264]
  R2 fsssvc;Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
  R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
  R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [2008-11-17 3668480]
  R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2008-12-22 7408]
  R3 ST50220;Sonix ST50220 USB Video Camera Driver;c:\windows\System32\drivers\ST50220.sys [2008-12-02 34224]
  S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [2009-01-24 216232]
  
  [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
  "c:\program files\Common Files\LightScribe\LSRunOnce.exe"
  .
  Contenu du dossier 'Tâches planifiées'
  
  2009-02-27 c:\windows\Tasks\Uniblue SpyEraser Nag.job
  - c:\program files\Uniblue\SpyEraser\SpyEraser.exe [2008-11-24 05:04]
  
  2009-02-22 c:\windows\Tasks\Uniblue SpyEraser.job
  - c:\program files\Uniblue\SpyEraser\SpyEraser.exe [2008-11-24 05:04]
  
  2009-02-27 c:\windows\Tasks\User_Feed_Synchronization-{EC0C4AAF-AFA3-4F00-A022-B12B375CEBEF}.job
  - c:\windows\system32\msfeedssync.exe [2008-01-21 03:24]
  .
  - - - - ORPHELINS SUPPRIMES - - - -
  
  WebBrowser-{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - (no file)
  HKLM-Run-EoEngine - (no file)
  
  .
  ------- Examen supplémentaire -------
  .
  uStart Page = hxxp://www.msn.fr/
  mWindow Title =
  uInternet Settings,ProxyOverride = *.local
  DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
  DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - hxxp://fichiers.touslesdrivers.com/fichiers/hardwaredetection/hardwaredetection_3_1_1_0.cab
  FF - ProfilePath - c:\users\anne\AppData\Roaming\Mozilla\Firefox\Profiles\damnqyvm.default\
  FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
  FF - prefs.js: browser.search.selectedEngine - Google
  FF - prefs.js: browser.startup.homepage - hxxp://go.microsoft.com/fwlink/?LinkId=69157
  FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
  1 fichier(s) déplacé(s).
  FF - plugin: c:\program files\ma-config.com\nphardwaredetection.dll
  FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
  FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
  FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
  FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
  
  ---- PARAMETRES FIREFOX ----
  FF - user.js: yahoo.homepage.dontask - true.
  
  **************************************************************************
  
  catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2009-02-27 02:48:28
  Windows 6.0.6001 Service Pack 1 NTFS
  
  Recherche de processus cachés ...
  
  Recherche d'éléments en démarrage automatique cachés ...
  
  Recherche de fichiers cachés ...
  
  Scan terminé avec succès
  Fichiers cachés: 0
  
  **************************************************************************
  .
  Heure de fin: 2009-02-27 2:50:20
  ComboFix-quarantined-files.txt 2009-02-27 01:50:17
  
  Avant-CF: 4 865 503 232 octets libres
  Après-CF: 4,842,414,080 octets libres
  
  362 --- E O F --- 2009-02-26 09:26:45
  
  0
  
  Réagir
3. beauté numerique Auteur
  
  Salut Ric025,
  j'ai verifié le gestionnaire de périphériques, et j'ai constaté que certaines des mes cartes réseau ne fonctionnement pas. Il y a des triangles jaunes devant les cartes réseau qui ne demarre pas.
  
  Je te donne les détails de cartes réseau ci-dessous:
  6TO4 Adapter. Ce périphérique ne peut pas démarrer. (Code 10).
  
  isatap.{A38E3C78-3119-4121-A8F3-4FEA7E8DB47F}. Ce périphérique ne peut pas démarrer. (Code 10).
  
  isatap.{BC9AD58A-2674-4603-B964-8D9DB86A76EA}. Ce périphérique ne peut pas démarrer. (Code 10).
  
  isatap.{BC9AD58A-2674-4603-B964-8D9DB86A76EA}. Ce périphérique ne peut pas démarrer. (Code 10).
  
  Périphérique inconnu. Ce périphérique n'est pas configuré correctement. (Code 1).
  
  Merci d'avance pour l'attention que tu accordes à mon problème.
  
  0
  
  Réagir
Réponse 16 / 34
ric025
Ok! Passe ceci:

Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.

http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec comme ceci!! :
```
• Redémarre ton ordinateur
• Tout de suite après le bip de démarrage, tapote la touche F8 (une pression par seconde).
• A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
• Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
• Choisis ton compte.
```
===En Mode Sans Échec===

• Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
• Appuie sur une touche pour commencer le processus de nettoyage.
• Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.

• Appuie sur une touche pour redémarrer le PC.

• Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
• Après le chargement du Bureau, l'outil terminera son travail et affichera "Finished".
• Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
• Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.

• Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse. Puis un nouveau log hijackthis.
0

Réagir
1. beauté numerique Auteur
  
  Ric025, j'ai redemarré le pc en mode sans échec comme tu me l'as recommandé.
  Je suis arrivé au niveau du répertoire C:\ et j'ai fait le double clique sur RunThis.bat mais, l'écran bleu il vient et disparait au même temps, j'ai éssayé à maintes reprises, mais je n'arrive pas à lancer le script de nettoyage, l'écran bleu disparaît aussitôt que je double clique sur RunThis.bat.
  Merci.
  
  0
  
  Réagir
Réponse 17 / 34
ric025
Essaie plutôt comme ça:

* Relances "Ad-remover" : au menu principal choisi l'option "B" .
* Coche à l'écran de sélection :
```
  2. Suppression Eorezo
     

     7. Suppression Autre Adware
```
* Tape le chiffre correspondant à la suppression demandée et valide par ENTREE pour le cocher.
* Puis choisi "S" , le programme va travailler,
* Postes le rapport qui apparait à la fin.

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL A Pour tout selectionner , CTRL C pour copier et CTRL V pour coller )

/!\ Si le Bureau ne réapparait pas presse Ctrl Alt Suppr , Onglet "Fichier" , "Nouvelle tâche", tapes explorer.exe et valides)
1

Réagir
1. beauté numerique Auteur
  
  Ric025, ci dessous le 2ième rapport:
  
  ------- LOGFILE OF AD-REMOVER 1.1.1.5 | ONLY XP/VISTA -------
  
  Updated by C_XX on 25/02/2009 at 20:30
  
  *** LIMITED TO ***
  
  Eorezo
  Other Adwares
  
  ******************
  
  Start at: 0:09:13 | Fri 27/02/2009 | Boot mode: Normal Boot
  Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
  Operating System: Microsoft® Windows Vista™ Home Premium Service Pack 1 (version 6.0.6001)
  Computer Name: PC-DE-ANNE
  Current User: anne - Administrator
  Drive(s):
  - C:\ (File System: NTFS)
  - D:\ (File System: NTFS)
  System Drive: C:\
  Windows Directory: C:\Windows\
  System Directory: C:\Windows\System32\
  
  --- Running Processes: 99
  --- User Account Control is DISABLE
  
  (!) ---- IE start pages/Tabs reset
  
  +-----------------| Eorezo Elements Deleted :
  
  HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
  HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Softwarehelper
  HKCU\Software\EoRezo
  HKLM\Software\EoRezo
  HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
  .
  C:\Users\anne\AppData\Roaming\EoRezo
  C:\Windows\Prefetch\SOFTWAREUPDATEHP.EXE-14C6F7C6.pf
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@eorezo[1].txt
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@eorezo[2].txt
  
  +-----------------| Other Adwares Deleted:
  
  .
  .
  C:\Program Files\Conduit
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@atdmt[1].txt
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@atdmt[2].txt
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@bs.serving-sys[2].txt
  
  (!) ---- Temp files deleted.
  (!) ---- Recycle bin emptied in all drives.
  
  +-----------------| Added Scan :
  
  ---- Mozilla FireFox Version 3.0.6 ----
  
  ProfilePath: damnqyvm.default
  .
  Prefs.js: Browser.Search.DefaultEngineName: "Live Search"
  Prefs.js: Browser.Search.SelectedEngine: "Google"
  Prefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
  .
  (Prefs.js) REMOVED: user_pref("weboftrust.search.mahalo.style", "#content-container a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 2px; margin-right: 5px; }");
  .
  .
  .
  .
  
  ---- Internet Explorer Version 7.0.6001.18000 ----
  
  +-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
  
  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
  Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
  Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
  Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
  
  +-[HKEY_USERS\S-1-5-21-2353330684-2837568938-3636117250-1000\..\Internet Explorer\Main]
  
  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
  Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
  Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
  Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
  
  +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
  
  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
  Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  Search bar: hxxp://search.msn.com/spbasic.htm
  Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
  Start page: hxxp://fr.msn.com/
  
  +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
  
  Tabs: hxxp://ieframe.dll/tabswelcome.htm
  
  +---------------------------------------------------------------------------+
  
  [~3682 Bytes] - C:\Ad-Report-Clean-27.02.2009.log
  [~3656 Bytes] - C:\Ad-Report-Scan-26.02.2009.log
  
  - C:\Program Files\Ad-remover\TOOLS\BACKUP
  - C:\Program Files\Ad-remover\TOOLS\QUARANTINE
  
  End at: 0:11:05 | 27/02/2009
  .
  +-----------------| E.O.F - 75 Lines
  .
  
  0
  
  Réagir
Réponse 18 / 34
ric025
! Déconnecte-toi et ferme toute application en cours !

Relance "Ad-remover" : au menu principal choisis l'option "B" .

A l'écran de sélection :

Tape "A" à la question "que voulez-vous faire" et valide par ENTREE.

Le programme va travailler,

Poste le rapport qui apparait à la fin.

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

/!\ Si le Bureau ne réapparait pas presse Ctrl +Alt +Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide

0

Réagir
1. beauté numerique Auteur
  
  alo Ric025,
  je n'arrive pas à passer à la deuxième étape celle du nettoyage complet sur Ad-remover. Toutes les fenetres sont fermées.
  quand j'arrive au niveau de la question "Que voulez-vous faire", je clique "A", et je la valide, mais après, je n'ai pas de rapport.
  
  0
  
  Réagir
Réponse 19 / 34
ric025
Salut!

Oui, j'ai oublié EoRezo du coup!!

Ad-Remover (par Cyril du 17 / C_XX):

Télécharge et enregistre le fichier d'installation sur ton bureau :

http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe

Double clique sur le programme d'installation , et installe-le dans son emplacement par défaut. ( le bureau )

Ouvre le dossier Ad-remover qui vient d'apparaître sur ton bureau par double-clic

Au menu principal tape "A" puis "Entrée" pour valider.

Patiente le temps du scan. A la fin, il te demandera de presser sur une touche pour faire apparaître le rapport. Fais-le.

Poste le dans ta prochaine réponse par copié/collé.

( le rapport est sauvegardé aussi sous C:\Ad-report.log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

=================================

Tu peux également désinstaller tes toolbars. Elles ne sont pas infectieuses, mais je ne vois pas leur utilité.

Je vois encore:
```
O3 - Toolbar: AOL Toolbar

O3 - Toolbar: Yahoo! Toolbar

O3 - Toolbar: AVG Security Toolbar 

O3 - Toolbar: Megaupload Toolbar 

O3 - Toolbar: &Windows Live Toolbar
```
==================================

A++ ;)
0

Réagir
1. beauté numerique Auteur
  
  Salut Ric025,
  je t'envoie le rapport Ad-Remover.
  
  ------- LOGFILE OF AD-REMOVER 1.1.1.5 | ONLY XP/VISTA -------
  
  Updated by C_XX on 25/02/2009 at 20:30
  
  Start at: 21:08:06 | Thu 26/02/2009 | Boot mode: Normal Boot
  Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
  Operating System: Microsoft® Windows Vista™ Home Premium Service Pack 1 (version 6.0.6001)
  Computer Name: PC-DE-ANNE
  Current User: anne - Administrator
  Drive(s):
  - C:\ (File System: NTFS)
  - D:\ (File System: NTFS)
  System Drive: C:\
  Windows Directory: C:\Windows\
  System Directory: C:\Windows\System32\
  
  --- Running Processes: 99
  --- User Account Control is DISABLE
  
  +-----------------| Boonty/Boonty Games Elements Found:
  
  .
  .
  
  +-----------------| Eorezo Elements Found:
  
  HKCU\Software\EoRezo
  HKLM\Software\EoRezo
  HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
  HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
  HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Softwarehelper
  .
  C:\Users\anne\AppData\Roaming\EoRezo
  C:\Windows\Prefetch\SOFTWAREUPDATEHP.EXE-14C6F7C6.pf
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@eorezo[1].txt
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@eorezo[2].txt
  
  +-----------------| Infected Poker Softwares Elements Found:
  
  .
  
  +-----------------| FunWebProducts/MyWay/MyWebSearch Elements Found:
  
  .
  .
  
  +-----------------| It's TV Elements Found:
  
  .
  
  +-----------------| Sweetim Elements Found:
  
  .
  
  +-----------------| Other Adwares Found:
  
  .
  .
  C:\Program Files\Conduit
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@atdmt[2].txt
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@atdmt[3].txt
  C:\Users\anne\AppData\Roaming\Microsoft\Windows\Cookies\anne@bs.serving-sys[2].txt
  
  +-----------------| Added Scan:
  
  ---- Mozilla FireFox Version 3.0.6 ----
  
  ProfilePath: damnqyvm.default
  .
  Prefs.js: Browser.Search.DefaultEngineName: "Live Search"
  Prefs.js: Browser.Search.SelectedEngine: "Google"
  Prefs.js: Browser.Search.DefaultUrl: "hxxp://search.live.com/results.aspx?FORM=IEFM1&q="
  .
  (Prefs.js) FOUND: user_pref("weboftrust.search.mahalo.style", "#content-container a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 2px; margin-right: 5px; }");
  .
  .
  .
  .
  
  ---- Internet Explorer Version 7.0.6001.18000 ----
  
  +-[HKEY_CURRENT_USER\..\Internet Explorer\Main]
  
  Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=laptop
  Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
  Start page: hxxp://www.msn.fr/
  
  +-[HKEY_USERS\S-1-5-21-2353330684-2837568938-3636117250-1000\..\Internet Explorer\Main]
  
  Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=laptop
  Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
  Start page: hxxp://www.msn.fr/
  
  +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
  
  Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=81&bd=Pavilion&pf=laptop
  Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
  Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
  Start page: hxxp://www.msn.com/
  
  +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
  
  Tabs: hxxp://ieframe.dll/tabswelcome.htm
  
  +---------------------------------------------------------------------------+
  
  [~3434 Bytes] - C:\Ad-Report-Scan-26.02.2009.log
  
  - C:\Program Files\Ad-remover\TOOLS\BACKUP
  - C:\Program Files\Ad-remover\TOOLS\QUARANTINE
  
  End at: 21:09:25 | 26/02/2009
  .
  +-----------------| E.O.F - 75 Lines
  .
  
  0
  
  Réagir
Réponse 20 / 34
ric025
Re!

En passant, pour demain: http://www.commentcamarche.net/forum/affich 11228329 probleme de connexion internet?#6

(Pour le RSIT!)

A demain.

0

Réagir
1. beauté numerique Auteur
  
  Bonne nuit Ri025.
  voilà le rapport RSIT. merci bcp le temps que tu m'as accordé. à demain.
  
  Logfile of random's system information tool 1.05 (written by random/random)
  Run by anne at 2009-02-26 01:57:34
  Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
  System drive C: has 7 GB (3%) free of 227 GB
  Total RAM: 3070 MB (52% free)
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 01:57:42, on 26/02/2009
  Platform: Windows Vista SP1 (WinNT 6.00.1905)
  MSIE: Internet Explorer v7.00 (7.00.6001.18000)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\Explorer.EXE
  C:\Users\anne\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
  C:\Windows\system32\conime.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
  C:\Program Files\Hp\QuickPlay\QPService.exe
  C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  C:\Program Files\Windows Defender\MSASCui.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
  C:\Program Files\Mouse Driver\StartAutorun.exe
  C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
  C:\Program Files\Mouse Driver\KMConfig.exe
  C:\Program Files\AVG\AVG8\avgtray.exe
  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\Java\jre6\bin\jusched.exe
  C:\Windows\System32\rundll32.exe
  C:\Program Files\Windows Live\Family Safety\fsui.exe
  C:\Program Files\Mouse Driver\KMProcess.exe
  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
  C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
  C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
  C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  C:\Program Files\Skype\Phone\Skype.exe
  C:\Program Files\Windows Media Player\wmpnscfg.exe
  C:\Program Files\OpenOffice.org 3\program\soffice.exe
  C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
  C:\Program Files\OpenOffice.org 3\program\soffice.bin
  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  C:\Program Files\Windows Live\Contacts\wlcomm.exe
  C:\Program Files\Skype\Plugin Manager\skypePM.exe
  C:\Program Files\Windows Live\Toolbar\wltuser.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\AVG\AVG8\avgcsrvx.exe
  C:\Users\anne\Desktop\RSIT.exe
  C:\Program Files\trend micro\anne.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fr/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  R3 - Default URLSearchHook is missing
  O1 - Hosts: ::1 localhost
  O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
  O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
  O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
  O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
  O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
  O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
  O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
  O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
  O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
  O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
  O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
  O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
  O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
  O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
  O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  O4 - HKLM\..\Run: [WireLessMouse] C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
  O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files\Mouse Driver\StartAutorun.exe KMConfig.exe
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
  O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
  O4 - HKLM\..\RunOnce: [SoftwareHelper] C:\Users\anne\AppData\Roaming\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe -runonce
  O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
  O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
  O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
  O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe" -m
  O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
  O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
  O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
  O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O13 - Gopher Prefix:
  O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
  O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
  O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldfr-fr.cab
  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://fichiers.touslesdrivers.com/...
  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL,avgrsstx.dll
  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
  O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
  O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
  O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
  O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
  O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
  O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
  O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
  O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
  O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
  O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
  O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe
  
  0
  
  Réagir
2. beauté numerique Auteur
  
  Salut Ric025.
  
  je t'ai posté hier le rapport du RSIT.
  
  Et, j'ai déjà fait la mise à jour des pilotes de carte réseau.
  Drivers installés: nVidia Corporation GeForce 8600M GS. Date de sortie le 30/01/2009.
  
  je serais de retour à partir de 16h00.
  a+.
  
  0
  
  Réagir
- 1
- 2
Suivant

Problème de connexion internet

34 réponses

Discussions similaires

Newsletters