CIOCC

Bonjour, voici les 2 rapports Ciocc N°1 LOG Logfile of random's system information tool 1.06 (written by random/random) Run by HP_Administrateur at 2009-10-08 16:43:58 Microsoft Windows XP Professionnel Service Pack 3 System drive C: has 123 GB (53%) free of 231 GB Total RAM: 3070 MB (78% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:44:22, on 08/10/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Java\jre1.5.0\bin\jusched.exe C:\windows\system\hpsysdrv.exe C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe C:\WINDOWS\SYSTEM32\CTXFISPI.EXE C:\WINDOWS\CTHELPER.EXE C:\Program Files\BroadJump\Client Foundation\CFD.exe C:\HP\KBD\KBD.EXE C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Samsung\EmoDio\SMSTray.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\PROGRA~1\MICROS~2\rapimgr.exe C:\WINDOWS\arservice.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\HP_Administrateur\Bureau\RSIT.exe C:\Documents and Settings\HP_Administrateur\Mes documents\HP_Administrateur.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll" O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [bJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [sMSTray] C:\Program Files\Samsung\EmoDio\SMSTray.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0 O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4EFE4BE8-8771-4649-B3EF-D97374C8D2C2} (KeybHunterWebInterface Class) - https://particuliers.secure.lcl.fr/v_1.0/im...FormProtect.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1235422439203 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 9632 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Maintenance en 1 clic.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-06-28 716800] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512] "AlwaysReady Power Message APP"=C:\WINDOWS\ARPWRMSG.EXE [2005-08-03 77312] "SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0\bin\jusched.exe [2008-06-28 36972] "hpsysdrv"=c:\windows\system\hpsysdrv.exe [1998-05-08 52736] "VolPanel"=C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe [2005-07-11 122880] "AudioDrvEmulator"=C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe [2005-06-17 49152] "CTHelper"=C:\WINDOWS\CTHELPER.EXE [2005-08-09 16384] "HPHUPD08"=c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe [2005-06-02 49152] "Recguard"=C:\WINDOWS\SMINST\RECGUARD.EXE [2004-04-15 233472] "BJCFD"=C:\Program Files\BroadJump\Client Foundation\CFD.exe [2003-01-27 376912] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-08-12 13570048] "KBD"=C:\HP\KBD\KBD.EXE [2005-02-02 61440] "ShStatEXE"=C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE [2004-09-22 94208] "McAfeeUpdaterUI"=C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe [2004-08-06 139320] "Network Associates Error Reporting Service"=C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe [2003-10-07 147514] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-08-12 86016] "SMSTray"=C:\Program Files\Samsung\EmoDio\SMSTray.exe [2009-04-16 479232] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232] "updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472] "H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Club-Internet_McciTrayApp] C:\Program Files\Club-Internet\Agent Wi-Fi V2.1\McciTrayApp.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^LE COMPAGNON CLUB.lnk] C:\PROGRA~1\CLUB-I~1\LECOMP~1\bin\matcli.exe [2005-06-03 217088] C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe" "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe" "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes" "C:\Program Files\ma-config.com\maconfservice.exe"="C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice" "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player" "C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager" "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager" "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application" "C:\Program Files\SFR\Media Center\httpd\httpd.exe"="C:\Program Files\SFR\Media Center\httpd\httpd.exe:172.16.255.0/255.255.255.0,192.168.1.0/255.255.255.0:Enabled:Serveur de partage Media Center (Player SFR)" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%ProgramFiles%\iTunes\iTunes.exe"="%ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager" "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager" "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{56262878-3a72-11da-8d13-806d6172696f}] shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{dcb1f98e-e187-11dd-9a2f-0002e344fb52}] shell\AutoRun\command - J:\LaunchU3.exe -a ======List of files/folders created in the last 3 months====== 2009-10-08 16:43:58 ----D---- C:\rsit 2009-10-07 20:50:58 ----D---- C:\Documents and Settings\HP_Administrateur\Application Data\Malwarebytes 2009-10-07 20:50:52 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2009-10-07 20:47:20 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2009-10-07 19:35:50 ----D---- C:\_OTM 2009-10-06 21:36:52 ----D---- C:\WINDOWS\BDOSCAN8 2009-10-03 17:11:52 ----D---- C:\Program Files\Panda Security 2009-07-16 08:25:27 ----D---- C:\Program Files\WinAVI Video Converter 2009-07-16 08:12:18 ----D---- C:\Program Files\Fichiers communs\DVDVideoSoft 2009-07-16 08:12:18 ----D---- C:\Program Files\DVDVideoSoft ======List of files/folders modified in the last 3 months====== 2009-10-08 16:43:56 ----D---- C:\WINDOWS\Prefetch 2009-10-08 16:30:14 ----D---- C:\WINDOWS\Temp 2009-10-08 16:30:14 ----D---- C:\WINDOWS\Registration 2009-10-08 16:29:59 ----D---- C:\WINDOWS\system32\CatRoot2 2009-10-08 16:29:54 ----D---- C:\WINDOWS 2009-10-08 07:24:11 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-10-07 22:39:35 ----D---- C:\WINDOWS\system32\drivers 2009-10-07 22:33:14 ----RD---- C:\Program Files 2009-10-07 22:16:42 ----D---- C:\WINDOWS\system32\FxsTmp 2009-10-07 19:38:22 ----RHD---- C:\Program Files\rnamfler 2009-10-07 19:38:22 ----D---- C:\WINDOWS\system32 2009-10-06 21:36:57 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-10-06 21:36:52 ----HD---- C:\WINDOWS\inf 2009-07-27 15:15:50 ----D---- C:\WINDOWS\system32\config 2009-07-27 15:15:49 ----D---- C:\WINDOWS\twain_32 2009-07-27 12:40:10 ----D---- C:\QUARANTINE 2009-07-24 17:18:15 ----RSHD---- C:\WINDOWS\system32\dllcache 2009-07-24 17:18:14 ----D---- C:\WINDOWS\system32\CatRoot 2009-07-16 17:46:07 ----SHD---- C:\WINDOWS\Installer 2009-07-16 14:23:58 ----D---- C:\Documents and Settings\All Users\Application Data\QuickTime 2009-07-16 14:10:22 ----D---- C:\Program Files\Movie Maker 2009-07-16 14:10:21 ----D---- C:\temp 2009-07-16 14:09:17 ----D---- C:\WINDOWS\security 2009-07-16 08:12:18 ----D---- C:\Program Files\Fichiers communs ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576] R1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] R1 NaiAvTdi1;NaiAvTdi1; C:\WINDOWS\system32\drivers\mvstdi5x.sys [2005-01-14 58464] R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-09-15 2777472] R3 aracpi;aracpi; C:\WINDOWS\system32\DRIVERS\aracpi.sys [2005-08-03 22784] R3 arhidfltr;MS Ar HID Filter Driver; C:\WINDOWS\system32\DRIVERS\arhidfltr.sys [2005-08-03 19200] R3 arkbcfltr;Microsoft PS2 Keyboard Filter; C:\WINDOWS\system32\DRIVERS\arkbcfltr.sys [2005-08-03 5376] R3 armoucfltr;Microsoft PS2 Mouse Filter; C:\WINDOWS\system32\DRIVERS\armoucfltr.sys [2005-08-03 4992] R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 ARPolicy;ARPolicy; C:\WINDOWS\system32\DRIVERS\arpolicy.sys [2005-08-03 10112] R3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2005-08-09 501760] R3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2005-08-09 439424] R3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2005-08-09 7168] R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2005-08-09 142848] R3 E100B;Intel® PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-15 155648] R3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2005-08-09 77824] R3 EntDrv51;EntDrv51; \??\C:\WINDOWS\system32\drivers\EntDrv51.sys [] R3 GEARAspiWDM;GEAR CDRom Filter; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2005-03-07 14408] R3 ha20x2k;Creative 20X HAL Driver; C:\WINDOWS\system32\drivers\ha20x2k.sys [2005-08-09 1093632] R3 HidIr;Pilote HID infrarouge Microsoft; C:\WINDOWS\system32\DRIVERS\hidir.sys [2008-04-13 19200] R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 IrBus;Pilote de filtre de bus infrarouge pour les contrôles distants eHome; C:\WINDOWS\system32\DRIVERS\IrBus.sys [2008-04-13 46592] R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-24 12288] R3 NaiAvFilter1;NaiAvFilter1; C:\WINDOWS\system32\drivers\naiavf5x.sys [2005-01-14 108480] R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-08-12 6113760] R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2005-08-09 114688] R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 WN5401;Liteon Wireless LAN PCI 802.11 a/b/g adapter WN5401A; C:\WINDOWS\system32\DRIVERS\wn5401.sys [2005-01-07 449920] S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 CT20XUT.DLL;CT20XUT.DLL; C:\WINDOWS\system32\CT20XUT.DLL [2005-08-09 158208] S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2005-07-14 340704] S3 CTEXFIFX.DLL;CTEXFIFX.DLL; C:\WINDOWS\system32\CTEXFIFX.DLL [2005-08-09 1157632] S3 CTHWIUT.DLL;CTHWIUT.DLL; C:\WINDOWS\system32\CTHWIUT.DLL [2005-08-09 61952] S3 driverhardwarev2;driverhardwarev2; \??\C:\Program Files\ma-config.com\Drivers\driverhardwarev2.sys [] S3 MHNDRV;Pilote MHN; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008] S3 MPE;Filtre BDA MPE; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232] S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [] S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\PCASp50.sys [2005-11-19 20096] S3 rtl8139;Pilote NT de carte Realtek PCI Fast Ethernet à base RTL8139(A/B/C); C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992] S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152] S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ARSVC;ARSVC; C:\WINDOWS\arservice.exe [2005-08-03 58880] R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-14 44032] R2 ehRecvr;Service de réception Media Center; C:\WINDOWS\eHome\ehRecvr.exe [2005-08-05 235520] R2 ehSched;Service de planification Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 103424] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2005-07-25 53248] R2 McAfeeFramework;Service Framework McAfee; C:\Program Files\Network Associates\Common Framework\FrameworkService.exe [2004-08-06 102463] R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328] R2 McShield;Network Associates McShield; C:\Program Files\Network Associates\VirusScan\Mcshield.exe [2004-09-22 221191] R2 McTaskManager;Network Associates Task Manager; C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe [2004-09-22 28672] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-08-12 163908] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE [2007-08-09 73728] R2 UxTuneUp;TuneUp Extension de thème; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768] S3 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 iPodService;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2005-05-05 327680] S3 maconfservice;Ma-Config Service; C:\Program Files\ma-config.com\maconfservice.exe [2008-05-19 576680] S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2008-06-29 355584] S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\wmpnetwk.exe [2006-11-03 918016] S4 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [] -----------------EOF----------------- N°2 INFO info.txt logfile of random's system information tool 1.06 2009-10-08 16:44:24 ======Uninstall list====== -->"C:\Program Files\Creative\Sound Blaster X-Fi\Program\SETUP.EXE" /S /U /W /L:FRN -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205} -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382} -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629} -->c:\WINDOWS\system32\\MSIEXEC.EXE /x {F80239D8-7811-4D5E-B033-0D0BBFE32920} -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{06E3E953-0570-4DFF-A7B5-46114C390228}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{06E3E953-0570-4DFF-A7B5-46114C390228}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0B095086-7205-4D48-90DF-DCD16613C6D4}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0E5AA361-4B16-4282-B639-9E5B2B6A2EC8}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0E5AA361-4B16-4282-B639-9E5B2B6A2EC8}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{103BCDA0-E063-46AC-8028-64E78722ABA7}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1EF644C7-1A0D-4B94-9AF5-AD04702094A4}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1EF644C7-1A0D-4B94-9AF5-AD04702094A4}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2616B36E-38CE-4357-8AB5-8B3EE9B1C117}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{32903944-19A2-418C-901D-4BBAF4C55ABA}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{32903944-19A2-418C-901D-4BBAF4C55ABA}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44267176-A318-447F-A62A-0A5FD608C34F}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{44267176-A318-447F-A62A-0A5FD608C34F}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D8AA0B4-E890-4BF7-A9D1-8E63027E76D3}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4D8AA0B4-E890-4BF7-A9D1-8E63027E76D3}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{569A9538-86EC-44C3-8EE4-C68B165F2A75}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{569A9538-86EC-44C3-8EE4-C68B165F2A75}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6349CEE9-19F2-49D9-AC9D-B0350E3CBDB1}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6349CEE9-19F2-49D9-AC9D-B0350E3CBDB1}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6BF90A01-FA3F-42B9-A071-7D744409967E}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6BF90A01-FA3F-42B9-A071-7D744409967E}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{700932B3-A964-4878-82A2-96054622A1F7}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{73919E2B-725C-4FAA-8473-45E063A3575F}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{73919E2B-725C-4FAA-8473-45E063A3575F}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84F573D3-0F71-4768-978A-D35310E3FBA6}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8A3F2ADE-DEF2-4A50-866A-6B9357B5590F}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8A3F2ADE-DEF2-4A50-866A-6B9357B5590F}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B026740-A400-48FF-8F6B-B37C4F61C937}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B026740-A400-48FF-8F6B-B37C4F61C937}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B20EB9BE-3795-47BA-BDD6-889593E8FD55}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B20EB9BE-3795-47BA-BDD6-889593E8FD55}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B49BCFF0-64CC-4E0E-AD9D-91BFBD344BAE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B49BCFF0-64CC-4E0E-AD9D-91BFBD344BAE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8DA9EB2-DBEF-4F0A-B90A-45B77D9E65B2}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B8DA9EB2-DBEF-4F0A-B90A-45B77D9E65B2}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BD6928A2-9F8F-4AA7-9A3A-FD4A271712EE}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BD6928A2-9F8F-4AA7-9A3A-FD4A271712EE}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C229589D-CC1A-43FF-9507-CDED3AB85325}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C229589D-CC1A-43FF-9507-CDED3AB85325}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CB99E420-8071-48F9-9567-4A53BE7569C4}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CB99E420-8071-48F9-9567-4A53BE7569C4}\setup.exe" -l0x40c /remove -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8A544F4-AC5F-4B67-9C74-F3E976798797}\setup.exe" -l0x40c -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D8A544F4-AC5F-4B67-9C74-F3E976798797}\setup.exe" -l0x40c /remove -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 7.1.0 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A71000000002} BroadJump Client Foundation-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\BroadJump\Client Foundation\Uninst.isu" -c"C:\Program Files\BroadJump\Client Foundation\RmvBJCFD.dll" -b"CFD" -h"CFD" -a Connexion Facile à Internet-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1036 Creative MediaSource-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E0C1913-886B-4C5C-8DAF-D1E649CE5FCC}\setup.exe" -l0x40c /remove EmoDio-->"C:\Program Files\InstallShield Installation Information\{C20CE592-B0F8-4D20-BF31-0151CA6331A6}\setup.exe" -runfromtemp -l0x040c -removeonly EmoDio-->MsiExec.exe /X{C20CE592-B0F8-4D20-BF31-0151CA6331A6} Encyclopédie Microsoft Encarta 2005-->MsiExec.exe /I{05460044-64A6-4248-A026-9745C1E9E159} Enhanced Multimedia Keyboard Solution-->C:\HP\KBD\Install.exe /u Free Video Dub version 1.4-->"C:\Program Files\DVDVideoSoft\Free Video Dub\unins000.exe" Garmin Communicator Plugin-->MsiExec.exe /X{F6970FBD-809A-4C51-BAB3-D94A04C6C8E7} Garmin MapSource-->MsiExec.exe /X{CF07A1C9-098F-47DD-99E0-B6558C33871B} Garmin POI Loader-->MsiExec.exe /X{D9DA2DF6-8CB6-4E3C-A29E-FAECFBA3E9A7} Garmin WebUpdater-->MsiExec.exe /X{366FFC89-C800-4366-B903-B9C4314109A5} GemMaster Mystic-->"C:\Program Files\GemMasterFrench\uninstallgemmaster.exe" Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll" HijackThis 2.0.2-->"C:\Documents and Settings\HP_Administrateur\Mes documents\HijackThis.exe" /uninstall HP Appareils photos Photosmart 5.0-->C:\Program Files\HP\Digital Imaging\{C83A12B9-B31B-461A-BBD4-CE9B988094F1}\setup\hpzscr01.exe -datfile hpiscr01.dat HP Deskjet Printer Preload-->MsiExec.exe /I{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0} HP DigitalMedia Archive-->MsiExec.exe /I{F80239D8-7811-4D5E-B033-0D0BBFE32920} HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat HP Image Zone 5.3-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat HP Image Zone for Media Center PC-->c:\Program Files\HP\Digital Imaging\bin\mcpc\setupmcl.exe /u HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart 330,380,420,470,7800,8000,8200 Series-->C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\setup\hpzscr01.exe -d MsiRollbackUninstaller -datfile hphscr08.dat HP PSC & OfficeJet 5.3.B-->"C:\Program Files\HP\Digital Imaging\{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}\setup\hpzscr01.exe" -datfile hposcr07.dat HP Software Update-->MsiExec.exe /X{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93} HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat HP Tunes-->MsiExec.exe /X{D54193B7-D2DF-4977-B546-86CA48DB214E} HPTunesAddIn-->MsiExec.exe /I{69CF01AD-9E35-4BD7-9036-7B8478BEB839} Intel® PRO Network Connections Drivers-->Prounstl.exe InterVideo WinDVD Player-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL iTunes-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{523E6F2A-2D59-4D91-90E8-6C49931C9F50} J2SE Runtime Environment 5.0-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000} Lame ACM MP3 Codec-->"C:\WINDOWS\IFinst26.exe" -UC:\Program Files\Lame MP3 Codec\IFU13.inf Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Ma-Config.com-->MsiExec.exe /X{46E92609-C1BF-4D8F-A86F-F77E87C39366} MainConcept for Software Encoder-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{9950CE72-AE0E-4288-AC34-ACF4691F6FCB} McAfee VirusScan Enterprise-->MsiExec.exe /I{4DCA2739-9D16-4B55-808C-E72CD70A5BD3} Micro Application - Faire-part MC-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A890218A-2B99-4EF5-AE53-51FF4D305866}\SETUP.EXE" -l0x40c Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700} Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft ActiveSync-->MsiExec.exe /I{99052DB7-9592-4522-A558-5417BBAD48EE} Microsoft AutoRoute 2005-->MsiExec.exe /I{67E4EE98-59F4-4220-89A6-A20AF5BEC689} Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office XP Media Content-->MsiExec.exe /I{9030040C-6000-11D3-8CFE-0050048383C9} Microsoft Office XP Small Business-->MsiExec.exe /I{9113040C-6000-11D3-8CFE-0050048383C9} Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Monster Trux Extreme - Offroad Edition-->C:\DOCUME~1\ALLUSE~1\APPLIC~1\TARMAI~1\{09F55~1\Setup.exe /remove /q0 MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} muvee autoProducer 4.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2C3D719A-92C7-4323-89CC-C937D0267B84}\setup.exe" -l0x40c muvee autoProducer unPlugged 1.1 - HPD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B1931B3A-29E9-4F91-9B61-BE2CF05E84F1}\setup.exe" -l0x40c NVIDIA Drivers-->C:\WINDOWS\system32\nvuninst.exe UninstallGUI OpenAL-->"C:\Program Files\OpenAL\OALINST.EXE" /U Otto-->"C:\Program Files\FrenchOtto\uninstallotto.exe" Panda ActiveScan 2.0-->C:\Program Files\Panda Security\ActiveScan 2.0\as2uninst.exe PC-Doctor 5 for Windows-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{AB61A692-5543-4C48-979B-8CEA1C52FE9C} /l1036 Picthema-->"C:\Program Files\Picthema\unins000.exe" Python 2.2 pywin32 extensions (build 203)-->"C:\Python22\Removepywin32.exe" -u "C:\Python22\pywin32-wininst.log" Python 2.2.3-->C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG QuickTime-->C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log SFR - Kit de connexion-->C:\Program Files\SFR\Kit\uninstall.exe SFR - Media Center-->C:\Program Files\SFR\Media Center\uninstall.exe Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011} Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA} Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29} Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382} Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629} Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205} Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E} Sound Blaster X-Fi-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}\setup.exe" -l0x40c /remove Uninstall 1.0.0.1-->"C:\Program Files\Fichiers communs\DVDVideoSoft\unins000.exe" VLC media player 0.9.2-->C:\Program Files\VideoLAN\VLC\uninstall.exe WinAVI Video Converter 8.0-->"C:\Program Files\WinAVI Video Converter\unins000.exe" Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe" Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" XviD MPEG-4 Video Codec-->"C:\Program Files\XviD\unins000.exe" =====HijackThis Backups===== O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2009-10-07] O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE [2009-10-07] O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" [2009-10-07] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02 [2009-10-07] O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe [2009-10-07] O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [2009-10-07] O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) [2009-10-07] O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE [2009-10-07] O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE" [2009-10-07] O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll [2009-10-07] O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime [2009-10-07] O4 - HKLM\..\Run: [nwiz] nwiz.exe /install [2009-10-07] O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') [2009-10-07] O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE [2009-10-07] O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') [2009-10-07] O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe [2009-10-07] ======System event log====== Computer Name: G-- Event Code: 7036 Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté. Record Number: 23469 Source Name: Service Control Manager Time Written: 20090731162504.000000+120 Event Type: Informations User: Computer Name: G-- Event Code: 7036 Message: Le service Gestionnaire de connexions d'accès distant est entré dans l'état : en cours d'exécution. Record Number: 23468 Source Name: Service Control Manager Time Written: 20090731162504.000000+120 Event Type: Informations User: Computer Name: G-- Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service EntDrv51. Record Number: 23467 Source Name: Service Control Manager Time Written: 20090731162503.000000+120 Event Type: Informations User: AUTORITE NT\SYSTEM Computer Name: G-- Event Code: 7036 Message: Le service Application système COM+ est entré dans l'état : en cours d'exécution. Record Number: 23466 Source Name: Service Control Manager Time Written: 20090731162459.000000+120 Event Type: Informations User: Computer Name: G-- Event Code: 7035 Message: Un contrôle Démarrer a correctement été envoyé au service NaiAvFilter1. Record Number: 23465 Source Name: Service Control Manager Time Written: 20090731162459.000000+120 Event Type: Informations User: AUTORITE NT\SYSTEM =====Application event log===== Computer Name: G-- Event Code: 5 Message: Unsupported service control request (see data below) Record Number: 6041 Source Name: LightScribeService Time Written: 20090520202829.000000+120 Event Type: Informations User: Computer Name: G-- Event Code: 5 Message: Unsupported service control request (see data below) Record Number: 6040 Source Name: LightScribeService Time Written: 20090520194230.000000+120 Event Type: Informations User: Computer Name: G-- Event Code: 1000 Message: Application défaillante iexplore.exe, version 7.0.6000.16674, module défaillant entapi.dll, version 8.0.0.277, adresse de défaillance 0x000036b4. Record Number: 6039 Source Name: Application Error Time Written: 20090520191958.000000+120 Event Type: erreur User: Computer Name: G-- Event Code: 4097 Message: L'application, C:\Program Files\Internet Explorer\iexplore.exe, a généré une erreur d'application L'erreur s'est produite le 05/20/2009 à 19:18:31.062 L'exception générée était c0000005 à l'adresse 370036B4 (EntApi) Record Number: 6038 Source Name: DrWatson Time Written: 20090520191831.000000+120 Event Type: Informations User: Computer Name: G-- Event Code: 1000 Message: Application défaillante iexplore.exe, version 7.0.6000.16674, module défaillant entapi.dll, version 8.0.0.277, adresse de défaillance 0x000036b4. Record Number: 6037 Source Name: Application Error Time Written: 20090520191827.000000+120 Event Type: erreur User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;c:\Python22;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322 "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 4, GenuineIntel "PROCESSOR_REVISION"=0404 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "SonicCentral"=c:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\ -----------------EOF-----------------

Bonsoir Pear, je n' ai pas pu tout faire. La mise à jour de Java n' a pas fonctionné ainsi que la mise à jour de MBAM. Voici malgré tout les CR des scans All processes killed ========== PROCESSES ========== ========== FILES ========== c:\windows\system32\AppSetup.exe moved successfully. C:\Documents and Settings\All Users\nos documents\Eric\system\fichiers syst Fred 080330\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe moved successfully. C:\Documents and Settings\All Users\nos documents\Eric\system\Nouveaux logiciels\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe moved successfully. C:\Program Files\rnamfler\naomf.exe moved successfully. K:\080628Mesdocuments02\nos documents\Eric\system\fichiers syst Fred 080330\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe moved successfully. K:\080628Mesdocuments02\nos documents\Eric\system\Nouveaux logiciels\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe moved successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== COMMANDS ========== [EMPTYTEMP] User: Administrateur ->Temp folder emptied: 18452 bytes ->Temporary Internet Files folder emptied: 224003 bytes User: All Users User: Default User ->Temp folder emptied: 18150 bytes ->Temporary Internet Files folder emptied: 32768 bytes User: HP_Administrateur File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla10.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla11.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla12.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla13.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla14.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla15.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla16.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla17.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla18.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla19.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla1A.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla1B.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla1C.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla1D.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla1E.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla1F.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla20.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla21.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla22.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla23.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla24.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla26.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla27.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla28.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla29.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla2A.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla2B.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla2C.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla2D.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla2E.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla2F.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla30.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla31.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla32.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla33.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla34.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla35.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla36.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla37.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\fla38.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temp\flaF.tmp scheduled to be deleted on reboot. ->Temp folder emptied: 159118500 bytes File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\WBQPEQNG\5CAHGYA0MCA22YID3CAMF7QSRCAXZ3IW3CAANA97NCAOKJRK1CACJ4N8ICARRAGYWCAHSPEWZCA 7IQ72FCAPRL2STCAMKKOEXCAVVW16UCAMC76UQCA4496WWCAA6FJZHCA45UOCYCAJV64TS.htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\WBQPEQNG\iframe[1].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\VFJNHSO9\AP_ADV_728x90[1].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\VFJNHSO9\pc-infecte-spyware-virtumonde-t168620[1].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\IOME3ZQB\9CAEO4E4UCANF4YI1CAZ9O4XVCABDGG0NCA13DA52CA62LXC4CAOQTLMECAAY63FOCATGFNIWCA J13YKZCAPXX3LOCARXYJBSCAYMKM7FCARA158FCAIG3K6BCAFCS3F7CAL0Z7IVCA4Z79CL.htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\IOME3ZQB\ads[5].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\IOME3ZQB\ban_728x90[1].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\IOME3ZQB\hp[1].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\3WA7EFN7\AP_ADV_300x250[1].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\3WA7EFN7\rectangle_300x250[1].htm scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\HP_Administrateur\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 36185314 bytes ->Java cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 115348 bytes File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. ->Temporary Internet Files folder emptied: 33170 bytes %systemdrive% .tmp files removed: 0 bytes C:\WINDOWS\msdownld.tmp\IXP000.TMP folder deleted successfully. C:\WINDOWS\msdownld.tmp folder deleted successfully. %systemroot% .tmp files removed: 4085904 bytes %systemroot%\System32 .tmp files removed: 0 bytes File delete failed. C:\WINDOWS\temp\WFV2.tmp scheduled to be deleted on reboot. Windows Temp folder emptied: 55078912 bytes RecycleBin emptied: 501914 bytes Total Files Cleaned = 243,61 mb OTM by OldTimer - Version 3.0.0.6 log created on 10072009_193550 CR Scan Malwarebytes' Anti-Malware 1.41 Version de la base de données: 2775 Windows 5.1.2600 Service Pack 3 07/10/2009 22:09:47 mbam-log-2009-10-07 (22-09-47).txt Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|I:\|K:\|L:\|M:\|N:\|) Eléments examinés: 216643 Temps écoulé: 59 minute(s), 24 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 2 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 0 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): (Aucun élément nuisible détecté) Ciocc

Bonsoir à tous, depuis quelques temps mon PC à l' air de tourner moins bien qu' auparavant, un peu plus lent mais rien de dramatique à priori. Je me suis décidé à faire un scan Panda qui m' a détecté plusieurs bestioles ,entre autres 00029434 spyware/virtumonde Spyware No 1 Yes No c:\windows\system32\appsetup.exe et C:\Program Files\rnamfler\naomf.exe le premier fichier est un fichier .exe d' une taille de 23 525 Ko : En cliquant sur propriéré, il est indique comme entreprise : Creative Technology Ltd le deuxième fichier je n' ai aucne info, si ce n' est le CR Totalvirus Suivent CR Panda + CR Total Virus + Hijackthis Merc ide me donner un avis Ciocc CR Panda ;******************************************************************************* ******************************************************************************** * ******************* ANALYSIS: 2009-10-06 21:17:51 PROTECTIONS: 0 MALWARE: 13 SUSPECTS: 7 ;******************************************************************************* ******************************************************************************** * ******************* PROTECTIONS Description Version Active Updated ;=============================================================================== ================================================================================ = =================== ;=============================================================================== ================================================================================ = =================== MALWARE Id Description Type Active Severity Disinfectable Disinfected Location ;=============================================================================== ================================================================================ = =================== 00029434 spyware/virtumonde Spyware No 1 Yes No c:\windows\system32\appsetup.exe 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@doubleclick[2].txt 00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@xiti[1].txt 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@ad.yieldmanager[1].txt 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@serving-sys[2].txt 00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@bs.serving-sys[1].txt 00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@weborama[1].txt 00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@adtech[1].txt 00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@ads.pointroll[2].txt 00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@questionmarket[2].txt 00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@adviva[2].txt 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\HP_Administrateur\Cookies\hp_administrateur@smartadserver[2].txt 00472802 Adware/Beginto Adware No 0 No No K:\080628Mesdocuments02\nos documents\Eric\system\HP\Divx 07-10-2006\Codec Divx Pro\DivXInstaller.exe[²ÜÇ\GoogleToolbarFirefox.msi][unk_0020][xpi][components/googletoolbar.dll] 00472802 Adware/Beginto Adware No 0 No No K:\System Volume Information\_restore{CE19DE18-A7E5-4EC6-982C-713622D64F9E}\RP29\A0023453.exe[²ÜÇ\GoogleToolbarFirefox.msi][unk_0020][xpi][components/googletoolbar.dll] 00472802 Adware/Beginto Adware No 0 No No C:\Documents and Settings\All Users\nos documents\Eric\system\HP\Divx 07-10-2006\Codec Divx Pro\DivXInstaller.exe[²ÜÇ\GoogleToolbarFirefox.msi][unk_0020][xpi][components/googletoolbar.dll] ;=============================================================================== ================================================================================ = =================== SUSPECTS Sent Location ;=============================================================================== ================================================================================ = =================== No C:\Documents and Settings\All Users\nos documents\Eric\system\fichiers syst Fred 080330\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe No C:\Documents and Settings\All Users\nos documents\Eric\system\Nouveaux logiciels\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe No C:\Documents and Settings\All Users\nos documents\Eric\system\Nouveaux logiciels\IE\install_Internet Explorer_.exe No C:\Program Files\rnamfler\naomf.exe No K:\080628Mesdocuments02\nos documents\Eric\system\fichiers syst Fred 080330\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe No K:\080628Mesdocuments02\nos documents\Eric\system\Nouveaux logiciels\Cyberlink Power Cinema Version 4.0 (incl. Keymaker)\keygen.exe No K:\080628Mesdocuments02\nos documents\Eric\system\Nouveaux logiciels\IE\install_Internet Explorer_.exe ;=============================================================================== ================================================================================ = =================== VULNERABILITIES Id Severity Description ;=============================================================================== ================================================================================ = =================== 212494 HIGH MS09-042 212493 HIGH MS09-041 212490 HIGH MS09-038 212530 HIGH MS09-034 211784 HIGH MS09-032 211781 HIGH MS09-029 210625 HIGH MS09-026 210624 HIGH MS09-025 210621 HIGH MS09-022 210618 HIGH MS09-019 208380 HIGH MS09-015 208379 HIGH MS09-014 208378 HIGH MS09-013 208377 HIGH MS09-012 206981 HIGH MS09-007 206980 HIGH MS09-006 205735 HIGH MS09-002 204670 HIGH MS09-001 203806 HIGH MS08-078 203508 HIGH MS08-073 203505 HIGH MS08-071 202465 HIGH MS08-068 201683 HIGH MS08-067 201258 HIGH MS08-066 201256 HIGH MS08-064 201255 HIGH MS08-063 201253 HIGH MS08-061 201250 HIGH MS08-058 209275 HIGH MS08-049 209273 HIGH MS08-045 ;=============================================================================== ================================================================================ = =================== CR Total Virus du fichier naomf.exe Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.41 2009.10.06 Trojan.Generic!IK AhnLab-V3 5.0.0.2 2009.10.06 Win-Trojan/Xema.variant AntiVir 7.9.1.33 2009.10.06 - Antiy-AVL 2.0.3.7 2009.10.05 - Authentium 5.1.2.4 2009.10.06 W32/Heuristic-210!Eldorado Avast 4.8.1351.0 2009.10.06 - AVG 8.5.0.420 2009.10.04 Dialer.BVH BitDefender 7.2 2009.10.06 - CAT-QuickHeal 10.00 2009.10.06 Trojan.Agent.IRC ClamAV 0.94.1 2009.10.05 - Comodo 2524 2009.10.06 UnclassifiedMalware DrWeb 5.0.0.12182 2009.10.06 - eSafe 7.0.17.0 2009.10.06 - eTrust-Vet 35.1.7054 2009.10.06 - F-Prot 4.5.1.85 2009.10.06 W32/Heuristic-210!Eldorado F-Secure 8.0.14470.0 2009.10.06 - Fortinet 3.120.0.0 2009.10.06 PossibleThreat GData 19 2009.10.06 - Ikarus T3.1.1.72.0 2009.10.06 Trojan.Generic Jiangmin 11.0.800 2009.10.06 - K7AntiVirus 7.10.863 2009.10.06 - Kaspersky 7.0.0.125 2009.10.06 - McAfee 5763 2009.10.06 - McAfee+Artemis 5763 2009.10.06 potentially unwanted program Artemis!FC494E385EA3 McAfee-GW-Edition 6.8.5 2009.10.06 Heuristic.LooksLike.Win32.SuspiciousPE.H Microsoft 1.5101 2009.10.06 - NOD32 4485 2009.10.06 - Norman 6.01.09 2009.10.06 W32/Dialer.RYK nProtect 2009.1.8.0 2009.10.06 - Panda 10.0.2.2 2009.10.06 Suspicious file PCTools 4.4.2.0 2009.10.06 - Prevx 3.0 2009.10.06 High Risk System Back Door Rising 21.49.22.00 2009.09.30 - Sophos 4.45.0 2009.10.06 Sus/UnkPacker Sunbelt 3.2.1858.2 2009.10.06 - Symantec 1.4.4.12 2009.10.06 Trojan Horse TheHacker 6.5.0.2.032 2009.10.06 - TrendMicro 8.950.0.1094 2009.10.06 - VBA32 3.12.10.11 2009.10.05 - ViRobot 2009.10.6.1972 2009.10.06 - VirusBuster 4.6.5.0 2009.10.06 - Information additionnelle File size: 1253960 bytes MD5...: fc494e385ea35698e9a0281de4271393 SHA1..: ed9918a4c580f5b81745098043f0a401d2d2ddc3 SHA256: cebc5fab3514724cbdff1205f5383702502efe8c3b191190c72fc236985678e9 ssdeep: 24576:FgXHlwKk+hnTkwPCelsZ3K/3VEeRx7CI0XuCF8jAArrzzz1JXV:FgXlN3Q kCFxve/MuCYvzzz1 PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x137060 timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992) machinetype.......: 0x14c (I386) ( 9 sections ) name viradd virsiz rawdsiz ntrpy md5 CODE 0x1000 0x100970 0x100a00 7.97 1d058592b30d72ea0a1dd957044484e1 DATA 0x102000 0x10790 0x10800 7.85 b0666d8c8d18f201be899bae0f5e5953 BSS 0x113000 0xe4d 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .idata 0x114000 0x2a06 0x2c00 7.90 7a857bd9bdb8ee1268b104a870651f4d .tls 0x117000 0x10 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .rdata 0x118000 0x18 0x200 7.05 cabd4242d76645451a7ae56b4804c45c .reloc 0x119000 0x10af0 0x10c00 6.50 c13f58aa57e3b2c020820d54b6468670 .rsrc 0x12a000 0xc800 0xc800 6.49 88b8ebf2830d3d238c13f0fed816bedf Jc 0x137000 0x2000 0xa48 7.84 f675c32038d700180453fb5bfdd413a2 ( 1 imports ) > kernel32.dll: LoadLibraryA, GetProcAddress ( 0 exports ) RDS...: NSRL Reference Data Set - pdfid.: - trid..: Win32 EXE Yoda's Crypter (54.4%) Win32 Executable Generic (17.4%) Win32 Dynamic Link Library (generic) (15.5%) Win16/32 Executable Delphi generic (4.2%) Generic Win/DOS Executable (4.1%) ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=fc494e385ea35698e9a0281de4271393' target='_blank'>http://www.threatexpert.com/report.aspx?md5=fc494e385ea35698e9a0281de4271393</a> packers (Kaspersky): Yoda sigcheck: publisher....: n/a copyright....: n/a product......: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments.....: n/a signers......: - signing date.: - verified.....: Unsigned packers (Authentium): Yoda <a href='http://info.prevx.com/aboutprogramtext.asp?PX5=867D4E5E48121BA8223013F3D2BB8200B7A28D01' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=867D4E5E48121BA8223013F3D2BB8200B7A28D01</a> packers (F-Prot): Yoda Hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:17:00, on 06/10/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Java\jre1.5.0\bin\jusched.exe C:\windows\system\hpsysdrv.exe C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe C:\WINDOWS\CTHELPER.EXE C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\SYSTEM32\CTXFISPI.EXE C:\Program Files\HP\HP Software Update\HPwuSchd2.exe C:\Program Files\BroadJump\Client Foundation\CFD.exe C:\HP\KBD\KBD.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\CTXFIHLP.EXE C:\Program Files\Samsung\EmoDio\SMSTray.exe C:\WINDOWS\arservice.exe C:\WINDOWS\system32\CTsvcCDA.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\eHome\ehSched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\PROGRA~1\MICROS~2\rapimgr.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\HP_Administrateur\Bureau\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE" O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll" O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [bJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [sMSTray] C:\Program Files\Samsung\EmoDio\SMSTray.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0 O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4EFE4BE8-8771-4649-B3EF-D97374C8D2C2} (KeybHunterWebInterface Class) - https://particuliers.secure.lcl.fr/v_1.0/im...FormProtect.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1235422439203 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe -- End of file - 11309 bytes

re, j' ai désinstaller le pilote et, il semblerait qu' il ce soit réinstaller tout seul. Le son est revenu. Merci Ciocc

Ok, merci pour les conseils mais, comment puis-je retrouver les pilotes d' origine?

Bonjour, non, pas encore. Je n'ai encore jamais désinstallé un pilote. Ou se trouve l' application? Ciocc

Bonsoir à tous, je viens de mettre à jour ma carte video et ma carte son. Si tout c' est bien passé pour la carte video, il n' en est pas de même pour la carte son. Lors de la mise à jour des pilote, le PC s' est planté (écran bleu) et je n' ai plus de son. j 'ai essayé de réinstaller un ancien pilote,rien à faire. J' ai aussi essayé de revenir à un ancien point de restauration mais, cela ne résoud pas le problème de son et le PC ne redémarre pas, mais seulement en mode sans echec. Lorsque je vérifie le pilote, il semblerait qu ' il ne soit pas reconnu. comment puis-je me dépanner sans passer par une restauration totale du système et être sûr d' utiliser un pilote qui ne fait pas planter le PC. Merci de votre aide Ciocc

[Re, voici la rapport Virus Total Antivirus Version Dernière mise à jour Résultat AhnLab-V3 2008.6.19.0 2008.06.20 - AntiVir 7.8.0.59 2008.06.20 TR/Dldr.Zlob.ZQN Authentium 5.1.0.4 2008.06.20 - Avast 4.8.1195.0 2008.06.20 - AVG 7.5.0.516 2008.06.21 - BitDefender 7.2 2008.06.21 - CAT-QuickHeal 9.50 2008.06.20 - ClamAV 0.93.1 2008.06.21 - DrWeb 4.44.0.09170 2008.06.21 - eSafe 7.0.15.0 2008.06.19 - eTrust-Vet 31.6.5892 2008.06.21 - Ewido 4.0 2008.06.21 - F-Prot 4.4.4.56 2008.06.20 - F-Secure 7.60.13501.0 2008.06.20 - Fortinet 3.14.0.0 2008.06.21 - GData 2.0.7306.1023 2008.06.21 - Ikarus T3.1.1.26.0 2008.06.21 - Kaspersky 7.0.0.125 2008.06.21 - McAfee 5322 2008.06.20 - Microsoft 1.3604 2008.06.21 - NOD32v2 3205 2008.06.21 - Norman 5.80.02 2008.06.20 - Panda 9.0.0.4 2008.06.21 - Prevx1 V2 2008.06.21 - Rising 20.49.52.00 2008.06.21 - Sophos 4.30.0 2008.06.21 - Sunbelt 3.0.1153.1 2008.06.15 - Symantec 10 2008.06.21 - TheHacker 6.2.92.356 2008.06.20 - TrendMicro 8.700.0.1004 2008.06.20 - VBA32 3.12.6.7 2008.06.21 - VirusBuster 4.3.26:9 2008.06.12 - Webwasher-Gateway 6.6.2 2008.06.21 Trojan.Dldr.Zlob.ZQN Information additionnelle File size: 39829 bytes MD5...: e4e7a13a0045e613e88d5043fcd1383a SHA1..: 8f6cee856e851e8a5159879c5c225c74b4912eff SHA256: de1aa962ef3104991320bb9bc93ebfdb08006a6e3be96489a8e0715082faeb3b SHA512: 33892a30dca027c68cabbc9250617166ff9e45d7b54718958cc9cd7664b08423 6ce65d0c2b7c3934c6bacf73911d9a829461d1d027f1eca69f2981cfbcfe81f5 PEiD..: - PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x403166 timedatestamp.....: 0x4538cd1d (Fri Oct 20 13:20:29 2006) machinetype.......: 0x14c (I386) ( 5 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x5bfe 0x5c00 6.49 6e321acf0da7e80b8a1bbd2b5f6cb158 .rdata 0x7000 0x11fe 0x1200 5.28 74487a69e7662347f676ab791311704a .data 0x9000 0x264d4 0x400 5.22 8f1a143c7000f5dab24763a51f33162c .ndata 0x30000 0x9000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e .rsrc 0x39000 0x13a8 0x1400 3.98 854858748b3ac8ea4e142fa185667c4a ( 8 imports ) > KERNEL32.dll: CloseHandle, SetFileTime, CompareFileTime, SearchPathA, GetShortPathNameA, GetFullPathNameA, MoveFileA, SetCurrentDirectoryA, GetFileAttributesA, GetLastError, CreateDirectoryA, SetFileAttributesA, Sleep, GetFileSize, GetModuleFileNameA, GetTickCount, GetCurrentProcess, lstrcmpiA, ExitProcess, GetCommandLineA, GetWindowsDirectoryA, GetTempPathA, lstrcpynA, GetDiskFreeSpaceA, GlobalUnlock, GlobalLock, CreateThread, CreateProcessA, RemoveDirectoryA, CreateFileA, GetTempFileNameA, lstrlenA, lstrcatA, GetSystemDirectoryA, lstrcmpA, GetEnvironmentVariableA, ExpandEnvironmentStringsA, GlobalFree, GlobalAlloc, WaitForSingleObject, GetExitCodeProcess, SetErrorMode, GetModuleHandleA, LoadLibraryA, GetProcAddress, FreeLibrary, MultiByteToWideChar, WritePrivateProfileStringA, GetPrivateProfileStringA, WriteFile, ReadFile, MulDiv, SetFilePointer, FindClose, FindNextFileA, FindFirstFileA, DeleteFileA, CopyFileA > USER32.dll: ScreenToClient, GetWindowRect, SetClassLongA, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongA, SetCursor, LoadCursorA, CheckDlgButton, GetMessagePos, LoadBitmapA, CallWindowProcA, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, EndDialog, AppendMenuA, CreatePopupMenu, GetSystemMetrics, SetDlgItemTextA, GetDlgItemTextA, MessageBoxA, CharPrevA, DispatchMessageA, PeekMessageA, CreateDialogParamA, DestroyWindow, SetTimer, SetWindowTextA, PostQuitMessage, SetForegroundWindow, wsprintfA, SendMessageTimeoutA, FindWindowExA, RegisterClassA, SystemParametersInfoA, CreateWindowExA, GetClassInfoA, DialogBoxParamA, CharNextA, TrackPopupMenu, ExitWindowsEx, IsWindow, GetDlgItem, SetWindowLongA, LoadImageA, GetDC, EnableWindow, InvalidateRect, SendMessageA, DefWindowProcA, BeginPaint, GetClientRect, FillRect, DrawTextA, EndPaint, ShowWindow > GDI32.dll: SetBkColor, GetDeviceCaps, DeleteObject, CreateBrushIndirect, CreateFontIndirectA, SetBkMode, SetTextColor, SelectObject > SHELL32.dll: SHGetMalloc, SHGetPathFromIDListA, SHBrowseForFolderA, SHGetFileInfoA, ShellExecuteA, SHFileOperationA, SHGetSpecialFolderLocation > ADVAPI32.dll: RegQueryValueExA, RegSetValueExA, RegEnumKeyA, RegEnumValueA, RegOpenKeyExA, RegDeleteKeyA, RegDeleteValueA, RegCloseKey, RegCreateKeyExA > COMCTL32.dll: ImageList_AddMasked, ImageList_Destroy, -, ImageList_Create > ole32.dll: OleInitialize, OleUninitialize, CoCreateInstance > VERSION.dll: GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA ( 0 exports ) A+ Ciocc quote name=CIOCC' date='lundi 23 juin 2008 à 11h16' post='1244651] Bonjour Gof, de memoire il n´y avait pas beaucoup d´infos si ce n´est que seuls 2 AV avaient identifié ce fichier Club Ínternet comme Cheval de Troie. Je suis en ce moment au boulot. Je te poste ceci ce soir. A+ Ciocc Bonjour Gof, de memoire il n´y avait pas beaucoup d´infos si ce n´est que seuls 2 AV avaient identifié ce fichier Club Ínternet comme Cheval de Troie. Je suis en ce moment au boulot. Je te poste ceci ce soir. A+ Ciocc

Bonjour Gof, de memoire il n´y avait pas beaucoup d´infos si ce n´est que seuls 2 AV avaient identifié ce fichier Club Ínternet comme Cheval de Troie. Je suis en ce moment au boulot. Je te poste ceci ce soir. A+ Ciocc Bonjour Gof, de memoire il n´y avait pas beaucoup d´infos si ce n´est que seuls 2 AV avaient identifié ce fichier Club Ínternet comme Cheval de Troie. Je suis en ce moment au boulot. Je te poste ceci ce soir. A+ Ciocc

Bonsoir Gof, s'était bien mon idée. J'ai déjà effectué virus total et seulement 2 AV ont détecté ce pb, Antivir et Webwasher-Gateway, 2 sur 33. Normalement pas de quoi s' affoler. Le problème principal est lors des scan que je fais plutôt la nuit. Dès que Antivir scan trouve un fichier suspect, il s' arrête. La solution a cours terme, en attendant le prise en compte par Antivir de mon Email, est peut- être de sauvegarder ce fichier .uninstall sur une clé USB ou sur mon DD et de la recharger lorsque j'en aurais besoin. Qu'en pense-tu? Ciocc

Bonjour à tous, suite à la réinstallation de mon PC avec les CD qui allaient bien, j' ai récupéré Norton AV gatuit pendant 2 mois. Les 2 mois étant passés, j' ai maintenant installé Antivir free et Zone alrme free en attendant mieux. Le scan antivir n'arrête pas de detecter toujours le même fichier comme un Trojan du nom de TR/Dlbr.Zlob.ZNQ le chemin d' accès est le suivant C:\Program Files\Club-Internet\Assistance\OutilsCI rien que le fait de voir le fichier à l'écran via l' explorer, Antivir se déclanche. Je trouve assez étrange qu' un fichier que j' ai installé moi même pour avoir un accès internet soit reconnu comme un cheval de troie. Est-ce un problème ou pas. Si je supprime ce fichier, je suppose que je ne pourrai plus supprimer Club-internet de mon PC. Quelqu' un aurait-il un avis sur le sujet. A+ Ciocc

Bonjour Bishop_metz le system doit être sacrément controlé par Microsft car, j'ai essaye d'utiliser des CD de restauration d'un PC HP quasi équivalent qui a Media center et a peu près le même age, impossible de redémarrer Windows. LA version n'étaot pas la bonne. Je vais donc commander les CD des mon PC à HP en espérant que cela résolve mon Pb. Merci A+ Ciocc

Re, Mon PC a maintenant + 2 ans et à l'époque j'étais novice en informatique et ne savait même pas à quoi servait un CD de restauration (je ne dois être le seul). Je l'ai acheté à la FNAC mais le SAV informatique n'est pas des +sympa.. J'ai un Pb sur Pocket PC HP. Le clapet de fermeture du compartiment de la batterie est cassé et le Pocket est OUT car c'est le clapet qui fait le contact on/of. Entre le FNAC et HP, je n'ai aucun contact concret pour avoir une pièce de rechange et tout le monde se renvoi la balle. Le monde de l'informatique est endroit ou il faut se débrouiller seul ou bien à l'aide des Forums, au passage, merci Zebulon, sinon autant abandonner ce monde, ou bien il faut payer une fortune à chaque fois. Ciocc

Si je commande des CD de restauration, ais-je la garantie qu'ils seront effectivement reconnus par mon PC. Sinon, je tourne en rond. Bleuet, le HP Media Center qui m'a été fourni était sans les CD restauration. Merci HP............ Ciocc

sauf que j'ai eu le PC sans le CD de restauration OEM..... Maintenant, c'est quoi l'aternative je trouve un CD de restor compatible je rachète Windows XP je rachète un PC je rachète Microsft, oups je n'ai pas les moyens autres ????????????? Ciocc

Re, donc si comence à bien comprendre, il est impossbile de redémarrer un Pc avec un CD de restauration d'un autre PC, sachant que j'ai tjs le Windows d'origine sur mon PC. Ca sent l'arnaque. Je ne vais quand même pas acheter une deuxième fois windows pour un simple Pb de clé!!!!!!!!!! quelle est la soluce? Ciocc

Oui, j'ai un HP Media Center m7270.fr et j'avais un windows OEM d'origine. Ma première activiation n'a posé aucun pb Ciocc

Bonjour à tous, suite à un plantage et reformatage (voir des post précédents) à cause de Antivir, j'ai réinstallé mon ordi. Comme je n'avais pas les CD de restauration (quelle erreur), je m'en suis fait prêter d'autres. Toute la réinstallation c'est bien passe mais, maintenant le système me demande de donner ma cle d'activation windows. A ma grande surprise, elle n'est pas acceptée. je ne comprend pas pourquoi. Les CD que j'ai utilisés viennent d'un PC Fuji avec une license légale. Dans un premier temps j'ai suivi la procédure par Inetrnet et ensuite par téléphone. Comme cela ne fonctionnait tjs pas, j'ai eu une opératrice qui m'a indiqué que je devais utiliser les CD d'origine, que je n'ai pas. En utilisant un CD de restauration je n'ai pas l'impression de pirater car, j'avais bien windows avant. Donc, ou est le problème. Qlq aurait-iL déjà eu ce problème? Merci de votre aide. Ciocc

Re, ton premier lien est bien le DD externe dont je parle. Il est en ce moment à 89€ chez Darty. mon problème est que je n'ai pas trouvé de fiche Technique. Le disque WD 500 Go, j'y avait pensé mais, je n'ai pas vraiment besoin de 500 Go et il a un prix plus élevé. De plus j'ai vu sur les forums qu'il était bruyant et qu'il ne s'éteignait pas tout seul (il est vrai que je ne connais pas plus le Iomega). Comme j'ai trouvé quelques critiques défavorables sur le WD, je pencherais peut être à tord pour le Iomega. J'ai aussi vu sur les forums que certaines personne avaient des Pb pour que le PC accepte la config du WD!!!!!! Ciocc

Exact, le Iomega en question de 320 Go est un disque externe et non pas interne. Ciocc

Bonjour à tous, je pense investir dans un DD Iomega 360 Go à 89€. Y aurait-il parmis vous des commentaires bon/mauvais sur cet appareil qui parait, sur le papier, être un bon rapport qualité prix. Merci Ciocc

re, le problème est que pour le moment je n'ai plus accès à windows et que je suis bloqué soit à un écran noir, soit à l'écran d'acceuil pour le mode sans echec (démarrage puis F8). Avec mon ordi acheté neuf, je n'ai pas eu de CD de démarrage. L'ordi était près à l'emploi. Ciocc

re, il semblerait que Bagle soit transmis via Email. Sur ma boîte Email, je suis presque sûr (pas certain) de ne pas avoir reçu d'Email avec un fichier joint en .exe Maintenant, comme puis-je redémarrer l'ordi avec le peu de commande que j'ai. Seul la page de choix mode sans échec et autre est accessible. Ciocc

Bonjour à tous merci pour tous vos messages. Malheureuse je crois que j'ai fait une connerie hier soir. J'ai essayé de démarrer en mode sans echec par la touche F8, dans le but de supprimer antivir mais, je n'y suis pas arrivé. J'ai trouvé sur le net une autre procédure de Malekal qui se trouve là http://www.malekal.com/modesansechec.php en passant par msconfig et la suite SAFEBOOT ald BOOTLOG je crois que c'est là mon erreur. Je n'ai pas plus l'accès au mode sans echec mais l'ordi est incapable de revenir à la config normale. J'ai toujours accès à l'écran du menu de choix de démarrage en mode sans echec mais ensuite l'ordi essaye de démarrer normalement mais, il revient toujours à un écran noir. j'ai essayé les 3 types de mode sans échec, le VGA , la dernière bonne config, rien à faire Maintenant je me trouve bien dans la m... car, je n'ai même plus internet pour me dépanner. Je vient d'arriver au boulot ou là j'ai internet, mais seulement pendant les heures de travail. Il faut aussi savoir que j'ai installé antivir dans le but de faire un scan de mon PC, le scan Panda m'ayant trouvé 3 logiciels douteux. Comme AV j'ai McAfee depuis pas mal de temps et j'en suis satisfait mais, j'ai l'inpression que Antivir at McAfee ne font pas bon ménage. Est-ce la raison pour laquelle je n'avais pus accès au mode sans échec??? Merci de votre aide Ciocc

Bonjour à tous, je viens d'installer antivir afin de faire un scan de mon PC. Maintenant je veux le désinstaller mais, l'ordi plante et me renvoi à l'écran bleu. Comment faire pour désinstaller Antivir. En lisant +sieurs forums, j'ai l"impression que je ne suis pas seul mais, je n'ai pas trouvé de solution à mon pb. qui aurait une solution? Ciocc