goundroune

pas grand chose !! ...

vous pensez que c'est grave ? bonne journée merci

bonsoir a tous par 2 fois en éteignant mon PC, j'ai le message suivant : nsAppShell de plus mon PC est fortement ralentit ; pas au redémarrage ; seulement quelques temps après merci de m'aider voici mon rapport Hijackthis : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:59:01, on 15/12/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe C:\Program Files\Avira\AntiVir Desktop\avmailc.exe C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE C:\Program Files\Mozilla Firefox\firefox.exe F:\Téléchargements\HiJackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Buyertools - {7C7A8947-5935-4430-AC0E-E7D04697414E} - C:\PROGRA~1\BUYERT~1\IEBUTT~1.DLL O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Buyertools Reminder - {27914077-B4D6-4A0E-9763-76B6E9DD9A81} - C:\Program Files\Buyertools Reminder\ReminderIE.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{A51D6A64-911F-4398-B910-163FFFE80ED1}: NameServer = 192.168.1.254 O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 5232 bytes

merci pour vos reponses je vais de suite sur "crucial" et je vous post le scan oui je suis bien sous XP 32 cela va servir a rien meme pas un petit peu

bonjour a tous j'aurais besoin de vos conseils pour acheter des barettes memoire ; 2 fois 1 Go je possede un scaleo H AMD athlon 64 X2 dual core 4200 + 2.21 GHz - 2.00Go RAM sous XP SP3 sur la Carte mere je possede 4 emplacements ( 2 bleu et 2 noir ) les 2 bleu etant deja pris je souhaiterais savoir quoi acheter comme barette ? et si ma C M va supporter cela ? je n'y connais pas grand chose, et je ne voudrais pas qu'elles me restent sur les bras merci

merci Jeanbi et Gibé ca y est j'ai installé mandriva ( formatage SATA 1 ; 2 partitions ; 1 pour XP et 2 pour mandriva ) j'ai firefox et ma sauvegarde profil effectué avec FEBE mais FF me dit : " impossible car profil actif " comment puis je faire ? et comment acceder a la console ? j'ai egalement sauvegardé des messages outlook 2007 que je voudrais remettre dans evolution. est ce possible ? je debute vraiment sous linux ... merci

desolé mais tout compris

bonjour à tous, apres bien des soucis sous XP pro ( redemarrage, plantage, ecran bleu, ... ) ; je me decide a passer sous linux. mais je n'y connais pas grand chose. je pense installer : Mandriva Linux One 2009 - GNOME pour l'instant, je tourne sous XP sous C: (150Go) ; avec "Mes documents" sous D: (150Go) ce que je voudrais, c'est tourné sous linux afin de savoir si tous mes logiciels et imprimante sont compatible ; et a terme supprimer XP comment egalement sauvegarder les parametres et favoris Firefox ? merci pour votre aide

Re-belotte ce matin ecran bleu : ""Page_Fault_in_nonpaged_area stop :0x00000050 ( oxFFFFFFFF , 0x00000008 , 0xFFFFFFFF , 0x00000000 ) " j'espere que cela pourra aider merci

Merci Pear c'est fait ... le nettoyage

merci Pear pour ton aide "Kernel Check ..." supprimer avec Ccleaner ; mais il revient de temps en temps Redemarrage : ce w-e message erreur ecran bleu "vidage memoire ..." redemarrage et plus rien la prochaine fois je note l'erreur redémarrage automatique : n'est pas cocher je vais depoussierer la tour je peux supprimer des choses avec Hijack ?? merci

bonjour à tous, depuis quelques temps je vois apparaitre "Kernel Check ..." au demarrage de mon PC malgres la suppression il revient à la charge regulierement. y a t il un moyen de l'eradiquer ? et ensuite je trouve que mon PC redemarre tout seul et se trouve etre lent depuis la semaine derniere ... pouvez vous m'aider ? merci voici un log hijack : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:54:48, on 16/03/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\mantispm.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Goundroune\Bureau\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: Buyertools - {7C7A8947-5935-4430-AC0E-E7D04697414E} - C:\PROGRA~1\BUYERT~1\IEBUTT~1.DLL O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Buyertools Reminder - {27914077-B4D6-4A0E-9763-76B6E9DD9A81} - C:\Program Files\Buyertools Reminder\ReminderIE.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{1A14D4DA-A78F-41E5-9F76-0F8D8572B77C}: NameServer = 212.99.2.8,195.167.224.150 O17 - HKLM\System\CS1\Services\Tcpip\..\{1A14D4DA-A78F-41E5-9F76-0F8D8572B77C}: NameServer = 212.99.2.8,195.167.224.150 O17 - HKLM\System\CS3\Services\Tcpip\..\{1A14D4DA-A78F-41E5-9F76-0F8D8572B77C}: NameServer = 212.99.2.8,195.167.224.150 O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 5839 bytes

siouplait un p'tit coup de pouce merci beaucoup

bonjour, j'ai recu un fichier sur msn que ZA pro a stoppé ; par contre depuis je suis en deconnexion et reconnexion intempestive sur msn. voici un log hijack ; pouvez me dire si qq cose cloche de ce coté là ; merci beaucoup Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:38:59, on 04/09/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\PopTray\PopTray.exe C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\mantispm.exe C:\PROGRA~1\BUYERT~1\Reminder.exe C:\PROGRA~1\BUYERT~1\REMIND~1.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE C:\PROGRA~1\BUYERT~1\REMIND~1.EXE C:\PROGRA~1\BUYERT~1\REMIND~1.EXE C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe C:\WINDOWS\explorer.exe C:\Documents and Settings\Goundroune\Bureau\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: Buyertools - {7C7A8947-5935-4430-AC0E-E7D04697414E} - C:\PROGRA~1\BUYERT~1\IEBUTT~1.DLL O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: PopTray.lnk = C:\Program Files\PopTray\PopTray.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Buyertools Reminder - {27914077-B4D6-4A0E-9763-76B6E9DD9A81} - C:\Program Files\Buyertools Reminder\ReminderIE.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 5400 bytes

ca y est j'ai tout fait en plus, j'ai desactivé l'antivirus de ZA pro et reactivé celui de antivir.

effectivement il m'a detecté le faux positif voila pour diaghelp : merci DiagHelp version v1.4 - http://www.malekal.com excute le 26/03/2008 à 13:43:49,59 Liste des derniers fichies modifies/crees dans windir\system32 et prefetch C:\WINDOWS\prefetch\CHCP.COM-17EDBDC9.pf -->26/03/2008 13:43:47 C:\WINDOWS\prefetch\NOTEPAD.EXE-2F2D61E1.pf -->26/03/2008 13:39:23 C:\WINDOWS\prefetch\AVCENTER.EXE-05983540.pf -->26/03/2008 13:38:23 C:\WINDOWS\prefetch\MMC.EXE-4F1439D9.pf -->26/03/2008 13:35:45 C:\WINDOWS\prefetch\VERCLSID.EXE-28F52AD2.pf -->26/03/2008 13:35:36 C:\WINDOWS\prefetch\OUTLOOK.EXE-2A55A16A.pf -->26/03/2008 13:33:21 C:\WINDOWS\prefetch\ACRORD32.EXE-01080F7C.pf -->26/03/2008 13:27:33 C:\WINDOWS\prefetch\ACRORD32INFO.EXE-1A3A138E.pf -->26/03/2008 13:27:30 C:\WINDOWS\prefetch\IMAPI.EXE-201490BB.pf -->26/03/2008 13:27:12 C:\WINDOWS\prefetch\RUNDLL32.EXE-6E8D4657.pf -->26/03/2008 13:27:06 C:\WINDOWS\System32\drivers\fidbox.dat -->26/03/2008 13:43:08 C:\WINDOWS\System32\drivers\fidbox.idx -->26/03/2008 13:00:41 C:\WINDOWS\System32\drivers\avipbb.sys -->16/03/2008 19:41:13 C:\WINDOWS\System32\drivers\PalmUSBD.sys -->26/02/2008 18:59:56 C:\WINDOWS\System32\drivers\timntr.sys -->23/12/2007 19:53:29 C:\WINDOWS\System32\drivers\tifsfilt.sys -->23/12/2007 19:53:29 C:\WINDOWS\System32\drivers\snapman.sys -->23/12/2007 19:53:26 C:\WINDOWS\System32\wpa.dbl -->26/03/2008 13:02:41 C:\WINDOWS\System32\vsconfig.xml -->26/03/2008 13:01:43 C:\WINDOWS\System32\zllictbl.dat -->16/03/2008 12:11:58 C:\WINDOWS\System32\MRT.exe -->05/03/2008 17:30:54 C:\WINDOWS\System32\FNTCACHE.DAT -->11/01/2008 20:31:58 C:\WINDOWS\System32\pngfilt.dll -->11/01/2008 06:36:55 C:\WINDOWS\System32\PerfStringBackup.INI -->22/12/2007 21:13:14 C:\WINDOWS\System32\perfh00C.dat -->22/12/2007 21:13:14 C:\WINDOWS\System32\perfh009.dat -->22/12/2007 21:13:14 C:\WINDOWS\System32\perfc00C.dat -->22/12/2007 21:13:14 C:\WINDOWS\System32\perfc009.dat -->22/12/2007 21:13:14 C:\WINDOWS\System32\nscompat.tlb -->22/12/2007 20:47:37 C:\WINDOWS\System32\amcompat.tlb -->22/12/2007 20:47:37 C:\WINDOWS\System32\TZLog.log -->22/12/2007 17:50:03 C:\WINDOWS\System32\h323log.txt -->22/12/2007 16:37:23 C:\WINDOWS\System32\$winnt$.inf -->22/12/2007 15:45:46 C:\WINDOWS\System32\jupdate-1.5.0_06-b05.log -->22/12/2007 15:44:04 C:\WINDOWS\System32\CONFIG.NT -->22/12/2007 15:41:06 C:\WINDOWS\System32\WindowsLogon.manifest -->22/12/2007 15:40:21 C:\WINDOWS\System32\logonui.exe.manifest -->22/12/2007 15:40:21 C:\WINDOWS\System32\wuaucpl.cpl.manifest -->22/12/2007 15:40:16 C:\WINDOWS\System32\sapi.cpl.manifest -->22/12/2007 15:40:16 C:\WINDOWS\System32\nwc.cpl.manifest -->22/12/2007 15:40:16 C:\WINDOWS\System32\ncpa.cpl.manifest -->22/12/2007 15:40:16 C:\WINDOWS\System32\cdplayer.exe.manifest -->22/12/2007 15:40:16 C:\WINDOWS\wiadebug.log -->26/03/2008 13:02:14 C:\WINDOWS\wiaservc.log -->26/03/2008 13:02:10 C:\WINDOWS\bootstat.dat -->26/03/2008 13:01:15 C:\WINDOWS\WindowsUpdate.log -->26/03/2008 13:00:24 C:\WINDOWS\SchedLgU.Txt -->26/03/2008 13:00:21 C:\WINDOWS\NeroDigital.ini -->25/03/2008 12:54:04 C:\WINDOWS\PhotoSnapViewer.INI -->27/02/2008 08:22:57 C:\WINDOWS\PalmDevC.dll -->26/02/2008 18:59:55 C:\WINDOWS\QuickInstall.INI -->26/02/2008 18:33:09 C:\WINDOWS\mozver.dat -->17/02/2008 13:01:07 C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe -->12/02/2008 18:58:21 C:\WINDOWS\ST6UNST.EXE -->04/01/2008 21:31:43 C:\WINDOWS\Setup1.exe -->04/01/2008 21:31:43 C:\WINDOWS\ST6UNST.000 -->04/01/2008 21:14:11 C:\WINDOWS\win.ini -->22/12/2007 20:47:33 winlogon.exe Verified: Signed svchost.exe Verified: Signed ws2_32.dll Verified: Signed user32.dll Verified: Signed tcpip.sys Verified: Signed ndis.sys Verified: Signed null.sys Verified: Signed ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ explorer.exe pid: 1792 Command line: C:\WINDOWS\Explorer.EXE Base Size Version Path 0x44080000 0xcf000 7.00.6000.16608 C:\WINDOWS\system32\WININET.dll 0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll 0x43e00000 0x45000 7.00.6000.16608 C:\WINDOWS\system32\iertutil.dll 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x44160000 0x127000 7.00.6000.16608 C:\WINDOWS\system32\urlmon.dll 0x44360000 0x5cd000 7.00.6000.16608 C:\WINDOWS\system32\ieframe.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x442b0000 0x3c000 7.00.6000.16608 C:\WINDOWS\system32\webcheck.dll 0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll 0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll 0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll 0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll 0x60510000 0x19000 2.00.50727.1433 c:\WINDOWS\system32\dfshim.dll 0x79000000 0x46000 2.00.50727.1433 c:\WINDOWS\system32\mscoree.dll 0x78130000 0x9b000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll 0x79e70000 0x58f000 2.00.50727.1433 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll 0x24000000 0x7000 5.00.0006.8903 C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\mlfhook.dll 0x10000000 0x5b000 8.01.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll 0x01be0000 0x4c000 8.00.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA 0x00c20000 0x14000 2.02.0006.0000 C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll 0x7c250000 0x102000 7.10.3077.0000 C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL 0x015c0000 0x56000 7.10.3052.0004 C:\Program Files\Nero\Nero 7\Nero BackItUp\MSVCR71.dll 0x7c3a0000 0x7b000 7.10.3077.0000 C:\Program Files\Nero\Nero 7\Nero BackItUp\MSVCP71.dll 0x5d360000 0xf000 7.10.6030.0000 C:\WINDOWS\system32\MFC71FRA.DLL 0x00c40000 0xb000 7.00.0462.0000 C:\Program Files\Zone Labs\ZoneAlarm\zlavscan.dll 0x00c50000 0x4000 5.03.0017.0000 C:\Program Files\Zone Labs\ZoneAlarm\zlavscan_Loc040c.dll 0x014e0000 0x3f000 8.00.0000.0001 C:\Program Files\ScanSoft\PDF Create 4\bin\DirectShellExt.dll 0x01630000 0x2e000 C:\Program Files\WinRAR\rarext.dll 0x01660000 0x11000 7.00.0000.0010 C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll 0x012c0000 0x10000 8.00.0000.0456 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll 0x60980000 0x7000 3.01.4000.1823 C:\WINDOWS\system32\MSISIP.DLL 0x74cb0000 0x10000 5.06.0000.8825 C:\WINDOWS\system32\wshext.dll 0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL 0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL 0x02660000 0xe000 5.06.0000.8515 C:\WINDOWS\system32\wshFR.DLL ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ winlogon.exe pid: 960 Command line: winlogon.exe Base Size Version Path 0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x10000000 0x11000 6.14.0010.4131 C:\WINDOWS\system32\Ati2evxx.dll 0x01ef0000 0x65000 1.05.0532.0000 C:\WINDOWS\system32\WgaLogon.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 685D-A3D7 Répertoire de C:\WINDOWS\system32 05/08/2004 13:00 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 128 616 374 272 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 685D-A3D7 Répertoire de C:\WINDOWS\Downloaded Program Files 15/03/2008 17:14 <REP> . 15/03/2008 17:14 <REP> .. 22/12/2007 15:40 65 desktop.ini 25/07/2002 17:13 24 576 dwusplay.dll 25/07/2002 17:13 196 608 dwusplay.exe 16/02/2005 16:15 401 408 isusweb.dll 4 fichier(s) 622 657 octets Total des fichiers listés : 4 fichier(s) 622 657 octets 2 Rép(s) 128 616 374 272 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 Export de la clef SharedTaskScheduler exports des policies Export des clefs sensibles.. Rechercher adresses sensibles dans le fichier HOSTS... catchme 0.3.1319 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-03-26 13:44:51 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden services & system hive ... IPC error: 2 Le fichier spécifié est introuvable. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:29c7ef66 "s2"=dword:0698362f "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:11,c3,04,24,0e,9a,5b,04,a2,88,26,1a,fe,ca,ea,cf,fa,b3,a1,0e,f2,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,47,a3,a1,74,9c,17,2a,db,1b,a1,a3,6d,d9,28,83,aa,19,.. "khjeh"=hex:99,80,74,01,fd,0c,8b,1d,5b,8c,97,6c,63,2d,2f,2c,ee,4d,db,fb,75,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:eb,e2,43,3f,ab,1e,53,fe,18,24,eb,90,01,6b,f6,2e,af,59,5e,e2,e7,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:11,c3,04,24,0e,9a,5b,04,a2,88,26,1a,fe,ca,ea,cf,fa,b3,a1,0e,f2,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001] "a0"=hex:20,01,00,00,47,a3,a1,74,9c,17,2a,db,1b,a1,a3,6d,d9,28,83,aa,19,.. "khjeh"=hex:99,80,74,01,fd,0c,8b,1d,5b,8c,97,6c,63,2d,2f,2c,ee,4d,db,fb,75,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40] "khjeh"=hex:eb,e2,43,3f,ab,1e,53,fe,18,24,eb,90,01,6b,f6,2e,af,59,5e,e2,e7,.. scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden services: 0 hidden files: 0 KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Process list by traversal of KiWaitListHead 4 - System 392 - ScanningProcess 516 - cmd.exe 592 - avguard.exe 932 - csrss.exe 960 - winlogon.exe 1008 - services.exe 1020 - lsass.exe 1216 - svchost.exe 1292 - svchost.exe 1400 - svchost.exe 1500 - vsmon.exe 1556 - sched.exe 1612 - ScanningProcess 1692 - svchost.exe 1792 - explorer.exe 2420 - alg.exe 2472 - zlclient.exe 2612 - avgnt.exe 2836 - Reminder.exe 2848 - PopTray.exe 3260 - OUTLOOK.EXE 3332 - mantispm.exe 3824 - firefox.exe -268376038 - è --[Hidden]-- Total number of processes = 25 NOTE: Under WinXP, this will not show all processes. KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Driver/Module list by traversal of PsLoadedModuleList 804D7000 - \WINDOWS\system32\ntkrnlpa.exe 806E2000 - \WINDOWS\system32\hal.dll BADA8000 - \WINDOWS\system32\KDCOM.DLL BACB8000 - \WINDOWS\system32\BOOTVID.dll BA6D0000 - sptd.sys BADAA000 - \WINDOWS\System32\Drivers\WMILIB.SYS BA6B8000 - \WINDOWS\System32\Drivers\SCSIPORT.SYS BA689000 - ACPI.sys BA678000 - pci.sys BA8A8000 - ohci1394.sys BA8B8000 - \WINDOWS\system32\DRIVERS\1394BUS.SYS BA8C8000 - isapnp.sys BAE70000 - pciide.sys BAB28000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS BA8D8000 - MountMgr.sys BA659000 - ftdisk.sys BAB30000 - PartMgr.sys BA8E8000 - VolSnap.sys BA641000 - atapi.sys BA62A000 - nvatabus.sys BA8F8000 - disk.sys BA908000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS BA60A000 - fltMgr.sys BA5F8000 - sr.sys BA5E1000 - KSecDD.sys BA554000 - Ntfs.sys BA527000 - NDIS.sys BA4C6000 - timntr.sys BA4B2000 - srescan.sys BA496000 - snapman.sys BA47C000 - Mup.sys BA968000 - \SystemRoot\system32\DRIVERS\nic1394.sys BAA38000 - \SystemRoot\system32\DRIVERS\AmdK8.sys BAC30000 - \SystemRoot\system32\DRIVERS\usbohci.sys BA383000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS BAC60000 - \SystemRoot\system32\DRIVERS\usbehci.sys B9FBC000 - \SystemRoot\system32\drivers\ALCXWDM.SYS B9F9A000 - \SystemRoot\system32\drivers\portcls.sys BAA48000 - \SystemRoot\system32\drivers\drmk.sys B9F77000 - \SystemRoot\system32\drivers\ks.sys BAA58000 - \SystemRoot\system32\DRIVERS\imapi.sys BAA68000 - \SystemRoot\system32\DRIVERS\cdrom.sys BAA78000 - \SystemRoot\system32\DRIVERS\redbook.sys BA40C000 - \SystemRoot\system32\DRIVERS\nvnetbus.sys B9F05000 - \SystemRoot\system32\DRIVERS\NVNRM.SYS B9ECE000 - \SystemRoot\system32\DRIVERS\NVSNPU.SYS B9D4B000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys B9D37000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS B9CED000 - \SystemRoot\System32\Drivers\apol3jg5.SYS B9CDC000 - \SystemRoot\system32\DRIVERS\serial.sys BA428000 - \SystemRoot\system32\DRIVERS\serenum.sys B9CC8000 - \SystemRoot\system32\DRIVERS\parport.sys BAF49000 - \SystemRoot\system32\DRIVERS\audstub.sys BAA88000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys BA41C000 - \SystemRoot\system32\DRIVERS\ndistapi.sys B9CB1000 - \SystemRoot\system32\DRIVERS\ndiswan.sys BAA98000 - \SystemRoot\system32\DRIVERS\raspppoe.sys BAAA8000 - \SystemRoot\system32\DRIVERS\raspptp.sys BAB70000 - \SystemRoot\system32\DRIVERS\TDI.SYS B9CA0000 - \SystemRoot\system32\DRIVERS\psched.sys BAAB8000 - \SystemRoot\system32\DRIVERS\msgpc.sys BAB98000 - \SystemRoot\system32\DRIVERS\ptilink.sys BABA8000 - \SystemRoot\system32\DRIVERS\raspti.sys BAAC8000 - \SystemRoot\system32\DRIVERS\termdd.sys BABC0000 - \SystemRoot\system32\DRIVERS\kbdclass.sys BABD0000 - \SystemRoot\system32\DRIVERS\mouclass.sys BADC2000 - \SystemRoot\system32\DRIVERS\swenum.sys B9C6C000 - \SystemRoot\system32\DRIVERS\update.sys B9F5B000 - \SystemRoot\system32\DRIVERS\mssmbios.sys BAAD8000 - \SystemRoot\system32\DRIVERS\usbhub.sys BADC8000 - \SystemRoot\system32\DRIVERS\USBD.SYS BA9A8000 - \SystemRoot\System32\Drivers\NDProxy.SYS B9C0C000 - \SystemRoot\system32\DRIVERS\NVENETFD.sys B5A8D000 - \SystemRoot\system32\DRIVERS\klif.sys BADD8000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS BAFD5000 - \SystemRoot\System32\Drivers\Null.SYS BADDC000 - \SystemRoot\System32\Drivers\Beep.SYS BAB90000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS BABB0000 - \SystemRoot\System32\drivers\vga.sys BADE2000 - \SystemRoot\System32\Drivers\mnmdd.SYS BADE6000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys BABC8000 - \SystemRoot\System32\Drivers\Msfs.SYS BABE0000 - \SystemRoot\system32\DRIVERS\usbccgp.sys BABF0000 - \SystemRoot\System32\Drivers\Npfs.SYS B9F6B000 - \SystemRoot\system32\DRIVERS\rasacd.sys B5A32000 - \SystemRoot\system32\DRIVERS\ipsec.sys B59D9000 - \SystemRoot\system32\DRIVERS\tcpip.sys B59B1000 - \SystemRoot\system32\DRIVERS\netbt.sys B5990000 - \SystemRoot\system32\DRIVERS\ipnat.sys BAAF8000 - \SystemRoot\system32\DRIVERS\wanarp.sys B5930000 - \SystemRoot\System32\vsdatant.sys BAB08000 - \SystemRoot\system32\DRIVERS\arp1394.sys B590E000 - \SystemRoot\System32\drivers\afd.sys BA998000 - \SystemRoot\system32\DRIVERS\netbios.sys BAB78000 - \SystemRoot\system32\DRIVERS\ssmdrv.sys B5843000 - \SystemRoot\system32\DRIVERS\rdbss.sys B57D4000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys BA9C8000 - \SystemRoot\System32\Drivers\Fips.SYS BA9D8000 - \SystemRoot\system32\DRIVERS\avipbb.sys BADF6000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys BAC28000 - \SystemRoot\system32\DRIVERS\USBSTOR.SYS B5A69000 - \SystemRoot\system32\DRIVERS\hidusb.sys BA9F8000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS B9B57000 - \SystemRoot\system32\DRIVERS\kbdhid.sys BA438000 - \SystemRoot\system32\DRIVERS\mouhid.sys B9C3C000 - \SystemRoot\System32\Drivers\Cdfs.SYS B5745000 - \SystemRoot\System32\Drivers\dump_nvatabus.sys BAE22000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS BF800000 - \SystemRoot\System32\win32k.sys B579C000 - \SystemRoot\System32\drivers\Dxapi.sys BABA0000 - \SystemRoot\System32\watchdog.sys BF9C3000 - \SystemRoot\System32\drivers\dxg.sys BAEF7000 - \SystemRoot\System32\drivers\dxgthk.sys BF9D5000 - \SystemRoot\System32\ati2dvag.dll BFA18000 - \SystemRoot\System32\ati2cqag.dll BFA57000 - \SystemRoot\System32\atikvmag.dll BFA8D000 - \SystemRoot\System32\ati3duag.dll BFD18000 - \SystemRoot\System32\ativvaxx.dll BFFA0000 - \SystemRoot\System32\ATMFD.DLL BABF8000 - \SystemRoot\system32\DRIVERS\tifsfilt.sys B35E9000 - \SystemRoot\system32\DRIVERS\ndisuio.sys B3140000 - \SystemRoot\system32\drivers\wdmaud.sys B3435000 - \SystemRoot\system32\drivers\sysaudio.sys B2FFE000 - \SystemRoot\system32\DRIVERS\mrxdav.sys B2FEB000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys BADD2000 - \SystemRoot\System32\Drivers\ParVdm.SYS B2E31000 - \SystemRoot\system32\DRIVERS\srv.sys B21A9000 - \SystemRoot\system32\drivers\kmixer.sys BAFBC000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys Total number of drivers = 129 Liste des programmes installes 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) 2007 Microsoft Office Suite Service Pack 1 (SP1) Adobe Reader 8.1.2 - Français Archiveur WinRAR ArcSoft PhotoStudio 5.5 Assistant Avery 3.1 ATI Display Driver Avira AntiVir PersonalEdition Classic Buyertools Reminder Canon MP Navigator 2.0 Canon MP800 CCleaner (remove only) CD-LabelPrint Correctif pour Windows XP (KB896256) Correctif pour Windows XP (KB910728) Correctif Windows XP - KB873339 Correctif Windows XP - KB883667 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890175 Correctif Windows XP - KB890859 Correctif Windows XP - KB891781 Documents To Go GestPoi.Dat 1.40 Beta1 High Definition Audio - KB888111 HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.0 (KB932471) J2SE Runtime Environment 5.0 Update 6 Lecteur Windows Media 11 Logitech Desktop Messenger Logitech Harmony Remote Software 7 Logitech Harmony Remote Software 7 Memor32 Savegame Manager 1.3 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Language Pack - FRA Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 3.0 French Language Pack Microsoft .NET Framework 3.0 Service Pack 1 Microsoft Office Access MUI (French) 2007 Microsoft Office Excel MUI (French) 2007 Microsoft Office InfoPath MUI (French) 2007 Microsoft Office Language Pack 2007 Service Pack 1 (SP1) Microsoft Office Outlook MUI (French) 2007 Microsoft Office PowerPoint MUI (French) 2007 Microsoft Office Professional Plus 2007 Microsoft Office Professional Plus 2007 Microsoft Office Proof (Arabic) 2007 Microsoft Office Proof (Dutch) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (German) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (French) 2007 Microsoft Office Publisher MUI (French) 2007 Microsoft Office Shared MUI (French) 2007 Microsoft Office Word MUI (French) 2007 Microsoft Software Update for Web Folders (French) 12 Microsoft Visual C++ 2005 Redistributable Mise à jour de sécurité pour Lecteur Windows Media 9 (KB911565) Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB896688) Mise à jour de sécurité pour Windows XP (KB899588) Mise à jour de sécurité pour Windows XP (KB899589) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB923789) Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0 Mozilla Firefox (2.0.0.12) MSXML 4.0 SP2 (KB936181) MSXML 6.0 Parser (KB933579) Nero 7 Premium NVIDIA Drivers palmOne PopTray 3.20 Realtek AC'97 Audio Remote Control USB Driver ScanSoft PDF Create! 4 Seagate DiscWizard Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Security Update for Excel 2007 (KB946974) Security Update for Office 2007 (KB947801) Security Update for Outlook 2007 (KB946983) TomTom HOME TomTom HOME Unlocker 1.8.5 Update for Outlook 2007 Junk Email Filter (kb947945) VideoLAN VLC media player 0.8.6d WebFldrs XP Windows Communication Foundation Language Pack - FRA Windows Genuine Advantage Notifications (KB905474) Windows Genuine Advantage Validation Tool (KB892130) Windows Genuine Advantage Validation Tool (KB892130) Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows Media Format 11 runtime Windows Messenger 5.1 MUI Pack Windows Presentation Foundation Windows Presentation Foundation Language Pack (FRA) Windows Workflow Foundation FR Language Pack XML Paper Specification Shared Components Pack 1.0 ZoneAlarm Security Suite Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 685D-A3D7 Répertoire de C:\Program Files 24/03/2008 17:49 <REP> . 24/03/2008 17:49 <REP> .. 10/02/2008 14:14 <REP> Adobe 13/03/2008 21:03 <REP> Agnitum 22/12/2007 16:51 <REP> ArcSoft 16/03/2008 13:12 <REP> Avira 26/03/2008 13:36 <REP> Buyertools Reminder 22/12/2007 16:51 <REP> Canon 26/03/2008 13:14 <REP> CCleaner 22/12/2007 15:39 <REP> ComPlus Applications 15/03/2008 17:13 <REP> DAEMON Tools 26/02/2008 19:18 <REP> Fichiers communs 15/03/2008 17:13 <REP> GestPoi.Dat 11/01/2008 20:14 <REP> Grisoft 15/03/2008 17:13 <REP> Internet Explorer 22/12/2007 15:44 <REP> Java 12/02/2008 18:58 <REP> Logitech 22/03/2008 21:24 <REP> Memor32 26/02/2008 18:47 <REP> Messenger 15/03/2008 17:13 <REP> Microsoft CAPICOM 2.1.0.2 22/12/2007 15:44 <REP> microsoft frontpage 22/12/2007 17:31 <REP> Microsoft Office 22/12/2007 17:30 <REP> Microsoft Visual Studio 15/03/2008 17:13 <REP> Microsoft Works 22/12/2007 17:30 <REP> Microsoft.NET 15/03/2008 17:13 <REP> Movie Maker 26/03/2008 13:12 <REP> Mozilla Firefox 22/12/2007 20:51 <REP> MSBuild 22/12/2007 15:38 <REP> MSN 22/12/2007 15:38 <REP> MSN Gaming Zone 24/12/2007 08:09 <REP> MSXML 4.0 23/12/2007 11:12 <REP> MSXML 6.0 22/12/2007 17:20 <REP> Nero 15/03/2008 17:13 <REP> NetMeeting 15/03/2008 17:13 <REP> Outlook Express 15/03/2008 17:13 <REP> palmOne 15/03/2008 17:13 <REP> PopTray 22/12/2007 20:48 <REP> Reference Assemblies 13/01/2008 19:24 <REP> ScanSoft 23/12/2007 19:53 <REP> Seagate 15/03/2008 17:13 <REP> Services en ligne 16/01/2008 12:46 <REP> SonicWallES 04/01/2008 20:35 <REP> TNT 09/01/2008 17:09 <REP> TomTom DesktopSuite 15/03/2008 17:13 <REP> TomTom HOME 2 15/03/2008 14:43 <REP> Trend Micro 15/03/2008 17:13 <REP> Unlocker 22/12/2007 21:13 <REP> VideoLAN 15/03/2008 17:13 <REP> Windows Media Connect 2 15/03/2008 17:13 <REP> Windows Media Player 15/03/2008 17:13 <REP> Windows NT 15/03/2008 17:13 <REP> winhiip 15/03/2008 17:13 <REP> WinRAR 22/12/2007 15:44 <REP> xerox 15/03/2008 19:52 <REP> ZebProtect 22/12/2007 17:32 <REP> Zone Labs 0 fichier(s) 0 octets 57 Rép(s) 128 606 461 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 685D-A3D7 Répertoire de C:\Program Files\fichiers communs 26/02/2008 19:18 <REP> . 26/02/2008 19:18 <REP> .. 10/02/2008 14:15 <REP> Adobe 22/12/2007 17:22 <REP> Ahead 15/03/2008 17:13 <REP> DataViz 15/03/2008 17:13 <REP> DESIGNER 12/02/2008 18:58 <REP> InstallShield 22/12/2007 15:43 <REP> Java 23/12/2007 18:26 <REP> Microsoft Shared 22/12/2007 15:39 <REP> MSSoap 22/12/2007 16:20 <REP> ODBC 15/03/2008 17:13 <REP> Remote Control Software Common 12/02/2008 18:58 <REP> Remote Control USB Driver 23/12/2007 18:31 <REP> ScanSoft Shared 23/12/2007 19:53 <REP> Seagate 15/03/2008 17:13 <REP> Services 22/12/2007 16:20 <REP> SpeechEngines 15/03/2008 17:13 <REP> System 0 fichier(s) 0 octets 18 Rép(s) 128 606 461 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 685D-A3D7 Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 15/03/2008 17:13 <REP> . 15/03/2008 17:13 <REP> .. 15/03/2008 17:13 <REP> 1036 28/08/2007 23:55 973 168 MSONSEXT.DLL 26/10/2006 20:12 40 256 MSOSV.DLL 03/06/1999 12:09 122 937 MSOWS409.DLL 07/03/2001 07:00 127 033 MSOWS40c.DLL 4 fichier(s) 1 263 394 octets 3 Rép(s) 128 606 457 856 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 685D-A3D7 Répertoire de C:\ c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\AZWizard.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{EB7A2041-6A16-4BAC-8079-43B985673C2C}\ARPPRODUCTICON.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\ARPPRODUCTICON.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut1.4DA64122_6F1D_4317_BC6A_2B3299881D1B.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut1_45BA714564B04B5DBDC240E20FCDC6DC.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut2.4DA64122_6F1D_4317_BC6A_2B3299881D1B.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut3.4DA64122_6F1D_4317_BC6A_2B3299881D1B.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut4.4DA64122_6F1D_4317_BC6A_2B3299881D1B.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut5.4DA64122_6F1D_4317_BC6A_2B3299881D1B.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut6.4DA64122_6F1D_4317_BC6A_2B3299881D1B.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\NewShortcut6_45BA714564B04B5DBDC240E20FCDC6DC.exe c:\Documents and Settings\Goundroune\Application Data\Microsoft\Installer\{FF24F097-D090-41D2-8E9C-BAFEBBFD938C}\PalmDesktopShortcut.exe c:\Documents and Settings\Goundroune\Bureau\HijackThis.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\catchme.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\diff.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\find2.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\grep.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\gzip.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\KProcCheck.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\LFiles.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\LISTDLLS.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\md5sums.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\pslist.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\sigcheck.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\streams.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\swreg.exe c:\Documents and Settings\Goundroune\Bureau\DiagHelp\tar.exe c:\Documents and Settings\Goundroune\Local Settings\Apps\2.0\3GP805B2.GVW\RZDL18MN.T85\tomt..tion_ef95ea7f0b7b0703_0001.0000_f059d4568db5e334\TomTomHeavenXplorer.exe c:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\FAILSAFE\avewin32.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0407\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0407\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0407\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0409\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0409\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0409\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\040c\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\040c\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\040c\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0410\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0410\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0410\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0413\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0413\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0413\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0415\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0415\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0415\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0419\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0419\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0419\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0816\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0816\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0816\CNMur7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0c0a\CNMlr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0c0a\CNMsr7M.dll c:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon MP800 Series Printer\LanguageModules\0c0a\CNMur7M.dll c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\AveryOAd.dll c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\AvWizRes.dll c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\AVWNoteI.dll c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\EnvBCRes.dll c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\LFCMP11n.DLL c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\LTDIS11n.dll c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\ltfil11n.DLL c:\Documents and Settings\Goundroune\Application Data\Avery Assistant 3.1\ltkrn11n.dll c:\Documents and Settings\Goundroune\Application Data\Mozilla\Firefox\Profiles\9faulp9x.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll c:\Documents and Settings\Goundroune\Application Data\Mozilla\Firefox\Profiles\9faulp9x.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll c:\Documents and Settings\Goundroune\Application Data\Mozilla\Firefox\Profiles\9faulp9x.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayAccessService.dll c:\Documents and Settings\Goundroune\Application Data\Mozilla\Firefox\Profiles\9faulp9x.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayFormSubmitObserver.dll c:\Documents and Settings\Goundroune\Application Data\Mozilla\Firefox\Profiles\9faulp9x.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}\plugins\npietab.dll ****** Fin du rapport DiagHelp Veuillez svp envoyer le fichier C:\upload_moi_LOULOU-EA486797.tar.gz a l'adresse http://upload.malekal.com

merci de m'apporter votre aide il en detecte un dans "restore" et l'autre dans "ccleaner" voila pour antivir : (au passage je n'est plus l'icone dans barre taches de antivir, mais au vue des dires sur le forum ce n'est pas grave ...) AntiVir PersonalEdition Classic Report file date: mercredi 26 mars 2008 06:00 Scanning for 1165923 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: SYSTEM Computer name: LOULOU-EA486797 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15 ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 07/03/2008 18:41:12 ANTIVIR2.VDF : 7.0.3.62 337408 Bytes 21/03/2008 18:40:36 ANTIVIR3.VDF : 7.0.3.73 70656 Bytes 25/03/2008 18:41:19 AVEWIN32.DLL : 7.6.0.75 3334656 Bytes 18/03/2008 18:41:50 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.6.0.3 360488 Bytes 16/03/2008 18:41:13 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: E:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: on Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: medium Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: mercredi 26 mars 2008 06:00 Starting search for hidden objects. '35407' objects were checked, '0' hidden objects were found. The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'OUTLOOK.EXE' - '1' Module(s) have been scanned Scan process 'ScanningProcess.exe' - '0' Module(s) have been scanned Scan process 'ScanningProcess.exe' - '0' Module(s) have been scanned Scan process 'mantispm.exe' - '1' Module(s) have been scanned Scan process 'PopTray.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'zlclient.exe' - '0' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'daemon.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'schedul2.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'vsmon.exe' - '0' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 25 processes with 25 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '29' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\WINDOWS\system32\drivers\sptd.sys [WARNING] The file could not be opened! Begin scan in 'D:\' <Fichiers> Begin scan in 'E:\' <Fichiers persos> End of the scan: mercredi 26 mars 2008 06:45 Used time: 45:17 min The scan has been done completely. 4488 Scanning directories 204763 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 2 Files cannot be scanned 204763 Files not concerned 1566 Archives were scanned 2 Warnings 2 Notes 35407 Objects were scanned with rootkit scan 0 Hidden objects were found

bonjour, j'ai un cheval de troie qui me supprime CCcleaner a chaque fois. pourriez vous m'aider

bonjour, j'ai desactivé antivirus de ZA pro et avec antivir il detecte des chevaux de troie. comment m'en debarrasser ? malgre une mise en quarantaine et une suppression, j'ai l'impression qu'ils sont de nouveaux la lors du scan. merci

bonjour, j'ai fait un scan avec zone alarme pro qui m'a trouvé un cheval de troie. j'ai mis en quarantaine par contre apre ZA pro se plante. pourriez vous m'aider ? merci voici un log hisjack Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:42:51, on 23/03/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\PopTray\PopTray.exe C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\mantispm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\PROGRA~1\BUYERT~1\Reminder.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Documents and Settings\Goundroune\Bureau\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Buyertools - {7C7A8947-5935-4430-AC0E-E7D04697414E} - C:\PROGRA~1\BUYERT~1\IEBUTT~1.DLL O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: PopTray.lnk = C:\Program Files\PopTray\PopTray.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Buyertools Reminder - {27914077-B4D6-4A0E-9763-76B6E9DD9A81} - C:\Program Files\Buyertools Reminder\ReminderIE.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 4759 bytes

merci j'essaie de suite

merci dominiqd je vais tester tout cela tu as l'air de bien connaitre outpost ... comment fais tu pour autoriser un programme avec un port specifique ? et pour autoriser un raw socket ? merci infiniment

bonsoir merci dominiqd Outpost Firewall Pro 2008 ne possede qu'un anti espion, que peut on assimiler comme anti virus ? merci PS : je suis en train d'essayer outpost

merci bogues007 j'ai essayé effectivement d'ajouter ce programme aux exceptions mais sans resultat il me le ressort a chaque scan que conseillez vous a la place de zone alarme (et hormis avast) merci

HELP !!!