

latour36
Membres-
Compteur de contenus
13 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par latour36
-
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Merci beaucoup pour votre aide precieuse. J'ai pu enlever le driver mais impossible de trouver le meme (meme sur le site de microsoft). On en a telecharge un autre et on a retrouve du son. Encore merci pour tout. Bon courage pour la suite car je vois que vous etes tres demande. -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Voila c'est fait. Avez vous besoin d'un nouveau rapport apres un scan? Concernant la carte son, effectivement il y a un point d'exclamation jaune sur "Microsoft WINMM /wdm audio compatibility driver". Lorsque je double clique dessus, j'arrive a une fenetre m'indiquant pour "device status" : "A driver (service) for this device has been disabled. An alternate driver may be providing this functionality. (Code 32)" -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:16:41, on 22/03/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Dell\QuickSet\quickset.exe C:\Program Files\Apoint\Apoint.exe C:\WINDOWS\vphc600.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\HP\HP Software Update\HPWuSchd.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\Apoint\HidFind.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Nikon\PictureProject\NkbMonitor.exe C:\Program Files\Philips\Philips SPC650NC Webcam\TrayMin650.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\Program Files\McAfee\MSK\MskSrver.exe C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\CPSHelpRunner.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\Documents and Settings\Fabrice\Desktop\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s R3 - Default URLSearchHook is missing O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll O2 - BHO: BOC ProcessProtect Class - {776B71E2-B4CC-4C94-BC7C-09103AA690B6} - ProcessProtection.dll (file missing) O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [phc650] C:\WINDOWS\vphc600.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe" O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_1_0 -reboot 1 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe O4 - Global Startup: TrayMin650.exe.lnk = C:\Program Files\Philips\Philips SPC650NC Webcam\TrayMin650.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe -- End of file - 9541 bytes Le systeme semble etre plus rapide. Je n'ai plus vu de d'erreur avec Svchost.exe. Par contre je n'ai toujours pas de son. -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Voila le rapport : -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 2 X86-based PC ( Uniprocessor Free : Intel® Pentium® M processor 2.00GHz ) BIOS : Phoenix ROM BIOS PLUS Version 1.10 A05 USER : Fabrice ( Administrator ) BOOT : Normal boot Antivirus : McAfee VirusScan (Activated) Firewall : McAfee Personal Firewall (Activated) C:\ (Local Disk) - NTFS - Total:74 Go (Free:25 Go) E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [2] ( 22/03/2009| 9:05 ) -----------\\ SUPPRESSION Supprime! - C:\Program Files\BitLord\BitLord.exe Supprime! - C:\Program Files\BitLord\BitLord.url Supprime! - C:\Program Files\BitLord\BitLord.xml Supprime! - C:\Program Files\BitLord\Downloads Supprime! - C:\Program Files\BitLord\Downloads.xml Supprime! - C:\Program Files\BitLord\lang Supprime! - C:\Program Files\BitLord\License.txt Supprime! - C:\Program Files\BitLord\rules Supprime! - C:\Program Files\BitLord\Torrents Supprime! - C:\Program Files\BitLord\uninst.exe Supprime! - C:\DOCUME~1\Fabrice\Desktop\BitLord.lnk Supprime! - C:\WINDOWS\Prefetch\BITLORD.EXE-00346D1D.pf Supprime! - C:\DOCUME~1\Fabrice\STARTM~1\Programs\BitLord Supprime! - C:\DOCUME~1\Fabrice\Cookies\fabrice@bitlord[1].txt Supprime! - C:\DOCUME~1\Fabrice\Cookies\fabrice@myway[1].txt Supprime! - C:\Program Files\BitLord -----------\\ Recherche de Fichiers / Dossiers ... -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://fr.yahoo.com/" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Url"="http://go.microsoft.com/fwlink/?LinkId=68929" "Url"="http://go.microsoft.com/fwlink/?LinkId=68928" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.msn.com/" --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! 1 - "C:\ToolBar SD\TB_1.txt" - 22/03/2009| 0:27 - Option : [1] 2 - "C:\ToolBar SD\TB_2.txt" - 22/03/2009| 9:15 - Option : [2] -----------\\ Fin du rapport a 9:15:49,28 -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Non je n'ai pas re-essaye MEMTEST. Je n'ai pas vu reapparaitre le message d'erreur. Voici le rapport obtenu : -----------\\ ToolBar S&D 1.2.8 XP/Vista Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 2 X86-based PC ( Uniprocessor Free : Intel® Pentium® M processor 2.00GHz ) BIOS : Phoenix ROM BIOS PLUS Version 1.10 A05 USER : Fabrice ( Administrator ) BOOT : Normal boot Antivirus : McAfee VirusScan (Activated) Firewall : McAfee Personal Firewall (Activated) C:\ (Local Disk) - NTFS - Total:74 Go (Free:26 Go) "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 ) Option : [1] ( 22/03/2009| 0:25 ) -----------\\ Recherche de Fichiers / Dossiers ... C:\Program Files\BitLord C:\Program Files\BitLord\BitLord.exe C:\Program Files\BitLord\BitLord.url C:\Program Files\BitLord\BitLord.xml C:\Program Files\BitLord\Downloads C:\Program Files\BitLord\Downloads.xml C:\Program Files\BitLord\lang C:\Program Files\BitLord\License.txt C:\Program Files\BitLord\rules C:\Program Files\BitLord\Torrents C:\Program Files\BitLord\uninst.exe C:\Program Files\BitLord\Downloads\Bangkok.Dangerous[2008]DvDrip-aXXo C:\Program Files\BitLord\Downloads\Choke[2008]DvDrip[Eng]-FXG C:\Program Files\BitLord\Downloads\cours_chinois_eblcu.net.rar C:\Program Files\BitLord\Downloads\Desperate.Housewives.S05E17.HDTV.XviD-XOR.avi C:\Program Files\BitLord\Downloads\FOR THE FIRST TIME (2008) [PINOY] DVDRiP DivX SoftEngSubs [Tagalog] WingTip C:\Program Files\BitLord\Downloads\Greys Anatomy S05E17 HDTV XviD[Www.Overget.Com] C:\Program Files\BitLord\Downloads\Miss March [2009]. DvDrip.XviD.English - aXXo C:\Program Files\BitLord\Downloads\One True Love C:\Program Files\BitLord\Downloads\Role.Models[2008][unrated.Edition]DvDrip-aXXo C:\Program Files\BitLord\Downloads\Underworld.Rise.Of.The.Lycans.DVDSCR.XviD-NEPTUNE C:\Program Files\BitLord\Downloads\Valkyrie.R5.LINE.XviD-COALiTiON C:\Program Files\BitLord\Downloads\WALT DISNEYS LADY AND THE TRAMP[DVDRIP][ENG]-kidzcorner C:\Program Files\BitLord\Downloads\Bangkok.Dangerous[2008]DvDrip-aXXo\bangkok .dangerous-aXXo.nfo C:\Program Files\BitLord\Downloads\Bangkok.Dangerous[2008]DvDrip-aXXo\Bangkok.Dangerous[2008]DvDrip-aXXo.avi C:\Program Files\BitLord\Downloads\Bangkok.Dangerous[2008]DvDrip-aXXo\Demonoid.com.txt C:\Program Files\BitLord\Downloads\Choke[2008]DvDrip[Eng]-FXG\Choke[2008]DvDrip[Eng]-FXG.avi C:\Program Files\BitLord\Downloads\Choke[2008]DvDrip[Eng]-FXG\Choke[Eng][subs].srt C:\Program Files\BitLord\Downloads\Choke[2008]DvDrip[Eng]-FXG\FXGâ„c.nfo C:\Program Files\BitLord\Downloads\FOR THE FIRST TIME (2008) [PINOY] DVDRiP DivX SoftEngSubs [Tagalog] WingTip\First.avi C:\Program Files\BitLord\Downloads\FOR THE FIRST TIME (2008) [PINOY] DVDRiP DivX SoftEngSubs [Tagalog] WingTip\First.idx C:\Program Files\BitLord\Downloads\FOR THE FIRST TIME (2008) [PINOY] DVDRiP DivX SoftEngSubs [Tagalog] WingTip\First.sub C:\Program Files\BitLord\Downloads\FOR THE FIRST TIME (2008) [PINOY] DVDRiP DivX SoftEngSubs [Tagalog] WingTip\KABAYAN ... PAKIBASA ITO !!!.htm C:\Program Files\BitLord\Downloads\FOR THE FIRST TIME (2008) [PINOY] DVDRiP DivX SoftEngSubs [Tagalog] WingTip\Torrent downloaded from Demonoid.com.txt C:\Program Files\BitLord\Downloads\Greys Anatomy S05E17 HDTV XviD[Www.Overget.Com]\Greys.Anatomy.S05E17.HDTV.XviD-2HD.avi C:\Program Files\BitLord\Downloads\Greys Anatomy S05E17 HDTV XviD[Www.Overget.Com]\Overget.org.txt C:\Program Files\BitLord\Downloads\Miss March [2009]. DvDrip.XviD.English - aXXo\Miss March (2009) Comedy DvDrip English.wmv C:\Program Files\BitLord\Downloads\One True Love\MR-rip.txt C:\Program Files\BitLord\Downloads\One True Love\One True Love.avi C:\Program Files\BitLord\Downloads\Role.Models[2008][unrated.Edition]DvDrip-aXXo\Demonoid.com.txt C:\Program Files\BitLord\Downloads\Role.Models[2008][unrated.Edition]DvDrip-aXXo\role.models-aXXo.nfo C:\Program Files\BitLord\Downloads\Role.Models[2008][unrated.Edition]DvDrip-aXXo\Role.Models[2008][unrated.Edition]DvDrip-aXXo.avi C:\Program Files\BitLord\Downloads\Underworld.Rise.Of.The.Lycans.DVDSCR.XviD-NEPTUNE\nep-uw3-dvdscr.avi C:\Program Files\BitLord\Downloads\Underworld.Rise.Of.The.Lycans.DVDSCR.XviD-NEPTUNE\nep-uw3-dvdscr.nfo C:\Program Files\BitLord\Downloads\Valkyrie.R5.LINE.XviD-COALiTiON\coa-v-r5xvid.nfo C:\Program Files\BitLord\Downloads\Valkyrie.R5.LINE.XviD-COALiTiON\coa-v-xvid.avi C:\Program Files\BitLord\Downloads\Valkyrie.R5.LINE.XviD-COALiTiON\Sample C:\Program Files\BitLord\Downloads\Valkyrie.R5.LINE.XviD-COALiTiON\Sample\coa-v-sample.avi C:\Program Files\BitLord\Downloads\WALT DISNEYS LADY AND THE TRAMP[DVDRIP][ENG]-kidzcorner\Lady_And_The_Tramp-[cdcovers_cc]-cd1.jpg C:\Program Files\BitLord\Downloads\WALT DISNEYS LADY AND THE TRAMP[DVDRIP][ENG]-kidzcorner\Lady_And_The_Tramp-[cdcovers_cc]-front.jpg C:\Program Files\BitLord\Downloads\WALT DISNEYS LADY AND THE TRAMP[DVDRIP][ENG]-kidzcorner\main movie.avi C:\Program Files\BitLord\Downloads\WALT DISNEYS LADY AND THE TRAMP[DVDRIP][ENG]-kidzcorner\Torrent downloaded from Demonoid.com-1.txt C:\Program Files\BitLord\lang\lang_ar_ae.xml C:\Program Files\BitLord\lang\lang_bg_bg.xml C:\Program Files\BitLord\lang\lang_ca_es.xml C:\Program Files\BitLord\lang\lang_cz_cz.xml C:\Program Files\BitLord\lang\lang_da_dk.xml C:\Program Files\BitLord\lang\lang_de_de.xml C:\Program Files\BitLord\lang\lang_el_gr.xml C:\Program Files\BitLord\lang\lang_en_us.xml C:\Program Files\BitLord\lang\lang_es_ar.xml C:\Program Files\BitLord\lang\lang_es_es.xml C:\Program Files\BitLord\lang\lang_et_ee.xml C:\Program Files\BitLord\lang\lang_fi_fi.xml C:\Program Files\BitLord\lang\lang_fr_fr.xml C:\Program Files\BitLord\lang\lang_gl_es.xml C:\Program Files\BitLord\lang\lang_he_il.xml C:\Program Files\BitLord\lang\lang_hu_hu.xml C:\Program Files\BitLord\lang\lang_it_it.xml C:\Program Files\BitLord\lang\lang_jp_jp.xml C:\Program Files\BitLord\lang\lang_ko_kr.xml C:\Program Files\BitLord\lang\lang_nb_no.xml C:\Program Files\BitLord\lang\lang_nl_nl.xml C:\Program Files\BitLord\lang\lang_pl_pl.xml C:\Program Files\BitLord\lang\lang_pt_br.xml C:\Program Files\BitLord\lang\lang_pt_pt.xml C:\Program Files\BitLord\lang\lang_ro_ro.xml C:\Program Files\BitLord\lang\lang_ru_ru.xml C:\Program Files\BitLord\lang\lang_sk_sk.xml C:\Program Files\BitLord\lang\lang_sl_si.xml C:\Program Files\BitLord\lang\lang_sr_sr.xml C:\Program Files\BitLord\lang\lang_sv_se.xml C:\Program Files\BitLord\lang\lang_th_th.xml C:\Program Files\BitLord\lang\lang_tr_tr.xml C:\Program Files\BitLord\lang\lang_va_es.xml C:\Program Files\BitLord\lang\lang_zh_tw.xml C:\Program Files\BitLord\rules\ipfilter.dat C:\Program Files\BitLord\rules\tracker.dat C:\DOCUME~1\Fabrice\Desktop\BitLord.lnk C:\WINDOWS\Prefetch\BITLORD.EXE-00346D1D.pf C:\DOCUME~1\Fabrice\STARTM~1\Programs\BitLord C:\DOCUME~1\Fabrice\Cookies\fabrice@bitlord[1].txt C:\DOCUME~1\Fabrice\Cookies\fabrice@myway[1].txt -----------\\ [..\Internet Explorer\Main] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Local Page"="C:\\WINDOWS\\system32\\blank.htm" "Start Page"="http://fr.yahoo.com/" "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch" "Url"="http://go.microsoft.com/fwlink/?LinkId=68929" "Url"="http://go.microsoft.com/fwlink/?LinkId=68928" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"'>http://go.microsoft.com/fwlink/?LinkId=69157" "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"'>http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" --------------------\\ Recherche d'autres infections Aucune autre infection trouvée ! 1 - "C:\ToolBar SD\TB_1.txt" - 22/03/2009| 0:27 - Option : [1] -----------\\ Fin du rapport a 0:27:57,29 -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Merci beaucoup de nous avoir debarrasse de ca. Voici le nouveau rapport HijackThis : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 00:14:30, on 22/03/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Dell\QuickSet\quickset.exe C:\Program Files\Apoint\Apoint.exe C:\Program Files\McAfee\SiteAdvisor\McSACore.exe C:\WINDOWS\vphc600.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe C:\Program Files\HP\HP Software Update\HPWuSchd.exe C:\Program Files\Apoint\HidFind.exe C:\Program Files\Apoint\Apntex.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Nikon\PictureProject\NkbMonitor.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Philips\Philips SPC650NC Webcam\TrayMin650.exe C:\DOCUME~1\Fabrice\LOCALS~1\Temp\McInstallTemp (2)\Install.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\CPSHelpRunner.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\Fabrice\Desktop\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: BOC ProcessProtect Class - {776B71E2-B4CC-4C94-BC7C-09103AA690B6} - ProcessProtection.dll (file missing) O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [phc650] C:\WINDOWS\vphc600.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe" O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_1_0 -reboot 1 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe O4 - Global Startup: TrayMin650.exe.lnk = C:\Program Files\Philips\Philips SPC650NC Webcam\TrayMin650.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O23 - Service: McAfee Application Installer Cleanup (0197121237674183) (0197121237674183mcinstcleanup) - McAfee, Inc. - C:\DOCUME~1\Fabrice\LOCALS~1\Temp\019712~1.EXE O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe -- End of file - 9609 bytes -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Effectivement, maintenant j'ai pu ouvrir MBAM. Voici le rapport obtenu apres le scan : Malwarebytes' Anti-Malware 1.34 Version de la base de données: 1883 Windows 5.1.2600 Service Pack 2 22/03/2009 00:00:16 mbam-log-2009-03-22 (00-00-16).txt Type de recherche: Examen rapide Eléments examinés: 109460 Temps écoulé: 11 minute(s), 6 second(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 2 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 2 Dossier(s) infecté(s): 4 Fichier(s) infecté(s): 3 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CURRENT_USER\SOFTWARE\DigitalHQ (Trojan.DNSChanger) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DigitalHQ (Trojan.DNSChanger) -> Quarantined and deleted successfully. Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Dossier(s) infecté(s): C:\Program Files\MyWaySA (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWaySA\SrchAsDe (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Documents and Settings\Fabrice\Start Menu\Programs\DigitalHQ (Trojan.DNSChanger) -> Quarantined and deleted successfully. C:\Program Files\DigitalHQ (Trojan.DNSChanger) -> Quarantined and deleted successfully. Fichier(s) infecté(s): C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Documents and Settings\Fabrice\Start Menu\Programs\DigitalHQ\Uninstall.lnk (Trojan.DNSChanger) -> Quarantined and deleted successfully. C:\Program Files\DigitalHQ\Uninstall.exe (Trojan.DNSChanger) -> Quarantined and deleted successfully. -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Voila, apparemment cela s'est bien passe. Voici le rapport : ComboFix 09-03-19.02 - Fabrice 2009-03-21 22:49:18.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1015.736 [GMT 1:00] Running from: c:\documents and settings\Fabrice\Desktop\ComboFix.exe AV: McAfee VirusScan *On-access scanning enabled* (Updated) FW: McAfee Personal Firewall *enabled* . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\recycler\S-0-3-52-100013635-100031363-100022654-6586.com C:\resycled c:\resycled\boot.com c:\windows\system32\drivers\gaopdxxvrbqbdmycdofnrjcbrrpryiqhofasfv.sys c:\windows\system32\gaopdxcounter c:\windows\system32\gaopdxmeaxlvasvtthkdkpbyqxskjnlpwewesv.dll c:\windows\system32\kddll.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_gaopdxserv.sys -------\Legacy_PROTECTOR -------\Service_Protector ((((((((((((((((((((((((( Files Created from 2009-02-21 to 2009-03-21 ))))))))))))))))))))))))))))))) . 2009-03-21 22:28 . 2009-03-21 22:34 <DIR> d-------- C:\32788R22FWJFW 2009-03-21 19:05 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-03-21 19:05 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-03-21 19:00 . 2009-03-21 19:00 <DIR> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\Malwarebytes 2009-03-21 18:24 . 2009-03-21 21:57 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-03-21 10:00 . 2009-03-21 10:00 <DIR> d-------- C:\rsit 2009-03-21 10:00 . 2009-03-21 10:02 <DIR> d-------- c:\program files\trend micro 2009-03-18 23:28 . 2009-03-21 11:02 <DIR> d-a------ c:\documents and settings\All Users.WINDOWS\Application Data\TEMP 2009-03-18 23:21 . 2009-03-18 23:21 38,400 --a------ c:\windows\system32\drivers\quadraserv.sys 2009-03-15 08:17 . 2009-03-15 08:17 <DIR> d-------- c:\program files\DigitalHQ 2009-02-22 21:25 . 2009-02-22 21:25 <DIR> d-------- c:\program files\ÖйúÒøÐÐÍøÉÏÒøÐа²È«¿Ø¼þ 2009-02-22 21:25 . 2009-02-22 21:25 <DIR> d-------- C:\Log 2009-02-22 21:25 . 2008-10-14 11:51 8,192 --a------ c:\windows\system32\drivers\ProtectorA.sys 2009-02-21 08:25 . 2009-02-21 08:25 <DIR> d-------- c:\documents and settings\Fabrice\Application Data\ZoomBrowser EX 2009-02-21 08:17 . 2009-02-21 08:17 <DIR> d-------- c:\documents and settings\Fabrice\Application Data\Canon 2009-02-21 07:58 . 2009-02-21 07:58 <DIR> d-------- c:\documents and settings\All Users.WINDOWS\Application Data\ZoomBrowser 2009-02-21 07:56 . 2009-02-21 08:02 <DIR> d-------- c:\program files\Canon 2009-02-21 07:54 . 2009-02-21 07:54 <DIR> d-------- c:\program files\Common Files\Canon . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-03-21 21:49 --------- d-----w c:\documents and settings\All Users.WINDOWS\Application Data\McAfee 2009-03-21 21:48 --------- d-----w c:\program files\McAfee.com 2009-03-21 21:48 --------- d-----w c:\program files\McAfee 2008-06-01 04:38 41,008 ----a-w c:\documents and settings\Fabrice\Application Data\GDIPFONTCACHEV1.DAT 2006-02-15 13:43 24,976 ------w c:\documents and settings\q-cao-imba\Application Data\GDIPFONTCACHEV1.DAT 2006-01-30 20:35 0 ----a-w c:\program files\ytb612_efgsip.exe 2006-01-29 16:10 278,528 ----a-w c:\program files\Common Files\FDEUnInstaller.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360] "msnmsgr"="c:\program files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352] "updateMgr"="c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952] "Dell QuickSet"="c:\program files\Dell\QuickSet\quickset.exe" [2006-06-29 1032192] "UpdateManager"="c:\program files\Common Files\Sonic\Update Manager\sgtray.exe" [2004-01-07 110592] "Apoint"="c:\program files\Apoint\Apoint.exe" [2005-10-07 176128] "phc650"="c:\windows\vphc600.exe" [2005-07-20 339968] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-10-01 98304] "DVDLauncher"="c:\program files\CyberLink\PowerDVD\DVDLauncher.exe" [2004-04-26 53248] "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2006-11-12 185896] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd.exe" [2003-06-25 49152] "HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-06-26 212992] "AdaptecDirectCD"="c:\program files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" [2002-12-17 684032] "RoxWatchTray"="c:\program files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe" [2005-11-28 163840] "igfxtray"="c:\windows\system32\igfxtray.exe" [2006-06-06 94208] "igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-06-06 77824] "igfxpers"="c:\windows\system32\igfxpers.exe" [2006-06-06 118784] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360] c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 29696] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2003-07-07 233472] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360] NkbMonitor.exe.lnk - c:\program files\Nikon\PictureProject\NkbMonitor.exe [2006-02-05 118784] TrayMin650.exe.lnk - c:\program files\Philips\Philips SPC650NC Webcam\TrayMin650.exe [2006-09-13 278528] [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"= "c:\\Program Files\\BitLord\\BitLord.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "1700:TCP"= 1700:TCP:MioNet Remote Drive Access "1641:TCP"= 1641:TCP:MioNet Remote Drive Verification R1 ProtectorA;ProtectorA;c:\windows\system32\drivers\ProtectorA.sys [2009-02-22 8192] R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [2006-09-24 87936] S3 fbxusb;Carte réseau virtuelle FreeBox USB;c:\windows\system32\drivers\fbxusb32.sys [2007-10-18 21344] S3 Ndisprot;ArcNet NDIS Protocol Driver;c:\windows\system32\drivers\ndisprot.sys [2008-11-19 27904] S3 PALLADIA;Palladia 300/400 Usb Adsl Modem;c:\windows\system32\drivers\usbiad.sys [2006-09-24 31547] S3 phc600;USB PC Camera (phc650);c:\windows\system32\drivers\phc600.sys [2006-10-01 440064] . Contents of the 'Scheduled Tasks' folder 2009-01-04 c:\windows\Tasks\HP DArC Task #Hewlett-Packard#hp psc 1300 series#1167912241.job - c:\program files\HP\hpcoretech\comp\hpdarc.exe [2003-06-26 18:50] 2009-03-18 c:\windows\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job - c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 11:20] . - - - - ORPHANS REMOVED - - - - HKLM-Run-PHIME2002ASync - c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE HKLM-Run-PHIME2002A - c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE HKLM-Run-c:\windows\system32\kddll.exe - c:\windows\system32\kddll.exe HKLM-Run-DXDllRegExe - dxdllreg.exe Notify-dimsntfy - (no file) . ------- Supplementary Scan ------- . uStart Page = hxxp://fr.yahoo.com/ uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s IE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-03-21 23:00:52 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\scardsvr.exe c:\program files\Common Files\Microsoft Shared\VS7Debug\mdm.exe c:\program files\Dell\QuickSet\NicConfigSvc.exe c:\program files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe c:\windows\system32\wdfmgr.exe c:\program files\Canon\CAL\CALMAIN.exe c:\windows\system32\wscntfy.exe c:\program files\Apoint\hidfind.exe c:\program files\Apoint\ApntEx.exe c:\program files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe c:\program files\Common Files\Roxio Shared\SharedCOM8\CPSHelpRunner.exe . ************************************************************************** . Completion time: 2009-03-21 23:04:12 - machine was rebooted ComboFix-quarantined-files.txt 2009-03-21 22:04:09 Pre-Run: 21,273,546,752 bytes free Post-Run: 23,924,150,272 bytes free WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect 166 --- E O F --- 2008-11-25 05:35:00 Est ce qu'il y a quelquechose a modifier maintenant parce que le probleme de son n'est toujours pas repare? D'avance merci pour votre aide, -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Non il ne s'ouvre pas! -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Je ne comprends pas. J'ai telecharge plusieurs fois et installer plusieurs fois le logiciel MBAM mais je n'arrive pas a l'ouvrir en cliquant sur l'icone, en faisant un click droit et ouvrir. Est ce lie au probleme que j'ai? Avez vous une idee de ce qu'il se passe? Desole de vous embeter avec tout ces problemes et merci pour votre aide -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Merci beaucoup, Cette operation a marche et voici le rapport : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:52:42, on 21/03/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\SCardSvr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Dell\QuickSet\quickset.exe C:\Program Files\Apoint\Apoint.exe C:\WINDOWS\vphc600.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\HP\HP Software Update\HPWuSchd.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Apoint\HidFind.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe C:\Program Files\Apoint\Apntex.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Nikon\PictureProject\NkbMonitor.exe C:\Program Files\Philips\Philips SPC650NC Webcam\TrayMin650.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\McAfee\MPF\MPFSrv.exe C:\Program Files\McAfee\MSK\MskSrver.exe C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wdfmgr.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe C:\WINDOWS\System32\alg.exe C:\Program Files\Common Files\Roxio Shared\SharedCOM8\CPSHelpRunner.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\Fabrice\Desktop\HiJackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s O1 - Hosts: 221.135.111.122 download.mcafee.com O1 - Hosts: 221.135.111.121 download.mcafee.com O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll O2 - BHO: BOC ProcessProtect Class - {776B71E2-B4CC-4C94-BC7C-09103AA690B6} - ProcessProtection.dll (file missing) O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe O4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [phc650] C:\WINDOWS\vphc600.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe" O4 - HKLM\..\Run: [C:\WINDOWS\system32\kddll.exe] C:\WINDOWS\system32\kddll.exe O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [McAfee Backup] "C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_1_0 -reboot 1 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe O4 - Global Startup: TrayMin650.exe.lnk = C:\Program Files\Philips\Philips SPC650NC Webcam\TrayMin650.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{40014C70-0919-4585-8D40-F01966285F52}: NameServer = 85.255.112.113;85.255.112.73 O17 - HKLM\System\CCS\Services\Tcpip\..\{CD48BD61-BCFC-4ADA-A204-C5CE5CBBAEFB}: NameServer = 85.255.112.113;85.255.112.73 O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe -- End of file - 10363 bytes C'est du chinois pour moi:) Merci beaucoup pour votre aide, -
Resolu - probleme son et message erreur Svchost.exe
latour36 a répondu à un(e) sujet de latour36 dans Analyses et éradication malwares
Merci beaucoup pour ces precieux conseils. Je viens d'essayer de faire tourner RSIT mais pendant qu'il s'executait (dans la fenetre, il etait marque : Performing Registry Dump) une autre fenetre est apparue avec : Autolt Error line-1: Error: Error parsing function call et je ne peux que cliquer OK puis RSIT a disparu. En ce qui concerne la premiere partie, de votre message, j'ai regarde ce qu'indiquait Coolman mais cela ne s'applique pas a notre probleme. Enfin, pour memtest, il semble qu'il faille modifier des parametres dans BIOS que je ne connais absolument pas et je ne suis pas sur de tout comprendre dans le tutoriel. Desole je ne suis pas un pro quand il s'agit d'aller modifier des commandes. N'auriez vous pas quelquechose d'un peu plus "automatique" s'il vous plait? D'avance merci pour votre aide -
Resolu - probleme son et message erreur Svchost.exe
latour36 a posté un sujet dans Analyses et éradication malwares
Bonjour a tous, Depuis quelques jours mon ordinateur n'emet plus de son (lors de la lecture de video, au demarrage ou a l'arret de l'ordinateur) et je ne peux plus modifier le volume comme s'il n'y avait jamais eu de carte son. En parallele, lorsque je suis sur internet, il apparait souvent une fenetre avec ecrit : Svchost.exe The instruction at "0x75606e06a" referenced memory at "0x00000008". The memory could not be "read". Est ce quelqu'un pourrait m'aider s'il vous plait? Je ne comprends pas trop ce qui s'est passe. En cherchant sur internet, il semblerait que ce soit un probleme de mise a jour Windows et que ComboFix pourrait reparer cela mais apparemment c'est une procedure qui demanderait une supervision. Est ce quelqu'un est familier avec cet outil et pourrait m'aider si cela peut resoudre mon probleme? D'avance merci pour votre aide, A bientot,