noaleia

le 4 mars 2010

Bonjour Falkra

j'ai un petit souci par rapport au firewall que tu m'as recommandé. J'ai un deuxième ordi sous environnement Windows 7 64 bits qui n'est pas compatible avec ce dernier. Pourrais-tu m'en indiquer un qui le soit, STP?

A +

Noa

le 3 mars 2010

OK

Bonne soirée

Noa

le 3 mars 2010

Merci beaucoup pour ton implication et ta gentillesse.

Je m'en vais de ce pas débuter les modifications que tu me recommandes de faire.

Me permets-tu de te recontacter si j'ai un souci dans ces démarches?

le 3 mars 2010

Je viens de faire une sauvegarde, sans souci. C'est tout gagné !

Merci pour ton aide, Falkra et merci aussi à Apollo.

Bonne continuation à vous.

Noa

le 2 mars 2010

Pour répondre à tes questions, j'utilise Mozilla, rarement Explorer, et effectivement, il me faut changer de proxy.

En ce qui concerne le fonctionnement de mon ordinateur, il me faudra retenter une sauvegarde de mes fichiers demain pour voir pour voir si le message d'erreur ne s'affiche pas de nouveau.

Comme anti-virus, j'utilise celui d'Orange (je ne sais pas si c'est F-Secure) et effectivement, c'est 5€/mois. Je ne sais pas si je vais continuer avec eux. Qu'est-ce que tu me conseillerais?

Je dois te laisser. Le boulot m'attend...

Bonne journée à toi.

A demain

Noa

le 2 mars 2010

Et voilà pour le log RSIT:

Logfile of random's system information tool 1.06 (written by random/random)

Run by Vannina at 2010-03-02 11:51:43

Microsoft® Windows Vista™ Édition Familiale Premium

System drive C: has 98 GB (66%) free of 147 GB

Total RAM: 1014 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:54:03, on 02/03/2010

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16982)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\conime.exe

C:\Windows\explorer.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Orange\Logiciel de Synchronisation Orange\Voxsync.exe

C:\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\system32\wuauclt.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN

C:\Program Files\Orange\Logiciel de Synchronisation Orange\SyncManager.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\sdclt.exe

C:\Users\Vannina\Downloads\RSIT(2).exe

C:\Program Files\Trend Micro\HijackThis\Vannina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free.fr/search/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...&pf=desktop

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=proxy.free.fr:3128;ftp=proxy.free.fr:3128

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.free.*;*.online.*;<local>

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\Hewlett-Packard\Smart Web Printing\hpswp_framework.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW

O4 - HKLM\..\Run: [sMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [EverioService] "C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')

O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Logiciel de Synchronisation Orange.lnk = ?

O4 - Global Startup: Philips GoGear VIBE Device Manager.lnk = ?

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm

O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.13\AMVConverter\grab.html

O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.13\MediaManager\grab.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll

O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\Hewlett-Packard\Smart Web Printing\hpswp_extensions.dll

O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\Hewlett-Packard\Smart Web Printing\hpswp_extensions.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O13 - Gopher Prefix:

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe

O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe

O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe

O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--

End of file - 9343 bytes

======Scheduled tasks folder======

C:\Windows\tasks\AppleSoftwareUpdate.job

C:\Windows\tasks\Scheduled scanning task.job

C:\Windows\tasks\User_Feed_Synchronization-{5656896E-0100-4FAA-A6F1-6FB2BDC5EE5D}.job

C:\Windows\tasks\User_Feed_Synchronization-{B086D49D-CAB5-4159-A0C3-8780A50F5E45}.job

C:\Windows\tasks\Vérifier les mises à jour de Windows Live Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]

HP Print Clips - C:\Program Files\Hewlett-Packard\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - c:\program files\google\googletoolbar2.dll [2007-11-30 2436160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]

Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar2.dll [2007-11-30 2436160]

{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2007-11-30 1006264]

"hpsysdrv"=c:\hp\support\hpsysdrv.exe [2006-09-28 65536]

"KBD"=C:\HP\KBD\KBD.EXE [2005-02-02 61440]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]

"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

""= []

"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-09-01 282624]

"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe [2005-11-29 40960]

"F-Secure Manager"=C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE [2007-06-13 176177]

"F-Secure TNB"=C:\Program Files\Orange\AntivirusFirewall\FSGUI\TNBUtil.exe [2007-06-13 733184]

"SMSTray"=C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe [2007-09-20 132624]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-03-25 141848]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-03-25 166424]

"Persistence"=C:\Windows\system32\igfxpers.exe [2008-03-25 133656]

"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]

"EverioService"=C:\Program Files\CyberLink\PCM4Everio\EverioService.exe [2006-11-22 151552]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Launcher"=C:\Windows\SMINST\launcher.exe [2006-11-24 44136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-14 1232896]

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2006-11-02 125440]

"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe [2005-11-29 57344]

"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe

Logiciel de Synchronisation Orange.lnk - C:\Program Files\Orange\Logiciel de Synchronisation Orange\Voxsync.exe

Philips GoGear VIBE Device Manager.lnk - C:\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe

C:\Users\Vannina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

OneNote 2007 - Capture d'écran et lancement.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2008-03-25 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{88485281-8b4b-4f8d-9ede-82e29a064277}"=C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"EnableLUA"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveAutoRun"=255

"NoDriveTypeAutoRun"=255

"HonorAutoRunSetting"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveAutoRun"=

"NoDriveTypeAutoRun"=

"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-03-02 11:29:17 ----RASHD---- C:\autorun.inf

2010-03-02 11:25:10 ----A---- C:\UsbFix.txt

2010-03-01 09:51:48 ----D---- C:\UsbFix

2010-02-28 21:30:39 ----D---- C:\rsit

2010-02-27 22:16:23 ----A---- C:\cleannavi.txt

2010-02-27 18:52:10 ----D---- C:\Windows\Sun

2010-02-27 18:12:56 ----A---- C:\Rapport Navilog 27022010.txt

2010-02-27 18:05:34 ----A---- C:\RapportToolBar27022010(2).txt

2010-02-27 17:46:47 ----A---- C:\RapportToolBar27022010.txt

2010-02-27 17:44:46 ----A---- C:\TB.txt

2010-02-27 17:44:16 ----D---- C:\ToolBar SD

2010-02-27 17:25:50 ----D---- C:\Program Files\Trend Micro

2010-02-27 11:59:25 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2010-02-24 08:50:33 ----A---- C:\Windows\system32\tzres.dll

2010-02-24 08:48:53 ----A---- C:\Windows\system32\secproc_isv.dll

2010-02-24 08:48:53 ----A---- C:\Windows\system32\secproc.dll

2010-02-24 08:48:50 ----A---- C:\Windows\system32\RMActivate_ssp.exe

2010-02-24 08:48:49 ----A---- C:\Windows\system32\RMActivate_isv.exe

2010-02-24 08:48:49 ----A---- C:\Windows\system32\RMActivate.exe

2010-02-24 08:48:48 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe

2010-02-24 08:48:47 ----A---- C:\Windows\system32\secproc_ssp_isv.dll

2010-02-24 08:48:47 ----A---- C:\Windows\system32\secproc_ssp.dll

2010-02-24 08:48:47 ----A---- C:\Windows\system32\msdrm.dll

2010-02-10 10:12:27 ----A---- C:\Windows\system32\ntoskrnl.exe

2010-02-10 10:12:11 ----A---- C:\Windows\system32\ntkrnlpa.exe

2010-02-10 10:11:31 ----A---- C:\Windows\system32\quartz.dll

2010-02-10 10:11:27 ----A---- C:\Windows\system32\msvidc32.dll

2010-02-10 10:11:13 ----A---- C:\Windows\system32\msyuv.dll

2010-02-10 10:11:09 ----A---- C:\Windows\system32\msrle32.dll

2010-02-10 10:11:04 ----A---- C:\Windows\system32\iyuv_32.dll

2010-02-10 10:11:00 ----A---- C:\Windows\system32\tsbyuv.dll

2010-02-10 10:10:52 ----A---- C:\Windows\system32\mciavi32.dll

2010-02-10 10:10:47 ----A---- C:\Windows\system32\avifil32.dll

2010-02-10 10:10:42 ----A---- C:\Windows\system32\msvfw32.dll

2010-02-10 10:10:41 ----A---- C:\Windows\system32\avicap32.dll

2010-02-10 10:09:46 ----A---- C:\Windows\system32\tcpipcfg.dll

2010-02-10 10:09:46 ----A---- C:\Windows\system32\netiougc.exe

======List of files/folders modified in the last 1 months======

2010-03-02 11:51:46 ----D---- C:\Windows\Prefetch

2010-03-02 11:45:01 ----D---- C:\Windows\Temp

2010-03-02 11:29:48 ----D---- C:\Users\Vannina\AppData\Roaming\OpenOffice.org2

2010-03-02 11:28:05 ----SHD---- C:\$Recycle.Bin

2010-03-02 11:26:42 ----D---- C:\Windows\System32

2010-03-02 11:20:40 ----D---- C:\Windows

2010-03-02 11:12:09 ----RD---- C:\Program Files

2010-03-02 10:11:55 ----SHD---- C:\System Volume Information

2010-03-02 10:03:45 ----D---- C:\Windows\system32\catroot2

2010-03-02 09:56:02 ----D---- C:\Windows\tracing

2010-03-01 10:15:58 ----D---- C:\Windows\inf

2010-03-01 10:15:58 ----A---- C:\Windows\system32\PerfStringBackup.INI

2010-02-27 22:44:05 ----D---- C:\Windows\system32\drivers

2010-02-27 22:17:14 ----D---- C:\Program Files\Navilog1

2010-02-27 19:39:49 ----D---- C:\Windows\system32\wbem

2010-02-27 19:39:08 ----D---- C:\Windows\system32\config

2010-02-27 19:38:56 ----D---- C:\Windows\Tasks

2010-02-27 19:38:55 ----D---- C:\Windows\system32\spool

2010-02-27 19:38:46 ----D---- C:\ProgramData\HP Product Assistant

2010-02-27 19:38:42 ----D---- C:\Windows\registration

2010-02-27 19:19:25 ----SD---- C:\Windows\Downloaded Program Files

2010-02-27 18:33:33 ----D---- C:\ProgramData

2010-02-27 18:18:18 ----D---- C:\Windows\system32\Tasks

2010-02-26 19:39:59 ----D---- C:\Program Files\Mozilla Firefox

2010-02-26 18:25:07 ----HD---- C:\Program Files\InstallShield Installation Information

2010-02-26 09:59:03 ----A---- C:\Windows\win.ini

2010-02-26 09:59:02 ----SHD---- C:\Windows\Installer

2010-02-25 14:15:41 ----D---- C:\Windows\twain_32

2010-02-25 11:05:02 ----D---- C:\Windows\system32\fr-FR

2010-02-25 11:05:01 ----RSD---- C:\Windows\Fonts

2010-02-25 10:17:21 ----D---- C:\Windows\winsxs

2010-02-25 10:06:08 ----D---- C:\Windows\system32\catroot

2010-02-24 09:16:06 ----N---- C:\Windows\system32\MpSigStub.exe

2010-02-11 11:25:20 ----D---- C:\Program Files\Windows Mail

2010-02-11 11:25:19 ----D---- C:\Windows\system32\migration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 F-Secure HIPS;F-Secure HIPS; \??\C:\Program Files\Orange\AntivirusFirewall\HIPS\fshs.sys [2008-02-27 41184]

R1 FSES;F-Secure Email Scanning Driver; C:\Windows\System32\drivers\fses.sys [2007-06-13 28000]

R1 FSFW;F-Secure Firewall Driver; C:\Windows\System32\drivers\fsdfw.sys [2008-03-21 60064]

R1 fsvista;F-Secure Vista Support Driver; \??\C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\minifilter\fsvista.sys [2007-06-13 6144]

R3 E100B;Pilote de carte Intel ® PRO; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328]

R3 F-Secure Gatekeeper;F-Secure Gatekeeper; \??\C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\minifilter\fsgk.sys [2009-07-28 77824]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-03-25 2307072]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576]

R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072]

R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]

S3 catchme;catchme; \??\C:\Users\Vannina\AppData\Local\Temp\catchme.sys []

S3 Dot4;Pilote MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2006-11-02 131584]

S3 Dot4Print;Pilote de classe Imprimante pour IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2006-11-02 16384]

S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2006-11-02 36864]

S3 drmkaud;Filtre de décodeur DRM (Noyau Microsoft); C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]

S3 HdAudAddService;Pilote de fonction UAA 1.1 Microsoft pour le service High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]

S3 MSKSSRV;Proxy de service de répartition Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]

S3 MSPCLOCK;Proxy d'horloge de répartition Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]

S3 MSPQM;Proxy de gestion de qualité de répartition Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]

S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]

S3 usbscan;Pilote de scanneur USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]

S4 F-Secure Filter;F-Secure File System Filter; \??\C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\Win2K\FSfilter.sys [2007-06-13 33024]

S4 F-Secure Recognizer;F-Secure File System Recognizer; \??\C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\Win2K\FSrec.sys [2007-06-13 18432]

S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 F-Secure Gatekeeper Handler Starter;FSGKHS; C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe [2007-06-13 41043]

R2 FSMA;F-Secure Management Agent; C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE [2007-06-13 106546]

R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2006-11-02 22016]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2006-11-02 22016]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2006-11-02 22016]

R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2006-09-29 266343]

R3 FSAUA;F-Secure Automatic Update Agent; C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe [2007-06-13 450560]

R3 FSDFWD;F-Secure Anti-Virus Firewall Daemon; C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe [2009-09-09 457312]

R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2006-11-02 22016]

S2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []

S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-11-30 138168]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-11-01 78752]

S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]

S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

-----------------EOF-----------------

le 2 mars 2010

Finalement, j'ai un peu plus de temps prévu. Voici le rapport de UsbFix que tu m'as demandé:

############################## | UsbFix V6.097 |

User : Vannina (Administrateurs) # PC-SEREIN

Update on 20/02/2010 by El Desaparecido , C_XX & Chimay8

Start at: 11:25:41 | 02/03/2010

Website : http://pagesperso-orange.fr/NosTools/index.html

Contact : FindyKill.Contact@gmail.com

Intel® Pentium® 4 CPU 3.00GHz

Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6000 32-bit) #

Internet Explorer 7.0.6000.16982

Windows Firewall Status : Enabled

AV : AntiVirus Firewall 7.00 7.00 [ (!) Disabled | Updated ]

FW : AntiVirus Firewall 7.00[ (!) Disabled ]7.00

C:\ -> Disque fixe local # 143,98 Go (95,24 Go free) [HP] # NTFS

D:\ -> Disque fixe local # 5,06 Go (701,5 Mo free) [Recovery] # NTFS

E:\ -> Disque CD-ROM # 4 Go (4 Go free) [27 févr. 2010] # UDF

F:\ -> Disque amovible # 1,86 Go (1,79 Go free) [uSB DISK] # FAT

H:\ -> Disque amovible

I:\ -> Disque amovible

J:\ -> Disque amovible

K:\ -> Disque amovible

L:\ -> Disque amovible # 243,24 Mo (212,9 Mo free) [Kingston] # FAT

############################## | Processus actifs |

C:\Windows\System32\smss.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\svchost.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe

C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\FSGK32.EXE

C:\Windows\system32\svchost.exe

C:\Program Files\Orange\AntivirusFirewall\Common\FSMB32.EXE

c:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\svchost.exe

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\Windows\system32\svchost.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Orange\AntivirusFirewall\Common\FCH32.EXE

C:\Program Files\Orange\AntivirusFirewall\Common\FAMEH32.EXE

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsqh.exe

C:\Windows\system32\WUDFHost.exe

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fssm32.exe

C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe

C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsus.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\runonce.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsav32.exe

C:\Windows\system32\SearchProtocolHost.exe

################## | Elements infectieux |

Supprimé ! C:\Windows\System32\autorun.inf

Supprimé ! C:\$Recycle.Bin\S-1-5-21-1514375336-3411896387-34854571-500

Supprimé ! C:\$Recycle.Bin\S-1-5-21-2152478756-3922319563-605102323-500

Supprimé ! C:\$Recycle.Bin\S-1-5-21-4185418856-2764027716-3700343479-1000

Supprimé ! C:\$Recycle.Bin\S-1-5-21-4185418856-2764027716-3700343479-1001

Supprimé ! C:\$Recycle.Bin\S-1-5-21-4185418856-2764027716-3700343479-500

Supprimé ! D:\$Recycle.Bin\S-1-5-21-4185418856-2764027716-3700343479-1000

Supprimé ! D:\$Recycle.Bin\S-1-5-21-4185418856-2764027716-3700343479-1001

Supprimé ! D:\$Recycle.Bin\S-1-5-21-4185418856-2764027716-3700343479-500

################## | Registre |

################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{08c717ac-5fc2-11de-828f-001a921087ee}\Shell\AutoRun\Command

Supprimé ! HKCU\...\Explorer\MountPoints2\{2be71cc4-c652-11de-9737-001a921087ee}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[18/09/2006 22:43|--a------|24] C:\autoexec.bat

[02/11/2006 10:53|-rahs----|438840] C:\bootmgr

[11/12/2006 20:10|-ra-s----|8192] C:\BOOTSECT.BAK

[27/02/2010 22:17|--a------|1004] C:\cleannavi.txt

[18/09/2006 22:43|--a------|10] C:\config.sys

[02/03/2010 09:57|--a------|5839] C:\error.log

[19/09/2009 09:55|--a------|167653] C:\ExtractLog.txt

[27/02/2008 17:05|--a------|2750] C:\INSTALL.LOG

[01/04/2007 18:23|-rahs----|0] C:\IO.SYS

[01/04/2007 18:23|-rahs----|0] C:\MSDOS.SYS

[?|?|?] C:\pagefile.sys

[27/02/2010 18:12|--a------|1015] C:\Rapport Navilog 27022010.txt

[27/02/2010 18:05|--a------|1997] C:\RapportToolBar27022010(2).txt

[27/02/2010 17:46|--a------|1993] C:\RapportToolBar27022010.txt

[27/03/2008 11:15|--a------|477] C:\RHDSetup.log

[19/09/2009 09:40|--a------|159] C:\Setup.log

[27/02/2010 19:23|--a------|2184] C:\TB.txt

[24/05/2001 12:59|--a------|162304] C:\UNWISE.EXE

[26/07/2009 10:05|--a------|594] C:\updatedatfix.log

[02/03/2010 11:29|--a------|5118] C:\UsbFix.txt

[04/10/2006 00:02|--ahs----|438328] D:\boo.mgr

[02/11/2006 01:53|--ahs----|438840] D:\bootmgr

[13/10/2006 15:00|--ahs----|1322] D:\Desktop.ini

[11/12/2006 21:24|--ahs----|106] D:\MASTER.LOG

[31/03/2007 13:18|--ah-----|487] D:\pcdr.ini

[10/09/2002 13:58|--ahs----|181616] D:\Protect.ed

[11/12/2006 21:24|--ahs----|44] D:\RESTORE.INI

[18/10/2006 11:09|--ahs----|34] D:\SystemRecovery.txt

[25/11/2009 11:37|--ah-----|4096] F:\._.Trashes

[04/12/2009 11:42|--a------|2021185] F:\test.pdf

[25/11/2009 11:38|--ah-----|16] F:\.vbt5

[04/12/2009 11:24|--a------|2042441] F:\uc1 avec numerotation.docx

[04/12/2009 12:13|--a------|2371072] F:\uc1 final.doc

[04/12/2009 11:42|--a------|2014462] F:\test.docx

[04/12/2009 11:39|--a------|2026600] F:\uc1 avec numerotation.pdf

[03/02/2010 08:17|--a------|14791] F:\Affiche expo trets.docx

[19/01/2010 17:37|--a------|12497] F:\AUTORISA.docx

[25/01/2010 13:50|--a------|24931] F:\BILAN REUNION.docx

[10/09/2009 22:27|--a------|20649] F:\Num‚riser0002.pdf

[10/09/2009 22:15|--a------|18771] F:\Num‚riser0003.pdf

[08/01/2010 09:56|--a------|39936] F:\CV Eric 2009-2.wps

[11/09/2009 09:31|--a------|259903] F:\CV Eric 2009.docx

[11/09/2009 09:32|--a------|271872] F:\CV Eric 2009.doc

[25/11/2009 08:28|--a------|12004] F:\EXPOSITION ESPACE.docx

[25/11/2009 09:54|--a------|10650] F:\article com.docx

[01/12/2009 17:41|--a------|692224] F:\UC1 (R‚par‚2 doc.doc

[02/12/2009 21:37|--a------|12052] F:\financement.docx

[20/11/2009 16:15|---h-----|4090368] L:\~WRL0005.tmp

[20/10/2009 09:50|--a------|14288] L:\Droit du travail.docx

[13/07/2009 11:36|--a------|287232] L:\~WRD3501.tmp

[01/03/2010 09:01|--a------|0] L:\emdE33.tmp

[18/03/2008 14:53|--ahs----|718336] L:\ehthumbs_vista.db

[30/11/2009 15:27|--a------|4086272] L:\UC1.doc

[12/11/2009 15:44|---h-----|62818] L:\~WRL0004.tmp

[04/02/2010 09:48|--a------|14981] L:\text urba trets.docx

[05/10/2009 18:44|--a------|1007616] L:\~WRD2794.tmp

[30/11/2009 14:08|---h-----|4112384] L:\~WRL0007.tmp

[04/12/2009 09:00|--a------|50688] L:\tableau projet fini.doc

[02/04/2009 15:42|---h-----|94208] L:\~WRL2679.tmp

[06/07/2009 17:07|--ah-----|4096] L:\._.Trashes

[13/07/2009 10:35|---h-----|583680] L:\~WRL0003.tmp

[19/11/2009 16:11|--a------|68740] L:\UC2.docx

[02/12/2009 09:34|--a------|654336] L:\UC1 (R‚par‚).doc

[02/12/2009 21:53|--a------|13015] L:\TABLEAU CONSTAT.xlsx

[04/12/2009 11:45|--a------|12261] L:\Page de garde.docx

[04/02/2010 10:08|--a------|14879] L:\Affiche expo trets.docx

[06/07/2009 17:08|--ah-----|16] L:\.vbt5

[11/09/2009 18:18|--a------|11790] L:\LETTRE EMPLOI.docx

[27/09/2009 10:23|---h-----|1129984] L:\~WRL0874.tmp

[28/11/2009 09:33|--a------|201061] L:\Trace.txt

[27/09/2009 13:03|---h-----|1126400] L:\~WRL0001.tmp

[05/10/2009 16:02|---h-----|973824] L:\~WRL0002.tmp

[30/11/2009 13:38|--a------|15050] L:\TABLEAU planning.xlsx

[02/03/2010 09:19|--a------|30996] L:\BILAN REUNION.docx

[28/11/2009 11:30|---h-----|4083200] L:\~WRL0006.tmp

[08/10/2009 09:49|--a------|5382734] L:\textes eric edit.odt

[22/02/2010 09:16|--a------|15341] L:\Proposition CLSH.docx

[23/02/2010 17:29|--a------|12155] L:\Mr parisotto.docx

[26/02/2010 10:01|--a------|23552] L:\Bilan action EJ.wps

[04/02/2010 09:14|--a------|203] L:\Kingston (E).lnk

[03/04/2009 13:10|--ah-----|165] L:\~$Objectifs.xlsx

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido).

# D:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido).

# F:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido).

# L:\autorun.inf -> Dossier créé par UsbFix (El Desaparecido).

################## | Upload |

Veuillez envoyer le fichier : C:\UsbFix_Upload_Me_PC-serein.zip : http://chiquitine.changelog.fr/Sample/Upload.php

Merci pour votre contribution .

################## | ! Fin du rapport # UsbFix V6.097 ! |

Voili-voilà

le 1 mars 2010

Merci à toi, Falkra .

Je m'en vais bosser.

Bonne journée.

Noa

le 1 mars 2010

Bonjour Apollo

voici les éléments qui s'affichent quand je fais la sauvegarde et qu'elle échoue: Fichier: \Device\HarddiskVolumeShadowCopy18\Users\Eric\AppData\Local\btmhto.Oxe et le code erreur est :Accès refusé: 0 x 80070005.

Je ne pense pas avoir de clef U3 et voici le rapport de UsbFix après les manip. que vous m'avez demandée de faire :

############################## | UsbFix V6.097 |

User : Vannina (Administrateurs) # PC-SEREIN

Update on 20/02/2010 by El Desaparecido , C_XX & Chimay8

Start at: 09:53:09 | 01/03/2010

Website : http://pagesperso-orange.fr/NosTools/index.html

Contact : FindyKill.Contact@gmail.com

Intel® Pentium® 4 CPU 3.00GHz

Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6000 32-bit) #

Internet Explorer 7.0.6000.16982

Windows Firewall Status : Enabled

AV : AntiVirus Firewall 7.00 7.00 [ (!) Disabled | Updated ]

FW : AntiVirus Firewall 7.00[ (!) Disabled ]7.00

C:\ -> Disque fixe local # 143,98 Go (94,48 Go free) [HP] # NTFS

D:\ -> Disque fixe local # 5,06 Go (601,5 Mo free) [Recovery] # NTFS

E:\ -> Disque CD-ROM # 4 Go (2,67 Go free) [27 févr. 2010] # UDF

F:\ -> Disque amovible # 1,86 Go (1,79 Go free) [uSB DISK] # FAT

H:\ -> Disque amovible

I:\ -> Disque amovible

J:\ -> Disque amovible

K:\ -> Disque amovible

############################## | Processus actifs |

C:\Windows\System32\smss.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\svchost.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsgk32st.exe

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\FSGK32.EXE

C:\Program Files\Orange\AntivirusFirewall\Common\FSMA32.EXE

C:\Windows\system32\svchost.exe

c:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\Program Files\Orange\AntivirusFirewall\Common\FSMB32.EXE

C:\Windows\System32\svchost.exe

C:\Program Files\Controle Parental\bin\optproxy.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\svchost.exe

C:\Program Files\CyberLink\Shared Files\RichVideo.exe

C:\Windows\system32\svchost.exe

C:\Windows\System32\svchost.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Orange\AntivirusFirewall\Common\FCH32.EXE

C:\Program Files\Orange\AntivirusFirewall\Common\FAMEH32.EXE

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsqh.exe

C:\Windows\system32\WUDFHost.exe

C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsaua.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fssm32.exe

C:\Program Files\Orange\AntivirusFirewall\FWES\Program\fsdfwd.exe

C:\Program Files\Orange\AntivirusFirewall\FSAUA\program\fsus.exe

C:\Program Files\Orange\AntivirusFirewall\Anti-Virus\fsav32.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\hp\support\hpsysdrv.exe

C:\hp\KBD\kbd.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE

C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe

C:\Windows\system32\igfxsrvc.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

C:\Program Files\CyberLink\PCM4Everio\EverioService.exe

C:\Program Files\Controle Parental\bin\OPTGui.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Orange\Logiciel de Synchronisation Orange\Voxsync.exe

C:\Philips\GoGear VIBE Device Manager\GoGear_Vibe_DeviceManager.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\system32\conime.exe

C:\Program Files\Orange\Logiciel de Synchronisation Orange\SyncManager.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN

C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\svchost.exe

C:\Windows\system32\sdclt.exe

C:\Windows\system32\rundll32.exe

C:\Windows\system32\sdclt.exe

C:\Windows\system32\wbem\wmiprvse.exe

################## | Elements infectieux |

C:\Windows\System32\autorun.inf

E:\autorun.inf

################## | Registre |

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{08c717ac-5fc2-11de-828f-001a921087ee}

shell\AutoRun\command =M:\LaunchU3.exe -a

HKCU\..\..\Explorer\MountPoints2\{2be71cc4-c652-11de-9737-001a921087ee}

shell\AutoRun\command =C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\NoLimit.exe

################## | Vaccin |

################## | ! Fin du rapport # UsbFix V6.097 ! |

A +

Noa

le 28 février 2010

Bonsoir à vous. Je vais me coucher. Bonne nuit et à demain.

Noa

le 28 février 2010

Je ne me suis pas adressée à d'autres forums. Par contre, je me suis servie de l'expérience d'autres pour télécharger navilog, mbam, et hijack this. Malheureusement, ça ne m'a pas totalement débarrassé de la bête puisque je ne parviens pas à sauvegarder mes fichiers, la sauvegarde plantant sur le fichier contaminé.

Je vous transmets les résultats de RSIT:

Logfile of random's system information tool 1.06 (written by random/random)

Run by Vannina at 2010-02-28 21:30:39

Microsoft® Windows Vista™ Édition Familiale Premium

System drive C: has 96 GB (65%) free of 147 GB

Total RAM: 1014 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:31:57, on 28/02/2010

Platform: Windows Vista (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.16982)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\hp\support\hpsysdrv.exe

C:\hp\KBD\kbd.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Orange\AntivirusFirewall\Common\FSM32.EXE

C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

C:\Program Files\CyberLink\PCM4Everio\EverioService.exe

C:\Program Files\Controle Parental\bin\OPTGui.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Orange\Logiciel de Synchronisation Orange\Voxsync.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\system32\conime.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN

C:\Program Files\Orange\Logiciel de Synchronisation Orange\SyncManager.exe

C:\Program Files\Orange\AntivirusFirewall\FSGUI\fsguidll.exe

C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\sdclt.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\sdclt.exe

C:\Windows\system32\NOTEPAD.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\Windows\system32\NOTEPAD.EXE

C:\Users\Vannina\Downloads\RSIT.exe

C:\Program Files\Trend Micro\HijackThis\Vannina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free.fr/search/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ig?hl=fr