Aller au contenu

ka-limero

Membres
  • Compteur de contenus

    20
  • Inscription

  • Dernière visite

Autres informations

  • Mes langues
    francais

ka-limero's Achievements

Junior Member

Junior Member (3/12)

0

Réputation sur la communauté

  1. Bonjour Quand je télécharge c'est tres instable, j’étais chez free ADSL, je pouvais tres bien monter dans les 900 ko/s, normale et redescendre dans la seconde a 300, 200, 100, 50 mème parfois 0 ko/s, J'ai changé de FAI, maintenant je suis avec la fibre optique SFR, je rencontre le mème problème, j'ai pansé a un virus, j'ai fais plusieurs contrôles sur différent forum, et ce problème n'a jamais été résolut. J'ai l'impression qu'il ya un ou des programmes qui pourrait être en causse, je vous ai fait des captures d'ecran des programmes actifs quand je telecharge, pouvez vous me dire s'il ya une anomalie ? ps: c'est pas mon par-feu, je l'ai désactive, et le par-feu windows dans processus aussi, le problème persiste: Gestionnaire des taches -Dans processus: 44A - HostingPics.net - Hébergement d'images gratuit 95C - HostingPics.net - Hébergement d'images gratuit puis: winlogon.exe Bich 2160k, kwisptis.exe Bich 4216k Composant de saisie tactile ou avec stylet microsoft - Dans services: 471 - HostingPics.net - Hébergement d'images gratuit 992 - HostingPics.net - Hébergement d'images gratuit Capture3 - HostingPics.net - Hébergement d'images gratuit 864 - HostingPics.net - Hébergement d'images gratuit 815 - HostingPics.net - Hébergement d'images gratuit 626 - HostingPics.net - Hébergement d'images gratuit Merci beaucoup.
  2. bonjour on m'a oublié, le dernier message date du 16 Nov, merci : http://forum.zebulon.fr/rapport-hijackthis-ralentissement-et-crash-t180795.html
  3. toujours pareil, j'ai fait des recherches, apparemment c'est un bug du logiciel, tu n'aurais pas un autre programme à me proposer ?
  4. pas de changement, toujours à 36% avec le même message
  5. oops,désolé, je veux trop faire tout rapidement bien j'ai lancé l'analyse ZHPDiag, mais à chaque fois ca stoppe à 36% avec une fenêtre qui s' ouvre "Erreur d'insertion de ligne RichEdit"
  6. Bonjour excusez moi, mais je ne savais pas ou poster ce type de message voila mon problème, je dois envoyer une pièce jointe sur le forum, mais je n'ai pas d'onglet "Ajouter des fichiers joints" comment je peux faire ? et quand je clique pour configurer les options du message:
  7. j'ai un tout petit problème, c'est que je n'ai pas d'onglet "Ajouter des fichiers joints" et quand je clique pour configurer les options du message:
  8. Bonjour on m'a oublié, la dernière réponse date du 12 novembre 2010 c'est ici http://forum.zebulon.fr/rapport-hijackthis-ralentissement-et-crash-t180795.html merci
  9. j'ai pas mis (FCopy:)je sais pas si c'est important sinon, j'ai du m'y reprendre a deux fois, car la première, il m'a sortie un rapport, mais l'a pas enregistré. voici: ComboFix 10-11-10.03 - Sax 12/11/2010 18:29:59.8.4 - x86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.1519 [GMT 1:00] Lancé depuis: c:\users\Sax\Desktop\ComboFix.exe Commutateurs utilisés :: c:\users\Sax\Desktop\CFScript.txt SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((( Fichiers créés du 2010-10-12 au 2010-11-12 )))))))))))))))))))))))))))))))))))) . 2010-11-12 17:37 . 2010-11-12 17:37 -------- d-----w- c:\users\Tib\AppData\Local\temp 2010-11-12 17:37 . 2010-11-12 17:37 -------- d-----w- c:\users\TEMP\AppData\Local\temp 2010-11-12 17:37 . 2010-11-12 17:37 -------- d-----w- c:\users\Mcx1\AppData\Local\temp 2010-11-12 17:37 . 2010-11-12 17:37 -------- d-----w- c:\users\Invité\AppData\Local\temp 2010-11-12 17:37 . 2010-11-12 17:37 -------- d-----w- c:\users\freenet\AppData\Local\temp 2010-11-12 17:37 . 2010-11-12 17:37 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-11-12 17:37 . 2010-11-12 17:37 -------- d-----w- c:\users\Administrateur\AppData\Local\temp 2010-11-12 07:57 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{091C3F0F-068D-40AB-AFE4-6C5FF8671DE0}\mpengine.dll 2010-11-10 14:11 . 2010-10-07 11:37 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2010-11-09 20:41 . 2010-11-09 20:41 -------- d-----w- c:\users\Sax\AppData\Roaming\mkvtoolnix 2010-11-09 20:40 . 2010-11-11 06:55 -------- d-----w- c:\program files\MKVtoolnix 2010-11-07 19:47 . 2010-11-07 19:47 -------- d-----w- c:\program files\Ad-Remover 2010-10-27 05:34 . 2010-08-26 16:34 1696256 ----a-w- c:\windows\system32\gameux.dll 2010-10-27 05:34 . 2010-08-26 16:33 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-10-27 05:34 . 2010-08-26 14:23 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-10-22 05:34 . 2010-10-22 05:34 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\c2ba75781cb71aa19\DSETUP.dll 2010-10-22 05:34 . 2010-10-22 05:34 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\c2ba75781cb71aa19\DXSETUP.exe 2010-10-22 05:34 . 2010-10-22 05:34 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\c2ba75781cb71aa19\dsetup32.dll 2010-10-22 05:34 . 2010-10-22 05:34 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\c0d01a381cb71aa18\DSETUP.dll 2010-10-22 05:34 . 2010-10-22 05:34 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\c0d01a381cb71aa18\DXSETUP.exe 2010-10-22 05:34 . 2010-10-22 05:34 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\c0d01a381cb71aa18\dsetup32.dll 2010-10-22 05:33 . 2010-11-11 03:39 -------- d-----w- c:\users\Sax\AppData\Local\Windows Live 2010-10-22 05:31 . 2009-08-04 08:02 754688 ----a-w- c:\windows\system32\webservices.dll 2010-10-21 22:12 . 2010-10-21 22:12 -------- d-----w- c:\users\Sax\AppData\Local\Cooliris 2010-10-19 07:07 . 2010-09-13 13:56 8147456 ----a-w- c:\windows\system32\wmploc.DLL 2010-10-19 07:07 . 2010-09-13 13:56 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2010-10-19 07:06 . 2010-09-06 16:20 125952 ----a-w- c:\windows\system32\srvsvc.dll 2010-10-19 07:06 . 2010-09-06 16:19 17920 ----a-w- c:\windows\system32\netevent.dll 2010-10-19 07:06 . 2010-09-06 13:45 304128 ----a-w- c:\windows\system32\drivers\srv.sys 2010-10-19 07:06 . 2010-09-06 13:45 145408 ----a-w- c:\windows\system32\drivers\srv2.sys 2010-10-19 07:06 . 2010-09-06 13:45 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys 2010-10-19 07:06 . 2010-08-10 15:53 274944 ----a-w- c:\windows\system32\schannel.dll 2010-10-19 07:03 . 2010-08-31 15:46 954752 ----a-w- c:\windows\system32\mfc40.dll 2010-10-19 07:03 . 2010-08-31 15:46 954288 ----a-w- c:\windows\system32\mfc40u.dll 2010-10-19 07:03 . 2010-08-31 13:27 2038272 ----a-w- c:\windows\system32\win32k.sys 2010-10-19 07:03 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll 2010-10-19 07:03 . 2010-08-20 16:05 867328 ----a-w- c:\windows\system32\wmpmde.dll 2010-10-19 07:02 . 2010-08-31 15:44 531968 ----a-w- c:\windows\system32\comctl32.dll 2010-10-16 09:24 . 2010-10-16 11:18 -------- d-----w- c:\users\Sax\AppData\Roaming\IDM 2010-10-16 00:48 . 2010-10-16 00:48 -------- d-----w- c:\program files\CodeGazer 2010-10-15 16:14 . 2010-10-15 16:14 -------- d-----w- c:\program files\Switcher . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-19 09:41 . 2009-10-03 00:15 222080 ------w- c:\windows\system32\MpSigStub.exe 2010-10-16 00:53 . 2009-09-11 07:11 615424 ----a-w- c:\windows\system32\themeui.dll 2010-09-22 22:47 . 2010-09-22 22:47 49016 ----a-w- c:\windows\system32\sirenacm.dll 2010-09-15 02:50 . 2010-04-28 08:27 472808 ----a-w- c:\windows\system32\deployJava1.dll 2010-08-26 16:33 . 2010-10-27 05:34 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll 2010-08-26 16:33 . 2010-10-27 05:34 542720 ----a-w- c:\windows\apppatch\AcLayers.dll 2010-08-26 16:33 . 2010-10-27 05:34 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll 2010-08-26 16:33 . 2010-10-27 05:34 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll 2010-08-17 14:11 . 2010-09-15 06:49 128000 ----a-w- c:\windows\system32\spoolsv.exe 2010-05-02 15:57 . 2010-05-02 15:56 644 ----a-w- c:\program files\mpc5.reg 2010-05-02 15:57 . 2010-05-02 15:56 218 ----a-w- c:\program files\mpc6.reg 2010-05-02 15:57 . 2010-05-02 15:56 1636 ----a-w- c:\program files\mpc7.reg 2010-05-02 15:57 . 2010-05-02 15:56 816 ----a-w- c:\program files\ffdssetts.reg 2010-05-02 15:57 . 2010-05-02 15:56 680 ----a-w- c:\program files\mpc2.reg 2010-05-02 15:57 . 2010-05-02 15:56 226 ----a-w- c:\program files\mpc3.reg 2010-05-02 15:57 . 2010-05-02 15:56 218 ----a-w- c:\program files\mpc1.reg 2010-05-02 15:57 . 2010-05-02 15:56 1406 ----a-w- c:\program files\ffdsasetts.reg 2010-07-23 08:34 . 2009-11-21 08:47 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll . ------- Sigcheck ------- [-] 2010-10-16 . 690D53BD10A804BB6D0A772D1C0E6907 . 247296 . . [6.0.6000.16386] . . c:\windows\System32\shsvcs.dll [7] 2009-04-11 . C818C44C201898399BF999BB6B35D4E3 . 247296 . . [6.0.6000.16386] . . c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6002.18005_none_cf1bd6361a0f622e\shsvcs.dll [7] 2008-01-19 . 27F10F348E508243F6254846F8370D0D . 247296 . . [6.0.6000.16386] . . c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6001.18000_none_cd305d2a1ced96e2\shsvcs.dll [7] 2006-11-02 . B264DFA21677728613267FE63802B332 . 245248 . . [6.0.6000.16386] . . c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6000.16386_none_caf99b2e2002860e\shsvcs.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_1] @="{01702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{01702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_10] @="{10702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{10702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_2] @="{02702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{02702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_3] @="{03702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{03702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_4] @="{04702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{04702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_5] @="{05702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{05702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_6] @="{06702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{06702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_7] @="{07702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{07702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_8] @="{08702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{08702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_9] @="{09702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{09702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472] "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-09-20 202024] "Netlog Music Tool"="c:\program files\Netlog Music Tool\NetlogMusicTool.exe" [2009-06-24 1728456] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "Google Update"="c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-01-26 135664] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2007-05-11 4452352] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-07-23 30192] "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384] "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136] "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-09-20 1836328] "Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072] "CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 6.0\apdproxy.exe" [2007-09-10 67488] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-02-15 141608] "UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" [2010-09-14 352976] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552] "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-08-29 202256] "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] c:\users\Tib\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008] c:\users\Sax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Outil de notification Live Search.lnk - c:\users\Sax\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe [2008-12-18 143360] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2007-6-6 394856] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] 2010-01-26 16:15 135664 ----atw- c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] 2010-09-22 22:47 4240760 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VPbubble] 2008-08-25 09:30 239120 ----a-w- c:\program files\Nosibay\VPbubble\Launcher.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "AntiVirusOverride"=dword:00000001 R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-07-23 30192] S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2010-06-09 11352] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2010-04-22 22104] S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] WindowsMobile REG_MULTI_SZ wcescomm rapimgr LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . Contenu du dossier 'Tâches planifiées' 2010-11-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-527785819-3466132717-2700656992-1000Core.job - c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe [2010-01-26 16:15] 2010-11-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-527785819-3466132717-2700656992-1000UA.job - c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe [2010-01-26 16:15] . . ------- Examen supplémentaire ------- . mWindow Title = uInternet Settings,ProxyOverride = *.local IE: &Télécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddLink.html IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Ajouter à l'Anti-bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm IE: Tout t&élécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddList.html TCP: {7C7F0920-689B-43E1-88C2-0622986547D6} = 212.27.40.240,212.27.40.241 FF - ProfilePath - c:\users\Sax\AppData\Roaming\Mozilla\Firefox\Profiles\shhywqv3.Utilisateur par défaut\ FF - prefs.js: browser.startup.homepage - hxxp://google.fr FF - component: c:\program files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru\components\abhelperxpcom.dll FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\kavlinkfilter.dll FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll FF - component: c:\users\Sax\AppData\Roaming\Mozilla\Firefox\Profiles\shhywqv3.Utilisateur par défaut\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll FF - component: c:\users\Sax\AppData\Roaming\Mozilla\Firefox\Profiles\shhywqv3.Utilisateur par défaut\extensions\piclens@cooliris.com\components\coolirisstub.dll FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll FF - plugin: c:\program files\Veetle\Player\npvlc.dll FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll FF - plugin: c:\program files\Veetle\VLCBroadcast\npvbp.dll FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll FF - plugin: c:\users\Sax\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\users\Sax\AppData\Roaming\Move Networks\plugins\npqmp071700000016.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- PARAMETRES FIREFOX ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-11-12 18:37 Windows 6.0.6002 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'Explorer.exe'(4128) c:\windows\RESOUR~1\Themes\BADGES~1.0\BADGES~1.DLL . Heure de fin: 2010-11-12 18:40:35 ComboFix-quarantined-files.txt 2010-11-12 17:40 ComboFix2.txt 2010-11-12 17:13 ComboFix3.txt 2010-11-11 14:27 Avant-CF: 18 586 443 776 octets libres Après-CF: 18 541 514 752 octets libres - - End Of File - - AD8CFA4DC902DABA57732241C052ACE3
  10. dans : FCopy:: c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6002.18005_none_cf1bd6361a0f622e\shsvcs.dll | c:\windows\System32\shsvcs.dll je dois marquer (FCopy) aussi ?
  11. Il y'a eu du changement depuis: bug de windows également Voici: ComboFix 10-11-10.03 - Sax 11/11/2010 15:15:56.6.4 - x86 Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.3069.1659 [GMT 1:00] Lancé depuis: c:\users\Sax\Desktop\ComboFix.exe SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . ((((((((((((((((((((((((((((( Fichiers créés du 2010-10-11 au 2010-11-11 )))))))))))))))))))))))))))))))))))) . 2010-11-11 14:23 . 2010-11-11 14:23 -------- d-----w- c:\users\Tib\AppData\Local\temp 2010-11-11 14:23 . 2010-11-11 14:23 -------- d-----w- c:\users\TEMP\AppData\Local\temp 2010-11-11 14:23 . 2010-11-11 14:23 -------- d-----w- c:\users\Mcx1\AppData\Local\temp 2010-11-11 14:23 . 2010-11-11 14:23 -------- d-----w- c:\users\Invité\AppData\Local\temp 2010-11-11 14:23 . 2010-11-11 14:23 -------- d-----w- c:\users\freenet\AppData\Local\temp 2010-11-11 14:23 . 2010-11-11 14:23 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-11-11 14:23 . 2010-11-11 14:23 -------- d-----w- c:\users\Administrateur\AppData\Local\temp 2010-11-10 14:11 . 2010-10-07 11:37 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2010-11-09 20:41 . 2010-11-09 20:41 -------- d-----w- c:\users\Sax\AppData\Roaming\mkvtoolnix 2010-11-09 20:40 . 2010-11-11 06:55 -------- d-----w- c:\program files\MKVtoolnix 2010-11-09 16:18 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1D095B98-8C87-4403-A3A7-1FE42F3390CE}\mpengine.dll 2010-11-07 19:47 . 2010-11-07 19:47 -------- d-----w- c:\program files\Ad-Remover 2010-10-27 05:34 . 2010-08-26 16:34 1696256 ----a-w- c:\windows\system32\gameux.dll 2010-10-27 05:34 . 2010-08-26 16:33 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-10-27 05:34 . 2010-08-26 14:23 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-10-22 05:34 . 2010-10-22 05:34 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\c2ba75781cb71aa19\DSETUP.dll 2010-10-22 05:34 . 2010-10-22 05:34 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\c2ba75781cb71aa19\DXSETUP.exe 2010-10-22 05:34 . 2010-10-22 05:34 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\c2ba75781cb71aa19\dsetup32.dll 2010-10-22 05:34 . 2010-10-22 05:34 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\c0d01a381cb71aa18\DSETUP.dll 2010-10-22 05:34 . 2010-10-22 05:34 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\c0d01a381cb71aa18\DXSETUP.exe 2010-10-22 05:34 . 2010-10-22 05:34 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\c0d01a381cb71aa18\dsetup32.dll 2010-10-22 05:33 . 2010-11-11 03:39 -------- d-----w- c:\users\Sax\AppData\Local\Windows Live 2010-10-22 05:31 . 2009-08-04 08:02 754688 ----a-w- c:\windows\system32\webservices.dll 2010-10-21 22:12 . 2010-10-21 22:12 -------- d-----w- c:\users\Sax\AppData\Local\Cooliris 2010-10-19 07:07 . 2010-09-13 13:56 8147456 ----a-w- c:\windows\system32\wmploc.DLL 2010-10-19 07:07 . 2010-09-13 13:56 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2010-10-19 07:06 . 2010-09-06 16:20 125952 ----a-w- c:\windows\system32\srvsvc.dll 2010-10-19 07:06 . 2010-09-06 16:19 17920 ----a-w- c:\windows\system32\netevent.dll 2010-10-19 07:06 . 2010-09-06 13:45 304128 ----a-w- c:\windows\system32\drivers\srv.sys 2010-10-19 07:06 . 2010-09-06 13:45 145408 ----a-w- c:\windows\system32\drivers\srv2.sys 2010-10-19 07:06 . 2010-09-06 13:45 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys 2010-10-19 07:06 . 2010-08-10 15:53 274944 ----a-w- c:\windows\system32\schannel.dll 2010-10-19 07:03 . 2010-08-31 15:46 954752 ----a-w- c:\windows\system32\mfc40.dll 2010-10-19 07:03 . 2010-08-31 15:46 954288 ----a-w- c:\windows\system32\mfc40u.dll 2010-10-19 07:03 . 2010-08-31 13:27 2038272 ----a-w- c:\windows\system32\win32k.sys 2010-10-19 07:03 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll 2010-10-19 07:03 . 2010-08-20 16:05 867328 ----a-w- c:\windows\system32\wmpmde.dll 2010-10-19 07:02 . 2010-08-31 15:44 531968 ----a-w- c:\windows\system32\comctl32.dll 2010-10-16 09:24 . 2010-10-16 11:18 -------- d-----w- c:\users\Sax\AppData\Roaming\IDM 2010-10-16 00:48 . 2010-10-16 00:48 -------- d-----w- c:\program files\CodeGazer 2010-10-15 16:14 . 2010-10-15 16:14 -------- d-----w- c:\program files\Switcher 2010-10-13 14:28 . 2010-10-13 14:28 -------- d-----w- c:\users\Tib\AppData\Roaming\OpenOffice.org . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-19 09:41 . 2009-10-03 00:15 222080 ------w- c:\windows\system32\MpSigStub.exe 2010-10-16 00:53 . 2009-09-11 07:11 615424 ----a-w- c:\windows\system32\themeui.dll 2010-09-22 22:47 . 2010-09-22 22:47 49016 ----a-w- c:\windows\system32\sirenacm.dll 2010-09-15 02:50 . 2010-04-28 08:27 472808 ----a-w- c:\windows\system32\deployJava1.dll 2010-08-26 16:33 . 2010-10-27 05:34 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll 2010-08-26 16:33 . 2010-10-27 05:34 542720 ----a-w- c:\windows\apppatch\AcLayers.dll 2010-08-26 16:33 . 2010-10-27 05:34 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll 2010-08-26 16:33 . 2010-10-27 05:34 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll 2010-08-17 14:11 . 2010-09-15 06:49 128000 ----a-w- c:\windows\system32\spoolsv.exe 2010-05-02 15:57 . 2010-05-02 15:56 644 ----a-w- c:\program files\mpc5.reg 2010-05-02 15:57 . 2010-05-02 15:56 218 ----a-w- c:\program files\mpc6.reg 2010-05-02 15:57 . 2010-05-02 15:56 1636 ----a-w- c:\program files\mpc7.reg 2010-05-02 15:57 . 2010-05-02 15:56 816 ----a-w- c:\program files\ffdssetts.reg 2010-05-02 15:57 . 2010-05-02 15:56 680 ----a-w- c:\program files\mpc2.reg 2010-05-02 15:57 . 2010-05-02 15:56 226 ----a-w- c:\program files\mpc3.reg 2010-05-02 15:57 . 2010-05-02 15:56 218 ----a-w- c:\program files\mpc1.reg 2010-05-02 15:57 . 2010-05-02 15:56 1406 ----a-w- c:\program files\ffdsasetts.reg 2010-07-23 08:34 . 2009-11-21 08:47 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll . ------- Sigcheck ------- [-] 2010-10-16 . 690D53BD10A804BB6D0A772D1C0E6907 . 247296 . . [6.0.6000.16386] . . c:\windows\System32\shsvcs.dll [7] 2009-04-11 . C818C44C201898399BF999BB6B35D4E3 . 247296 . . [6.0.6000.16386] . . c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6002.18005_none_cf1bd6361a0f622e\shsvcs.dll [7] 2008-01-19 . 27F10F348E508243F6254846F8370D0D . 247296 . . [6.0.6000.16386] . . c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6001.18000_none_cd305d2a1ced96e2\shsvcs.dll [7] 2006-11-02 . B264DFA21677728613267FE63802B332 . 245248 . . [6.0.6000.16386] . . c:\windows\winsxs\x86_microsoft-windows-shsvcs_31bf3856ad364e35_6.0.6000.16386_none_caf99b2e2002860e\shsvcs.dll . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_1] @="{01702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{01702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_10] @="{10702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{10702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_2] @="{02702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{02702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_3] @="{03702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{03702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_4] @="{04702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{04702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_5] @="{05702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{05702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_6] @="{06702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{06702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_7] @="{07702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{07702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_8] @="{08702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{08702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShedkoBadges_9] @="{09702EF5-1B33-487F-995F-6FA23F1D6652}" [HKEY_CLASSES_ROOT\CLSID\{09702EF5-1B33-487F-995F-6FA23F1D6652}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472] "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-09-20 202024] "Netlog Music Tool"="c:\program files\Netlog Music Tool\NetlogMusicTool.exe" [2009-06-24 1728456] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "Google Update"="c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-01-26 135664] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2007-05-11 4452352] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-07-23 30192] "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384] "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136] "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-09-20 1836328] "Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 648072] "CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 6.0\apdproxy.exe" [2007-09-10 67488] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-02-15 141608] "UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" [2010-09-14 352976] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552] "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-08-29 202256] "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] c:\users\Tib\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008] c:\users\Sax\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Outil de notification Live Search.lnk - c:\users\Sax\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe [2008-12-18 143360] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2007-6-6 394856] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] 2010-01-26 16:15 135664 ----atw- c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] 2010-09-22 22:47 4240760 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VPbubble] 2008-08-25 09:30 239120 ----a-w- c:\program files\Nosibay\VPbubble\Launcher.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "AntiVirusOverride"=dword:00000001 R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-07-23 30192] R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [2008-10-06 15656] R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2010-06-09 11352] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2010-04-22 22104] S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2009-10-20 50704] S2 TabletServicePen;TabletServicePen;c:\windows\system32\Pen_Tablet.exe [2008-12-11 2749736] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] WindowsMobile REG_MULTI_SZ wcescomm rapimgr LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . Contenu du dossier 'Tâches planifiées' 2010-11-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-527785819-3466132717-2700656992-1000Core.job - c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe [2010-01-26 16:15] 2010-11-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-527785819-3466132717-2700656992-1000UA.job - c:\users\Sax\AppData\Local\Google\Update\GoogleUpdate.exe [2010-01-26 16:15] . . ------- Examen supplémentaire ------- . mWindow Title = uInternet Settings,ProxyOverride = *.local IE: &Télécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddLink.html IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Ajouter à l'Anti-bannière - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm IE: Tout t&élécharger avec NetTransport - c:\program files\Xi\NetTransport 2\NTAddList.html TCP: {7C7F0920-689B-43E1-88C2-0622986547D6} = 212.27.40.240,212.27.40.241 FF - ProfilePath - c:\users\Sax\AppData\Roaming\Mozilla\Firefox\Profiles\shhywqv3.Utilisateur par défaut\ FF - prefs.js: browser.startup.homepage - hxxp://google.fr FF - component: c:\program files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru\components\abhelperxpcom.dll FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\kavlinkfilter.dll FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll FF - component: c:\users\Sax\AppData\Roaming\Mozilla\Firefox\Profiles\shhywqv3.Utilisateur par défaut\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll FF - component: c:\users\Sax\AppData\Roaming\Mozilla\Firefox\Profiles\shhywqv3.Utilisateur par défaut\extensions\piclens@cooliris.com\components\coolirisstub.dll FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Veetle\Player\npvlc.dll FF - plugin: c:\program files\Veetle\plugins\npVeetle.dll FF - plugin: c:\program files\Veetle\VLCBroadcast\npvbp.dll FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll FF - plugin: c:\users\Sax\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\users\Sax\AppData\Roaming\Move Networks\plugins\npqmp071700000016.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- PARAMETRES FIREFOX ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false); . - - - - ORPHELINS SUPPRIMES - - - - MSConfigStartUp-eMuleAutoStart - c:\program files\eMule\emule.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-11-11 15:23 Windows 6.0.6002 Service Pack 2 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... c:\users\Sax\AppData\Local\Temp\catchme.dll 53248 bytes executable Scan terminé avec succès Fichiers cachés: 1 ************************************************************************** . Heure de fin: 2010-11-11 15:26:59 ComboFix-quarantined-files.txt 2010-11-11 14:26 Avant-CF: 21 795 786 752 octets libres Après-CF: 21 704 196 096 octets libres Current=8 Default=8 Failed=30 LastKnownGood=17 Sets=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,30 - - End Of File - - 1477B9FBB04C592197ADBD1BBF9561EC
  12. Bonsoir J'ai des ralentissements, et parfois des crash des navigateurs que j'utilise: mozilla, google chrome j'ai fais des scan Kaspersky internet secur 2011, et depuis les sites Nod32 et BitDefender, j'ai passé un coup de Ccleaner, le problème persiste. J'ai suivi les procédure suivante : http://forum.zebulon.fr/rapport-hijackthis-ralentissement-et-crash-t180742.html&gopid=1519071?do=findComment&comment=1519071 Que dois je faire à pressent ?
  13. recommandation # 9 ? Attention aux cracks et Keygens, le P2P.,: je comprends pas je les ai supprimés
  14. arff ca a pas duré longtemps, ce matin même problème
×
×
  • Créer...