apres netoyage, [Resolu] un grand Merci

[Curson]

Bonsoir,

 

As-tu bien exécuté le script scc.bat ?

 

Poste un nouveau rapport HiJackThis.

 

 

Cordialement.

[facks]

J'ai donc bien le fichier scc.bat sur le bureau, comme tu me la demander, excuse mois d'etre un peu lourd, mais faut il que je clique dessus?

[Curson]

Oui.

[facks]

Ok, une fenêtre dos c'est ouverte, puis disparu, cela doit être normal, je suppose.

Voici le nouveau log:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:45:08, on 24/03/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\Spamihilator\spamihilator.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\Program Files\folding serge\Folding@home-Win32-x86.exe

C:\Program Files\folding serge 2\Folding@home-Win32-x86.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\folding serge 2\FahCore_a0.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\folding serge\FahCore_a0.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Program Files\Spyware Terminator\sp_rsser.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%s

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O4 - HKLM\..\Run: [spywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [spamihilator] "C:\Program Files\Spamihilator\spamihilator.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html

O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE

O23 - Service: Folding@home-CPU-[1] - Unknown owner - C:\Program Files\folding serge\Folding@home-Win32-x86.exe

O23 - Service: Folding@home-CPU-[2] - Unknown owner - C:\Program Files\folding serge 2\Folding@home-Win32-x86.exe

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

 

--

End of file - 5863 bytes

 

Je fais lentement, mais surement.

[Curson]

J'aimerais m'assurer de quelque chose :

 

Télécharge OTViewIt de OldTimer sur ton bureau.

 

- Ferme toutes les fenêtres et applications.

- Double clique sur OTViewIt.exe pour le lancer.

- Dans la liste déroulante "File Age" choisis : 30 days (ou selon votre choix)

- Clique sur le bouton "Run Scan".

- Patiente quelques minutes.

- le bloc note va s'ouvrir, poste les deux rapports obtenus dans ta prochaine réponse.

 

Si le bloc note ne s'ouvre pas, tu les trouveras sur ton bureau : OTViewIt.txt et Extras.txt

 

 

Cordialement.

[facks]

OTViewIt Extras logfile created on: 24/03/2009 18:57:39 - Run

OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\UTILISATEUR\Bureau

Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 7.0.5730.13)

Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

 

959,29 Mb Total Physical Memory | 422,42 Mb Available Physical Memory | 44,03% Memory free

2,26 Gb Paging File | 1,83 Gb Available in Paging File | 80,96% Paging File free

Paging file location(s): C:\pagefile.sys 1440 2880;

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files

Drive C: | 279,45 Gb Total Space | 242,11 Gb Free Space | 86,64% Space Free | Partition Type: NTFS

D: Drive not present or media not loaded

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

 

Computer Name: FACK

Current User Name: UTILISATEUR

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: Current user

Whitelist: On

File Age = 30 Days

 

========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] --

 

========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled"=1

"AntiVirusDisableNotify"=0

"FirewallDisableNotify"=0

"UpdatesDisableNotify"=0

"AntiVirusOverride"=1

"FirewallOverride"=0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile

"EnableFirewall"=1

"DoNotAllowExceptions"=0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\IcmpSettings]

 

========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[2008/04/14 03:34:21 | 00,142,848 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

[2008/04/14 03:34:21 | 00,142,848 | ---- | M] (Microsoft Corporation) -- %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

[2008/11/20 13:20:48 | 14,294,824 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes

[2004/10/19 17:44:04 | 00,073,728 | ---- | M] (iAnywhere Solutions, Inc.) -- C:\Hager\Taloha\Apps\rteng9.exe:*:Enabled:Adaptive Server Anywhere Network Server

[2009/03/21 02:07:47 | 00,144,792 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\system32\javaw.exe:*:Enabled:Java Platform SE binary

[2007/10/18 10:34:04 | 05,724,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger

[2008/08/29 14:17:52 | 00,074,752 | ---- | M] () -- C:\Program Files\Spamihilator\cdcc.exe:*:Enabled:Spamihilator DCC Filter Configuration

[2008/08/29 14:17:52 | 00,398,848 | ---- | M] () -- C:\Program Files\Spamihilator\dccproc.exe:*:Enabled:Spamihilator DCC Filter

[2008/12/23 10:28:26 | 01,321,984 | ---- | M] (Michel Krämer) -- C:\Program Files\Spamihilator\spamihilator.exe:*:Enabled:Spamihilator

 

========== (O18) Protocol Handlers ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]

ipp: [HKLM - No CLSID value]

[2005/09/20 11:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

[2007/10/18 10:31:54 | 00,066,072 | ---- | M] (Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (livecall:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

msdaipp: [HKLM - No CLSID value]

[2005/09/20 11:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]

[2005/09/20 11:33:58 | 00,843,984 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]

[2000/04/19 17:47:36 | 00,520,117 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\Microsoft Shared\Information Retrieval\MSITSS.DLL (ms-itss:{0A9007C0-4076-11D3-8789-0000F8105754} (HKLM) [Microsoft Infotech Storage Protocol for IE 4.0])

[2007/10/18 10:31:54 | 00,066,072 | ---- | M] (Microsoft Corporation) C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (msnim:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])

[2007/03/14 12:10:22 | 07,255,384 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\10\OWC10.DLL (mso-offdap:{3D9F03FA-7A94-11D3-BE81-0050048385D1} (HKLM) [Data Page Pluggable Protocol mso-offdap Handler])

[2007/05/10 12:45:34 | 08,069,464 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\Microsoft Shared\Web Components\11\OWC11.DLL (mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} (HKLM) [Data Page Plugable Protocal mso-offdap11 Handler])

 

========== (O18) Protocol Filters ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters

[2007/04/19 12:57:40 | 00,046,432 | ---- | M] (Microsoft Corporation) C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.DLL text/xml:{807553E5-5146-11D5-A672-00B0D022E945} (HKLM) [Reg Error: Value does not exist or could not be read.]

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00203668-8170-44A0-BE44-B632FA4D780F}"=Adobe AIR

"{09633A5E-3089-41A8-9FF1-382171423C5D}"=PSSWCORE

"{0F7C2E47-089E-4d23-B9F7-39BE00100776}"=Toolbox

"{15B8AFD9-92E9-4E86-96D9-83FAC510B82E}"=HPPhotoSmartPhotobookWebPack1

"{18669FF9-C8FE-407a-9F70-E674896B1DB4}"=GPBaseService

"{18D10072035C4515918F7E37EAFAACFC}"=AutoUpdate

"{1967D67C-6F3F-4001-9644-BAC704F7EE84}"=Samsung PC Studio

"{20D4A895-748C-4D88-871C-FDB1695B0169}"=Platform

"{22F761D1-8063-4170-ADF7-2D2F47834CA9}"=VideoToolkit01

"{26A24AE4-039D-4CA4-87B4-2F83216012FF}"=Java 6 Update 12

"{29D851C2-048C-4B5E-8D1F-25D473342BB5}"=ScanSoft OmniPage SE 4.0

"{318AB667-3230-41B5-A617-CB3BF748D371}"=iTunes

"{3248F0A8-6813-11D6-A77B-00B0D0160070}"=Java 6 Update 7

"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP

"{36FDBE6E-6684-462b-AE98-9A39A1B200CC}"=HPProductAssistant

"{4F923F90-46D1-4492-9CC6-13FBBA00E7EC}"=C4400

"{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}"=SmartWebPrintingOC

"{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}"=DeviceDiscovery

"{534C6D59-D6E3-48A6-AD0B-747799019960}"=XVID Codec Installation

"{5ACE69F0-A3E8-44eb-88C1-0A841E700180}"=TrayApp

"{61ACEE8D-4E0D-49BE-962E-9CA26EC0F921}"=IBoot

"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}"=eSupportQFolder

"{679EC478-3FF9-4987-B2FF-C2C2B27532A2}"=DocProc

"{687FEF8A-8597-40b4-832C-297EA3F35817}"=BufferChm

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}"=Apple Software Update

"{6B407945-AE16-4A2A-BAAF-497FE62EDED3}"=PS_AIO_03_C4400_Software_Min

"{6B437F94-056F-4791-AF2C-0D10E2706AF0}"=PanoStandAlone

"{6DA9102E-199F-43A0-A36B-6EF48081A658}"=Panneau de configuration MobileMe

"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}"=CustomerResearchQFolder

"{7059BDA7-E1DB-442C-B7A1-6144596720A4}"=HP Update

"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable

"{757AD3D4-036B-42FA-B0A4-96BD6F4605A0}"=Ulead VideoStudio 7 SE Basic

"{77DCDCE3-2DED-62F3-8154-05E745472D07}"=Acrobat.com

"{80533B67-C407-485D-8B5D-63BB8ED9D878}"=Scan

"{8777AC6D-89F9-4793-8266-DE406F343E89}"=QFolder

"{87E2B986-07E8-477a-93DC-AF0B6758B192}"=DocProcQFolder

"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}"=UnloadSupport

"{8ADFC4160D694100B5B8A22DE9DCABD9}"=DivX Player

"{900A92BA-19EF-4A34-86CF-7B6C85BDD971}"=VC_MergeModuleToMSI

"{9111040C-6000-11D3-8CFE-0150048383C9}"=Microsoft Office Professional Edition 2003

"{954B7F64-D1D4-476F-8919-99585D0A6ABF}"=PS_AIO_03_C4400_Software

"{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90}"=Google Earth

"{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}"=Status

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}"=Microsoft .NET Framework 3.0 Service Pack 2

"{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}"=SolutionCenter

"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}"=DeviceManagementQFolder

"{AC76BA86-7AD7-1036-7B44-A91000000001}"=Adobe Reader 9.1 - Français

"{B13A7C41581B411290FBC0395694E2A9}"=DivX Converter

"{B7050CBDB2504B34BC2A9CA0A692CC29}"=DivX Web Player

"{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}"=HPSSupply

"{BADF6744-3787-48F6-B8C9-4C4995401D65}"=Windows Live Messenger

"{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}"=Nokia Connectivity Cable Driver

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}"=Microsoft .NET Framework 2.0 Service Pack 2

"{C1B16956-0D81-4DDA-9B29-BDDB683102F0}"=Microsoft LifeChat

"{C7340571-7773-4A8C-9EBC-4E4243B38C76}"=Microsoft XML Parser

"{C9CE9393-B568-428D-AD5B-55452B9748DB}"=PS_AIO_03_C4400_ProductContext

"{CCB9B81A-167F-4832-B305-D2A0430840B3}"=WebReg

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}"=Microsoft .NET Framework 3.5 SP1

"{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}"=MarketResearch

"{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}"=Assistant de connexion Windows Live

"{D74CFE48-087F-46E1-80E6-E2950E1A8DCE}"=HP Photosmart Essential 2.5

"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}"=Destination Component

"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1"=AusLogics Disk Defrag

"{E535C94A-B87F-4182-BEA8-1E9322078D3E}"=Cards_Calendar_OrderGift_DoMorePlugout

"{EC25B803-4BDB-47F7-B877-FCE7D7966C0F}"=Visual C++ CRT 9.0 SP1

"{EC4455AB-F155-4CC1-A4C5-88F3777F9886}"=Apple Mobile Device Support

"{F0A37341-D692-11D4-A984-009027EC0A9C}"=SoundMAX

"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}"=32 Bit HP CIO Components Installer

"{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}"=Copy

"{F7B72805-2F58-4C04-AE9E-E7AD6A6EF62E}"=C4400_Help

"{F958CA02-BB40-4007-894B-258729456EE4}"=QuickTime

"{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}"=Windows Live installer

"{FF1F4E8E-A833-4c4b-A14A-45D5B841B5D8}"=HP Photosmart C4400 All-In-One Driver Software 10.0 Rel .3

"1-2-3 Schéma"=1-2-3 Schéma

"7-Zip"=7-Zip 4.65

"Adobe Flash Player ActiveX"=Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin

"aignesamdeadlink"=AM-DeadLink 3.2

"AntiVir PersonalEdition Classic"=Avira AntiVir Personal - Free Antivirus

"Arcade Race_is1"=Arcade Race v1.22

"AsusUpdate"=AsusUpdate

"BestPractice"=BestPractice (remove only)

"CCleaner"=CCleaner (remove only)

"CdaC13Ba"=SafeCast Shared Components

"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1"=Acrobat.com

"DriverAgent.exe"=DriverAgent by eSupport.com

"Easy-WebPrint"=Easy-WebPrint

"eCOMO"=e-COMO

"ElcomPdf Port Monitor"=ElcomPdf

"EVEREST Home Edition_is1"=EVEREST Home Edition v2.20

"HijackThis"=HijackThis 2.0.2

"HP Imaging Device Functions"=HP Imaging Device Functions 10.0

"HP Photosmart Essential"=HP Photosmart Essential 3.0

"HP Smart Web Printing"=HP Smart Web Printing

"HP Solution Center & Imaging Support Tools"=HP Solution Center 10.0

"HPExtendedCapabilities"=HP Customer Participation Program 10.0

"HPOCR"=OCR Software by I.R.I.S. 10.0

"IDNMitigationAPIs"=Microsoft Internationalized Domain Names Mitigation APIs

"ie7"=Windows Internet Explorer 7

"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}"=VIA Gestionnaire de périphériques de plate-forme

"Kyodai Mahjongg 2006_is1"=Kyodai Mahjongg 2006 v1.0

"magnet"=Configurateur électronique

"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware

"Messenger Plus! Live"=Messenger Plus! Live & Sponsor (CiD)

"Microsoft .NET Framework 3.5 SP1"=Microsoft .NET Framework 3.5 SP1

"MOTIX"=MOTIX

"Mozilla Firefox (3.0.7)"=Mozilla Firefox (3.0.7)

"Mozilla Thunderbird (2.0.0.21)"=Mozilla Thunderbird (2.0.0.21)

"MSCompPackV1"=Microsoft Compression Client Pack 1.0 for Windows XP

"MSNINST"=MSN

"My Free Mahjong_is1"=My Free Mahjong v.2.0

"Nero - Burning Rom!UninstallKey"=Nero OEM

"NLSDownlevelMapping"=Microsoft National Language Support Downlevel APIs

"PDF-XChange 3_is1"=PDF-XChange 3

"PhotoFiltre"=PhotoFiltre

"Revo Uninstaller"=Revo Uninstaller 1.80

"Semiolog2"=Semiolog

"Shop for HP Supplies"=Shop for HP Supplies

"Spamihilator"=Spamihilator

"Spyware Terminator_is1"=Spyware Terminator

"TmNations_is1"=TrackMania Nations ESWC 0.1.7.5

"TomTom HOME"=TomTom HOME 2.5.2.60

"Varyo"=Varyo

"VIA/S3G UniChrome Family Win2K/XP Display"=VIA/S3G Display Driver

"VN_VUIns_Rhine_VIA"=VIA Rhine-Family Fast-Ethernet Adapter

"Windows Media Format Runtime"=Windows Media Format 11 runtime

"Windows Media Player"=Lecteur Windows Media 11

"Wudf01000"=Microsoft User-Mode Driver Framework Feature Pack 1.0

"Yahoo! Toolbar"=Yahoo! Toolbar

"Zeb Help Process_is1"=ZebHelpProcess 2.32

 

========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 05/03/2009 22:00:18 | Computer Name = FACK | Source = MsiInstaller | ID = 11316

Description = Produit : Assistant de connexion Windows Live -- Erreur 1316. Erreur

au niveau du réseau lors de la tentative de lecture du fichier C:\WINDOWS\TEMP\IXP000.TMP\Install_{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}.msi

 

[ System Events ]

Error - 23/03/2009 11:53:40 | Computer Name = FACK | Source = Service Control Manager | ID = 7023

Description = Le service Gestion d'applications s'est arrêté avec l'erreur : %%2

 

Error - 23/03/2009 11:53:40 | Computer Name = FACK | Source = Service Control Manager | ID = 7023

Description = Le service Gestion d'applications s'est arrêté avec l'erreur : %%2

 

Error - 23/03/2009 11:53:40 | Computer Name = FACK | Source = Service Control Manager | ID = 7023

Description = Le service Gestion d'applications s'est arrêté avec l'erreur : %%2

 

Error - 23/03/2009 11:53:41 | Computer Name = FACK | Source = Service Control Manager | ID = 7023

Description = Le service Gestion d'applications s'est arrêté avec l'erreur : %%2

 

Error - 23/03/2009 11:53:41 | Computer Name = FACK | Source = Service Control Manager | ID = 7023

Description = Le service Gestion d'applications s'est arrêté avec l'erreur : %%2

 

Error - 23/03/2009 18:05:41 | Computer Name = FACK | Source = Service Control Manager | ID = 7000

Description = Le service FAH@C:+Documents and Settings+UTILISATEUR+Bureau+FAH504-Console.exe

n'a pas pu démarrer en raison de l'erreur : %%3

 

Error - 23/03/2009 18:05:41 | Computer Name = FACK | Source = Service Control Manager | ID = 7000

Description = Le service FAH@C:+Documents and Settings+UTILISATEUR+Bureau+filding2+FAH504-Console.exe

n'a pas pu démarrer en raison de l'erreur : %%3

 

Error - 23/03/2009 18:05:41 | Computer Name = FACK | Source = Service Control Manager | ID = 7000

Description = Le service FAH@C:+Documents and Settings+UTILISATEUR+Bureau+folding-2+FAH504-Console.exe

n'a pas pu démarrer en raison de l'erreur : %%3

 

Error - 23/03/2009 18:05:41 | Computer Name = FACK | Source = Service Control Manager | ID = 7000

Description = Le service FAH@C:+Documents and Settings+UTILISATEUR+Bureau+folding2+FAH504-Console.exe

n'a pas pu démarrer en raison de l'erreur : %%3

 

Error - 23/03/2009 18:07:03 | Computer Name = FACK | Source = Service Control Manager | ID = 7022

Description = Le service Service HP CUE DeviceDiscovery est en attente de démarrage.

 

 

< End of report >

Au passage j'ignore ci c'est utile, mais j'ignore quelle est cette ligne: O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe ?

Modifié le 24 mars 2009 par facks

[facks]

Curson, je ne suis pas impatient, mais tu joue a "houdini" ?

 

Ci besoin est, je veux bien suspendre le folding, mais pas écraser ces dossiers. Ci c'est possible pour la suite des événements.

 

Pour l'instant, je ne touche a rien et je laisse les dossiers sur mon bureau. Merci déjà pour ce qui a été fait.

[Curson]

Bonsoir,

 

Désolé pour l'attente. Nous n'allons pas toucher au Folding.

 

1) Une ancienne version de Java n'a pas été désinstallée.

 

Télécharge JavaRa et suis les instructions de ce tutorial.

 

2) Crée un nouveau document texte : clic droit de souris sur le bureau > Nouveau > Document Texte, et copie dedans les lignes suivantes (sans le mot "code) :

 

sc stop Apple Mobile Device
sc config Apple Mobile Device start= demand
sc stop PnkBstrA
sc config PnkBstrA start= disabled
sc delete PnkBstrA
del "C:\WINDOWS\system32\PnkBstrA.exe"
del "C:\WINDOWS\system32\PnkBstrB.exe"

Dans le menu du bloc notes, clic sur "Fichier" >> Enregistrer sous.

Choisis le bureau comme lieu d'enregistrement, puis dans:

 

Type -> choisis "tous les fichiers"

Nom du fichier -> tape aftermatch.bat

Clique sur enregistrer.

 

 

3) Ferme tes applications et double-clique sur le fichier scc.bat.

 

Comment se comporte le système ?

 

 

Cordialement.

[facks]

Pour l'instant j'ai laisser tout ce que tu ma demander de faire sur le bureau. Je peux les supprimer? faut il faire un reboot? Je passe Ccleaener, regseeker ou tout autre chose avant de rebooter? Merci de ta patience.

 

J'ignore ci celuiAu passage j'ignore ci c'est utile, mais j'ignore quelle est cette ligne:

 

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe ?-ci est utile nuisible ou autre?

Modifié le 24 mars 2009 par facks

[Curson]

L'optimisation est terminée.

 

Tu peux supprimer tous les fichiers créés durant la procédure.

Il n'y a rien d'autre à faire.

 

 

Cordialement.