[Résolu] Espace libre sur disque C diminue tout seul

[david712]

Bonjour PEAR,

Voici enfin le rapport du scan.

 

GMER 1.0.15.15641 - GMER - Rootkit Detector and Remover

Rootkit scan 2012-04-25 20:56:11

Windows 5.1.2600 Service Pack 3

Running: q82ypym9.exe

 

 

---- Modules - GMER 1.0.15 ----

 

Module sfsync02.sys (StarForce Protection Synchronization Driver/Protection Technology) F79CB000-F79D1000 (24576 bytes)

Module PxHelp20.sys (Px Engine Device Driver for Windows 2000/XP/Sonic Solutions) F778B000-F7794000 (36864 bytes)

Module sfhlp02.sys (StarForce Protection Helper Driver/Protection Technology) F79D3000-F79DB000 (32768 bytes)

Module sfdrv01.sys (StarForce Protection Environment Driver/Protection Technology) F77AB000-F77BB000 (65536 bytes)

Module \SystemRoot\system32\DRIVERS\sisgrp.sys (SiS Compatible Super VGA Driver/Silicon Integrated Systems Corporation) F753D000-F7580000 (274432 bytes)

Module \SystemRoot\System32\Drivers\UBHelper.SYS F7BC3000-F7BC7000 (16384 bytes)

Module \SystemRoot\system32\DRIVERS\NTIDrvr.sys (NTI CD-ROM Filter Driver/NewTech Infosystems, Inc.) F7C3F000-F7C41000 (8192 bytes)

Module \SystemRoot\system32\drivers\ALCXWDM.SYS (Realtek AC'97 Audio Driver (WDM)/Realtek Semiconductor Corp.) F7164000-F74DE000 (3645440 bytes)

Module \SystemRoot\system32\DRIVERS\sisnic.sys (SiS PCI Fast Ethernet Adapter Driver/SiS Corporation) F7A0B000-F7A13000 (32768 bytes)

Module \SystemRoot\system32\DRIVERS\ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.) F7A23000-F7A28000 (20480 bytes)

Module \SystemRoot\system32\drivers\WmBEnum.sys (Logitech WingMan Virtual Bus Enumerator Driver /Logitech Inc.) F7BE3000-F7BE6000 (12288 bytes)

Module \SystemRoot\system32\drivers\WmXlCore.sys (Logitech WingMan Translation Driver/Logitech Inc.) F788B000-F7896000 (45056 bytes)

Module \SystemRoot\System32\Drivers\SYMTDI.SYS (Network Dispatch Driver/Symantec Corporation) F1E9C000-F1ED5000 (233472 bytes)

Module \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS (Symantec Event Library/Symantec Corporation) F1E77000-F1E9C000 (151552 bytes)

Module \SystemRoot\System32\Drivers\SYMREDRV.SYS (Redirector Filter Driver/Symantec Corporation) F78CB000-F78D5000 (40960 bytes)

Module \SystemRoot\System32\Drivers\SYMDNS.SYS (DNS Filter Driver/Symantec Corporation) F7A73000-F7A7A000 (28672 bytes)

Module \SystemRoot\System32\Drivers\SYMNDIS.SYS (NDIS Filter Driver/Symantec Corporation) F78DB000-F78E6000 (45056 bytes)

Module \SystemRoot\System32\Drivers\SYMFW.SYS (Firewall Filter Driver/Symantec Corporation) F1E51000-F1E77000 (155648 bytes)

Module \SystemRoot\System32\Drivers\SYMIDS.SYS (IDS Filter Driver/Symantec Corporation) F78EB000-F78F7000 (49152 bytes)

Module \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20120419.001\symidsco.sys (IDS Core Driver/Symantec Corporation) F1E0A000-F1E51000 (290816 bytes)

Module \??\C:\Program_Files\Fichiers_communs\Symantec_Shared\SPBBC\SPBBCDrv.sys (SPBBC Driver/Symantec Corporation) F1D5E000-F1DC0000 (401408 bytes)

Module \SystemRoot\system32\DRIVERS\srvkp.sys (SiS VGA Driver Manager/Silicon Integrated Systems Corporation) F7C33000-F7C36000 (12288 bytes)

Module \??\C:\Program_Files\Norton_Internet_Security\Norton_AntiVirus\SAVRTPEL.SYS (SAVRTPEL/Symantec Corporation) F1D24000-F1D38000 (81920 bytes)

Module \??\C:\Program_Files\Fichiers_communs\Symantec_Shared\EENGINE\eeCtrl.sys (Symantec Eraser Control Driver/Symantec Corporation) F1B8B000-F1BE9000 (385024 bytes)

Module \??\C:\Program_Files\Fichiers_communs\Symantec_Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Eraser Utility Driver/Symantec Corporation) F1B6D000-F1B8B000 (122880 bytes)

Module \SystemRoot\System32\SiSGRV.dll (SiS Compatible Super VGA Driver/Silicon Integrated Systems Corporation) BF012000-BF145000 (1257472 bytes)

Module \SystemRoot\System32\ATMFD.DLL (Windows NT OpenType/Type 1 Font Driver/Adobe Systems Incorporated) BF145000-BF18C000 (290816 bytes)

Module \??\C:\WINDOWS\system32\drivers\symlcbrd.sys (Symantec Core Component/Symantec Corporation) F7AC3000-F7AC9000 (24576 bytes)

Module \??\C:\Program_Files\Norton_Internet_Security\Norton_AntiVirus\SAVRT.SYS (AutoProtect/Symantec Corporation) F0D23000-F0D7B000 (360448 bytes)

Module \??\C:\WINDOWS\system32\FsUsbExDisk.SYS F0A7F000-F0A88000 (36864 bytes)

Module \SystemRoot\System32\drivers\dgderdrv.sys (Device Error Recovery SDK(x86)/Devguru Co., Ltd) F0A43000-F0A46000 (12288 bytes)

Module \??\C:\Acer\Empowering_Technology\eRecovery\int15.sys F072D000-F073E000 (69632 bytes)

Module \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20120425.002\NavEx15.Sys (AV Engine/Symantec Corporation) EFBAD000-EFD2D000 (1572864 bytes)

Module \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20120425.002\NAVENG.Sys (AV Engine/Symantec Corporation) EFB99000-EFBAD000 (81920 bytes)

 

---- Processes - GMER 1.0.15 ----

 

Process JQS.EXE 216

Process AluSchedulerSvc.exe 456

Process TomTomHOMEService.exe 992

Process NAVAPSVC.EXE 1140

Process ccSetMgr.exe 1264

Process DGDERSVC.EXE (Device Error Recovery SDK(x86)/Devguru Co., Ltd.) 1328

Process DJSNETCN.EXE 1392

Process FsUsbExService.Exe (FsUsbDevice/Teruten) 1448

Process ccEvtMgr.exe 1580

Process ccProxy.exe 1652

Process PIFSvc.exe 1688

Process SNDSrvc.exe 1720

Process SPBBCSvc.exe 1764

Process SYMLCSVC.EXE 1796

Process q82ypym9.exe 2096

Process SOUNDMAN.EXE (Realtek Sound Manager/Realtek Semiconductor Corp.) 2516

Process CFD.EXE 2596

Process ccApp.exe 2604

Process QTTask.exe 2620

Process NkMonitor.exe 2628

Process EEventManager.exe 2636

Process jusched.exe 2664

Process msmsgs.exe 2708

Process msnmsgr.exe 2716

Process wcescomm.exe 2760

Process TomTomHOMERunner.exe 2776

Process KiesTrayAgent.exe 2796

Process sistray.exe (SiS Compatible Super VGA Tray Application/Silicon Integrated Systems Corporation) 2840

Process SSScheduler.exe 2852

Process Monitor.exe 2988

Process NSCSRVCE.EXE 3096

Process rapimgr.exe 3592

 

---- EOF - GMER 1.0.15 ----

[pear]

Pas de rootkits, pas d'infection.

 

Le problème est ailleurs.

 

Essayez ceci:

 

1)Limiter l'espace alloué à la restauration

Par défaut, Windows consacre 12 % de l'espace disque à ses points de restauration.

Ainsi, sur un disque de 500 Go, ce sont 60 Go qui sont perdus pour vos données !

Pour cela modifier cela:

clic droit sur l'icône Poste de travail -> Propriétés ->Restauration du système.

Sélectionnez le disque où est la restauration (c'est généralement le disque C:)

cliquez sur le bouton Paramètres.

Réduisez alors l'espace à 5 % du volume total(par exemple)

et validez

 

2)Nettoyage du Pc

[david712]

Ca y est c'est fait.