[résolu] Drag & Drop qui bloque

[félix le chat]

Bonjour,

Mon Dell XP pro SP3 présente les symptômes suivants :

- Drag & Drop qui bloque souvent
- lenteur au démarrage et à l'utilisation

Je subodore quelques fichiers corrompus dans explorer.exe ?

Je joins un log Combofix et un log HiJack

Merci d'avance pour votre intérêt et vos conseils.

ComboFix 10-08-10.06 - Administrateur 11/08/2010 16:18:20.2.2 - x86
Lancé depuis: f:\documents and settings\Administrateur\Bureau\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE}
FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

f:\documents and settings\Administrateur\MBRWiz.exe
f:\windows\system\Color
f:\windows\system32\ctfmon_old.exe
f:\windows\system32\Process.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2010-07-11 au 2010-08-11 ))))))))))))))))))))))))))))))))))))
.

2010-08-11 10:03 . 2010-08-11 10:04 -------- d-----w- f:\program files\MyDefrag v4.3.1
2010-08-10 16:58 . 2008-04-24 02:55 442368 ----a-w- f:\windows\system32\nvuninst.exe
2010-08-10 16:58 . 2008-04-24 02:55 442368 ----a-w- f:\windows\system32\nvudisp.exe
2010-08-10 16:56 . 2008-09-01 08:05 1060224 ----a-w- f:\windows\system32\drivers\VMHybrid.sys
2010-08-10 16:56 . 2008-09-01 08:18 1564544 ----a-w- f:\windows\system32\drivers\VMHybr64.sys
2010-08-10 16:53 . 2010-03-02 14:04 53248 ----a-w- f:\windows\system32\CSVer.dll
2010-08-10 16:52 . 2010-08-10 16:52 -------- d-----w- F:\Intel
2010-08-10 16:52 . 2010-08-10 16:52 -------- d-----w- f:\documents and settings\Administrateur\Application Data\Intel
2010-08-10 16:51 . 2010-05-31 09:58 6608512 ----a-w- f:\windows\system32\drivers\NETw5x32.sys
2010-08-10 16:51 . 2009-09-15 10:19 2756608 ----a-w- f:\windows\system32\NETw5r32.dll
2010-08-10 16:51 . 2009-09-15 10:18 675840 ----a-w- f:\windows\system32\NETw5c32.dll
2010-08-10 16:51 . 2010-08-10 16:53 -------- d-----w- f:\program files\Intel
2010-08-10 16:51 . 2010-08-10 16:51 -------- d-----w- f:\program files\Fichiers communs\Intel
2010-08-10 16:51 . 2010-08-10 16:51 -------- d-----w- f:\documents and settings\All Users\Application Data\Intel
2010-08-10 16:49 . 2010-08-10 16:49 -------- d-----w- f:\windows\tiinst
2010-08-10 16:47 . 2010-07-06 16:27 359016 ----a-w- f:\windows\vncutil.exe
2010-08-10 16:47 . 2010-07-06 16:26 53864 ----a-w- f:\windows\system32\RtkCoInstXP.dll
2010-08-10 16:47 . 2010-07-06 16:26 129640 ----a-w- f:\windows\RtkAudioService.exe
2010-08-10 16:47 . 2009-11-18 05:17 1395800 ----a-w- f:\windows\system32\drivers\Monfilt.sys
2010-08-10 16:47 . 2010-08-10 16:47 -------- d-----w- f:\program files\Realtek
2010-08-10 16:47 . 2009-11-18 05:16 1691480 ----a-w- f:\windows\system32\drivers\Ambfilt.sys
2010-08-10 16:47 . 2010-06-24 09:13 1251944 ----a-w- f:\windows\RtlExUpd.dll
2010-08-10 16:15 . 2008-03-21 11:57 14640 ------w- f:\windows\system32\spmsgXP_2k3.dll
2010-08-10 16:15 . 2009-02-06 15:32 120104 ----a-w- f:\windows\system32\SynTPCo4.dll
2010-08-10 16:15 . 2008-07-08 15:55 1112288 ----a-w- f:\windows\system32\WdfCoInstaller01007.dll
2010-08-10 13:10 . 2010-07-27 16:42 1774720 ----a-w- f:\windows\system32\BootMan.exe
2010-08-10 13:10 . 2010-07-15 06:44 86408 ----a-w- f:\windows\system32\setupempdrv03.exe
2010-08-10 13:10 . 2010-07-15 06:44 8456 ----a-w- f:\windows\system32\EuGdiDrv.sys
2010-08-10 13:10 . 2010-07-15 06:44 13192 ----a-w- f:\windows\system32\epmntdrv.sys
2010-08-10 13:10 . 2010-07-15 06:44 14848 ----a-w- f:\windows\system32\EuEpmGdi.dll
2010-08-10 13:10 . 2010-08-10 13:10 -------- d-----w- f:\program files\EASEUS
2010-08-08 16:54 . 2010-08-08 16:54 -------- d-----w- f:\program files\processhacker-2.2
2010-08-08 16:51 . 2010-08-08 16:51 -------- d-----w- f:\documents and settings\Administrateur\Application Data\Process Hacker 2
2010-08-08 07:00 . 2010-08-11 14:26 -------- d-----w- f:\windows\system32\CatRoot2
2010-08-07 16:49 . 2010-08-07 16:49 -------- d-----w- f:\windows\system32\wbem\Repository
2010-08-07 10:21 . 2010-08-08 09:13 89831 ----a-w- f:\documents and settings\Administrateur\Application Data\Dropbox\bin\Uninstall.exe
2010-08-07 10:21 . 2008-06-06 03:36 499712 ----a-w- f:\documents and settings\Administrateur\Application Data\Dropbox\bin\msvcp71.dll
2010-08-07 10:21 . 2008-06-06 03:36 348160 ----a-w- f:\documents and settings\Administrateur\Application Data\Dropbox\bin\msvcr71.dll
2010-08-07 10:20 . 2010-08-07 10:20 13264416 ----a-w- f:\documents and settings\Administrateur\Application Data\Dropbox\cache\Dropbox-update-0.7.110.exe
2010-08-05 15:56 . 2010-08-05 15:56 2920016 ----a-w- f:\program files\TeamViewer_Setup.exe
2010-08-05 15:53 . 2010-08-05 15:53 -------- d-----w- f:\documents and settings\Administrateur\Application Data\TeamViewer
2010-08-05 15:49 . 2010-08-05 15:49 2314936 ----a-w- f:\program files\TeamViewerQS.exe
2010-08-05 08:52 . 2010-08-05 08:55 -------- d-----w- f:\documents and settings\Administrateur\Application Data\Executor
2010-08-05 08:51 . 2010-08-05 08:51 -------- d-----w- f:\program files\Executor
2010-08-01 07:58 . 2010-08-01 07:58 -------- d-----w- F:\Mes documents
2010-07-31 14:28 . 2010-07-31 14:28 -------- d-----w- f:\program files\Freemake
2010-07-31 10:03 . 2009-08-06 17:24 209632 ----a-w- f:\windows\system32\wuweb.dll
2010-07-31 10:03 . 2009-08-06 17:24 44768 ----a-w- f:\windows\system32\wups2.dll
2010-07-31 10:03 . 2009-08-06 17:24 35552 ----a-w- f:\windows\system32\wups.dll
2010-07-31 10:03 . 2009-08-06 17:24 327896 ----a-w- f:\windows\system32\wucltui.dll
2010-07-31 10:03 . 2009-08-06 17:23 1929952 ----a-w- f:\windows\system32\wuaueng.dll
2010-07-31 10:02 . 2009-08-06 17:24 53472 ----a-w- f:\windows\system32\wuauclt.exe
2010-07-31 10:02 . 2009-08-06 17:24 96480 ----a-w- f:\windows\system32\cdm.dll
2010-07-31 10:02 . 2009-08-06 17:23 575704 ----a-w- f:\windows\system32\wuapi.dll
2010-07-31 07:04 . 2010-08-01 06:44 -------- d-----w- f:\program files\MRU-Blaster
2010-07-25 15:52 . 2010-07-25 15:52 -------- d-----w- f:\program files\eXPert PDF 6
2010-07-25 15:50 . 2010-07-25 15:50 -------- d-----w- f:\documents and settings\Administrateur\Application Data\eXPert PDF 6
2010-07-25 15:50 . 2010-07-25 15:50 -------- d-----w- f:\documents and settings\All Users\Application Data\BVRP Software
2010-07-25 15:49 . 2009-06-15 16:40 22016 ----a-w- f:\windows\system32\vsmon1.dll
2010-07-25 15:48 . 2010-07-25 15:48 -------- d-----w- f:\documents and settings\All Users\Application Data\Visage Software
2010-07-25 15:48 . 2010-07-25 15:48 -------- d-----w- f:\documents and settings\All Users\Application Data\eXPert PDF Jobs
2010-07-25 15:48 . 2010-07-25 15:48 -------- d-----w- f:\documents and settings\All Users\Application Data\eXPert PDF 6
2010-07-24 17:16 . 2010-07-24 17:16 -------- d-----w- f:\documents and settings\All Users\Application Data\Messenger Plus!
2010-07-24 17:15 . 2010-07-24 17:25 -------- d-----w- f:\program files\Messenger Plus! Live
2010-07-24 17:01 . 2010-07-24 17:25 -------- d-----w- f:\documents and settings\Administrateur\Tracing
2010-07-24 16:56 . 2010-07-24 17:25 -------- d-----w- f:\program files\Windows Live
2010-07-24 16:47 . 2010-07-24 16:47 -------- d-----w- f:\program files\Fichiers communs\Windows Live
2010-07-24 14:00 . 2010-07-24 15:21 -------- d-----w- f:\documents and settings\Administrateur\Application Data\Orange
2010-07-23 15:00 . 2010-07-23 15:00 18002834 ----a-w- f:\program files\TVO_1.9.6.zip
2010-07-23 12:10 . 2010-07-23 12:10 -------- d-----w- f:\documents and settings\Administrateur\.kde
2010-07-23 12:06 . 2010-07-23 12:06 -------- d-----w- f:\documents and settings\Administrateur\Local Settings\Application Data\GNU
2010-07-21 08:31 . 2010-07-21 08:31 -------- d-----w- f:\program files\Fichiers communs\Wise Installation Wizard
2010-07-21 06:19 . 2010-07-20 11:54 53618 ----a-w- f:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\CONFIG\AVWIN.INIaebb.dll
2010-07-20 16:09 . 2010-07-20 07:56 -------- d-----w- f:\program files\System Restore Manager
2010-07-20 13:55 . 2010-07-20 13:55 -------- d-----w- f:\documents and settings\All Users\Application Data\vmcreate
2010-07-18 07:37 . 2009-12-07 07:49 15888 ----a-w- f:\windows\system32\drivers\EnumProcessesDriver.sys
2010-07-15 16:49 . 2009-08-04 16:56 40560 ----a-w- f:\windows\system32\drivers\hotcore3.sys
2010-07-15 06:56 . 2010-06-14 14:31 744448 ------w- f:\windows\system32\dllcache\helpsvc.exe
2010-07-14 16:46 . 2010-07-14 16:46 -------- d-----w- f:\program files\sHFS 0.51 KUNTA
2010-07-13 05:54 . 2010-07-13 05:54 -------- d-----w- f:\program files\Inpaint

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-11 14:27 . 2008-11-22 16:46 -------- d-----w- f:\program files\regprot
2010-08-11 14:23 . 2009-10-09 18:46 -------- d-----w- f:\program files\ExeGo
2010-08-11 14:09 . 2010-06-30 07:19 34760 ----a-w- f:\windows\system32\pguard.dat
2010-08-11 14:09 . 2010-06-30 07:21 77928 ----a-w- f:\windows\system32\pghash.dat
2010-08-11 10:03 . 2009-01-24 17:43 -------- d-----w- f:\program files\Everything
2010-08-11 08:45 . 2007-12-18 02:04 135804 ----a-w- f:\windows\system32\perfh00C.dat
2010-08-11 08:45 . 2007-12-18 02:04 121456 ----a-w- f:\windows\system32\perfc00C.dat
2010-08-11 08:42 . 2009-04-03 10:42 -------- d-----w- f:\documents and settings\All Users\Application Data\Microsoft Help
2010-08-10 16:56 . 2008-11-22 11:26 -------- d--h--w- f:\program files\InstallShield Installation Information
2010-08-10 16:15 . 2010-08-10 16:15 0 ---ha-w- f:\windows\system32\drivers\Msft_Kernel_SynTP_01007.Wdf
2010-08-10 16:15 . 2010-08-10 16:15 0 ---ha-w- f:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2010-08-10 15:35 . 2008-11-22 11:57 -------- d-----w- f:\program files\Driver-Soft
2010-08-10 14:48 . 2009-01-30 18:34 -------- d-----w- f:\program files\regfromapp
2010-08-08 15:20 . 2008-11-23 16:15 -------- d---a-w- f:\documents and settings\All Users\Application Data\TEMP
2010-08-08 15:20 . 2010-04-17 06:40 -------- d-----w- f:\program files\SpywareBlaster
2010-08-08 13:34 . 2010-02-07 09:30 -------- d-----w- f:\program files\Sophos
2010-08-08 13:26 . 2009-06-08 07:11 -------- d-----w- f:\program files\Opera
2010-08-08 10:07 . 2009-01-30 07:42 -------- d-----w- f:\documents and settings\Administrateur\Application Data\Dropbox
2010-08-06 16:22 . 2009-10-12 06:51 -------- d-----w- f:\documents and settings\Administrateur\Application Data\TeraCopy
2010-08-06 15:42 . 2009-06-12 13:14 -------- d-----w- f:\program files\Eraser
2010-08-06 15:42 . 2008-11-22 10:30 -------- d-----w- f:\program files\Total Uninstall
2010-08-06 15:34 . 2008-11-22 09:34 -------- d-----w- f:\program files\CCleaner
2010-07-31 16:07 . 2009-11-18 09:04 -------- d-----w- f:\program files\JkDefragGUI110
2010-07-31 09:53 . 2008-11-22 15:21 -------- d-----w- f:\program files\Microsoft.NET
2010-07-31 07:36 . 2008-11-22 10:46 -------- d-----w- f:\program files\COMODO
2010-07-27 14:35 . 2009-01-26 08:55 -------- d-----w- f:\program files\PhotoFiltre
2010-07-23 15:30 . 2009-01-25 15:04 -------- d-----w- f:\program files\KMPlayer
2010-07-23 12:11 . 2009-03-04 16:24 -------- d-----w- f:\documents and settings\Administrateur\Application Data\gnupg
2010-07-23 09:43 . 2010-02-20 07:12 -------- d-----w- f:\program files\SUPERAntiSpyware_old
2010-07-23 06:45 . 2008-11-22 09:53 346056 ----a-w- f:\documents and settings\Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-07-21 06:39 . 2009-06-09 16:20 -------- d-----w- f:\documents and settings\All Users\Application Data\Avira
2010-07-20 08:55 . 2009-02-21 18:22 -------- d-----w- f:\program files\TrueCrypt
2010-07-20 08:42 . 2009-09-24 15:42 -------- d-----w- f:\documents and settings\Administrateur\Application Data\TrueCrypt
2010-07-20 08:32 . 2009-09-24 15:41 230736 ----a-w- f:\windows\system32\drivers\truecrypt.sys
2010-07-18 16:42 . 2009-11-01 11:51 -------- d-----w- f:\program files\ctupdate
2010-07-17 08:19 . 2010-04-29 13:53 -------- d-----w- f:\program files\Simple Internet Tools
2010-07-17 06:06 . 2009-01-25 14:53 -------- d-----w- f:\program files\Stinger
2010-07-15 18:07 . 2010-04-29 06:47 -------- d-----w- f:\program files\Simple Port Forwarding
2010-07-15 16:48 . 2008-11-22 11:26 -------- d-----w- f:\program files\Paragon Software
2010-07-14 05:58 . 2009-10-07 06:43 -------- d-----w- f:\program files\Mozilla Firefox portable
2010-07-12 16:25 . 2009-09-26 16:00 -------- d-----w- f:\program files\JDownloader 0.8
2010-07-11 11:39 . 2010-07-11 11:39 -------- d-----w- f:\documents and settings\All Users\Application Data\Canneverbe Limited
2010-07-11 11:38 . 2010-07-11 11:38 5456508 ----a-w- f:\program files\CDBurnerXP-4.3.5.2256.zip
2010-07-11 06:18 . 2010-07-10 09:08 -------- d-----w- f:\program files\LinuxLive USB Creator
2010-07-10 13:43 . 2009-01-30 09:38 -------- d-----w- f:\program files\gmer
2010-07-10 13:25 . 2009-06-18 11:20 -------- d-----w- f:\program files\Opera 10 Beta
2010-07-10 13:25 . 2009-01-30 18:39 -------- d-----w- f:\program files\CLT
2010-07-10 05:12 . 2009-04-13 11:22 -------- d-----w- f:\program files\ExeGo_3.7
2010-07-06 16:27 . 2008-11-22 10:04 84584 ----a-w- f:\windows\SOUNDMAN.EXE
2010-07-06 16:27 . 2008-11-22 10:04 1489512 ----a-w- f:\windows\RtlUpd.exe
2010-07-06 16:27 . 2008-11-22 10:04 1833576 ----a-w- f:\windows\SkyTel.exe
2010-07-06 16:26 . 2008-11-22 10:04 9721960 ----a-w- f:\windows\RTLCPL.EXE
2010-07-06 16:26 . 2008-11-22 10:04 6088296 ----a-w- f:\windows\system32\drivers\RtkHDAud.sys
2010-07-06 16:26 . 2008-11-22 10:04 19556968 ----a-w- f:\windows\RTHDCPL.EXE
2010-07-06 16:26 . 2008-11-22 10:04 2815592 ----a-w- f:\windows\ALCWZRD.EXE
2010-07-06 16:26 . 2008-11-22 10:04 2180712 ----a-w- f:\windows\MicCal.exe
2010-07-06 16:26 . 2008-11-22 10:04 64104 ----a-w- f:\windows\ALCMTR.EXE
2010-07-03 09:04 . 2010-01-23 14:35 -------- d-----w- f:\documents and settings\Administrateur\Application Data\Tor
2010-07-03 09:04 . 2010-01-23 14:35 -------- d-----w- f:\documents and settings\Administrateur\Application Data\Vidalia
2010-07-03 08:04 . 2010-07-03 08:03 -------- d-----w- f:\program files\Glary Utilities Portable
2010-07-03 06:09 . 2009-01-31 11:25 -------- d-----w- f:\program files\Revo Uninstaller
2010-07-02 07:55 . 2008-11-22 18:53 -------- d-----w- f:\program files\FastFolder By BB v330
2010-06-30 12:32 . 2007-12-18 02:04 149504 ----a-w- f:\windows\system32\schannel.dll
2010-06-30 07:14 . 2008-11-22 12:06 -------- d-----w- f:\program files\ProcessGuard
2010-06-30 07:14 . 2010-03-06 08:24 -------- d-----w- f:\documents and settings\All Users\Application Data\Comodo Downloader
2010-06-30 07:14 . 2010-06-30 07:14 -------- d-----w- f:\documents and settings\All Users\Application Data\Comodo
2010-06-30 06:44 . 2010-03-30 10:33 4763100 ----a-w- f:\program files\ProcessGuard.rar
2010-06-26 14:57 . 2009-04-07 13:19 346056 ----a-w- f:\windows\system32\GDIPFONTCACHEV1.DAT
2010-06-24 12:25 . 2007-12-18 02:04 916480 ----a-w- f:\windows\system32\wininet.dll
2010-06-24 09:02 . 2007-12-18 02:04 1852032 ----a-w- f:\windows\system32\win32k.sys
2010-06-21 19:52 . 2009-07-26 15:09 -------- d-----w- f:\program files\MPlayer for Windows
2010-06-21 19:48 . 2009-02-03 13:53 -------- d-----w- f:\documents and settings\Administrateur\Application Data\SpiderOak
2010-06-21 17:45 . 2010-06-21 17:25 -------- d-----w- f:\program files\SpiderOak
2010-06-21 15:27 . 2007-12-18 02:04 354304 ----a-w- f:\windows\system32\drivers\srv.sys
2010-06-17 14:03 . 2007-12-18 02:04 80384 ----a-w- f:\windows\system32\iccvid.dll
2010-06-16 16:38 . 2009-01-28 15:53 -------- d-----w- f:\program files\DriveImage XML
2010-06-14 16:16 . 2010-06-14 16:16 -------- d-----w- f:\program files\Windows Updates Downloader
2010-06-14 07:42 . 2007-12-18 02:04 1172480 ----a-w- f:\windows\system32\msxml3.dll
2010-06-11 05:25 . 2010-06-11 05:25 503808 ----a-w- f:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-4ddc7d9e-n\msvcp71.dll
2010-06-11 05:25 . 2010-06-11 05:25 499712 ----a-w- f:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-4ddc7d9e-n\jmc.dll
2010-06-11 05:25 . 2010-06-11 05:25 61440 ----a-w- f:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-11149f5a-n\decora-sse.dll
2010-06-11 05:25 . 2010-06-11 05:25 348160 ----a-w- f:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-4ddc7d9e-n\msvcr71.dll
2010-06-11 05:25 . 2010-06-11 05:25 12800 ----a-w- f:\documents and settings\Administrateur\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-11149f5a-n\decora-d3d.dll
2010-06-10 13:33 . 2010-06-10 13:32 3161182 ----a-w- f:\program files\sHFS_051_KUNTA.exe
2010-06-03 02:41 . 2010-06-03 02:41 3600384 ----a-w- f:\windows\system32\GPhotos.scr
2010-05-23 15:50 . 2010-06-06 14:02 73216 ----a-w- f:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ohm2zqqv.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\components\ipc_fireftp.dll
2010-05-14 06:38 . 2010-05-14 06:39 17408 ----a-w- f:\windows\system32\drivers\usedisk.sys
2010-02-05 09:34 . 2010-02-05 09:34 7091840 ----a-w- f:\program files\wuinstall.exe
2010-01-15 18:39 . 2010-01-15 18:29 1296 ----a-w- f:\program files\fsbl-20100115182915.log
2010-01-11 10:34 . 2010-01-11 10:34 1813945 ----a-w- f:\program files\RegisrtyMecanic.rar
2010-01-09 16:59 . 2009-09-18 16:38 53577368 ----a-w- f:\program files\Mozilla Firefox portable.rar
2009-11-16 22:31 . 2009-07-17 16:06 1216000 ----a-w- f:\program files\SumatraPDF.exe
2009-11-05 17:58 . 2009-11-05 17:57 464 ----a-w- f:\program files\fsbl-20091105175741.log
2009-10-24 14:28 . 2009-10-24 14:28 84886 ----a-w- f:\program files\Everything.lng.zip
2009-10-24 14:28 . 2009-10-24 14:28 147497 ----a-w- f:\program files\Everything.lng.exe
2009-10-24 14:27 . 2009-10-24 14:27 277614 ----a-w- f:\program files\Everything-1.2.1.371.zip
2009-10-24 14:27 . 2009-10-24 14:27 341811 ----a-w- f:\program files\Everything-1.2.1.371.exe
2009-10-18 16:24 . 2009-10-18 16:24 1462516 ----a-w- f:\program files\SumatraPDF-0.9.4.zip
2009-10-18 07:42 . 2009-10-18 07:42 3560471 ----a-w- f:\program files\Returnil.rar
2009-09-05 16:19 . 2009-09-01 16:48 1000495 ----a-w- f:\program files\Disque_Z.zip
2009-12-04 18:38 . 2009-12-04 18:38 23 --sha-w- f:\windows\system32\afbf0.dat
.

------- Sigcheck -------

[7] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\atapi.sys
[-] 2006-06-27 . 8443526AC6669B7395F46345B72E4DA6 . 95744 . . [5.1.2600.2939] . . f:\windows\system32\ReinstallBackups\0049\DriverFiles\i386\atapi.sys
[-] 2006-06-27 . 8443526AC6669B7395F46345B72E4DA6 . 95744 . . [5.1.2600.2939] . . f:\windows\system32\drivers\atapi.sys
[-] 2006-06-27 . 8443526AC6669B7395F46345B72E4DA6 . 95744 . . [5.1.2600.2939] . . f:\windows\system32\ReinstallBackups\0050\DriverFiles\i386\atapi.sys
[-] 2006-06-27 . 8443526AC6669B7395F46345B72E4DA6 . 95744 . . [5.1.2600.2939] . . f:\windows\system32\ReinstallBackups\0051\DriverFiles\i386\atapi.sys


[-] 2007-09-17 22:24 . 29F675C1A3A6FB7F2C9A8D47F003C716 . 445776 . . [1, 0, 0, 6 / 1, 0, 0, 6] . . f:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2007-09-17 22:24 . 29F675C1A3A6FB7F2C9A8D47F003C716 . 445776 . . [1, 0, 0, 6 / 1, 0, 0, 6] . . f:\windows\system32\ctfmon.exe

[7] 2008-04-14 . E598D81197E2E0EC42A0C55772BB00E8 . 59904 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\regsvc.dll

[-] 2007-12-18 02:04 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . f:\windows\system32\mspmsnsv.dll

f:\windows\System32\drivers\beep.sys ... manque !!
f:\windows\System32\regsvc.dll ... manque !!
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- f:\documents and settings\Administrateur\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- f:\documents and settings\Administrateur\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- f:\documents and settings\Administrateur\Application Data\Dropbox\bin\DropboxExt.13.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"!1_ProcessGuard_Startup"="f:\program files\ProcessGuard\procguard.exe" [2008-07-25 267287]
"ExeGo"="f:\program files\ExeGo\ExeGo.exe" [2008-02-09 355840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RegProt"="f:\program files\regprot\regprot.exe" [2001-09-13 19614]
"Everything"="f:\program files\Everything\Everything.exe" [2009-11-24 760320]
"!1_pgaccount"="f:\program files\ProcessGuard\pgaccount.exe" [2008-07-25 120832]
"avgnt"="f:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Malwarebytes' Anti-Malware"="f:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-04-29 437584]
"COMODO Internet Security"="f:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-03-30 1800464]

f:\documents and settings\Administrateur\Menu D‚marrer\Programmes\D‚marrage\
ERUNT AutoBackup.lnk - f:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
f-program files-fastfolder by bb v330-fastfolder.LNK - f:\program files\fastfolder by bb v330\fastfolder.exe [2004-8-20 13312]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyPictures"= 0 (0x0)
"NoStartMenuMyMusic"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"NoResolveTrack"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoFavoritesMenu"= 1 (0x1)
"NoSMMyDocs"= 1 (0x1)
"NoSMMyPictures"= 0 (0x0)
"NoStartMenuMyMusic"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=f:\windows\system32\guard32.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0NaBootMir

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"f:\\Program Files\\SpiderOak\\SpiderOak.exe"=
"f:\\Program Files\\MailStore Home\\MailStoreLocal.exe"=

R0 cfrpd;cfrpd;f:\windows\system32\drivers\CFRPD.sys [04/08/2009 19:50 56736]
R0 FolderHK;Wondershare FolderHK;f:\windows\system32\drivers\FolderHK.sys [01/05/2010 19:34 29856]
R0 hotcore3;hc3ServiceName;f:\windows\system32\drivers\hotcore3.sys [15/07/2010 18:49 40560]
R0 MirDisk;Wondershare Time Freeze;f:\windows\system32\drivers\MirDisk.sys [01/05/2010 19:34 19456]
R0 RVFsSec;RVFsSec;f:\windows\system32\drivers\RVFsSec.sys [25/01/2009 10:22 22272]
R0 RVSystem;RVSystem;f:\windows\system32\drivers\RVSystem.sys [18/10/2009 10:26 39424]
R0 Si3124;Si3124;f:\windows\system32\drivers\si3124.sys [18/12/2007 04:04 76208]
R0 Si3531;Si3531;f:\windows\system32\drivers\Si3531.sys [18/12/2007 04:04 210224]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;f:\windows\system32\drivers\cmdguard.sys [30/03/2010 15:37 134344]
R1 cmdHlp;COMODO Internet Security Helper Driver;f:\windows\system32\drivers\cmdhlp.sys [30/03/2010 15:37 25160]
R1 ISODisk;ISODisk;f:\windows\system32\drivers\ISODisk.sys [24/11/2008 18:17 9600]
R2 AntiVirMailService;Avira AntiVir MailGuard;f:\program files\Avira\AntiVir Desktop\avmailc.exe [25/09/2009 22:46 194817]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;f:\program files\Avira\AntiVir Desktop\sched.exe [25/09/2009 22:46 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;f:\program files\Avira\AntiVir Desktop\avwebgrd.exe [25/09/2009 22:46 434945]
R2 DCSPGSRV;DiamondCS ProcessGuard Service v3.500;f:\program files\ProcessGuard\DCSUserProt.exe [30/03/2010 14:30 31744]
R2 MBAMService;MBAMService;f:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [29/03/2009 16:19 304464]
R2 PGPmemlock;PGPmemlock;f:\windows\system32\drivers\PGPmemlock.sys [04/03/2009 19:33 6656]
R2 procguard;procguard;f:\windows\system32\drivers\procguard.sys [30/03/2010 14:30 26688]
R2 WMDrive;WMDrive;f:\windows\system32\drivers\WMDrive.sys [25/01/2009 16:30 37376]
R3 AVerM115;AVerM115 service;f:\windows\system32\drivers\AVerM115.sys [22/11/2008 12:04 1274880]
R3 DrmRAudio;DrmRAudio;f:\windows\system32\drivers\DrmRAudio.sys [22/07/2009 18:04 23096]
R3 lv321av;Logitech USB PC Camera (VC0321);f:\windows\system32\drivers\lv321av.sys [22/11/2008 12:04 1097728]
R3 MBAMProtector;MBAMProtector;f:\windows\system32\drivers\mbam.sys [10/10/2009 18:21 20952]
S3 Ambfilt;Ambfilt;f:\windows\system32\drivers\Ambfilt.sys [10/08/2010 18:47 1691480]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;f:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13:16 130384]
S3 DirMngr;DirMngr;f:\program files\GNU\GnuPG\dirmngr.exe [29/05/2010 12:11 242176]
S3 MatSvc;Microsoft Automated Troubleshooting Service;f:\program files\Microsoft Fix it Center\Matsvc.exe [10/04/2010 17:05 266544]
S3 Paragon System Backup Service;Paragon System Backup Service;f:\program files\Paragon Software\System Backup 2010\program\dbhservice.exe [11/01/2010 17:52 109072]
S3 USBSafelyRemoveService;USB Safely Remove Assistant; [x]
S3 usedisk;USEDisk Driver;f:\windows\system32\drivers\usedisk.sys [14/05/2010 08:39 17408]
S3 viz2000;Visioneer USB Kernel V2.0;f:\windows\system32\drivers\usbscan.sys [13/12/2009 19:01 15104]
S3 WinRing0_1_2_0;WinRing0_1_2_0;f:\program files\RealTemp_3.00\WinRing0.sys [27/06/2009 18:23 14416]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;f:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13:16 753504]
S4 SMServer;SMServer;f:\windows\system32\snmvtsvc.exe [22/07/2009 18:02 245760]
S4 utiznzyw;AVZ Kernel Driver;\??\f:\windows\system32\Drivers\utiznzyw.sys --> f:\windows\system32\Drivers\utiznzyw.sys [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
.
------- Examen supplémentaire -------
.
IE: Add to Google Photos Screensa&ver - f:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - d:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Ajouter à la liste d'impressions - f:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint Impression rapide - f:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Imprimer - f:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
IE: Easy-WebPrint Prévisualiser - f:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
LSP: f:\program files\Avira\AntiVir Desktop\avsda.dll
TCP: {9D35AB7E-2A06-4E1A-8AC8-747F988F0848} = 192.168.1.1
FF - ProfilePath - f:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ohm2zqqv.default\
FF - prefs.js: browser.search.selectedEngine - GoogleSSL
FF - prefs.js: browser.startup.homepage - file:///F:/WINDOWS/yper_felix04.gif|hxxp://192.168.1.1/
FF - prefs.js: keyword.URL - hxxp://rws.search.ke.voila.fr/RW/S/opensearch_orange?rdata=
FF - component: f:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ohm2zqqv.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}\platform\WINNT_x86-msvc\components\ipc_fireftp.dll
FF - component: f:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\ohm2zqqv.default\extensions\[email protected]\components\isadmin.dll
FF - plugin: f:\documents and settings\Administrateur\Application Data\Mozilla\plugins\npgoogletalk.dll
FF - plugin: f:\documents and settings\Administrateur\Local Settings\Application Data\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: f:\program files\Google\Picasa3\npPicasa3.dll
FF - plugin: f:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: f:\program files\Opera 10 Beta\program\plugins\npdsplay.dll
FF - plugin: f:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
FF - plugin: f:\program files\Opera 10 Beta\program\plugins\NPOFF12.DLL
FF - plugin: f:\program files\Opera 10 Beta\program\plugins\nppdf32.dll
FF - plugin: f:\program files\Opera 10 Beta\program\plugins\NPSWF32.dll
FF - plugin: f:\program files\Opera 10 Beta\program\plugins\npwmsdrm.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - f:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- PARAMETRES FIREFOX ----
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.chrome.favicons - fales
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
FF - user.js: browser.startup.homepage - hxxp://r.orange.fr/r/Ohome_accueil?ref=O_OI_defaultPage|file:///F:/WINDOWS/yper_felix04.gif|http://192.168.1.1/
FF - user.js: browser.search.selectedEngine - Orange
FF - user.js: keyword.URL - hxxp://rws.search.ke.voila.fr/RW/S/opensearch_orange?rdata=f:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
f:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
f:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
f:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
f:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
f:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
f:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - ORPHELINS SUPPRIMES - - - -

Toolbar-ITBarLayout - (no file)
Toolbar-ITBarLayout - (no file)
Toolbar-ITBar7Layout - (no file)
Toolbar-ITBar7Position - (no file)
ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file)
Notify-!SASWinLogon - f:\program files\SUPERAntiSpyware\SASWINLO.dll
SafeBoot-CLPSLS
AddRemove-AxCrypt - k:\data\Programmes\AxCrypt\AxCryptU.exe
AddRemove-ZeroFootprint Crypt 4.03.05 - k:\zerofo~1\UNWISE.EXE



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-11 16:27
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
!1_pgaccount = "f:\program files\ProcessGuard\pgaccount.exe"??????????????????????????????????????????????

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_USERS\S-1-5-21-839522115-1957994488-682003330-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,a0,62,e8,dd,32,a5,b3,4f,86,94,d7,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,a0,62,e8,dd,32,a5,b3,4f,86,94,d7,\

[HKEY_USERS\S-1-5-21-839522115-1957994488-682003330-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{EA7DE0ED-D627-D9BC-D5D5-983D2544FAF8}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"C040110900063D11C8EF10054038389C"="F?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1680)
f:\windows\system32\netprovcredman.dll

- - - - - - - > 'explorer.exe'(2020)
f:\documents and settings\Administrateur\Application Data\Dropbox\bin\DropboxExt.13.dll
f:\windows\system32\webcheck.dll
f:\windows\system32\eappprxy.dll
f:\windows\system32\msi.dll
f:\windows\system32\wpdshserviceobj.dll
f:\program files\Wondershare\SafeLock\selockdir.dll
f:\windows\system32\portabledevicetypes.dll
f:\windows\system32\portabledeviceapi.dll
f:\windows\system32\netprovcredman.dll
.
------------------------ Autres processus actifs ------------------------
.
f:\program files\COMODO\COMODO Internet Security\cmdagent.exe
f:\program files\Avira\AntiVir Desktop\avguard.exe
.
**************************************************************************
.
Heure de fin: 2010-08-11 16:39:52 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-08-11 14:39

Avant-CF: 5 768 892 416 octets libres
Après-CF: 5 779 107 840 octets libres

- - End Of File - - 22F4B587439FD82BE7B2B593D13C239C

**********************************
**********************************

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:49:50, on 11/08/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Avira\AntiVir Desktop\sched.exe
F:\Program Files\Avira\AntiVir Desktop\avguard.exe
F:\Program Files\ProcessGuard\dcsuserprot.exe
F:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Avira\AntiVir Desktop\avmailc.exe
F:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
F:\program files\regprot\regprot.exe
F:\Program Files\Everything\Everything.exe
F:\Program Files\ProcessGuard\pgaccount.exe
F:\Program Files\Avira\AntiVir Desktop\avgnt.exe
F:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
F:\Program Files\COMODO\COMODO Internet Security\cfp.exe
F:\Program Files\ProcessGuard\procguard.exe
F:\Program Files\ExeGo\ExeGo.exe
F:\Program Files\fastfolder by bb v330\fastfolder.exe
F:\WINDOWS\explorer.exe
F:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - F:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - F:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PrivBar (32-bit) - {300BC64A-BF32-4cc8-8917-91148CEFE700} - F:\WINDOWS\system32\privbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - F:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [RegProt] f:\program files\regprot\regprot.exe /start
O4 - HKLM\..\Run: [Everything] "F:\Program Files\Everything\Everything.exe" -startup
O4 - HKLM\..\Run: [!1_pgaccount] "F:\Program Files\ProcessGuard\pgaccount.exe"
O4 - HKLM\..\Run: [avgnt] "F:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "F:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [COMODO Internet Security] "F:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [!1_ProcessGuard_Startup] "F:\Program Files\ProcessGuard\procguard.exe" -minimize
O4 - HKCU\..\Run: [ExeGo] F:\Program Files\ExeGo\ExeGo.exe
O4 - Startup: ERUNT AutoBackup.lnk = F:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: f-program files-fastfolder by bb v330-fastfolder.LNK = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://F:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O15 - Trusted IP range: http://192.168.1.1
O15 - ESC Trusted IP range: http://192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D35AB7E-2A06-4E1A-8AC8-747F988F0848}: NameServer = 192.168.1.1
O18 - Protocol: AutorunsDisabled - (no CLSID) - (no file)
O20 - AppInit_DLLs: F:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - F:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - F:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: CiSvc - Unknown owner - F:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - F:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: DiamondCS ProcessGuard Service v3.500 (DCSPGSRV) - DiamondCS - F:\Program Files\ProcessGuard\dcsuserprot.exe
O23 - Service: DirMngr - Unknown owner - F:\Program Files\GNU\GnuPG\dirmngr.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - F:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - F:\WINDOWS\system32\services.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - F:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Fax - Unknown owner - F:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - F:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - F:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Paragon System Backup Service - Paragon Software Group - F:\Program Files\Paragon Software\System Backup 2010\program\dbhservice.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - F:\WINDOWS\system32\services.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - F:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - F:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: Telnet (TlntSvr) - Unknown owner - F:\WINDOWS\system32\tlntsvr.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - Safer Networking Limited - F:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - F:\WINDOWS\System32\vssvc.exe

--
End of file - 7342 bytes

[Topxm]

Salut,

Tu peux détailler ceci STP

Je subodore quelques fichiers corrompus dans explorer.exe ?

Après t'as pas mal de truc qui tournent (sécu + le reste ...)
Antivir / MBAM / ProcessGuard / RegistryProt /Comodo

nb : En plus AntiVir Pro ... Pfff dis donc ... que de sécu normal que ça traine au boot, t'as quoi comme config .

Erunt qui fait une sauvegarde au boot dans l'élan.

Plus deux process qui me causent pas plus que ça exego / Everything

[félix le chat]

Bonjour et merci pour l'intérêt,

Tu peux détailler ceci STP "Je subodore quelques fichiers corrompus dans explorer.exe ?"

C'est pas au démarrage que ça coince, mais après (démarrage un peu long, je le concède, malgré un nombre de services démarrés assez restreint).

Comme a priori, j'ai ce qui faut pour protéger mon ordi étant donné qu'après le démarrage tous les programmes sont lancés avec des droits restreints, qu'Avira premium et pas pro (2 ans pour 11 € lors d'une promo), Mbam et autres ne trouvent rien, reste, entre autres, une possible corruption de certains fichiers.

Je n'ai pas trouvé de fix pour le Dn'D, j'ai passé Dial a Fix en tenant compte que pas mal de Dll d'IE sont empruntées à Explorer, mais ça n'est pas suffisant, ça coince toujours et ça ralenti le PC.

t'as quoi comme config

Intel core 2 T5600 1,8 Ghz, 2 Mb L2 cache, 2 Gb DDR2, 2 DD 120 Go, XP à jour les patchs du 10 sont passés.

exego / Everything/FastFolder by BB

Lancés par le menu démarrage
- Exego lanceur d'applications
- Everything chercheur ultra rapide de fichiers
- FF un petit truc que j'aime bien et qui donne un accès direct à des dossiers préférés et aux disques montés

et la ligne 18 d'Hijack qui ne veux pas se fixer ?

[Topxm]

Salut,

Pour la 018 tu n'as pas Autoruns de sysinternal ? http://technet.microsoft.com/en-us/sysi ... 63902.aspx

qu'Avira premium et pas pro

Tu joue sur les mots là ... c'est du premium ou sa suite quoiqu'il en soit ...

Code : Tout sélectionner

O4 - HKLM\..\Run: [avgnt] "F:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE

tu as bien désactivé le pare-feu d'ailleurs ?

Code : Tout sélectionner

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - Safer Networking Limited - F:\WINDOWS\System32\TuneUpDefragService.exe

TuneUp c'est pas à mon avis obligatoire.

Tu peux aussi désactiver Java Quick Starter

Code : Tout sélectionner

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - F:\Program Files\Java\jre6\bin\jqs.exe

Mais bon c'est pas ça qui provoque les blocages

ça le fait en mode sans échec ?

[félix le chat]

O4 - HKLM\..\Run: [avgnt] "F:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE

Je ne pense pas qu'il faille toucher à ceux-là ?

Le blocage de Dn'D provient peut être de la lenteur du bureau, en effet, au lieu d'une réponse immédiate il me faut attendre que la roulette s'arrête de tourner.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:11:32, on 12/08/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Avira\AntiVir Desktop\sched.exe
F:\Program Files\Avira\AntiVir Desktop\avguard.exe
F:\Program Files\ProcessGuard\dcsuserprot.exe
F:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Avira\AntiVir Desktop\avmailc.exe
F:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
F:\program files\regprot\regprot.exe
F:\Program Files\Everything\Everything.exe
F:\Program Files\ProcessGuard\pgaccount.exe
F:\Program Files\Avira\AntiVir Desktop\avgnt.exe
F:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
F:\Program Files\COMODO\COMODO Internet Security\cfp.exe
F:\Program Files\ProcessGuard\procguard.exe
F:\Program Files\ExeGo\ExeGo.exe
f:\windows\explorer.exe
F:\Program Files\FastFolder By BB v330\FastFolder.exe
F:\Program Files\FastFolder By BB v330\PowerClick.exe
F:\Program Files\RealTemp_3.00\RealTemp.exe
F:\Program Files\Mozilla Firefox\firefox.exe
F:\Program Files\CurioStudio\GreatNews\GreatNews.exe
F:\Program Files\Mozilla Firefox\plugin-container.exe
F:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - F:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - F:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: PrivBar (32-bit) - {300BC64A-BF32-4cc8-8917-91148CEFE700} - F:\WINDOWS\system32\privbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - F:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [RegProt] f:\program files\regprot\regprot.exe /start
O4 - HKLM\..\Run: [Everything] "F:\Program Files\Everything\Everything.exe" -startup
O4 - HKLM\..\Run: [!1_pgaccount] "F:\Program Files\ProcessGuard\pgaccount.exe"
O4 - HKLM\..\Run: [avgnt] "F:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "F:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [COMODO Internet Security] "F:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [!1_ProcessGuard_Startup] "F:\Program Files\ProcessGuard\procguard.exe" -minimize
O4 - HKCU\..\Run: [ExeGo] F:\Program Files\ExeGo\ExeGo.exe
O4 - Startup: ERUNT AutoBackup.lnk = F:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Startup: f-program files-fastfolder by bb v330-fastfolder.LNK = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://F:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://F:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O15 - Trusted IP range: http://192.168.1.1
O15 - ESC Trusted IP range: http://192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D35AB7E-2A06-4E1A-8AC8-747F988F0848}: NameServer = 192.168.1.1
O18 - Protocol: AutorunsDisabled - (no CLSID) - (no file)
O20 - AppInit_DLLs: F:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - F:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - F:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - F:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - F:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: DiamondCS ProcessGuard Service v3.500 (DCSPGSRV) - DiamondCS - F:\Program Files\ProcessGuard\dcsuserprot.exe
O23 - Service: DirMngr - Unknown owner - F:\Program Files\GNU\GnuPG\dirmngr.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - F:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - F:\WINDOWS\system32\services.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - F:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Fax - Unknown owner - F:\WINDOWS\system32\fxssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - F:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Paragon System Backup Service - Paragon Software Group - F:\Program Files\Paragon Software\System Backup 2010\program\dbhservice.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - F:\WINDOWS\system32\services.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - F:\Program Files\Fichiers communs\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - F:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: Telnet (TlntSvr) - Unknown owner - F:\WINDOWS\system32\tlntsvr.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - F:\WINDOWS\System32\vssvc.exe

--
End of file - 7252 bytes

**********************************

[Topxm]

Re,

Je ne pense pas qu'il faille toucher à ceux-là ?

non non surtout pas, ce sont les processus d'antiVir

Vu la config que tu as, ton PC devrait booter en deux temps trois mouvements et ce n'est pas le peu de processus que tu as qui pose souci.

Donc soit c'est un problème de windows, d'où le

ça le fait en mode sans échec ?

Soit c'est un problème de matériel / reconnaissance matériel qui fait trainer Windows au démarrage

[félix le chat]

Bonjour,

Je regarde un peu plus profond et je reviens poster le résultat.

[félix le chat]

Bonjour,

J'ai utilisé la fonction de restauration du bureau de ZebRestore, ce qui n'a fait qu'aggraver les dégâts, d'où reformatage et réinstallation du système, mais le plus dur c'est la réinstallation de tous les programmes... aussi, j'en profite pour passer de Comodo 3 à 5 et faire un peu de ménage dans cette réinstallation des programmes.

@ Topxm merci

[Topxm]

Salut,

Dans l'élan vu que tu as un système d'exploitation tout neuf, tu devrais te créer une image disque, cela évitera à l'avenir d'avoir à réinstaller tous les programmes en cas de pépin

[félix le chat]

Bonjour

@ Topxm et encore merci,

C'est fait.

J'avais une image disque, pas très à jour, du mois d'avril, j'ai donc tenté le coup, ça fonctionnait mieux, pour cause, mais c'était pas du neuf et il fallait quand même réinstaller des programmes, d'où ma décision de repartir à zéro.