menage pour msconfig 2

fred08700 · le 21 Mar 2009 12:41

bonjour a tous

je resollicite votre aide pour m'aider a démarrer mon pc portable car il rame avec vista.

Vous l'avez fait avec succes sur mon fixe , donc je compte sur vous

voici déjà la config:

puis ms config .Déjà un peu nettoyé , mais j'ai peur de retirer des applications nécessaires a un pc portable.Voyez-vous des choses à décocher?

le rapport hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:28:20, on 21/03/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:WindowsSystem32smss.exe
C:Windowssystem32csrss.exe
C:Windowssystem32wininit.exe
C:Windowssystem32csrss.exe
C:Windowssystem32services.exe
C:Windowssystem32lsass.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe
C:WindowsMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe
C:Windowssystem32winlogon.exe
C:Windowssystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32Ati2evxx.exe
C:WindowsSystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32SLsvc.exe
C:Windowssystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32Ati2evxx.exe
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe
C:Program FilesCommon FilesEPSONeEBAPIeEBSVC.exe
C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
C:ProgramDataEPSONEPW!3 SSRPE_S40ST7.EXE
C:ProgramDataEPSONEPW!3 SSRPE_S40RP7.EXE
C:Program FilesO2Micro Flash Memory Card Drivero2flash.exe
C:Windowssystem32PnkBstrA.exe
C:Windowssystem32PnkBstrB.exe
C:Windowssystem32svchost.exe
C:Program FilesSpyware Doctorsvcntaux.exe
C:Program FilesSpyware Doctorswdsvc.exe
C:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exe
C:Windowssystem32svchost.exe
C:Program FilesToshiba TEMPROTempoSVC.exe
C:Program FilesToshibaTOSHIBA DVD PLAYERTNaviSrv.exe
C:Windowssystem32TODDSrv.exe
C:Program FilesToshibaPower SaverTosCoSrv.exe
C:Program FilesTOSHIBASMARTLogServiceTosIPCSrv.exe
C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32DRIVERSxaudio.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
C:Windowssystem32 askeng.exe
C:Program FilesToshibaSmartFaceVSmartFaceVWatchSrv.exe
C:Windowssystem32 askeng.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesToshibaPower SaverTPwrMain.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program FilesToshibaSmoothViewSmoothView.exe
C:Program FilesToshibaFlashCardsTCrdMain.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesMicrosoft IntelliPointipoint.exe
C:Program FilesEpson SoftwareEvent ManagerEEventManager.exe
C:Program FilesSpyware DoctorSDTrayApp.exe
C:WindowsSystem32spooldriversw32x863E_FATIEKE.EXE
C:Program FilesMicrosoft IntelliPointdpupdchk.exe
C:Windowssystem32wbemunsecapp.exe
C:Windowssystem32wbemwmiprvse.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesSynapticsSynTPSynTPHelper.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesWindows LiveContactswlcomm.exe
c:program fileswindows defenderMpCmdRun.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Windowssystem32msiexec.exe
C:WindowsservicingTrustedInstaller.exe
C:Windowsexplorer.exe
C:UserssabrinaDownloadsHiJackThis.exe
C:Windowssystem32wbemwmiprvse.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSearchHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07inssv.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:ProgramDataPartnerpartner.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier3.1.415.1646swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll
O4 - HKLM..Run: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [StartCCC] "C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe"
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [TPwrMain] %ProgramFiles%TOSHIBAPower SaverTPwrMain.EXE
O4 - HKLM..Run: [HSON] %ProgramFiles%TOSHIBATBSHSON.exe
O4 - HKLM..Run: [SmoothView] %ProgramFiles%ToshibaSmoothViewSmoothView.exe
O4 - HKLM..Run: [00TCrdMain] %ProgramFiles%TOSHIBAFlashCardsTCrdMain.exe
O4 - HKLM..Run: [IAAnotif] C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
O4 - HKLM..Run: [IntelliPoint] "C:Program FilesMicrosoft IntelliPointipoint.exe"
O4 - HKLM..Run: [EEventManager] C:PROGRA~1EPSONS~1EVENTM~1EEventManager.exe
O4 - HKLM..Run: [SDTray] "C:Program FilesSpyware DoctorSDTrayApp.exe"
O4 - HKCU..Run: [EPSON SX600FW Series] C:Windowssystem32spoolDRIVERSW32X863E_FATIEKE.EXE /FU "C:WindowsTEMPE_S58C0.tmp" /EF "HKCU"
O4 - HKCU..Run: [EPSON Stylus SX600FW(réseau) (Copie 1)] C:Windowssystem32spoolDRIVERSW32X863E_FATIEKE.EXE /FU "C:WindowsTEMPE_SA7D9.tmp" /EF "HKCU"
O4 - HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE RESEAU')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:Program FilesToshibaTRDCReminderTRDCReminder.exe (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:Windowssystem32GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:PROGRA~1MICROS~3Office12EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~2.0_0inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~2.0_0inssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/709-44555-9400-3/4 (file missing)
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.fr/exec/obidos/redire ... &site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O20 - AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~2GOEC62~1.DLL
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:Program FilesCommon FilesEPSONeEBAPIeEBSVC.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:ProgramDataEPSONEPW!3 SSRPE_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:ProgramDataEPSONEPW!3 SSRPE_S40RP7.EXE
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:Program Filesma-config.commaconfservice.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:Program FilesO2Micro Flash Memory Card Drivero2flash.exe
O23 - Service: Partner Service - Google Inc. - C:ProgramDataPartnerpartner.exe
O23 - Service: PnkBstrA - Unknown owner - C:Windowssystem32PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:Windowssystem32PnkBstrB.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:Program FilesSpyware Doctorsvcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:Program FilesSpyware Doctorswdsvc.exe
O23 - Service: SmartFaceVWatchSrv - Toshiba - C:Program FilesToshibaSmartFaceVSmartFaceVWatchSrv.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:Program FilesToshiba TEMPROTempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:Program FilesToshibaTOSHIBA DVD PLAYERTNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:Windowssystem32TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:Program FilesToshibaPower SaverTosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe (file missing)
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:Program FilesTOSHIBASMARTLogServiceTosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe

--
End of file - 12632 bytes

et la startup liste

StartupList report, 21/03/2009, 12:29:37
StartupList version: 1.52.2
Started from : C:UserssabrinaDownloadsHiJackThis.EXE
Detected: Windows Vista SP1 (WinNT 6.00.1905)
Detected: Internet Explorer v7.00 (7.00.6001.18000)
* Using default options
==================================================

Running processes:

C:Windowssystem32 askeng.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesWindows DefenderMSASCui.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesToshibaPower SaverTPwrMain.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program FilesToshibaSmoothViewSmoothView.exe
C:Program FilesToshibaFlashCardsTCrdMain.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesMicrosoft IntelliPointipoint.exe
C:Program FilesEpson SoftwareEvent ManagerEEventManager.exe
C:Program FilesSpyware DoctorSDTrayApp.exe
C:WindowsSystem32spooldriversw32x863E_FATIEKE.EXE
C:Program FilesMicrosoft IntelliPointdpupdchk.exe
C:Windowssystem32wbemunsecapp.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesWindows LiveContactswlcomm.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Windowsexplorer.exe
C:UserssabrinaDownloadsHiJackThis.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogon]
UserInit = C:Windowssystem32userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun

StartCCC = "C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe"
SynTPEnh = C:Program FilesSynapticsSynTPSynTPEnh.exe
IAAnotif = C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
IntelliPoint = "C:Program FilesMicrosoft IntelliPointipoint.exe"
EEventManager = C:PROGRA~1EPSONS~1EVENTM~1EEventManager.exe
SDTray = "C:Program FilesSpyware DoctorSDTrayApp.exe"

--------------------------------------------------

Autorun entries from Registry:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun

EPSON SX600FW Series = C:Windowssystem32spoolDRIVERSW32X863E_FATIEKE.EXE /FU "C:WindowsTEMPE_S58C0.tmp" /EF "HKCU"
EPSON Stylus SX600FW(réseau) (Copie 1) = C:Windowssystem32spoolDRIVERSW32X863E_FATIEKE.EXE /FU "C:WindowsTEMPE_SA7D9.tmp" /EF "HKCU"

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun

[OptionalComponents]
=

--------------------------------------------------

Load/Run keys from C:WindowsWIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKLM..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKLM..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKCU..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKCU..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKCU..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWindows: load=
HKCU..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: AppInit_DLLs=C:PROGRA~1GoogleGOOGLE~2GOEC62~1.DLL

--------------------------------------------------

Shell & screensaver key from C:WindowsSYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=explorer.exe
SCRNSAVE.EXE=C:Windowssystem32PhotoScreensaver.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU..Policies: Shell=*Registry key not found*
HKLM..Policies: Shell=*Registry value not found*

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - (no file) - {5C255C8A-E604-49b4-9D64-90988571CECB}
Search Helper - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSearchHelper.dll - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
(no name) - C:Program FilesJavajre1.6.0_07inssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
(no name) - C:ProgramDataPartnerpartner.dll - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
(no name) - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll - {9421DD08-935F-4701-A9CA-22DF90AC4EA6}
(no name) - c:program filesgooglegoogletoolbar1.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:Program FilesGoogleGoogleToolbarNotifier3.1.415.1646swg.dll - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
(no name) - C:Program FilesWindows LiveToolbarwltcore.dll - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:Windowssystem32MacromedFlashFlash10a.ocx
CODEBASE = http://fpdownload2.macromedia.com/get/s ... wflash.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #1: C:Windowssystem32NLAapi.dll
NameSpace #2: C:Windowssystem32
apinsp.dll
NameSpace #3: C:Windowssystem32pnrpnsp.dll
NameSpace #4: C:Windowssystem32pnrpnsp.dll
Protocol #1: C:Program FilesSpyware DoctorFilterLSP.dll
Protocol #2: C:Program FilesSpyware DoctorFilterLSP.dll
Protocol #3: C:Program FilesSpyware DoctorFilterLSP.dll
Protocol #4: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #5: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #6: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #31: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #32: C:Program FilesSpyware DoctorFilterLSP.dll

--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: C:Config.Msia887e3.rbf||C:Config.Msia887ef.rbf||C:Config.Msia887dd.rbs

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:Windowssystem32webcheck.dll

--------------------------------------------------
End of report, 7 868 bytes
Report generated in 0,031 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

merci a vous de votre aide

Yuccaman · le 21 Mar 2009 13:53

Bonjour,

Dans un premier temps je remplacerais spyware doctor par un vrai anti spyware.
Ensuite
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/709-44555-9400-3/4 (file missing)
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.fr/exec/obidos/redire ... &site=home (file missing)
à supprimer

Epson status monitor 3 demarre 2 fois, est ce normal?
Tu as du RAID sur ton portable?

fred08700 · le 21 Mar 2009 18:46

merci

j'ai supprimer les 3 demandés

voici le nouveau rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:37:24, on 21/03/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:WindowsSystem32smss.exe
C:Windowssystem32csrss.exe
C:Windowssystem32wininit.exe
C:Windowssystem32csrss.exe
C:Windowssystem32services.exe
C:Windowssystem32lsass.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe
C:WindowsMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe
C:Windowssystem32svchost.exe
C:Windowssystem32winlogon.exe
C:Windowssystem32Ati2evxx.exe
C:WindowsSystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32SLsvc.exe
C:Windowssystem32svchost.exe
C:Windowssystem32Ati2evxx.exe
C:Windowssystem32svchost.exe
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe
C:Program FilesCommon FilesEPSONeEBAPIeEBSVC.exe
C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
C:ProgramDataEPSONEPW!3 SSRPE_S40ST7.EXE
C:ProgramDataEPSONEPW!3 SSRPE_S40RP7.EXE
C:Program FilesO2Micro Flash Memory Card Drivero2flash.exe
C:Windowssystem32svchost.exe
C:Program FilesSpyware Doctorsvcntaux.exe
C:Program FilesSpyware Doctorswdsvc.exe
C:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exe
C:Windowssystem32svchost.exe
C:Program FilesToshiba TEMPROTempoSVC.exe
C:Program FilesToshibaTOSHIBA DVD PLAYERTNaviSrv.exe
C:Windowssystem32TODDSrv.exe
C:Program FilesToshibaPower SaverTosCoSrv.exe
C:Program FilesTOSHIBASMARTLogServiceTosIPCSrv.exe
C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32DRIVERSxaudio.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
C:Program FilesSpybot - Search & DestroySDWinSec.exe
C:Windowssystem32 askeng.exe
C:Program FilesToshibaSmartFaceVSmartFaceVWatchSrv.exe
C:Windowssystem32 askeng.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program FilesToshibaPower SaverTPwrMain.exe
C:Program FilesToshibaSmoothViewSmoothView.exe
C:Program FilesToshibaFlashCardsTCrdMain.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesMicrosoft IntelliPointipoint.exe
C:Program FilesSpyware DoctorSDTrayApp.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Windowssystem32wbemunsecapp.exe
C:Program FilesMicrosoft IntelliPointdpupdchk.exe
C:Windowssystem32wbemwmiprvse.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesSynapticsSynTPSynTPHelper.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Windowssystem32 askeng.exe
C:Windowssystem32wbemwmiprvse.exe
C:Windowssystem32 askeng.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSearchHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_07inssv.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:ProgramDataPartnerpartner.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier3.1.415.1646swg.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll
O4 - HKLM..Run: [StartCCC] "C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe"
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [TPwrMain] %ProgramFiles%TOSHIBAPower SaverTPwrMain.EXE
O4 - HKLM..Run: [HSON] %ProgramFiles%TOSHIBATBSHSON.exe
O4 - HKLM..Run: [SmoothView] %ProgramFiles%ToshibaSmoothViewSmoothView.exe
O4 - HKLM..Run: [00TCrdMain] %ProgramFiles%TOSHIBAFlashCardsTCrdMain.exe
O4 - HKLM..Run: [IAAnotif] C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
O4 - HKLM..Run: [IntelliPoint] "C:Program FilesMicrosoft IntelliPointipoint.exe"
O4 - HKLM..Run: [SDTray] "C:Program FilesSpyware DoctorSDTrayApp.exe"
O4 - HKLM..RunOnce: [Malwarebytes' Anti-Malware] C:Program FilesMalwarebytes' Anti-Malwarembamgui.exe /install /silent
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-19..Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /detectMem (User 'SERVICE RESEAU')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:Program FilesToshibaTRDCReminderTRDCReminder.exe (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:Windowssystem32GPhotos.scr/200
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:PROGRA~1MICROS~3Office12EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~2.0_0inssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRA~1JavaJRE16~2.0_0inssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/709-44555-9400-3/4 (file missing)
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.fr/exec/obidos/redire ... &site=home (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O10 - Unknown file in Winsock LSP: c:program filesspyware doctorfilterlsp.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O20 - AppInit_DLLs: C:PROGRA~1GoogleGOOGLE~2GOEC62~1.DLL
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:Windowssystem32Ati2evxx.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:Program FilesCommon FilesEPSONeEBAPIeEBSVC.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:ProgramDataEPSONEPW!3 SSRPE_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:ProgramDataEPSONEPW!3 SSRPE_S40RP7.EXE
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:Program FilesGoogleGoogle Desktop SearchGoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:Program Filesma-config.commaconfservice.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:Program FilesO2Micro Flash Memory Card Drivero2flash.exe
O23 - Service: Partner Service - Google Inc. - C:ProgramDataPartnerpartner.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:Program FilesSpybot - Search & DestroySDWinSec.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:Program FilesSpyware Doctorsvcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:Program FilesSpyware Doctorswdsvc.exe
O23 - Service: SmartFaceVWatchSrv - Toshiba - C:Program FilesToshibaSmartFaceVSmartFaceVWatchSrv.exe
O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:Program FilesToshiba TEMPROTempoSVC.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:Program FilesToshibaTOSHIBA DVD PLAYERTNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:Windowssystem32TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:Program FilesToshibaPower SaverTosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe (file missing)
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:Program FilesTOSHIBASMARTLogServiceTosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:Windowssystem32DRIVERSxaudio.exe

--
End of file - 12524 bytes

la startup list

StartupList report, 21/03/2009, 18:40:51
StartupList version: 1.52.2
Started from : C:Program FilesTrend MicroHijackThisHijackThis.EXE
Detected: Windows Vista SP1 (WinNT 6.00.1905)
Detected: Internet Explorer v7.00 (7.00.6001.18000)
* Using default options
==================================================

Running processes:

C:WindowsSystem32smss.exe
C:Windowssystem32csrss.exe
C:Windowssystem32wininit.exe
C:Windowssystem32csrss.exe
C:Windowssystem32services.exe
C:Windowssystem32lsass.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe
C:WindowsMicrosoft.NetFrameworkv3.0WPFPresentationFontCache.exe
C:Windowssystem32svchost.exe
C:Windowssystem32winlogon.exe
C:Windowssystem32Ati2evxx.exe
C:WindowsSystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32SLsvc.exe
C:Windowssystem32svchost.exe
C:Windowssystem32Ati2evxx.exe
C:Windowssystem32svchost.exe
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe
C:Program FilesCommon FilesEPSONeEBAPIeEBSVC.exe
C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
C:ProgramDataEPSONEPW!3 SSRPE_S40ST7.EXE
C:ProgramDataEPSONEPW!3 SSRPE_S40RP7.EXE
C:Program FilesO2Micro Flash Memory Card Drivero2flash.exe
C:Windowssystem32svchost.exe
C:Program FilesSpyware Doctorsvcntaux.exe
C:Program FilesSpyware Doctorswdsvc.exe
C:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exe
C:Windowssystem32svchost.exe
C:Program FilesToshiba TEMPROTempoSVC.exe
C:Program FilesToshibaTOSHIBA DVD PLAYERTNaviSrv.exe
C:Windowssystem32TODDSrv.exe
C:Program FilesToshibaPower SaverTosCoSrv.exe
C:Program FilesTOSHIBASMARTLogServiceTosIPCSrv.exe
C:Program FilesCommon FilesUlead SystemsDVDULCDRSvr.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32DRIVERSxaudio.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAANTMon.exe
C:Program FilesSpybot - Search & DestroySDWinSec.exe
C:Windowssystem32 askeng.exe
C:Program FilesToshibaSmartFaceVSmartFaceVWatchSrv.exe
C:Windowssystem32 askeng.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program FilesToshibaPower SaverTPwrMain.exe
C:Program FilesToshibaSmoothViewSmoothView.exe
C:Program FilesToshibaFlashCardsTCrdMain.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesMicrosoft IntelliPointipoint.exe
C:Program FilesSpyware DoctorSDTrayApp.exe
C:Program FilesSpybot - Search & DestroyTeaTimer.exe
C:Windowssystem32wbemunsecapp.exe
C:Program FilesMicrosoft IntelliPointdpupdchk.exe
C:Windowssystem32wbemwmiprvse.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Program FilesSynapticsSynTPSynTPHelper.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Windowssystem32 askeng.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:UserssabrinaAppDataRoamingMicrosoftWindowsStart MenuProgramsStartup]
OneNote 2007 - Capture d'écran et lancement.lnk = C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE

--------------------------------------------------

Checking Windows NT UserInit:

[HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogon]
UserInit = C:Windowssystem32userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun

StartCCC = "C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe"
SynTPEnh = C:Program FilesSynapticsSynTPSynTPEnh.exe
IAAnotif = C:Program FilesIntelIntel Matrix Storage Manageriaanotif.exe
IntelliPoint = "C:Program FilesMicrosoft IntelliPointipoint.exe"
SDTray = "C:Program FilesSpyware DoctorSDTrayApp.exe"

--------------------------------------------------

Autorun entries from Registry:
HKLMSoftwareMicrosoftWindowsCurrentVersionRunOnce

Malwarebytes' Anti-Malware = C:Program FilesMalwarebytes' Anti-Malwarembamgui.exe /install /silent

--------------------------------------------------

Autorun entries from Registry:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun

SpybotSD TeaTimer = C:Program FilesSpybot - Search & DestroyTeaTimer.exe

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLMSoftwareMicrosoftWindowsCurrentVersionRun

[OptionalComponents]
=

--------------------------------------------------

Load/Run keys from C:WindowsWIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKLM..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKLM..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWinLogon: load=*Registry value not found*
HKCU..Windows NTCurrentVersionWinLogon: run=*Registry value not found*
HKCU..WindowsCurrentVersionWinLogon: load=*Registry key not found*
HKCU..WindowsCurrentVersionWinLogon: run=*Registry key not found*
HKCU..Windows NTCurrentVersionWindows: load=
HKCU..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: load=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: run=*Registry value not found*
HKLM..Windows NTCurrentVersionWindows: AppInit_DLLs=C:PROGRA~1GoogleGOOGLE~2GOEC62~1.DLL

--------------------------------------------------

Shell & screensaver key from C:WindowsSYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=explorer.exe
SCRNSAVE.EXE=C:Windowssystem32PhotoScreensaver.scr
drivers=*Registry value not found*

Policies Shell key:

HKCU..Policies: Shell=*Registry key not found*
HKLM..Policies: Shell=*Registry value not found*

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:PROGRA~1SPYBOT~1SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - (no file) - {5C255C8A-E604-49b4-9D64-90988571CECB}
Search Helper - C:Program FilesMicrosoftSearch Enhancement PackSearch HelperSearchHelper.dll - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
(no name) - C:Program FilesJavajre1.6.0_07inssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
(no name) - C:ProgramDataPartnerpartner.dll - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}
(no name) - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll - {9421DD08-935F-4701-A9CA-22DF90AC4EA6}
(no name) - c:program filesgooglegoogletoolbar1.dll - {AA58ED58-01DD-4d91-8333-CF10577473F7}
(no name) - C:Program FilesGoogleGoogleToolbarNotifier3.1.415.1646swg.dll - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
(no name) - C:Program FilesWindows LiveToolbarwltcore.dll - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}

--------------------------------------------------

Enumerating Download Program Files:

[Shockwave Flash Object]
InProcServer32 = C:Windowssystem32MacromedFlashFlash10a.ocx
CODEBASE = http://fpdownload2.macromedia.com/get/s ... wflash.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #1: C:Windowssystem32NLAapi.dll
NameSpace #2: C:Windowssystem32
apinsp.dll
NameSpace #3: C:Windowssystem32pnrpnsp.dll
NameSpace #4: C:Windowssystem32pnrpnsp.dll
Protocol #1: C:Program FilesSpyware DoctorFilterLSP.dll
Protocol #2: C:Program FilesSpyware DoctorFilterLSP.dll
Protocol #3: C:Program FilesSpyware DoctorFilterLSP.dll
Protocol #4: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #5: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #6: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #31: C:Program FilesCommon FilesPC ToolsLSPPCTLsp.dll
Protocol #32: C:Program FilesSpyware DoctorFilterLSP.dll

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:Windowssystem32webcheck.dll

--------------------------------------------------
End of report, 9 671 bytes
Report generated in 0,062 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

Dans un premier temps je remplacerais spyware doctor par un vrai anti spyware. : il était fourni avec l'antivirus .J'ai remis spybot et malwarebytes

Epson status monitor 3 demarre 2 fois, est ce normal? : Non, erreur de manip lors de l'installation de l'imprimante en wifi

Tu as du RAID sur ton portable? : je ne sais pas ce que c'est ?

MERCI A TOI

Yuccaman · le 21 Mar 2009 18:53

Tu as sur ton ordinateur un logiciel de monitoring RAID.

Le raid est une technique permettant d'agréger plusieurs disques durs ensembles dans le but soit d'augmenter les performances (raid 0), dans ce cas on obtient un seul "volume" de la taille cumulée des disques, soit la tolérance de panne de tes disques 'raid 1), les données étant dupliquée sur tous tes disques, dans cette configuration deux disques durs en raid apparaissent comme un seul, on perd donc la moitié du stockage normal de ces disques.

D'autres possibilités et combinaisons existent (raid 5, raid 10, raid 01, etc ...) mais on sort largement du sujet initial.

C'est assez rare sur un protable, c'est pourquoi je trouve étrange la présence d'un tel logiciel.

fred08700 · le 21 Mar 2009 19:26

Yuccaman a écrit:Tu as sur ton ordinateur un logiciel de monitoring RAID.

Le raid est une technique permettant d'agréger plusieurs disques durs ensembles dans le but soit d'augmenter les performances (raid 0), dans ce cas on obtient un seul "volume" de la taille cumulée des disques, soit la tolérance de panne de tes disques 'raid 1), les données étant dupliquée sur tous tes disques, dans cette configuration deux disques durs en raid apparaissent comme un seul, on perd donc la moitié du stockage normal de ces disques.

C'est assez rare sur un protable, c'est pourquoi je trouve étrange la présence d'un tel logiciel.

je suis un peu petit perdu dans ce que tu dis ?

voici les disques durs du pc + un autre (externe multimedia) que je connecte occasionnellement.

autrement , les nouveaux rapports sont-ils bons ?
Y-a-t'il des choses a decochés dans le demarrage (surtout au niveau de Toshiba ?

fred08700 · le 22 Mar 2009 19:19

BONJOUR

malwarebytes a trouvé 9 infections que j'ai supprimées

voici le rapport

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1882
Windows 6.0.6001 Service Pack 1

22/03/2009 19:16:18
mbam-log-2009-03-22 (19-16-18).txt

Type de recherche: Examen complet (C:|E:|)
Eléments examinés: 167066
Temps écoulé: 1 hour(s), 37 minute(s), 53 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 7
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOTTypeLib{86676e13-d6d8-4652-9fcf-f2047f1fb000} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTCLSID{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMControlSet001Servicespartner service (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMControlSet003Servicespartner service (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicespartner service (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:ProgramDataPartnerpartner.dll (Trojan.BHO) -> Quarantined and deleted successfully.
C:ProgramDataPartnerpartner.exe (Trojan.BHO) -> Quarantined and deleted successfully.

fred08700 · le 23 Mar 2009 09:41

bonjour

je viens d'analyser en ligne le rapport hijackthis : http://www.hijackthis.de/fr#anl

et il me dit qu'il ne trouve pas d'antivirus , alors que j'ai pc tools antivirus et spyware

est-ce normal ?

r@in | b0w · le 23 Mar 2009 13:43

Bonjour.

_ Pour Mbam, tu relances jusqu'à ne plus rien avoir à supprimer.

D'ailleurs, Spyware Doctor + Mbam + Spybot = 3 anti-spywares... Un seul est suffisant, ils se court-circuitent tous là!

_ Pour HiJackThis, tu supprimes les lignes:

O4 - HKLM..Run: [SDTray] "C:Program FilesSpyware DoctorSDTrayApp.exe"
4 - HKLM..RunOnce: [Malwarebytes' Anti-Malware] C:Program FilesMalwarebytes' Anti-Malwarembamgui.exe /install /silent
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:Program FilesMicrosoft OfficeOffice12ONENOTEM.EXE

ainsi que:

Yuccaman a écrit:O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O9 - Extra button: eBay - Achetez, Vendez - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/709-44555-9400-3/4 (file missing)
O9 - Extra button: Amazon.fr - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.fr/exec/obidos/redire ... &site=home (file missing)

_ Pour PC Tools Antivirus, absent oui. Je me demande même s'il est vraiment installé. Si c'est la version gratuite, désinstalle-le (si tu le trouves) puis installe à la place Avira.

fred08700 · le 23 Mar 2009 16:50

merci de ta presence sur mes deux post

je fais mettre celui la en attente.

je le reprendrai quand l'autre sera ok

pour info

pctools supprimé , remplacé par antivir personnal
ps: pc tools était bien activé selon le centre de securité !

spyboot en temps reel et mbam en controle manuel

menage pour msconfig 2

menage pour msconfig 2

Sujets similaires

Qui est en ligne