[Réglé] RAM mémory usage5 is critically high • page 2

franci · le 14 Jan 2011 18:45

Danakil,c'est pas bon ce que j'ai envoyé à 18h14 ?

danakil · le 14 Jan 2011 18:50

Non cela n'est pas bon!

Tu m'as envoyé une Analyse et non une correction :wink:

Reprends la procédure que je t'ai donnée plus haut et poste moi le rapport de suppression.

franci · le 14 Jan 2011 20:01

Désolé c'est un peu compliqué pour moi.
Je crois que c'est ça :

Code: Tout sélectionner: Error: Unable to interpret <OTL logfile created on: 14/01/2011 19:58:52 - Run 2> in the current context! Error: Unable to interpret <OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\FRANCIS\Mes documents\Téléchargements> in the current context! Error: Unable to interpret <Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation> in the current context! Error: Unable to interpret <Internet Explorer (Version = 6.0.2900.2180)> in the current context! Error: Unable to interpret <Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <894,00 Mb Total Physical Memory | 387,00 Mb Available Physical Memory | 43,00% Memory free> in the current context! Error: Unable to interpret <2,00 Gb Paging File | 1,00 Gb Available in Paging File | 69,00% Paging File free> in the current context! Error: Unable to interpret <Paging file location(s): C:\pagefile.sys 0 0 [binary data]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files> in the current context! Error: Unable to interpret <Drive C: | 66,71 Gb Total Space | 32,73 Gb Free Space | 49,06% Space Free | Partition Type: NTFS> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <Computer Name: FRANCIS | User Name: FRANCIS | Logged in as Administrator.> in the current context! Error: Unable to interpret <Boot Mode: Normal | Scan Mode: Current user> in the current context! Error: Unable to interpret <Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Processes (SafeList) ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <PRC - C:\Documents and Settings\FRANCIS\Mes documents\Téléchargements\OTL.exe (OldTimer Tools)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\InstallPedia\lnetworker.exe ()> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Avira\AntiVir Desktop\avcenter.exe (Avira GmbH)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Real\RealPlayer\realplay.exe (RealNetworks, Inc.)> in the current context! Error: Unable to interpret <PRC - c:\APPS\Powercinema\Kernel\TV\CLSched.exe ()> in the current context! Error: Unable to interpret <PRC - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe ()> in the current context! Error: Unable to interpret <PRC - C:\APPS\Powercinema\PCMService.exe (CyberLink Corp.)> in the current context! Error: Unable to interpret <PRC - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe (Cyberlink)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe ()> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe ()> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe (Sun Microsystems, Inc.)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)> in the current context! Error: Unable to interpret <PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Outlook Express\msimn.exe (Microsoft Corporation)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe (America Online, Inc.)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe (Lexmark International, Inc.)> in the current context! Error: Unable to interpret <PRC - C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.)> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Modules (SafeList) ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <MOD - C:\Documents and Settings\FRANCIS\Mes documents\Téléchargements\OTL.exe (OldTimer Tools)> in the current context! Error: Unable to interpret <MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll (Microsoft Corporation)> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Win32 Services (SafeList) ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <SRV - (AppMgmt) -- File not found> in the current context! Error: Unable to interpret <SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)> in the current context! Error: Unable to interpret <SRV - (IP netservices) -- C:\Program Files\InstallPedia\service.exe ()> in the current context! Error: Unable to interpret <SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)> in the current context! Error: Unable to interpret <SRV - (CLSched) CyberLink Task Scheduler (CTS) -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe ()> in the current context! Error: Unable to interpret <SRV - (CLCapSvc) CyberLink Background Capture Service (CBCS) -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe ()> in the current context! Error: Unable to interpret <SRV - (CyberLink Media Library Service) -- c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe (Cyberlink)> in the current context! Error: Unable to interpret <SRV - (USBDeviceService) -- C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe ()> in the current context! Error: Unable to interpret <SRV - (UleadBurningHelper) -- C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)> in the current context! Error: Unable to interpret <SRV - (AOL ACS) -- C:\Program Files\Fichiers communs\AOL\ACS\AOLacsd.exe (America Online, Inc.)> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Driver Services (SafeList) ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)> in the current context! Error: Unable to interpret <DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)> in the current context! Error: Unable to interpret <DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)> in the current context! Error: Unable to interpret <DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)> in the current context! Error: Unable to interpret <DRV - (USBModem) -- C:\WINDOWS\system32\drivers\lgusbmodem.sys (LG Electronics Inc.)> in the current context! Error: Unable to interpret <DRV - (UsbDiag) -- C:\WINDOWS\system32\drivers\lgusbdiag.sys (LG Electronics Inc.)> in the current context! Error: Unable to interpret <DRV - (usbbus) -- C:\WINDOWS\system32\drivers\lgusbbus.sys (LG Electronics Inc.)> in the current context! Error: Unable to interpret <DRV - (ASCTRM) -- C:\WINDOWS\System32\drivers\asctrm.sys (Windows (R) 2000 DDK provider)> in the current context! Error: Unable to interpret <DRV - (RT61) -- C:\WINDOWS\system32\drivers\rt61.sys (Ralink Technology Inc.)> in the current context! Error: Unable to interpret <DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys (Realtek Semiconductor Corp.)> in the current context! Error: Unable to interpret <DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation )> in the current context! Error: Unable to interpret <DRV - (SynTP) -- C:\WINDOWS\system32\drivers\SynTP.sys (Synaptics, Inc.)> in the current context! Error: Unable to interpret <DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)> in the current context! Error: Unable to interpret <DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows (R) Server 2003 DDK provider)> in the current context! Error: Unable to interpret <DRV - (amdagp) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)> in the current context! Error: Unable to interpret <DRV - (sisagp) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)> in the current context! Error: Unable to interpret <DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.)> in the current context! Error: Unable to interpret <DRV - (CmdIde) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)> in the current context! Error: Unable to interpret <DRV - (Sparrow) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)> in the current context! Error: Unable to interpret <DRV - (sym_u3) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)> in the current context! Error: Unable to interpret <DRV - (sym_hi) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)> in the current context! Error: Unable to interpret <DRV - (symc8xx) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)> in the current context! Error: Unable to interpret <DRV - (symc810) -- C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)> in the current context! Error: Unable to interpret <DRV - (ultra) -- C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)> in the current context! Error: Unable to interpret <DRV - (ql12160) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)> in the current context! Error: Unable to interpret <DRV - (ql1080) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)> in the current context! Error: Unable to interpret <DRV - (ql1280) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)> in the current context! Error: Unable to interpret <DRV - (dac2w2k) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)> in the current context! Error: Unable to interpret <DRV - (mraid35x) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)> in the current context! Error: Unable to interpret <DRV - (asc) -- C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)> in the current context! Error: Unable to interpret <DRV - (asc3550) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)> in the current context! Error: Unable to interpret <DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Standard Registry (SafeList) ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Internet Explorer ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm> in the current context! Error: Unable to interpret <IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://france.meteofrance.com/france/meteo?PREVISIONS_PORTLET.path=previsionsville/110690> in the current context! Error: Unable to interpret <IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== FireFox ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <FF - prefs.js..browser.startup.homepage: "http://france.meteofrance.com/france/meteo?PREVISIONS_PORTLET.path=previsionsville/110690"> in the current context! Error: Unable to interpret <FF - prefs.js..network.proxy.type: 0> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/01/08 11:28:35 | 000,000,000 | ---D | M]> in the current context! Error: Unable to interpret <FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/01/08 11:28:34 | 000,000,000 | ---D | M]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[2010/09/24 14:52:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\FRANCIS\Application Data\Mozilla\Extensions> in the current context! Error: Unable to interpret <[2010/11/07 14:36:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\FRANCIS\Application Data\Mozilla\Firefox\Profiles\c2elalcu.default\extensions> in the current context! Error: Unable to interpret <[2010/09/24 14:52:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions> in the current context! Error: Unable to interpret <[2010/09/26 17:15:16 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION> in the current context! Error: Unable to interpret <[2010/09/14 22:32:19 | 000,001,516 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-france.xml> in the current context! Error: Unable to interpret <[2010/09/14 22:32:19 | 000,001,822 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\cnrtl-tlfi-fr.xml> in the current context! Error: Unable to interpret <[2010/09/14 22:32:19 | 000,000,757 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-france.xml> in the current context! Error: Unable to interpret <[2010/09/14 22:32:19 | 000,001,426 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-fr.xml> in the current context! Error: Unable to interpret <[2010/09/14 22:32:19 | 000,000,956 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-france.xml> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <O1 HOSTS File: ([2004/08/05 13:00:00 | 000,000,790 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts> in the current context! Error: Unable to interpret <O1 - Hosts: 127.0.0.1 localhost> in the current context! Error: Unable to interpret <O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)> in the current context! Error: Unable to interpret <O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.> in the current context! Error: Unable to interpret <O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe ()> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [IP Network] C:\Program Files\InstallPedia\lnetworker.exe ()> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [Lexmark X1100 Series] C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [PCMService] c:\APPS\Powercinema\PCMService.exe (CyberLink Corp.)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe (RealNetworks, Inc.)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.exe (Realtek Semiconductor Corp.)> in the current context! Error: Unable to interpret <O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe (Sun Microsystems, Inc.)> in the current context! Error: Unable to interpret <O4 - HKCU..\Run: [IGDXaRoyCsYol] File not found> in the current context! Error: Unable to interpret <O4 - HKCU..\Run: [xVrkkhEDTaOX.exe] File not found> in the current context! Error: Unable to interpret <O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)> in the current context! Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1> in the current context! Error: Unable to interpret <O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0> in the current context! Error: Unable to interpret <O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145> in the current context! Error: Unable to interpret <O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\NPJPI150_04.dll (Sun Microsystems, Inc.)> in the current context! Error: Unable to interpret <O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab (Java Plug-in 1.5.0_04)> in the current context! Error: Unable to interpret <O16 - DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab (Java Plug-in 1.5.0_04)> in the current context! Error: Unable to interpret <O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)> in the current context! Error: Unable to interpret <O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)> in the current context! Error: Unable to interpret <O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)> in the current context! Error: Unable to interpret <O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)> in the current context! Error: Unable to interpret <O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)> in the current context! Error: Unable to interpret <O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)> in the current context! Error: Unable to interpret <O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)> in the current context! Error: Unable to interpret <O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)> in the current context! Error: Unable to interpret <O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)> in the current context! Error: Unable to interpret <O24 - Desktop Components:0 (Ma page d'accueil) - About:Home> in the current context! Error: Unable to interpret <O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Colline verdoyante.bmp> in the current context! Error: Unable to interpret <O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Colline verdoyante.bmp> in the current context! Error: Unable to interpret <O32 - HKLM CDRom: AutoRun - 1> in the current context! Error: Unable to interpret <O34 - HKLM BootExecute: (autocheck autochk *) - File not found> in the current context! Error: Unable to interpret <O35 - HKLM\..comfile [open] -- "%1" %*> in the current context! Error: Unable to interpret <O35 - HKLM\..exefile [open] -- "%1" %*> in the current context! Error: Unable to interpret <O37 - HKLM\...com [@ = comfile] -- "%1" %*> in the current context! Error: Unable to interpret <O37 - HKLM\...exe [@ = exefile] -- "%1" %*> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Files/Folders - Created Within 7 Days ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[2007/03/06 07:58:12 | 000,218,112 | ---- | C] (Soeperman Enterprises Ltd.) -- C:\Program Files\HijackThis.exe> in the current context! Error: Unable to interpret <[2007/01/26 18:56:31 | 005,878,544 | ---- | C] (Online Media Technologies Ltd. ) -- C:\Program Files\AVSDiscCreator.exe> in the current context! Error: Unable to interpret <[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]> in the current context! Error: Unable to interpret <[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Files - Modified Within 7 Days ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[2011/01/14 18:04:29 | 000,000,946 | ---- | M] () -- C:\Documents and Settings\FRANCIS\Bureau\Raccourci vers OTL.exe.lnk> in the current context! Error: Unable to interpret <[2011/01/14 17:54:51 | 000,017,920 | ---- | M] () -- C:\Documents and Settings\FRANCIS\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini> in the current context! Error: Unable to interpret <[2011/01/14 11:27:57 | 000,017,920 | ---- | M] () -- C:\Documents and Settings\FRANCIS\Mes documents\BUDGET.xls> in the current context! Error: Unable to interpret <[2011/01/14 09:14:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat> in the current context! Error: Unable to interpret <[2011/01/14 09:14:05 | 937,603,072 | -HS- | M] () -- C:\hiberfil.sys> in the current context! Error: Unable to interpret <[2011/01/13 18:13:10 | 000,000,272 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\~IGDXaRoyCsYol> in the current context! Error: Unable to interpret <[2011/01/13 18:13:10 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\~IGDXaRoyCsYolr> in the current context! Error: Unable to interpret <[2011/01/13 13:32:04 | 000,000,357 | ---- | M] () -- C:\WINDOWS\lexstat.ini> in the current context! Error: Unable to interpret <[2011/01/13 09:00:33 | 000,000,384 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol> in the current context! Error: Unable to interpret <[2011/01/11 09:00:31 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl> in the current context! Error: Unable to interpret <[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]> in the current context! Error: Unable to interpret <[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Files Created - No Company Name ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[2011/01/14 18:04:29 | 000,000,946 | ---- | C] () -- C:\Documents and Settings\FRANCIS\Bureau\Raccourci vers OTL.exe.lnk> in the current context! Error: Unable to interpret <[2011/01/13 08:24:39 | 000,000,272 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~IGDXaRoyCsYol> in the current context! Error: Unable to interpret <[2011/01/13 08:24:39 | 000,000,168 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~IGDXaRoyCsYolr> in the current context! Error: Unable to interpret <[2011/01/13 08:24:07 | 000,000,384 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol> in the current context! Error: Unable to interpret <[2010/10/02 16:52:13 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\FRANCIS\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini> in the current context! Error: Unable to interpret <[2010/09/24 10:05:08 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\Utils.dll> in the current context! Error: Unable to interpret <[2010/09/24 09:24:10 | 000,000,379 | ---- | C] () -- C:\WINDOWS\ODBC.INI> in the current context! Error: Unable to interpret <[2010/09/24 09:05:40 | 000,000,357 | ---- | C] () -- C:\WINDOWS\lexstat.ini> in the current context! Error: Unable to interpret <[2010/04/08 10:38:13 | 000,000,008 | ---- | C] () -- C:\Documents and Settings\LocalService\Application Data\jasltw.dat> in the current context! Error: Unable to interpret <[2008/10/17 12:58:01 | 035,008,838 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Storm3.exe> in the current context! Error: Unable to interpret <[2008/04/23 19:52:47 | 000,004,977 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\ywasvxup.hvs> in the current context! Error: Unable to interpret <[2007/08/06 15:37:53 | 000,000,305 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\addr_file.html> in the current context! Error: Unable to interpret <[2007/05/26 18:21:54 | 000,005,861 | ---- | C] () -- C:\Program Files\readme.txt> in the current context! Error: Unable to interpret <[2007/05/21 14:19:36 | 000,000,197 | ---- | C] () -- C:\Program Files\stream.ini> in the current context! Error: Unable to interpret <[2007/05/21 13:13:14 | 000,148,310 | ---- | C] () -- C:\Program Files\clothpickups.jpg> in the current context! Error: Unable to interpret <[2007/04/08 21:51:52 | 009,408,942 | ---- | C] () -- C:\Program Files\sa-downgrade_v2tov1.rar> in the current context! Error: Unable to interpret <[2007/04/01 17:35:28 | 011,284,970 | ---- | C] () -- C:\Program Files\cdbxp_setup_3.0.116.zip> in the current context! Error: Unable to interpret <[2007/03/07 07:28:39 | 013,446,648 | ---- | C] () -- C:\Program Files\AVAST.exe> in the current context! Error: Unable to interpret <[2007/03/06 08:57:51 | 000,553,687 | ---- | C] () -- C:\Program Files\RegCleaner.exe> in the current context! Error: Unable to interpret <[2007/03/06 07:59:18 | 000,006,640 | ---- | C] () -- C:\Program Files\hijackthis.log> in the current context! Error: Unable to interpret <[2006/10/14 12:13:44 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini> in the current context! Error: Unable to interpret <[2006/10/14 11:56:44 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll> in the current context! Error: Unable to interpret <[2006/10/14 11:51:36 | 000,000,602 | ---- | C] () -- C:\WINDOWS\System32\SETUPPC.INI> in the current context! Error: Unable to interpret <[2006/10/14 11:46:38 | 000,000,059 | ---- | C] () -- C:\WINDOWS\WININIT.INI> in the current context! Error: Unable to interpret <[2006/10/14 11:44:06 | 000,007,604 | ---- | C] () -- C:\WINDOWS\HDReg.ini> in the current context! Error: Unable to interpret <[2006/10/14 11:29:15 | 000,143,360 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll> in the current context! Error: Unable to interpret <[2006/09/30 00:26:32 | 000,229,480 | ---- | C] () -- C:\Program Files\gta_sa_processkiller.exe> in the current context! Error: Unable to interpret <[2006/03/23 13:24:10 | 000,006,399 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI> in the current context! Error: Unable to interpret <[2006/01/12 11:23:10 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini> in the current context! Error: Unable to interpret <[2004/08/16 17:25:16 | 000,000,829 | ---- | C] () -- C:\WINDOWS\orun32.ini> in the current context! Error: Unable to interpret <[2004/08/16 16:56:59 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI> in the current context! Error: Unable to interpret <[2004/08/16 16:41:02 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys> in the current context! Error: Unable to interpret <[2003/08/18 15:46:38 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBKLCNP.DLL> in the current context! Error: Unable to interpret <[2002/11/13 20:40:22 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbkvs.dll> in the current context! Error: Unable to interpret <[2002/09/13 16:40:06 | 000,000,266 | ---- | C] () -- C:\WINDOWS\System32\lxbkcoin.ini> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== LOP Check ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[2008/10/17 12:45:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\10015> in the current context! Error: Unable to interpret <[2009/09/01 19:31:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software> in the current context! Error: Unable to interpret <[2008/10/17 12:45:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\channels> in the current context! Error: Unable to interpret <[2009/11/21 10:19:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite> in the current context! Error: Unable to interpret <[2008/05/17 16:42:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft> in the current context! Error: Unable to interpret <[2010/03/21 19:28:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LGMOBILEAX> in the current context! Error: Unable to interpret <[2010/01/28 17:58:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LICENSE FORD HOPE DRAW> in the current context! Error: Unable to interpret <[2007/10/13 12:18:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!> in the current context! Error: Unable to interpret <[2010/09/24 17:31:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\OD2> in the current context! Error: Unable to interpret <[2009/09/01 17:14:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters> in the current context! Error: Unable to interpret <[2007/12/05 18:22:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Skyline> in the current context! Error: Unable to interpret <[2006/10/14 11:55:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SmartSound Software Inc> in the current context! Error: Unable to interpret <[2008/11/09 18:18:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Storm> in the current context! Error: Unable to interpret <[2007/12/16 20:22:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP> in the current context! Error: Unable to interpret <[2010/09/24 17:31:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems> in the current context! Error: Unable to interpret <[2010/09/24 17:31:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint> in the current context! Error: Unable to interpret <[2010/12/04 20:42:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip> in the current context! Error: Unable to interpret <[2010/10/27 08:40:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\FRANCIS\Application Data\Leadertech> in the current context! Error: Unable to interpret <[2010/12/04 20:47:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\FRANCIS\Application Data\LG Electronics> in the current context! Error: Unable to interpret <[2010/09/27 09:04:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\FRANCIS\Application Data\Objectif Tarot> in the current context! Error: Unable to interpret <[2010/09/26 16:23:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\FRANCIS\Application Data\OD2> in the current context! Error: Unable to interpret <[2010/12/04 19:42:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\FRANCIS\Application Data\Ulead Systems> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Purity Check ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <[color=#E56717]========== Alternate Data Streams ==========[/color]> in the current context! Error: Unable to interpret < > in the current context! Error: Unable to interpret <@Alternate Data Stream - 480 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF> in the current context! Error: Unable to interpret << End of report >> in the current context! OTL by OldTimer - Version 3.2.20.2 log created on 01142011_200023

danakil · le 15 Jan 2011 09:42

Salut!

C'est compliqué ... et ce n'est toujours pas la correction - Cela peut parfaitement provenir des infections sur ton PC qui t'empêche de maîtriser cette manipulation.
Ne te décourage pas nous allons utiliser une autre méthode pour effectuer le nettoyage de ce PC. :wink:

Fais ceci :
• Télécharge ZHPDiag de Nicolas coolman sur ton Bureau.
• Double clique sur le fichier d'installation, puis installe le avec les paramètres par défaut (Coche "Créer une icône sur le bureau")
• Lance ZHPDiag en double cliquant sur l'icône

présente sur ton Bureau [Clique droit -> Exécuter en tant qu'Administrateur ( Vista/seven )]
• Clique sur la loupe en haut à gauche, puis laisse l'outil scanner le PC.
• Une fois le scan terminé, clique sur l'icône en forme de disquette et enregistre le fichier sur ton Bureau.
• Poste le contenu du rapport dans ta prochaine réponse en utilisant ce site : http://www.cijoint.fr/

> ... sur le site de cijoint :
• Clique sur Parcourir pour rechercher le rapport puis sur Cliquez ici pour déposer le fichier
• Copie et colle ici le lien web qui te sera donné.
• Il est de type : http://www.cijoint.fr/cjlink.php?file=c ... 8MD0zB.txt

sylvain18 · le 15 Jan 2011 11:02

salut franci ,
si tu as un doute sur un programme que tu ne connait pas , vas sur processlibrary.com , généralement tu trouve , par exemple ton avgnt.exe est un processus qui appartient à avira donc à garder...pour le reste je te laisse chercher
c'est l'heure de l'apéro , a plus

franci · le 16 Jan 2011 09:37

Bonjour,

Le fichier est déposé là:
http://www.cijoint.fr/cjlink.php?file=c ... Rom3tf.txt

danakil · le 16 Jan 2011 10:40

Salut franci!

Nickel.
On va procèder en deux étapes pour nettoyer tout cela :wink:

#1/
• Sur ton Bureau tu dois avoir une icône nommé "ZHPFix" > Ouvre cet exécutable.
• Dans la fenêtre d'application (blanche et vierge) copie et colle ceci dedans :
Procédure :
Clique sur le bouton TOUT SELECTIONNER > Puis à l'aide du clavier tape : CTRL+C ( cela va copier le code ci-dessous )

Code: Tout sélectionner: [MD5.0AAAA19EDFB21F2932D097D0BC4FB98D] - (.Pas de propriétaire - launch_networker.) -- C:\Program Files\InstallPedia\lnetworker.exe [7168] O4 - HKLM\..\Run: [IP Network] . (.Pas de propriétaire - launch_networker.) -- C:\Program Files\InstallPedia\lnetworker.exe O4 - HKCU\..\Run: [xVrkkhEDTaOX.exe] C:\Documents and Settings\All Users\Application Data\xVrkkhEDTaOX.exe (.not file.) O4 - HKCU\..\Run: [IGDXaRoyCsYol] C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol.exe (.not file.) O4 - HKUS\S-1-5-21-527554719-3489315904-3707505039-1006\..\Run: [xVrkkhEDTaOX.exe] C:\Documents and Settings\All Users\Application Data\xVrkkhEDTaOX.exe (.not file.) O4 - HKUS\S-1-5-21-527554719-3489315904-3707505039-1006\..\Run: [IGDXaRoyCsYol] C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol.exe (.not file.) O23 - Service: (IP netservices) . (.Pas de propriétaire - service.) - C:\Program Files\InstallPedia\service.exe [HKLM\Software\InstallPedia] O43 - CFD: 12/10/2007 - 19:20:28 ----D- C:\Program Files\Adverts O43 - CFD: 17/12/2009 - 13:18:42 ----D- C:\Program Files\Circle Developement O43 - CFD: 23/11/2010 - 18:31:30 ----D- C:\Program Files\InstallPedia O43 - CFD: 29/03/2010 - 07:53:42 ----D- C:\Program Files\SpiderMessenger O64 - Services: CurCS - C:\Program Files\InstallPedia\service.exe - service de mise a jour pour IP networker (IP netservices) .(.Pas de propriétaire - service.) - LEGACY_IP_NETSERVICES SS - | Auto 14/09/2010 8192 | (IP netservices) . (.Pas de propriétaire.) - C:\Program Files\InstallPedia\service.exe

Dans ZHPFix
• En haut dans la barre de commandes clique sur --> H ...
... afin d'activer les lignes Helpers.
(l'ensemble du code apparaîtra - contrôle que cela correspond au code donné).

• Clique enfin sur OK, puis sur Tous, et pour terminer le lancement sur Nettoyer.
(Cela sera rapide et tu obtiendras un rapport de nettoyage).

• Copie et colle ici ce rapport en réponse.

franci · le 17 Jan 2011 10:22

Bonjour,
Quelqu'un pour étudier le dernier rapport ?

J'ai scanné avec Antivir ce matin :j'ai encore un fichier infecté avec FakeAV.aakg

danakil · le 17 Jan 2011 12:16

franci a écrit:Bonjour,
Quelqu'un pour étudier le dernier rapport ?

J'ai scanné avec Antivir ce matin :j'ai encore un fichier infecté avec FakeAV.aakg

Oui moi!

C'est normal que la contagion se propage!
Applique la procédure que je t'ai donnée le 16 jan 2011 à 10h40 ...
Et poste moi le rapport qui en découlera afin que je l'examine!

franci · le 17 Jan 2011 18:11

franci a écrit:Bonjour,

Le fichier est déposé là:
http://www.cijoint.fr/cjlink.php?file=c ... Rom3tf.txt

C'est pas ça ?

danakil · le 17 Jan 2011 19:30

Non!

Tu me redonnes le lien du scan et moi je voudrais que tu effectues la procédure de nettoyage que je t'ai donné en réponse à ce scan.

Tu vas y arriver en appliquant parfaitement la procédure ci-dessous (tu n'as rien d'autre à faire) :wink:

:

#1/
• Sur ton Bureau tu dois avoir une icône nommé "ZHPFix" > Ouvre cet exécutable.
• Dans la fenêtre d'application (blanche et vierge) copie et colle ceci dedans :
Procédure :
Clique sur le bouton TOUT SELECTIONNER > Puis à l'aide du clavier tape : CTRL+C ( cela va copier le code ci-dessous )

Code: Tout sélectionner: [MD5.0AAAA19EDFB21F2932D097D0BC4FB98D] - (.Pas de propriétaire - launch_networker.) -- C:\Program Files\InstallPedia\lnetworker.exe [7168] O4 - HKLM\..\Run: [IP Network] . (.Pas de propriétaire - launch_networker.) -- C:\Program Files\InstallPedia\lnetworker.exe O4 - HKCU\..\Run: [xVrkkhEDTaOX.exe] C:\Documents and Settings\All Users\Application Data\xVrkkhEDTaOX.exe (.not file.) O4 - HKCU\..\Run: [IGDXaRoyCsYol] C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol.exe (.not file.) O4 - HKUS\S-1-5-21-527554719-3489315904-3707505039-1006\..\Run: [xVrkkhEDTaOX.exe] C:\Documents and Settings\All Users\Application Data\xVrkkhEDTaOX.exe (.not file.) O4 - HKUS\S-1-5-21-527554719-3489315904-3707505039-1006\..\Run: [IGDXaRoyCsYol] C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol.exe (.not file.) O23 - Service: (IP netservices) . (.Pas de propriétaire - service.) - C:\Program Files\InstallPedia\service.exe [HKLM\Software\InstallPedia] O43 - CFD: 12/10/2007 - 19:20:28 ----D- C:\Program Files\Adverts O43 - CFD: 17/12/2009 - 13:18:42 ----D- C:\Program Files\Circle Developement O43 - CFD: 23/11/2010 - 18:31:30 ----D- C:\Program Files\InstallPedia O43 - CFD: 29/03/2010 - 07:53:42 ----D- C:\Program Files\SpiderMessenger O64 - Services: CurCS - C:\Program Files\InstallPedia\service.exe - service de mise a jour pour IP networker (IP netservices) .(.Pas de propriétaire - service.) - LEGACY_IP_NETSERVICES SS - | Auto 14/09/2010 8192 | (IP netservices) . (.Pas de propriétaire.) - C:\Program Files\InstallPedia\service.exe

Dans ZHPFix
• En haut dans la barre de commandes clique sur --> H ...
... afin d'activer les lignes Helpers.
(l'ensemble du code apparaîtra - contrôle que cela correspond au code donné).

• Clique enfin sur OK, puis sur Tous, et pour terminer le lancement sur Nettoyer.
(Cela sera rapide et tu obtiendras un rapport de nettoyage).

• Copie et colle ici ce rapport en réponse.

franci · le 18 Jan 2011 11:00

Code: Tout sélectionner: Rapport de ZHPFix 1.12.3237 par Nicolas Coolman, Update du 12/01/2011 Fichier d'export Registre : C:\ZHPExportRegistry-18-01-2011-10-59-26.txt Run by FRANCIS at 18/01/2011 10:59:26 Windows XP Home Edition Service Pack 2 (Build 2600) Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html Contact : nicolascoolman@yahoo.fr ========== Clé(s) du Registre ========== O23 - Service: (IP netservices) . (.Pas de propriétaire - service.) - C:\Program Files\InstallPedia\service.exe => Clé absente HKLM\Software\InstallPedia => Clé absente O64 - Services: CurCS - C:\Program Files\InstallPedia\service.exe - service de mise a jour pour IP networker (IP netservices) .(.Pas de propriétaire - service.) - LEGACY_IP_NETSERVICES => Clé absente SS - | Auto 14/09/2010 8192 | (IP netservices) . (.Pas de propriétaire.) - C:\Program Files\InstallPedia\service.exe => Clé absente ========== Valeur(s) du Registre ========== O4 - HKLM\..\Run: [IP Network] . (.Pas de propriétaire - launch_networker.) -- C:\Program Files\InstallPedia\lnetworker.exe => Valeur absente O4 - HKCU\..\Run: [xVrkkhEDTaOX.exe] C:\Documents and Settings\All Users\Application Data\xVrkkhEDTaOX.exe (.not file.) => Valeur absente O4 - HKCU\..\Run: [IGDXaRoyCsYol] C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol.exe (.not file.) => Valeur absente O4 - HKUS\S-1-5-21-527554719-3489315904-3707505039-1006\..\Run: [xVrkkhEDTaOX.exe] C:\Documents and Settings\All Users\Application Data\xVrkkhEDTaOX.exe (.not file.) => Valeur absente O4 - HKUS\S-1-5-21-527554719-3489315904-3707505039-1006\..\Run: [IGDXaRoyCsYol] C:\Documents and Settings\All Users\Application Data\IGDXaRoyCsYol.exe (.not file.) => Valeur absente ========== Dossier(s) ========== C:\Program Files\Adverts => Dossier absent C:\Program Files\Circle Developement => Dossier absent C:\Program Files\InstallPedia => Dossier absent C:\Program Files\SpiderMessenger => Dossier absent ========== Fichier(s) ========== c:\program files\installpedia\lnetworker.exe => Fichier absent c:\documents and settings\all users\application data\xvrkkhedtaox.exe => Fichier absent c:\documents and settings\all users\application data\igdxaroycsyol.exe => Fichier absent c:\program files\installpedia\service.exe => Fichier absent ========== Récapitulatif ========== 4 : Clé(s) du Registre 5 : Valeur(s) du Registre 4 : Dossier(s) 4 : Fichier(s) End of the scan

J'ose même plus demander ci c'est ça !

danakil · le 18 Jan 2011 18:14

J'ose même plus demander ci c'est ça !

C'est le rapport que j'attendais mais pas le contenu que je voulais. C'est pas grave et j'ai une explication toute simple :
tu as bien effectué la première fois la correction mais tu ne me l'avais pas postée :wink:

Résultat tu as relancé la correction et celle-ci affiche maintenant par défaut que tous les éléments nuisibles ciblés n'existent plus ! :wink:

L'essentiel est le résultat non?

Bon maintenant effectue un scan de ton PC en appliquant les procédures décrites dans le lien ci-dessous :
tutoriel-malwarebytes-anti-malware-vt-46564.html

Important
Avant d'effectuer un scan complet de ton PC > Effectue la mise à jour du logiciel.
En fin de scan copie et colle ici en réponse le rapport de Suppression.

franci · le 18 Jan 2011 20:08

Est-ce que c'est ceci le rapport de suppression:

Code: Tout sélectionner: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Version de la base de données: 5547 Windows 5.1.2600 Service Pack 2 Internet Explorer 6.0.2900.2180 18/01/2011 20:06:59 mbam-log-2011-01-18 (20-06-59).txt Type d'examen: Examen complet (C:\|) Elément(s) analysé(s): 285093 Temps écoulé: 1 heure(s), 14 minute(s), 57 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 0 Valeur(s) du Registre infectée(s): 0 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 8 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): (Aucun élément nuisible détecté) Valeur(s) du Registre infectée(s): (Aucun élément nuisible détecté) Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\program files\ZHPDiag\quarantine\lnetworker.exe.vir (Adware.InstallPedia) -> Quarantined and deleted successfully. c:\program files\ZHPDiag\quarantine\service.exe.vir (Adware.InstallPedia) -> Quarantined and deleted successfully. c:\program files\ZHPDiag\quarantine\installpedia.dir\networker.exe (Adware.InstallPedia) -> Quarantined and deleted successfully. c:\program files\ZHPDiag\quarantine\installpedia.dir\Utils.dll (Adware.InstallPedia) -> Quarantined and deleted successfully. c:\program files\ZHPDiag\quarantine\spidermessenger.dir\spidermessenger.exe (Spyware.AgenceExclusive) -> Quarantined and deleted successfully. c:\documents and settings\FRANCIS\local settings\application data\assembly\dl3\N0GW7C2Q.ZPQ\L99RHE5P.A1O\7b3dd583\00d34a37_f353cb01\Utils.DLL (Adware.InstallPedia) -> Quarantined and deleted successfully. c:\documents and settings\FRANCIS\local settings\application data\assembly\dl3\N0GW7C2Q.ZPQ\L99RHE5P.A1O\99e56915\00a61936_f353cb01\networker.exe (Adware.InstallPedia) -> Quarantined and deleted successfully. c:\WINDOWS\system32\Utils.dll (Adware.InstallPedia) -> Quarantined and deleted successfully.

danakil · le 19 Jan 2011 06:05

C'est Nickel!

Les problèmes évoqués lors de ton premier post persistent-ils?

[Réglé] RAM mémory usage5 is critically high • page 2

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Re: RAM mémory usage5 is critically high

Sujets similaires

Qui est en ligne