Erreur de chargement rundll

Fermé
tay38 - 2 mai 2010 à 11:05
 tay38 - 25 mai 2010 à 21:33
erreur de chargement de C:\DOCUME~1\CLIATE~1\LOCALS1\TEMP\jut1tq7w3r.dll
Bjr, j'ai ce message ci-dessus qui s'affiche au démarrage de mon pc.
J'ai eu un virus "violation des droits d'auteur" puis ai fait une désinfection par avira et mbam, et depuis, plus de son, et ce message dc, au démarrage. Merci de votre aide.

39 réponses

Utilisateur anonyme
2 mai 2010 à 11:19
salut :

DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

▶ Télécharge List_Kill'em et enregistre le sur ton bureau

double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

Laisse coché :

♦ Executer Shortcut
♦ Executer List_Kill'em

une fois terminée , clic sur "terminer" et le programme se lancera seul

choisis l'option Search

▶ laisse travailler l'outil

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"
0
List'em by g3n-h@ckm@n 1.7.2.6

User : Célia Terfas ()
Update on 01/05/2010 by g3n-h@ckm@n ::::: 17.00
Start at: 12:18:34 | 02/05/2010

AMD Sempron(tm) Processor 3100+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : AntiVir Desktop 9.0.1.32 [ Enabled | Updated ]
AV : avast! antivirus 4.7.1098 [VPS 080420-0] 4.7.1098 [ Enabled | Updated ]

C:\ -> Disque fixe local | 72,33 Go (25,78 Go free) [ACER] | NTFS
D:\ -> Disque fixe local | 72,8 Go (71,92 Go free) [ACERDATA] | FAT32
E:\ -> Disque CD-ROM
F:\ -> Disque fixe local | 111,79 Go (69,44 Go free) | NTFS
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
J:\ -> Disque amovible

Boot: Normal

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\List_Kill'em\List_Kill'em.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\List_Kill'em\pv.exe

======================
Keys "Run"
======================

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
SpybotSD TeaTimer REG_SZ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
Google Update REG_SZ "C:\Documents and Settings\Célia Terfas\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
mcexecwin REG_SZ rundll32.exe C:\DOCUME~1\CLIATE~1\LOCALS~1\Temp\jut1tq7w3r.dll, RestoreWindows
hsf87sdhfush87fsufhuie3fddf REG_SZ C:\DOCUME~1\CLIATE~1\LOCALS~1\Temp\zadzqin2us.exe
hsf87efjhdsf87f3jfsdi7fhsujfd REG_SZ C:\DOCUME~1\CLIATE~1\LOCALS~1\Temp\avp32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
IMJPMIG8.1 REG_SZ "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
PHIME2002ASync REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A REG_SZ C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
VTTimer REG_SZ VTTimer.exe
VTTrayp REG_SZ VTtrayp.exe
MediaSync REG_SZ C:\Program Files\Acer\Acer eConsole\MediaSync.exe
eRecoveryService REG_SZ C:\Acer\Empowering Technology\eRecovery\Monitor.exe
BigDogPath REG_SZ C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera LTI301P
NeroFilterCheck REG_SZ C:\WINDOWS\system32\NeroCheck.exe
Cmaudio REG_SZ RunDll32 cmicnfg.cpl,CMICtrlWnd
AudioDeck REG_SZ C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
EPSON Stylus DX5000 Series REG_SZ C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S1FB.tmp" /EF "HKLM"
WireLessMouse REG_SZ C:\Program Files\Multimedia Combo Set Driver\StartAutorun.exe MouseDrv.exe
ISTray REG_SZ "C:\Program Files\Spyware Doctor\pctsTray.exe"
avgnt REG_SZ "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
SSBkgdUpdate REG_SZ "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
IndexSearch REG_SZ "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
PPort11reminder REG_SZ "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
BrMfcWnd REG_SZ C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
ControlCenter3 REG_SZ C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
QuickTime Task REG_SZ "C:\Program Files\QuickTime\qttask .exe" -atboottime
UserFaultCheck REG_EXPAND_SZ %systemroot%\system32\dumprep 0 -u

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)

===============

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveTypeAutoRun REG_DWORD 145 (0x91)
NoFolderOptions REG_DWORD 1 (0x1)

===============

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
HonorAutoRunSetting REG_DWORD 1 (0x1)

===============

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLS REG_SZ

===============

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
AutoRestartShell REG_DWORD 1 (0x1)
DefaultDomainName REG_SZ ACER-0912CA301A
DefaultUserName REG_SZ Célia Terfas
LegalNoticeCaption REG_SZ
LegalNoticeText REG_SZ
PowerdownAfterShutdown REG_SZ 0
ReportBootOk REG_SZ 1
Shell REG_SZ Explorer.exe
ShutdownWithoutLogon REG_SZ 0
System REG_SZ
VmApplet REG_SZ rundll32 shell32,Control_RunDLL "sysdm.cpl"
SfcQuota REG_DWORD -1 (0xffffffff)
allocatecdroms REG_SZ 0
allocatedasd REG_SZ 0
allocatefloppies REG_SZ 0
cachedlogonscount REG_SZ 10
forceunlocklogon REG_DWORD 0 (0x0)
passwordexpirywarning REG_DWORD 14 (0xe)
scremoveoption REG_SZ 0
AllowMultipleTSSessions REG_DWORD 1 (0x1)
UIHost REG_EXPAND_SZ logonui.exe
LogonType REG_DWORD 1 (0x1)
Background REG_SZ 0 0 0
DebugServerCommand REG_SZ no
SFCDisable REG_DWORD 0 (0x0)
WinStationsDisabled REG_SZ 0
HibernationPreviouslyEnabled REG_DWORD 1 (0x1)
ShowLogonOptions REG_DWORD 0 (0x0)
AltDefaultUserName REG_SZ Célia Terfas
AltDefaultDomainName REG_SZ ACER-0912CA301A
ChangePasswordUseKerberos REG_DWORD 1 (0x1)
Userinit REG_SZ C:\WINDOWS\system32\userinit.exe,

===============

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\crypt32chain]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cryptnet]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cscdll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ScCertProp]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Schedule]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\sclgntfy]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\SensLogn]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\termsrv]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WgaLogon]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wlballoon]

===============

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ

===============

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\Acer\Acer eConsole\MediaSync.exe REG_SZ C:\Program Files\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer
C:\Program Files\Acer\Acer eConsole\eConsole.exe REG_SZ C:\Program Files\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole
C:\Program Files\Acer\Acer eConsole\MediaServerService.exe REG_SZ C:\Program Files\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server
C:\Program Files\Messenger\msmsgs.exe REG_SZ C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
C:\Program Files\MSN Messenger\msncall.exe REG_SZ C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)
C:\Program Files\eMule\emule.exe REG_SZ C:\Program Files\eMule\emule.exe:*:Disabled:eMule
C:\Program Files\IncrediMail\bin\IMApp.exe REG_SZ C:\Program Files\IncrediMail\bin\IMApp.exe:*:Enabled:IncrediMail
C:\Program Files\IncrediMail\bin\IncMail.exe REG_SZ C:\Program Files\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail
C:\Program Files\IncrediMail\bin\ImpCnt.exe REG_SZ C:\Program Files\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail
C:\Program Files\MSN Messenger\livecall.exe REG_SZ C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
C:\Program Files\LimeWire\LimeWire.exe REG_SZ C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe REG_SZ C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
C:\Program Files\Yahoo!\Messenger\YServer.exe REG_SZ C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server
C:\Program Files\VideoLAN\VLC\vlc.exe REG_SZ C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player
C:\Program Files\eMulle\emule.exe REG_SZ C:\Program Files\eMulle\emule.exe:*:Enabled:eMule
C:\Program Files\eMule49\emule.exe REG_SZ C:\Program Files\eMule49\emule.exe:*:Enabled:eMule
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare
C:\Program Files\Internet Explorer\iexplore.exe REG_SZ C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
%windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
C:\Program Files\MSN Messenger\msncall.exe REG_SZ C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)
C:\Program Files\MSN Messenger\livecall.exe REG_SZ C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
%windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call
C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare

===============
ActivX controls
===============

[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{0972B098-DEE9-4279-AC7E-4BAAA029102D}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{17492023-C23A-453E-A040-C7C580BBF700}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{1E3F1348-4370-4BBE-A67A-CC7ED824CA85}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{20A60F0D-9AFA-4515-A0FD-83BD84642501}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{2917297F-F02B-4B9D-81DF-494B6333150B}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{32C3FEAE-0877-4767-8C20-62A5829A0945}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{4F1E5B1A-2A80-42CA-8532-2D05CB959537}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{56393399-041A-4650-94C7-13DFCB1F4665}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D6F45B3-9043-443D-A792-115447494D24}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5ED80217-570B-4DA9-BF44-BE107C0EC166}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{867E13F2-7F31-44FB-AC97-CD38E0DC46EF}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{88764F69-3831-4EC1-B40B-FF21D8381345}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8E0D4DE5-3180-4024-A327-4DFAD1796A8D}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{97E71027-0BA2-44F2-97DB-F84D808ED0B6}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{B8BE5E93-A60C-4D26-A2DC-220313175592}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{C3F79A2B-B9B4-4A66-B012-3EE46475B072}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{E6187999-9FEC-46A1-A20F-F4CA977D5643}]
[HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{F6BF0D00-0B2A-4A75-BF7B-F385591623AF}]

===============
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{1B320010-9D3D-429F-B71B-A4A30EA1E956}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{6f917037-4644-4742-9285-19af7cb0a8a6}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{0291E591-EA41-4c82-8106-3DC6CE7F7664}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{233C1507-6A77-46A4-9443-F871F945D258}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{30528230-99F7-4BB4-88D8-FA1D4F56A2AB}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{347B0667-C7ED-429B-BDE3-CC8D3BACAA31}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{411EDCF7-755D-414E-A74B-3DCD6583F589}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8b15971b-5355-4c82-8c07-7e181ea07608}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{94de52c8-2d59-4f1b-883e-79663d2d9a8c}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9A394342-4A68-4EBA-85A6-55B559F4E700}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}]

==============
BHO :
======

[<NO NAME> REG_SZ ]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{28D3F4C6-4C53-4945-A594-04A03A48E0B3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{A2BA40A0-74F1-52BD-F411-00B15A2C8953}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]

===
DNS
===

HKLM\SYSTEM\CCS\Services\Tcpip\..\{913B0503-91B4-4D06-8A9B-25138218CE71}: NameServer=213.36.80.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{913B0503-91B4-4D06-8A9B-25138218CE71}: NameServer=213.36.80.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{913B0503-91B4-4D06-8A9B-25138218CE71}: NameServer=213.36.80.1
0
================
Internet Explorer :
================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ http://go.microsoft.com/fwlink/?LinkId=69157
Local Page REG_SZ C:\WINDOWS\system32\blank.htm
Default_Search_URL REG_SZ http://go.microsoft.com/fwlink/?LinkId=54896
Default_Page_URL REG_SZ http://go.microsoft.com/fwlink/?LinkId=69157
Search Page REG_SZ http://go.microsoft.com/fwlink/?LinkId=54896

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.google.fr/?gws_rd=ssl
Local Page REG_SZ C:\WINDOWS\system32\blank.htm
Search Page REG_SZ https://www.google.com/?gws_rd=ssl

========
Services
========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3 ( OK = 3 )
EapHost : 0x3 ( OK = 2 )
SharedAccess : 0x2 ( OK = 2 )
wuauserv : 0x2 ( OK = 2 )

========
Safemode
========

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot : OK !!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal : OK !!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network : OK !!

=========
Atapi.sys
=========

C:\WINDOWS\$NtServicePackUninstall$\atapi.sys :
MD5 :: [cdfe4411a69c224bd1d11b2da92dac51]
SHA256 :: [0e6b23a80f171550575bebc56f7500cd87a5cf03b2b9fdc49bc3de96282cd69d]

C:\WINDOWS\ServicePackFiles\i386\atapi.sys :
MD5 :: [9f3a2f5aa6875c72bf062c712cfa2674]
SHA256 :: [b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9]

C:\WINDOWS\system32\drivers\atapi.sys :
MD5 :: [9f3a2f5aa6875c72bf062c712cfa2674]
SHA256 :: [b4df1d2c56a593c6b54de57395e3b51d288f547842893b32b0f59228a0cf70b9]

Référence :
==========

Win 2000_SP2 : ff953a8f08ca3f822127654375786bbe
Win 2000_SP4 : 8c718aa8c77041b3285d55a0ce980867
Win XP_32b : a64013e98426e1877cb653685c5c0009
Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_32b : e03e8c99d15d0381e02743c36afc7c6f
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C
Windows 7_32b_Ultimate : 338c86357871c167a96ab976519bf59e

=======
Drive :
=======

D'fragmenteur de disque Windows
Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc.

Rapport d'analyse
72,33 Go total, 25,78 Go libre (35%), 30% fragment' (fragmentation du fichier 59%)

Vous devriez d'fragmenter ce volume.

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\WINDOWS\System32\drivers\etc\hosts.msn
Present !! : C:\WINDOWS\System32\drivers\Sonyhcp.dll"
Present !! : C:\WINDOWS\System32\SET*.tmp
Present !! : C:\WINDOWS\Tasks\At1.job
Present !! : C:\WINDOWS\Tasks\At2.job
Present !! : C:\WINDOWS\Tasks\At3.job
Present !! : C:\WINDOWS\Tasks\At4.job
Present !! : C:\WINDOWS\Tasks\At5.job
Present !! : C:\WINDOWS\Tasks\At6.job
Present !! : C:\WINDOWS\Tasks\At7.job
Present !! : C:\WINDOWS\Tasks\At8.job
Present !! : C:\WINDOWS\Tasks\At9.job
Present !! : C:\WINDOWS\Tasks\At1.job
Present !! : C:\WINDOWS\Tasks\At10.job
Present !! : C:\WINDOWS\Tasks\At11.job
Present !! : C:\WINDOWS\Tasks\At12.job
Present !! : C:\WINDOWS\Tasks\At13.job
Present !! : C:\WINDOWS\Tasks\At14.job
Present !! : C:\WINDOWS\Tasks\At15.job
Present !! : C:\WINDOWS\Tasks\At16.job
Present !! : C:\WINDOWS\Tasks\At17.job
Present !! : C:\WINDOWS\Tasks\At18.job
Present !! : C:\WINDOWS\Tasks\At19.job
Present !! : C:\WINDOWS\Tasks\At2.job
Present !! : C:\WINDOWS\Tasks\At20.job
Present !! : C:\WINDOWS\Tasks\At21.job
Present !! : C:\WINDOWS\Tasks\At22.job
Present !! : C:\WINDOWS\Tasks\At23.job
Present !! : C:\WINDOWS\Tasks\At24.job
Present !! : C:\WINDOWS\Tasks\At25.job
Present !! : C:\WINDOWS\Tasks\At26.job
Present !! : C:\WINDOWS\Tasks\At27.job
Present !! : C:\WINDOWS\Tasks\At28.job
Present !! : C:\WINDOWS\Tasks\At29.job
Present !! : C:\WINDOWS\Tasks\At3.job
Present !! : C:\WINDOWS\Tasks\At30.job
Present !! : C:\WINDOWS\Tasks\At31.job
Present !! : C:\WINDOWS\Tasks\At32.job
Present !! : C:\WINDOWS\Tasks\At33.job
Present !! : C:\WINDOWS\Tasks\At34.job
Present !! : C:\WINDOWS\Tasks\At35.job
Present !! : C:\WINDOWS\Tasks\At36.job
Present !! : C:\WINDOWS\Tasks\At37.job
Present !! : C:\WINDOWS\Tasks\At38.job
Present !! : C:\WINDOWS\Tasks\At39.job
Present !! : C:\WINDOWS\Tasks\At4.job
Present !! : C:\WINDOWS\Tasks\At40.job
Present !! : C:\WINDOWS\Tasks\At41.job
Present !! : C:\WINDOWS\Tasks\At42.job
Present !! : C:\WINDOWS\Tasks\At43.job
Present !! : C:\WINDOWS\Tasks\At44.job
Present !! : C:\WINDOWS\Tasks\At45.job
Present !! : C:\WINDOWS\Tasks\At46.job
Present !! : C:\WINDOWS\Tasks\At47.job
Present !! : C:\WINDOWS\Tasks\At48.job
Present !! : C:\WINDOWS\Tasks\At49.job
Present !! : C:\WINDOWS\Tasks\At5.job
Present !! : C:\WINDOWS\Tasks\At50.job
Present !! : C:\WINDOWS\Tasks\At51.job
Present !! : C:\WINDOWS\Tasks\At52.job
Present !! : C:\WINDOWS\Tasks\At53.job
Present !! : C:\WINDOWS\Tasks\At54.job
Present !! : C:\WINDOWS\Tasks\At55.job
Present !! : C:\WINDOWS\Tasks\At56.job
Present !! : C:\WINDOWS\Tasks\At57.job
Present !! : C:\WINDOWS\Tasks\At58.job
Present !! : C:\WINDOWS\Tasks\At59.job
Present !! : C:\WINDOWS\Tasks\At6.job
Present !! : C:\WINDOWS\Tasks\At60.job
Present !! : C:\WINDOWS\Tasks\At61.job
Present !! : C:\WINDOWS\Tasks\At62.job
Present !! : C:\WINDOWS\Tasks\At63.job
Present !! : C:\WINDOWS\Tasks\At64.job
Present !! : C:\WINDOWS\Tasks\At65.job
Present !! : C:\WINDOWS\Tasks\At66.job
Present !! : C:\WINDOWS\Tasks\At67.job
Present !! : C:\WINDOWS\Tasks\At68.job
Present !! : C:\WINDOWS\Tasks\At69.job
Present !! : C:\WINDOWS\Tasks\At7.job
Present !! : C:\WINDOWS\Tasks\At70.job
Present !! : C:\WINDOWS\Tasks\At71.job
Present !! : C:\WINDOWS\Tasks\At72.job
Present !! : C:\WINDOWS\Tasks\At8.job
Present !! : C:\WINDOWS\Tasks\At9.job
Present !! : C:\WINDOWS\Temp\23544a79ec967b0a961b9e23.tmp
Present !! : C:\WINDOWS\Temp\2dbf55e2f470901cbd9a5520.tmp
Present !! : C:\WINDOWS\Temp\401150febf68dc4b170fa1a.tmp
Present !! : C:\WINDOWS\Temp\42bb90bf3f024afd3987e8f5.tmp
Present !! : C:\WINDOWS\Temp\474ad1a0b8b586af33ce215d.tmp
Present !! : C:\WINDOWS\Temp\4a8610f3b7a565b04ced8850.tmp
Present !! : C:\WINDOWS\Temp\62aacd71bedfe7d5e4ef90db.tmp
Present !! : C:\WINDOWS\Temp\706b26eda3fbc4e4ed2ed017.tmp
Present !! : C:\WINDOWS\Temp\8653dfe07151122e9d79647a.tmp
Present !! : C:\WINDOWS\Temp\b0339b17551f48f651eb5bfa.tmp
Present !! : C:\WINDOWS\Temp\c820671342a5057f2659bc2c.tmp
Present !! : C:\WINDOWS\Temp\cf2a89d18df87bc4f5b0c9c.tmp
Present !! : C:\WINDOWS\Temp\de7dfed05801da759f58fbbc.tmp
Present !! : C:\WINDOWS\Temp\fla24.tmp
Present !! : C:\WINDOWS\Temp\JET217D.tmp
Present !! : C:\WINDOWS\Temp\JET4D50.tmp
Present !! : C:\WINDOWS\Temp\JET4DAD.tmp
Present !! : C:\WINDOWS\Temp\JET5FAF.tmp
Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\GDIPFONTCACHEV1.DAT
Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\wklnhst.dat
Present !! : C:\Documents and Settings\C'lia Terfas\Application data\inst.exe
Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\pcouffin.inf
Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\pcouffin.log
Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\GDIPFONTCACHEV1.DAT
Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\wklnhst.dat
Present !! : C:\Documents and Settings\C'lia Terfas\Application Data\inst.exe

¤¤¤¤¤¤¤¤¤¤ Keys :

Present !! : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\hsf87efjhdsf87f3jfsdi7fhsujfd
Present !! : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\hsf87sdhfush87fsufhuie3fddf
Present !! : HKCU\Software\Microsoft\Windows\CurrentVersion\Run\mcexecwin
Present !! : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
Present !! : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions
Present !! : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions
Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools
Present !! : "HKCU\Software\Antimalware Doctor Inc"
Present !! : "HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"
Present !! : "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A2BA40A0-74F1-52BD-F411-00B15A2C8953}"
Present !! : HKCR\secfile
Present !! : HKCU\SOFTWARE\IGB
Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a2ba40a0-74f1-52bd-f411-00b15a2c8953}

============

catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-05-02 14:22:59
Windows 5.1.2600 Service Pack 3 FAT NTAPI

detected NTDLL code modification:
ZwClose

scanning hidden processes ...

IPC error: 2 Le fichier spécifié est introuvable.
scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x860AEEE4]<<
kernel: MBR read successfully
user & kernel MBR OK
copy of MBR has been found in sector 37 !

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
FirstRunDisabled REG_DWORD 1 (0x1)
AntiVirusOverride REG_DWORD 0 (0x0)
FirewallOverride REG_DWORD 0 (0x0)
AntiVirusDisableNotify REG_DWORD 0 (0x0)
FirewallDisableNotify REG_DWORD 0 (0x0)
UpdatesDisableNotify REG_DWORD 0 (0x0)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

End of scan : 14:23:02,73
0
plus personne?? oui je suis pressée je sais!!
En tous cas, merci de m'aider!
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Utilisateur anonyme
2 mai 2010 à 17:12
▶ Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
mais cette fois-ci :

▶ choisis l'Option Clean

ton PC va redemarrer,

laisse travailler l'outil.

en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

▶ colle le contenu dans ta reponse
0
Alors impossible de faire le "clean", une fenêtre apparaît, me disant "arrêt système" pui une autre qui veut me redémarrer l'ordi (teminer maintenant)
C'est un blaster c'est ça?
Que puis -je faire?
J'ai aussi un soucis avec rundll.
0
Utilisateur anonyme
6 mai 2010 à 01:12
non c'est le logiciel qui fait redemarrer le pc c'est expliqué dans l'enoncé
0
oui je m'en suis aperçu après avoir posté... mais je n'ai aucun rapport, il ne se passe rien au redémarrage.
Et là, la barre de tâches grise, à l'ancienne on dirait.
0
Utilisateur anonyme
6 mai 2010 à 20:51
double clique sur :

C:\Program Files\List_Kill'em\del_reg.bat (le ".bat" peut etre invisible)
0
ok et après?? J'ai tjr pas de rapport;
0
Utilisateur anonyme
6 mai 2010 à 22:28
sur ton bureau du nom de Kill'em.txt :)
0
Désolée, je ne suis vraiment pas douée...
Merci à toi en tous cas, je te poste ça demain, j'ai éteins l'ordi en question.
Bonne nuit.
0
Utilisateur anonyme
6 mai 2010 à 23:48
pas de problemes ^^
0
An unexpected error has been detected by Java Runtime Environment:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x255a255a, pid=3580, tid=2420
#
# Java VM: Java HotSpot(TM) Client VM (1.6.0_03-b05 mixed mode)
# Problematic frame:
# C 0x255a255a
#
# If you would like to submit a bug report, please visit:
# https://bugreport.java.com/bugreport/crash.jsp
#

--------------- T H R E A D ---------------

Current thread (0x18f78400): JavaThread "thread applet-AppletX" [_thread_in_native, id=2420]

siginfo: ExceptionCode=0xc0000005, ExceptionInformation=0x00000008 0x255a255a

Registers:
EAX=0x00000000, EBX=0x218fcb58, ECX=0x174e7d70, EDX=0x00000000
ESP=0x1954f9cc, EBP=0x255a255a, ESI=0x218fcb58, EDI=0x18f78400
EIP=0x255a255a, EFLAGS=0x00210246

Top of Stack: (sp=0x1954f9cc)
0x1954f9cc: 0000001a 00000085 000002d4 1954f9d8
0x1954f9dc: 218fcb58 1954fa0c 218fd220 00000000
0x1954f9ec: 218fcb58 00000000 1954fa08 1954fa34
0x1954f9fc: 14a12d93 00000000 14a18429 1b477b70
0x1954fa0c: 1b4830c0 1b4830c0 1954fa14 218fcab7
0x1954fa1c: 1954fa44 218fd220 00000000 218fcad8
0x1954fa2c: 1954fa08 1954fa40 1954fa68 14a12cb1
0x1954fa3c: 1b48bbe8 1b477b70 1b4830c0 1954fa48

Instructions: (pc=0x255a255a)
0x255a254a:
[error occurred during error reporting, step 100, id 0xc0000005]

Stack: [0x19450000,0x19550000), sp=0x1954f9cc, free space=1022k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C 0x255a255a

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j com.sun.media.sound.HeadspaceSoundbank.nOpenResource(Ljava/lang/String;)J+0
j com.sun.media.sound.HeadspaceSoundbank.initialize(Ljava/lang/String;)V+7
j com.sun.media.sound.HeadspaceSoundbank.<init>(Ljava/net/URL;)V+89
j com.sun.media.sound.HsbParser.getSoundbank(Ljava/net/URL;)Ljavax/sound/midi/Soundbank;+5
j javax.sound.midi.MidiSystem.getSoundbank(Ljava/net/URL;)Ljavax/sound/midi/Soundbank;+36
j AppletX.init()V+150
j sun.applet.AppletPanel.run()V+205
j java.lang.Thread.run()V+11
v ~StubRoutines::call_stub

--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x16ab2400 JavaThread "Java Sound Event Dispatcher" daemon [_thread_blocked, id=760]
0x1756e000 JavaThread "thread applet-myf.y.AppletX.class" [_thread_in_native, id=3868]
=>0x18f78400 JavaThread "thread applet-AppletX" [_thread_in_native, id=2420]
0x1753b800 JavaThread "CacheCleanUpThread" daemon [_thread_blocked, id=196]
0x1752d400 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3352]
0x1751c000 JavaThread "AWT-Windows" daemon [_thread_in_native, id=3200]
0x17518800 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=2960]
0x16a9f800 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=256]
0x16a9ac00 JavaThread "CompilerThread0" daemon [_thread_blocked, id=2656]
0x16a99800 JavaThread "Attach Listener" daemon [_thread_blocked, id=1144]
0x16a98c00 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3416]
0x16a8b000 JavaThread "Finalizer" daemon [_thread_blocked, id=3084]
0x16a86800 JavaThread "Reference Handler" daemon [_thread_blocked, id=3144]

Other Threads:
0x16a82000 VMThread [id=3608]
0x16ac2400 WatcherThread [id=1724]

VM state:not at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: None

Heap
def new generation total 5568K, used 4209K [0x1b070000, 0x1b670000, 0x1b7d0000)
eden space 4992K, 84% used [0x1b070000, 0x1b48c438, 0x1b550000)
from space 576K, 0% used [0x1b5e0000, 0x1b5e00c0, 0x1b670000)
to space 576K, 0% used [0x1b550000, 0x1b550000, 0x1b5e0000)
tenured generation total 72860K, used 47810K [0x1b7d0000, 0x1fef7000, 0x21070000)
the space 72860K, 65% used [0x1b7d0000, 0x1e680bf8, 0x1e680c00, 0x1fef7000)
compacting perm gen total 12288K, used 8850K [0x21070000, 0x21c70000, 0x25070000)
the space 12288K, 72% used [0x21070000, 0x21914af8, 0x21914c00, 0x21c70000)
No shared spaces configured.

Dynamic libraries:
0x00400000 - 0x0049c000 C:\Program Files\Internet Explorer\iexplore.exe
0x7c910000 - 0x7c9c9000 C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c906000 C:\WINDOWS\system32\kernel32.dll
0x77da0000 - 0x77e4c000 C:\WINDOWS\system32\ADVAPI32.dll
0x77e50000 - 0x77ee2000 C:\WINDOWS\system32\RPCRT4.dll
0x77fc0000 - 0x77fd1000 C:\WINDOWS\system32\Secur32.dll
0x7e390000 - 0x7e421000 C:\WINDOWS\system32\USER32.dll
0x77ef0000 - 0x77f39000 C:\WINDOWS\system32\GDI32.dll
0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
0x77f40000 - 0x77fb6000 C:\WINDOWS\system32\SHLWAPI.dll
0x7c9d0000 - 0x7d1f5000 C:\WINDOWS\system32\SHELL32.dll
0x774a0000 - 0x775dd000 C:\WINDOWS\system32\ole32.dll
0x40b40000 - 0x40d28000 C:\WINDOWS\system32\iertutil.dll
0x45180000 - 0x452b3000 C:\WINDOWS\system32\urlmon.dll
0x770e0000 - 0x7716b000 C:\WINDOWS\system32\OLEAUT32.dll
0x5cea0000 - 0x5cec6000 C:\WINDOWS\system32\ShimEng.dll
0x715c0000 - 0x71639000 C:\WINDOWS\AppPatch\AcLayers.DLL
0x76960000 - 0x76a16000 C:\WINDOWS\system32\USERENV.dll
0x72f50000 - 0x72f76000 C:\WINDOWS\system32\WINSPOOL.DRV
0x76320000 - 0x7633d000 C:\WINDOWS\system32\IMM32.DLL
0x62dc0000 - 0x62dc9000 C:\WINDOWS\system32\LPK.DLL
0x753c0000 - 0x7542b000 C:\WINDOWS\system32\USP10.dll
0x77390000 - 0x77493000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
0x58b50000 - 0x58bea000 C:\WINDOWS\system32\comctl32.dll
0x636e0000 - 0x63708000 C:\Program Files\Spyware Doctor\smumhook.dll
0x76c40000 - 0x76c68000 C:\WINDOWS\system32\imagehlp.dll
0x404a0000 - 0x40586000 C:\WINDOWS\system32\WININET.dll
0x009c0000 - 0x009c9000 C:\WINDOWS\system32\Normaliz.dll
0x71990000 - 0x719d0000 C:\WINDOWS\system32\mswsock.dll
0x719f0000 - 0x71a07000 C:\WINDOWS\system32\WS2_32.dll
0x719e0000 - 0x719e8000 C:\WINDOWS\system32\WS2HELP.dll
0x71a10000 - 0x71a1a000 C:\WINDOWS\system32\wsock32.dll
0x62e40000 - 0x62e99000 C:\WINDOWS\system32\hnetcfg.dll
0x719d0000 - 0x719d8000 C:\WINDOWS\System32\wshtcpip.dll
0x40d30000 - 0x417c3000 C:\WINDOWS\system32\IEFRAME.dll
0x76340000 - 0x7638a000 C:\WINDOWS\system32\comdlg32.dll
0x00ef0000 - 0x00ef6000 C:\Program Files\Internet Explorer\xpshims.dll
0x5b090000 - 0x5b0c8000 C:\WINDOWS\system32\uxtheme.dll
0x74690000 - 0x746dc000 C:\WINDOWS\system32\MSCTF.dll
0x01af0000 - 0x01dca000 C:\WINDOWS\system32\xpsp2res.dll
0x76f80000 - 0x76fff000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 - 0x770d4000 C:\WINDOWS\system32\COMRes.dll
0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
0x45380000 - 0x453c0000 C:\Program Files\Internet Explorer\ieproxy.dll
0x778e0000 - 0x779d8000 C:\WINDOWS\system32\SETUPAPI.dll
0x75d30000 - 0x75dc1000 C:\WINDOWS\system32\MLANG.dll
0x77b50000 - 0x77b72000 C:\WINDOWS\system32\apphelp.dll
0x75140000 - 0x7516e000 C:\WINDOWS\system32\msctfime.ime
0x62900000 - 0x629cb000 C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
0x76ae0000 - 0x76b0f000 C:\WINDOWS\system32\WINMM.dll
0x76310000 - 0x76315000 C:\WINDOWS\system32\MSIMG32.dll
0x76d10000 - 0x76d29000 C:\WINDOWS\system32\iphlpapi.dll
0x6fee0000 - 0x6ff35000 C:\WINDOWS\system32\NETAPI32.dll
0x76e90000 - 0x76ecc000 C:\WINDOWS\system32\RASAPI32.dll
0x76e40000 - 0x76e52000 C:\WINDOWS\system32\rasman.dll
0x76e60000 - 0x76e8f000 C:\WINDOWS\system32\TAPI32.dll
0x76e30000 - 0x76e3e000 C:\WINDOWS\system32\rtutils.dll
0x77c40000 - 0x77c65000 C:\WINDOWS\system32\msv1_0.dll
0x76730000 - 0x7673c000 C:\WINDOWS\system32\cryptdll.dll
0x68000000 - 0x68036000 C:\WINDOWS\system32\rsaenh.dll
0x72220000 - 0x72225000 C:\WINDOWS\system32\sensapi.dll
0x77210000 - 0x772c1000 C:\WINDOWS\system32\SXS.DLL
0x02990000 - 0x029b0000 c:\windows\system32\omghxuq.dll
0x76ba0000 - 0x76bab000 C:\WINDOWS\system32\psapi.dll
0x76ed0000 - 0x76ef7000 C:\WINDOWS\system32\dnsapi.dll
0x5c390000 - 0x5c3a3000 C:\WINDOWS\system32\srclient.dll
0x692c0000 - 0x692ee000 C:\WINDOWS\system32\framedyn.dll
0x74bf0000 - 0x74c1c000 C:\WINDOWS\system32\oleacc.dll
0x76010000 - 0x76075000 C:\WINDOWS\system32\MSVCP60.dll
0x10000000 - 0x1005b000 C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
0x7d200000 - 0x7d4bc000 C:\WINDOWS\system32\msi.dll
0x63000000 - 0x6305d000 C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTBM.dll
0x40230000 - 0x4038a000 C:\WINDOWS\system32\msxml6.dll
0x70de0000 - 0x70df3000 C:\WINDOWS\system32\asycfilt.dll
0x76f60000 - 0x76f68000 C:\WINDOWS\System32\winrnr.dll
0x76f10000 - 0x76f3d000 C:\WINDOWS\system32\WLDAP32.dll
0x76f70000 - 0x76f76000 C:\WINDOWS\system32\rasadhlp.dll
0x71ca0000 - 0x71cbb000 C:\WINDOWS\system32\actxprxy.dll
0x40590000 - 0x40b3f000 C:\WINDOWS\system32\mshtml.dll
0x038f0000 - 0x03919000 C:\WINDOWS\system32\msls31.dll
0x72ea0000 - 0x72f0f000 C:\WINDOWS\system32\ieapfltr.dll
0x779e0000 - 0x77a77000 C:\WINDOWS\system32\CRYPT32.dll
0x77a80000 - 0x77a92000 C:\WINDOWS\system32\MSASN1.dll
0x74660000 - 0x7468a000 C:\WINDOWS\system32\msimtf.dll
0x76be0000 - 0x76c0e000 C:\WINDOWS\system32\wintrust.dll
0x76790000 - 0x767b8000 C:\WINDOWS\system32\schannel.dll
0x46fe0000 - 0x47001000 C:\WINDOWS\system32\XmlLite.dll
0x68100000 - 0x68126000 C:\WINDOWS\system32\dssenh.dll
0x77650000 - 0x77671000 C:\WINDOWS\system32\NTMARTA.DLL
0x71b50000 - 0x71b63000 C:\WINDOWS\system32\SAMLIB.dll
0x431d0000 - 0x431ff000 C:\WINDOWS\system32\iepeers.dll
0x403e0000 - 0x40494000 c:\windows\system32\jscript.dll
0x1b000000 - 0x1b00c000 C:\WINDOWS\system32\ImgUtil.dll
0x1b060000 - 0x1b06e000 C:\WINDOWS\system32\pngfilt.dll
0x07a00000 - 0x07e88000 C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx
0x73a80000 - 0x73a95000 C:\WINDOWS\system32\mscms.dll
0x748f0000 - 0x74a13000 C:\WINDOWS\system32\msxml3.dll
0x6d8f0000 - 0x6d8fa000 C:\WINDOWS\system32\ddrawex.dll
0x736b0000 - 0x736fb000 C:\WINDOWS\system32\DDRAW.dll
0x73b10000 - 0x73b16000 C:\WINDOWS\system32\DCIMAN32.dll
0x73250000 - 0x732ba000 c:\windows\system32\vbscript.dll
0x6d120000 - 0x6d128000 C:\WINDOWS\system32\dispex.dll
0x0cdf0000 - 0x0ce20000 C:\WINDOWS\system32\libssl32.dll
0x0ce20000 - 0x0cf1b000 C:\WINDOWS\system32\LIBEAY32.dll
0x7c360000 - 0x7c3b6000 C:\WINDOWS\system32\MSVCR71.dll
0x79000000 - 0x79046000 C:\WINDOWS\system32\mscoree.dll
0x63f00000 - 0x63f0c000 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
0x78130000 - 0x781cb000 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll
0x6d7c0000 - 0x6d839000 C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
0x6d6b0000 - 0x6d6d1000 C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
0x6d4a0000 - 0x6d4bb000 C:\Program Files\Java\jre1.6.0_03\bin\jpiexp.dll
0x6d250000 - 0x6d261000 C:\Program Files\Java\jre1.6.0_03\bin\deploy.dll
0x6d4f0000 - 0x6d514000 C:\Program Files\Java\jre1.6.0_03\bin\jpishare.dll
0x147c0000 - 0x14a0a000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\client\jvm.dll
0x6d310000 - 0x6d318000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\hpi.dll
0x6d770000 - 0x6d77c000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\verify.dll
0x6d3b0000 - 0x6d3cf000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\java.dll
0x6d7b0000 - 0x6d7bf000 C:\PROGRA~1\Java\JRE16~1.0_0\bin\zip.dll
0x17310000 - 0x174d3000 C:\Program Files\Java\jre1.6.0_03\bin\awt.dll
0x6d2b0000 - 0x6d303000 C:\Program Files\Java\jre1.6.0_03\bin\fontmanager.dll
0x6d480000 - 0x6d498000 C:\Program Files\Java\jre1.6.0_03\bin\jpicom.dll
0x7d4d0000 - 0x7d4f2000 C:\WINDOWS\system32\DHCPCSVC.DLL
0x77cd0000 - 0x77d03000 C:\WINDOWS\system32\netman.dll
0x76cf0000 - 0x76d08000 C:\WINDOWS\system32\MPRAPI.dll
0x77c90000 - 0x77cc2000 C:\WINDOWS\system32\ACTIVEDS.dll
0x76dc0000 - 0x76de5000 C:\WINDOWS\system32\adsldpc.dll
0x76ac0000 - 0x76ad1000 C:\WINDOWS\system32\ATL.DLL
0x76390000 - 0x76539000 C:\WINDOWS\system32\netshell.dll

VM Arguments:
jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE16~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE16~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.6.0_03 -Djavaplugin.nodotversion=160_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE16~1.0_0 -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE16~1.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE16~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE16~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.6.0_03 -Djavaplugin.nodotversion=160_03 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE16~1.0_0
java_command: <unknown>
Launcher Type: generic

Environment Variables:
CLASSPATH=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
PATH=C:\PROGRA~1\Java\JRE16~1.0_0\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Fichiers communs\Teleca Shared;C:\Program Files\Samsung\Samsung PC Studio 3\;C:\Program Files\QuickTime\QTSystem\;;C:\PROGRA~1\FICHIE~1\MUVEET~1\030625;.
USERNAME=Célia Terfas
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 15 Model 44 Stepping 2, AuthenticAMD



--------------- S Y S T E M ---------------

OS: Windows XP Build 2600 Service Pack 3

CPU:total 1 (1 cores per cpu, 1 threads per core) family 15 model 44 stepping 2, cmov, cx8, fxsr, mmx, sse, sse2, sse3, mmxext, 3dnow, 3dnowext

Memory: 4k page, physical 982512k(121768k free), swap 1583776k(391400k free)

vm_info: Java HotSpot(TM) Client VM (1.6.0_03-b05) for windows-x86, built on Sep 24 2007 22:24:33 by "java_re" with unknown
0
Utilisateur anonyme
8 mai 2010 à 17:25
salut c'est quoi ca ?
0
c'est ce qui figure sur le bureau aprés avoir rallumer l'ordi, après avoir cliquer sur clean.Je n'ai rien d'autre.
0
Utilisateur anonyme
9 mai 2010 à 20:56
ca n'a rien a voir avec list_kill'em ca...
0
ben je fais quoi?
0
Utilisateur anonyme
9 mai 2010 à 23:11
▶ Télécharge ZHPDiag (de Nicolas Coolman)

ou :ZHPDiag

Enregistre le sur ton Bureau.

Une fois le téléchargement achevé,

▶ lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.

▶ Clique sur le tournevis puis sur Tous pour cocher toutes les cases des options.

▶ Clique sur la loupe pour lancer l'analyse.

A la fin de l'analyse,

▶ clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

Pour me le transmettre clique sur ce lien :

http://www.cijoint.fr/

▶ Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt

▶ Clique sur Ouvrir.

▶ Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

est ajouté dans la page.

▶ Copie ce lien dans ta réponse.
0
ça ne marche pas : erreur de connexion.
Il me soul cet ordi, j'en ai vraiment ras le bol.
0