Forum-vista : Entraide et dépannage Windows Vista et Windows Seven

Voila je pense que il y a un virus dans mon pc
Je vous envoie les problème que j'ai en image
La c'est quand j'ouvre le panneau de configuration

En cliquant sur personnalisation le panneau de configuration s'ouvre

Je pense que quand le centre de sécurité démarre sa plante le panneau de configuration et quand je clique sur le centre de sécurité il met processus hôte rundll32.exe a cesser de fonctionner.

Pouvez vous m'aider?

Bonjour

Fait ceci pour voir.

* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal " soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL " Personnalisation"

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
vstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

Rapport otl extras
OTL Extras logfile created on: 14/05/2010 12:26:51 - Run 1
OTL by OldTimer - Version 3.2.4.1 Folder = C:\Users\kevin.PC-de-keke\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

1 014,00 Mb Total Physical Memory | 381,00 Mb Available Physical Memory | 38,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 65,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 210,09 Gb Total Space | 117,34 Gb Free Space | 55,85% Space Free | Partition Type: NTFS
Drive D: | 22,79 Gb Total Space | 18,89 Gb Free Space | 82,87% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PC-DE-BYNSHA
Current User Name: kevin
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2B1F1FBD-B4A9-4C3B-93A0-DEA279370F30}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{82DE17FF-A2FE-4BD5-92AF-C11DD191D8CE}" = lport=12183 | protocol=6 | dir=in | name=bitcomet 12183 tcp |
"{925D6EB8-2F5A-4355-8255-19097D9ABD0D}" = lport=12183 | protocol=17 | dir=in | name=bitcomet 12183 udp |
"{AF488BDA-A27D-4922-9A3C-E2FC05792AAF}" = lport=48113 | protocol=6 | dir=in | name=maconfig_tcp |
"{D355857B-BF6F-47E3-A35E-E9319D981CB0}" = lport=48113 | protocol=17 | dir=in | name=maconfig_udp |
"{DEB4A343-49C1-41D1-9F0D-A1F009F9B4D3}" = lport=2869 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1E3D670D-3538-4282-9135-703F9B1E9B12}" = protocol=17 | dir=in | app=c:\program files\ma-config.com\maconfservice.exe |
"{211E41F1-BED9-4776-BB5E-5A462893385D}" = protocol=6 | dir=in | app=c:\program files\ma-config.com\maconfservice.exe |
"{3DBA506C-E678-43E8-B2ED-4A84FB3926EC}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{42AD028B-C69C-4499-B037-2238D29D4C87}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{4B14334D-1212-48D0-8769-7B9F26F3DBD7}" = protocol=6 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{4C19FC8D-6F78-40D9-9494-D8DFB97E3FAB}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{4E732E2F-BE4E-4DBC-8A3A-374808945E24}" = protocol=6 | dir=in | app=c:\program files\konami\pro evolution soccer 2009\pes2009.exe |
"{6E8883DB-196D-4503-8BC1-DBD4D7057C98}" = protocol=17 | dir=in | app=c:\program files\bitcomet\bitcomet.exe |
"{8A4FBB93-C0B9-4C1D-B075-F180D2829D73}" = protocol=17 | dir=in | app=c:\program files\konami\pro evolution soccer 2009\pes2009.exe |
"{AE7F76F2-E5BD-454F-9C41-2E18D7EAA11A}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{BFC07401-7EAF-4464-81BC-44C2A3ECB031}" = protocol=6 | dir=in | app=c:\program files\konami\pro evolution soccer 2009\team pro evo 09.exe |
"{D86833A5-4C5D-402B-9F43-6D027B91CFE6}" = protocol=17 | dir=in | app=c:\program files\konami\pro evolution soccer 2009\team pro evo 09.exe |
"{E49B254F-4046-4A6A-BBED-20708DD4295F}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"TCP Query User{343AF02B-43E4-4D79-A30A-C5536B613AEA}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{F48C15B5-DE93-4B85-A823-220B6A78AAA3}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{5F0C1345-3AA6-4843-8280-D550BCCC97EA}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{C2F2F83F-6882-4632-BB4C-8BCDDC2D8643}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0F9B474C-B65A-427E-A3A6-9B7460ED14D9}" = Recovery Center
"{1235083F-52F9-44CC-9DF5-F9B7802BB9B7}" = ISO Recorder
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{2D3551DF-B54C-4F34-884D-8D51F1C62F03}" = Ma-Config.com
"{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Roxio Drag-to-Disc
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
"{36B4181D-0C32-4660-A637-0888A9EF5873}" = Vista Manager
"{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live
"{5D977FB1-AA7D-4493-8D5C-D608F35445CA}_is1" = Patch Team PRO-EVO v1.00 - Part Sounds
"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail
"{683100FE-EDF8-403B-A234-B3EBEAF7BC82}" = Roxio Creator 9 XE
"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
"{86BCC897-7707-4470-BF30-C8B333B941CA}_is1" = Patch Team PRO-EVO v1.00 - Part Chants
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D2FDEB4-C521-467C-964A-4B45E7138AFB}_is1" = Patch Team PRO-EVO v1.00
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab
"{9FE8DF39-B161-451B-A4F6-169A46AE59FB}_is1" = Patch Team PRO-EVO v1.00 - Part Commentaires
"{A8DB611A-D80E-450D-85F6-3ACDD164BE31}" = Pro Evolution Soccer 2009
"{AC76BA86-7AD7-1036-7B44-A80000000002}" = Adobe Reader 8 - Français
"{B0CAA584-88EC-487D-8987-DE30FAA5383C}_is1" = Patch Team PRO-EVO v1.10 - Update 1
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E1A7B28B-AA31-442C-A4FA-598B65A7F5DA}" = OFFICE One License v7
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster 2010
"{EA7D2E55-386E-488D-9880-F6B939534AAE}" = OFFICE One 7.0
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}" = QuickTime
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"7-Zip" = 7-Zip 9.13 beta
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"avast!" = avast! Antivirus
"Change Extension" = Change Extension
"DFÜ-Optimierer" = DFÜ-Optimierer 1.40
"EASEUS Data Recovery Wizard Professional 5.0.1_is1" = EASEUS Data Recovery Wizard Professional 5.0.1
"eMule" = eMule
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Gestionnaire de périphériques de plate-forme
"Internet Download Manager" = Internet Download Manager
"JDownloader" = JDownloader
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.9)" = Mozilla Firefox (3.5.9)
"PowerStrip 3 (remove only)" = PowerStrip 3 (remove only)
"TVWiz" = Intel(R) TV Wizard
"uTorrent" = µTorrent
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VLC media player" = VLC media player 0.9.8a
"Winamp" = Winamp
"WinLiveSuite_Wave3" = Installation Windows Live
"WinRAR archiver" = Logiciel d'archivage WinRAR

========== Last 10 Event Log Errors ==========

Error: Unable to start EventLog service!

Mets moi en plus le rapport OTL.Txt"

Je peut pas mettre en entier comment je fais?

Mets le en ligne ici et mets le lien ensuite.

http://www.cijoint.fr/index.php

Rien dans le rapport ne dis que tu as une infection.

Juste deux choses et pour moi continu après avec Chantal11

As tu installé FireBird sur ton pc.

Sinon ceci a tester.

Tentes ceci.

CECI :




Puis dans la fenêtre qui s’affiche.

net stop slsvc

Valide par entrée puis acceptes la demande en répondant o

Seconde commande ensuite.

net start slsvc

Ensuite redémarre le pc.

Non je n'ai pas installé firebird sur mon pc
J'ai essayer ton astuces mais sa a pas fonctionner
Je vais continuer avec chantal411^^

Ok continu avec Chantal