Bonjour j'allume mon ordi et quand je clique sur mon profit ou meme si je ne clique pas l'ordi redemarre 5 sec apres l'affichage des profit .. et sa en boucle et impossible d'acede a mon bureau...
svp aider moi
Merci
démarre en mode sans échec, un petit coup de malware bytes (super logiciel).
et hijackthis. ca sent le virus.
tu peux aussi installer un Linux pour vérifier tout de suite.
ba j'ai nod32 mais quand je fait analyser en mode sans echec sa marque :
Erreur
Envoyer le rapport et ne pas envoyer...
et sa me l'avais deja fait avant... :'(
j'ai desactiver le redemmarage automatique en cas d'echec systeme matenant il m'affiche sa
-Ecran bleu
Un probleme a ete dectete sur Windows afin de prevenir tout dommage eventuel ...
apres si ses le premier message essaye sa ...
et en bas ses ecrit sa :
Debut de vidage de la memoire physique
Vidage de la memoire physique termine
Contacter...
Il faut identifier le problème, le message peut aider à le trouver.
Peut-être un problème matériel, logiciel, pilote, mise à jour antivirus foireuse, virus et autres.
mais ta pas quel qun qui pourrait m'aider stp^^ en faite j'ai jouer a killing floor et pi j'ai quitter et l'ordi chez pas pouvais pu rien faire ( il bugguer ) pouvait pu bouger la souris donc j'ai reset. et... :'(
Tu peux accéder au mode sans échec sans l'apparition d'un écran bleu ?
Système d'exploitation ?
eu oui l'ecran bleu ses affiché mais apres j'ai fait reset et f8 et mode sans echec ^^
Xp, vista, seven ?
Tu dll ça :
http://www.clubic.com/telecharger-fiche215092-malwarebytes-anti-malware.html
Tu fais la mise à jour, et tu lances un scan rapide en mode sans échec.
Il te donnera le résultat sous forme de log, de diverses infections trouvées.
Si ça marche pas, tu devra faire une restauration systéme d'un point de sauvegarde d'avant le problème.
J'ai XP ok mais si sa marche pas ( 0 virus find ) comment on fait une restauration ^^?
j'ai pas le cd de windows ..
la j'ai taper CHKDSK dans invité de commande la il fait une vcerification et la sa marque remplacement des fichier endomagéé... cool j'espere que sa marchera (ps je te contacte^^)
X_X j'ai attendue 10 min il et qua " 7 pour cent " mdr..
25 malware trouvé
voici le rapport :D
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 25
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 6
Fichier(s) infecté(s): 14
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{43F7497C-7687-4DEA-A057-F
21BD81BC896} (Trojan.BHO.SM) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3A793B2A-0DD7-4C90-BA18
-B92FA8EC0AF5} (Trojan.BHO.SM) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{28D2CE37-2D49-4011-B4
18-E9DD2FC75961} (Trojan.BHO.SM) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Microsoft.MSJava32.1 (Trojan.BHO.SM) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Microsoft.MSJava32 (Trojan.BHO.SM) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{43F7497C-7687-4DEA-A057-F21BD81BC896} (Trojan.BHO.SM) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{43F7497C-7687-4DEA-A057-F21BD
81BC896} (Trojan.BHO.SM) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9A9C9B68-F908-4AAB-8D0C-1
0EA8997F37E} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{566DEDE9-9ED8-45DA-9BE6
-9B2EEAB17F49} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1037B06C-84B7-4240-8D
80-485810A0497D} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{9A9C9B68-F908-4AAB-8D0C-10EA8
997F37E} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9A9C9B69-F908-4AAB-8D0C-1
0EA8997F37E} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{9A9C9B69-F908-4AAB-8D0C-10EA8997F37E} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{9A9C9B69-F908-4AAB-8D0C-10EA8
997F37E} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{F1E96EDC-E0C8-BE98-1F15-C
29DBED83B53} (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3239A0EA-4203-7BF5-CD1D
-FDB0169B2778} (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{02110CF9-3753-C2C5-B1
A9-21599C9BFE9E} (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\BrowsingAdvisor.PornPro_BHO.1 (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\BrowsingAdvisor.PornPro_BHO (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{F1E96EDC-E0C8-BE98-1F15-C29DBED83B53} (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{F1E96EDC-E0C8-BE98-1F15-C29DB
ED83B53} (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\{8A0DCBDA-6E20-489C-9041-C1E8
A0352E75} (Adware.Mirar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\FBrowsingAdvisor_is1 (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\PlayMP3 (Adware.PLayMP3z) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\BrowsingAdvisor (Adware.PLayMP3z) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Toolbar\{9A9C9B68-F908-4AAB-8D0C-10EA8997
F37E} (Adware.Mirar) -> Value: {9A9C9B68-F908-4AAB-8D0C-10EA8997F37E} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Toolbar\{9A9C9B68-F908-4AAB-8D0C-10EA8997
F37E} (Adware.Mirar) -> Value: {9A9C9B68-F908-4AAB-8D0C-10EA8997F37E} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Run\MDNS (Backdoor.Bot) -> Value: MDNS -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.SearchPage) -> Bad: (http://www.iesearch.com/) Good: (http://www.Google.com/) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Internet
Settings\ZoneMap\Domains\net-nucleus.com\awbeta\ht
tp (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic
es\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Bad: (93.188.162.87,93.188.161.227) Good: () -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
c:\program files\browsingadvisor (Adware.PLayMP3z) -> Quarantined and deleted successfully.
c:\program files\fbrowseradvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
c:\program files\fbrowsingadvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
c:\program files\PlayMP3z (Adware.PLayMP3z) -> Quarantined and deleted successfully.
c:\documents and settings\XP\menu démarrer\programmes\PlayMP3z (Adware.PLayMP3z) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\UpMedia (Adware.SmartShopper) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
c:\WINDOWS\system32\msjava32.dll (Trojan.BHO.SM) -> Quarantined and deleted successfully.
c:\documents and settings\XP\local settings\application data\etkaxg_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
c:\documents and settings\XP\local settings\application data\etkaxg_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
c:\documents and settings\XP\local settings\temporary internet files\patch_1.2_1.3_1.4.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\program files\browsingadvisor\browsingadvisor.dat (Adware.PLayMP3z) -> Quarantined and deleted successfully.
c:\program files\browsingadvisor\pcre3.dll (Adware.PLayMP3z) -> Quarantined and deleted successfully.
c:\program files\browsingadvisor\uninstall.exe (Adware.PLayMP3z) -> Quarantined and deleted successfully.
c:\program files\fbrowsingadvisor\ixpcomevents.xpt (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
c:\program files\fbrowsingadvisor\Logo.png (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
c:\program files\fbrowsingadvisor\main.db (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
c:\program files\fbrowsingadvisor\unins000.dat (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
c:\program files\fbrowsingadvisor\unins000.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
c:\program files\PlayMP3z\uninstall.exe (Adware.PLayMP3z) -> Quarantined and deleted successfully.
c:\documents and settings\XP\menu démarrer\programmes\PlayMP3z\run playmp3z.lnk (Adware.PLayMP3z) -> Quarantined and deleted successfully.
le probleme et toujour la ! :'(
Fais une restauration systéme, démarrer, tous les programmes, accessoires, outils système, restauration du système.
Restaurer mon ordinateur à une heure antérieure, tu choisis une date juste avant le problème, tu fermes toutes les applications.
Tu avais installé le SP3 de xp ?
je suis en sp2 pk? je vien de le faire ... ( j'ai retour dans le passe 1 journee avant le probleme: marche pas :'(
PROBLEME RESOLU s'etait un fichier de nod32 antivirus.. bon j'ai pu antivirus..