OVH Cloud OVH Cloud

Accès au disque dur (2)

7 réponses
Avatar
villard
Bonjour.
je me permet de relancer ma question du 17/02/05, restée en panne, soit:

La led indiquant l'accès au disque dur clignote en permanence à raison de 1
fois par sec environ.
Dans "Propriété de l'affichage - Ecran de veille - Gestion de
l'alimentation", le champ "Extinction du moniteur" est à 15 min, "Arrêt du
disque dur" est à 20 min.
Débranché tous les périphériques, liaison Internet comprise, passé les
antivirus, laissé l'écran s'éteindre. Sans plus touché au PC depuis environ
1/2 d'heures, continue à clignoter avec de temps en temps une salve plus
longue.
Je travail avec un PC Inspirion 8200 de DELL. J'ai contacté DELL. Après
m'avoir fait faire le diagnostique de mon PC ( durée 6h30 environ) aucun
défaut n'a été constaté. DELL me dit qu'il s'agit d'un problème de registre
est qu'il me faut recharger Windows XP. L'opération étant lourde je vous
demande s'il n'y a pas une solution plus légère.

Merci à Pierre B,

Mais toutes ces opérations ont été faites (AdAware SE, Spybot, JV16,
Ravantivirus). Avec DELL et encore maintenant, testé "Démarrer, Exécuter
,msconfig, Général, Démarrer en mode diagnostique) tout les programmes de
l'onglet démarrer sont désactivés. Tout les services sont arrêtés sauf
"Lanceur de processus serveur DCOM et Appel de procédures distante RPC". Il
n'y a que l'horloge en bas à droite. Dans ce contexte ma led d'accès DD
continue à clignoter.

-Merci -
jdg

7 réponses

Avatar
blero
villard - news: :

La led indiquant l'accès au disque dur clignote en permanence à
raison de 1 fois par sec environ.


Filemon est un utilitaire gratuit qui te permet de voir quel programme
accède au disque dur, en temps réel:
http://www.sysinternals.com/ntw2k/source/filemon.shtml

Avatar
villard
Merci blero.
J'ai essayé ce programme. Je n'arrive pas a trouver une relation avec ce qui
se passe. Quelques fois il y à 3 écritures par minutes, alors que ça clignote
toutes les seconde. quelques foie il y a des salves d'écriture alors que le
clignotement n'a pas changé. J'ai eu jusque à 62279 écritures en 12' 03"
alors que je ne faisait rien. Mais je ne suis pas capable de comprendre le
sense de ce qui est écrit.
Voici 2 exemples
16414 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93307 Length: 15
16415 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93322 Length: 3
16416 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93325 Length: 15
16417 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93340 Length: 3
16418 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93343 Length: 16
16419 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93359 Length: 3
16420 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93362 Length: 16
16421 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93378 Length: 3
16422 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93381 Length: 16
16423 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93397 Length: 3
16424 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93400 Length: 15
16425 21:01:01 ccApp.exe:1960 READ C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT SUCCESS Offset: 93415 Length: 3
ou
62268 21:05:10 explorer.exe:1188 CLOSE C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS
62269 21:05:10 explorer.exe:1188 QUERY
INFORMATION C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS Length: 3817472
62270 21:05:10 explorer.exe:1188 CLOSE C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS
62271 21:05:10 explorer.exe:1188 QUERY
INFORMATION C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS Attributes: A
62272 21:05:10 explorer.exe:1188 OPEN C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS Options: Open Access: Execute
62273 21:05:10 explorer.exe:1188 OPEN C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS Options: Open Access: All
62274 21:05:10 explorer.exe:1188 QUERY
INFORMATION C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS FileFsVolumeInformation
62275 21:05:10 explorer.exe:1188 QUERY
INFORMATION C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS FileInternalInformation
62276 21:05:10 explorer.exe:1188 QUERY
INFORMATION C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS Length: 3817472
62277 21:05:10 explorer.exe:1188 CLOSE C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS
62278 21:05:10 explorer.exe:1188 QUERY
INFORMATION C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS Length: 3817472
62279 21:05:10 explorer.exe:1188 CLOSE C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS


Que faire avec ça??

Merci.
jdg


"blero" wrote:

villard - news: :

La led indiquant l'accès au disque dur clignote en permanence à
raison de 1 fois par sec environ.


Filemon est un utilitaire gratuit qui te permet de voir quel programme
accède au disque dur, en temps réel:
http://www.sysinternals.com/ntw2k/source/filemon.shtml





Avatar
blero
villard - news: :

Quelques fois il y à 3 écritures par minutes, alors que ça
clignote toutes les seconde.


Ca c'est le plus gênant, et peut faire penser à autre chose qu'un problème
logiciel. Pas facile à déterminer: problème du disque dur, de sa nappe, de
jumper maître/esclave mal positionné, d'un lecteur sur la même nappe mal
branché, lui-même avec un jumper mal placé, etc... ?

Après avoir coché Affichage/Afficher les périphériques cachés, vérifie qu'il
n'y a rien qui cloche dans le gestionnaire de périphériques, en particulier
dans la branche "Pilotes non-Plug-and-Play".
Vérifie que l'UltraDMA est bien activé pour chaque lecteur dans la branche
Contrôleurs ATA/ATAPI IDE.

Je suppose que les pilotes du chipset sont installés ?

C:PROGRA~1FICHIE~1SYMANT~1VIRUSD~120050223.007VIRSCAN4.DAT
..............


Ces lignes n'apparaîtraient pas si tu n'avais pas lancé Norton anti-virus.
Tu pourrais donc essayer de le fermer.

CLOSE C:WINDOWSsystem32spooldriversw32x863HPZR3204.DLL SUCCESS
...............


Même idée, mais avec l'imprimante HP que tu peux débrancher, pour voir, et
même désinstaller le pilote.
Et puis tu relances Filemon pour voir la différence.


Sinon, tu peux aussi essayer en débranchant tous les périphériques, en
particulier IDE (disques, lecteurs), mais je suppose que tu l'as déjà fait.

L'idéal serait bien sûr de savoir ce que tu as modifié dans ta configuration
avant que le problème n'apparaisse. Pas toujours facile, je sais...

Avatar
villard
"blero" wrote:

villard - news: :

Quelques fois il y à 3 écritures par minutes, alors que ça
clignote toutes les seconde.


Ca c'est le plus gênant, et peut faire penser à autre chose qu'un problème
logiciel. Pas facile à déterminer: problème du disque dur, de sa nappe, de
jumper maître/esclave mal positionné, d'un lecteur sur la même nappe mal
branché, lui-même avec un jumper mal placé, etc... ?

Après avoir coché Affichage/Afficher les périphériques cachés, vérifie qu'il
n'y a rien qui cloche dans le gestionnaire de périphériques, en particulier
dans la branche "Pilotes non-Plug-and-Play".
Vérifie que l'UltraDMA est bien activé pour chaque lecteur dans la branche
Contrôleurs ATA/ATAPI IDE.

Je suppose que les pilotes du chipset sont installés ?

Merci blero.

Je précise encore:
Je travail avec un PC Inspirion 8200 de DELL. J'ai contacté DELL. Après
m'avoir fait faire le diagnostique de mon PC (durée 6h30 environ) aucun
défaut n'a été constaté. DELL par téléphone m'a fait exécuter toute une
série de contrôles en passant par "msconfig" et redémarrage en mode
Diagnostique etc. sans arriver à supprimer le clignotement.

Il va de soit que je n'ai jamais ouvert mon portable et donc rien touché au
hard.
Je me permets de vous envoyer un nouveau relevé de "Filemon" dans les
conditions suivantes: PC hors de sa station d'accueil, aucun périphérique
branché,.ni réseau. Par "msgconfig" redémarré en mode diagnostique. Le
clignotement est toujours le même et l'enregistrement ci-dessous.

1 12:14:21 explorer.exe:956 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielMes
documentsPerformancesFilemonFilemon.exe SUCCESS Attributes: A
2 12:14:21 explorer.exe:956 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielMes
documentsPerformancesFilemonFilemon.exe SUCCESS Attributes: A
3 12:14:21 explorer.exe:956 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielMes
documentsPerformancesFilemonFilemon.exe SUCCESS Attributes: A
4 12:14:21 explorer.exe:956 OPEN C:Documents and SettingsGallay
Jean-DanielMes documentsPerformancesFilemonFilemon.exe SUCCESS Options:
Open Access: Execute
5 12:14:21 explorer.exe:956 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielMes
documentsPerformancesFilemonFilemon.exe SUCCESS Length: 212992
6 12:14:21 explorer.exe:956 CLOSE C:Documents and SettingsGallay
Jean-DanielMes documentsPerformancesFilemonFilemon.exe SUCCESS
7 12:14:21 explorer.exe:956 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielMes
documentsPerformancesFilemonFilemon.exe SUCCESS Attributes: A
8 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_fr-FR_26e49c4a FILE
NOT FOUND Options: Open Directory Access: All
9 12:14:21 csrss.exe:460 OPEN C:WINDOWSAssemblyGACPolicy.6.0.Microsoft.Windows.Common-Controls PATH NOT FOUND Options: Open Directory Access: All
10 12:14:21 csrss.exe:460 QUERY INFORMATION C:WINDOWSSystem32fr-FR FILE
NOT FOUND Attributes: Error
11 12:14:21 csrss.exe:460 QUERY INFORMATION C:WINDOWSSystem32fr FILE NOT
FOUND Attributes: Error
12 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSSystem32 SUCCESS Attributes: D
13 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSSystem32 SUCCESS Attributes: D
14 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_fr-FR_51bf4775.Manifest FILE
NOT FOUND Attributes: Error
15 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSassemblyGACMicrosoft.Windows.Common-Controls6.0.0.0_fr-FR_6595b64144ccf1dfMicrosoft.Windows.Common-Controls.DLL PATH
NOT FOUND Attributes: Error
16 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_fr_8ca3cc29 FILE
NOT FOUND Options: Open Directory Access: All
17 12:14:21 csrss.exe:460 OPEN C:WINDOWSAssemblyGACPolicy.6.0.Microsoft.Windows.Common-Controls PATH NOT FOUND Options: Open Directory Access: All
18 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_fr_8bab0f56.Manifest FILE
NOT FOUND Attributes: Error
19 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSassemblyGACMicrosoft.Windows.Common-Controls6.0.0.0_fr_6595b64144ccf1dfMicrosoft.Windows.Common-Controls.DLL PATH
NOT FOUND Attributes: Error
20 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775 SUCCESS Options: Open Directory Access: All
21 12:14:21 csrss.exe:460 DIRECTORY C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775 SUCCESS FileBothDirectoryInformation: *.policy
22 12:14:21 csrss.exe:460 DIRECTORY C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775 SUCCESS FileBothDirectoryInformation
23 12:14:21 csrss.exe:460 DIRECTORY C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775 NO
MORE FILES FileBothDirectoryInformation
24 12:14:21 csrss.exe:460 CLOSE C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775 SUCCESS
25 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad7756.0.2600.2180.Policy SUCCESS Options: Open Sequential Access: All
26 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad7756.0.2600.2180.Policy SUCCESS FileFsVolumeInformation
27 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad7756.0.2600.2180.Policy BUFFER
OVERFLOW FileAllInformation
28 12:14:21 csrss.exe:460 READ
C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad7756.0.2600.2180.Policy SUCCESS Offset:
0 Length: 4095
29 12:14:21 csrss.exe:460 READ C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad7756.0.2600.2180.Policy END OF FILE Offset: 621 Length: 8178
30 12:14:21 csrss.exe:460 CLOSE C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad7756.0.2600.2180.Policy SUCCESS
31 12:14:21 csrss.exe:460 OPEN C:WINDOWSAssemblyGACPolicy.6.0.Microsoft.Windows.Common-Controls PATH NOT FOUND Options: Open Directory Access: All
32 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS Attributes: A
33 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS Attributes: A
34 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_fr-FR_e73ee437 FILE
NOT FOUND Options: Open Directory Access: All
35 12:14:21 csrss.exe:460 OPEN C:WINDOWSAssemblyGACPolicy.6.0.Microsoft.Windows.Common-Controls.mui PATH
NOT FOUND Options: Open Directory Access: All
36 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_6.0.2600.2180_fr-FR_ebf1b1b7.Manifest FILE
NOT FOUND Attributes: Error
37 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSassemblyGACMicrosoft.Windows.Common-Controls.mui6.0.2600.2180_fr-FR_6595b64144ccf1dfMicrosoft.Windows.Common-Controls.mui.DLL PATH NOT FOUND Attributes: Error
38 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSPoliciesx86_Policy.6.0.Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_fr_4cfe1416 FILE
NOT FOUND Options: Open Directory Access: All
39 12:14:21 csrss.exe:460 OPEN C:WINDOWSAssemblyGACPolicy.6.0.Microsoft.Windows.Common-Controls.mui PATH
NOT FOUND Options: Open Directory Access: All
40 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls.mui_6595b64144ccf1df_6.0.2600.2180_fr_25dd7998.Manifest FILE
NOT FOUND Attributes: Error
41 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSassemblyGACMicrosoft.Windows.Common-Controls.mui6.0.2600.2180_fr_6595b64144ccf1dfMicrosoft.Windows.Common-Controls.mui.DLL PATH
NOT FOUND Attributes: Error
42 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS Options: Open Sequential Access: All
43 12:14:21 csrss.exe:460 READ
C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS Offset: 0 Length: 2
44 12:14:21 csrss.exe:460 CLOSE C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS
45 12:14:21 csrss.exe:460 OPEN C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS Options: Open Sequential Access: All
46 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS FileFsVolumeInformation
47 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest BUFFER
OVERFLOW FileAllInformation
48 12:14:21 csrss.exe:460 READ
C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS Offset: 0 Length: 4095
49 12:14:21 csrss.exe:460 READ C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest END OF FILE Offset: 1862 Length: 8178
50 12:14:21 csrss.exe:460 CLOSE C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9.Manifest SUCCESS
51 12:14:25 explorer.exe:956 QUERY
INFORMATION C:WINDOWSsystem32SHELL32.dll SUCCESS Attributes: A
52 12:15:17 explorer.exe:956 OPEN C: SUCCESS Options: Open Directory
Access: All
53 12:15:17 explorer.exe:956 QUERY
INFORMATION C: SUCCESS FileFsFullSizeInformation
54 12:15:17 explorer.exe:956 CLOSE C: SUCCESS
55 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
56 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
57 12:15:47 lsass.exe:540 QUERY
INFORMATION C:autoexec.bat SUCCESS Attributes: A
58 12:15:47 lsass.exe:540 OPEN C:autoexec.bat SUCCESS Options: Open
Access: All
59 12:15:47 lsass.exe:540 QUERY INFORMATION C:autoexec.bat SUCCESS Length: 0
60 12:15:47 lsass.exe:540 READ C:autoexec.bat SUCCESS Offset: 0 Length: 0
61 12:15:47 lsass.exe:540 CLOSE C:autoexec.bat SUCCESS
62 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and SettingsGallay
Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
63 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory
Access: All
64 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
65 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
66 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
67 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
68 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
69 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
70 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
71 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
72 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and SettingsGallay
Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
73 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory
Access: All
74 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
75 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
76 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
77 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
78 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
79 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
80 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
81 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
82 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004Preferred SUCCESS Options: Open Sequential Access: All
83 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004Preferred SUCCESS
84 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004 SUCCESS Options: Open Directory Access: All
85 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004 SUCCESS FileBothDirectoryInformation: *
86 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004 SUCCESS FileBothDirectoryInformation
87 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004fd88d4b-fd8a-4869-9e30-fcb1efb958eb SUCCESS Options: Open Sequential Access: All
88 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004fd88d4b-fd8a-4869-9e30-fcb1efb958eb SUCCESS Length: 388
89 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004fd88d4b-fd8a-4869-9e30-fcb1efb958eb SUCCESS Length: 388
90 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004fd88d4b-fd8a-4869-9e30-fcb1efb958eb SUCCESS
91 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
92 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
93 12:15:47 lsass.exe:540 QUERY
INFORMATION C:autoexec.bat SUCCESS Attributes: A
94 12:15:47 lsass.exe:540 OPEN C:autoexec.bat SUCCESS Options: Open
Access: All
95 12:15:47 lsass.exe:540 QUERY INFORMATION C:autoexec.bat SUCCESS Length: 0
96 12:15:47 lsass.exe:540 READ C:autoexec.bat SUCCESS Offset: 0 Length: 0
97 12:15:47 lsass.exe:540 CLOSE C:autoexec.bat SUCCESS
98 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and SettingsGallay
Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
99 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory
Access: All
100 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
101 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
102 12:15:47 lsass.exe:540 OPEN C:Documents and
Settings SUCCESS Options: Open Directory Access: All
103 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
104 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
105 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
106 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
107 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
108 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
109 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory
Access: All
110 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
111 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
112 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
113 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
114 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
115 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
116 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
117 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
118 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication DataMicrosoftProtectCREDHIST SUCCESS Options:
OpenIf Access: All
119 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectCREDHIST SUCCESS Length: 24
120 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectCREDHIST SUCCESS Length: 24
121 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication DataMicrosoftProtectCREDHIST SUCCESS
122 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-100413f2e9fd-b2fe-404e-b2d2-6a2356570658 SUCCESS Options: Open Sequential Access: All
123 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-100413f2e9fd-b2fe-404e-b2d2-6a2356570658 SUCCESS Length: 388
124 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-100413f2e9fd-b2fe-404e-b2d2-6a2356570658 SUCCESS Length: 388
125 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-100413f2e9fd-b2fe-404e-b2d2-6a2356570658 SUCCESS
126 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
127 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
128 12:15:47 lsass.exe:540 QUERY
INFORMATION C:autoexec.bat SUCCESS Attributes: A
129 12:15:47 lsass.exe:540 OPEN C:autoexec.bat SUCCESS Options: Open
Access: All
Suite et fin dans message suivant.


Avatar
villard
Suite et fin du message précédent.

130 12:15:47 lsass.exe:540 QUERY INFORMATION C:autoexec.bat SUCCESS Length:
0
131 12:15:47 lsass.exe:540 READ C:autoexec.bat SUCCESS Offset: 0 Length: 0
132 12:15:47 lsass.exe:540 CLOSE C:autoexec.bat SUCCESS
133 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
134 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory Access:
All
135 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
136 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
137 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
138 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
139 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
140 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
141 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
142 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
143 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
144 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory Access:
All
145 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
146 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
147 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
148 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
149 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
150 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
151 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
152 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
153 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication DataMicrosoftProtectCREDHIST SUCCESS Options:
OpenIf Access: All
154 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectCREDHIST SUCCESS Length: 24
155 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectCREDHIST SUCCESS Length: 24
156 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication DataMicrosoftProtectCREDHIST SUCCESS
157 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004a588ede5-de0c-48b2-81b9-867fdf302fb8 SUCCESS Options: Open Sequential Access: All
158 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004a588ede5-de0c-48b2-81b9-867fdf302fb8 SUCCESS Length: 388
159 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004a588ede5-de0c-48b2-81b9-867fdf302fb8 SUCCESS Length: 388
160 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004a588ede5-de0c-48b2-81b9-867fdf302fb8 SUCCESS
161 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
162 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
163 12:15:47 lsass.exe:540 QUERY
INFORMATION C:autoexec.bat SUCCESS Attributes: A
164 12:15:47 lsass.exe:540 OPEN C:autoexec.bat SUCCESS Options: Open
Access: All
165 12:15:47 lsass.exe:540 QUERY INFORMATION C:autoexec.bat SUCCESS Length:
0
166 12:15:47 lsass.exe:540 READ C:autoexec.bat SUCCESS Offset: 0 Length: 0
167 12:15:47 lsass.exe:540 CLOSE C:autoexec.bat SUCCESS
168 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
169 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory Access:
All
170 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
171 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
172 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
173 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
174 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
175 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
176 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
177 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
178 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
179 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory Access:
All
180 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
181 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
182 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
183 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
184 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
185 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
186 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
187 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
188 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication DataMicrosoftProtectCREDHIST SUCCESS Options:
OpenIf Access: All
189 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectCREDHIST SUCCESS Length: 24
190 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielApplication
DataMicrosoftProtectCREDHIST SUCCESS Length: 24
191 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication DataMicrosoftProtectCREDHIST SUCCESS
192 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004 NO MORE
FILES FileBothDirectoryInformation
193 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
194 12:15:47 lsass.exe:540 QUERY
INFORMATION C:WINDOWSTEMP SUCCESS Attributes: D
195 12:15:47 lsass.exe:540 QUERY
INFORMATION C:autoexec.bat SUCCESS Attributes: A
196 12:15:47 lsass.exe:540 OPEN C:autoexec.bat SUCCESS Options: Open
Access: All
197 12:15:47 lsass.exe:540 QUERY INFORMATION C:autoexec.bat SUCCESS Length:
0
198 12:15:47 lsass.exe:540 READ C:autoexec.bat SUCCESS Offset: 0 Length: 0
199 12:15:47 lsass.exe:540 CLOSE C:autoexec.bat SUCCESS
200 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
201 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory Access:
All
202 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
203 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
204 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
205 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
206 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
207 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
208 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
209 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
210 12:15:47 lsass.exe:540 QUERY INFORMATION C:Documents and
SettingsGallay Jean-DanielLocal SettingsTemp SUCCESS Attributes: D
211 12:15:47 lsass.exe:540 OPEN C: SUCCESS Options: Open Directory Access:
All
212 12:15:47 lsass.exe:540 DIRECTORY C: SUCCESS FileBothDirectoryInformation: Documents and Settings
213 12:15:47 lsass.exe:540 CLOSE C: SUCCESS
214 12:15:47 lsass.exe:540 OPEN C:Documents and Settings SUCCESS Options:
Open Directory Access: All
215 12:15:47 lsass.exe:540 DIRECTORY C:Documents and
Settings SUCCESS FileBothDirectoryInformation: Gallay Jean-Daniel
216 12:15:47 lsass.exe:540 CLOSE C:Documents and Settings SUCCESS
217 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-Daniel SUCCESS Options: Open Directory Access: All
218 12:15:47 lsass.exe:540 DIRECTORY C:Documents and SettingsGallay
Jean-Daniel SUCCESS FileBothDirectoryInformation: Local Settings
219 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
220 12:15:47 lsass.exe:540 OPEN C:Documents and SettingsGallay
Jean-DanielApplication DataMicrosoftProtectS-1-5-32-544Preferred PATH
NOT FOUND Options: Open Sequential Access: All
221 12:15:47 lsass.exe:540 CLOSE C:Documents and SettingsGallay
Jean-DanielApplication
DataMicrosoftProtectS-1-5-21-839522115-1202660629-1060284298-1004 SUCCESS
222 12:15:47 userinit.exe:936 QUERY
INFORMATION C:WINDOWSsystem32Secur32.dll SUCCESS Attributes: A
223 12:15:47 userinit.exe:936 OPEN C:WINDOWSsystem32Secur32.dll SUCCESS Options: Open Access: Execute
224 12:15:47 userinit.exe:936 CLOSE C:WINDOWSsystem32Secur32.dll SUCCESS
225 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 8192
226 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 8192
227 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 16384
228 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 20480
229 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 24576
230 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 28672
231 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 32768
232 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 36864
233 12:16:07 userinit.exe:936 SET INFORMATION C:Documents and
SettingsGallay Jean-Danielntuser.dat.LOG SUCCESS Length: 40960
234 12:16:07 userinit.exe:936 CLOSE C:Documents and SettingsGallay
Jean-Daniel SUCCESS
235 12:16:07 userinit.exe:936 CLOSE C:WINDOWSWinSxSx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 SUCCESS
236 12:16:17 explorer.exe:956 OPEN C: SUCCESS Options: Open Directory
Access: All
237 12:16:17 explorer.exe:956 QUERY
INFORMATION C: SUCCESS FileFsFullSizeInformation
238 12:16:17 explorer.exe:956 CLOSE C: SUCCESS
239 12:17:17 explorer.exe:956 OPEN C: SUCCESS Options: Open Directory
Access: All
240 12:17:17 explorer.exe:956 QUERY
INFORMATION C: SUCCESS FileFsFullSizeInformation
241 12:17:17 explorer.exe:956 CLOSE C: SUCCESS

Peut-on en tirer quelque chose?
Merci jdg
Avatar
Sabrem JORAM
14 12:14:21 csrss.exe:460 QUERY
INFORMATION C:WINDOWSWinSxSManifestsx86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_fr-FR_51bf4775.Manifest FILE
NOT FOUND Attributes: Error

Bonjour,


Une idée :

Vous semblez avoir eMule (P2P ; bon, connais pas ce logiciel)
chargé... Non ? Avec un message d'erreur.... A enlever
éventuellement de la mémoire... pour voir.

Puis à désinstaller et à réinstaller.

Pour le reste, j'ai survolé votre listing et rien d'autre ne
m'interpelle...

Cordialement.

--
Enlever DoubidoU de mon adresse...

"Le meilleur logiciel du monde est celui que l'on maîtrise..."

Avatar
blero
villard - news: :

Il va de soit que je n'ai jamais ouvert mon portable et donc rien
touché au hard.


Ah oui, les Inspiron sont des portables, on peut éliminer l'hypothèse d'une
mauvaise configuration du disque; à moins que le problème ait toujours
existé ? Tu l'aurais précisé, je pense.

Je me permets de vous envoyer un nouveau relevé de "Filemon" dans les
conditions suivantes: PC hors de sa station d'accueil, aucun
périphérique
branché,.ni réseau. Par "msgconfig" redémarré en mode diagnostique. Le
clignotement est toujours le même et l'enregistrement ci-dessous.


En mode diagnostic, j'ai aussi ces accès disque de csrss.exe et lsass.exe
(et le même accès étonnant à autoexec.bat).
Alors je ne vois rien d'anormal dans ces relevés, mais c'était attendu
puisque tu disais que les accès étaient très fréquents, en dehors de toute
activité rapportée dans Filemon.

Et en bootant sur une disquette DOS, les accès au disque continuent-ils ? Ou
sur un CD bootable quelconque, si tu n'as pas de lecteur de disquettes ?

Désolé, je sèche. L'idéal serait d'installer un second XP tout propre sur
une autre partition pour voir si le problème disparaît, mais je suppose que
tu n'en as qu'une, et de toute façon, le CD fourni par Dell ne le permet
sans doute pas (?).

Une dernière idée: graver un CD de Win XP bootable avec PE Builder:
http://severinterrier.free.fr/Boot/PE-Builder
(Mais il faut un CD standard de WinXP)