Aller au contenu

kini1

Membres
  • Compteur de contenus

    447
  • Inscription

  • Dernière visite

Tout ce qui a été posté par kini1

  1. Fichiers temporaires Utiliser l'outil inclus dans XP (avec 98 c'est manuel). On vide tout. Mais ça oublie des tas de choses. Penser ensuite a regarder dans Windows TEMP et vider manuellement. Penser aussi a regarder, apres avoir coche "afficher les dossiers caches" a ce qui se trouve dans C Documents and Settings "Votre nom" Local Settings Temp et vous allez avoir des surprises. Bonsoir la communauté Zeb. une question sur l'entretien periodique de mon pc dans local setting Temp quand je veux vider manuellement les fichiers certains fichiers reste ?? pourquoi ?? merci
  2. je refait juste un scan avec antivir et je te l'envoie Alors la t'es vraiment le meilleure... AntiVir PersonalEdition Classic Report file date: 2007-11-11 20:08 Scanning for 923375 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: Perso Computer name: NOM-FAJKDOF30K5 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 05/11/2007 13:48:26 AVSCAN.DLL : 7.0.6.0 49192 Bytes 05/11/2007 13:48:26 LUKE.DLL : 7.0.5.3 147496 Bytes 05/11/2007 13:48:26 LUKERES.DLL : 7.0.6.1 10280 Bytes 05/11/2007 13:48:26 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:48:28 ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 13:48:28 ANTIVIR2.VDF : 7.0.0.172 1092608 Bytes 05/11/2007 06:49:46 ANTIVIR3.VDF : 7.0.0.197 104960 Bytes 09/11/2007 15:20:40 AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 08/11/2007 06:49:46 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:28 AVPREF.DLL : 7.0.2.2 25640 Bytes 05/11/2007 13:48:26 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 05/11/2007 13:48:28 AVREG.DLL : 7.0.1.6 30760 Bytes 05/11/2007 13:48:26 AVARKT.DLL : 1.0.0.20 278568 Bytes 05/11/2007 13:48:26 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 05/11/2007 13:48:26 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:44 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 05/11/2007 13:48:20 RCTEXT.DLL : 7.0.62.0 86056 Bytes 05/11/2007 13:48:20 SQLITE3.DLL : 3.3.17.1 339968 Bytes 05/11/2007 13:48:26 Configuration settings for the scan: Jobname..........................: Local Drives Configuration file...............: c:\program files\antivir personaledition classic\alldrives.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: H:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: on Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: high Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: 2007-11-11 20:08 Starting search for hidden objects. '34984' objects were checked, '0' hidden objects were found. The scan of running processes will be started Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'slserv.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'avgas.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 27 processes with 27 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Boot sector 'F:\' [NOTE] No virus was found! Boot sector 'G:\' [NOTE] No virus was found! Boot sector 'A:\' [NOTE] In the drive 'A:\' no data medium is inserted! Boot sector 'I:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '20' files ). Starting the file scan: Begin scan in 'C:\' <WINXP_02C> C:\hiberfil.sys [WARNING] The file could not be opened! C:\PAGEFILE.SYS [WARNING] The file could not be opened! Begin scan in 'D:\' <ANCIEN_C> Begin scan in 'E:\' <WINXP_02D> Begin scan in 'F:\' <RESTORE> Begin scan in 'G:\' <ANCIEN_D> Begin scan in 'A:\' Search path A:\ could not be opened! Le périphérique n'est pas prêt. Begin scan in 'I:\' <DOCUMENTS> Begin scan in 'H:\' Search path H:\ could not be opened! Le périphérique n'est pas prêt. End of the scan: 2007-11-11 20:38 Used time: 30:04 min The scan has been done completely. 2385 Scanning directories 189165 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 2 Files cannot be scanned 189165 Files not concerned 6498 Archives were scanned 2 Warnings 0 Notes 34984 Objects were scanned with rootkit scan 0 Hidden objects were found Encore un grand merci de t'etre occuper de mes problemes vous membre du Zeb vous etes tous geniaux!!!! j'aimerais connaitre l'un de vous et passer une journée à vous ecouter sur l'informatique.... encore milles merci à Wong a bientot amicalement Jacks
  3. Hello wong merci mais une chose que je comprends pas antivir a trouver ca [DETECTION] Contains detection pattern of the Windows virus W95/Bumble alors j'ai cru que c'etait ca le virus??? je refait juste un scan avec antivir et je te l'envoie merci
  4. hello bonsoir Wong le rapport kasperski est en ordre mais j'ai encore fait un scan avec Antivir et il trouve encore 1 virus voila les rapports KASPERSKY ON-LINE SCANNER REPORT 2007-11-11 15:57 Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version : 5.0.83.0 Dernière mise à jour de la base antivirus Kaspersky : 11/11/2007 Enregistrements dans la base antivirus Kaspersky : 428135 Paramètres d'analyse Analyser avec la base antivirus suivante standard Analyser les archives vrai Analyser les bases de messagerie vrai Cible de l'analyse Poste de travail A:\ C:\ D:\ E:\ F:\ G:\ H:\ I:\ Statistiques de l'analyse Total d'objets analysés 37603 Nombre de virus trouvés 0 Nombre d'objets infectés 0 / 0 Nombre d'objets suspects 0 Durée de l'analyse 00:40:05 Nom de l'objet infecté Nom du virus Dernière action C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SYSTEM L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SOFTWARE L'objet est verrouillé ignoré C:\WINDOWS\system32\config\DEFAULT L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré C:\WINDOWS\SoftwareDistribution\EventCache\{741EA90E-672A-4308-9D65-DCCACCDF74D0}.bin L'objet est verrouillé ignoré C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Cookies\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\Perso\NTUSER.DAT L'objet est verrouillé ignoré C:\Documents and Settings\Perso\ntuser.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\Perso\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Perso\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Perso\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\Perso\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\Perso\Cookies\index.dat L'objet est verrouillé ignoré C:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP275\change.log L'objet est verrouillé ignoré Analyse terminée. et Antivir AntiVir PersonalEdition Classic Report file date: 2007-11-11 15:58 Scanning for 923375 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: Perso Computer name: NOM-FAJKDOF30K5 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 05/11/2007 13:48:26 AVSCAN.DLL : 7.0.6.0 49192 Bytes 05/11/2007 13:48:26 LUKE.DLL : 7.0.5.3 147496 Bytes 05/11/2007 13:48:26 LUKERES.DLL : 7.0.6.1 10280 Bytes 05/11/2007 13:48:26 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:48:28 ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 13:48:28 ANTIVIR2.VDF : 7.0.0.172 1092608 Bytes 05/11/2007 06:49:46 ANTIVIR3.VDF : 7.0.0.197 104960 Bytes 09/11/2007 15:20:40 AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 08/11/2007 06:49:46 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:28 AVPREF.DLL : 7.0.2.2 25640 Bytes 05/11/2007 13:48:26 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 05/11/2007 13:48:28 AVREG.DLL : 7.0.1.6 30760 Bytes 05/11/2007 13:48:26 AVARKT.DLL : 1.0.0.20 278568 Bytes 05/11/2007 13:48:26 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 05/11/2007 13:48:26 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:44 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 05/11/2007 13:48:20 RCTEXT.DLL : 7.0.62.0 86056 Bytes 05/11/2007 13:48:20 SQLITE3.DLL : 3.3.17.1 339968 Bytes 05/11/2007 13:48:26 Configuration settings for the scan: Jobname..........................: Local Drives Configuration file...............: c:\program files\antivir personaledition classic\alldrives.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: H:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: medium Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: 2007-11-11 15:58 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'slserv.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'avgas.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 26 processes with 26 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Boot sector 'F:\' [NOTE] No virus was found! Boot sector 'G:\' [NOTE] No virus was found! Boot sector 'A:\' [NOTE] In the drive 'A:\' no data medium is inserted! Boot sector 'I:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '22' files ). Starting the file scan: Begin scan in 'C:\' <WINXP_02C> C:\hiberfil.sys [WARNING] The file could not be opened! C:\PAGEFILE.SYS [WARNING] The file could not be opened! C:\Documents and Settings\Perso\Local Settings\Temp\_AS1B.tmp\motor.cab [0] Archive type: CAB (Microsoft) --> pskavs.DLL [DETECTION] Contains detection pattern of the Windows virus W95/Bumble [iNFO] The file was deleted! Begin scan in 'D:\' <ANCIEN_C> Begin scan in 'E:\' <WINXP_02D> Begin scan in 'F:\' <RESTORE> Begin scan in 'G:\' <ANCIEN_D> Begin scan in 'A:\' Search path A:\ could not be opened! Le périphérique n'est pas prêt. Begin scan in 'I:\' <DOCUMENTS> Begin scan in 'H:\' Search path H:\ could not be opened! Le périphérique n'est pas prêt. End of the scan: 2007-11-11 16:58 Used time: 59:37 min The scan has been done completely. 2385 Scanning directories 188339 Files were scanned 1 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 1 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 2 Files cannot be scanned 188338 Files not concerned 6499 Archives were scanned 2 Warnings 0 Notes merci
  5. Bonjour Wong Alors j'ai fait a peu pres tout ce que tu m'as dit sauf les residents il y a tellement de fichiers que je ne veux pas faire de betises... Alors voila le 1er rapport AVG --------------------------------------------------------- AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 12:52 2007-11-11 + Résultat de l'analyse: Rien à signaler. Fin du rapport et Hijakthis Logfile of HijackThis v1.99.1 Scan saved at 12:57, on 2007-11-11 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.netplus.ch/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.zebulon.fr/outils/antivirus/kav...can_unicode.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe Voila dit moi....merci @+
  6. Ok merci Wong je m'y attele demain ...ce soir j'arrive pas.... bonne soirée @+
  7. Hello....meme chose que precedement pour le resident je sais pas comment on fait...
  8. ok........
  9. Hello salut!! Quand j'ouvre ce tools cleaner j'ai ceci [[/url][/img] apres je fait recherche.... j'ouvre le poste travail puis C/ et y a pas de dossier Tools cleaner y a seulement tolls.txt??? alors je suis un peu perdu
  10. Bonjour Wong... En fait c'est l'ordi d'un copain alors je ne connais rien des adresses R0 014 016......et de ces lignes inutiles Pour la desinfection je n'ai pas vraiment compris ...car j'ai lancer un scan en mode sans echec et quand il m'a trouver tout ces virus je les ai mis en quarantaine... et quand c'etait fini... je me suis dit qu'il valai mieux les eliminer alors j'ai relancer un scan et j'ai mis eliminer au lieu de quarantaine je lui avait deja enlever quelques virus il y à je pense 7/8 mois en arriere avec l'aide de Zeb Il m'avait appeler cette semaine pour me dire qu'il avait un probleme quand je suis arriver chez lui j'ai vu son antivirus Bit Defender etait perimer alors je lui est installer Antivir de la j'ai lancer un scan et il m'avait trouver 2 virus alors j'ai pris le pc chez moi pour avoir plus de temps... Alors dit moi ce qu'il faut faire pour enlever ces virus et rendre un peu mieux son ordi??? je dois à nouveau m'absenter je serai la en fin de journée...... deja un grand merci
  11. Bonsoir.... j'ai trouver 2 virus ....j'ai appliquer la procedure je vous donne les rapports un grand merci dejà de vous occuper de moi voila le 1er antivirus mais j'avais mis les donnees en quarantaine AntiVir PersonalEdition Classic Report file date: 2007-11-09 15:44 Scanning for 923238 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: Perso Computer name: NOM-FAJKDOF30K5 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 05/11/2007 13:48:26 AVSCAN.DLL : 7.0.6.0 49192 Bytes 05/11/2007 13:48:26 LUKE.DLL : 7.0.5.3 147496 Bytes 05/11/2007 13:48:26 LUKERES.DLL : 7.0.6.1 10280 Bytes 05/11/2007 13:48:26 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:48:28 ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 13:48:28 ANTIVIR2.VDF : 7.0.0.172 1092608 Bytes 05/11/2007 06:49:46 ANTIVIR3.VDF : 7.0.0.196 102400 Bytes 09/11/2007 13:41:06 AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 08/11/2007 06:49:46 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:28 AVPREF.DLL : 7.0.2.2 25640 Bytes 05/11/2007 13:48:26 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 05/11/2007 13:48:28 AVREG.DLL : 7.0.1.6 30760 Bytes 05/11/2007 13:48:26 AVARKT.DLL : 1.0.0.20 278568 Bytes 05/11/2007 13:48:26 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 05/11/2007 13:48:26 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:44 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 05/11/2007 13:48:20 RCTEXT.DLL : 7.0.62.0 86056 Bytes 05/11/2007 13:48:20 SQLITE3.DLL : 3.3.17.1 339968 Bytes 05/11/2007 13:48:26 Configuration settings for the scan: Jobname..........................: Local Drives Configuration file...............: c:\program files\antivir personaledition classic\alldrives.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: H:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: medium Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: 2007-11-09 15:44 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 12 processes with 12 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Boot sector 'F:\' [NOTE] No virus was found! Boot sector 'G:\' [NOTE] No virus was found! Boot sector 'A:\' [NOTE] In the drive 'A:\' no data medium is inserted! Boot sector 'I:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '22' files ). Starting the file scan: Begin scan in 'C:\' <WINXP_02C> C:\PAGEFILE.SYS [WARNING] The file could not be opened! C:\ComboFix\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47a67a51.qua'! C:\ComboFix\nircmd.cfexe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47a67a5e.qua'! C:\fixwareout\FindT\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.2 [iNFO] The file was moved to '47a67a62.qua'! Begin scan in 'D:\' <ANCIEN_C> D:\Mes documents\Telechargement\SmitfraudFix.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program --> SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '479d7a97.qua'! D:\Mes documents\Telechargement\ComboFix.exe [0] Archive type: RAR SFX (self extracting) --> ComboFixT\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47a17aab.qua'! D:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075259.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program [iNFO] The file was moved to '47647a82.qua'! D:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075261.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '47647a85.qua'! D:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075272.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program --> SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '47647a88.qua'! D:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075273.exe [0] Archive type: RAR SFX (self extracting) --> ComboFixT\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47647a8d.qua'! Begin scan in 'E:\' <WINXP_02D> Begin scan in 'F:\' <RESTORE> Begin scan in 'G:\' <ANCIEN_D> G:\ancien_c (D)\Mes documents\Telechargement\SmitfraudFix.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program --> SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '479d7aeb.qua'! G:\ancien_c (D)\Mes documents\Telechargement\ComboFix.exe [0] Archive type: RAR SFX (self extracting) --> ComboFixT\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47a17afe.qua'! G:\ancien_c (D)\Mes documents\Telechargement\SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program [iNFO] The file was moved to '47967af8.qua'! G:\ancien_c (D)\Mes documents\Telechargement\SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '47a77afb.qua'! G:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075274.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program --> SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '47647acd.qua'! G:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075275.exe [0] Archive type: RAR SFX (self extracting) --> ComboFixT\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47647ad3.qua'! G:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075276.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program [iNFO] The file was moved to '47647ad5.qua'! G:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075277.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '47647ad7.qua'! Begin scan in 'A:\' Search path A:\ could not be opened! Le périphérique n'est pas prêt. Begin scan in 'I:\' <DOCUMENTS> I:\William\Telechargement\SmitfraudFix.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program --> SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '479d7b29.qua'! I:\William\Telechargement\ComboFix.exe [0] Archive type: RAR SFX (self extracting) --> ComboFixT\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47a17b47.qua'! I:\William1\Telechargement\SmitfraudFix.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program --> SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [iNFO] The file was moved to '479d7b5f.qua'! I:\William1\Telechargement\ComboFix.exe [0] Archive type: RAR SFX (self extracting) --> ComboFixT\nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was moved to '47a17b7b.qua'! Begin scan in 'H:\' Search path H:\ could not be opened! Le périphérique n'est pas prêt. End of the scan: 2007-11-09 16:21 Used time: 37:50 min The scan has been done completely. 2418 Scanning directories 168813 Files were scanned 27 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 21 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 168786 Files not concerned 6491 Archives were scanned 1 Warnings 0 Notes Le 2em scan toujours en mode sans echec mais la j'ai mis supprimer AntiVir PersonalEdition Classic Report file date: 2007-11-09 16:55 Scanning for 923238 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: Perso Computer name: NOM-FAJKDOF30K5 Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 05/11/2007 13:48:26 AVSCAN.DLL : 7.0.6.0 49192 Bytes 05/11/2007 13:48:26 LUKE.DLL : 7.0.5.3 147496 Bytes 05/11/2007 13:48:26 LUKERES.DLL : 7.0.6.1 10280 Bytes 05/11/2007 13:48:26 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 13:48:28 ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 13:48:28 ANTIVIR2.VDF : 7.0.0.172 1092608 Bytes 05/11/2007 06:49:46 ANTIVIR3.VDF : 7.0.0.196 102400 Bytes 09/11/2007 13:41:06 AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 08/11/2007 06:49:46 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:28 AVPREF.DLL : 7.0.2.2 25640 Bytes 05/11/2007 13:48:26 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 05/11/2007 13:48:28 AVREG.DLL : 7.0.1.6 30760 Bytes 05/11/2007 13:48:26 AVARKT.DLL : 1.0.0.20 278568 Bytes 05/11/2007 13:48:26 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 05/11/2007 13:48:26 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:44 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 05/11/2007 13:48:20 RCTEXT.DLL : 7.0.62.0 86056 Bytes 05/11/2007 13:48:20 SQLITE3.DLL : 3.3.17.1 339968 Bytes 05/11/2007 13:48:26 Configuration settings for the scan: Jobname..........................: Local Drives Configuration file...............: c:\program files\antivir personaledition classic\alldrives.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: H:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: medium Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: 2007-11-09 16:55 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'avgas.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 14 processes with 14 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Boot sector 'F:\' [NOTE] No virus was found! Boot sector 'G:\' [NOTE] No virus was found! Boot sector 'A:\' [NOTE] In the drive 'A:\' no data medium is inserted! Boot sector 'I:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '22' files ). Starting the file scan: Begin scan in 'C:\' <WINXP_02C> C:\PAGEFILE.SYS [WARNING] The file could not be opened! C:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075270.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.C [iNFO] The file was deleted! C:\System Volume Information\_restore{80F67991-5EE3-42F5-ACD0-85E44CAFF994}\RP273\A0075271.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.2 [iNFO] The file was deleted! Begin scan in 'D:\' <ANCIEN_C> Begin scan in 'E:\' <WINXP_02D> Begin scan in 'F:\' <RESTORE> Begin scan in 'G:\' <ANCIEN_D> Begin scan in 'A:\' Search path A:\ could not be opened! Le périphérique n'est pas prêt. Begin scan in 'I:\' <DOCUMENTS> Begin scan in 'H:\' Search path H:\ could not be opened! Le périphérique n'est pas prêt. End of the scan: 2007-11-09 17:41 Used time: 45:11 min The scan has been done completely. 2418 Scanning directories 168404 Files were scanned 2 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 2 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 168402 Files not concerned 6479 Archives were scanned 1 Warnings 0 Notes voila... puis le rapport Hijackthis Logfile of HijackThis v1.99.1 Scan saved at 17:45, on 2007-11-09 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\HijackThis\HijackThis.exe C:\WINDOWS\system32\WgaTray.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.netplus.ch/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [bDSwitchAgent] "C:\progra~1\softwin\bitdef~1\bdswitch.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O11 - Options group: [iNTERNATIONAL] International* O14 - IERESET.INF: START_PAGE_URL=http://www.bluewin.ch/index_f.html O16 - DPF: {01347765-1965-426B-91A4-AA6BB342B9A3} (InstallerObj Class) - http://www.1-click.com/common/files/instal...hidden-test.cab O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.zebulon.fr/outils/antivirus/kav...can_unicode.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe Grand MERCI De plus ..je dois m'absenter des maintenant... je regarderai demain....bonne soirée au membre du Zéb
  12. kini1

    telechargement(RESOLU)

    http://img87.imageshack.us/img87/876/05052007tm0.jpg' alt='05052007tm0.jpg'>[/url][/img] tiens ca marche à nouveau
  13. kini1

    telechargement(RESOLU)

    j'essaie... ca marche pas ca me marque au haut de mon forum LES ERREURS SUIVANTES ONT ÉTÉ TROUVÉES Désolé, les pages dynamiques dans les tags ne sont pas autorisés.
  14. kini1

    telechargement(RESOLU)

    Oups...desolé d'avoir pas bien formuler ma question pour la deuxieme question c'est que je n'arrive plus à inserer une image sur le forum est ce que http://www.imageshack.us/ à changer?? merci
  15. kini1

    telechargement(RESOLU)

    Bonjour question quand je telecharge sur internet un programe j'ai pris l'habitude d'enregister sous et apres d'executer le programe pour l'installer Dés lors est ce que le dossier ou j'ai enregister ces programes dois je laisser ces telechargement merci [deuxieme question je n'arrive plus a mettre une image ce message d'erreur apparait "Désolé, les pages dynamiques dans les tags ne sont pas autorisés." pourquoi?? merci bonne journée
  16. kini1

    Acer Launch

    Ok merci pour l'info tibasque... des que je passerai chez mon beauf je lui desinstalle toute ces applications acer te tiendrais au courant bonne fin de journée
  17. kini1

    Acer Launch

    A + Amicalement The_Bird Hello merci the Bird je vais essayer de nettoyer ceci avec ccleaner... Mais en fait qu'est ce que ce acer launch?? si je desinstalle l'ordi va t'il encore bien fonctionner?? bonne journée
  18. kini1

    Acer Launch

    bounjour mon beauf a acheter un Acer portable apres installation du logiciel il m est apparue la fenetre acer launch qui me remercie de mon achat et depuis de supprimer cette fenetre tout les progames ouverts apparaissent en arriere plans comment faire pour la supprimer definitivement.... pour l'enlever je fait ctr alt del / gestio des taches / fermer le programe...et apres ca part mais à chaque nouveau demarage il faut refaire ces manip J'ai trouver ca sur la toile J'ai résolu le probleme, "Démarrer"-->" Exucuter"---> Tapez "msconfig" sans les guillemets, puis démarrage et déselectionner Acer tour ---> "Appliquer"--> "OK" puis redémarrer. Voila, en esperant que tout cela vous aura aidé! qu'en pensez vous?? merci bonne journée
  19. kini1

    Icones(RESOLU)

    ok merci c'est bon pour les icones bonne journée
  20. kini1

    Icones(RESOLU)

    ok merci Amadoo..... je vais essayer et te redirait.... bonne journée
  21. kini1

    Icones(RESOLU)

    Bonjour... J'ai un membre de ma famille qui à acheter un portable avec Window vista.... hier soir il est venu chez moi pour installer ca nouvelle imprimante.. Quel ne fut pas ma surprise de ne pas trouver d'icones sur son bureau??? corbeille,internet.....???? Et je n'ai pas su les retouver???? Merci
  22. kini1

    Antivirus on line

    Hello bonsoir... c'est quoi les modules compl. d'IE??? comment proceder?? merci si jamais voila un log Hijack si vous trouver une trace de kasperski?? Logfile of HijackThis v1.99.1 Scan saved at 18:52:14, on 04.10.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16512) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\USBPlug.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\program files\netappel\netappel.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe C:\Program Files\WinTV\Ir.exe C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Player Metaboli\GPlayer.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tsr.ch/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [dscService] C:\WINDOWS\system32\USBPlug.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [NetAppel] "C:\program files\netappel\netappel.exe" -nosplash -minimized O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe /NoDialog O4 - HKCU\..\RunOnce: [DependencyCheck] Performed O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4CCA4E6B-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/instal...tallMgr_v01.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1131979992390 O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
  23. kini1

    Antivirus on line

    Hello bonjour Falkra essayer et ca marche toujours pas merci
  24. kini1

    Antivirus on line

    Hello bonjour J'ai reessayer et je reviens toujours à cette fenetre de licence perimée... merci amicalement
  25. kini1

    Antivirus on line

    Hello bonsoir la communauté Zéb Question?? J'aimerais faire un scan en ligne avec Kasperski et la fenetre me montre que la licence est perimée Donc impossible d'employer cet outil en ligne.... pour Bit defender par ex cela fonctionne..... J'ai ete dans ajout suppression des programes pour desinstaller Kasperski et apres ca ne marche toujours pas merci de votre réponse.... amicalement Jacks [/url][/img]
×
×
  • Créer...