caliway

Ok,merci Angélique.

Bonjour Comment faire pour télécharger Zeb-Restore, l'on me demande un mot de passe, mais lequel? le mien?

bonjour à tous problème résolu, merci France Télécom mes problèmes de connections, d'ouverture tardive IE, venaient de la connection de ma ligne sur le poteau du téléphone , lignes anciennes , les charmes du fin fond des campagnes françaises malgrès que je sois en bas débit quelle différence maintenant, en tous les cas merci de votre aide à plus,Caliway

Bonjour je pense avoir trouvé la cause de mon problème d'ouverture retardté d'IE, il ne s'ouvre que lorsque mon ventilateur se déclenche ( je l'ai constaté plusieurs fois) et là je ne sais vraiment pas quoi faire avez vous une solution merci d'avance

bonsoir à tous j'ai fait ce que vous m'avez conseillé, mais j'ai toujours le même problème d'ouverture d'IE , de plus mon ordi rame de plus en plus, si je clic sur un document il met du temps à venir, mon ordi par moment ne veux plus s'arrêter je suis obligé de couper le courant maintenant que j'y pense cela est survenu après avoir utilisé jv16, peux être qu'il a retiré quelque chose qu'il ne fallait pas j'ai passé antivir, avast, spy sweeper, easy cleaner, supprimé les fichiers inutiles ( prefect, temp) mais rien à faire y a t'il une solution ?

Bonjour, QC001,Bonjour Charles, Bonjour Pitcat voiçi le rapport Hijack Logfile of HijackThis v1.99.1 Scan saved at 09:40:32, on 12/03/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\cisvc.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\System32\STDSB.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\WINDOWS\system32\LVComsX.exe C:\Documents and Settings\GABY\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/...rch/search.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [sTDSB] C:\WINDOWS\System32\STDSB.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version6/Applet/vchatsign.cab O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe J'ai suivis les conseils d'QC001 pour Egdaccess, et j'ai téléchargé PowerIE6,j'ai tenté une réparation avec ce logiciel mais cela ne marche pas J'ai toujours le même problème d'ouverture d' IE, sinon une fois ouvert IE marche bien

bonjour, toujours le même problème IE met près de 5 Mn à s'ouvrir , je suis en connection manuelle 56 K, une fois IE ouvert pas de souçis , cela va bien comment faire pour avoir une ouverture plus rapide, je n'avais pas de souçis avant toutes les analyses que j'ai entreprise de ce coté là . merci d'avance

bonsoir, Charles, j'ai tout nettoyé, mon PC fonctionne bien, si ce n'est que IE met un temps fou à s'ouvrir

bonjour, Charles, journée pluvieuse aujourd'hui, voiçi mon rapport Ewido ewido anti-malware - Rapport de scan --------------------------------------------------------- + Créé le: 12:01:17, 04/03/2006 + Somme de contrôle: 3BD485DE + Résultats du scan: C:\Documents and Settings\Cécilie\Cookies\cécilie@estat[1].txt -> TrackingCookie.Estat : Nettoyer et sauvegarder C:\Documents and Settings\GABY\Cookies\gaby@estat[1].txt -> TrackingCookie.Estat : Nettoyer et sauvegarder C:\Downloads\MsgPlus-301.exe/sponsor.exe -> Downloader.Swizzor.ag : Erreur durant le nettoyage C:\OEMCUST\TOOLS\WIN32\PSKILL.EXE -> Not-A-Virus.NetTool.Win32.PsKill : Nettoyer et sauvegarder C:\WINDOWS\system32\msplock32.dll -> Adware.NaviPromo : Nettoyer et sauvegarder C:\WINDOWS\Temp\IAUninstall\uninstall.exe -> Adware.NaviPromo : Nettoyer et sauvegarder ::Fin du rapport Question: pourquoi mes protections ne trouvent pas ces malwares ?

bonsoir, Charles j'ai fixé les lignes du rapport Hijack j'utilise souvent Avery j'ai fais un scan avec Trendmicro ( 3 heures) mais impossible de faire un c/c du rapport il me trouve 2 graywares ADW_SE.61838 et PAR-SE.113259 mais il ne peut pas les supprimer c'est grave Doc ?

rebonjour Charles, voiçi mon rapport Hijack Logfile of HijackThis v1.99.1 Scan saved at 16:39:24, on 01/03/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\cisvc.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\slrundll.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\STDSB.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Documents and Settings\GABY\Bureau\HijackThis.exe C:\WINDOWS\system32\wuauclt.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/...rch/search.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [sTDSB] C:\WINDOWS\System32\STDSB.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version6/Applet/vchatsign.cab O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe mon PC marche bien, pas de problèmes apparent, pour l'instant

Bonjour, voici le rapport mwav File C:\WINDOWS\RESTORE.INS tagged as not-a-virus:NetTool.Win32.PsKill.No Action Taken File C:\WINDOWS\systeme32\msclock32.dll tagged as not-a-virus:Adware Win32 NaviPromo.m.No Action Taken File C:\WINDOWS\systeme32\msclock32.dll tagged as not-a-virus:Adware Win32 NaviPromo.m.No Action Taken File C:\Documents and Settings\All Users\Application Data\Spybot-Search & Destroy\Recovery\BockWeblite.zip infected by " Password-protected-EXE" Virus Action Taken: File Renamed File C:\Documents and Settings\All Users\Application Data\Spybot-Search & Destroy\Recovery\Connect MFCApplication2.zip infected by "Password-protected-EXE Taken:File Renamed File C\OEMCUST\TOOLS\WIN32\PSKILL.EXE tagged as not-a-virus:Net Tool.Win32PsKill No Action Taken File C\WINDOWS\RESTORE.INS tagged as nota-virus:NetTool.Win32.PsKill.No Action Taken File C\WINDOWS\systeme\RESTORE.INS tagged as not-a-virus:NetTool.32.PsKill.No Action Taken File C\Windows\systeme32\msclok32.dll tagged as not-a-virus:Adware.Win32 NaviPromo.m.No Action Taken File C\Windwssysteme32\msclock32.dll tagged as not-a-virus:Adware.Win32 NaviPromo.m.No Action Taken Easy Cleaner me trouvait toujours de nombreux fichiers Spy Sweeper qu'il ne pouvait pas supprimer je l'ai désinstallé puis réinstallé et maintenant il ne trouve plus ces fichiers voici maintenant les nouveaux rapports Bibela et RootKitRevealer 03/01/06 14:29:26 [info]: BlackLight Engine 1.0.32 initialized 03/01/06 14:29:26 [info]: OS: 5.1 build 2600 (Service Pack 2) 03/01/06 14:29:27 [Note]: 7019 4 03/01/06 14:29:27 [Note]: 7005 0 03/01/06 14:29:32 [Note]: 7006 0 03/01/06 14:29:33 [Note]: 7011 2388 03/01/06 14:29:33 [Note]: FSRAW library version 1.7.1015 03/01/06 14:31:07 [Note]: 7007 0 SOFWARE 01/01/1601 01:00 0 bytes Error dumping hive :Intrenal error il y a t'il toujours un problème ?

bonjour ,charles j'ai du nouveau, je me suis aperçu que Spy Sweeper prenait plus de place que prévu ( je l'ai pourtant télécharger sur le site de Webroot. Je l'ai donc désinstallé puis réinstallé, j'ai fais un scan et il ne trouve plus rien. J'ai fais aussi un scan avec Rootkitrevealer, puis avec Blacklight par acquis de conscience, voici les résultats Rootkitrevealer : SOFTWARE 01:00 0bytes Error dumping hive:Internal error c:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.ebd 64KB Visible in Windows API.MFT. but not in directory index Blacklight 02/25/06 09:43:53 [info]: BlackLight Engine 1.0.32 initialized 02/25/06 09:43:53 [info]: OS: 5.1 build 2600 (Service Pack 2) 02/25/06 09:43:53 [Note]: 7019 4 02/25/06 09:43:53 [Note]: 7005 0 02/25/06 09:43:59 [Error]: 6024 4 02/25/06 09:43:59 [Error]: 6024 4 02/25/06 09:43:59 [Note]: 7006 0 02/25/06 09:43:59 [Note]: 7011 2408 02/25/06 09:43:59 [Note]: 7024 1 02/25/06 09:43:59 [Error]: 6024 4 02/25/06 09:43:59 [info]: Hidden process: Unknown process (pid: 3460) 02/25/06 09:44:00 [Note]: FSRAW library version 1.7.1015 02/25/06 09:45:20 [Note]: 7002 0 02/25/06 09:45:20 [Note]: 7003 1 02/25/06 09:46:23 [Note]: 7007 0 il y a t'il toujour un problème, j'espère avoir bien fait

bonsoir, charles impossible de télécharger mwav, le téléchargement ce coupe à 68%, j'ai fais 2 tentatives même résultat lorsque je clique sur la partie téléchargée voici la réponse mwav n'est pas une application Win 32 valide je peux le télécharger sur un autre ordi en adsl, mais pas avant dimanche, cela est'il une bonne idée ?

salut, Charles voici le rapport Rootkitrevealer, il n'y a qu'une ligne SOFTWARE 01/01/1601 01:00 0bytes Error dumping hive:Internal error impossible pour les scan en ligne Kapersky , je ne vais pas plus loin que le téléchargement du controle active x Panda ce bloque lors de la mise à jour, et de plus Avast ma trouver un virus lors de ce téléchargement PS: je suis en bas débit, je ne sais plus quoi faire

j'ai de nouveau fais une analyse avec spy, voici ça réponse Spy a detecté des fichiers qui ne sont pas visibles par Windows, ceci peut indiquer la présebce d'un rootkit-logiciel tentant de détourner un compte racine, Spy tentera de supprimer ces fichiers et de nouveau spy aprés un temps plus ou moins long me redemarre mon ordi voici le journal d'analyse de spy 09:23: Démarrage de l’analyse des cookies 09:23: Analyse des cookies terminée, temps passé : 00:00:00 09:23: Démarrage de l’analyse des fichiers 09:24: Avertissement: Failed to open file "c:\documents and settings\all users\documents\mes images\designpro\thumbs.db". Accès refusé 09:30: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\usbport.sys". Accès refusé 09:38: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\usbehci.sys". Accès refusé 09:39: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\spuninst\spuninst.inf". Accès refusé 09:40: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\hccoin.dll". Accès refusé 09:40: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\usbccgp.sys". Accès refusé 09:40: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\usbuhci.sys". Accès refusé 09:40: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\spuninst\spuninst.bat". Accès refusé 09:41: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\spuninst\spuninst.exe". Accès refusé 09:46: Avertissement: Failed to open file "c:\windows\$ntuninstallkb828028$\$ntuninstallkb822603$\usbhub.sys". Accès refusé 09:47: Trouvé System Monitor: potentially rootkit-masked files 09:47: amour02.zdp (ID = 0) 09:47: amour01.zdp (ID = 0) 09:47: stvalentin04.zdp (ID = 0) 09:47: cocktail04.zdp (ID = 0) 09:47: fairepart04.zdp (ID = 0) 09:47: fairepart02.zdp (ID = 0) 09:47: groups.ztg (ID = 0) 09:47: wizard.zdw (ID = 0) 09:47: thumbs.db (ID = 0) 09:47: 12_all_video.wpl (ID = 0) 09:47: 11_all_pictures.wpl (ID = 0) 09:47: 10_all_music.wpl (ID = 0) 09:47: 09_music_played_the_most.wpl (ID = 0) 09:47: 08_video_rated_at_4_or_5_stars.wpl (ID = 0) 09:47: 07_tv_recorded_in_the_last_week.wpl (ID = 0) 09:47: 06_pictures_rated_4_or_5_stars.wpl (ID = 0) 09:47: 05_pictures_taken_in_the_last_month.wpl (ID = 0) 09:47: 04_music_played_in_the_last_month.wpl (ID = 0) 09:47: 03_music_rated_at_4_or_5_stars.wpl (ID = 0) 09:47: 02_music_added_in_the_last_month.wpl (ID = 0) 09:47: 01_music_auto_rated_at_5_stars.wpl (ID = 0) 09:47: music tracks with content protection.wpl (ID = 0) 09:47: music tracks i have not rated.wpl (ID = 0) 09:47: music tracks i dislike.wpl (ID = 0) 09:47: low bitrate media in my library.wpl (ID = 0) 09:47: high bitrate media in my library.wpl (ID = 0) 09:47: fresh tracks.wpl (ID = 0) 09:47: fresh tracks -- yet to be rated.wpl (ID = 0) 09:47: fresh tracks -- yet to be played.wpl (ID = 0) 09:47: favorites -- one data cd-r worth.wpl (ID = 0) 09:47: favorites -- one audio cd worth.wpl (ID = 0) 09:47: favorites -- listen to on weekends.wpl (ID = 0) 09:47: favorites -- listen to on weekdays.wpl (ID = 0) 09:47: favorites -- listen to late at night.wpl (ID = 0) 09:47: favorites -- have not heard recently.wpl (ID = 0) 09:47: favorites -- 4 and 5 star rated.wpl (ID = 0) 09:47: thumbs.db (ID = 0) 09:47: clthumbs.zdx (ID = 0) 09:47: cartecorresp_06.zdp (ID = 0) 09:47: thumbs.db (ID = 0) 09:47: prof18.zdp (ID = 0) 09:47: prof13.zdp (ID = 0) 09:47: prof02.zdp (ID = 0) 09:47: invitation03.zdp (ID = 0) 09:47: priv07.zdp (ID = 0) 09:47: evénement01.zdp (ID = 0) 09:47: prof18.zdp (ID = 0) 09:47: cartecorresp_15.zdp (ID = 0) 09:47: evénement02.zdp (ID = 0) 09:47: evénement01.zdp (ID = 0) 09:47: prof18.zdp (ID = 0) 09:47: cartecorresp_15.zdp (ID = 0) 09:47: evénement02.zdp (ID = 0) 09:47: lfpcx90n.dll (ID = 0) 09:48: stvalentin03.zdp (ID = 0) 09:48: lfbmp90n.dll (ID = 0) 09:48: invitation04.zdp (ID = 0) 09:48: 32060.ztf (ID = 0) 09:48: fairepart04.zdp (ID = 0) 09:48: priv04.zdp (ID = 0) 09:48: nöel01.zdp (ID = 0) 09:48: invitation03.zdp (ID = 0) 09:48: anniversairefête01.zdp (ID = 0) 09:48: archives08.zdp (ID = 0) 09:48: archives04.zdp (ID = 0) 09:48: cocktail02.zdp (ID = 0) 09:48: prof13.zdp (ID = 0) 09:48: invitation02.zdp (ID = 0) 09:48: lflmb90n.dll (ID = 0) 09:48: lfimg90n.dll (ID = 0) 09:48: cocktail02.zdp (ID = 0) 09:48: lfwmf90n.dll (ID = 0) 09:48: newyear15.zdp (ID = 0) 09:48: evénement04.zdp (ID = 0) 09:48: anniversaire04.zdp (ID = 0) 09:48: tmplts.ztl (ID = 0) 09:48: nöel01.zdp (ID = 0) 09:48: pjpaperp.jst (ID = 0) 09:48: nöel10.zdp (ID = 0) 09:48: nöel10.zdp (ID = 0) 09:48: prof08.zdp (ID = 0) 09:48: invitation04.zdp (ID = 0) 09:48: nöel02.zdp (ID = 0) 09:48: newyear16.zdp (ID = 0) 09:48: newyear16.zdp (ID = 0) 09:48: newyear11.zdp (ID = 0) 09:48: cartecorresp_23.zdp (ID = 0) 09:48: prof02.zdp (ID = 0) 09:48: evénement04.zdp (ID = 0) 09:48: prof08.zdp (ID = 0) 09:48: anniversairefête06.zdp (ID = 0) 09:48: pcdlib32.dll (ID = 0) 09:48: musique05.zdp (ID = 0) 09:48: invitation04.zdp (ID = 0) 09:48: prof10.zdp (ID = 0) 09:48: priv07.zdp (ID = 0) 09:48: newyear15.zdp (ID = 0) 09:48: l7431.ztf (ID = 0) 09:48: priv04.zdp (ID = 0) 09:48: prof21.zdp (ID = 0) 09:48: photo03.zdp (ID = 0) 09:48: archives03.zdp (ID = 0) 09:48: priv09.zdp (ID = 0) 09:48: anniversairefête01.zdp (ID = 0) 09:48: priv05.zdp (ID = 0) 09:48: 32022.ztf (ID = 0) 09:48: invitation01.zdp (ID = 0) 09:48: archives02.zdp (ID = 0) 09:48: anniversairefête05.zdp (ID = 0) 09:48: fête02.zdp (ID = 0) 09:48: musique06.zdp (ID = 0) 09:48: musique07.zdp (ID = 0) 09:48: newyear09.zdp (ID = 0) 09:48: anniversairefête02.zdp (ID = 0) 09:48: musique08.zdp (ID = 0) 09:48: prof13.zdp (ID = 0) 09:48: coucher de soleil.jpg (ID = 0) 09:48: nöel04.zdp (ID = 0) 09:48: priv09.zdp (ID = 0) 09:48: prof02.zdp (ID = 0) 09:48: musique12.zdp (ID = 0) 09:48: designp.ico (ID = 0) 09:48: photo12.zdp (ID = 0) 09:48: labyrinthe.zdp (ID = 0) 09:48: newyear01.zdp (ID = 0) 09:48: anniversairefête07.zdp (ID = 0) 09:48: cocktail06.zdp (ID = 0) 09:48: cocktail03.zdp (ID = 0) 09:48: ltthk90w.dll (ID = 0) 09:48: evénement01.zdp (ID = 0) 09:48: priv14.zdp (ID = 0) 09:48: l7406_12.ztf (ID = 0) 09:48: l7420_8.ztf (ID = 0) 09:48: l7406_6.ztf (ID = 0) 09:48: l7420_6.ztf (ID = 0) 09:48: prof12.zdp (ID = 0) 09:48: cartecorresp_26.zdp (ID = 0) 09:48: art deco.zdp (ID = 0) 09:48: designp.cnt (ID = 0) 09:48: anniversairefête01.zdp (ID = 0) 09:48: moderne.zdp (ID = 0) 09:48: musique10.zdp (ID = 0) 09:48: elegance.zdp (ID = 0) 09:48: cartecorresp_16.zdp (ID = 0) 09:48: prof04.zdp (ID = 0) 09:48: fairepart03.zdp (ID = 0) 09:48: dpsplshl.bmp (ID = 0) 09:48: fleur.zdp (ID = 0) 09:48: 32021.ztf (ID = 0) 09:48: newyear10.zdp (ID = 0) 09:48: 32083.ztf (ID = 0) 09:48: stvalentin04.zdp (ID = 0) 09:48: priv04.zdp (ID = 0) 09:48: prof01.zdp (ID = 0) 09:48: anniversaire03.zdp (ID = 0) 09:48: cocktail09.zdp (ID = 0) 09:48: standard 01.zdp (ID = 0) 09:48: cocktail06.zdp (ID = 0) 09:48: cocktail03.zdp (ID = 0) 09:48: cocktail06.zdp (ID = 0) 09:48: cartecorresp_09.zdp (ID = 0) 09:48: standard 02.zdp (ID = 0) 09:48: cocktail10.zdp (ID = 0) 09:48: standard 03.zdp (ID = 0) 09:48: enveloppe.zdp (ID = 0) 09:48: priv06.zdp (ID = 0) 09:48: cartecorresp_08.zdp (ID = 0) 09:48: priv06.zdp (ID = 0) 09:48: priv13.zdp (ID = 0) 09:48: priv07.zdp (ID = 0) 09:48: cadeau02.zdp (ID = 0) 09:48: invitation02.zdp (ID = 0) 09:48: cartecorresp_07.zdp (ID = 0) 09:48: evénement03.zdp (ID = 0) 09:48: usbport.sys (ID = 0) 09:48: cartecorresp_04.zdp (ID = 0) 09:48: newyear17.zdp (ID = 0) 09:48: prof01.zdp (ID = 0) 09:48: cocktail08.zdp (ID = 0) 09:48: fairepart02.zdp (ID = 0) 09:48: lffax90n.dll (ID = 0) 09:48: wltmplmg.dll (ID = 0) 09:48: 32020.ztf (ID = 0) 09:48: cartecorresp_18.zdp (ID = 0) 09:48: photo03.zdp (ID = 0) 09:48: prof04.zdp (ID = 0) 09:48: priv05.zdp (ID = 0) 09:48: priv03.zdp (ID = 0) 09:48: newyear05.zdp (ID = 0) 09:48: cocktail09.zdp (ID = 0) 09:48: 32063.ztf (ID = 0) 09:48: priv01.zdp (ID = 0) 09:48: archives02.zdp (ID = 0) 09:48: prof15.zdp (ID = 0) 09:48: priv02.zdp (ID = 0) 09:48: evénement01.zdp (ID = 0) 09:48: clubdegolf.zdp (ID = 0) 09:48: ltfil90n.dll (ID = 0) 09:48: ltimg90n.dll (ID = 0) 09:48: photo11.zdp (ID = 0) 09:48: photo09.zdp (ID = 0) 09:48: photo05.zdp (ID = 0) 09:48: photo04.zdp (ID = 0) 09:48: archives07.zdp (ID = 0) 09:48: archives01.zdp (ID = 0) 09:48: cocktail01.zdp (ID = 0) 09:48: priv01.zdp (ID = 0) 09:48: 32062.ztf (ID = 0) 09:48: 32064.ztf (ID = 0) 09:48: cartecorresp_05.zdp (ID = 0) 09:48: collines.jpg (ID = 0) 09:48: hiver.jpg (ID = 0) 09:48: music.bmp (ID = 0) 09:48: cartecorresp_02.zdp (ID = 0) 09:48: newyear17.zdp (ID = 0) 09:48: anniversairefête04.zdp (ID = 0) 09:48: evénement02.zdp (ID = 0) 09:48: anniversaire03.zdp (ID = 0) 09:48: cartecorresp_12.zdp (ID = 0) 09:48: anniversaire01.zdp (ID = 0) 09:48: nöel02.zdp (ID = 0) 09:48: fairepart01.zdp (ID = 0) 09:48: fêtepères01.zdp (ID = 0) 09:48: fêtepères03.zdp (ID = 0) 09:48: prof26.zdp (ID = 0) 09:48: prof25.zdp (ID = 0) 09:48: anniversairefête07.zdp (ID = 0) 09:48: cartecorresp_13.zdp (ID = 0) 09:48: prof24.zdp (ID = 0) 09:48: anniversairefête04.zdp (ID = 0) 09:48: fête05.zdp (ID = 0) 09:48: invitation02.zdp (ID = 0) 09:48: 32023.ztf (ID = 0) 09:48: invitation05.zdp (ID = 0) 09:48: prof16.zdp (ID = 0) 09:48: prof20.zdp (ID = 0) 09:48: prof12.zdp (ID = 0) 09:48: priv06.zdp (ID = 0) 09:48: prof16.zdp (ID = 0) 09:48: lfpcd90n.dll (ID = 0) 09:48: priv01.zdp (ID = 0) 09:48: amour01.zdp (ID = 0) 09:48: priv08.zdp (ID = 0) 09:48: priv16.zdp (ID = 0) 09:48: priv08.zdp (ID = 0) 09:48: priv08.zdp (ID = 0) 09:48: lftga90n.dll (ID = 0) 09:48: lfeps90n.dll (ID = 0) 09:48: priv10.zdp (ID = 0) 09:48: newyear11.zdp (ID = 0) 09:48: anniversaire05.zdp (ID = 0) 09:48: evénement03.zdp (ID = 0) 09:48: priv03.zdp (ID = 0) 09:48: prof12.zdp (ID = 0) 09:48: prof20.zdp (ID = 0) 09:48: prof16.zdp (ID = 0) 09:48: cocktail10.zdp (ID = 0) 09:48: lfwpg90n.dll (ID = 0) 09:48: prof01.zdp (ID = 0) 09:48: archives01.zdp (ID = 0) 09:48: wltlvchk.dll (ID = 0) 09:48: newyear04.zdp (ID = 0) 09:48: cartecorresp_25.zdp (ID = 0) 09:48: cartecorresp_24.zdp (ID = 0) 09:48: cartecorresp_17.zdp (ID = 0) 09:48: cartecorresp_03.zdp (ID = 0) 09:48: priv05.zdp (ID = 0) 09:48: wltlcvrt.dll (ID = 0) 09:48: wlbvchk.dll (ID = 0) 09:48: priv17.zdp (ID = 0) 09:48: lftif90n.dll (ID = 0) 09:48: mariage05.zdp (ID = 0) 09:48: archives02.zdp (ID = 0) 09:48: associationjudo.zdp (ID = 0) 09:48: prof33.zdp (ID = 0) 09:48: ltvdd90w.drv (ID = 0) 09:48: cartecorresp_27.zdp (ID = 0) 09:48: amour03.zdp (ID = 0) 09:48: c2361anniversaire03.zdp (ID = 0) 09:48: priv09.zdp (ID = 0) 09:48: anniversaire03.zdp (ID = 0) 09:48: cartecorresp_01.zdp (ID = 0) 09:48: help_art.bmp (ID = 0) 09:48: priv03.zdp (ID = 0) 09:48: video.zdp (ID = 0) 09:48: ideas_art.bmp (ID = 0) 09:48: cocktail08.zdp (ID = 0) 09:48: stvalentin01.zdp (ID = 0) 09:48: existing_art.bmp (ID = 0) 09:49: cartecorresp_22.zdp (ID = 0) 09:49: photo10.zdp (ID = 0) 09:49: prof18.zdp (ID = 0) 09:49: musique.zdp (ID = 0) 09:49: dpsplshh.bmp (ID = 0) 09:49: prof20.zdp (ID = 0) 09:49: invitation05.zdp (ID = 0) 09:49: fête03.zdp (ID = 0) 09:49: newyear13.zdp (ID = 0) 09:49: stvalentin02.zdp (ID = 0) 09:49: cocktail05.zdp (ID = 0) 09:49: stvalentin01.zdp (ID = 0) 09:49: newyear13.zdp (ID = 0) 09:49: stvalentin02.zdp (ID = 0) 09:49: cartecorresp_19.zdp (ID = 0) 09:49: priv10.zdp (ID = 0) 09:49: priv10.zdp (ID = 0) 09:49: archives03.zdp (ID = 0) 09:49: photo06.zdp (ID = 0) 09:49: scratch_art.bmp (ID = 0) 09:49: readymade_art.bmp (ID = 0) 09:49: newyear01.zdp (ID = 0) 09:49: pjpapple.jst (ID = 0) 09:49: anniversaire04.zdp (ID = 0) 09:49: fairepartchampagne.zdp (ID = 0) 09:49: fête02.zdp (ID = 0) 09:49: mariage05.zdp (ID = 0) 09:49: fête03.zdp (ID = 0) 09:49: fairepartchampagne01.zdp (ID = 0) 09:49: love04.zdp (ID = 0) 09:49: opening_art.bmp (ID = 0) 09:49: newyear01.zdp (ID = 0) 09:49: anniversaire02.zdp (ID = 0) 09:49: prof07.zdp (ID = 0) 09:49: prof28.zdp (ID = 0) 09:49: prof27.zdp (ID = 0) 09:49: fête02.zdp (ID = 0) 09:49: mariage01.zdp (ID = 0) 09:49: invitation01.zdp (ID = 0) 09:49: prof17.zdp (ID = 0) 09:49: anniversaire01.zdp (ID = 0) 09:49: c2361anniversaire02.zdp (ID = 0) 09:49: newyear06.zdp (ID = 0) 09:49: anniversairefête09.zdp (ID = 0) 09:49: newyear02.zdp (ID = 0) 09:49: ltdlg90n.dll (ID = 0) 09:49: usbehci.sys (ID = 0) 09:49: cocktail04.zdp (ID = 0) 09:49: anniversaire02.zdp (ID = 0) 09:49: cirque.zdp (ID = 0) 09:49: anniversairefête05.zdp (ID = 0) 09:49: cocktail02.zdp (ID = 0) 09:49: 32061.ztf (ID = 0) 09:49: newyear14.zdp (ID = 0) 09:49: prof15.zdp (ID = 0) 09:49: prof15.zdp (ID = 0) 09:49: newyear07.zdp (ID = 0) 09:49: mariage02.zdp (ID = 0) 09:49: nöel02.zdp (ID = 0) 09:49: musique13.zdp (ID = 0) 09:49: entrepriseadresse01.zdp (ID = 0) 09:49: anniversairefête03.zdp (ID = 0) 09:49: fanclub.zdp (ID = 0) 09:49: clubechecs.zdp (ID = 0) 09:49: prof17.zdp (ID = 0) 09:49: prof35.zdp (ID = 0) 09:49: fête.zdp (ID = 0) 09:49: newyear20.zdp (ID = 0) 09:49: anniversairefête04.zdp (ID = 0) 09:49: 32065.ztf (ID = 0) 09:49: 32080.ztf (ID = 0) 09:49: anniversaire04.zdp (ID = 0) 09:49: nöel08.zdp (ID = 0) 09:49: photo01.zdp (ID = 0) 09:49: marguerite.zdp (ID = 0) 09:49: newyear03.zdp (ID = 0) 09:49: prof23.zdp (ID = 0) 09:49: artsetcreations.zdp (ID = 0) 09:49: c2361anniversaire01.zdp (ID = 0) 09:49: prof09.zdp (ID = 0) 09:49: musique02.zdp (ID = 0) 09:49: mariage04.zdp (ID = 0) 09:49: fêtemamie03.zdp (ID = 0) 09:49: prof40.zdp (ID = 0) 09:49: mariage03.zdp (ID = 0) 09:49: spuninst.inf (ID = 0) 09:49: soleil.zdp (ID = 0) 09:49: cartecorresp_20.zdp (ID = 0) 09:49: nöel05.zdp (ID = 0) 09:49: nöel05.zdp (ID = 0) 09:49: hccoin.dll (ID = 0) 09:49: anniversaire01.zdp (ID = 0) 09:49: prof19.zdp (ID = 0) 09:49: prof34.zdp (ID = 0) 09:49: usbccgp.sys (ID = 0) 09:49: nöel01.zdp (ID = 0) 09:49: nöel07.zdp (ID = 0) 09:49: pjpaperl.jst (ID = 0) 09:49: newyear18.zdp (ID = 0) 09:49: newyear07.zdp (ID = 0) 09:49: pjpaplle.jst (ID = 0) 09:49: newyear07.zdp (ID = 0) 09:49: prof19.zdp (ID = 0) 09:49: anniversairefête06.zdp (ID = 0) 09:49: newyear18.zdp (ID = 0) 09:49: invitation02.zdp (ID = 0) 09:49: newyear02.zdp (ID = 0) 09:49: cartecorresp_14.zdp (ID = 0) 09:49: cocktail01.zdp (ID = 0) 09:49: nöel08.zdp (ID = 0) 09:49: newyear05.zdp (ID = 0) 09:49: newyear09.zdp (ID = 0) 09:49: cocktail01.zdp (ID = 0) 09:49: musique01.zdp (ID = 0) 09:49: usbuhci.sys (ID = 0) 09:49: spuninst.bat (ID = 0) 09:49: wlftmrg.dll (ID = 0) 09:49: mariage01.zdp (ID = 0) 09:49: catalogue.zdp (ID = 0) 09:49: cocktail05.zdp (ID = 0) 09:49: newyear08.zdp (ID = 0) 09:49: cocktail05.zdp (ID = 0) 09:49: photo01.zdp (ID = 0) 09:49: musique02.zdp (ID = 0) 09:49: priv02.zdp (ID = 0) 09:49: spuninst.exe (ID = 0) 09:49: nöel04.zdp (ID = 0) 09:49: priv02.zdp (ID = 0) 09:49: nöel03.zdp (ID = 0) 09:49: stvalentin03.zdp (ID = 0) 09:49: ltdis90n.dll (ID = 0) 09:49: photo07.zdp (ID = 0) 09:49: lfcmp90n.dll (ID = 0) 09:49: invitation01.zdp (ID = 0) 09:49: prof06.zdp (ID = 0) 09:49: newyear19.zdp (ID = 0) 09:49: anniversaire01.zdp (ID = 0) 09:49: prof38.zdp (ID = 0) 09:49: nöel01.zdp (ID = 0) 09:49: designp.hlp (ID = 0) 09:49: anniversairefête03.zdp (ID = 0) 09:49: anniversairefête02.zdp (ID = 0) 09:49: anniversairefête03.zdp (ID = 0) 09:49: anniversairefête02.zdp (ID = 0) 09:49: cartecorresp_21.zdp (ID = 0) 09:49: musique01.zdp (ID = 0) 09:49: anniversaire02.zdp (ID = 0) 09:49: 32082.ztf (ID = 0) 09:49: newyear10.zdp (ID = 0) 09:49: 32081.ztf (ID = 0) 09:49: musique09.zdp (ID = 0) 09:49: newyear19.zdp (ID = 0) 09:49: newyear06.zdp (ID = 0) 09:49: newyear09.zdp (ID = 0) 09:49: newyear03.zdp (ID = 0) 09:49: nöel02.zdp (ID = 0) 09:49: amour02.zdp (ID = 0) 09:49: ltkrn90n.dll (ID = 0) 09:49: nöel09.zdp (ID = 0) 09:49: nöel09.zdp (ID = 0) 09:49: newyear06.zdp (ID = 0) 09:49: prof42.zdp (ID = 0) 09:49: prof37.zdp (ID = 0) 09:49: prof39.zdp (ID = 0) 09:49: anniversaire02.zdp (ID = 0) 09:49: archives06.zdp (ID = 0) 09:49: prof19.zdp (ID = 0) 09:49: anniversairefête08.zdp (ID = 0) 09:49: nöel07.zdp (ID = 0) 09:49: prof03.zdp (ID = 0) 09:49: nöel03.zdp (ID = 0) 09:49: prof41.zdp (ID = 0) 09:49: prof04.zdp (ID = 0) 09:49: caractere.zdp (ID = 0) 09:49: evénement05.zdp (ID = 0) 09:49: musique04.zdp (ID = 0) 09:49: anniversairefête05.zdp (ID = 0) 09:49: prof05.zdp (ID = 0) 09:49: prof31.zdp (ID = 0) 09:49: prof03.zdp (ID = 0) 09:49: evénement05.zdp (ID = 0) 09:49: prof14.zdp (ID = 0) 09:49: prof08.zdp (ID = 0) 09:49: newyear01.zdp (ID = 0) 09:49: golfeur.zdp (ID = 0) 09:49: prof10.zdp (ID = 0) 09:49: anniversairefête08.zdp (ID = 0) 09:49: musique03.zdp (ID = 0) 09:49: fête03.zdp (ID = 0) 09:49: fête01.zdp (ID = 0) 09:49: fleurs.zdp (ID = 0) 09:49: photo02.zdp (ID = 0) 09:49: newyear03.zdp (ID = 0) 09:49: photo01.zdp (ID = 0) 09:49: cadeau01.zdp (ID = 0) 09:49: fête01.zdp (ID = 0) 09:49: prof05.zdp (ID = 0) 09:49: newyear20.zdp (ID = 0) 09:49: prof06.zdp (ID = 0) 09:49: newyear08.zdp (ID = 0) 09:49: invitation.zdp (ID = 0) 09:49: prof14.zdp (ID = 0) 09:49: prof17.zdp (ID = 0) 09:49: carshow.zdp (ID = 0) 09:49: prof11.zdp (ID = 0) 09:49: prof06.zdp (ID = 0) 09:49: newyear14.zdp (ID = 0) 09:49: sans nom.zdp (ID = 0) 09:49: prof03.zdp (ID = 0) 09:49: photo01.zdp (ID = 0) 09:49: anniversairefête09.zdp (ID = 0) 09:49: mariage01.zdp (ID = 0) 09:49: fête01.zdp (ID = 0) 09:49: stvalentin01.zdp (ID = 0) 09:49: stvalentin05.zdp (ID = 0) 09:49: stvalentin05.zdp (ID = 0) 09:49: prof14.zdp (ID = 0) 09:49: stvalentin01.zdp (ID = 0) 09:49: cocktail04.zdp (ID = 0) 09:49: cartecorresp_29.zdp (ID = 0) 09:49: cartecorresp_28.zdp (ID = 0) 09:49: prof10.zdp (ID = 0) 09:49: newyear10.zdp (ID = 0) 09:49: fête05.zdp (ID = 0) 09:49: fête05.zdp (ID = 0) 09:49: newyear12.zdp (ID = 0) 09:49: cadeau01.zdp (ID = 0) 09:49: prof05.zdp (ID = 0) 09:49: mariage02.zdp (ID = 0) 09:49: newyear08.zdp (ID = 0) 09:49: prof32.zdp (ID = 0) 09:49: cartecorresp_30.zdp (ID = 0) 09:49: entrepriseadresse02.zdp (ID = 0) 09:50: nöel03.zdp (ID = 0) 09:50: priv15.zdp (ID = 0) 09:50: photo08.zdp (ID = 0) 09:50: humour.zdp (ID = 0) 09:50: newyear12.zdp (ID = 0) 09:50: anniversairefête10.zdp (ID = 0) 09:50: cartecorresp_11.zdp (ID = 0) 09:50: fêtemamie01.zdp (ID = 0) 09:50: fête06.zdp (ID = 0) 09:50: photo02.zdp (ID = 0) 09:50: nöel06.zdp (ID = 0) 09:50: fête07.zdp (ID = 0) 09:50: newyear05.zdp (ID = 0) 09:50: prof36.zdp (ID = 0) 09:50: archives04.zdp (ID = 0) 09:50: dp_wiz_base.bmp (ID = 0) 09:50: fête01.zdp (ID = 0) 09:50: priv11.zdp (ID = 0) 09:50: cartecorresp_10.zdp (ID = 0) 09:50: fêtemères02.zdp (ID = 0) 09:50: newyear02.zdp (ID = 0) 09:50: newyear02.zdp (ID = 0) 09:50: fêtemamie01.zdp (ID = 0) 09:50: anniversairefête07.zdp (ID = 0) 09:50: stvalentin02.zdp (ID = 0) 09:50: prof43.zdp (ID = 0) 09:50: musique.zdp (ID = 0) 09:50: fête03.zdp (ID = 0) 09:50: clubfléchettes.zdp (ID = 0) 09:50: photo.zdp (ID = 0) 09:50: photo13.zdp (ID = 0) 09:50: fête04.zdp (ID = 0) 09:50: entrepriseadresse03.zdp (ID = 0) 09:50: prof09.zdp (ID = 0) 09:50: prof30.zdp (ID = 0) 09:50: fairepart03.zdp (ID = 0) 09:50: prof29.zdp (ID = 0) 09:50: prof09.zdp (ID = 0) 09:50: anniversairefête10.zdp (ID = 0) 09:50: fête02.zdp (ID = 0) 09:50: wlrcdll.dll (ID = 0) 09:50: fête04.zdp (ID = 0) 09:50: musique.zdp (ID = 0) 09:50: stvalentin02.zdp (ID = 0) 09:50: fête04.zdp (ID = 0) 09:50: fêtemères04.zdp (ID = 0) 09:50: entrepriseadresse.zdp (ID = 0) 09:50: entrepriseadresse.zdp (ID = 0) 09:50: fairepartchampagne01.zdp (ID = 0) 09:50: prof07.zdp (ID = 0) 09:50: prof07.zdp (ID = 0) 09:50: fairepart03.zdp (ID = 0) 09:50: fêtemères05.zdp (ID = 0) 09:50: entrepriseadresse.zdp (ID = 0) 09:50: fêtemères04.zdp (ID = 0) 09:50: fêtemères02.zdp (ID = 0) 09:50: mariage04.zdp (ID = 0) 09:50: fêtepères03.zdp (ID = 0) 09:50: photo02.zdp (ID = 0) 09:50: priv12.zdp (ID = 0) 09:50: fêtemères01.zdp (ID = 0) 09:50: nöel06.zdp (ID = 0) 09:50: fairepart02.zdp (ID = 0) 09:50: prof11.zdp (ID = 0) 09:50: prof11.zdp (ID = 0) 09:50: photo02.zdp (ID = 0) 09:50: archives01.zdp (ID = 0) 09:50: musique03.zdp (ID = 0) 09:50: photo04.zdp (ID = 0) 09:50: fêtemères02.zdp (ID = 0) 09:50: fêtemères05.zdp (ID = 0) 09:50: designp.exe (ID = 0) 09:50: music.wma (ID = 0) 09:50: archives01.zdp (ID = 0) 09:50: mariage02.zdp (ID = 0) 09:50: newyear04.zdp (ID = 0) 09:50: archives05.zdp (ID = 0) 09:50: archives02.zdp (ID = 0) 09:50: aventure.zdp (ID = 0) 09:50: newyear04.zdp (ID = 0) 09:50: prof22.zdp (ID = 0) 09:50: mariage03.zdp (ID = 0) 09:50: cocktail03.zdp (ID = 0) 09:50: cocktail07.zdp (ID = 0) 09:50: mariage03.zdp (ID = 0) 09:50: cocktail07.zdp (ID = 0) 09:50: musique11.zdp (ID = 0) 09:50: usbhub.sys (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: clipart.zdx (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: desktop.ini (ID = 0) 09:50: padjustu.zpj (ID = 0) 09:50: wltmpltd.dpf (ID = 0) 09:50: 32017.ztf (ID = 0) 09:50: 32250z.ztf (ID = 0) 09:50: 32253.ztf (ID = 0) 09:50: 32286.ztf (ID = 0) 09:50: 32287.ztf (ID = 0) 09:50: 32289.ztf (ID = 0) 09:50: 6015.ztf (ID = 0) 09:50: aaddress.ztr (ID = 0) 09:50: abizcard.ztr (ID = 0) 09:50: acd.ztr (ID = 0) 09:50: acards.ztr (ID = 0) 09:50: affiling.ztr (ID = 0) 09:50: afiling.ztr (ID = 0) 09:50: aident.ztr (ID = 0) 09:50: aindex.ztr (ID = 0) 09:50: amedia.ztr (ID = 0) 09:50: aphopap.ztr (ID = 0) 09:50: c2070.ztf (ID = 0) 09:50: c2080.ztf (ID = 0) 09:50: c2341_1.ztf (ID = 0) 09:50: c2341_2.ztf (ID = 0) 09:50: c2342_1.ztf (ID = 0) 09:50: c2342_2.ztf (ID = 0) 09:50: c2351.ztf (ID = 0) 09:50: c2355.ztf (ID = 0) 09:50: c2361.ztf (ID = 0) 09:50: c32271.ztf (ID = 0) 09:50: c9355.ztf (ID = 0) 09:50: f0015.ztf (ID = 0) 09:50: f0016.ztf (ID = 0) 09:50: j8431.ztf (ID = 0) 09:50: j8432.ztf (ID = 0) 09:50: j8440.ztf (ID = 0) 09:50: j8612.ztf (ID = 0) 09:50: j8667.ztf (ID = 0) 09:50: l741110.ztf (ID = 0) 09:50: l741112.ztf (ID = 0) 09:50: l741115.ztf (ID = 0) 09:50: l741120.ztf (ID = 0) 09:50: l741131.ztf (ID = 0) 09:50: l7411az.ztf (ID = 0) 09:50: l7411jd.ztf (ID = 0) 09:50: l7411_5.ztf (ID = 0) 09:50: l7411_6.ztf (ID = 0) 09:50: l7412_10.ztf (ID = 0) 09:50: l7412_12.ztf (ID = 0) 09:50: l7412_5.ztf (ID = 0) 09:50: l7412_6.ztf (ID = 0) 09:50: l7412_8.ztf (ID = 0) 09:50: l7655.ztf (ID = 0) 09:50: l7669.ztf (ID = 0) 09:50: l7676.ztf (ID = 0) 09:50: padjust.zpj (ID = 0) 09:50: tmpltsdl.ztr (ID = 0) 09:50: Analyse des fichiers terminée, temps passé : 00:27:49 09:50: Analyse complète terminée. Durée 00:31:18 09:50: Traces trouvées : 671 ********

bonjour charles, voici le rapport de blacklight, je le trouve léger 02/23/06 08:58:24 [info]: BlackLight Engine 1.0.32 initialized 02/23/06 08:58:24 [info]: OS: 5.1 build 2600 (Service Pack 2) 02/23/06 08:58:24 [Note]: 7019 4 02/23/06 08:58:24 [Note]: 7005 0 02/23/06 08:58:49 [Note]: 7006 0 02/23/06 08:58:49 [Note]: 7011 1892 02/23/06 08:58:49 [Note]: FSRAW library version 1.7.1015 02/23/06 09:01:12 [Note]: 7007 0

bonsoir à tous charles, je ne parviens pas à faire une analyse sur tes liens ( mon anglais est très loin dans ma mémoire) de toute façon cela ce déplace partout, j'ai refais une analyse avec spy sweeper, il a trouvé ce rootkit dans mes images j'ai suprimé le dossier mais après c'était dans ma musique. anti vir n'a rien trouvé en mode sans echec et avast en normal j'ai fais un nettoyage des fichiers avec easy cleaner en mode sans echec il n'a rien trouvé, par contre en normal il trouve beaucoup de fichiers spy et ne parvient pas à les suprimer il se bloque ccleaner ne trouve rien sinon pas de pop up, mon ordi tourne bien ( pour l'instant) spy sweeper a mis ce rootkit en quarantaine, avec près de 600 traces que dois je faire ? merci pour votre aide à tous

bonjour,voici le rapport Hijack Logfile of HijackThis v1.99.1 Scan saved at 11:37:34, on 21/02/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\cisvc.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe C:\WINDOWS\System32\STDSB.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\system32\slrundll.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wuauclt.exe C:\Documents and Settings\GABY\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/...rch/search.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [sTDSB] C:\WINDOWS\System32\STDSB.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\RunOnce: [delus] C:\DOCUME~1\GABY\LOCALS~1\Temp\delus.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version6/Applet/vchatsign.cab O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe je n'ai pas encore analysé les fichiers

bonjour spy sweeper me trouve potentially rootkit-masked files, mise en quarantaine après redémarrage ( temps environ 15 mn), puis seconde analyse et le problème et toujours là, spy me signale l'emplacement : C:Windows\$ntuninstallkB842773$\reg00015, j'ai isolé ce fichier en le mettant provisoirement à la corbeille et refais une analyse le problème se déplace alors dans un autre fichier Windows. Quel est ce mystère merci de m'éclairer

merci Gaby75 le problème est résolu avec les clés de registre de ton lien merci encore et bonne année à toi

j'ai fais la manip de Pear, mais rien ne change, cele m'indique dossier introuvable

bonjour Gaby 75 lorsque je clic droit, l'action en gras est recherche

désolé, peut-être un peu plus de précisions lorsque je clic sur , mes documents, ma musique, mes images ou même document and settings dans poste de travail, c'est la fenêtre résultat de recherche qui s'ouvre et si je clic sur recherche je retouve aussitôt dans cette fenêtre mes images, mes documents etc etc je pense que cela provient d'une mauvaise manip dans gestion de dossier, mais je ne parvient pas à réparer le problème merci de m'aider

problème, lorsque je clic sur document ou fichier ex: image ou musique je tombe sur la fenêtre recherche comment faire pour arranger cela, merci