wawazedor

Bonjour charles. Comment va la famille ? J'ai essayé, ca n'a rien changé ! Bon le problème a été résolu à l'aide du bon vieux buldozer de reinstallation. J'en ai profité pour bien suivre les directives de la réinstallation propre de zebulon. Ainsi point de soucis a l'avenir ! enfin je l'espère Merci a tous les gold et autre godlike member du forum avec qui j'ai pu explorer les univers paranormal de la cyberno-informatique. Specialement Charles Ingals. Et jusqu'alors je croyait qu'il se faisait toujours autant chier dans sa petite maison de son trou pommé. Reconversion réussit Charles ! ++

Bonjour, Les chargements sont beaucoup plus rapide, ca c'est le premier effet charles ingals, merci Mais il subsiste les problèmes Audio-Video. C'est à dire que lorsque je lance un fichier video ou audio si le cpu est totalement libre ca marche pas trop mal, mais des que je lance la moindre action, genre ouverture de firefox ou même exporateur windows, ca lague... et plus on en lance plus ca lague. ++

Rebonsoir Charles ! Voici le rapport du scan Panda... Bon je sais pas si c'est sérieux ou pas... Grand merci pour les dernieres aides. Rapport Panda Incident Statut Analyse Spyware:Cookie/Xiti No Désinfecté C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt[.xiti.com/] Hacktool:Exploit/iFrame No Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Chorale[~0000022.~] Virus:W32/Netsky.P.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Chorale[message.scr] Virus:W32/Netsky.C.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Grumluff[myaunt.zip][myaunt.doc.exe] Virus:W32/Netsky.C.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Grumluff[schock_attachment.zip][schock_attachment.pif] Virus:W32/Netsky.C.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Grumluff[jokes.zip][jokes.htm.com] Virus:W32/Netsky.C.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Grumluff[image.zip][image.exe] Virus:W32/Netsky.P.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Grumluff[account.zip][document.txt .exe] Virus:W32/Mydoom.M.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\Inbox[document.zip][document.scr] Virus:W32/Mabutu.A.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\MacRoberts[bataille NTmTsis.zip][bataille NTmTsis.txt Virus:W32/Mabutu.A.worm Désinfecté C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\Mail\Local Folders\MacRoberts[desktop.zip][desktop.txt Outil indésirable:Application/Processor No Désinfecté C:\Documents and Settings\Zedor\Bureau\SmitfraudFix\Process.exe Outil indésirable:Application/Processor No Désinfecté C:\WINDOWS\system32\Process.exe

Bonsoir -------------------------------------------------------------------------------------------------------------- Log nouveau Hijackthis Logfile of HijackThis v1.99.1 Scan saved at 19:26:26, on 10/09/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\ZoneAlarm\zlclient.exe C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\WINDOWS\system32\PMSveH.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\PMHandler.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\HijackThis\wawazedor.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe O4 - HKLM\..\Run: [TPWAUDAP] C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe O4 - HKLM\..\Run: [PMHandler] C:\WINDOWS\SYSTEM32\PMHandler.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [iSUSPM Startup] c:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "c:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [sSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [JAVA_IBM] Java (IBM) O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/fr/fr O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: tphotkey - C:\WINDOWS\SYSTEM32\tphklock.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: PMSveH - Lenovo - C:\WINDOWS\system32\PMSveH.exe O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -------------------------------------------------------------------------------------------------- Rapport Ewido --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 19:09:28 10/09/2006 + Scan result: :mozilla.37:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.247realmedia : No action taken. :mozilla.38:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.247realmedia : No action taken. :mozilla.56:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.57:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.58:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.59:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.61:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.62:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.63:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.123:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.124:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.145:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adtech : No action taken. :mozilla.150:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Adtech : No action taken. :mozilla.146:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.147:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.148:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.190:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Atdmt : No action taken. :mozilla.36:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken. :mozilla.102:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Estat : No action taken. :mozilla.231:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.232:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.164:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.165:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.167:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.168:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.169:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.170:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.282:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Masterstats : No action taken. :mozilla.156:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Paycounter : No action taken. :mozilla.197:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken. Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken. :mozilla.228:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken. :mozilla.229:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken. :mozilla.171:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.172:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.173:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.174:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.175:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.176:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.177:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.143:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.144:C:\Documents and Settings\Zedor\Application Data\Mozilla\Firefox\Profiles\hrluk96s.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. ::Report end __________________________________________________________________ Pour ce rapport j'ai pas desinfecté le premier coup c pour ca qu'il met no action taken Je fait le scan panda des que possible Voili voilo... j'epère qu'on progresse ...

VIRUS TOTAL 1 Complete scanning result of "57950CE6E0.sys", received in VirusTotal at 09.10.2006, 11:59:11 (CET). Antivirus Version Update Result AntiVir 7.1.1.16 09.09.2006 no virus found Authentium 4.93.8 09.09.2006 no virus found Avast 4.7.844.0 09.08.2006 no virus found AVG 386 09.08.2006 no virus found BitDefender 7.2 09.10.2006 no virus found CAT-QuickHeal 8.00 09.09.2006 no virus found ClamAV devel-20060426 09.10.2006 no virus found DrWeb 4.33 09.10.2006 no virus found eTrust-InoculateIT 23.72.120 09.08.2006 no virus found eTrust-Vet 30.3.3070 09.09.2006 no virus found Ewido 4.0 09.09.2006 no virus found Fortinet 2.77.0.0 09.09.2006 no virus found F-Prot 3.16f 09.09.2006 no virus found F-Prot4 4.2.1.29 09.09.2006 no virus found Ikarus 0.2.65.0 09.08.2006 no virus found Kaspersky 4.0.2.24 09.10.2006 no virus found McAfee 4848 09.08.2006 no virus found Microsoft 1.1560 09.09.2006 no virus found NOD32v2 1.1746 09.08.2006 no virus found Norman 5.90.23 09.08.2006 no virus found Panda 9.0.0.4 09.09.2006 no virus found Sophos 4.09.0 09.10.2006 no virus found Symantec 8.0 09.10.2006 no virus found TheHacker 5.9.8.208 09.08.2006 no virus found UNA 1.83 09.08.2006 no virus found VBA32 3.11.1 09.10.2006 no virus found VirusBuster 4.3.7:9 09.09.2006 no virus found Aditional Information File size: 56 bytes MD5: 5f6966100f03df3ba2034fcbaa40bb96 SHA1: 4d11c4625f273e0688dad9601f5ecd97981b934b -------------------------------------------------------------------------------------------------------- VIRUSTOTAL 2 Complete scanning result of "cd.exe", received in VirusTotal at 09.10.2006, 12:12:03 (CET). Antivirus Version Update Result AntiVir 7.1.1.16 09.09.2006 no virus found Authentium 4.93.8 09.09.2006 no virus found Avast 4.7.844.0 09.08.2006 no virus found AVG 386 09.08.2006 no virus found BitDefender 7.2 09.10.2006 no virus found CAT-QuickHeal 8.00 09.09.2006 no virus found ClamAV devel-20060426 09.10.2006 no virus found DrWeb 4.33 09.10.2006 no virus found eTrust-InoculateIT 23.72.120 09.08.2006 no virus found eTrust-Vet 30.3.3070 09.09.2006 no virus found Ewido 4.0 09.09.2006 no virus found Fortinet 2.77.0.0 09.09.2006 suspicious F-Prot 3.16f 09.09.2006 Possibly a new variant of W32/Threat-IKNP-based!Maximus Ikarus 0.2.65.0 09.08.2006 Backdoor.Win32.Hupigon.BV Kaspersky 4.0.2.24 09.10.2006 no virus found McAfee 4848 09.08.2006 no virus found Microsoft 1.1560 09.09.2006 no virus found NOD32v2 1.1746 09.08.2006 no virus found Norman 5.90.23 09.08.2006 no virus found Panda 9.0.0.4 09.09.2006 no virus found Sophos 4.09.0 09.10.2006 no virus found Symantec 8.0 09.10.2006 no virus found TheHacker 5.9.8.208 09.08.2006 no virus found UNA 1.83 09.08.2006 no virus found VBA32 3.11.1 09.10.2006 no virus found VirusBuster 4.3.7:9 09.09.2006 no virus found Aditional Information File size: 564736 bytes MD5: 55d7d5f93bf9f4802771dd91d2f0d0d5 SHA1: 1a1b4ed80ce59c7ad385ca88f4ae905925ab2e04 packers: Packed ------------------------------------------------------------------------------------------------ Virustotal 3 Complete scanning result of "SET2D.tmp", received in VirusTotal at 09.10.2006, 12:21:20 (CET). Antivirus Version Update Result AntiVir 7.1.1.16 09.09.2006 no virus found Authentium 4.93.8 09.09.2006 no virus found Avast 4.7.844.0 09.08.2006 no virus found AVG 386 09.08.2006 no virus found BitDefender 7.2 09.10.2006 no virus found CAT-QuickHeal 8.00 09.09.2006 no virus found ClamAV devel-20060426 09.10.2006 no virus found DrWeb 4.33 09.10.2006 no virus found eTrust-InoculateIT 23.72.120 09.08.2006 no virus found eTrust-Vet 30.3.3070 09.09.2006 no virus found Ewido 4.0 09.09.2006 no virus found Fortinet 2.77.0.0 09.09.2006 no virus found F-Prot 3.16f 09.09.2006 no virus found F-Prot4 4.2.1.29 09.09.2006 no virus found Ikarus 0.2.65.0 09.08.2006 no virus found Kaspersky 4.0.2.24 09.10.2006 no virus found McAfee 4848 09.08.2006 no virus found Microsoft 1.1560 09.09.2006 no virus found NOD32v2 1.1746 09.08.2006 no virus found Norman 5.90.23 09.08.2006 no virus found Panda 9.0.0.4 09.09.2006 no virus found Sophos 4.09.0 09.10.2006 no virus found Symantec 8.0 09.10.2006 no virus found TheHacker 5.9.8.208 09.08.2006 no virus found UNA 1.83 09.08.2006 no virus found VBA32 3.11.1 09.10.2006 no virus found VirusBuster 4.3.7:9 09.09.2006 no virus found Aditional Information File size: 10475008 bytes MD5: 346d08d6547d3a8a28aaea3df1318cb3 SHA1: e976042e09505711015ca06fab2d83528edd9c28 Bon apparament ya un fichier louche le cd.exe ... Je dois le supprimer ? I stay tuned for new marvelous scan and log ! Thanks a lot Charles !

Voila les logs ! ------------------------------------------------------------------------------------ 1 SmitFraudFix SmitFraudFix v2.85 Rapport fait à 11:35:03,35, 10/09/2006 Executé à partir de C:\Documents and Settings\Zedor\Bureau\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Fix executé en mode sans echec »»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix GenericRenosFix by S!Ri »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés C:\Program Files\IntCodec\ supprimé »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre Nettoyage terminé. »»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Fin ------------------------------------------------------------------------------------- 2. Nouvel Hijackthis Logfile of HijackThis v1.99.1 Scan saved at 11:54:07, on 10/09/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\ZoneAlarm\zlclient.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\PMSveH.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\PMHandler.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HijackThis\wawazedor.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe O4 - HKLM\..\Run: [TPWAUDAP] C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe O4 - HKLM\..\Run: [PMHandler] C:\WINDOWS\SYSTEM32\PMHandler.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [iSUSPM Startup] c:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "c:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [WindowsUpdateS] C:\WINDOWS\System\winlogon.exe /s O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe" O4 - HKLM\..\Run: [WindowsUpdateR] C:\WINDOWS\System\regserv.exe /s O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [sSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [JAVA_IBM] Java (IBM) O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/fr/fr O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: tphotkey - C:\WINDOWS\SYSTEM32\tphklock.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: PMSveH - Lenovo - C:\WINDOWS\system32\PMSveH.exe O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ----------------------------------------------------------------------------------------------

Merci Charles ! voila mon nouveau rapport : SmitFraudFix v2.85 Rapport fait à 4:00:50,62, 10/09/2006 Executé à partir de C:\Documents and Settings\Zedor\Bureau\SmitfraudFix OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT Fix executé en mode normal »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Zedor\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Zedor\Favoris »»»»»»»»»»»»»»»»»»»»»»»» Bureau »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files C:\Program Files\IntCodec\ PRESENT ! »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Ma page d'accueil" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, les clés qui suivent ne sont pas forcément infectées!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll »»»»»»»»»»»»»»»»»»»»»»»» Fin

Rebonjour, Un petit indice, peut etre... J'ai commencé a faire dela sauvegarde de documents divers et la vitesse de gravure est très faible ! 0,66 * alors que je grave d'habitude a 6* . Y-a-t'il un lien avec l'ultra DMA du disque dur ?

Trop bien ce charles ingall ! merci Voila mon nouveau hijack suivi du rapport de Diaghelp Logfile of HijackThis v1.99.1 Scan saved at 18:21:34, on 08/09/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\ZoneAlarm\zlclient.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\PMSveH.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\PMHandler.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HijackThis\wawazedor.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.lenovo.com/fr/fr R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe O4 - HKLM\..\Run: [TPWAUDAP] C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe O4 - HKLM\..\Run: [PMHandler] C:\WINDOWS\SYSTEM32\PMHandler.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [iSUSPM Startup] c:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "c:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [WindowsUpdateS] C:\WINDOWS\System\winlogon.exe /s O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe" O4 - HKLM\..\Run: [WindowsUpdateR] C:\WINDOWS\System\regserv.exe /s O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [sSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [JAVA_IBM] Java (IBM) O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/fr/fr O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: tphotkey - C:\WINDOWS\SYSTEM32\tphklock.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: PMSveH - Lenovo - C:\WINDOWS\system32\PMSveH.exe O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ______________________________________________________________________________________ rapport diaghelp ! C:\WINDOWS\System32\vsconfig.xml -->08/09/2006 18:14:32 C:\WINDOWS\System32\msvbvm60.DLL -->08/09/2006 09:06:32 C:\WINDOWS\System32\wpa.dbl -->06/09/2006 19:34:34 C:\WINDOWS\System32\CoreVorbis-uninstall.exe -->05/09/2006 17:40:07 C:\WINDOWS\System32\OggDSuninst.exe -->05/09/2006 17:39:57 C:\WINDOWS\System32\KGyGaAvL.sys -->05/09/2006 17:38:14 C:\WINDOWS\System32\57950CE6E0.sys -->05/09/2006 17:38:14 C:\WINDOWS\System32\SET2D.tmp -->05/09/2006 15:47:39 C:\WINDOWS\System32\InstallUtil.InstallLog -->04/09/2006 23:00:53 C:\WINDOWS\System32\FNTCACHE.DAT -->02/09/2006 09:55:30 C:\WINDOWS\System32\jupdate-1.5.0_08-b03.log -->24/08/2006 09:45:03 C:\WINDOWS\System32\MRT.exe -->09/08/2006 21:03:04 C:\WINDOWS\System32\lvcoinst.log -->29/07/2006 10:52:09 C:\WINDOWS\System32\mshtml.dll -->28/07/2006 13:30:59 C:\WINDOWS\System32\xactengine2_3.dll -->28/07/2006 09:30:32 C:\WINDOWS\System32\xinput1_2.dll -->28/07/2006 09:30:14 C:\WINDOWS\System32\inetcomm.dll -->27/07/2006 15:26:19 C:\WINDOWS\System32\javaws.exe -->26/07/2006 03:03:16 C:\WINDOWS\System32\jpicpl32.cpl -->26/07/2006 03:03:14 C:\WINDOWS\System32\javaw.exe -->26/07/2006 01:26:06 C:\WINDOWS\System32\java.exe -->26/07/2006 01:25:56 C:\WINDOWS\System32\urlmon.dll -->25/07/2006 22:43:19 C:\WINDOWS\System32\capicom.dll -->25/07/2006 18:03:42 C:\WINDOWS\System32\PerfStringBackup.INI -->23/07/2006 23:35:03 C:\WINDOWS\System32\perfh00C.dat -->23/07/2006 23:35:03 C:\WINDOWS\0.log -->08/09/2006 18:13:51 C:\WINDOWS\wiaservc.log -->08/09/2006 18:12:18 C:\WINDOWS\wiadebug.log -->08/09/2006 18:12:18 C:\WINDOWS\bootstat.dat -->08/09/2006 18:11:17 C:\WINDOWS\SchedLgU.Txt -->08/09/2006 15:53:22 C:\WINDOWS\WindowsUpdate.log -->08/09/2006 15:52:12 C:\WINDOWS\ntbtlog.txt -->07/09/2006 17:14:58 C:\WINDOWS\setupact.log -->07/09/2006 16:15:21 C:\WINDOWS\wmsetup10.log -->05/09/2006 17:42:38 C:\WINDOWS\wmsetup.log -->05/09/2006 17:42:12 C:\WINDOWS\setupapi.log -->05/09/2006 17:39:22 C:\WINDOWS\DirectX.log -->05/09/2006 13:48:02 C:\WINDOWS\SynInst.log -->04/09/2006 23:02:16 C:\WINDOWS\spupdsvc.log -->29/08/2006 00:15:49 C:\WINDOWS\WgaNotify.log -->29/08/2006 00:09:14 C:\WINDOWS\desktopset.exe |25/02/2006 16:44:10 C:\WINDOWS\UninstallFirefox.exe |23/03/2006 11:59:04 C:\WINDOWS\UninstallThunderbird.exe |23/03/2006 13:26:09 C:\WINDOWS\EMCRI.dll |25/02/2006 16:33:00 C:\WINDOWS\system32\append.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\cd.exe |27/10/2005 00:39:31 C:\WINDOWS\system32\ChCfg.exe |25/02/2006 16:34:51 C:\WINDOWS\system32\CoreVorbis-uninstall.exe |05/09/2006 17:40:07 C:\WINDOWS\system32\debug.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\dosx.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34 C:\WINDOWS\system32\edlin.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\exe2bin.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\fastopen.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\mem.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\MMAVILNG.exe |05/09/2006 17:39:16 C:\WINDOWS\system32\mscdexnt.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\nlsfunc.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\OggDSuninst.exe |05/09/2006 17:39:57 C:\WINDOWS\system32\patcher.exe |27/10/2005 00:16:11 C:\WINDOWS\system32\redir.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\setver.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\share.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\amstream.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\btprn2k.dll |02/12/2005 14:14:56 C:\WINDOWS\system32\compatUI.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\cpuinf32.dll |27/04/2006 20:50:41 C:\WINDOWS\system32\crnxmon.dll |24/03/2006 17:35:45 C:\WINDOWS\system32\encdec.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\ieencode.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\IVIresize.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeA6.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeM6.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeP6.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizePX.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeW7.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\Iyvu9_32.dll |02/06/2006 12:46:05 C:\WINDOWS\system32\lcppn21.dll |14/11/2001 12:56:00 C:\WINDOWS\system32\mqisnmp.dll |24/03/2006 17:35:45 C:\WINDOWS\system32\msdmo.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\msencode.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\ogg.dll |29/01/2003 11:10:06 C:\WINDOWS\system32\oggDS.dll |14/12/2002 23:46:02 C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16 C:\WINDOWS\system32\qedwipes.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\qt-mt331.dll |01/09/2004 17:49:17 C:\WINDOWS\system32\RtlCPAPI.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\sbe.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\ThriXXX010104Z.dll |11/03/2003 12:56:36 C:\WINDOWS\system32\ThriXXX010205PNG.dll |11/03/2003 12:56:52 C:\WINDOWS\system32\ThriXXX015003JP2.dll |11/03/2003 12:56:24 C:\WINDOWS\system32\tphklock.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\tsd32.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\unrar.dll |27/04/2006 20:50:48 C:\WINDOWS\system32\vorbis.dll |29/01/2003 11:10:06 C:\WINDOWS\system32\vorbisenc.dll |14/12/2002 22:46:04 C:\WINDOWS\system32\win87em.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\xvidcore.dll |20/12/2004 11:03:26 C:\WINDOWS\system32\xvidvfw.dll |20/12/2004 11:08:28 C:\WINDOWS\desktopset.exe |25/02/2006 16:44:10 C:\WINDOWS\UninstallFirefox.exe |23/03/2006 11:59:04 C:\WINDOWS\UninstallThunderbird.exe |23/03/2006 13:26:09 C:\WINDOWS\system32\append.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\cd.exe |27/10/2005 00:39:31 C:\WINDOWS\system32\ChCfg.exe |25/02/2006 16:34:51 C:\WINDOWS\system32\CoreVorbis-uninstall.exe |05/09/2006 17:40:07 C:\WINDOWS\system32\debug.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\dosx.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\edlin.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\exe2bin.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\fastopen.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\mem.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\MMAVILNG.exe |05/09/2006 17:39:16 C:\WINDOWS\system32\mscdexnt.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\nlsfunc.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\OggDSuninst.exe |05/09/2006 17:39:57 C:\WINDOWS\system32\redir.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\setver.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\share.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\amstream.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\btprn2k.dll |02/12/2005 14:14:56 C:\WINDOWS\system32\cpuinf32.dll |27/04/2006 20:50:41 C:\WINDOWS\system32\crnxmon.dll |24/03/2006 17:35:45 C:\WINDOWS\system32\encdec.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\ieencode.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\IVIresize.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeA6.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeM6.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeP6.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizePX.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\IVIresizeW7.dll |25/02/2006 16:45:10 C:\WINDOWS\system32\Iyvu9_32.dll |02/06/2006 12:46:05 C:\WINDOWS\system32\lcppn21.dll |14/11/2001 12:56:00 C:\WINDOWS\system32\mqisnmp.dll |24/03/2006 17:35:45 C:\WINDOWS\system32\msdmo.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\msencode.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\ogg.dll |29/01/2003 11:10:06 C:\WINDOWS\system32\qedwipes.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\qt-mt331.dll |01/09/2004 17:49:17 C:\WINDOWS\system32\sbe.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\ThriXXX010104Z.dll |11/03/2003 12:56:36 C:\WINDOWS\system32\ThriXXX010205PNG.dll |11/03/2003 12:56:52 C:\WINDOWS\system32\ThriXXX015003JP2.dll |11/03/2003 12:56:24 C:\WINDOWS\system32\tphklock.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\tsd32.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\unrar.dll |27/04/2006 20:50:48 C:\WINDOWS\system32\vorbis.dll |29/01/2003 11:10:06 C:\WINDOWS\system32\vorbisenc.dll |14/12/2002 22:46:04 C:\WINDOWS\system32\win87em.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\xvidcore.dll |20/12/2004 11:03:26 C:\WINDOWS\system32\xvidvfw.dll |20/12/2004 11:08:28 Le volume dans le lecteur C s'appelle Disc Le numéro de série du volume est 58CB-D99A Répertoire de C:\WINDOWS\system32 05/08/2004 06:00 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 16 939 565 056 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle Disc Le numéro de série du volume est 58CB-D99A Répertoire de C:\WINDOWS\Downloaded Program Files 25/08/2006 15:55 <REP> . 25/08/2006 15:55 <REP> .. 17/09/2004 19:52 65 desktop.ini 25/07/2002 19:13 24 576 dwusplay.dll 25/07/2002 19:13 196 608 dwusplay.exe 09/08/2004 06:02 327 680 isusweb.dll 4 fichier(s) 548 929 octets Total des fichiers listés : 4 fichier(s) 548 929 octets 2 Rép(s) 16 939 565 056 octets libres Liste des programmes installes 3DSexVilla-023.001 AC3Filter (remove only) Adobe Bridge 1.0 Adobe Common File Installer Adobe Help Center 1.0 Adobe Photoshop CS2 Adobe Photoshop CS2 Adobe Reader 7.0 - Français Adobe Stock Photos 1.0 Archiveur WinRAR AutoUpdate AVIcodec (remove only) Avira AntiVir PersonalEdition Classic BitLord 1.1 BSPlayer Cool Edit Pro 2.1 CoreVorbis Audio Decoder (remove only) Correctif pour Windows XP (KB893357) Correctif pour Windows XP (KB894686) Correctif pour Windows XP (KB903250) Correctif pour Windows XP (KB909667) Correctif Windows XP - KB834707 Correctif Windows XP - KB867282 Correctif Windows XP - KB873339 Correctif Windows XP - KB883517 Correctif Windows XP - KB883523 Correctif Windows XP - KB884020 Correctif Windows XP - KB884868 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB885894 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB887742 Correctif Windows XP - KB888113 Correctif Windows XP - KB888239 Correctif Windows XP - KB888302 Correctif Windows XP - KB889315 Correctif Windows XP - KB889673 Correctif Windows XP - KB890047 Correctif Windows XP - KB890859 Correctif Windows XP - KB891781 Direct Show Ogg Vorbis Filter (remove only) DirectX for Managed Code Update (Summer 2004) DivX Player DivX Pro Trial Dragon NaturallySpeaking 8 eMule ffdshow (remove only) FileZilla (remove only) Fraps Google Earth Guitar Pro 5.0 HijackThis 1.99.1 Huffyuv AVI lossless video codec (Remove Only) IBM 32-bit Runtime Environment for Java 2, v1.4.2 IBM 32-bit Runtime Environment for Java 2, v1.4.2 Incrustation Intel A/V Codecs V2.0 Intel® Graphics Media Accelerator Driver for Mobile Intel® PROSet/Wireless Software Internet Explorer Security Plugin 2006 Internet Security Add-On InterVideo WinDVD InterVideo WinDVD Creator 3 J2SE Runtime Environment 5.0 Update 6 J2SE Runtime Environment 5.0 Update 8 KONICA MINOLTA magicolor 2300 DL Logiciel du pilote d'imprimant Lecteur Windows Media 10 Lenovo Bluetooth with Enhanced Data Rate Software Macromedia Flash MX Macromedia Flash Player magicolor 2300 DL mCore mDriver Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft .NET Framework 1.1 Hotfix (KB886903) Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Mise à jour de sécurité pour Lecteur Windows Media (KB911564) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893066) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB899587) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905414) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB905915) Mise à jour de sécurité pour Windows XP (KB908519) Mise à jour de sécurité pour Windows XP (KB908531) Mise à jour de sécurité pour Windows XP (KB911280) Mise à jour de sécurité pour Windows XP (KB911562) Mise à jour de sécurité pour Windows XP (KB911567) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB912812) Mise à jour de sécurité pour Windows XP (KB912919) Mise à jour de sécurité pour Windows XP (KB913446) Mise à jour de sécurité pour Windows XP (KB913580) Mise à jour de sécurité pour Windows XP (KB914388) Mise à jour de sécurité pour Windows XP (KB914389) Mise à jour de sécurité pour Windows XP (KB916281) Mise à jour de sécurité pour Windows XP (KB917159) Mise à jour de sécurité pour Windows XP (KB917344) Mise à jour de sécurité pour Windows XP (KB917422) Mise à jour de sécurité pour Windows XP (KB917953) Mise à jour de sécurité pour Windows XP (KB918439) Mise à jour de sécurité pour Windows XP (KB918899) Mise à jour de sécurité pour Windows XP (KB920214) Mise à jour de sécurité pour Windows XP (KB920670) Mise à jour de sécurité pour Windows XP (KB920683) Mise à jour de sécurité pour Windows XP (KB921398) Mise à jour de sécurité pour Windows XP (KB921883) Mise à jour de sécurité pour Windows XP (KB922616) Mise à jour pour Windows XP (KB898461) Mise à jour pour Windows XP (KB900485) Mise à jour pour Windows XP (KB910437) Mise à jour pour Windows XP (KB916595) mMHouse Mozilla Firefox (1.5.0.6) Mozilla Thunderbird (1.5.0.5) mPfMgr mProSafe MSN Messenger 7.5 mWlsSafe mXML OpenOffice.org 2.0 Picasa 2 PM Driver PM Driver QuickTime QuickTime ratDVD 0.78.1444 Real Alternative 1.48 RealPlayer Realtek AC'97 Audio REALTEK Gigabit and Fast Ethernet NIC Driver Roxio Digital Media LE Roxio Express Labeler Roxio RecordNow Audio Roxio RecordNow Copy Roxio RecordNow Data Security Update pour Microsoft .NET Framework 2.0 (KB917283) SLD Codec Pack Soft Data Fax Modem with SmartCP Sonic Update Manager Sony USB Driver Spybot - Search & Destroy 1.4 Tap'Touche 5 ThinkPad PC Card Power Policy ThinkVantage Technologies Welcome Message UltraVNC v1.0.1 Virtual DJ - Atomix Productions Wallpapers WebFldrs XP Winamp (remove only) Windows Genuine Advantage Notifications (KB905474) Windows Installer 3.1 (KB893803) Windows Media Format Runtime WinZip XP Themes XviD MPEG-4 Video Codec ZoneAlarm Pro Le volume dans le lecteur C s'appelle Disc Le numéro de série du volume est 58CB-D99A Répertoire de C:\Program Files 08/09/2006 01:58 <REP> . 08/09/2006 01:58 <REP> .. 24/08/2006 15:10 <REP> A4Proxy 05/09/2006 17:39 <REP> AC3Filter 24/03/2006 11:43 <REP> Acrobat 7.0 27/04/2006 19:49 <REP> Adobe 26/08/2006 14:01 <REP> ahead 07/09/2006 16:46 <REP> AntiVir PersonalEdition Classic 05/09/2006 17:32 <REP> AVIcodec 25/02/2006 16:34 <REP> AvRack 29/08/2006 15:46 <REP> BitLord 23/03/2006 21:56 <REP> BSPlayer 28/04/2006 20:18 <REP> Calculatrice 17/09/2004 19:50 <REP> ComPlus Applications 23/03/2006 13:23 <REP> CONEXANT 24/03/2006 03:08 <REP> coolpro 05/09/2006 17:38 <REP> DivX 03/09/2006 23:58 <REP> eMule 05/09/2006 17:15 <REP> ffdshow 06/09/2006 00:43 <REP> Fichiers communs 30/03/2006 18:26 <REP> FileZilla 23/03/2006 19:14 <REP> Flash MX 12/05/2006 19:29 <REP> fraps 11/06/2006 18:21 <REP> Free 06/07/2006 22:51 <REP> Google 06/09/2006 10:06 <REP> Grisoft 24/08/2006 12:39 <REP> Guitar Pro 5 08/09/2006 18:21 <REP> HijackThis 25/02/2006 16:43 <REP> IBM 23/03/2006 11:27 <REP> IBM ThinkVantage 25/02/2006 16:44 <REP> IBMTOOLS 06/09/2006 10:05 <REP> IntCodec 25/02/2006 16:24 <REP> Intel 24/08/2006 14:26 <REP> Internet Explorer 24/08/2006 09:45 <REP> Java 24/03/2006 17:52 <REP> KONICA MINOLTA 13/04/2006 17:26 <REP> Lenovo 23/03/2006 12:41 <REP> Messenger 17/09/2004 19:53 <REP> microsoft frontpage 24/03/2006 17:49 <REP> MINOLTA-QMS 06/09/2006 10:05 <REP> Morgan 05/09/2006 17:06 <REP> Movie Maker 08/09/2006 18:23 <REP> Mozilla Firefox 17/09/2004 19:49 <REP> MSN 17/09/2004 19:49 <REP> MSN Gaming Zone 23/03/2006 12:57 <REP> MSN Messenger 26/08/2006 14:04 <REP> Nero 17/09/2004 19:51 <REP> NetMeeting 06/09/2006 10:04 <REP> Norton AntiVirus 29/03/2006 16:01 <REP> OpenOffice.org 2.0 20/04/2006 13:31 <REP> Outlook Express 23/03/2006 08:56 <REP> Picasa2 24/04/2006 12:35 <REP> QuickTime 26/03/2006 15:10 <REP> ratDVD 11/06/2006 20:37 <REP> Real 01/04/2006 18:10 <REP> Real Alternative 25/02/2006 16:34 <REP> Realtek AC97 25/02/2006 16:34 <REP> Realtek Sound Manager 25/02/2006 16:42 <REP> Roxio 26/08/2006 14:31 <REP> ScanSoft 17/09/2004 19:51 <REP> Services en ligne 20/04/2006 14:31 <REP> SLD Codec Pack 03/04/2006 10:56 <REP> Spybot - Search & Destroy 06/09/2006 10:03 <REP> Symantec 25/02/2006 16:22 <REP> Synaptics 28/04/2006 20:23 <REP> Tap'Touche 5 25/02/2006 17:03 <REP> ThinkPad 23/03/2006 11:24 <REP> ThinkVantage 24/07/2006 10:09 <REP> thriXXX 07/09/2006 00:57 <REP> Thunderbird 25/03/2006 14:53 <REP> UltraVNC 01/09/2006 18:08 <REP> VirtualDJ 06/09/2006 10:05 <REP> Winamp 04/09/2006 23:00 <REP> Windows Media Connect 23/03/2006 12:41 <REP> Windows Media Player 17/09/2004 19:49 <REP> Windows NT 12/06/2006 19:42 <REP> WinRAR 23/03/2006 11:54 <REP> WinZip 17/09/2004 19:53 <REP> xerox 05/09/2006 17:39 <REP> XviD 01/07/2006 14:08 <REP> ZoneAlarm 0 fichier(s) 0 octets 81 Rép(s) 16 939 450 368 octets libres Le volume dans le lecteur C s'appelle Disc Le numéro de série du volume est 58CB-D99A Répertoire de C:\Program Files\fichiers communs 06/09/2006 00:43 <REP> . 06/09/2006 00:43 <REP> .. 26/03/2006 23:39 <REP> Adobe 26/03/2006 23:38 <REP> Adobe Systems Shared 26/08/2006 14:24 <REP> Ahead 25/02/2006 16:23 <REP> InstallShield 25/02/2006 16:44 <REP> InterVideo 24/03/2006 13:03 <REP> Java 26/03/2006 18:09 <REP> Microsoft Shared 17/09/2004 19:51 <REP> MSSoap 17/09/2004 19:45 <REP> ODBC 11/06/2006 20:37 <REP> Real 26/08/2006 14:32 <REP> Scansoft Shared 17/09/2004 19:51 <REP> Services 25/02/2006 16:42 <REP> Sonic Shared 17/09/2004 19:45 <REP> SpeechEngines 25/02/2006 16:42 <REP> SureThing Shared 06/09/2006 10:04 <REP> Symantec Shared 20/04/2006 13:31 <REP> System 23/03/2006 19:13 <REP> Vbox 11/06/2006 20:38 <REP> xing shared 0 fichier(s) 0 octets 21 Rép(s) 16 939 433 984 octets libres c:\Documents and Settings\Zedor\Bureau\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\Zedor\Bureau\DiagHelp\Fport.exe c:\Documents and Settings\Zedor\Bureau\DiagHelp\grep.exe c:\Documents and Settings\Zedor\Bureau\DiagHelp\LFiles.exe c:\Documents and Settings\Zedor\Bureau\DiagHelp\LISTDLLS.exe c:\Documents and Settings\Zedor\Bureau\DiagHelp\pslist.exe c:\Documents and Settings\Zedor\Bureau\DiagHelp\streams.exe c:\Documents and Settings\Zedor\Bureau\VDJ.3.2(www.FlowDJ.com)\install_virtualdj_v3.2.exe c:\Documents and Settings\Zedor\Bureau\VDJ.3.2(www.FlowDJ.com)\virtualdj.exe c:\Documents and Settings\Zedor\Mes documents\60ad04ww.exe c:\Documents and Settings\Zedor\Mes documents\antivir-personal-edition-7_antivir_personal_edition_classic_7_6.35.01.55_anglais_10821.exe c:\Documents and Settings\Zedor\Mes documents\AVIcodec_1.2_b110.exe c:\Documents and Settings\Zedor\Mes documents\CleanUp40.exe c:\Documents and Settings\Zedor\Mes documents\Codec_Sniper.exe c:\Documents and Settings\Zedor\Mes documents\ffdshow-20041012.exe c:\Documents and Settings\Zedor\Mes documents\ffdshow-20041012-sse.exe c:\Documents and Settings\Zedor\Mes documents\ffdshow-20041012-sse2.exe c:\Documents and Settings\Zedor\Mes documents\winamp524_full.exe c:\Documents and Settings\Zedor\Mes documents\WM9Codecs.exe c:\Documents and Settings\Zedor\Mes documents\Archives\Cours - Lycée Alain - 1erS 2nd - 2005\cours Laurent Pallier\doc_term\TP\CRAB\setup.exe c:\Documents and Settings\Zedor\Mes documents\Archives\Cours - Lycée Alain - 1erS 2nd - 2005\cours Laurent Pallier\ondes_progressives_nouveau\DivXPro502GAINBundle.exe c:\Documents and Settings\Zedor\Mes documents\Archives\Cours - Lycée Alain - 1erS 2nd - 2005\cours Laurent Pallier\ondes_progressives_nouveau\REGAVI.EXE c:\Documents and Settings\Zedor\Mes documents\Archives\Cours - Lycée Alain - 1erS 2nd - 2005\cours Laurent Pallier\regressi\REGAVI.EXE c:\Documents and Settings\Zedor\Mes documents\Archives\Cours - Lycée Alain - 1erS 2nd - 2005\cours Laurent Pallier\regressi\REGRESSI.EXE c:\Documents and Settings\Zedor\Mes documents\Archives\Soirée enquête - La Société de l'Espadon\Envoyé à Asmodée\Espadon.exe c:\Documents and Settings\Zedor\Mes documents\Archives\Soirée enquête - La Société de l'Espadon\Envoyé à Asmodée\Lauzières.exe c:\Documents and Settings\Zedor\Mes documents\JDR\add\CGSetup12.exe c:\Documents and Settings\Zedor\Mes documents\JDR\add\Générateur PNJ\npc.exe c:\Documents and Settings\Zedor\Mes documents\Jeux\colonization record\CLOSING.EXE c:\Documents and Settings\Zedor\Mes documents\Jeux\colonization record\INSTALL.EXE c:\Documents and Settings\Zedor\Mes documents\Jeux\colonization record\MAPEDIT.EXE c:\Documents and Settings\Zedor\Mes documents\Jeux\colonization record\MPSCOPY.EXE c:\Documents and Settings\Zedor\Mes documents\Jeux\colonization record\OPENING.EXE c:\Documents and Settings\Zedor\Mes documents\Jeux\colonization record\VICEROY.EXE c:\Documents and Settings\Zedor\Mes documents\Jeux\Cpc\WinAPE32.exe c:\Documents and Settings\Zedor\Mes documents\Jeux\snes\ZSNESW.EXE c:\Documents and Settings\Zedor\Mes documents\Logiciels\avg-antivirus_avg_antivirus_7.1.385_anglais_10997.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\bsplayer100.810.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\eMule0-1.47a-Installer.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Firefox Setup 1.0.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Install_MSN_Messenger.EXE c:\Documents and Settings\Zedor\Mes documents\Logiciels\OOo_2.0.2_Win32Intel_install.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\pochette express.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\QuickGammaV2EN.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\ratDVDSetup-0.78.1444.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\spybotsd14.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Thunderbird Setup 1.5.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\translation_in_french.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\winamp295_full.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\winamp521_lite.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\wrar351fr.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\wz90fr.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\zlsSetup_61_744_000_fr.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Site web\flashmx_trial_fr.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Site web\flashplayer7installer.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Site web\Adobe PhotoShop 6\_ISDel.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Site web\Adobe PhotoShop 6\_ISDel_old.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Site web\Adobe PhotoShop 6\Setup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Site web\Adobe PhotoShop 6\SVG\_ISDel.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Site web\Adobe PhotoShop 6\SVG\Setup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\Autorun.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\Demo\DemoBEenc.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\Demo\DemoBEfrc.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\TTouche\enc\Setup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\TTouche\enc\TTouche\Intro\PreContact.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\TTouche\frc\Setup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\TTouche\frc\TTouche\Intro\PreContact.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\Utils\chRgtTT.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\Utils\flashplayer6_winax.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Tap'Touche 5\Utils\vorbisacmInst.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\DVDDecrypter.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Bitrate Calculator\AdvBitRate195.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Cpluswin\CplusEZ.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Cpluswin\CplusWin.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Flask\FlasKMPEGh2pre3.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\MeuhMeuhTV 1.92\MeuhMeuhTV.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\MORETV34\MoreTV.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Ogg\oggdropXPd.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\STOIKVideoConverter11\VideoPak.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\TMPG\TMPGEnc.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtual dub 1.4c\AuxSetup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtual dub 1.4c\VirtualDub.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\VirtualDub 1.3\auxsetup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\VirtualDub 1.3\Setup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\VirtualDub 1.3\VirtualDub.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtualdub 1.4.13\AuxSetup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtualdub 1.4.13\VirtualDub.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtualdub 1.5.1\auxsetup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtualdub 1.5.1\VirtualDub.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtualdub 1.6\auxsetup.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtualdub 1.6\vdub.exe c:\Documents and Settings\Zedor\Mes documents\Logiciels\Video\Virtualdub 1.6\VirtualDub.exe c:\Documents and Settings\Zedor\Mes documents\Photos\2006\D 08.04.06 - Enterrement de vie de garçon de Claude.part1.exe c:\Documents and Settings\Zedor\Mes documents\Photos\2006\E 20.05.06 - Mariage Claude et MC.part1.exe c:\Documents and Settings\Zedor\Mes documents\Photos\2006\stanmarie.exe c:\Documents and Settings\Zedor\Mes documents\Photos\2006\wawasbar.exe c:\Documents and Settings\Zedor\Mes documents\Poésie\Traces des temps incertains\total non corrigé\Traces des temps incertains.exe c:\Documents and Settings\Zedor\Mes documents\Trucs marrants\Jeu du bourré.exe c:\Documents and Settings\Zedor\Mes documents\Utils video\graphedit\GraphEdt.exe c:\Documents and Settings\Zedor\Mes documents\Utils video\graphedit\SysEnum.EXE c:\Documents and Settings\Zedor\Mes documents\Utils video\Virtualdub 1.6\auxsetup.exe c:\Documents and Settings\Zedor\Mes documents\Utils video\Virtualdub 1.6\vdub.exe c:\Documents and Settings\Zedor\Mes documents\Utils video\Virtualdub 1.6\VirtualDub.exe c:\Documents and Settings\Zedor\Mes documents\Utils video\VirtualDubMod_1_5_10_2_All_inclusive\AuxSetup.exe c:\Documents and Settings\Zedor\Mes documents\Utils video\VirtualDubMod_1_5_10_2_All_inclusive\VirtualDubMod.exe c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\Zedor\Application Data\Macromedia\Flash MX\Configuration\authplay.dll c:\Documents and Settings\Zedor\Application Data\Macromedia\Flash MX\Configuration\Importers\AIImport.dll c:\Documents and Settings\Zedor\Application Data\Macromedia\Flash MX\Configuration\Importers\FhDbRdr.dll c:\Documents and Settings\Zedor\Application Data\Macromedia\Flash MX\Configuration\Importers\Fireworks Importer.dll c:\Documents and Settings\Zedor\Application Data\Macromedia\Flash MX\Configuration\Importers\ToonboomStudioImportPlugin.dll c:\Documents and Settings\Zedor\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll

Bonjour, J'ai suivi les procedures de nettoyage. En fait j'ai mis un premier post dans la section software. http://forum.zebulon.fr/index.php?showtopic=103431 pour ce qui est du rapport antivir, le voici : Grand merci a tous ceux qui s'occupent de ce forum ++ AntiVir PersonalEdition Classic Report file date: jeudi 7 septembre 2006 17:16 Scanning for 495501 virus strains and unwanted programs. Licensed to: AntiVir PersonalEdition Classic Serial number: 0000149996-WURGE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: Zedor Computer name: WAWAX Version informations: AVSCAN.EXE : 7.0.0.42 557096 07/09/2006 14:45:57 AVSCAN.DLL : 7.0.0.42 53288 07/09/2006 14:45:57 LUKE.DLL : 7.0.0.42 118824 07/09/2006 14:46:05 LUKERES.DLL : 7.0.0.42 25640 07/09/2006 14:46:05 ANTIVIR0.VDF : 6.35.0.1 7371264 07/09/2006 14:45:54 ANTIVIR1.VDF : 6.35.1.122 1270784 07/09/2006 14:45:54 ANTIVIR2.VDF : 6.35.1.175 144896 07/09/2006 14:45:54 ANTIVIR3.VDF : 6.35.1.198 41984 07/09/2006 14:45:54 AVEWIN32.DLL : 7.1.1.14 1835520 07/09/2006 14:45:55 AVPREF.DLL : 7.0.0.1 49192 07/09/2006 14:45:56 AVREP.DLL : 6.35.1.191 794664 07/09/2006 14:45:57 AVRPBASE.DLL : 7.0.0.0 2162728 07/09/2006 14:45:57 AVPACK32.DLL : 7.1.0.1 335912 07/09/2006 14:45:56 AVREG.DLL : 6.31.0.90 27688 07/09/2006 14:45:56 NETNT.DLL : 6.32.0.0 6696 07/09/2006 14:46:06 NETNW.DLL : 6.32.0.0 9768 07/09/2006 14:46:06 RCIMAGE.DLL : 7.0.0.71 1642536 07/09/2006 14:46:18 RCTEXT.DLL : 7.0.0.75 77864 07/09/2006 14:46:18 Configuration settings for the scan: Jobname: '%s'.................: Local Hard Disks Configuration file............: C:\Program Files\AntiVir PersonalEdition Classic\alldiscs.avp Boot sectors..................: C Scan memory...................: 1 Process scan..................: 1 Scan all files................: 1 Scan archives.................: 1 Recursion depth...............: 20 Smart extensions..............: 1 Skipped archive types.........: 1000,1001,1002,1003,1004, Macro heuristic...............: 1 File heuristic................: 3 Primary action................: 1 Secondary action..............: 0 Start of the scan: jeudi 7 septembre 2006 17:16 The scan over running processes will be started 13 Processes was scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( 30 files ). Starting the file scan: C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService\NTUSER.DAT [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService\ntuser.dat.LOG [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [WARNING] The file could not be opened! C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [WARNING] The file could not be opened! C:\Documents and Settings\Zedor\NTUSER.DAT [WARNING] The file could not be opened! C:\Documents and Settings\Zedor\ntuser.dat.LOG [WARNING] The file could not be opened! C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\mail\local folders\chorale [0] Archive type: Netscape/Mozilla Mailbox --> Mailbox_[From: f.reinaudo@wanadoo.fr][subject: [lachoraledespresques] Mail Delivery (failure l]24.mim [1] Archive type: MIME --> file0.mim [2] Archive type: MIME --> file1.html [DETECTION] Contains signature of the exploits EXP/Iframe.FileDldr --> message.scr [DETECTION] Contains signature of the worm WORM/NetSky.P [WARNING] The file was ignored! C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\mail\local folders\grumluff [0] Archive type: Netscape/Mozilla Mailbox --> Mailbox_[From: emporiumfr@yahoo.fr][subject: [grumluff] Re: does it?]1204.mim [1] Archive type: MIME --> myaunt.zip [DETECTION] Contains signature of the worm WORM/NetSky.C [2] Archive type: ZIP --> myaunt.doc.exe [DETECTION] Contains signature of the worm WORM/NetSky.C --> Mailbox_[From: joueursgn-owner@yahoogroupes.fr][subject: [grumluff] feel free to use it.]1208.mim [1] Archive type: MIME --> schock_attachment.zip [DETECTION] Contains signature of the worm WORM/NetSky.C [2] Archive type: ZIP --> schock_attachment.pif [DETECTION] Contains signature of the worm WORM/NetSky.C --> Mailbox_[From: guillaume.corne@wanadoo.fr][subject: [grumluff] you are a bad writer]1210.mim [1] Archive type: MIME --> jokes.zip [DETECTION] Contains signature of the worm WORM/NetSky.C [2] Archive type: ZIP --> jokes.htm.com [DETECTION] Contains signature of the worm WORM/NetSky.C --> Mailbox_[From: e6bw@.e][subject: [grumluff] Your bill.]1266.mim [1] Archive type: MIME --> image.zip [DETECTION] Contains signature of the worm WORM/NetSky.C [2] Archive type: ZIP --> image.exe [DETECTION] Contains signature of the worm WORM/NetSky.C --> Mailbox_[From: noreply@grumluff][subject: [grumluff] Administrator]2230.mim [1] Archive type: MIME --> account.zip [DETECTION] Contains signature of the worm WORM/NetSky.P [2] Archive type: ZIP --> document.txt .exe [DETECTION] Contains signature of the worm WORM/NetSky.P [WARNING] The file was ignored! C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\mail\local folders\inbox [0] Archive type: Netscape/Mozilla Mailbox --> Mailbox_[From: "Mail Delivery Subsystem" <postmaster@yahoogrou][subject: [spam] Returned mail: Data format error]2818.mim [1] Archive type: MIME --> file1.mim [2] Archive type: MIME --> document.zip [DETECTION] Contains signature of the worm WORM/Mydoom.L [3] Archive type: ZIP --> document.scr [DETECTION] Contains signature of the worm WORM/Mydoom.L [WARNING] The file was ignored! C:\Documents and Settings\Zedor\Application Data\Thunderbird\Profiles\p5xe8cz8.default\mail\local folders\macroberts [0] Archive type: Netscape/Mozilla Mailbox --> Mailbox_[From: Guy Butat <clanbutat@wanadoo.fr>][subject: [Macroberts] Ok cunt]108.mim [1] Archive type: MIME --> Bataille Némésis.zip [DETECTION] Contains signature of the worm WORM/Mabutu.B [2] Archive type: ZIP --> Bataille Némésis.txt .scr [DETECTION] Contains signature of the worm WORM/Mabutu.B --> Mailbox_[From: Sebastien PLACE <sebastien.place1@vnumail.com>][subject: [Macroberts] Important]120.mim [1] Archive type: MIME --> desktop.zip [DETECTION] Contains signature of the worm WORM/Mabutu.B [2] Archive type: ZIP --> desktop.txt .scr [DETECTION] Contains signature of the worm WORM/Mabutu.B [WARNING] The file was ignored! C:\Documents and Settings\Zedor\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [WARNING] The file could not be opened! C:\Documents and Settings\Zedor\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [WARNING] The file could not be opened! C:\Documents and Settings\Zedor\Mes documents\Ess\cracked.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\Documents and Settings\Zedor\Mes documents\Ess\Deutsch crack.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\Program Files\eMule\Incoming\cracked.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\Program Files\eMule\Incoming\Deutsch crack.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\Program Files\eMule\Incoming\USA crack.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP154\A0046290.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP156\A0046322.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP156\A0046377.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP156\A0046394.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP159\A0047549.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP160\A0047591.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP163\A0048249.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP164\A0048287.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP165\A0048350.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP167\A0048797.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP167\A0048805.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP167\A0048831.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP167\A0048841.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP167\A0048905.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP168\A0049163.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP168\A0049190.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP169\A0049298.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP170\A0049324.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP170\A0049366.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP171\A0049411.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP171\A0049426.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP171\A0049436.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0049471.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0050471.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0051471.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0052471.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0052479.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0053479.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0054479.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0055479.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0056479.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP173\A0056487.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP174\A0057487.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP176\A0057633.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP177\A0057642.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP179\A0057677.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP179\A0057689.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP180\A0057765.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP181\A0058765.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP182\A0058795.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP182\A0058980.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP183\A0058992.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059097.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059154.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059242.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059257.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059436.exe [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Shellbot Backdoor server programs [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059442.dll [DETECTION] Is the Trojan horse TR/Proxy.Small.ED [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059443.dll [DETECTION] Is the Trojan horse TR/Banker.IW [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059444.dll [DETECTION] Is the Trojan horse TR/Drop.Toolbar.A [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059841.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059843.exe [DETECTION] Contains suspicious code HEUR/Crypted [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059846.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP184\A0059847.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP185\A0061473.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP185\A0061474.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\System Volume Information\_restore{DBDF04D1-11C9-4A6A-A468-8D4BED762C2E}\RP185\A0061475.exe [DETECTION] Is the Trojan horse TR/Drop.IstBa.45733 [iNFO] The file was deleted! C:\WINDOWS\system32\config\DEFAULT [WARNING] The file could not be opened! C:\WINDOWS\system32\config\default.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SAM [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SAM.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SECURITY [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SECURITY.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SOFTWARE [WARNING] The file could not be opened! C:\WINDOWS\system32\config\software.LOG [WARNING] The file could not be opened! C:\WINDOWS\system32\config\SYSTEM [WARNING] The file could not be opened! C:\WINDOWS\system32\config\system.LOG [WARNING] The file could not be opened! End of the scan: vendredi 8 septembre 2006 01:42 Used time: 8:26:28 min The scan has been done completely. 6273 Scanning directories 377679 Files were scanned 80 viruses and/or unwanted programs was found 62 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 21379 Archives were scanned 23 Warnings 6 Notes

Encore merci papo. rapport posté !

Logfile of HijackThis v1.99.1 Scan saved at 09:11:26, on 08/09/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\hkcmd.exe C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\ZoneAlarm\zlclient.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.exe C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\PMSveH.exe C:\WINDOWS\system32\PMHandler.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.lenovo.com/fr/fr R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPHKMGR.exe O4 - HKLM\..\Run: [TPWAUDAP] C:\Program Files\Lenovo\HOTKEY\TpWAudAp.exe O4 - HKLM\..\Run: [PMHandler] C:\WINDOWS\SYSTEM32\PMHandler.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [iSUSPM Startup] c:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [iSUSScheduler] "c:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [WindowsUpdateS] C:\WINDOWS\System\winlogon.exe /s O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe" O4 - HKLM\..\Run: [WindowsUpdateR] C:\WINDOWS\System\regserv.exe /s O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [sSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [JAVA_IBM] Java (IBM) O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/fr/fr O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: tphotkey - C:\WINDOWS\SYSTEM32\tphklock.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: PMSveH - Lenovo - C:\WINDOWS\system32\PMSveH.exe O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe Voila mon petit rapport

Je n'ai pas pu lancer hijackthis, j'ai une erreur comm quoi il manque le dll : MSVBVM60.DLL Si qq pourvais m'aider, j'en sort pas. Tout s'est pourtant bien passé jusque là...

Merci pour la reponse ! Je vais essayer de ce pas Sinon, pour ce qui est des driver, j'ai deja essyé de les mettres a jour. rien y fait ! I stay on stage

Bonjour atous sur le super forum zebulon ! J'y ai trouvé beaucoup de truc interessants... C'est pourquoi je voudrais savoir si de bonnes ames voulaient se pencher sur mon cas. Mon systeme WinXP a un probleme que je ne sais resoudre (Non ? incroyable). J'ai des gresillements intempestif des que mon ordos travaille sur d'autres taches. autrement dis plus le CPU est utilisé plus le son sacade. J'ai essayé la méthide pour réinstaller tout mes drivers bien proprement, rien a faire. J'ai fait un scan avec deux antivirus différents toujours pareil. J'ai essayer de faire une restauration systeme, sans succes ca plante. Ce probleme est survenu suite a l'installation d'un jeu hyper bugué (Dark Corner of the earth). Mon pc est un portable avec une carte son realtek AC97. J'en suis a me dire qu'il va falloir resinstaller ce qui est d'autant plus dur quand ces idiots de fabriquant de portables ne donnent pas de restore disk.... Merci d'avance pour ceux qui aurait la gentillesse de se pencher sur ma modeste existence ++