jean_yves

Bonjour, tout est dans le titre, à chaque demarrage de windows, pendant que les parametres defilent j'ai un message PRESS <ESC> TO BOOT avec un compteur 7 6 5 4 3 ... Comment retirer cette invit que je n'avais pas avant merci pour tout

Bonsoir à tous, bon je vais essayer d'etre clair... un ami ma donné son pc car il a un soucis : le pc rebootait à chaque demarrage (des l'arrivée du logo xp--->reboot.) donc comme il y connait pas grand chose, il à fait une reinstall d'xp sur une autre partition.... effectivement au demarrage, le system demande sur lequel des xp ont veut booter et donc sur le nouveau pas de pb (sauf qu'il n'y a pas d'accès sur tous ses docs (accès refusé)... donc le pb est doisje supprimer la derniere install et essayer de reparer la 1ere qui reboot tt le temps ou doisje essayer de recuperer les fichiers et de les installer sur la derniere install et supprimer la 1ere qui pose pb.... (si 2eme solution, comment puisje recuperer les fichiers sur la 1ere partition...) merci de votre aide en esperant que j'ai été assez clair...

Bon tout est nickel.........merci encore de ta disponibilité

Vraiment merci de ton aide.... par contre 1- j'ai desinstallé avast...donc est-ce que je peux conserver kasperski comme antivirus ou je reinstall avast ? 2- je desactive la restauration systeme avt ccleaner ou avant de supprimer les programmes utilisés ?? (j'enlève tt ?? ewido, zonalarm, ccleaner ??) merci de ton aide et pas de prob pour signaler l'infection sur le site dont tu parles

merci bcp.......... tu dors jamais ???? Saturday, September 09, 2006 1:06:47 AM Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 9/09/2006 Kaspersky Anti-Virus database records: 208973 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ J:\ K:\ L:\ M:\ Q:\ R:\ Scan Statistics Total number of scanned objects 61110 Number of viruses found 2 Number of infected objects 15 / 0 Number of suspicious objects 0 Duration of the scan process 00:51:25 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\detected.idx Object is locked skipped C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\detected.rpt Object is locked skipped C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\eventlog.rpt Object is locked skipped C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\report.rpt Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\andre\Application Data\Adobe\Acrobat\7.0\Updater\udlog.txt Object is locked skipped C:\Documents and Settings\andre\Application Data\Skype\touschaut\call256.dbb Object is locked skipped C:\Documents and Settings\andre\Application Data\Skype\touschaut\contactgroup256.dbb Object is locked skipped C:\Documents and Settings\andre\Application Data\Skype\touschaut\index2.dat Object is locked skipped C:\Documents and Settings\andre\Application Data\Skype\touschaut\profile16384.dbb Object is locked skipped C:\Documents and Settings\andre\Application Data\Skype\touschaut\user1024.dbb Object is locked skipped C:\Documents and Settings\andre\Application Data\Skype\touschaut\user256.dbb Object is locked skipped C:\Documents and Settings\andre\Application Data\Skype\touschaut\voicemail256.dbb Object is locked skipped C:\Documents and Settings\andre\Cookies\index.dat Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.cf8dd223.ini.inuse Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\andre\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\andre\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\andre\Local Settings\Historique\History.IE5\MSHist012006090920060910\index.dat Object is locked skipped C:\Documents and Settings\andre\Local Settings\Temp\~DF5791.tmp Object is locked skipped C:\Documents and Settings\andre\Local Settings\Temp\~DFCD98.tmp Object is locked skipped C:\Documents and Settings\andre\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\andre\ntuser.dat Object is locked skipped C:\Documents and Settings\andre\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000017.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000360.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000363.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000385.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000386.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000387.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000388.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000389.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000391.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000392.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000393.exe Infected: Trojan.Win32.Dialer.qy skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000394.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000395.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000396.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000397.exe Infected: Backdoor.Win32.SdBot.aad skipped C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\change.log Object is locked skipped C:\WINDOWS\Debug\oakley.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped C:\WINDOWS\Internet Logs\YOUR-E68A77CB90.ldb Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\DEFAULT Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SYSTEM Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped C:\WINDOWS\system32\drivers\fidbox2.dat Object is locked skipped C:\WINDOWS\system32\drivers\fidbox2.idx Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\Temp\hsperfdata_SYSTEM\3780 Object is locked skipped C:\WINDOWS\Temp\ZLT067a0.TMP Object is locked skipped C:\WINDOWS\Temp\ZLT067a4.TMP Object is locked skipped C:\WINDOWS\Temp\~DF451D.tmp Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped Scan process completed. GO CMD C:\WINDOWS\System32\vsconfig.xml -->08/09/2006 23:58:08 C:\WINDOWS\System32\CONFIG.NT -->08/09/2006 21:17:14 C:\WINDOWS\System32\zllictbl.dat -->08/09/2006 20:40:08 C:\WINDOWS\System32\tftp.exe -->08/09/2006 19:28:48 C:\WINDOWS\System32\ftp.exe -->08/09/2006 19:28:48 C:\WINDOWS\System32\wpa.dbl -->08/09/2006 17:40:26 C:\WINDOWS\System32\vsutil_loc040c.dll -->23/08/2006 23:39:32 C:\WINDOWS\System32\vsdatant.sys -->23/08/2006 23:38:36 C:\WINDOWS\System32\zlcommdb.dll -->23/08/2006 23:38:06 C:\WINDOWS\System32\zlcomm.dll -->23/08/2006 23:38:06 C:\WINDOWS\System32\vsxml.dll -->23/08/2006 23:38:04 C:\WINDOWS\System32\vswmi.dll -->23/08/2006 23:38:04 C:\WINDOWS\System32\vsutil.dll -->23/08/2006 23:38:04 C:\WINDOWS\System32\vsregexp.dll -->23/08/2006 23:38:02 C:\WINDOWS\System32\vspubapi.dll -->23/08/2006 23:38:02 C:\WINDOWS\System32\vsmonapi.dll -->23/08/2006 23:38:00 C:\WINDOWS\System32\vsinit.dll -->23/08/2006 23:38:00 C:\WINDOWS\System32\vsdata.dll -->23/08/2006 23:37:58 C:\WINDOWS\System32\libeay32_0.9.6l.dll -->23/08/2006 23:37:52 C:\WINDOWS\System32\sfc_os.dll -->23/08/2006 19:23:06 C:\WINDOWS\System32\wuredist.cab -->15/08/2006 14:44:38 C:\WINDOWS\System32\tmpF0A39.FOT -->14/08/2006 14:32:49 C:\WINDOWS\System32\tmp2A939.FOT -->14/08/2006 14:32:49 C:\WINDOWS\System32\tmp1D939.FOT -->14/08/2006 14:32:49 C:\WINDOWS\System32\tmp1B939.FOT -->14/08/2006 14:32:49 C:\WINDOWS\setupapi.log -->09/09/2006 00:08:22 C:\WINDOWS\0.log -->08/09/2006 23:58:06 C:\WINDOWS\wiadebug.log -->08/09/2006 23:57:04 C:\WINDOWS\WindowsUpdate.log -->08/09/2006 23:57:03 C:\WINDOWS\wiaservc.log -->08/09/2006 23:56:56 C:\WINDOWS\bootstat.dat -->08/09/2006 23:56:25 C:\WINDOWS\ntbtlog.txt -->08/09/2006 23:55:09 C:\WINDOWS\setupact.log -->08/09/2006 23:01:59 C:\WINDOWS\SchedLgU.Txt -->08/09/2006 22:57:32 C:\WINDOWS\WGA.log -->08/09/2006 18:58:50 C:\WINDOWS\setuperr.log -->08/09/2006 18:58:36 C:\WINDOWS\ModemLog_Aztech CNR V.92 Modem.txt -->26/08/2006 17:25:55 C:\WINDOWS\Maxi Puzzles.bmp -->19/08/2006 11:05:56 C:\WINDOWS\hpiins01.dat -->14/08/2006 14:20:10 C:\WINDOWS\win.ini -->04/08/2006 20:24:32 C:\WINDOWS\bwUnin-6.1.0.145L.exe |20/03/2006 16:09:12 C:\WINDOWS\imap.exe |08/07/2006 15:00:49 C:\WINDOWS\sllights.exe |01/01/1980 01:00:00 C:\WINDOWS\smcfg.exe |01/01/1980 01:00:00 C:\WINDOWS\UpdtNv28.exe |20/03/2006 18:09:31 C:\WINDOWS\system32\append.exe |30/09/2002 13:48:50 C:\WINDOWS\system32\ati2evxx.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\ati2sgag.exe |20/03/2006 16:03:50 C:\WINDOWS\system32\debug.exe |30/09/2002 13:48:56 C:\WINDOWS\system32\DivXsm.exe |23/11/2005 06:00:00 C:\WINDOWS\system32\dosx.exe |30/09/2002 13:48:56 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34 C:\WINDOWS\system32\edlin.exe |30/09/2002 13:49:05 C:\WINDOWS\system32\exe2bin.exe |30/09/2002 13:49:05 C:\WINDOWS\system32\fastopen.exe |30/09/2002 13:49:06 C:\WINDOWS\system32\ftp.exe |30/09/2002 13:49:07 C:\WINDOWS\system32\mem.exe |30/09/2002 13:49:13 C:\WINDOWS\system32\mscdexnt.exe |30/09/2002 13:49:15 C:\WINDOWS\system32\nlsfunc.exe |30/09/2002 13:49:20 C:\WINDOWS\system32\redir.exe |30/09/2002 13:49:26 C:\WINDOWS\system32\setver.exe |30/09/2002 13:49:29 C:\WINDOWS\system32\share.exe |30/09/2002 13:49:29 C:\WINDOWS\system32\slserv.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\srkey.exe |05/04/2006 20:44:58 C:\WINDOWS\system32\tftp.exe |30/09/2002 13:49:34 C:\WINDOWS\system32\amr_cpl.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\amstream.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\APmpg4v1.dll |08/05/2006 15:31:30 C:\WINDOWS\system32\Chkmes.dll |17/07/2002 16:06:40 C:\WINDOWS\system32\compatUI.dll |30/09/2002 13:48:54 C:\WINDOWS\system32\cook3260.dll |26/03/2006 10:46:16 C:\WINDOWS\system32\DivXWMPExtType.dll |24/01/2006 20:08:29 C:\WINDOWS\system32\fpxlib.dll |20/03/2006 18:33:37 C:\WINDOWS\system32\Ir32_32.dll |30/09/2002 13:49:10 C:\WINDOWS\system32\Iyvu9_32.dll |27/03/2006 10:58:38 C:\WINDOWS\system32\jpeglib.dll |20/03/2006 18:33:37 C:\WINDOWS\system32\LGUICOM.DLL |20/03/2006 16:01:17 C:\WINDOWS\system32\libeay32_0.9.6l.dll |08/09/2006 20:27:55 C:\WINDOWS\system32\lockout.dll |24/05/2002 02:00:00 C:\WINDOWS\system32\lockres.dll |24/05/2002 02:00:00 C:\WINDOWS\system32\mciqtz32.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\msdmo(2).dll |20/03/2006 18:34:00 C:\WINDOWS\system32\msdmo.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\msencode.dll |30/09/2002 13:49:16 C:\WINDOWS\system32\msiosd32.dll |20/03/2006 16:09:34 C:\WINDOWS\system32\MSRTEDIT.DLL |22/01/1999 20:46:58 C:\WINDOWS\system32\MSVCRT10.DLL |24/03/2006 11:38:49 C:\WINDOWS\system32\ogg.dll |21/03/2006 11:42:55 C:\WINDOWS\system32\OggDS.dll |21/03/2006 11:42:56 C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16 C:\WINDOWS\system32\psisdecd.dll |23/03/2006 14:02:59 C:\WINDOWS\system32\qedwipes.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\qt-dx331.dll |12/08/2005 23:57:09 C:\WINDOWS\system32\qt-mt331.dll |01/09/2004 17:49:17 C:\WINDOWS\system32\rtclcmg32.dll |03/04/2006 15:02:29 C:\WINDOWS\system32\sbe.dll |30/09/2002 13:49:29 C:\WINDOWS\system32\slextspk.dll |01/01/1980 01:00:00 C:\WINDOWS\system32\tsd32.dll |30/09/2002 13:49:35 C:\WINDOWS\system32\tsseCryp.dll |17/09/2001 13:00:00 C:\WINDOWS\system32\VCkNFS.dll |17/07/2002 16:06:40 C:\WINDOWS\system32\VDIError.dll |17/07/2002 16:06:40 C:\WINDOWS\system32\vorbis.dll |21/03/2006 11:42:55 C:\WINDOWS\system32\vorbisenc.dll |21/03/2006 11:42:56 C:\WINDOWS\system32\win87em.dll |30/09/2002 13:49:38 C:\WINDOWS\system32\xvidcore.dll |21/03/2006 11:42:54 C:\WINDOWS\system32\xvidvfw.dll |21/03/2006 11:42:54 C:\WINDOWS\imap.exe |08/07/2006 15:00:49 C:\WINDOWS\UpdtNv28.exe |20/03/2006 18:09:31 C:\WINDOWS\system32\append.exe |30/09/2002 13:48:50 C:\WINDOWS\system32\ati2evxx.exe |01/01/1980 01:00:00 C:\WINDOWS\system32\debug.exe |30/09/2002 13:48:56 C:\WINDOWS\system32\DivXsm.exe |23/11/2005 06:00:00 C:\WINDOWS\system32\dosx.exe |30/09/2002 13:48:56 C:\WINDOWS\system32\edlin.exe |30/09/2002 13:49:05 C:\WINDOWS\system32\exe2bin.exe |30/09/2002 13:49:05 C:\WINDOWS\system32\fastopen.exe |30/09/2002 13:49:06 C:\WINDOWS\system32\ftp.exe |30/09/2002 13:49:07 C:\WINDOWS\system32\mem.exe |30/09/2002 13:49:13 C:\WINDOWS\system32\mscdexnt.exe |30/09/2002 13:49:15 C:\WINDOWS\system32\nlsfunc.exe |30/09/2002 13:49:20 C:\WINDOWS\system32\redir.exe |30/09/2002 13:49:26 C:\WINDOWS\system32\setver.exe |30/09/2002 13:49:29 C:\WINDOWS\system32\share.exe |30/09/2002 13:49:29 C:\WINDOWS\system32\tftp.exe |30/09/2002 13:49:34 C:\WINDOWS\system32\amstream.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\APmpg4v1.dll |08/05/2006 15:31:30 C:\WINDOWS\system32\DivXWMPExtType.dll |24/01/2006 20:08:29 C:\WINDOWS\system32\Ir32_32.dll |30/09/2002 13:49:10 C:\WINDOWS\system32\Iyvu9_32.dll |27/03/2006 10:58:38 C:\WINDOWS\system32\jpeglib.dll |20/03/2006 18:33:37 C:\WINDOWS\system32\LGUICOM.DLL |20/03/2006 16:01:17 C:\WINDOWS\system32\libeay32_0.9.6l.dll |08/09/2006 20:27:55 C:\WINDOWS\system32\lockout.dll |24/05/2002 02:00:00 C:\WINDOWS\system32\lockres.dll |24/05/2002 02:00:00 C:\WINDOWS\system32\mciqtz32.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\msdmo(2).dll |20/03/2006 18:34:00 C:\WINDOWS\system32\msdmo.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\msencode.dll |30/09/2002 13:49:16 C:\WINDOWS\system32\msiosd32.dll |20/03/2006 16:09:34 C:\WINDOWS\system32\MSVCRT10.DLL |24/03/2006 11:38:49 C:\WINDOWS\system32\ogg.dll |21/03/2006 11:42:55 C:\WINDOWS\system32\psisdecd.dll |23/03/2006 14:02:59 C:\WINDOWS\system32\qedwipes.dll |20/03/2006 18:34:00 C:\WINDOWS\system32\qt-dx331.dll |12/08/2005 23:57:09 C:\WINDOWS\system32\qt-mt331.dll |01/09/2004 17:49:17 C:\WINDOWS\system32\rtclcmg32.dll |03/04/2006 15:02:29 C:\WINDOWS\system32\sbe.dll |30/09/2002 13:49:29 C:\WINDOWS\system32\tsd32.dll |30/09/2002 13:49:35 C:\WINDOWS\system32\tsseCryp.dll |17/09/2001 13:00:00 C:\WINDOWS\system32\VCkNFS.dll |17/07/2002 16:06:40 C:\WINDOWS\system32\VDIError.dll |17/07/2002 16:06:40 C:\WINDOWS\system32\vorbis.dll |21/03/2006 11:42:55 C:\WINDOWS\system32\vorbisenc.dll |21/03/2006 11:42:56 C:\WINDOWS\system32\win87em.dll |30/09/2002 13:49:38 C:\WINDOWS\system32\xvidcore.dll |21/03/2006 11:42:54 C:\WINDOWS\system32\xvidvfw.dll |21/03/2006 11:42:54 Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est EC5D-BF49 Répertoire de C:\WINDOWS\system32 30/08/2002 14:00 4 096 csrss.exe 1 fichier(s) 4 096 octets 0 Rép(s) 110 336 507 904 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est EC5D-BF49 Répertoire de C:\WINDOWS\Downloaded Program Files 09/09/2006 00:08 <REP> . 09/09/2006 00:08 <REP> .. 30/09/2002 14:03 65 desktop.ini 14/10/1997 19:52 697 DirectAnimation Java Classes.osd 25/07/2002 18:13 24 576 dwusplay.dll 25/07/2002 18:13 196 608 dwusplay.exe 25/07/2002 18:05 172 032 isusweb.dll 10/11/2005 14:05 876 jinstall-1_5_0_06.inf 08/08/2006 11:45 576 kavwebscan.inf 20/01/2000 16:25 1 162 Microsoft XML Parser for Java.osd 26/05/2005 04:19 293 muweb.inf 04/07/2006 13:58 205 264 speedtest2.dll 02/12/2005 12:55 5 101 swflash.inf 11 fichier(s) 607 250 octets Total des fichiers listés : 11 fichier(s) 607 250 octets 2 Rép(s) 110 336 507 904 octets libres Liste des programmes installes AC-3 ACM Decompressor Ad-Aware SE Personal Adobe Download Manager 2.0 (Supprimer uniquement) Adobe Reader 7.0.8 - Français Adobe® Photoshop® Album Edition Découverte 3.0 AngelPotion Video Codec V1 AutoUpdate Azureus BufferChm CartaGoGo v2.0.8 Catalencoder CCleaner (remove only) CDex extraction audio Codeur Windows Media Série 9 Codeur Windows Media Série 9 Complément Microsoft Word pour Microsoft Works Suite Correctif Windows XP - KB822603 CreativeProjects CreativeProjectsTemplates CueClub wfr CueTour DATA BECKER ADSL Booster Destinations Director DivX DivX Converter DivX Player DivX Player DivX Web Player DVD Shrink 3.2 eMule Encyclopédie Microsoft Encarta 2005 ewido anti-spyware 4.0 ffdshow (remove only) Google Earth Google Toolbar for Internet Explorer Hercules WebCam Station HijackThis 1.99.1 HP Digital Photo Advisor HP Image Zone 4.5 hp psc 900 series HP Share-to-Web HP Software Update HPSystemDiagnostics IncrediMail Xe Indeo® software Instant VideoMPX InstantShare J2SE Runtime Environment 5.0 Update 6 Java 2 Runtime Environment Standard Edition v1.3.1_03 Kaspersky Anti-Virus 6.0 Kaspersky Anti-Virus 6.0 Kaspersky Online Scanner Kyodai Mahjongg 2006 v1.0 Lecteur Windows Media 10 LiveReg (Symantec Corporation) LiveUpdate 2.5 (Symantec Corporation) Logiciel d'impression photo HP Macromedia Flash Player 8 Magic Ball fr MagicBall wfr Maxi Mah Jong 3D Maxi Puzzles Messager Wanadoo Micro Application - Mah-Jong Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 French Language Pack Microsoft AutoRoute 2005 Microsoft Digital Image Library 9 - Blocker Microsoft Money Microsoft Office 2000 CD-ROM 2 Microsoft Office 2000 Professional Microsoft Photo Premium 10 Microsoft Photo Premium 10 Microsoft Picture It! Album 10 Microsoft Word 2002 Microsoft Works MioNet Mise à jour de sécurité pour Windows XP (KB914798) Mise à niveau de Works MP3 Player Utilities MUSK Codec Pack v5.2 (UPDATE) Nero Suite Packard Bell Companion PanoStandAlone PerfectDisk Philips SPC 900NC PC Camera Philips VLounge PhotoGallery PhotoShow 2 Pochette Dvd PowerDVD QFolder Roxio RecordNow! SafeCast Shared Components Sandlot Games Client Services ShareIns Shockwave SIPPS Skin Creator SkinsHP1 Skype 2.0 Sonic RecordNow DX Sélecteur d'installation de Microsoft Works 2005 Torseur version 1.54 TrayApp Ulead VideoStudio 6 SE DVD Ulead VideoStudio 8.0 SE VCD Unload VirtualDrive VP6 VFW Codec Wanadoo WebFldrs XP WebReg Windows Genuine Advantage Validation Tool (KB892130) Windows Live Messenger Windows Live Sign-in Assistant Windows Media Format Runtime XviD MPEG-4 Video Codec Yahoo! Toolbar Yahoo! Toolbar avec bloqueur de fenêtres pop-up ZoneAlarm Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est EC5D-BF49 Répertoire de C:\Program Files 08/09/2006 23:01 <REP> . 08/09/2006 23:01 <REP> .. 19/08/2006 19:59 <REP> a-squared Anti-Malware 28/04/2006 15:28 <REP> Adobe 21/03/2006 10:23 <REP> Ahead 22/05/2006 11:33 <REP> Alwil Software 27/07/2006 19:47 <REP> AngelPotion Video Codec V1 20/03/2006 16:10 <REP> Audioneer 13/06/2006 16:44 <REP> AVSMedia 04/07/2006 13:18 <REP> Azureus 20/03/2006 16:09 <REP> BackWeb 31/03/2006 10:44 <REP> CartaGoGo 21/03/2006 11:43 <REP> Catalencoder 19/08/2006 19:59 <REP> CCleaner 28/04/2006 10:16 <REP> CDex_150 01/05/2006 19:26 <REP> Common Files 30/09/2002 14:01 <REP> ComPlus Applications 20/03/2006 16:17 <REP> CyberLink 03/04/2006 10:57 <REP> DATA BECKER 04/08/2006 01:02 <REP> DesignPro 2000 21/04/2006 10:27 <REP> DivX 21/03/2006 11:46 <REP> DVD Shrink 19/08/2006 20:30 <REP> eMule 22/03/2006 21:56 <REP> Encarta 08/09/2006 23:04 <REP> ewido anti-spyware 4.0 29/05/2006 16:25 <REP> FairUse Wizard 04/07/2006 18:55 <REP> ffdshow 14/08/2006 15:18 <REP> Fichiers communs 24/06/2006 19:45 <REP> Google 20/03/2006 16:12 <REP> HandyBits 20/03/2006 16:08 <REP> hdreg 24/03/2006 11:09 <REP> Hercules 14/08/2006 14:19 <REP> Hewlett-Packard 19/08/2006 19:59 <REP> HP 27/07/2006 19:51 <REP> IncrediMail 27/03/2006 10:58 <REP> Intel 14/08/2006 14:16 <REP> Internet Explorer 05/04/2006 13:22 <REP> Java 20/03/2006 16:54 <REP> JavaSoft 08/09/2006 20:56 <REP> Kaspersky Lab 04/07/2006 18:55 <REP> Kyodai Mahjongg 2006 26/03/2006 11:05 <REP> Lavasoft 15/07/2006 19:24 <REP> MediaCoder 27/07/2006 19:56 <REP> Messager Wanadoo 27/07/2006 19:50 <REP> Messenger 20/04/2006 16:31 <REP> Micro Application 22/03/2006 22:01 <REP> Microsoft AutoRoute 23/03/2006 11:06 <REP> microsoft frontpage 12/05/2006 10:47 <REP> Microsoft Money 12/05/2006 10:49 <REP> microsoft money 2005 23/03/2006 11:07 <REP> Microsoft Office 20/03/2006 16:11 <REP> Microsoft Visual Studio 22/03/2006 21:42 <REP> Microsoft Works 22/03/2006 21:29 <REP> Microsoft Works Suite 2005 29/07/2006 22:32 <REP> MioNet 20/03/2006 16:01 <REP> MouseWare 27/07/2006 19:49 <REP> Movie Maker 28/04/2006 10:13 <REP> MP3Gain 30/09/2002 14:00 <REP> MSN 30/09/2002 14:00 <REP> MSN Gaming Zone 19/08/2006 19:58 <REP> MSN Messenger 18/05/2006 11:27 <REP> MUSK Codec Pack v5 19/08/2006 20:00 <REP> My Company Name 27/07/2006 19:49 <REP> NetMeeting 06/04/2006 13:00 <REP> Oberon Media 26/03/2006 11:21 <REP> On2 Technologies 27/07/2006 19:49 <REP> Outlook Express 20/03/2006 18:33 <REP> Philips 22/03/2006 21:53 <REP> Picture It! Premium 10 21/03/2006 11:43 <REP> Pochette Dvd 20/06/2006 09:55 <REP> QuickTime 28/04/2006 10:08 <REP> Raxco 20/03/2006 16:10 <REP> Real 22/05/2006 14:46 <REP> RegCleaner 17/04/2006 16:00 <REP> Roxio 20/03/2006 16:16 <REP> sbapps 30/09/2002 14:00 <REP> Services en ligne 25/03/2006 14:00 <REP> Simple Star 21/03/2006 11:11 <REP> Skype 23/03/2006 11:07 <REP> Snapshot Viewer 29/05/2006 10:50 <REP> Symantec 09/04/2006 19:52 <REP> Ulead Systems 20/03/2006 16:13 <REP> Virtual CD v4 SDK 06/05/2006 20:21 <REP> vso 08/09/2006 17:40 <REP> Wanadoo 19/08/2006 19:58 <REP> Windows Live Toolbar 25/03/2006 10:47 <REP> Windows Media Components 27/07/2006 19:49 <REP> Windows Media Player 27/07/2006 19:49 <REP> Windows NT 30/09/2002 14:05 <REP> xerox 26/03/2006 11:21 <REP> XviD 28/04/2006 15:27 <REP> Yahoo! 08/09/2006 20:27 <REP> Zone Labs 0 fichier(s) 0 octets 93 Rép(s) 110 336 475 136 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est EC5D-BF49 Répertoire de C:\Program Files\fichiers communs 14/08/2006 15:18 <REP> . 14/08/2006 15:18 <REP> .. 07/06/2006 19:05 <REP> Adobe 21/03/2006 10:21 <REP> Ahead 20/03/2006 18:34 <REP> ArcSoft 13/06/2006 16:44 <REP> AVSMedia 20/03/2006 16:11 <REP> Designer 19/08/2006 20:00 <REP> HP 25/03/2006 10:47 <REP> InstallShield 05/04/2006 13:19 <REP> Java 20/03/2006 16:01 <REP> Logitech 24/03/2006 20:29 <REP> Macrovision Shared 15/08/2006 14:44 <REP> Microsoft Shared 30/09/2002 14:02 <REP> MSSoap 24/03/2006 20:29 <REP> Oberon Media 30/09/2002 13:55 <REP> ODBC 28/04/2006 10:08 <REP> Raxco 20/03/2006 16:10 <REP> Real 08/09/2006 23:51 <REP> Sandlot Shared 30/09/2002 14:02 <REP> Services 30/09/2002 13:55 <REP> SpeechEngines 29/05/2006 10:51 <REP> Symantec Shared 27/07/2006 19:49 <REP> System 20/03/2006 16:10 <REP> TVNavigTechnologies Shared 25/03/2006 11:40 <REP> Ulead Systems 19/08/2006 20:00 <REP> Wise Installation Wizard 0 fichier(s) 0 octets 26 Rép(s) 110 336 475 136 octets libres Le volume dans le lecteur C s'appelle HDD Le numéro de série du volume est EC5D-BF49 Répertoire de C:\Program Files\common files 01/05/2006 19:26 <REP> . 01/05/2006 19:26 <REP> .. 19/08/2006 19:59 <REP> Companion Wizard 0 fichier(s) 0 octets 3 Rép(s) 110 336 475 136 octets libres c:\Documents and Settings\andre\Application Data\Microsoft\Installer\{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}\_26e91eb.exe c:\Documents and Settings\andre\Application Data\Microsoft\Installer\{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}\_5af141bb.exe c:\Documents and Settings\andre\Application Data\Microsoft\Installer\{5BBFB0E4-2250-49C3-A8A3-65BE2197D13B}\_bb32ea6.exe c:\Documents and Settings\andre\Bureau\ewido-setup.exe c:\Documents and Settings\andre\Bureau\HijackThis.exe c:\Documents and Settings\andre\Bureau\kav6.0.0.303fr.exe c:\Documents and Settings\andre\Bureau\TU2006TrialFR.exe c:\Documents and Settings\andre\Bureau\zlsSetup_65_737_000_fr.exe c:\Documents and Settings\andre\Bureau\clean\clean\pskill.exe c:\Documents and Settings\andre\Bureau\DiagHelp\diaghelp\FilesInfoCmd.exe c:\Documents and Settings\andre\Bureau\DiagHelp\diaghelp\Fport.exe c:\Documents and Settings\andre\Bureau\DiagHelp\diaghelp\grep.exe c:\Documents and Settings\andre\Bureau\DiagHelp\diaghelp\LFiles.exe c:\Documents and Settings\andre\Bureau\DiagHelp\diaghelp\LISTDLLS.exe c:\Documents and Settings\andre\Bureau\DiagHelp\diaghelp\pslist.exe c:\Documents and Settings\andre\Bureau\DiagHelp\diaghelp\streams.exe c:\Documents and Settings\andre\Bureau\vidéo jeux lecteur\USBAV708.EXE c:\Documents and Settings\andre\Local Settings\Application Data\IM\Identities\{3D7E4B3B-2F4E-47E1-BA5B-06226DAEA9FF}\Message Store\Attachments\pochette dvd.exe c:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Bases\avcmhk4.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll c:\Documents and Settings\andre\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll

ewido --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 23:52:07 08/09/2006 + Scan result: C:\Program Files\Fichiers communs\Sandlot Shared\slghex.dll -> Adware.SpywareStorm : Cleaned with backup (quarantined). C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000063.exe -> Backdoor.Codbot.bo : Cleaned with backup (quarantined). C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000362.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000365.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000366.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000367.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\WINDOWS\svahost.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\WINDOWS\winamp.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\WINDOWS\wmiapsrv.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\WINDOWS\wordpad.exe -> Backdoor.SdBot.aad : Cleaned with backup (quarantined). C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\PEE7VVKS\2[1].exe -> Backdoor.SdBot.atz : Cleaned with backup (quarantined). C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP1\A0000361.exe -> Backdoor.SdBot.atz : Cleaned with backup (quarantined). C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\I9WFKJS2\adult1[1].exe -> Dialer.PlayGames.l : Cleaned with backup (quarantined). C:\v6c9k4o4e4f7.exe -> Dialer.PlayGames.l : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\speedtest2.dll -> Not-A-Virus.Downloader.Win32.InsTool.a : Ignored. C:\Documents and Settings\andre\Cookies\andre@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\andre\Cookies\[email protected][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\andre\Cookies\[email protected][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\andre\Cookies\andre@weborama[1].txt -> TrackingCookie.Weborama : Cleaned. C:\96fp72.exe -> Trojan.Dialer.qy : Cleaned with backup (quarantined). C:\96p72.exe -> Trojan.Dialer.qy : Cleaned with backup (quarantined). C:\96z9p72.exe -> Trojan.Dialer.qy : Cleaned with backup (quarantined). C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\PEE7VVKS\moviebrowser[1].exe -> Trojan.Dialer.qy : Cleaned with backup (quarantined). C:\PPL.exe -> Trojan.Dialer.qy : Cleaned with backup (quarantined). C:\z3w8k7r2.exe -> Trojan.Dialer.qy : Cleaned with backup (quarantined). C:\mq1.exe -> Trojan.Dialer.u : Cleaned with backup (quarantined). C:\ms1.exe -> Trojan.Dialer.u : Cleaned with backup (quarantined). C:\mwe1.exe -> Trojan.Dialer.u : Cleaned with backup (quarantined). ::Report end clean Script clean par Malekal_morte - http://www.malekal.com Microsoft Windows XP [version 5.1.2600] Script execute en mode sans echec *** Suppression de fichiers sur C: *** Suppression des fichiers dans C:\WINDOWS\ C:\WINDOWS\config.exe FOUND C:\WINDOWS\csrss.exe FOUND C:\WINDOWS\internet.exe FOUND C:\WINDOWS\services.exe FOUND *** Suppression des fichiers dans C:\WINDOWS\system32 C:\WINDOWS\system32\eraseme_?????.exe FOUND C:\WINDOWS\system32\i FOUND C:\WINDOWS\system32\setup_?????.exe FOUND C:\WINDOWS\system32\stera.job FOUND "C:\Program Files\BoontyGames\" FOUND "C:\Program Files\ipwins\" FOUND "C:\Program Files\TClock\" FOUND "C:\Program Files\Windows\" FOUND *** Suppression des clefs du registre effectuee.. HijackThis Logfile of HijackThis v1.99.1 Scan saved at 00:04:08, on 09/09/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Apps\ActivBoard\MMKeybd.exe C:\PROGRA~1\MESSAG~1\StartMessager.exe C:\WINDOWS\System32\drivers\PhiBtn.exe C:\WINDOWS\System32\drivers\Tray900.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Micro Application\VirtualDrive\VDTask.exe C:\WINDOWS\vcdplayx.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\PROGRA~1\Wanadoo\CnxMon.exe C:\PROGRA~1\Wanadoo\TaskbarIcon.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe C:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe C:\Apps\ActivBoard\nhksrv.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\Apps\ActivBoard\TrayMon.exe C:\Apps\ActivBoard\OSD.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\MioNet\MioNetManager.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe C:\Program Files\MioNet\jvm\bin\MioNet.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\andre\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.packardbell.fr/center R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe O4 - HKLM\..\Run: [NECStartPage] C:\apps\HomePage\HomePgui.exe O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo O4 - HKLM\..\Run: [PhiBtn] %SystemRoot%\System32\drivers\PhiBtn.exe O4 - HKLM\..\Run: [Traymin900] %SystemRoot%\System32\drivers\Tray900.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\Micro Application\VirtualDrive\VDTask.exe" /AutoRestore O4 - HKLM\..\Run: [vcdplayx] "C:\WINDOWS\vcdplayx.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" O4 - HKCU\..\Run: [incrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HPAiODevice(hp psc 900 series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1157734346578 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing) O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe" -s "C:\Program Files\MioNet\wrapper.conf (file missing) O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Sysinfo Helper Service (Sysinfo Helper) - Unknown owner - C:\WINDOWS\System32\sysinfo.exe (file missing) O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

desolé pas maj impossible installation impossible message "vous devez quitter kapersky pour poursuivre l'installation" ..... et je ne l'ai pas...

non non je bossais ... mise à jour de kaperski impossible.....;plantage...j'ai desinstaller avast (des centaines de fenetres s'installaient à chaque fois que je faisais les manip...je continue...merci de ta patience

zone alarm installé.....

merci de ta reponse si rapide installation en cours....

bonjour à tous, après pas mal de pb sur ma machine, j'ai essayé de nettoyer, ewido, ccleaner, avast, etc.... j'aimerai posté un log hijackthis pour voir ce que vous en pensez.....merci d'avance Logfile of HijackThis v1.99.1 Scan saved at 19:40:58, on 08/09/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\SOUNDMAN.EXE C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Apps\ActivBoard\MMKeybd.exe C:\PROGRA~1\MESSAG~1\StartMessager.exe C:\WINDOWS\System32\drivers\PhiBtn.exe C:\WINDOWS\System32\drivers\Tray900.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Micro Application\VirtualDrive\VDTask.exe C:\WINDOWS\vcdplayx.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\PROGRA~1\Wanadoo\CnxMon.exe C:\PROGRA~1\Wanadoo\TaskbarIcon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe C:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe C:\Apps\ActivBoard\TrayMon.exe C:\Apps\ActivBoard\OSD.exe C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe C:\Apps\ActivBoard\nhksrv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\WINDOWS\csrss.exe C:\WINDOWS\config.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\MioNet\MioNetManager.exe C:\Program Files\MioNet\jvm\bin\MioNet.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\svahost.exe C:\WINDOWS\System32\sysinfo.exe C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\andre\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.packardbell.fr/center R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe O4 - HKLM\..\Run: [NECStartPage] C:\apps\HomePage\HomePgui.exe O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo O4 - HKLM\..\Run: [PhiBtn] %SystemRoot%\System32\drivers\PhiBtn.exe O4 - HKLM\..\Run: [Traymin900] %SystemRoot%\System32\drivers\Tray900.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\Micro Application\VirtualDrive\VDTask.exe" /AutoRestore O4 - HKLM\..\Run: [vcdplayx] "C:\WINDOWS\vcdplayx.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKCU\..\Run: [incrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HPAiODevice(hp psc 900 series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp psc 900 series\Bin\hpobrt07.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1157734346578 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE O23 - Service: Clients Server Runtime Process - Unknown owner - C:\WINDOWS\csrss.exe O23 - Service: windows config service (config) - Unknown owner - C:\WINDOWS\config.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe" -s "C:\Program Files\MioNet\wrapper.conf (file missing) O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: svahost - Unknown owner - C:\WINDOWS\svahost.exe O23 - Service: Sysinfo Helper Service (Sysinfo Helper) - Unknown owner - C:\WINDOWS\System32\sysinfo.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe encore merci et bonne soirée à tous