poutoupoute

le rapport que bitdefender veux envoyer : BitDefender Online Scanner - Rapport virus en temps réel Généré à: Thu, Oct 16, 2008 - 01:24:06 Info d'analyse Fichiers scannés 56299 Infectés Fichiers 6 Virus Détectés Application.Motherboardmon.A 3 Application.Joke.Stressrelief.B 3

voilà le résultat du scanner de bitdefender Voie d'analyse: A:\;C:\;D:\;E:\;F:\; Statistiques Temps 00:39:33 Fichiers 52020 Directoires 4273 Secteurs de boot 0 Archives 1051 Paquets programmes 4279 Résultats Virus identifiés 2 Fichiers infectés 6 Fichiers suspects 0 Avertissements 0 Désinfectés 0 Fichiers effacés 6 Info sur les moteurs Définition virus 1870760 Version des moteurs AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14) Analyse des plugins 16 Archive des plugins 43 Unpack des plugins 7 E-mail plugins 6 Système plugins 4 Paramètres d'analyse Première action Désinfecté Seconde Action Supprimé Heuristique Oui Acceptez les avertissements Oui Extensions analysées exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;pp t;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;ch m ;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas; Excludez les extensions Analyse d'emails Oui Analyse des Archives Oui Analyser paquets programmes Oui Analyse des fichiers Oui Analyse de boot Oui Fichier analysé Statut C:\Documents and Settings\Van Cappellen Julie\Local Settings\Application Data\Microsoft\CD Burning\Persojeux\ecran.EXE Détecté avec: Application.Joke.Stressrelief.B C:\Documents and Settings\Van Cappellen Julie\Local Settings\Application Data\Microsoft\CD Burning\Persojeux\ecran.EXE Echec de la désinfection C:\Documents and Settings\Van Cappellen Julie\Local Settings\Application Data\Microsoft\CD Burning\Persojeux\ecran.EXE Supprimé C:\Documents and Settings\Van Cappellen Julie\Local Settings\Application Data\Microsoft\CD Burning\Persojeux\moo.dll Détecté avec: Application.Motherboardmon.A C:\Documents and Settings\Van Cappellen Julie\Local Settings\Application Data\Microsoft\CD Burning\Persojeux\moo.dll Echec de la désinfection C:\Documents and Settings\Van Cappellen Julie\Local Settings\Application Data\Microsoft\CD Burning\Persojeux\moo.dll Supprimé C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP273\A0057888.EXE Détecté avec: Application.Joke.Stressrelief.B C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP273\A0057888.EXE Echec de la désinfection C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP273\A0057888.EXE Supprimé C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP273\A0057889.dll Détecté avec: Application.Motherboardmon.A C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP273\A0057889.dll Echec de la désinfection C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP273\A0057889.dll Supprimé C:\BSmaxScripT[7.0]\Persojeux\ecran.EXE Détecté avec: Application.Joke.Stressrelief.B C:\BSmaxScripT[7.0]\Persojeux\ecran.EXE Echec de la désinfection C:\BSmaxScripT[7.0]\Persojeux\ecran.EXE Supprimé C:\BSmaxScripT[7.0]\Persojeux\moo.dll Détecté avec: Application.Motherboardmon.A C:\BSmaxScripT[7.0]\Persojeux\moo.dll Echec de la désinfection C:\BSmaxScripT[7.0]\Persojeux\moo.dll Supprimé

voilà se que sa donne pour msnfix :s read file error: C:\DOCUME~1\VANCAP~1\LOCALS~1\Temp\winlogon.exe, Le fichier spécifié est introuvable. read file error: C:\DOCUME~1\VANCAP~1\LOCALS~1\Temp\services.exe, Le fichier spécifié est introuvable. read file error: C:\WINDOWS\system32\cftmon.exe, Le fichier spécifié est introuvable. edit: je vient d'en refaire un il ne trouve plus rien.

pfiouuu il était temps xD -------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER 7 REPORT Wednesday, October 15, 2008 Operating System: Microsoft Windows XP Professional Service Pack 1 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Wednesday, October 15, 2008 12:24:39 Records in database: 1313232 -------------------------------------------------------------------------------- Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: A:\ C:\ D:\ E:\ F:\ Scan statistics: Files scanned: 57669 Threat name: 3 Infected objects: 4 Suspicious objects: 0 Duration of the scan: 05:18:48 File name / Threat name / Threats count C:\Documents and Settings\Van Cappellen Julie\Local Settings\Application Data\Microsoft\CD Burning\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1 C:\Documents and Settings\Van Cappellen Julie\Mes documents\docier non classer\ENJOYStaff.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 1 C:\Documents and Settings\Van Cappellen Julie\Application Data\Thunderbird\Profiles\drmr148u.default\Mail\Local Folders\Inbox Infected: Email-Worm.Win32.Warezov.fh 1 C:\BSmaxScripT[7.0]\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1 The selected area was scanned. dans la liste je connait enjoystaff, thunderbird et bsmaxscript, j'ai besoin de sa pour travaillée mais le premier aucune idée, on vois qu'il vient de mirc mais duquel et ce que c'est.. aucune idée :/

alors voici déjà la vérification de java Félicitations ! Vous disposez de la version Java recommandée (Version 6 Update 7). je continue le reste

bonjour Vue que j'ai un petit creux voici pour tout le monde une petite collation

mdr rater xD

génial il y a plus les blocs note merci beaucoup

heuuu c'est une webradio ou je travaille... je peut pas le supprimer :s

voilà sa donne sa mtn Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:37:12, on 15/10/2008 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\StkSrv2K.exe C:\WINDOWS\system32\ZONELABS\vsmon.exe C:\WINDOWS\Explorer.EXE C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\ENJOY Plus!\ENJOY Plus!.exe C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\Documents and Settings\Van Cappellen Julie\Mes documents\Downloads\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Startup: ENJOY Plus!.lnk = C:\Program Files\ENJOY Plus!\ENJOY Plus!.exe O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Syntek DC-112X Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkSrv2K.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe -- End of file - 6019 bytes

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:18:56, on 15/10/2008 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\StkSrv2K.exe C:\WINDOWS\system32\ZONELABS\vsmon.exe C:\WINDOWS\Explorer.EXE C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\ENJOY Plus!\ENJOY Plus!.exe C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe C:\Documents and Settings\Van Cappellen Julie\Mes documents\Downloads\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Startup: STYLUSII.TXT O4 - Startup: VIOLIN-C.BAT O4 - Startup: VIOLIN.BAT O4 - Startup: VIOLIN.PRN O4 - Startup: README.TXT O4 - Startup: ENJOY Plus!.lnk = C:\Program Files\ENJOY Plus!\ENJOY Plus!.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-BE/a-UNO1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Syntek DC-112X Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkSrv2K.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe -- End of file - 6400 bytes

voilà je suis là je croise les doigts que tu ai la solution

waouw pas grand monde dire que j'aurais pu jouée --' j'ai un de ces vilain truc que même dans la partie pour aider les gents il a jamais vu sa xD Bon je reviendrais quand mon ordi sera propre didjuuu Bûche

oké, je file au lit de toute façon... et tu sais vraiment pas d'ou sa peut venir? car je vais voir dans mon fichier C/WINDOWS/systeme32/cbm.... mais je l'ai pas en exe mais en dll --' (sa aurai été si beau qu'il soit là xD ) bonne nuit

j'ai encore les petits blocs note, voilà se que sa me dit ...

heuu je suis pas avec vista xD je suis avec XP sinon c'est cocher

voilà enfin fini xD Avira AntiVir Personal Report file date: mardi 14 octobre 2008 22:46 Scanning for 1684294 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 1) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: JULIETTE-E10L7C Version information: BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00 AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 08:57:54 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 07:56:42 LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:20 LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 07:58:54 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 10:33:34 ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 13:54:16 ANTIVIR2.VDF : 7.0.7.12 4066816 Bytes 08/10/2008 20:12:42 ANTIVIR3.VDF : 7.0.7.40 214016 Bytes 14/10/2008 20:12:42 Engineversion : 8.1.1.35 AEVDF.DLL : 8.1.0.5 102772 Bytes 25/02/2008 09:58:22 AESCRIPT.DLL : 8.1.0.76 319867 Bytes 14/10/2008 20:12:52 AESCN.DLL : 8.1.0.23 119156 Bytes 10/07/2008 12:44:50 AERDL.DLL : 8.1.1.2 438644 Bytes 14/10/2008 20:12:50 AEPACK.DLL : 8.1.2.3 364918 Bytes 14/10/2008 20:12:50 AEOFFICE.DLL : 8.1.0.25 196986 Bytes 14/10/2008 20:12:48 AEHEUR.DLL : 8.1.0.59 1438071 Bytes 14/10/2008 20:12:48 AEHELP.DLL : 8.1.0.15 115063 Bytes 10/07/2008 12:44:50 AEGEN.DLL : 8.1.0.36 315764 Bytes 14/10/2008 20:12:46 AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 08:33:22 AECORE.DLL : 8.1.1.11 172406 Bytes 14/10/2008 20:12:44 AEBB.DLL : 8.1.0.1 53617 Bytes 10/07/2008 12:44:50 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:06 AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:28:02 AVREP.DLL : 8.0.0.2 98344 Bytes 14/10/2008 20:12:44 AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:42 AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:24 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:50 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:04 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:42 NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:12 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 13:48:08 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 13:34:38 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, D:, Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: mardi 14 octobre 2008 22:46 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'epmworker.exe' - '1' Module(s) have been scanned Scan process 'Generic.exe' - '1' Module(s) have been scanned Scan process 'jucheck.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'ENJOY Plus!.exe' - '1' Module(s) have been scanned Scan process 'WINAMPA.EXE' - '1' Module(s) have been scanned Scan process 'Application Launcher.exe' - '1' Module(s) have been scanned Scan process 'JUSCHED.EXE' - '1' Module(s) have been scanned Scan process 'ZLCLIENT.EXE' - '0' Module(s) have been scanned Scan process 'WZCSLDR2.EXE' - '1' Module(s) have been scanned Scan process 'AirPlusCFG.exe' - '1' Module(s) have been scanned Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned Scan process 'VSMON.EXE' - '0' Module(s) have been scanned Scan process 'WDFMGR.EXE' - '1' Module(s) have been scanned Scan process 'StkSrv2k.exe' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'LSASS.EXE' - '1' Module(s) have been scanned Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned Scan process 'SMSS.EXE' - '1' Module(s) have been scanned 30 processes with 30 modules were scanned Starting master boot sector scan: Master boot sector HD0 [iNFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [iNFO] No virus was found! Boot sector 'D:\' [iNFO] No virus was found! Starting to scan the registry. The registry was scanned ( '47' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\WINDOWS\Temp\ZLT013da.TMP [0] Archive type: CAB (Microsoft) --> wsus3setup.cat [WARNING] No further files can be extracted from this archive. The archive will be closed C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057230.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was deleted! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057231.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '49251292.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057232.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '49251294.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057233.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '49251296.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057234.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512b7.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057239.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512b9.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057240.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512bd.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057241.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512c0.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057242.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [WARNING] The file was ignored! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057243.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was deleted! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057247.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512d1.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057248.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512d4.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057249.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512d5.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057250.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512d7.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057251.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512d9.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057252.exe [0] Archive type: RAR SFX (self extracting) --> MicroAV.cpl [DETECTION] Is the TR/FakeAV.BC.28 Trojan --> MicroAV.exe [DETECTION] Contains recognition pattern of the PHISH/Fraud.SpywarePreventer.AB phishing file/email [DETECTION] Contains recognition pattern of the DR/Fraud.UltimateAntivirus.CV dropper [NOTE] The file was moved to '492512dd.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057253.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512df.qua'! C:\System Volume Information\_restore{2A0A328E-FEF3-4D25-8543-C530DE092898}\RP262\A0057278.exe [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '492512e2.qua'! Begin scan in 'D:\' <SYSTEM_SAV> End of the scan: mardi 14 octobre 2008 23:49 Used time: 1:03:15 Hour(s) The scan has been done completely. 4321 Scanning directories 168384 Files were scanned 20 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 2 files were deleted 0 files were repaired 15 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 168363 Files not concerned 1391 Archives were scanned 3 Warnings 17 Notes

lol allez sa en est a 60%

lol pas pour moi des trucs comme sa le soir xD j'ai même peur de jurasikparc alros sa non merci xD dit c'est que sa prend du temps lol je suis qu'a 18% ta de la chance que je vais plus a l'école et que je travaille pas non plus xD attendons attendons, entouca il me met déjà 2 warnings mdrrr heuuu... tu connait un bon exorciste? xD

un quoi mdr lol oki je vais une analyse

lol si tu veux quand j'allume mon ordi et que je vais dans n'importe laquelle de mes session , des fichier bloc note s'ouvre (qui viennent de mon ancienne imprimante) et impossible de les trouvez --' sa fait bien un ans que je les cherches mdrrrr

merci beaucoup tout est ok a part encore une chose mais je trouverais a bientôt peut etre

Alors j'ai téléchargée antivir mais voilà, au moment de vouloir désinstallée avast dans le supprimer/ajouter, je clique sur supprimer et une fenêtre s'ouvre et me dit : Erreur de chargement de c:/PROGRA~1/ALWILS~1/setup/setiface.dll Le module spécifié est introuvable. bon les / sont de l'autre coter biensur mais j'ai pas sa sur mon clavier --'

lol beaucoup de julie... même ma soeur s'appelle comme sa aussi mdrrrr ha mais j'ai supprimée la liste ha oui juste j'avais oubliée la corbeille xD dit, mon antivirus est a la fin de l'essais... c'est avast, comment je fait pour ne plus avoir la demande d'achat? oO car il m'embaite quand j'allume mon ordi il s'ouvre et seul moyen de l'enlevée et de faire quelque chose c'est soit l'acheter soit ctrl+alt+del...

[ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ] -->- Recherche: C:\Documents and Settings\Van Cappellen Julie\Recent\HijackThis.lnk: trouvé ! C:\Documents and Settings\Van Cappellen Julie\Mes documents\hijackthis.log: trouvé ! C:\Documents and Settings\Van Cappellen Julie\Mes documents\Downloads\HijackThis.exe: trouvé ! C:\Documents and Settings\Van Cappellen Julie\Mes documents\Downloads\hijackthis.log: trouvé ! C:\Documents and Settings\Van Cappellen Julie\Bureau\SmitFraudFix.exe: trouvé ! C:\Documents and Settings\Van Cappellen Julie\Bureau\SmitFraudfix: trouvé ! C:\Program Files\Mozilla Firefox\SmitFraudfix: trouvé ! merciiii