amaelle

merci pour vos conseils, je les suis et vous tiens au courant. Je n'arrive pas à désinstaller etrust. @+

re, quantité de ram= 1Go de ram medion pentium d CPU 2.8 ghz WINDOWS XP edition familiale PACK 2 Voilà, merci. @+

Ok , merci.

Bonjour aprés avoir désinfecter mon pc sur le forum sécurité je m'adresse à vous car ils me l'ont conseillé. En effet mon pc rame avec des valeurs qui ont l'air d'etre correcte: processus=44 uc utilisée=2% charge dédiée=406Mo Merci pour votre aide.

ok, processus=44 uc utilisée=2% charge dédiée=406Mo

j'ai réussi à ouvrir cette fenetre mais où trouver les valeurs que tu me demande?

bonjour, eh bien hier soir ça avait l'air ok, pas de beug ni de rame, mais depuis ce matin il met du temps pour ouvrir les fenetres!!? Merci

UP

re, KASPERSKY ONLINE SCANNER REPORT Tuesday, August 28, 2007 12:06:57 AM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 28/07/2007 Kaspersky Anti-Virus database records: 345974 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer C:\ D:\ E:\ F:\ G:\ H:\ I:\ J:\ Scan Statistics Total number of scanned objects 50478 Number of viruses found 0 Number of infected objects 0 / 0 Number of suspicious objects 0 Duration of the scan process 00:37:36 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Application Data\user60.rdb Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Cookies\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Logs\Dfsr.log Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\pending.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\dfsr.db Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\fsr.log Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\fsrtmp.log Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Messenger\ssakina@hotmail.com\SharingMetadata\Working\database_47C_95E3_7C95_CFB2\tmp.edb Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows Live Contacts\ssakina@hotmail.com\real\members.stg Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows Live Contacts\ssakina@hotmail.com\shadow\members.stg Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\MSHist012007082720070828\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF84D4.tmp Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF84E8.tmp Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF94AC.tmp Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\~DF94D3.tmp Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\NTUSER.DAT Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.dbf Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.ntx Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP1\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{84A8681A-DD09-41E4-BA41-61B98F589ED6}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped Scan process completed. merci

salut, KASPERSKY ONLINE SCANNER REPORT Monday, August 27, 2007 9:43:27 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 27/07/2007 Kaspersky Anti-Virus database records: 345945 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer C:\ D:\ E:\ F:\ G:\ H:\ I:\ J:\ Scan Statistics Total number of scanned objects 52488 Number of viruses found 2 Number of infected objects 7 / 0 Number of suspicious objects 0 Duration of the scan process 00:34:57 Infected Object Name Virus Name Last Action C:\Documents and Settings\DAKIRI HICHAM\Application Data\user60.rdb Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Cookies\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\MSHist012007082720070828\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\NTUSER.DAT Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\UserData\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.dbf Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.ntx Object is locked skipped C:\RECYCLER\S-1-5-21-1513830243-117234482-4139306933-1006\Dc84.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015818.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015819.exe Infected: Trojan.Win32.Inject.ba skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015821.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017015.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017016.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017017.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP156\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{B41D7687-FD8D-4126-A7E1-06484A896A54}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped Scan process completed. merci

Que faire toujours infecté? Merci

bonjour, KASPERSKY ONLINE SCANNER REPORT Monday, August 27, 2007 12:25:58 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 27/07/2007 Kaspersky Anti-Virus database records: 345675 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer C:\ D:\ E:\ F:\ G:\ H:\ I:\ J:\ Scan Statistics Total number of scanned objects 49854 Number of viruses found 2 Number of infected objects 7 / 0 Number of suspicious objects 0 Duration of the scan process 01:17:43 Infected Object Name Virus Name Last Action C:\Documents and Settings\DAKIRI HICHAM\Application Data\user60.rdb Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Cookies\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\MSHist012007082720070828\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\sta3.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\NTUSER.DAT Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\UserData\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.dbf Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.ntx Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015818.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015819.exe Infected: Trojan.Win32.Inject.ba skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015821.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017015.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017016.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017017.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP155\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{52E2BD37-902A-428C-BBA1-5F65AF1BB233}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped D:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP155\change.log Object is locked skipped E:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP155\change.log Object is locked skipped Scan process completed. @+

bonjour, Voici le rapport K: KASPERSKY ONLINE SCANNER REPORT Sunday, August 26, 2007 4:50:34 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 26/07/2007 Kaspersky Anti-Virus database records: 345362 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer C:\ D:\ E:\ F:\ G:\ H:\ I:\ J:\ Scan Statistics Total number of scanned objects 51972 Number of viruses found 2 Number of infected objects 8 / 0 Number of suspicious objects 0 Duration of the scan process 01:24:18 Infected Object Name Virus Name Last Action C:\Documents and Settings\DAKIRI HICHAM\Application Data\user60.rdb Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Cookies\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Historique\History.IE5\MSHist012007082620070827\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\bisA.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temp\sta3.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\NTUSER.DAT Object is locked skipped C:\Documents and Settings\DAKIRI HICHAM\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.dbf Object is locked skipped C:\Program Files\CA\Etrust Antivirus\DB\rtmaster.ntx Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015818.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015819.exe Infected: Trojan.Win32.Inject.ba skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP152\A0015821.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017015.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017016.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP153\A0017017.exe Infected: Trojan.Win32.Obfuscated.en skipped C:\System Volume Information\_restore{304D2AD8-90BA-4F09-BF12-4CDA4A6F0226}\RP154\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{0784847E-66D6-4BC9-BCD5-3833CF4A332B}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped Scan process completed. Merci, ciao

bonjour, Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:40:53, on 25/08/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\CA\eTrust Antivirus\InoRpc.exe C:\Program Files\CA\eTrust Antivirus\InoRT.exe C:\WINDOWS\system32\RunDll32.exe C:\PROGRA~1\CA\ETRUST~1\realmon.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Neuf\Kit\WiFi\9wifi.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\OFFICE One6.5\program\soffice.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\notepad.exe C:\WINDOWS\explorer.exe C:\DOCUME~1\DAKIRI~1\LOCALS~1\Temp\Répertoire temporaire 3 pour HiJackThis.zip\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: WebManager Class - {D5792AA9-D373-4039-8670-2CDAB6A71F15} - C:\Program Files\BitDownload\TorrentManager.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [adiras] adiras.exe O4 - HKLM\..\Run: [bOOT] C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe /BOOT O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE One6.5\program\quickstart.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?78345d6f9ed8443a92e4c09b87c6d533 O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?78345d6f9ed8443a92e4c09b87c6d533 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.e-leclerc.com/ O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1119456806656 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1121171291531 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe -- End of file - 9673 bytes Rapport lopxpMH2 version 2.0 fait à 19:35:31,29 le 25/08/2007 C:\Documents and Settings\DAKIRI HICHAM ****************************************** ## Répertoires Application Data Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\All Users\Application Data 22/06/2005 17:17 <REP> . 22/06/2005 17:17 <REP> .. 06/03/2007 23:10 <REP> Adobe 04/07/2005 12:09 <REP> Ahead 02/03/2007 23:41 <REP> AntiVir PersonalEdition Classic 27/06/2005 15:14 <REP> Ciel 27/06/2005 16:01 <REP> CyberLink 31/10/2006 01:10 <REP> Google 23/07/2007 00:45 <REP> Grisoft 22/06/2005 17:17 <REP> Microsoft 23/06/2005 15:56 <REP> Pinnacle 22/06/2005 15:33 <REP> SBSI 23/06/2005 16:00 <REP> SmartSound Software Inc 14/07/2007 00:42 <REP> Spybot - Search & Destroy 08/12/2006 14:48 <REP> Windows Genuine Advantage 04/10/2006 23:42 <REP> Windows Live Toolbar 13/11/2006 17:24 <REP> Yahoo! Companion 22/06/2005 17:17 62 desktop.ini 1 fichier(s) 62 octets 17 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\DAKIRI HICHAM\Application Data 11/01/2006 14:57 <REP> . 11/01/2006 14:57 <REP> .. 11/01/2006 14:57 <REP> Adobe 27/01/2006 21:13 <REP> AdobeUM 11/01/2006 14:57 <REP> CyberLink 01/11/2006 20:54 <REP> Google 23/07/2007 00:46 <REP> Grisoft 14/01/2006 22:44 <REP> Help 11/01/2006 14:57 <REP> Identities 11/01/2006 14:57 <REP> Macromedia 11/01/2006 14:57 <REP> Microsoft 22/01/2006 15:57 <REP> Microsoft Web Folders 15/01/2006 00:17 <REP> Mozilla 11/01/2006 21:50 <REP> OFFICE One v6 11/01/2006 14:57 <REP> Sun 11/01/2006 14:57 62 desktop.ini 11/01/2006 21:50 121 sversion.ini 11/01/2006 21:51 2 048 user60.rdb 3 fichier(s) 2 231 octets 15 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\DAKIRI HICHAM\Local Settings\Application Data 11/01/2006 14:57 <REP> . 11/01/2006 14:57 <REP> .. 11/01/2006 14:57 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150040} 11/01/2006 14:57 <REP> Adobe 11/01/2006 14:57 <REP> Ahead 11/01/2006 14:57 <REP> ApplicationHistory 01/11/2006 20:54 <REP> Google 14/01/2006 22:44 <REP> Help 13/10/2006 01:28 <REP> Identities 11/01/2006 14:57 <REP> Microsoft 23/07/2007 17:09 <REP> Mozilla 11/01/2006 14:57 <REP> WMTools Downloaded Files 11/01/2006 14:57 60 928 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 11/01/2006 14:57 136 fusioncache.dat 11/01/2006 14:57 240 600 GDIPFONTCACHEV1.DAT 11/01/2006 14:57 2 657 820 IconCache.db 4 fichier(s) 2 959 484 octets 12 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\Default User\Application Data 22/06/2005 17:17 <REP> . 22/06/2005 17:17 <REP> .. 11/01/2006 14:56 <REP> Adobe 11/01/2006 14:56 <REP> CyberLink 22/06/2005 15:23 <REP> Identities 11/01/2006 14:56 <REP> Macromedia 22/06/2005 17:17 <REP> Microsoft 11/01/2006 14:56 <REP> Sun 22/06/2005 17:17 62 desktop.ini 1 fichier(s) 62 octets 8 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data 22/06/2005 17:17 <REP> . 22/06/2005 17:17 <REP> .. 11/01/2006 14:56 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150040} 11/01/2006 14:56 <REP> Adobe 11/01/2006 14:56 <REP> Ahead 11/01/2006 14:56 <REP> ApplicationHistory 22/06/2005 15:23 <REP> Microsoft 11/01/2006 14:56 <REP> WMTools Downloaded Files 11/01/2006 14:56 4 608 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 11/01/2006 14:56 135 fusioncache.dat 11/01/2006 14:56 12 328 GDIPFONTCACHEV1.DAT 11/01/2006 14:56 3 737 886 IconCache.db 4 fichier(s) 3 754 957 octets 8 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\LocalService\Application Data 22/06/2005 15:26 <REP> . 22/06/2005 15:26 <REP> .. 22/06/2005 15:26 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data 22/06/2005 15:26 <REP> . 22/06/2005 15:26 <REP> .. 22/06/2005 15:26 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\NetworkService\Application Data 22/06/2005 15:26 <REP> . 22/06/2005 15:26 <REP> .. 22/06/2005 15:26 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data 22/06/2005 15:26 <REP> . 22/06/2005 15:26 <REP> .. 22/06/2005 15:26 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data 22/06/2005 15:25 <REP> . 22/06/2005 15:25 <REP> .. 11/01/2006 14:56 <REP> Adobe 11/01/2006 14:56 <REP> CyberLink 22/06/2005 15:25 <REP> Identities 11/01/2006 14:56 <REP> Macromedia 22/06/2005 15:25 <REP> Microsoft 11/01/2006 14:56 <REP> Sun 22/06/2005 15:25 62 desktop.ini 1 fichier(s) 62 octets 8 Rép(s) 101 447 610 368 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data 22/06/2005 15:25 <REP> . 22/06/2005 15:25 <REP> .. 11/01/2006 14:56 <REP> {3248F0A6-6813-11D6-A77B-00B0D0150040} 11/01/2006 14:56 <REP> Adobe 11/01/2006 14:56 <REP> Ahead 11/01/2006 14:56 <REP> ApplicationHistory 22/06/2005 15:25 <REP> Microsoft 11/01/2006 14:56 <REP> WMTools Downloaded Files 11/01/2006 14:56 4 608 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 11/01/2006 14:56 135 fusioncache.dat 11/01/2006 14:56 12 328 GDIPFONTCACHEV1.DAT 11/01/2006 14:56 3 737 886 IconCache.db 4 fichier(s) 3 754 957 octets 8 Rép(s) 101 447 606 272 octets libres ****************************************** Recherche des taches planifiées dans C:\WINDOWS\tasks C:\WINDOWS\Tasks\Vérifier Vérifier inexploitable ****************************************** ## Répertoires de C:\Program Files Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 7C95-CFB2 Répertoire de C:\Program Files 24/07/2007 19:40 <REP> . 24/07/2007 19:40 <REP> .. 22/06/2005 17:56 <REP> Adobe 04/07/2005 12:09 <REP> Ahead 02/03/2007 23:41 <REP> AntiVir PersonalEdition Classic 12/07/2005 13:42 <REP> ATI Technologies 11/07/2007 02:48 <REP> AxBx 10/02/2007 11:10 <REP> BitDownload 22/01/2007 20:39 <REP> Boonty 22/01/2007 20:38 <REP> BoontyGames 22/06/2005 18:03 <REP> CA 23/01/2007 00:06 <REP> Cell Phone Manager 23/06/2005 14:22 <REP> Club-Internet 22/06/2005 15:21 <REP> ComPlus Applications 27/06/2005 16:00 <REP> CyberLink 11/05/2006 23:18 <REP> DivX 20/05/2006 00:04 <REP> EkiPack 24/07/2007 19:27 <REP> eMule 10/03/2007 04:48 <REP> FastCaisse 20/05/2006 00:04 <REP> ffdshow 10/03/2007 03:06 <REP> Fichiers communs 06/03/2007 02:02 <REP> Firebird 10/03/2007 03:17 <REP> GestStock 07/02/2007 01:38 <REP> Google 23/07/2007 00:45 <REP> Grisoft 22/06/2005 19:26 <REP> HighMAT CD Writing Wizard 23/07/2007 19:47 <REP> HijackThis 22/06/2005 16:45 <REP> Intel 24/01/2006 22:27 <REP> InterActual 13/06/2007 02:34 <REP> Internet Explorer 27/06/2005 15:30 <REP> ISSENDIS 04/07/2005 13:30 <REP> Java 29/05/2006 00:49 <REP> K-Lite Codec Pack 15/10/2006 20:58 <REP> Logitech 18/03/2007 00:52 <REP> MCSCaisse 22/06/2005 17:40 <REP> Messenger 27/01/2006 21:10 <REP> Micro Application 11/05/2007 21:31 <REP> Microsoft CAPICOM 2.1.0.2 22/01/2006 15:57 <REP> microsoft frontpage 22/01/2006 15:57 <REP> Microsoft Office 22/01/2006 15:59 <REP> Microsoft Visual Studio 22/06/2005 15:21 <REP> Movie Maker 25/08/2007 13:52 <REP> Mozilla Firefox 22/06/2005 15:21 <REP> MSN 22/06/2005 15:21 <REP> MSN Gaming Zone 04/10/2006 23:41 <REP> MSN Messenger 16/11/2006 03:23 <REP> MSXML 4.0 23/06/2005 14:37 <REP> NetMeeting 28/09/2006 23:26 <REP> Neuf 13/07/2005 14:02 <REP> OFFICE One6.5 22/06/2005 15:21 <REP> Online Services 13/06/2007 02:35 <REP> Outlook Express 23/06/2005 15:58 <REP> Pinnacle 11/01/2006 15:00 <REP> SAGEM 22/06/2005 15:22 <REP> Services en ligne 23/06/2005 16:00 <REP> SmartSound Software 24/07/2006 22:24 <REP> SoftChris 14/07/2007 00:50 <REP> Spybot - Search & Destroy 03/06/2006 21:26 <REP> VideoLAN 24/07/2007 21:57 <REP> Windows Live Toolbar 07/12/2006 01:06 <REP> Windows Media Connect 07/12/2006 01:07 <REP> Windows Media Connect 2 07/12/2006 01:07 <REP> Windows Media Player 22/06/2005 15:21 <REP> Windows NT 20/05/2006 00:28 <REP> WinRAR 22/06/2005 15:23 <REP> xerox 11/11/2006 19:13 <REP> Yahoo! 20/05/2006 00:27 <REP> Zone Labs 0 fichier(s) 0 octets 68 Rép(s) 101 447 606 272 octets libres ****************************************** ## Popups autorisées * Internet Explorer ! REG.EXE VERSION 3.0 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow * Mozilla Firefox (1 autorisé 2 interdit) ---------- C:\DOCUMENTS AND SETTINGS\DAKIRI HICHAM\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\DYM20RK7.DEFAULT\HOSTPERM.1 ****************************************** ## Registre * [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main] Search Bar REG_SZ http://recherche.neuf.fr/ie/default.html ****************************************** ## Zones de sécurité * HKCU Domains (4) * P3P History (5) ****************************************** ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif" *************** Fin du rapport **************** MERCI

salut, Alors tout d'abord j'ai pu accéder à certain fichier et le seffacer: C:\Documents and Settings\All Users\Application Data\wavedartfourdraw C:\Program Files\ThisMix\ C:\Documents and Settings\paul\Application Data\ThisMix\ mais messenger plus: introuvable lopromover: impossible de l'exécuter en mode sans echec, et quand j'essaye en mode normal il disparait.!!? Que faire? Merci.