-_-'

Rapport GenProc 0.78 [1] effectué le 22/02/2008 à 7:53:46,04 - SystemRoot = C:\WINDOWS # Etape 1/ Télécharge : - CCleaner http://www.ccleaner.com/download/builds/downloading-slim Ce logiciel va permettre de supprimer tous les fichiers temporaires. Lance-le et clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. Ferme le programme. - lopxpMH2 http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip sur ton bureau. Dézippe-le (clic droit -> "Extraire ici") et double clique sur le fichier lopxpMH.bat. Dans ta prochaine réponse, poste : - le contenu du rapport qui va s'ouvrir ; - un nouveau rapport GenProc. c'est ce qu'il me dit ^^

Oui largement plus bah en clair c'est du chinois ....^^' je ne sais pas quoi désactivé ni comment le faire... Il y a Mionet et un GPS normalement ça je voudrais m'en débarrasser. pour les tentatives si après 20 rien ne marche je continus toujours ? Avec IE ça fonctionne >< je suis un gros boulet là quand même désolé ... Là j'y comprend vraiment rien le virus c'est encore présenté et antivir à fait acces deny enfin il m'a proposé et j'ai fais... Hum donc voila le scan : ------------------------------------------------------------------------------- KASPERSKY ON-LINE SCANNER REPORT Wednesday, February 20, 2008 2:42:52 PM Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version : 5.0.83.0 Dernière mise à jour de la base antivirus Kaspersky : 20/02/2008 Enregistrements dans la base antivirus Kaspersky : 530770 ------------------------------------------------------------------------------- Paramètres d'analyse: Analyser avec la base antivirus suivante: standard Analyser les archives: vrai Analyser les bases de messagerie: vrai Cible de l'analyse - Poste de travail: C:\ D:\ Statistiques de l'analyse: Total d'objets analysés: 80852 Nombre de virus trouvés: 0 Nombre d'objets infectés: 0 / 0 Nombre d'objets suspects: 0 Durée de l'analyse: 02:33:33 Nom de l'objet infecté / Nom du virus / Dernière action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat L'objet est verrouillé ignoré C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\$_hpcst$.hpc L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\Microsoft\MSNLiveFav\LiveFavorites.xml L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\cert8.db L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\history.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\key3.db L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\parent.lock L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\search.sqlite L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\urlclassifier2.sqlite L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Cookies\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\Cache\_CACHE_001_ L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\Cache\_CACHE_002_ L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\Cache\_CACHE_003_ L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\xyvog13c.default\Cache\_CACHE_MAP_ L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Historique\History.IE5\MSHist012008022020080221\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Temp\WCESLog.log L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Temp\~DFB788.tmp L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\Local Settings\Temporary Internet Files\PhishingFilter\45E13EC5-3DB7-4B3D-9F80-073A58AB5E82.dat L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\NTUSER.DAT L'objet est verrouillé ignoré C:\Documents and Settings\Laurent\ntuser.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré C:\System Volume Information\_restore{C350B69F-93AC-48EB-B560-2E258D3F260E}\RP125\A0047715.exe L'objet est verrouillé ignoré C:\System Volume Information\_restore{C350B69F-93AC-48EB-B560-2E258D3F260E}\RP131\change.log L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB822624$\hal.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB824141$\user32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB824141$\win32k.sys L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\crypt32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\hh.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\hhctrl.ocx L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\html32.cnv L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\itss.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\locator.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\magnify.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\narrator.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\newdev.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\ole32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\osk.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\rpcrt4.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\rpcss.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\shell32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\shmedia.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\srv.sys L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB826939$\zipfldr.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828012$\ntkrnlmp.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828012$\ntkrnlpa.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828012$\ntkrnlpa.exe.000 L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828012$\ntkrpamp.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828012$\ntoskrnl.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828012$\ntoskrnl.exe.000 L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\colbact.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\comuid.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\es.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\migregdb.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\ole32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB828741$\txflog.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB830680$\keymgr.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\callcont.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\h323.tsp L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\msgina.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\mst120.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB835732$\schannel.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\dao360.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msjetol1.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx L'objet est verrouillé ignoré C:\WINDOWS\$NtUninstallQ828026$\wmp.dll L'objet est verrouillé ignoré C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré C:\WINDOWS\Internet Logs\fwdbglog.txt L'objet est verrouillé ignoré C:\WINDOWS\Internet Logs\fwpktlog.txt L'objet est verrouillé ignoré C:\WINDOWS\Internet Logs\IAMDB.RDB L'objet est verrouillé ignoré C:\WINDOWS\Internet Logs\tvDebug.log L'objet est verrouillé ignoré C:\WINDOWS\Internet Logs\YOUR-J0YE97MFWX.ldb L'objet est verrouillé ignoré C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\fidbox.dat L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\fidbox.idx L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\fidbox2.dat L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\fidbox2.idx L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré C:\WINDOWS\Temp\hsperfdata_SYSTEM\1392 L'objet est verrouillé ignoré C:\WINDOWS\Temp\ZLT01f7d.TMP L'objet est verrouillé ignoré C:\WINDOWS\Temp\ZLT01f81.TMP L'objet est verrouillé ignoré C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré Analyse terminée.

J'ai un leger problème ...quand je clique sur j'accepte rien ne se passe quand c'est je refuse la fenêtre ce ferme ^^' vous avez une explication? autre chose c'est normal que je ne capte quedal au petite indication du surplus de programme ^^'

ok je fais ça dès que j'ai le temps Merci ... Je l'aurais ce sal trojan

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:50:28, on 16/02/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\Program Files\MioNet\MioNetManager.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\MioNet\jvm\bin\MioNet.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe C:\Program Files\TOSHIBA\PadTouch\PadExe.exe C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe C:\Program Files\ltmoh\Ltmoh.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\D-Link\AirPlus Xtreme G\AirPlusCFG.exe C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\VM_STI.EXE C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe C:\PROGRA~1\MICROS~4\rapimgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\PadTouch\PadExe.exe O4 - HKLM\..\Run: [TFncKy] TFncKy.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [D-Link AirPlus Xtreme G] C:\Program Files\D-Link\AirPlus Xtreme G\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCSService] C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [bigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [EPSON Stylus C66 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P33 "EPSON Stylus C66 Series (Copie 1)" /O6 "USB001" /M "Stylus C66" O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66" O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: TrayMin300.exe.lnk = ? O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?99f32b1bdc3f497183876eaae84588b2 O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?99f32b1bdc3f497183876eaae84588b2 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: MioNet Service (MioNet) - Unknown owner - C:\Program Files\MioNet\MioNetManager.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- C'est fait ^^ Désolé j'avais zapé que c'était demandé ^^'

Hello les Zébulons ^^ Ba comme beaucoup d'internaute apprentis, j'ai attrapé une saloperie...manque de chance mon antibiotique est inefficace. Je suppose que c'est du à une mutations de la chose. Donc comme beaucoup d'internaute tout court, je m'en remets à vos talents pour faire disparaitre cette créature numérique de mon PC. elle se nomme : TR/Obfusgen.A.5368 Avira antivir ne trouve pas de solution...il est juste détecté. Ma défense c'est AVG anti spywar 7.5 + Zone alarm en firewall + Avira antivir version gratuite. Voili voilou Merci d'avance

bon ba fini par reboot pc parce que ça bugait trop -_-' problème réglé merci à vous.

hum les scans sans mode sans échec ? c'est faisable ...

si ça fonctionne je te nomme génie "^^ Je vais enfin pouvoir lire tranquillement et charger des pages sans que ça saute toute les 9minutes =D Avant ça sautait toute les 80secondes... Verdict dans 1H =D ça fonctionne pas ><' par contre j'ai remarqué une anomalie ... le pc me dit que je ne suis pas connecté or je le suis (vue que le message est posté ça fait une belle preuve) Est-ce normal ?

euh oki bon j'ai fait ATC Cleaner... je scann demain matin :s et apres je vous transmet. J'ai toujours ma connexion qui fait yoyo ...il y a une solution ?

BTFix 1.057 (par bibi26) - 09/11/2007 18:44:30 - Analyse Lancé depuis C:\Documents and Settings\Laurent\Bureau\BTFix\BTFix.exe ---> Fichiers/Dossiers trouvés ---> Analyse terminée ça me dépasse ! votre recherche elle est à faire quand... après avoir désactivé le tout ou faut desactiver réactiver et rechercher >< Et pour ma mule j'ai compris que c'était elle quand j'ai vue ...son nom -_-' si je supprime tout ses fichiers... le virus disparaîtra avec ou pas ? Sacrifier une mule pour sauver le PC d'un Âne...

Vous êtes de vrai machine -_-' la mienne n'arrivant pas à suivre le rythme et moi non plus ^^ Voila Kasper le gentil petit scanner ^^ KASPERSKY ONLINE SCANNER REPORT Friday, November 09, 2007 1:46:43 AM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 8/11/2007 Kaspersky Anti-Virus database records: 454887 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ Scan Statistics: Total number of scanned objects: 71877 Number of viruses found: 2 Number of infected objects: 18 Number of suspicious objects: 0 Duration of the scan process: 03:21:23 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\cert8.db Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\formhistory.dat Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\GoogleToolbarData\googlesafebrowsing.db Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\history.dat Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\key3.db Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\parent.lock Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\search.sqlite Object is locked skipped C:\Documents and Settings\Laurent\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\urlclassifier2.sqlite Object is locked skipped C:\Documents and Settings\Laurent\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Messenger\aosiris@msn.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Messenger\aosiris@msn.com\SharingMetadata\pending.dat Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Messenger\aosiris@msn.com\SharingMetadata\Working\database_4834_3909_3438_FC0E\dfsr.db Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Messenger\aosiris@msn.com\SharingMetadata\Working\database_4834_3909_3438_FC0E\fsr.log Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Messenger\aosiris@msn.com\SharingMetadata\Working\database_4834_3909_3438_FC0E\fsrtmp.log Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Messenger\aosiris@msn.com\SharingMetadata\Working\database_4834_3909_3438_FC0E\tmp.edb Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Windows Live Contacts\aosiris@msn.com\real\members.stg Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Microsoft\Windows Live Contacts\aosiris@msn.com\shadow\members.stg Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\Cache\_CACHE_001_ Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\Cache\_CACHE_002_ Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\Cache\_CACHE_003_ Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Application Data\Mozilla\Firefox\Profiles\hz3o1nb8.default\Cache\_CACHE_MAP_ Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Historique\History.IE5\MSHist012007110820071109\index.dat Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Temp\~DF2CC8.tmp Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Temp\~DF2D29.tmp Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Temp\~DF37C8.tmp Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Temp\~DF68E9.tmp Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Temp\~DF6928.tmp Object is locked skipped C:\Documents and Settings\Laurent\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Laurent\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Laurent\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\eMule\Incoming\Secured Downloading of anachronia with New Secured eMule0.47c.zip/SecuredeMule0.47c_07_fr.EXE/WISE0015.BIN/data0015/data0005 Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Secured Downloading of anachronia with New Secured eMule0.47c.zip/SecuredeMule0.47c_07_fr.EXE/WISE0015.BIN/data0015 Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Secured Downloading of anachronia with New Secured eMule0.47c.zip/SecuredeMule0.47c_07_fr.EXE/WISE0015.BIN Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Secured Downloading of anachronia with New Secured eMule0.47c.zip/SecuredeMule0.47c_07_fr.EXE Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Secured Downloading of anachronia with New Secured eMule0.47c.zip ZIP: infected - 4 skipped C:\Program Files\eMule\Incoming\Trouvez battlelore Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_09SS.EXE/WISE0009.BIN/data0015/data0005 Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez battlelore Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_09SS.EXE/WISE0009.BIN/data0015 Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez battlelore Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_09SS.EXE/WISE0009.BIN Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez battlelore Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_09SS.EXE Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez battlelore Employant eMule Multimedia Barre d'outils.zip ZIP: infected - 4 skipped C:\Program Files\eMule\Incoming\Trouvez nightwind's lullaby Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_08.EXE/WISE0008.BIN/data0015/data0005 Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez nightwind's lullaby Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_08.EXE/WISE0008.BIN/data0015 Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez nightwind's lullaby Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_08.EXE/WISE0008.BIN Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez nightwind's lullaby Employant eMule Multimedia Barre d'outils.zip/MultiMediaFR10_08.EXE Infected: not-a-virus:AdWare.Win32.Shopper.l skipped C:\Program Files\eMule\Incoming\Trouvez nightwind's lullaby Employant eMule Multimedia Barre d'outils.zip ZIP: infected - 4 skipped C:\Program Files\Philips\SPC 200NC PC Camera\MioNet\install_MioNet_ver1_6_11.exe/cmdow.exe Infected: not-a-virus:RiskTool.Win32.HideWindows skipped C:\Program Files\Philips\SPC 200NC PC Camera\MioNet\install_MioNet_ver1_6_11.exe CreateInstall: infected - 1 skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{C350B69F-93AC-48EB-B560-2E258D3F260E}\RP109\A0073070.exe Infected: not-a-virus:RiskTool.Win32.HideWindows skipped C:\System Volume Information\_restore{C350B69F-93AC-48EB-B560-2E258D3F260E}\RP194\change.log Object is locked skipped C:\WINDOWS\$NtUninstallKB822624$\hal.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB824141$\user32.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\crypt32.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\hh.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\hhctrl.ocx Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\html32.cnv Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\itss.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\locator.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\magnify.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\narrator.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\newdev.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\ole32.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\osk.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\rpcrt4.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\rpcss.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\shell32.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\shmedia.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\srv.sys Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB826939$\zipfldr.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828012$\ntkrnlmp.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB828012$\ntkrnlpa.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB828012$\ntkrnlpa.exe.000 Object is locked skipped C:\WINDOWS\$NtUninstallKB828012$\ntkrpamp.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB828012$\ntoskrnl.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB828012$\ntoskrnl.exe.000 Object is locked skipped C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\colbact.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\comuid.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\es.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\migregdb.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\ole32.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB828741$\txflog.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB830680$\keymgr.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\callcont.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\h323.tsp Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\msgina.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\mst120.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB835732$\schannel.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\dao360.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msjetol1.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll Object is locked skipped C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll Object is locked skipped C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx Object is locked skipped C:\WINDOWS\$NtUninstallQ828026$\wmp.dll Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped C:\WINDOWS\Internet Logs\LAURENTBOT.ldb Object is locked skipped C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped C:\WINDOWS\MEMORY.DMP Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{4F5FE5A9-92B0-4258-B15D-ED9D5A41D321}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\ZLT07347.TMP Object is locked skipped C:\WINDOWS\Temp\ZLT0734e.TMP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Le Babouin écrivait quelque chose de plus compréhensible.... Je vous laisse traduire ça en langage clair et précis et vais me coucher ^^ Mission accomplie pour Kaspersky ...un peu long avec les déco régulièrement c'est un peu galère mais 1 problème à la fois.

Question stupide...mais je la pose quand même les scans en ligne exige une connexion or la mienne saute régulièrement ....ça passera ou pas ?

Kaspersky probleme ....il veut rien afficher en barre jaune =D Je clic sur accept mais aucune réaction...Fire fox note terminé en bas de page pour les problemes d'affichage c'est résolu...

euh j'ai un petit probleme dans ma plantation pourquoi ça me fait ça : C'est censé être une fenêtre travian -_-' euh sinon petit détail y a un lien qui m'envoie vers une page perso aol mais qui ne donne rien à télécharger

désolé pour le double poste... mais je comprend rien au dernier truc. c'est de l'anglais et je suis resté au XVIème Siècle en clair l'anglais ne ressemble à rien ><' quelqu'un a une version française =s

la peste ça se soigne pas alors on va éviter ce terme ^^ Merci de me filer un coup de main euh j'ai supprimer des cookies (moches) je crois que c'est tout >< Sur ce Bonne nuit

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:44:36, on 07/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Safe mode Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\Laurent\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\PadTouch\PadExe.exe O4 - HKLM\..\Run: [TFncKy] TFncKy.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [bDMCon] C:\Program Files\Softwin\BitDefender Free Edition\\bdmcon.exe O4 - HKLM\..\Run: [bDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\\bdnagent.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [D-Link AirPlus Xtreme G] C:\Program Files\D-Link\AirPlus Xtreme G\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCSService] C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe O4 - HKLM\..\Run: [bigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [blueway] C:\DOCUME~1\Laurent\APPLIC~1\THIRDF~1\barb free.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: TrayMin300.exe.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe -- End of file - 5576 bytes Les programmes sans danger....j'en connais pas pour ma machine tout est danger ^^

VOila pour Hijackthis Logfile of HijackThis v1.99.1 Scan saved at 20:09:14, on 07/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\Laurent\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\PadTouch\PadExe.exe O4 - HKLM\..\Run: [TFncKy] TFncKy.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [bDMCon] C:\Program Files\Softwin\BitDefender Free Edition\\bdmcon.exe O4 - HKLM\..\Run: [bDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\\bdnagent.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [D-Link AirPlus Xtreme G] C:\Program Files\D-Link\AirPlus Xtreme G\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCSService] C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe O4 - HKLM\..\Run: [bigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [blueway] C:\DOCUME~1\Laurent\APPLIC~1\THIRDF~1\barb free.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background O4 - Global Startup: TrayMin300.exe.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe j'ai plus de antipeste à part la version gratuite de bitdefender et le antivir...qui dure 2h je vais faire de la place avant de le relancer c'est trop long >< euh j'ai mis mode sans échec avec prise en charge réseau ...c'est normal l'écran tout moche mais vraiment tout moche :s VOila pour Hijackthis Logfile of HijackThis v1.99.1 Scan saved at 20:09:14, on 07/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\Laurent\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\PadTouch\PadExe.exe O4 - HKLM\..\Run: [TFncKy] TFncKy.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [bDMCon] C:\Program Files\Softwin\BitDefender Free Edition\\bdmcon.exe O4 - HKLM\..\Run: [bDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\\bdnagent.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [D-Link AirPlus Xtreme G] C:\Program Files\D-Link\AirPlus Xtreme G\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCSService] C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe O4 - HKLM\..\Run: [bigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [blueway] C:\DOCUME~1\Laurent\APPLIC~1\THIRDF~1\barb free.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background O4 - Global Startup: TrayMin300.exe.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe j'ai plus de antipeste à part la version gratuite de bitdefender et le antivir...qui dure 2h je vais faire de la place avant de le relancer c'est trop long >< euh j'ai mis mode sans échec avec prise en charge réseau ...c'est normal l'écran tout moche mais vraiment tout moche :s

OK MERCI ^^ bon je redémmare en mode sans echec...après je prie pour qu'aucun plantage existe et enfin je répare les problèmes de connexion ^^

non je crois que je suis en bas de la noob attitude ^^ Alors voila le scan antivir... Les 93 choses dangereuses j'aimerais savoir ce que je peux faire pour les éliminer ^^ AntiVir PersonalEdition Classic Report file date: mercredi 7 novembre 2007 17:55 Scanning for 921220 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: Laurent Computer name: LAURENTBOT Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15 ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:26:55 ANTIVIR2.VDF : 7.0.0.172 1092608 Bytes 05/11/2007 16:46:08 ANTIVIR3.VDF : 7.0.0.184 69632 Bytes 07/11/2007 16:46:08 AVEWIN32.DLL : 7.6.0.34 3125760 Bytes 07/11/2007 16:46:10 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Manual Selection Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: C:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: on Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: mercredi 7 novembre 2007 17:55 Starting search for hidden objects. '49664' objects were checked, '0' hidden objects were found. The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'iPodService.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'bdss.exe' - '1' Module(s) have been scanned Scan process 'xcommsvr.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'CFSvcs.exe' - '1' Module(s) have been scanned Scan process 'TrayMin200.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'TOSCDSPD.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'E_S4I0S2.EXE' - '1' Module(s) have been scanned Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned Scan process 'TPSBattM.exe' - '1' Module(s) have been scanned Scan process 'VM_STI.EXE' - '1' Module(s) have been scanned Scan process 'WZCSLDR.exe' - '1' Module(s) have been scanned Scan process 'AirPlusCFG.exe' - '1' Module(s) have been scanned Scan process 'qttask.exe' - '1' Module(s) have been scanned Scan process 'bdmcon.exe' - '1' Module(s) have been scanned Scan process 'agrsmmsg.exe' - '1' Module(s) have been scanned Scan process 'ltmoh.exe' - '1' Module(s) have been scanned Scan process 'TFncKy.exe' - '1' Module(s) have been scanned Scan process 'PadExe.exe' - '1' Module(s) have been scanned Scan process 'SmoothView.exe' - '1' Module(s) have been scanned Scan process 'THotkey.exe' - '1' Module(s) have been scanned Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned Scan process 'SynTPLpr.exe' - '1' Module(s) have been scanned Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 48 processes with 48 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '44' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB822624$\hal.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB824141$\user32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB824141$\win32k.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\crypt32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\hh.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\hhsetup.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\itss.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\locator.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\magnify.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\migwiz.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\mrxsmb.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\msconv97.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\narrator.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\newdev.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\ntdll.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\ole32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\osk.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\pchshell.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\raspptp.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\rpcrt4.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\rpcss.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\shell32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\shmedia.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\srrstr.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\srv.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\winsrv.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB826939$\zipfldr.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828012$\ntkrnlmp.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828012$\ntkrnlpa.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828012$\ntkrpamp.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828012$\ntoskrnl.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\colbact.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\comuid.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\es.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\migregdb.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\ole32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB828741$\txflog.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB830680$\keymgr.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\callcont.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\msgina.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\mst120.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB835732$\schannel.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\dao360.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msjetol1.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ828026$\wmp.dll [WARNING] The file could not be opened! End of the scan: mercredi 7 novembre 2007 19:07 Used time: 1:11:54 min The scan has been done completely. 4715 Scanning directories 165754 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 93 Files cannot be scanned 165754 Files not concerned 8277 Archives were scanned 93 Warnings 0 Notes 49664 Objects were scanned with rootkit scan 0 Hidden objects were found

j'ai pas de version payante :s Sinon j'ai les moyens d'avoir norton 2007 mais Norton reste Norton = petite vitesse et grosse lenteur... Et autres détails, je ne vais pas sur des sites bizarres je dl que de la musique >< euh avant de dl votre bazar j'ai un petit souci stupide mais si je supprime avast il va me libérer ce qu'il a en quarantaine ? Comment on supprime ce qui est en quarantaine ? ...Voila je suis un gros noob je sais mais dsl :s

Bonsoir messieurs....J'ai été convié à m'adresser à vous suite à mon problème réseau ^^ en réalité j'ai 2 intrus détecté je vous les présente brièvement : Win32:Obfuscated-BPP [Trj] Win32:Adware-gen [Adw] Inutile de vous dire que ma petite ligne maginot n'a encore pas fait le poids. Avast et Bitdefender voila mes mini remparts... J'ai des scans Hitjackthis mais je dois les refaire. Cause absence de SP2 je crois que ça joue un peu ça ^^

alors le mode sans échec c'est mort....sauf si on m'explique et pour service pack 2 j'ai un probleme...je déco toute les 2minutes il m'en faudrait 15 ...on fait comment :s Edit : c'est une grande victoire pour une fois quelque chose fonctionne sans accroc sur mon PC =D Connexion stable et j'ai les maj qui sont en préparation... Je vais suivre les conseils c'est toi le pro ici quand même puis le problème de réseau à l'air résolu vue que j'ai internet qui tourne sans décrocher MERCI BEAUCOUP ^^

Merci Philipe.... alors justement mon petit avastounet (désolé j'ai pas mieux en magasin à part Norton sur un autre PC ><) Les 2 comics infiltrés sont : Win32:Obfuscated-BPP [Trj] Win32:Adware-gen [Adw] Pour les détectés après je ne saurais dire si il y en a d'autre ou pas ... Ce n'est pas la distance car même en connexion excellent c'est à dire à 2cm de la live box Pour le modem et le routeur...je vais chercher j'en sais rien. c'est vraiment important ? _______________________________________________________________________ Commençant à comprendre rapidement comment vous fonctionnez je me suis permis de prendre un peu d'avance Logfile of HijackThis v1.99.1 Scan saved at 20:09:36, on 06/11/2007 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe C:\Program Files\TOSHIBA\PadTouch\PadExe.exe C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe C:\Program Files\ltmoh\Ltmoh.exe C:\WINDOWS\AGRSMMSG.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\System32\TPSBattM.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe C:\Program Files\D-Link\AirPlus Xtreme G\AirPlusCFG.exe C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe C:\WINDOWS\VM_STI.EXE C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin200.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS\System32\wuauclt.exe C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe c:\program files\softwin\bitdefender free edition\bdmcon.exe C:\PROGRA~1\Mozilla Firefox\firefox.exe C:\Documents and Settings\Laurent\Bureau\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [TPSMain] TPSMain.exe O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe O4 - HKLM\..\Run: [smoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe O4 - HKLM\..\Run: [PadTouch] "C:\Program Files\TOSHIBA\PadTouch\PadExe.exe O4 - HKLM\..\Run: [TFncKy] TFncKy.exe O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [bDMCon] C:\Program Files\Softwin\BitDefender Free Edition\\bdmcon.exe O4 - HKLM\..\Run: [bDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\\bdnagent.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [D-Link AirPlus Xtreme G] C:\Program Files\D-Link\AirPlus Xtreme G\AirPlusCFG.exe O4 - HKLM\..\Run: [ANIWZCSService] C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe O4 - HKLM\..\Run: [bigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [blueway] C:\DOCUME~1\Laurent\APPLIC~1\THIRDF~1\barb free.exe O4 - Global Startup: TrayMin300.exe.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab56986.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe J'ai essayé Rapport lopxpMH2 version 2.0 fait à 20:14:15,58 le 06/11/2007 C:\Documents and Settings\Laurent\Bureau\lopxpMH2 ****************************************** ## Répertoires Application Data Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\All Users\Application Data 18/05/2004 13:48 <REP> . 18/05/2004 13:48 <REP> .. 18/05/2004 14:09 <REP> Adobe 17/09/2007 18:23 <REP> Apple 19/06/2007 08:41 <REP> Apple Computer 08/07/2007 00:25 <REP> Google 18/06/2007 23:59 <REP> Messenger Plus! 18/05/2004 13:48 <REP> Microsoft 18/06/2007 22:38 <REP> namedefaultthatsupport 18/05/2004 13:16 <REP> SBSI 30/09/2007 14:07 <REP> UDL 18/05/2004 13:48 62 desktop.ini 20/08/2007 21:35 1 751 QTSBandwidthCache 2 fichier(s) 1 813 octets 11 Rép(s) 10 793 218 048 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\Default User\Application Data 18/05/2004 13:48 <REP> . 18/05/2004 13:48 <REP> .. 18/06/2007 12:32 <REP> Adobe 18/06/2007 12:32 <REP> AdobeUM 18/06/2007 12:32 <REP> Identities 18/05/2004 13:48 <REP> Microsoft 18/06/2007 12:32 <REP> Sun 18/06/2007 12:32 <REP> toshiba 18/05/2004 13:48 62 desktop.ini 1 fichier(s) 62 octets 8 Rép(s) 10 793 218 048 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data 18/05/2004 13:48 <REP> . 18/05/2004 13:48 <REP> .. 18/06/2007 12:32 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142040} 18/06/2007 12:32 <REP> Microsoft 18/06/2007 12:32 5 877 146 IconCache.db 1 fichier(s) 5 877 146 octets 4 Rép(s) 10 793 218 048 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\Laurent\Application Data 18/06/2007 12:32 <REP> . 18/06/2007 12:32 <REP> .. 18/06/2007 12:32 <REP> Adobe 18/06/2007 12:32 <REP> AdobeUM 02/07/2007 18:19 <REP> Apple Computer 05/09/2007 20:32 <REP> Google 02/09/2007 00:42 <REP> Help 18/06/2007 12:32 <REP> Identities 18/06/2007 13:40 <REP> Macromedia 18/06/2007 12:32 <REP> Microsoft 18/06/2007 13:41 <REP> Mozilla 18/06/2007 12:32 <REP> Sun 18/06/2007 13:42 <REP> Talkback 17/09/2007 16:50 <REP> Template 18/06/2007 22:38 <REP> ThirdFlawRoam 18/06/2007 12:32 <REP> toshiba 10/09/2007 23:11 <REP> vlc 18/06/2007 12:32 62 desktop.ini 25/07/2007 18:46 1 117 QuickZip45.ini 2 fichier(s) 1 179 octets 17 Rép(s) 10 793 218 048 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\Laurent\Local Settings\Application Data 18/06/2007 12:32 <REP> . 18/06/2007 12:32 <REP> .. 18/06/2007 12:32 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142040} 17/09/2007 18:24 <REP> Apple 19/06/2007 22:41 <REP> Apple Computer 08/07/2007 00:25 <REP> Google 02/09/2007 00:42 <REP> Help 29/06/2007 16:39 <REP> Identities 18/06/2007 12:32 <REP> Microsoft 18/06/2007 13:41 <REP> Mozilla 20/06/2007 22:28 10 240 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 18/06/2007 22:37 24 656 GDIPFONTCACHEV1.DAT 18/06/2007 12:32 3 702 348 IconCache.db 3 fichier(s) 3 737 244 octets 10 Rép(s) 10 793 213 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\LocalService\Application Data 18/05/2004 12:59 <REP> . 18/05/2004 12:59 <REP> .. 18/05/2004 12:59 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 10 793 213 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data 18/05/2004 12:59 <REP> . 18/05/2004 12:59 <REP> .. 18/05/2004 12:59 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 10 793 213 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\NetworkService\Application Data 18/05/2004 12:59 <REP> . 18/05/2004 12:59 <REP> .. 18/05/2004 12:59 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 10 793 213 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data 18/05/2004 12:59 <REP> . 18/05/2004 12:59 <REP> .. 18/05/2004 12:59 <REP> Microsoft 0 fichier(s) 0 octets 3 Rép(s) 10 793 213 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data 18/05/2004 12:58 <REP> . 18/05/2004 12:58 <REP> .. 18/06/2007 12:32 <REP> Adobe 18/06/2007 12:32 <REP> AdobeUM 18/06/2007 12:32 <REP> Identities 18/05/2004 12:58 <REP> Microsoft 18/06/2007 12:32 <REP> Sun 18/06/2007 12:32 <REP> toshiba 18/05/2004 12:58 62 desktop.ini 1 fichier(s) 62 octets 8 Rép(s) 10 793 213 952 octets libres Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data 18/05/2004 12:58 <REP> . 18/05/2004 12:58 <REP> .. 18/06/2007 12:32 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142040} 28/09/2007 21:04 <REP> Apple 19/05/2004 10:22 <REP> Microsoft 18/06/2007 12:32 5 877 146 IconCache.db 1 fichier(s) 5 877 146 octets 5 Rép(s) 10 793 213 952 octets libres ****************************************** Recherche des taches planifiées dans C:\WINDOWS\tasks C:\WINDOWS\Tasks\AppleSoftwareUpdate.job ž OÅ¡Á|æA²Å½7ÁI°F ê < s €!× : C : \ P r o g r a m F i l e s \ A p p l e S o f t w a r e U p d a t e \ S o f t w a r e U p d a t e . e x e - t a s k S Y S T E M 0 × ****************************************** ## Répertoires de C:\Program Files Le volume dans le lecteur C n'a pas de nom. Le numéro de série du volume est 3438-FC0E Répertoire de C:\Program Files 30/09/2007 14:01 <REP> . 30/09/2007 14:01 <REP> .. 18/05/2004 14:09 <REP> Adobe 21/07/2007 12:35 <REP> Adverts 18/08/2007 10:30 <REP> Ahead 15/07/2007 15:32 <REP> Alpha Networks 18/06/2007 14:47 <REP> Alwil Software 17/09/2007 18:24 <REP> Apple Software Update 18/05/2004 13:40 <REP> Atheros 18/05/2004 13:32 <REP> ATI Technologies 18/05/2004 13:48 <REP> AvRack 18/05/2004 13:10 <REP> Common Files 18/05/2004 12:53 <REP> ComPlus Applications 26/07/2007 22:09 <REP> Diablo II 20/09/2007 17:33 <REP> directx 12/07/2007 12:05 <REP> DivX 15/07/2007 15:32 <REP> D-Link 04/11/2007 22:02 <REP> eMule 30/09/2007 14:09 <REP> EPSON 18/06/2007 15:22 <REP> Fichiers communs 18/08/2007 21:14 <REP> GOA 05/09/2007 20:32 <REP> Google 04/07/2007 13:44 <REP> Illusion Softworks 18/05/2004 13:20 <REP> Internet Explorer 18/05/2004 14:07 <REP> InterVideo 17/09/2007 18:22 <REP> iPod 17/09/2007 18:22 <REP> iTunes 18/05/2004 13:17 <REP> Java 19/05/2004 11:19 <REP> ltmoh 18/05/2004 12:52 <REP> Messenger 18/06/2007 22:38 <REP> Messenger Plus! Live 18/05/2004 12:56 <REP> microsoft frontpage 27/07/2007 21:45 <REP> Microsoft Office 16/09/2007 11:58 <REP> Microsoft Works 04/11/2007 17:24 <REP> MioNet 18/05/2004 13:01 <REP> Movie Maker 06/11/2007 19:53 <REP> Mozilla Firefox 18/05/2004 12:52 <REP> MSN 18/05/2004 12:52 <REP> MSN Gaming Zone 18/06/2007 22:38 <REP> MSN Messenger 18/05/2004 13:20 <REP> NetMeeting 18/05/2004 13:20 <REP> Outlook Express 18/08/2007 10:29 <REP> Philips 19/06/2007 08:43 <REP> QuickTime 25/07/2007 18:46 <REP> QuickZip4 18/05/2004 13:48 <REP> Realtek Sound Manager 18/05/2004 12:54 <REP> Services en ligne 18/06/2007 15:23 <REP> Softwin 18/05/2004 14:08 <REP> srslabs 03/07/2007 10:34 <REP> Strategy First 18/05/2004 13:43 <REP> Synaptics 18/06/2007 22:38 <REP> ThirdFlawRoam 18/05/2004 14:08 <REP> TOSHIBA 29/06/2007 13:40 <REP> Ubisoft 10/09/2007 23:08 <REP> VideoLAN 18/06/2007 22:38 <REP> Windows Live 18/05/2004 13:01 <REP> Windows Media Player 18/05/2004 12:52 <REP> Windows NT 27/07/2007 08:00 <REP> WinRAR 18/05/2004 12:56 <REP> xerox 0 fichier(s) 0 octets 60 Rép(s) 10 793 201 664 octets libres ****************************************** ## Popups autorisées * Internet Explorer * Mozilla Firefox (1 autorisé 2 interdit) ---------- C:\DOCUMENTS AND SETTINGS\LAURENT\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\HZ3O1NB8.DEFAULT\HOSTPERM.1 ****************************************** ## Registre * [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] blueway REG_SZ C:\DOCUME~1\Laurent\APPLIC~1\THIRDF~1\barb free.exe ****************************************** ## Zones de sécurité * HKCU Domains (4) * P3P History (5) ****************************************** ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif" *************** Fin du rapport **************** ça ne me parle pas vraiment à vous plus probablement. merci de m'aider.