[Résolu] Programme qui se met en "arrière plan" après un son

[LeChacal]

Salut tout le monde.

 

Je vous explique mon problème. Je suis amateur de jeux vidéos et depuis quelques temps quand je suis en pleine partie, j'entends un clic de souris (dans mon casque), et j'ai l'impression que mon jeux passe en second plan, comme si un programme se lançait mais il est invisible ; dur à expliquer...

 

Exemples :

- Je suis sur counter strike, j'entends ce fameux clic de souris, et le jeux se réduit dans la barre des taches.

Ou

- Je suis sur Lineage (rpg) sur lequel je joue en mode fenêtré, j'entends encore ce clic et mon jeu passe de 50 fps à 1-2 fps, je re clic sur le jeux et je re passe à 50 fps. Lineage à l'air de passer en arrière plan.

 

Je vous laisse un rapport de Hijackthis :

 

Je vous remercie par avance.

Et à bientôt je l'espère.

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:43:32, on 05/03/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\System32\PnkBstrA.exe

C:\Program Files\FlashGet\FlashGet.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Razer\Reclusa\razerhid.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\PROGRAM FILES\FRAPS\FRAPS.EXE

C:\Program Files\Razer\Reclusa\razertra.exe

C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\Program Files\Winamp\winamp.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O1 - Hosts: 213.239.219.83 l2authd.lineage2.com # m0o age

O1 - Hosts: 213.239.219.83 L2testauthd.lineage2.com #m0o age

O1 - Hosts: 91.121.50.64 nProtect.lineage2.com #m0o age

O1 - Hosts: 91.121.50.64 update.nProtect.com #m0o age

O1 - Hosts: 91.121.50.64 update.nProtect.net #m0o age

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O4 - HKLM\..\Run: [Win32] zycthq.exe

O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\FlashGet.exe /min

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Reclusa] C:\Program Files\Razer\Reclusa\razerhid.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\RunServices: [Win32] zycthq.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Win32] zycthq.exe

O4 - HKCU\..\Run: [steam] "d:\jeux\valve\steam\steam.exe" -silent

O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE

O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe

 

--

End of file - 6070 bytes

Modifié le 9 mars 2008 par LeChacal

[bruce lee]

Salut LeChacal et bienvenue sur zebulon

 

Analyse en cours...

[bruce lee]

Re,

 

Si durant la procédure ci-dessous, il y a des étapes que tu n'as pas reussi a faire, merci de continuer la procédure jusqu'au bout et de les signaler dans ta prochaine reponse.

 

Je te conseille d'enregistrer la page web compléte sous Internet Explorer comme ceci :

 

* Clique sur Fichier/Enregistrer sous Dans Type, choisis : Archive web (fichier seul (*.mht) / Enregistre la sur le bureau,comme cela tu retrouvera la mise en forme ou imprime cette réponse. Une partie de la désinfection se déroulera en mode sans échec.

 

 

1/Télécharge puis installe http://www.ewido.net/en/download

Une fois AVG AS lancé, clique sur Mise à jour

Ferme le programme.

 

2/Démarre en mode sans échec http://cybersecurite.xooit.com/t88-Demarre...s-echec.htm#665

 

3/Lance hijackthis en cliquant sur do a scan system only et coche ces lignes:

 

O4 - HKLM\..\Run: [Win32] zycthq.exe

O4 - HKLM\..\RunServices: [Win32] zycthq.exe

O4 - HKCU\..\Run: [Win32] zycthq.exe

 

Ferme toutes les fenêtres ouvertes sauf Hijackthis et clique sur fix checked

 

 

4/

demarrer,rechercher,clique sur tous les fichiers et tout les dossiers, clique sur les deux petites fleches a cotes de options avancées

et coche rechercher dans les fichiers et dossiers cachés.

 

recherche (demarrer/rechercher) et supprime ce fichier si tu le trouves:

 

zycthq.exe

 

5/ Relance AVG AS puis choisis l'onglet Analyse

Puis l'onglet Paramètres

Sous la question Comment réagir ?, clique sur Actions recommandées et choisis Quarantaine

Reclique sur l'onglet Analyse puis réalise une Analyse complète du système

 

Si un fichier infecté est détecté en fin d'analyse

Clique sur Appliquer toutes les actions

 

Clique sur Enregistrer le rapport puis sur Enregistrer le rapport sous

Enregistre ce fichier texte sur ton bureau

 

6/Redémarre en mode normal

 

7/Poste le rapport d'AVG Anti spyware 7.5 ainsi qu'un nouveau log Hijackthis.

 

Bon courage, et si tu as la moindre question n'hésite surtout pas

 

@+

[LeChacal]

Héé bien ! Tout d'abord, merci pour l'accueil, et merci de m'avoir répondu si rapidement !

Je viens de faire tout se que tu m'as dit de faire.

 

En ce qui concerne le cochage des lignes sur Hijackthis, je n'ai coché que les 2 premières lignes, j'ai bien vérifié mais la 3ème n'apparaissait pas (en mode sans échec)

La recherche du fichier zycthq.exe n'a pas été fructueuse, il n'y avait rien du tout.

Par contre sur avg il a trouvé pas mal de truck, voilà le rapport, suivi du rapport de Hijackthis.

 

Merci encore.

 

---------------------------------------------------------

AVG Anti-Spyware - Rapport d'analyse

---------------------------------------------------------

 

+ Créé à: 18:10:09 05/03/2008

 

+ Résultat de l'analyse:

 

 

 

HKU\S-1-5-21-776561741-1214440339-839522115-500\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Nettoyé et sauvegardé (mise en quarantaine).

C:\WINDOWS\system32\explor.exe -> Downloader.Small.hyu : Nettoyé et sauvegardé (mise en quarantaine).

:mozilla.606:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.

:mozilla.607:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.

:mozilla.608:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.

:mozilla.609:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.

:mozilla.610:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.

:mozilla.611:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.

:mozilla.612:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.247realmedia : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.

:mozilla.603:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.613:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.614:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.615:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.616:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.617:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.618:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.619:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.620:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.621:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.622:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.623:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.624:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.625:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.626:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.627:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.628:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.629:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.630:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.631:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.632:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.633:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.

:mozilla.198:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.

:mozilla.199:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.

:mozilla.200:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Adbrite : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@adbrite[1].txt -> TrackingCookie.Adbrite : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@www.adobe[1].txt -> TrackingCookie.Adobe : Nettoyé.

:mozilla.508:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.

:mozilla.509:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@adtech[1].txt -> TrackingCookie.Adtech : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.

:mozilla.325:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.

:mozilla.327:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.

:mozilla.328:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.

:mozilla.329:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.

:mozilla.48:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@adviva[1].txt -> TrackingCookie.Adviva : Nettoyé.

:mozilla.447:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@www.belstat[2].txt -> TrackingCookie.Belstat : Nettoyé.

:mozilla.157:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyé.

:mozilla.215:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Clickhype : Nettoyé.

:mozilla.453:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.

:mozilla.454:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.

:mozilla.455:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.

:mozilla.456:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.

:mozilla.457:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Comclick : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Nettoyé.

:mozilla.708:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Dealtime : Nettoyé.

:mozilla.24:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.

:mozilla.254:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@estat[1].txt -> TrackingCookie.Estat : Nettoyé.

:mozilla.189:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Googleadservices : Nettoyé.

:mozilla.528:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.

:mozilla.529:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.

:mozilla.530:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.

:mozilla.531:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Hitbox : Nettoyé.

:mozilla.495:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.

:mozilla.496:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Imrworldwide : Nettoyé.

:mozilla.255:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@auto.search.msn[1].txt -> TrackingCookie.Msn : Nettoyé.

:mozilla.68:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Netflame : Nettoyé.

:mozilla.112:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.

:mozilla.113:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.

:mozilla.114:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Overture : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@guide.real[2].txt -> TrackingCookie.Real : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@real[1].txt -> TrackingCookie.Real : Nettoyé.

:mozilla.900:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.

:mozilla.901:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.

:mozilla.902:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.

:mozilla.903:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Revsci : Nettoyé.

:mozilla.10:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.

:mozilla.11:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.

:mozilla.12:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.

:mozilla.6:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.

:mozilla.7:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.

:mozilla.8:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.

:mozilla.9:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@bs.serving-sys[3].txt -> TrackingCookie.Serving-sys : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@skype[1].txt -> TrackingCookie.Skype : Nettoyé.

:mozilla.20:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.

:mozilla.21:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.

:mozilla.22:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.

:mozilla.23:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.

:mozilla.25:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.

:mozilla.26:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.

:mozilla.27:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@tacoda[1].txt -> TrackingCookie.Tacoda : Nettoyé.

:mozilla.165:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.

:mozilla.166:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.

:mozilla.167:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.

:mozilla.168:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.

:mozilla.170:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.

:mozilla.441:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Tribalfusion : Nettoyé.

:mozilla.14:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.

:mozilla.15:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.

:mozilla.16:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.

:mozilla.17:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.

:mozilla.18:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.

:mozilla.19:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.

:mozilla.71:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.72:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.73:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.74:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.75:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.76:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.77:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.78:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.

C:\Documents and Settings\J@n\Cookies\j@n@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.

:mozilla.450:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.

:mozilla.451:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.

:mozilla.452:C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cookies.txt -> TrackingCookie.Zedo : Nettoyé.

 

 

Fin du rapport

 

 

---------------------------------------------------------

HiJackThis - Rapport d'analyse

---------------------------------------------------------

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 18:29:24, on 05/03/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\FlashGet\FlashGet.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Razer\Reclusa\razerhid.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\PROGRAM FILES\FRAPS\FRAPS.EXE

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Razer\Reclusa\razertra.exe

C:\WINDOWS\System32\PnkBstrA.exe

C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

C:\Program Files\MSN Messenger\usnsvc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O1 - Hosts: 213.239.219.83 l2authd.lineage2.com # m0o age

O1 - Hosts: 213.239.219.83 L2testauthd.lineage2.com #m0o age

O1 - Hosts: 91.121.50.64 nProtect.lineage2.com #m0o age

O1 - Hosts: 91.121.50.64 update.nProtect.com #m0o age

O1 - Hosts: 91.121.50.64 update.nProtect.net #m0o age

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\FlashGet.exe /min

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Reclusa] C:\Program Files\Razer\Reclusa\razerhid.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Win32] zycthq.exe

O4 - HKCU\..\Run: [steam] "d:\jeux\valve\steam\steam.exe" -silent

O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE

O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe

 

--

End of file - 6121 bytes

[bruce lee]

Re,

 

Lance hijackthis en cliquant sur do a scan system only et coche ces lignes:

 

O4 - HKCU\..\Run: [Win32] zycthq.exe

 

Ferme toutes les fenêtres ouvertes sauf Hijackthis et clique sur fix checked

 

Redémarre ton PC puis poste un nouveau rapport HijackThis.

 

Assure toi que les contrôles activeX soient bien configurés dans les options internet comme décrit sur ce lien=> http://cybersecurite.xooit.com/t123-Les-co...les-ActiveX.htm

• Fais un scan en ligne Kaspersky
  
• Clique sur Accept
  
• Une barre jaune va te demander si tu acceptes d'installer le Kavwebscan_Unicode.cab, installe l'Active X.
  
• clique une nouvelle fois sur "Accept"
  
• Les bases de mises à jour vont s'installer, patiente un moment
  
• Clique sur Next.
  
• Clique sur My Computer, le scan se met en route; attends la fin du scan sans fermer la fenêtre sinon il s'arrêtera.
  

 

A la fin du scan, si des objets infectés sont découverts, clique sur Save report as... Choisis bureau et nomme le rapport "rapport Kaspersky" et dans le champ d'enregistrement, choisis "fichiers texte" enregistre alors le rapport.

 

Copie/colle l'entièreté du fichier texte ouvert, par clic droit dessus, sélectionner tout/copier.

 

Colle ce rapport dans ta réponse sur le forum.

 

Aide en cas de problème http://cybersecurite.xooit.com/t100-Scan-e...spersky.htm#768

 

NOTE: Le scan est à faire avec Internet Explorer.

[LeChacal]

Yo, je suis désolé d'avoir mis autant de temps à répondre, mais j'avais une grosse flemme...

 

Voilà le rapport Hijackthis après avoir coché la ligne en question, suivit du rapport de Kaspersky :

 

Merci de prendre de ton temps rien que pour moi !

 

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:16:34, on 07/03/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\System32\PnkBstrA.exe

C:\Program Files\FlashGet\FlashGet.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Razer\Reclusa\razerhid.exe

C:\Program Files\QuickTime\qttask.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\Program Files\Razer\Reclusa\razertra.exe

C:\PROGRAM FILES\FRAPS\FRAPS.EXE

C:\PROGRA~1\MOZILL~1\FIREFOX.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O1 - Hosts: 213.239.219.83 l2authd.lineage2.com # m0o age

O1 - Hosts: 213.239.219.83 L2testauthd.lineage2.com #m0o age

O1 - Hosts: 91.121.50.64 nProtect.lineage2.com #m0o age

O1 - Hosts: 91.121.50.64 update.nProtect.com #m0o age

O1 - Hosts: 91.121.50.64 update.nProtect.net #m0o age

O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll

O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\FlashGet.exe /min

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Reclusa] C:\Program Files\Razer\Reclusa\razerhid.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [steam] "d:\jeux\valve\steam\steam.exe" -silent

O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE

O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe

O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm

O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\System32\PnkBstrA.exe

 

--

End of file - 6073 bytes

 

 

-------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER REPORT

-------------------------------------------------------------------------------

Friday, March 07, 2008 3:01:49 PM

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.98.0

Kaspersky Anti-Virus database last update: 7/03/2008

Kaspersky Anti-Virus database records: 609266

-------------------------------------------------------------------------------

 

Scan Settings:

Scan using the following antivirus database: extended

Scan Archives: true

Scan Mail Bases: true

 

Scan Target - My Computer:

C:\

D:\

E:\

F:\

G:\

H:\

 

Scan Statistics:

Total number of scanned objects: 161187

Number of viruses found: 3

Number of infected objects: 5

Number of suspicious objects: 0

Duration of the scan process: 02:16:32

 

Infected Object Name / Virus Name / Last Action

C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Charon\CACHE.NDB Object is locked skipped

C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Logs\virlog.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Logs\warnlog.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cert8.db Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\flashgot.log Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\history.dat Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\key3.db Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\parent.lock Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\search.sqlite Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\urlclassifier2.sqlite Object is locked skipped

C:\Documents and Settings\J@n\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_001_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_002_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_003_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_MAP_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\NeroDemo12069\Toolbar.exe Infected: not-a-virus:AdTool.Win32.MyWebSearch.bm skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF307B.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF6FB5.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF6FD1.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF7831.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF7895.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temporary Internet Files\Content.IE5\BKF1ZIPY\appD[1].cab/inapp5.exe Infected: Trojan-Dropper.Win32.Agent.ezo skipped

C:\Documents and Settings\J@n\Local Settings\Temporary Internet Files\Content.IE5\BKF1ZIPY\appD[1].cab CAB: infected - 1 skipped

C:\Documents and Settings\J@n\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\J@n\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\J@n\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Program Files\Winamp\Plugins\ml\main.idx Object is locked skipped

C:\Program Files\Winamp\Plugins\ml\recent.idx Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{92D76E23-4433-4766-8E6C-EFC75CD5EE4A}\RP451\A0101757.dll Object is locked skipped

C:\System Volume Information\_restore{92D76E23-4433-4766-8E6C-EFC75CD5EE4A}\RP457\A0104458.exe Infected: Trojan-Downloader.Win32.Small.hyu skipped

C:\System Volume Information\_restore{92D76E23-4433-4766-8E6C-EFC75CD5EE4A}\RP459\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped

C:\WINDOWS\system32\config\OSession.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped

C:\WINDOWS\system32\msn.exe Infected: Trojan-Downloader.Win32.Small.hyu skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\Temp\HTT3FD2.tmp Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

 

Scan process completed.

[bruce lee]

Re,

 

Affiche tout les fichiers et dossiers cachés:

 

Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :

Cocher la case : Afficher les fichiers et dossiers cachés

Décocher la case : Masquer les extensions des fichiers dont le type est connu

Décocher la case : Masquer les fichiers protégés du système d'exploitation

cliquer sur "Appliquer"

cliquer sur le bouton "Appliquer à tous les dossiers" / OK

 

Supprime ce qui est en gras:

 

C:\Documents and Settings\J@n\Local Settings\Temp\NeroDemo12069\ Toolbar.exe<== le fichier

C:\WINDOWS\system32\ msn.exe<== le fichier

 

Vide le contenu de ta Corbeille.

 

Lance internet explorer, tu cliques sur outils puis sur options internet... tu vas

dans l'onglet general et dans Fichiers internet temporaires tu cliques sur:

 

supprimer les cookies...

supprimer les fichiers...

 

Suis scrupuleusement les instructions de ce lien (desactive et réactive la restauration de systeme)

 

http://cybersecurite.xooit.com/t120-Desact...-du-systeme.htm

 

refais ensuite un nouveau scan en ligne avec kaspersky puis poste le rapport

 

@+

[LeChacal]

Voilà, tout se que tu viens de me dire est fait.

 

Plus qu'à attendre 2h... pour scan kaspersky.

 

Merci !

[LeChacal]

Voilà, tout à l'air en ordre si je ne m'abuse.

Merci beaucoup, si tu vois d'autre anomalie à réparer, n'hésite pas !

 

Thanks.

 

Voici le rapport :

 

-------------------------------------------------------------------------------

KASPERSKY ONLINE SCANNER REPORT

Friday, March 07, 2008 11:07:08 PM

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky Online Scanner version: 5.0.98.0

Kaspersky Anti-Virus database last update: 7/03/2008

Kaspersky Anti-Virus database records: 610492

-------------------------------------------------------------------------------

 

Scan Settings:

Scan using the following antivirus database: extended

Scan Archives: true

Scan Mail Bases: true

 

Scan Target - My Computer:

C:\

D:\

E:\

F:\

G:\

H:\

 

Scan Statistics:

Total number of scanned objects: 157164

Number of viruses found: 0

Number of infected objects: 0

Number of suspicious objects: 0

Duration of the scan process: 01:34:42

 

Infected Object Name / Virus Name / Last Action

C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Charon\CACHE.NDB Object is locked skipped

C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Logs\virlog.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\ESET\ESET NOD32 Antivirus\Logs\warnlog.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\cert8.db Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\flashgot.log Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\history.dat Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\key3.db Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\parent.lock Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\search.sqlite Object is locked skipped

C:\Documents and Settings\J@n\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\urlclassifier2.sqlite Object is locked skipped

C:\Documents and Settings\J@n\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Messenger\lechacal2six3@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Messenger\lechacal2six3@hotmail.com\SharingMetadata\pending.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Messenger\lechacal2six3@hotmail.com\SharingMetadata\Working\database_FAE0_CDDD_E0CD_9FED\dfsr.db Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Messenger\lechacal2six3@hotmail.com\SharingMetadata\Working\database_FAE0_CDDD_E0CD_9FED\fsr.log Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Messenger\lechacal2six3@hotmail.com\SharingMetadata\Working\database_FAE0_CDDD_E0CD_9FED\fsrtmp.log Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Messenger\lechacal2six3@hotmail.com\SharingMetadata\Working\database_FAE0_CDDD_E0CD_9FED\tmp.edb Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Windows Live Contacts\LeChacal2six3@hotmail.com\real\members.stg Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Microsoft\Windows Live Contacts\LeChacal2six3@hotmail.com\shadow\members.stg Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_001_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_002_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_003_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Application Data\Mozilla\Firefox\Profiles\lo3q4g3g.default\Cache\_CACHE_MAP_ Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Historique\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Historique\History.IE5\MSHist012008030720080308\index.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\h2gvkd11.avi Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\Perflib_Perfdata_610.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\Perflib_Perfdata_b8c.dat Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF307B.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF643E.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF6FB5.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF6FD1.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF7831.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temp\~DF7895.tmp Object is locked skipped

C:\Documents and Settings\J@n\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\J@n\Mes documents\Mes Historiques de Conversation\mars 2008\missbetty33@hotmail.fr.html Object is locked skipped

C:\Documents and Settings\J@n\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\J@n\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Downloads\T_A_RENOMER.avi.jc! Object is locked skipped

C:\Program Files\Winamp\Plugins\ml\main.idx Object is locked skipped

C:\Program Files\Winamp\Plugins\ml\recent.idx Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{92D76E23-4433-4766-8E6C-EFC75CD5EE4A}\RP460\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\DataStore\DataStore.edb Object is locked skipped

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log Object is locked skipped

C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped

C:\WINDOWS\system32\config\OSession.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

D:\Jeux\Valve\Steam\logs\connection_log.txt Object is locked skipped

D:\Jeux\Valve\Steam\Steam.log Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\counter-strike french.gcf Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\counter-strike.gcf Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\half-life engine.gcf Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\half-life french.gcf Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\half-life.gcf Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\platform.gcf Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\sourceinit.gcf Object is locked skipped

D:\Jeux\Valve\Steam\SteamApps\winui.gcf Object is locked skipped

D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

 

Scan process completed.

[bruce lee]

Re,

 

C'est clean

 

As-tu encore des problèmes avec ton PC?