mon rapport HiJAck THIS

[Invité jipitou69]

voici mon rapport, quelqu'un peut m'aider?

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 13:52:09, on 2008-05-04

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Canon\CAL\CALMAIN.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\IEAntiVirus\ANTIVIRUS.exe

C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE

C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

 

--

End of file - 1220 bytes

[pear]

Bonsoir,

voici mon rapport, quelqu'un peut m'aider?

 

Ce serait volontiers, mais pour que faire ?

 

D'autant que votre rapport est incomplet .

[Invité jipitou69]

Bonsoir,

 

 

Ce serait volontiers, mais pour que faire ?

 

D'autant que votre rapport est incomplet .

 

j'ai Norton internet security 2008, j'ai téléchargé et effacé tous les antispywares, le rapport dit que je ne suis pas infecté par aucun spyware, cependant lorsque je navigue, je suis envahi par cet avertissement, c'est fou!

 

Error!

Your computer was infected by dangerous virus! Some results was changed by porn advertising, your passwords and other private info no more in safe! You must to clean your system immediately to prevent it. Download the newest anti-virus software!

[galsenpape]

j ai des problemes avec ma connexion wifi( je peut pas voir les reseaux sans fil disponible).comme reponse j ai windows ne peut pas confugurer votre connexion sans fil(article 871122) et jai instalé combofix;voici le rapport.

merci de m aider svp

ComboFix 08-05-01.3 - secretariat cctm 2008-05-05 13:23:55.1 - NTFSx86

Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.102 [GMT 1:00]

Endroit: C:\Documents and Settings\secretariat cctm\Bureau\killer.exe

Command switches used :: C:\Documents and Settings\secretariat cctm\Bureau\WinXP_FR_PRO_BF.EXE

* Création d'un nouveau point de restauration

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\install\install.exe

C:\WINDOWS\system32\_000012_.tmp.dll

C:\WINDOWS\system32\ban_list.txt

C:\WINDOWS\system32\drivers\downld

C:\WINDOWS\system32\drivers\downld\105593.exe

C:\WINDOWS\system32\drivers\downld\111078.exe

C:\WINDOWS\system32\drivers\downld\128265.exe

C:\WINDOWS\system32\drivers\downld\154000.exe

C:\WINDOWS\system32\drivers\downld\194250.exe

C:\WINDOWS\system32\drivers\downld\199437.exe

C:\WINDOWS\system32\drivers\downld\202843.exe

C:\WINDOWS\system32\drivers\downld\207781.exe

C:\WINDOWS\system32\drivers\downld\216140.exe

C:\WINDOWS\system32\drivers\downld\225734.exe

C:\WINDOWS\system32\drivers\downld\249812.exe

C:\WINDOWS\system32\drivers\downld\258265.exe

C:\WINDOWS\system32\drivers\downld\289921.exe

C:\WINDOWS\system32\drivers\downld\290218.exe

C:\WINDOWS\system32\drivers\downld\444187.exe

C:\WINDOWS\system32\drivers\downld\491046.exe

C:\WINDOWS\system32\drivers\downld\509265.exe

C:\WINDOWS\system32\drivers\downld\523500.exe

C:\WINDOWS\system32\drivers\downld\541296.exe

C:\WINDOWS\system32\drivers\downld\574562.exe

C:\WINDOWS\system32\drivers\downld\575187.exe

C:\WINDOWS\system32\drivers\downld\617953.exe

C:\WINDOWS\system32\drivers\downld\638062.exe

C:\WINDOWS\system32\drivers\downld\762921.exe

C:\WINDOWS\system32\drivers\downld\773843.exe

C:\WINDOWS\system32\drivers\hldrrr.exe

C:\WINDOWS\system32\drivers\mdelk.exe

C:\WINDOWS\system32\drivers\srosa.sys

C:\WINDOWS\system32\drivers\Xprotector.sys

C:\WINDOWS\system32\mdelk.exe

C:\WINDOWS\system32\wintems.exe

 

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_SROSA

-------\Legacy_XPROTECTOR

-------\Service_XPROTECTOR

 

 

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-05 to 2008-05-05 ))))))))))))))))))))))))))))))))))))

.

 

2008-05-05 13:30 . 2008-05-05 13:30 <REP> d-------- C:\WINDOWS\system32\drivers\downld

2008-05-05 13:22 . 2008-05-05 13:22 1,024 --ah----- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG

2008-05-05 11:31 . 2008-05-05 11:31 <REP> d-------- C:\Program Files\Alwil Software

2008-05-05 09:36 . 2008-05-05 09:37 <REP> d-------- C:\Program Files\mine22

2008-05-02 10:27 . 2008-05-02 10:27 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab

2008-05-02 10:27 . 2008-05-02 10:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab

2008-04-30 15:06 . 2008-04-30 15:06 <REP> d-------- C:\Program Files\Search Settings

2008-04-30 15:06 . 2008-04-30 15:06 <REP> d-------- C:\Program Files\FLV Player

2008-04-30 15:06 . 2008-04-30 15:06 <REP> d-------- C:\Program Files\Fichiers communs\DVDVideoSoft

2008-04-30 15:05 . 2008-04-30 15:05 <REP> d-------- C:\Program Files\ANI

2008-04-30 14:12 . 2008-04-30 15:06 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\Search Settings

2008-04-30 11:29 . 2008-05-05 11:36 3,284 --a------ C:\WINDOWS\system32\ANIWZCS{DC2194BA-F440-4E6F-9405-632CB513B03A}

2008-04-30 09:21 . 2008-05-05 11:36 17 --a------ C:\WINDOWS\system32\ANIWZCSUSERNAME{DC2194BA-F440-4E6F-9405-632CB513B03A}

2008-04-30 09:16 . 2005-03-28 17:49 137 --a------ C:\WINDOWS\system32\DWLAB.DAT

2008-04-29 09:02 . 2008-04-30 14:58 <REP> d-------- C:\Program Files\Fichiers communs\DVDVideoSoft(2)

2008-04-24 09:58 . 2008-04-30 15:03 <REP> d-------- C:\Program Files\Flash Movie Player

2008-04-22 10:57 . 2008-04-30 15:04 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\VMNTOOLBAR

2008-04-22 09:55 . 2008-04-22 09:55 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\AVSMedia

2008-04-18 16:33 . 2008-04-18 16:33 <REP> d-------- C:\Documents and Settings\All Users\Application Data\AVS4YOU

2008-04-18 14:54 . 2008-04-22 10:02 <REP> d-------- C:\Program Files\Fichiers communs\AVSMedia

2008-04-17 13:49 . 2008-04-17 13:49 <REP> d-------- C:\WINDOWS\Replay Media Catcher

2008-04-17 13:45 . 2008-04-17 13:48 4,265,560 --a------ C:\Program Files\FLV PlayerRCATSetup.exe

2008-04-17 13:44 . 2008-04-17 13:44 <REP> d-------- C:\WINDOWS\Applian FLV Player

2008-04-16 17:14 . 2005-10-13 13:42 208,500 --a------ C:\WINDOWS\system32\ReyXpBasics.tlb

2008-04-16 17:14 . 2004-03-09 01:00 84,512 --a------ C:\WINDOWS\system32\PICCLP32.OCX

2008-04-16 17:14 . 2005-09-28 02:31 24,576 --a------ C:\WINDOWS\system32\ControlSubX.ocx

2008-04-16 17:14 . 1998-07-13 01:00 9,728 --a------ C:\WINDOWS\system32\PCCLPFR.DLL

2008-04-09 16:23 . 2008-04-09 16:23 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\3DFA

2008-04-09 15:10 . 2004-03-29 16:23 90,112 --a------ C:\WINDOWS\unvise32.exe

2008-04-09 11:33 . 2008-04-09 11:33 <REP> d-------- C:\Program Files\Google

2008-04-08 08:32 . 2008-04-08 08:32 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\CA

2008-04-07 13:07 . 2008-04-30 15:04 <REP> d-------- C:\Program Files\PimpFish

2008-04-07 11:03 . 2008-04-07 11:03 372,736 --a------ C:\WINDOWS\FLASH1.scr

2008-04-07 10:50 . 2005-10-10 12:38 933,888 --a------ C:\WINDOWS\system32\Flash.ocx

2008-04-07 10:50 . 2005-07-16 10:36 77,824 --a------ C:\WINDOWS\system32\Wavdest.ax

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-05-02 08:50 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-04-30 14:23 --------- d-----w C:\Program Files\D-Link

2008-04-30 14:05 --------- d-----w C:\Program Files\Macromedia

2008-04-30 14:05 --------- d-----w C:\Program Files\Fichiers communs\Macromedia

2008-04-30 07:15 --------- d-----w C:\Program Files\eMule

2008-04-21 08:53 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Image Zone Express

2008-04-09 14:32 --------- d-----w C:\Program Files\WinISO

2008-04-02 13:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files

2008-04-01 15:46 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE

2008-04-01 15:46 249,856 ------w C:\WINDOWS\Setup1.exe

2008-04-01 14:46 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\AdobeUM

2008-03-31 13:01 --------- d-----w C:\Program Files\Intuisphere

2008-03-28 09:51 --------- d-----w C:\Program Files\Java

2008-03-26 07:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Macrovision

2008-03-26 07:54 --------- d-----w C:\Program Files\Fichiers communs\Macromedia Shared

2008-03-25 15:33 737,280 ----a-w C:\WINDOWS\iun6002.exe

2008-03-25 11:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zabersoft

2008-03-18 15:41 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\LogoMaker

2008-03-17 14:02 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Serif

2008-03-17 08:49 --------- d-----w C:\Program Files\Fichiers communs\InstallShield

2008-03-14 07:28 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\VCOM

2008-03-14 07:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\VCOM

2008-03-12 12:33 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Nvu

2008-03-12 09:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Icon Constructor 3

2008-03-12 09:48 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\gtk-2.0

2008-03-11 13:31 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Talkback

2008-03-11 13:25 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\SmartDraw

2008-03-11 12:31 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\FileZilla

2008-03-07 09:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\EwisoftWeb

2008-03-06 16:34 --------- d-----w C:\Program Files\Fichiers communs\Adobe

.

 

------- Sigcheck -------

 

2005-03-02 19:20 578048 c34920eb988ce98910bd6b0417f334eb C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll

2007-03-08 16:50 579072 4d88aaf39adabfe45958ea1384e2c4ff C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll

2004-08-04 01:54 578048 e46fb493e3b33704f0715020cf52106b C:\WINDOWS\$NtUninstallKB890859$\user32.dll

2005-03-02 19:10 578048 0df75fb73f705b011630159a43d7c354 C:\WINDOWS\$NtUninstallKB925902$\user32.dll

2007-03-08 16:37 578560 753354f594809a9b96f73999b435a533 C:\WINDOWS\system32\user32.dll

2007-03-08 16:37 578560 753354f594809a9b96f73999b435a533 C:\WINDOWS\system32\dllcache\user32.dll

 

2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys

2004-08-18 10:22 359040 27a5959c94ee173a063ca06bd14f021a C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys

2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 C:\WINDOWS\system32\dllcache\tcpip.sys

2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 C:\WINDOWS\system32\drivers\tcpip.sys

 

2005-03-02 19:13 2059008 5311776074b6c13f983dc75baeac9c0c C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe

2007-02-28 17:08 2061440 7a56a64eb50399613587e90292dd2aab C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe

2005-03-02 19:07 2058880 73fa9c95d235844a36968c7852c7dbdd C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe

2007-02-28 17:02 2059648 a1d5231403329478ae4fe2778c55c77f C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe

2007-02-28 17:02 2059648 a1d5231403329478ae4fe2778c55c77f C:\WINDOWS\system32\ntkrnlpa.exe

2007-02-28 17:02 2059648 a1d5231403329478ae4fe2778c55c77f C:\WINDOWS\system32\dllcache\ntkrnlpa.exe

 

2005-03-02 19:13 2181632 3e2a0a4a0c0b19fc113618a9562a3b2a C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe

2007-02-28 17:08 2184192 8e244108562e0e452eb68dff64cb08a9 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe

2005-03-02 19:08 2181376 63729dd0f2aae36cc52b89c05505146c C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe

2007-02-28 17:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe

2007-02-28 17:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\system32\ntoskrnl.exe

2007-02-28 17:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\system32\dllcache\ntoskrnl.exe

 

2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 C:\WINDOWS\explorer.exe

2007-06-13 14:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe

2004-08-22 23:35 1036288 998f3f568f6074a35ab08cd3395a9dc2 C:\WINDOWS\$NtUninstallKB938828$\explorer.exe

2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 C:\WINDOWS\system32\dllcache\explorer.exe

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]

2008-02-06 17:47 1160544 --a------ C:\Program Files\Search Settings\kb126\SearchSettings.dll

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:54 15360]

"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [ ]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"D-Link AirPlus G"="C:\Program Files\D-Link\AirPlus G\AirGCFG.exe" [2005-06-12 07:01 688128]

"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2006-06-01 16:59 49152]

"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 21:16 39792]

"SearchSettings"="C:\Program Files\Search Settings\SearchSettings.exe" [2008-02-06 17:47 1036640]

"D-Link AirPlus XtremeG"="C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe" [2006-06-16 10:24 1323008]

"avast!"="C:\Program Files\Alwil Software\Avast4\ashDisp.exe" [2008-05-05 13:25 98352]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableLUA"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"C:\\Program Files\\eMule\\emule.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"C:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 7.0.1.325\\English\\setup.exe"=

 

S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2006-05-11 13:11]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2e99b5ce-182b-11dd-8607-0002b3ade6b2}]

\Shell\AutoRun\command - E:\nideiect.com

\Shell\explore\Command - E:\nideiect.com

\Shell\open\Command - E:\nideiect.com

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ba1c0f5d-c989-11dc-96a7-0002b3ade6b2}]

\Shell\AutoRun\command - fooool.exe

\Shell\explore\Command - fooool.exe

\Shell\open\Command - fooool.exe

 

.

**************************************************************************

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-05-05 13:30:34

Windows 5.1.2600 Service Pack 2 NTFS

 

Balayage processus cach‚s ...

 

Balayage cach‚ autostart entries ...

 

Balayage des fichiers cach‚s ...

 

Scan termin‚ avec succŠs

Les fichiers cach‚s: 0

 

**************************************************************************

.

------------------------ Other Running Processes ------------------------

.

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\WgaTray.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

.

**************************************************************************

.

Temps d'accomplissement: 2008-05-05 13:33:56 - machine was rebooted

ComboFix-quarantined-files.txt 2008-05-05 12:33:49

 

Pre-Run: 5,906,206,720 octets libres

Post-Run: 6,371,082,240 octets libres

 

WinXP_FR_PRO_BF.EXE

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

 

231 --- E O F --- 2008-04-09 09:31:45

[pear]

j ai des problemes avec ma connexion wifi( je peut pas voir les reseaux sans fil disponible).comme reponse j ai windows ne peut pas confugurer votre connexion sans fil(article 871122) et jai instalé combofix;voici le rapport.

merci de m aider svp

ComboFix 08-05-01.3 - secretariat cctm 2008-05-05 13:23:55.1 - NTFSx86

Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.102 [GMT 1:00]

Endroit: C:\Documents and Settings\secretariat cctm\Bureau\killer.exe

Command switches used :: C:\Documents and Settings\secretariat cctm\Bureau\WinXP_FR_PRO_BF.EXE

* Création d'un nouveau point de restauration

.

 

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))

.

 

C:\install\install.exe

C:\WINDOWS\system32\_000012_.tmp.dll

C:\WINDOWS\system32\ban_list.txt

C:\WINDOWS\system32\drivers\downld

C:\WINDOWS\system32\drivers\downld\105593.exe

C:\WINDOWS\system32\drivers\downld\111078.exe

C:\WINDOWS\system32\drivers\downld\128265.exe

C:\WINDOWS\system32\drivers\downld\154000.exe

C:\WINDOWS\system32\drivers\downld\194250.exe

C:\WINDOWS\system32\drivers\downld\199437.exe

C:\WINDOWS\system32\drivers\downld\202843.exe

C:\WINDOWS\system32\drivers\downld\207781.exe

C:\WINDOWS\system32\drivers\downld\216140.exe

C:\WINDOWS\system32\drivers\downld\225734.exe

C:\WINDOWS\system32\drivers\downld\249812.exe

C:\WINDOWS\system32\drivers\downld\258265.exe

C:\WINDOWS\system32\drivers\downld\289921.exe

C:\WINDOWS\system32\drivers\downld\290218.exe

C:\WINDOWS\system32\drivers\downld\444187.exe

C:\WINDOWS\system32\drivers\downld\491046.exe

C:\WINDOWS\system32\drivers\downld\509265.exe

C:\WINDOWS\system32\drivers\downld\523500.exe

C:\WINDOWS\system32\drivers\downld\541296.exe

C:\WINDOWS\system32\drivers\downld\574562.exe

C:\WINDOWS\system32\drivers\downld\575187.exe

C:\WINDOWS\system32\drivers\downld\617953.exe

C:\WINDOWS\system32\drivers\downld\638062.exe

C:\WINDOWS\system32\drivers\downld\762921.exe

C:\WINDOWS\system32\drivers\downld\773843.exe

C:\WINDOWS\system32\drivers\hldrrr.exe

C:\WINDOWS\system32\drivers\mdelk.exe

C:\WINDOWS\system32\drivers\srosa.sys

C:\WINDOWS\system32\drivers\Xprotector.sys

C:\WINDOWS\system32\mdelk.exe

C:\WINDOWS\system32\wintems.exe

 

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

 

-------\Legacy_SROSA

-------\Legacy_XPROTECTOR

-------\Service_XPROTECTOR

 

 

((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-04-05 to 2008-05-05 ))))))))))))))))))))))))))))))))))))

.

 

2008-05-05 13:30 . 2008-05-05 13:30 <REP> d-------- C:\WINDOWS\system32\drivers\downld

2008-05-05 13:22 . 2008-05-05 13:22 1,024 --ah----- C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG

2008-05-05 11:31 . 2008-05-05 11:31 <REP> d-------- C:\Program Files\Alwil Software

2008-05-05 09:36 . 2008-05-05 09:37 <REP> d-------- C:\Program Files\mine22

2008-05-02 10:27 . 2008-05-02 10:27 <REP> d-------- C:\WINDOWS\system32\Kaspersky Lab

2008-05-02 10:27 . 2008-05-02 10:27 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab

2008-04-30 15:06 . 2008-04-30 15:06 <REP> d-------- C:\Program Files\Search Settings

2008-04-30 15:06 . 2008-04-30 15:06 <REP> d-------- C:\Program Files\FLV Player

2008-04-30 15:06 . 2008-04-30 15:06 <REP> d-------- C:\Program Files\Fichiers communs\DVDVideoSoft

2008-04-30 15:05 . 2008-04-30 15:05 <REP> d-------- C:\Program Files\ANI

2008-04-30 14:12 . 2008-04-30 15:06 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\Search Settings

2008-04-30 11:29 . 2008-05-05 11:36 3,284 --a------ C:\WINDOWS\system32\ANIWZCS{DC2194BA-F440-4E6F-9405-632CB513B03A}

2008-04-30 09:21 . 2008-05-05 11:36 17 --a------ C:\WINDOWS\system32\ANIWZCSUSERNAME{DC2194BA-F440-4E6F-9405-632CB513B03A}

2008-04-30 09:16 . 2005-03-28 17:49 137 --a------ C:\WINDOWS\system32\DWLAB.DAT

2008-04-29 09:02 . 2008-04-30 14:58 <REP> d-------- C:\Program Files\Fichiers communs\DVDVideoSoft(2)

2008-04-24 09:58 . 2008-04-30 15:03 <REP> d-------- C:\Program Files\Flash Movie Player

2008-04-22 10:57 . 2008-04-30 15:04 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\VMNTOOLBAR

2008-04-22 09:55 . 2008-04-22 09:55 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\AVSMedia

2008-04-18 16:33 . 2008-04-18 16:33 <REP> d-------- C:\Documents and Settings\All Users\Application Data\AVS4YOU

2008-04-18 14:54 . 2008-04-22 10:02 <REP> d-------- C:\Program Files\Fichiers communs\AVSMedia

2008-04-17 13:49 . 2008-04-17 13:49 <REP> d-------- C:\WINDOWS\Replay Media Catcher

2008-04-17 13:45 . 2008-04-17 13:48 4,265,560 --a------ C:\Program Files\FLV PlayerRCATSetup.exe

2008-04-17 13:44 . 2008-04-17 13:44 <REP> d-------- C:\WINDOWS\Applian FLV Player

2008-04-16 17:14 . 2005-10-13 13:42 208,500 --a------ C:\WINDOWS\system32\ReyXpBasics.tlb

2008-04-16 17:14 . 2004-03-09 01:00 84,512 --a------ C:\WINDOWS\system32\PICCLP32.OCX

2008-04-16 17:14 . 2005-09-28 02:31 24,576 --a------ C:\WINDOWS\system32\ControlSubX.ocx

2008-04-16 17:14 . 1998-07-13 01:00 9,728 --a------ C:\WINDOWS\system32\PCCLPFR.DLL

2008-04-09 16:23 . 2008-04-09 16:23 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\3DFA

2008-04-09 15:10 . 2004-03-29 16:23 90,112 --a------ C:\WINDOWS\unvise32.exe

2008-04-09 11:33 . 2008-04-09 11:33 <REP> d-------- C:\Program Files\Google

2008-04-08 08:32 . 2008-04-08 08:32 <REP> d-------- C:\Documents and Settings\secretariat cctm\Application Data\CA

2008-04-07 13:07 . 2008-04-30 15:04 <REP> d-------- C:\Program Files\PimpFish

2008-04-07 11:03 . 2008-04-07 11:03 372,736 --a------ C:\WINDOWS\FLASH1.scr

2008-04-07 10:50 . 2005-10-10 12:38 933,888 --a------ C:\WINDOWS\system32\Flash.ocx

2008-04-07 10:50 . 2005-07-16 10:36 77,824 --a------ C:\WINDOWS\system32\Wavdest.ax

 

.

(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-05-02 08:50 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-04-30 14:23 --------- d-----w C:\Program Files\D-Link

2008-04-30 14:05 --------- d-----w C:\Program Files\Macromedia

2008-04-30 14:05 --------- d-----w C:\Program Files\Fichiers communs\Macromedia

2008-04-30 07:15 --------- d-----w C:\Program Files\eMule

2008-04-21 08:53 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Image Zone Express

2008-04-09 14:32 --------- d-----w C:\Program Files\WinISO

2008-04-02 13:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files

2008-04-01 15:46 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE

2008-04-01 15:46 249,856 ------w C:\WINDOWS\Setup1.exe

2008-04-01 14:46 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\AdobeUM

2008-03-31 13:01 --------- d-----w C:\Program Files\Intuisphere

2008-03-28 09:51 --------- d-----w C:\Program Files\Java

2008-03-26 07:57 --------- d-----w C:\Documents and Settings\All Users\Application Data\Macrovision

2008-03-26 07:54 --------- d-----w C:\Program Files\Fichiers communs\Macromedia Shared

2008-03-25 15:33 737,280 ----a-w C:\WINDOWS\iun6002.exe

2008-03-25 11:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zabersoft

2008-03-18 15:41 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\LogoMaker

2008-03-17 14:02 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Serif

2008-03-17 08:49 --------- d-----w C:\Program Files\Fichiers communs\InstallShield

2008-03-14 07:28 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\VCOM

2008-03-14 07:28 --------- d-----w C:\Documents and Settings\All Users\Application Data\VCOM

2008-03-12 12:33 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Nvu

2008-03-12 09:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Icon Constructor 3

2008-03-12 09:48 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\gtk-2.0

2008-03-11 13:31 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\Talkback

2008-03-11 13:25 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\SmartDraw

2008-03-11 12:31 --------- d-----w C:\Documents and Settings\secretariat cctm\Application Data\FileZilla

2008-03-07 09:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\EwisoftWeb

2008-03-06 16:34 --------- d-----w C:\Program Files\Fichiers communs\Adobe

.

 

------- Sigcheck -------

 

2005-03-02 19:20 578048 c34920eb988ce98910bd6b0417f334eb C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll

2007-03-08 16:50 579072 4d88aaf39adabfe45958ea1384e2c4ff C:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll

2004-08-04 01:54 578048 e46fb493e3b33704f0715020cf52106b C:\WINDOWS\$NtUninstallKB890859$\user32.dll

2005-03-02 19:10 578048 0df75fb73f705b011630159a43d7c354 C:\WINDOWS\$NtUninstallKB925902$\user32.dll

2007-03-08 16:37 578560 753354f594809a9b96f73999b435a533 C:\WINDOWS\system32\user32.dll

2007-03-08 16:37 578560 753354f594809a9b96f73999b435a533 C:\WINDOWS\system32\dllcache\user32.dll

 

2007-10-30 17:53 360832 64798ecfa43d78c7178375fcdd16d8c8 C:\WINDOWS\$hf_mig$\KB941644\SP2QFE\tcpip.sys

2004-08-18 10:22 359040 27a5959c94ee173a063ca06bd14f021a C:\WINDOWS\$NtUninstallKB941644$\tcpip.sys

2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 C:\WINDOWS\system32\dllcache\tcpip.sys

2007-10-30 18:20 360064 90caff4b094573449a0872a0f919b178 C:\WINDOWS\system32\drivers\tcpip.sys

 

2005-03-02 19:13 2059008 5311776074b6c13f983dc75baeac9c0c C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe

2007-02-28 17:08 2061440 7a56a64eb50399613587e90292dd2aab C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe

2005-03-02 19:07 2058880 73fa9c95d235844a36968c7852c7dbdd C:\WINDOWS\$NtUninstallKB931784$\ntkrnlpa.exe

2007-02-28 17:02 2059648 a1d5231403329478ae4fe2778c55c77f C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe

2007-02-28 17:02 2059648 a1d5231403329478ae4fe2778c55c77f C:\WINDOWS\system32\ntkrnlpa.exe

2007-02-28 17:02 2059648 a1d5231403329478ae4fe2778c55c77f C:\WINDOWS\system32\dllcache\ntkrnlpa.exe

 

2005-03-02 19:13 2181632 3e2a0a4a0c0b19fc113618a9562a3b2a C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe

2007-02-28 17:08 2184192 8e244108562e0e452eb68dff64cb08a9 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe

2005-03-02 19:08 2181376 63729dd0f2aae36cc52b89c05505146c C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe

2007-02-28 17:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe

2007-02-28 17:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\system32\ntoskrnl.exe

2007-02-28 17:02 2182400 7d6d19aac51a4325f6039f083c22303c C:\WINDOWS\system32\dllcache\ntoskrnl.exe

 

2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 C:\WINDOWS\explorer.exe

2007-06-13 14:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe

2004-08-22 23:35 1036288 998f3f568f6074a35ab08cd3395a9dc2 C:\WINDOWS\$NtUninstallKB938828$\explorer.exe

2007-06-13 14:22 1037312 d0288319660edcfed07c7e74c4ea38a5 C:\WINDOWS\system32\dllcache\explorer.exe

.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

REGEDIT4

*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

 

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]

2008-02-06 17:47 1160544 --a------ C:\Program Files\Search Settings\kb126\SearchSettings.dll

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:54 15360]

"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [ ]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"D-Link AirPlus G"="C:\Program Files\D-Link\AirPlus G\AirGCFG.exe" [2005-06-12 07:01 688128]

"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2006-06-01 16:59 49152]

"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12 49152]

"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 21:16 39792]

"SearchSettings"="C:\Program Files\Search Settings\SearchSettings.exe" [2008-02-06 17:47 1036640]

"D-Link AirPlus XtremeG"="C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe" [2006-06-16 10:24 1323008]

"avast!"="C:\Program Files\Alwil Software\Avast4\ashDisp.exe" [2008-05-05 13:25 98352]

 

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableLUA"= 0 (0x0)

 

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

 

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"C:\\Program Files\\eMule\\emule.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"C:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 7.0.1.325\\English\\setup.exe"=

 

S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2006-05-11 13:11]

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2e99b5ce-182b-11dd-8607-0002b3ade6b2}]

\Shell\AutoRun\command - E:\nideiect.com

\Shell\explore\Command - E:\nideiect.com

\Shell\open\Command - E:\nideiect.com

 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ba1c0f5d-c989-11dc-96a7-0002b3ade6b2}]

\Shell\AutoRun\command - fooool.exe

\Shell\explore\Command - fooool.exe

\Shell\open\Command - fooool.exe

 

.

**************************************************************************

 

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-05-05 13:30:34

Windows 5.1.2600 Service Pack 2 NTFS

 

Balayage processus cach‚s ...

 

Balayage cach‚ autostart entries ...

 

Balayage des fichiers cach‚s ...

 

Scan termin‚ avec succŠs

Les fichiers cach‚s: 0

 

**************************************************************************

.

------------------------ Other Running Processes ------------------------

.

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\WgaTray.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

.

**************************************************************************

.

Temps d'accomplissement: 2008-05-05 13:33:56 - machine was rebooted

ComboFix-quarantined-files.txt 2008-05-05 12:33:49

 

Pre-Run: 5,906,206,720 octets libres

Post-Run: 6,371,082,240 octets libres

 

WinXP_FR_PRO_BF.EXE

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

 

231 --- E O F --- 2008-04-09 09:31:45

 

 

Créez votre propre sujet si vous voulez des réponses.

 

Bon, je suis de bonne humeur, mais ne recommencez jamais cela.

C'est comme se mettre à table chez un inconnu sans y être invité.

 

Combo, Nettoyage

# Déconnectez-vous du net et désactivez l'antivirus (juste le temps de la procédure !)

Ouvrez Combofix

# Dans le bloc-note ,copiez-collez ces lignes :

KillAll::

 

File::

C:\WINDOWS\Setup1.exe

C:\WINDOWS\iun6002.exe

E:\nideiect.com

 

registry::

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2e99b5ce-182b-11dd-8607-0002b3ade6b2}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ba1c0f5d-c989-11dc-96a7-0002b3ade6b2}]

 

* Attention, ce code a été rédigé spécialement pour cet utilisateur, prière de ne pas le réutiliser dans d'autres cas !

 

Enregistrez-le en lui donnant le nom CFScript.txt

 

* Faire un glisser/déposer de ce fichier CFScript sur le fichier ComboFix.exe

http://i261.photobucket.com/albums/ii49/Ma...te/CFScript.gif

 

*

* Au message qui apparait dans une fenêtre bleue ( Type 1 to continue, or 2 to abort) , taper 1 puis valider.

* Patienter le temps du scan.Le bureau va disparaitre à plusieurs reprises: c'est normal!

Ne toucher à rien tant que le scan n'est pas terminé.

* Une fois le scan achevé, un rapport va s'afficher: poster son contenu.

* Si le fichier n'apparait pas, il se trouve ici > C:\ComboFix.txt

Modifié le 5 mai 2008 par pear

[pear]

j'ai Norton internet security 2008, j'ai téléchargé et effacé tous les antispywares, le rapport dit que je ne suis pas infecté par aucun spyware, cependant lorsque je navigue, je suis envahi par cet avertissement, c'est fou!

 

Error!

Your computer was infected by dangerous virus! Some results was changed by porn advertising, your passwords and other private info no more in safe! You must to clean your system immediately to prevent it. Download the newest anti-virus software!

 

 

Bonjour,

 

Je vous ai dit que votre rapport Hijackthis n'est pas complet.

 

# Si vous utilisez Antivir (ce qui est recommandé), vous devez désactiver la protection en temps réel, Antivir détecte certains composant de navilog1 comme néfaste.

 

* Pour cela, faites un clic droit sur l'icône Antivir en bas à droite à côté de l'horloge puis Disable Guard.

Sous Vista:

Désactiver le contrôle des comptes utilisateurs ( le réactiver après la désinfection):

http://forum.malekal.com/viewtopic.php?f=59&t=6517

- Démarrer puis panneau de configuration->"Comptes d'utilisateurs"

- Cliquer ensuite sur désactiver et valider.

Télécharger Navilog1

 

. et enregistrez-le sur le bureau.

Ensuite double cliquer sur navilog1.exe pour lancer l'installation.

Une fois l'installation terminée, Faire un Clic-droit sur le raccourci Navilog1 présent sur le bureau et choisir "Exécuter en tant qu'administrateur".

Au menu principal, Faire le choix 1

Suivre les instructions et patienter jusqu'au message :

*** Analyse Terminée le ..... ***

Poster le rapport

 

[Invité jipitou69]

j'Ai windows XP