Avast n'est pas une application win32 valide.

Résolu/Fermé
Signaler
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014
-
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
-
Bonjour,
J'ai un problème depuis plusieurs jours à la suite d'un téléchargement qu'un ami a voulu faire ... Avast n'est plus une application win 32 valide lorque je veux le lancer et je n'arrive pas non plus à installer d'autres anti-virus. Quelqu'un pourrait-il m'aider à résoudre ce probléme ?? Ce serait génial !! Merci d'avance !! Je suis sous windows vista.

46 réponses

Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
Salut,

--> Désactive l'UAC le temps de la désinfection.

--> Télécharge FindyKill (par Chiquitine29) sur ton Bureau.

--> Lance l'installation avec les paramètres par défaut.

--> Clique droit sur le raccourci FindyKill situé sur ton Bureau et choisis Exécuter en tant qu'administrateur.

--> Au menu principal, choisis l'option 1 (Recherche).

--> Poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
3
Merci

Quelques mots de remerciements seront grandement appréciés. Ajouter un commentaire

CCM 41989 internautes nous ont dit merci ce mois-ci

Messages postés
5962
Date d'inscription
jeudi 1 janvier 2009
Statut
Contributeur sécurité
Dernière intervention
11 mars 2012
292
bonjour,

telechareg et installe hijackthis

https://www.01net.com/telecharger/windows/Securite/anti-spyware/fiches/29061.html

choisit "do a scan and save the log" et poste le rapport
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Tout d'abord merci de me répondre.
Je viens de le lancer je poste cela dès que c'est fini.
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Voila ce que me donne Findykill !

----------------- FindyKill V4.711 ------------------

* User : tanguy - PC-DE-TANGUY
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 05/01/09 par Chiquitine29
* Recherche effectuée à 16:38:04 le 07/01/2009
* Windows Vista - Internet Explorer 7.0.6001.18000

((((((((((((((((( *** Recherche *** ))))))))))))))))))


--------------- [ Processus actifs ] ----------------


C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\mmrtkrnl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Users\tanguy\AppData\Roaming\drivers\winupgro.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Users\tanguy\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\rundll32.exe
C:\Users\tanguy\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\tanguy\AppData\Roaming\drivers\downld\493165.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conime.exe

--------------- [ Processus infectieux stoppés ] ----------------


"C:\Users\tanguy\AppData\Roaming\drivers\downld\493165.exe" (2656)
"C:\Users\tanguy\AppData\Roaming\drivers\winupgro.exe" (2908)


--------------- [ Fichiers/Dossiers infectieux ] ----------------


»»»» Presence des fichiers dans C:


»»»» Presence des fichiers dans C:\Windows


»»»» Presence des fichiers dans C:\Windows\Prefetch

Found ! - C:\Windows\prefetch\WINUPGRO.EXE-1D83EADF.pf

»»»» Presence des fichiers dans C:\Windows\system32

Found ! [07/01/2009 16:09] - C:\Windows\system32\mdelk.exe
Found ! [07/01/2009 16:09] - C:\Windows\system32\wintems.exe
Found ! [07/01/2009 16:10] - C:\Windows\system32\ban_list.txt

»»»» Presence des fichiers dans C:\Windows\system32\drivers


»»»» Presence des fichiers dans C:\Users\tanguy\AppData\Roaming

Found ! [07/01/2009 16:10] - "C:\Users\tanguy\AppData\Roaming\m\flec006.exe"
Found ! [07/01/2009 16:10] - "C:\Users\tanguy\AppData\Roaming\m\list.oct"
Found ! [07/01/2009 16:11] - "C:\Users\tanguy\AppData\Roaming\m\data.oct"
Found ! [07/01/2009 16:11] - "C:\Users\tanguy\AppData\Roaming\m\srvlist.oct"
Found ! [07/01/2009 16:15] - "C:\Users\tanguy\AppData\Roaming\m\shared"
Found ! [07/01/2009 16:11] - "C:\Users\tanguy\AppData\Roaming\m"
Found ! [03/01/2009 18:17] - "C:\Users\tanguy\AppData\Roaming\drivers"
Found ! [07/01/2009 16:05] - "C:\Users\tanguy\AppData\Roaming\drivers\srosa.sys"
Found ! [07/01/2009 16:05] - "C:\Users\tanguy\AppData\Roaming\drivers\srosa2.sys"
Found ! [20/04/2005 06:02] - "C:\Users\tanguy\AppData\Roaming\drivers\winupgro.exe"
Found ! [07/01/2009 16:13] - "C:\Users\tanguy\AppData\Roaming\drivers\downld"

»»»» Presence des fichiers dans C:\Users\tanguy\AppData\Local\Temp


»»»» Presence des fichiers dans C:\Users\tanguy\Local Settings\Temporary Internet Files\Content.IE5

Found ! [06/06/2008 17:45] - C:\Program Files\Electronic Arts\Need for Speed Carbon\filelist.txt
Found ! [12/05/2008 10:15] - C:\Users\tanguy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LI7ACZHW\B644328551ED9E9AFE595B8B26F2A[1].jpg
Found ! [07/01/2009 16:10] - C:\Users\tanguy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WT091O41\file[1].txt
Found ! [08/06/2008 11:52] - C:\Users\tanguy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9BPN7PJ7\b64597d1d90b8ddf7da647de44f64b20[1].jpg
Found ! [05/06/2008 22:33] - C:\Users\tanguy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\JG9WD31B\b64597d1d90b8ddf7da647de44f64b20[1].jpg

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Sidebar=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
SmpcSys=C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
ISUSPM="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
ehTray.exe=C:\Windows\ehome\ehTray.exe
YSearchProtection=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
RocketDock="C:\Program Files\RocketDock\RocketDock.exe"
Windows Logon Applicationedc=C:\Users\tanguy\winlogon.exe
EA Core=C:\Program Files\Electronic Arts\EADM\Core.exe -silent
WMPNSCFG=C:\Program Files\Windows Media Player\WMPNSCFG.exe
MessengerPlus3="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
msnmsgr="C:\Program Files\MSN Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
JMB36X IDE Setup=C:\Windows\RaidTool\xInsIDE.exe
SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
<NO NAME>=
RoxWatchTray="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
Google Desktop Search="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
toolbar_eula_launcher=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
IAAnotif="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
YSearchProtection="C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
NvSvc=RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
NvCplDaemon=RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
NvMediaCenter=RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
AppleSyncNotifier=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
GrooveMonitor="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
Realtime Audio Engine="mmrtkrnl.exe" /i
ISTray="C:\Program Files\Spyware Doctor\pctsTray.exe"
AVG8_TRAY=C:\PROGRA~1\AVG\AVG8\avgtray.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

[HKEY_CURRENT_USER\software\local appwizard-generated applications\run]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\SmpSys]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]

--------------- [ Registre / Clés infectieuses ] ----------------


Found ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\MuleAppData
Found ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\Ubisoft
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sK9Ou0s
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\FFC

/!\ Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
/!\ Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1

--------------- [ Etat / Services ] ----------------



+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

/!\ Ndisuio - Type de démarrage = 4

EapHost - Type de démarrage = 3

Wlansvc - Type de démarrage = 2

/!\ SharedAccess - Type de démarrage = 4

/!\ wuauserv - Type de démarrage = 4

/!\ wscsvc - Type de démarrage = 4

/!\ WinDefend - Type de démarrage = 4

/!\ UAC is Disable

--------------- [ Recherche dans supports amovibles] ----------------


+- Informations :

C: - Lecteur fixe

+- presence des fichiers :



--------------- [ Registre / Mountpoint2 ] ----------------


-> Not found !


------------------- ! Fin du rapport ! --------------------
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
--> Supprime tes cracks et keygens.

--> Clique droit sur le raccourci FindyKill situé sur ton Bureau et choisis Exécuter en tant qu'administrateur.

--> Au menu principal, choisis l'option 2 (Suppression).

/!\ Il y aura 2 redémarrages, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\

--> Ensuite, poste le rapport FindyKill.txt

Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Pour les supprimés je fais comment ??
En faisant 2 avec le logiciel ou autrement ?? désolé je ne m' y connais pas tellement ...
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

les cracks et keygens ?
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
"à la suite d'un téléchargement qu'un ami a voulu faire"
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Voilà le deuxiéme rapport :



----------------- FindyKill V4.711 ------------------

* User : tanguy - PC-DE-TANGUY
* executed from : C:\Program Files\FindyKill
* Update on 05/01/09 par Chiquitine29
* Start at 17:02:04 the 07/01/2009
* Windows Vista - Internet Explorer 7.0.6001.18000


((((((((((((((( *** deleting *** ))))))))))))))))))


--------------- [ Active Processes ] ----------------


C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\LogonUI.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\userinit.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\runonce.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe

--------------- [ Infected files / folders ] ----------------


»»»» Supression files in C:


»»»» Supression files in C:\Windows


»»»» Supression files in C:\Windows\Prefetch

Deleted ! - C:\Windows\prefetch\WINUPGRO.EXE-1D83EADF.pf

»»»» Supression files in C:\Windows\system32

Deleted ! - C:\Windows\system32\mdelk.exe
Deleted ! - C:\Windows\system32\wintems.exe
Deleted ! - C:\Windows\system32\ban_list.txt

»»»» Supression files in C:\Windows\system32\drivers


»»»» Supression files in C:\Users\tanguy\AppData\Roaming

Deleted ! - "C:\Users\tanguy\AppData\Roaming\m\flec006.exe"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\m\list.oct"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\m\data.oct"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\m\srvlist.oct"
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\-usuarios.lycos.es-scratchupload].zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\12Ghosts JustAWindow 9.50.132.5502.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\15 Puzzle 1.0.0.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\1D0-441 - CIW Database Specialist Practice Test Questions 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\3D Architecture Animation Creator Pro 1.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\3D Waterfall Screensaver 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\3StepShare for Microsoft Outlook 2.0.1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\602PC SUITE 4.2.06.02134.2.06.0213.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Abaddon 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Acc Compact 1.10.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Active Directory Replication Monitor 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Advanced Printers Activity Logger 1.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Advert 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Allok WMA MP3 Converter 1.1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\AllSeaSaver 2.5.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Alternate Dictionary 1.600.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\AMPHIOTIK ENHANCER LT [Media Player] 1.11.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\AnthologY 1.00.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Apache HTTP Server for Linux 1.3.37.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Assemblur 1.0.4.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Autumn Icons 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\AVG.7.5.Antivirus.compatible.VISTA.Complete+Keygen.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\AVG.Anti-Virus.v7.1.394.752.Incl.Keygen-SSG.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Bentley Font PostScript 1.51.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Biorhythms Guide 2.7.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Blibs Screensaver 1.00 build 2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Boldchat Operator Client .NET 4.92.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\BPA Restaurant Professional 8.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Business news 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Cabri 3D 2.0.0.279.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Calgoo Calendar Free 2.0.0 Build 748.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\ClamWin Free Antivirus v0.86.2 Final===.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\CompressAVI 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Cookie Eraser 1.02.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\CubeMultiClock 1.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Cute Reminder Professional Edition 2.6.317.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Deep Zoom Composer 0.9.000.5.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Delivery Agent 3.6.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\E-List Distributor 4.6.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Eagle's View 1.6.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\EnergySaver 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Excel Remove (Delete) Blank Rows & Columns Software 7.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\First Holiday Season After A New Family Structure 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\GaiaFormat 0.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\GAPI 4.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\GCS DayCare 9.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Google Satellite Maps Downloader 4.33.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\GRBackPro 6.6.70.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Group Files Rename 1.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Hearing Test & Exercise 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\HP0-409 Practice Exam Testing Engine Software 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\HTMLtoRTF Converter Easy 1.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Ice Cursorz.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\icsson Nokia Motorola Siemens 128x128 128x160.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\IIS7 Managed Module Starter Kit.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\IMCaster UIN Manager 2.2.1.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Internet Quotes Assistant 4.46.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\JWTM (Java Web Tree Menu) 1.0.003.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Kaspersky.Internet.Security.v6.0.1.411.release.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\kidweb Toolbar 4.5.151.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\KSTray 1.03.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\LingvoSoft Picture Dictionary 2007 Spanish - Korean 1.2.26.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\MakeFaces for Palm OS 2.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Mandarin 890 1.04.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Marseille Traffic 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Matrix MSN Display Pictures 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\MCC 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\MessagePal 1.6.3.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Microsoft SideShow 1.0.27 Leaked.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Mobile Ringtone Studio 1.0.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\MONOGRAM AAC Decoder 0.9.0.0 Alpha.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Morovia Code 93 Barcode Fontware 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\MS Word Backup File Auto Save Software 7.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\My Blue Folders vol.5.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\My Simple Desktop Office Edition 2.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\NCH Tone Generator 2.11.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\NeT Firewall 3.0.23.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Ninja Ropes Extreme 1.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Norton 360 2.0.0.242.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\ofertondelibros.com 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\OxyCube 1.2.0.12.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Ozon 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Packman 2.02.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Paperware Home Edition 1.0.1.9.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Password Saver 4.1.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\pd-TimeStatus3 1.5.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\PNG Gray 1.0.0 Build 74.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Portable Fsum Frontend 1.5.3.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\pptXTREME Photoshop Import for PowerPoint 1.5.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Presto's Sidebar Clock 1.10.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Privatize Platinum 1.103.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\PyPE 2.8.8.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\RankCentral 1.0.40.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Rapget.RS 0.9.7.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Remote wake on LAN 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\SA System Info ActiveX 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\SafeMail 1.5.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Schedule Module 1.2005.4.6.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Show InOut 0.4.3.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Simple Time 0.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\sing emule multimedia toolbar.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\SingletonFox 1.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\SmartSoft Video Converter Pro 2.6.2.3.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Story Master Pro 2.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Symantec AntiVirus Corporate Edition.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Symantec.Enterprise.Firewall.v8.0.Full-Cd.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Synchronizer 1.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\TeamReview 1.0.6.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Time Machine Screensaver.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\timePiece 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\TreeDocEditor 3.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\tubeWatch 0.0.4.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\TV24x7 1.55.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Update Now! ActiveX Control 2.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Vista BootScreen 1.2.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\VistaMizer 2.5.2.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Waiting For Sunset Wallpaper 1.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Wedding Daisy Tip of the Day and Countdown 1.0.0.0.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\X2Net SignCode 1.0.0.10.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Xload 1.2 14.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\xls2csv 1.1.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\XML Transmitter Pro 1.2.6.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\zannoTate 1.25.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\Zero-X Seamless Looper 1.51.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\[EspaÇñol]_Symantec.Norton.Internet.Security.2006.zip
Deleted ! - C:\Users\tanguy\AppData\Roaming\m\shared\[Prog.Ita].BitDefender.9.Pro.Plus.ITALIANO.+.guida.pdf.ita.by.Rocco[ITA].zip
Deleted ! - "C:\Users\tanguy\AppData\Roaming\m\shared"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\m"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\drivers\srosa.sys"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\drivers\srosa2.sys"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\drivers\winupgro.exe"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\drivers\downld"
Deleted ! - "C:\Users\tanguy\AppData\Roaming\drivers"

»»»» Supression files in C:\Users\tanguy\AppData\Local\Temp


»»»» Supression files in C:\Users\tanguy\Local Settings\Temporary Internet Files\Content.IE5

Deleted ! - C:\Users\tanguy\Local Settings\Temporary Internet Files\Content.IE5\LI7ACZHW\B644328551ED9E9AFE595B8B26F2A[1].jpg
Deleted ! - C:\Users\tanguy\Local Settings\Temporary Internet Files\Content.IE5\WT091O41\file[1].txt

--------------- [ Registry / Infected keys ] ----------------

Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_CURRENT_USER\Software\bisoft
Deleted ! - HKEY_CURRENT_USER\Software\DateTime4
Deleted ! - HKEY_CURRENT_USER\Software\FirtR
Deleted ! - HKEY_CURRENT_USER\Software\MuleAppData
Deleted ! - HKEY_CURRENT_USER\Software\FFC
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mdelk.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wintems.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\flec006.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hldrrr.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winfilse.exe
Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winupgro.exe
Deleted ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\Local AppWizard-Generated Applications\winupgro
Deleted ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\FFC
Deleted ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\MuleAppData
Deleted ! - HKEY_USERS\S-1-5-21-2619056436-1382365864-1542370429-1002\Software\Ubisoft

--------------- [ States / Restarting of services ] ----------------



+- Services : [ Auto=2 / Request=3 / Disable=4 ]

Ndisuio - Type of startup = 3

EapHost - Type of startup = 2

Wlansvc - Type of startup = 2

SharedAccess - Type of startup = 2

wuauserv - Type of startup = 2

wscsvc - Type of startup = 2

WinDefend - Type of startup = 2

-> UAC is Enable

--------------- [ Cleaning removable drives ] ----------------

+- Informations :

C: - Lecteur fixe

+- deleting files :


--------------- [ Registry / Mountpoint2 ] ----------------


-> Not found !


--------------- [ Searching Other Infections ] ----------------


Références de comparaison Bagle MD5 :

113ac36b77630a2f67dd6cb7844406a4 C:\Windows\system32\mdelk.exe
113ac36b77630a2f67dd6cb7844406a4 C:\Windows\system32\wintems.exe
9c15290ee0d941f08b7ac48a1eaecffb C:\Users\tanguy\AppData\Roaming\drivers\winupgro.exe

Suspect ! - 9c15290ee0d941f08b7ac48a1eaecffb C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
Suspect ! - 9c15290ee0d941f08b7ac48a1eaecffb C:\Users\Invité\winlogon.exe

--------------- [ Searching Cracks / Keygen ] ----------------

C:\Users\tanguy\AppData\Local\Microsoft\Messenger\tanguy76310@hotmail.fr\Sharing Folders\augey5@hotmail.com\Rockstar Games\GTA San Andreas\data\Decision\Craig\crack1.ped
C:\Users\tanguy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\tanguy\Documents\Downloads\Microsoft Office Ultimate 2007 Full + Crack
C:\Users\tanguy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\tanguy\Documents\Downloads\Microsoft Office Ultimate 2007 Full + Crack\readme.html.url
C:\Users\tanguy\AppData\Roaming\uTorrent\IsoBuster Pro v2.1.0.2 with keygen[b33z][h33t].torrent
C:\Users\tanguy\AppData\Roaming\uTorrent\Microsoft Office Ultimate 2007 Full + Crack.torrent
C:\Users\tanguy\Favorites\http--teamdownload.com-utility-2634-microsoft-office-ultimate-2007-crack.html.url


---------------- ! End of report ! ------------------
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant ci-dessous :





:processes
explorer.exe

:files
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Users\Invité\winlogon.exe

:commands
[purity]
[emptytemp]
[start explorer]
[reboot]





---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Voici le rapport :

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe moved successfully.
C:\Users\Invité\winlogon.exe moved successfully.
========== COMMANDS ==========
File delete failed. C:\Users\tanguy\AppData\Local\Temp\~DF6043.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\tanguy\AppData\Local\Temp\~DF8628.tmp scheduled to be deleted on reboot.
File delete failed. C:\Users\tanguy\AppData\Local\Temp\~DF8632.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\Windows\temp\JETB5B8.tmp scheduled to be deleted on reboot.
Windows Temp folder emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01072009_174538

Files moved on Reboot...
C:\Users\tanguy\AppData\Local\Temp\~DF6043.tmp moved successfully.
File C:\Users\tanguy\AppData\Local\Temp\~DF8628.tmp not found!
File C:\Users\tanguy\AppData\Local\Temp\~DF8632.tmp not found!
C:\Windows\temp\JETB5B8.tmp moved successfully.
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
---> Désinstalle FindyKill.

---> Réinstalle les applications qui ont été infectées (Antivirus...).

- Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

- Double-clique sur RSIT.exe afin de lancer le programme.

- Clique sur Continue à l'écran Disclaimer.

- Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

- Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

Note : Les rapports sont sauvegardés dans le dossier C:\rsit.
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Contenu de log.txt :

Logfile of random's system information tool 1.05 (written by random/random)
Run by tanguy at 2009-01-07 18:08:02
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 38 GB (27%) free of 144 GB
Total RAM: 3062 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:08:34, on 07/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\System32\mmrtkrnl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Users\tanguy\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Windows\System32\rundll32.exe
C:\Users\tanguy\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\tanguy\Desktop\RSIT.exe
C:\Program Files\trend micro\tanguy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://andrewmelcher.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Realtime Audio Engine] "mmrtkrnl.exe" /i
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Windows Logon Applicationedc] C:\Users\tanguy\winlogon.exe
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Policies\Explorer\Run: [Windows Printing Driver] ciadvss.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Enregistrement de FIFA 09.lnk = EA Sports\FIFA 09\Support\EAregister.exe
O4 - Startup: Outil de notification Live Search.lnk = tanguy\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: winsched.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{13B82BFE-6BCD-443A-898A-9437AFE82928}: NameServer = 194.117.200.10,194.117.200.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{13B82BFE-6BCD-443A-898A-9437AFE82928}: NameServer = 194.117.200.10,194.117.200.15
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG8 WatchDog (avg8wd) - Unknown owner - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe (file missing)
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
---> Supprime les traces de Norton avec ceci :
ftp://ftp.symantec.com/public/francais/removal_tools/Norton_Removal_Tool.exe

--> Télécharge UsbFix (de Chiquitine29) sur ton Bureau.

--> Lance l'installation avec les paramètres par défaut.

--> Branche tes sources de données externes à ton PC (clé USB, disque dur externe, carte SD, etc...) sans les ouvrir.

--> Clique droit sur le raccourci UsbFix situé sur ton Bureau et choisis Exécuter en tant qu'administrateur.

--> Choisis l'option 1 (Nettoyage).

--> Le PC va redémarrer.

--> Après redémarrage, poste le rapport UsbFix.txt

Note : le rapport UsbFix.txt est sauvegardé à la racine du disque.

(Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide)
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Je suis sur un autre ordinateur car le bureau ne veux pas s'afficher meme en allant dans gestionnaire de tâches ... et en faisant explorer.exe je ne peux donc pas poster le rapport
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
Le rapport, tu le vois ?
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Oui.
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
Tu l'enregistres puis tu redémarres.
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

Voila le rapport :



-------------- UsbFix V2.413.9 ---------------

* User : tanguy - PC-DE-TANGUY
* Outils mis a jours le 05/01/2009 par Chiquitine29 et Chimay8
* Recherche effectuée à 18:38:13 le 07/01/2009
* Windows Vista - Internet Explorer 7.0.6001.18000


--------------- [ Processus actifs ] ----------------


C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\system32\LogonUI.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\userinit.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\runonce.exe
C:\Windows\system32\conime.exe

--------------- [ Informations lecteurs ] ----------------

C: - Lecteur fixe
F: - Lecteur fixe

--------------- [ Lecteur C ] ----------------

C: - Lecteur fixe

+- Listing des fichiers présents :

[18/09/2006 22:43][--a------] C:\autoexec.bat
[07/01/2009 17:32][--a------] C:\FindyKill.txt
[07/01/2009 17:32][--a------] C:\UsbFix.txt
[18/09/2006 22:43][--a------] C:\config.sys
[18/09/2006 22:43][--a------] C:\hiberfil.sys
[18/09/2006 22:43][--a------] C:\IO.SYS
[18/09/2006 22:43][--a------] C:\MSDOS.SYS
[18/09/2006 22:43][--a------] C:\pagefile.sys

--------------- [ Lecteur F ] ----------------

F: - Lecteur fixe

+- Listing des fichiers présents :


--------------- [ Registre / Startup ] ----------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\Windows\\system32\\userinit.exe,"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Sidebar=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
SmpcSys=C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
ISUSPM="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
ehTray.exe=C:\Windows\ehome\ehTray.exe
YSearchProtection=C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
RocketDock="C:\Program Files\RocketDock\RocketDock.exe"
Windows Logon Applicationedc=C:\Users\tanguy\winlogon.exe
EA Core=C:\Program Files\Electronic Arts\EADM\Core.exe -silent
WMPNSCFG=C:\Program Files\Windows Media Player\WMPNSCFG.exe
MessengerPlus3="C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
msnmsgr="C:\Program Files\MSN Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
JMB36X IDE Setup=C:\Windows\RaidTool\xInsIDE.exe
SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
<NO NAME>=
RoxWatchTray="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
Google Desktop Search="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
toolbar_eula_launcher=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
IAAnotif="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
YSearchProtection="C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
NvSvc=RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
NvCplDaemon=RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
NvMediaCenter=RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
AppleSyncNotifier=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
GrooveMonitor="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
iTunesHelper="C:\Program Files\iTunes\iTunesHelper.exe"
Realtime Audio Engine="mmrtkrnl.exe" /i
AVG8_TRAY=C:\PROGRA~1\AVG\AVG8\avgtray.exe
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

--------------- [ Registre / Mountpoint2 ] ----------------

Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{608e2207-f29a-11dc-a856-001b24e4feb5}\Shell\AutoRun\command
Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{afe4559e-04a0-11dd-a29a-001b24e4feb5}\Shell\AutoRun\command

--------------- [ Nettoyage des disques ] ----------------


--------------- [ Resumé ] ----------------

-> /!\ Le resultat doit etre interprété par un spécialiste /!\

[18/09/2006 22:43][--a------] C:\autoexec.bat

--------------- [ Vaccination ] ----------------

C:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
F:\autorun.inf -> Dossier autorun.inf crée par UsbFix !

--------------- ! Fin du rapport ! ----------------
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
1/

---> Désinstalle UsbFix.

---> Supprime les traces d'AVG avec ceci :
http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe


2/

---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
---> Sélectionne Exécuter un examen rapide.
---> Clique sur Rechercher. L'analyse démarre.

A la fin de l'analyse, un message s'affiche :

L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
---> Ferme tes navigateurs.
Si des malwares ont été détectés, clique sur Afficher les résultats.
---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
Messages postés
95
Date d'inscription
mercredi 7 janvier 2009
Statut
Membre
Dernière intervention
28 juillet 2014

lorque je lance le logiciel pour effacer les traces d'avg il me met à un moment le logiciel a cessé de fonctionner. C'est grave ou je passe à la suite ???
Messages postés
85925
Date d'inscription
dimanche 11 juillet 2010
Statut
Modérateur
Dernière intervention
30 octobre 2019
10 246
Clique droit sur avgremover et choisis Exécuter en tant qu'administrateur.