Regedit, virusremover2008 fenetress iexplorer

Résolu
corclau95 Messages postés 29 Statut Membre -  
Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   -
Bonjour,
Meilleur vœux a toutes et tous pour cette nouvelle année.

Plusieurs points très désagréables je ne peux pas bien expliquer quand, comment, dans quel ordre…
J’ai essayé tout seul de faire tout et peut-être n’importe quoi !
Je crois le début : une fenêtre m’indique regedit introuvable, hors le fichier est bien sous c:\windows\regedit.exe.
Impossible « gestionnaire des taches »
Des fenêtres avec virusremover 2008, je me suis méfier et ne pense pas avoir valider, mais ?
De plus Explorer ouvre de multiples fenêtres, j’ai arrêter mon porrable et son wi-fi, je suis sur un autre ordinateur.

Portable HP PAVILION ZD8000 - Windows XP home edition pack3 – explorer7.0.5730 – antivirus AVG 8.0.229 valable juin 2010, mise a jour quotidienne
J’ai quelques captures d’écran que je nais pas comment envoyer
J’ai téléchargé et exécuté GENPROC ? qui m’a créé un rapport que je n’ai pas executé encore.

Un peu d’aide ne serait pas superflue, merci beaucoup à mon ou mes futurs sauveteurs.
Cordialement
Configuration: Windows XP
Internet Explorer 7.0

18 réponses

  1.
    Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Salut,

    - Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

    - Double-clique sur RSIT.exe afin de lancer le programme.

    - Clique sur Continue à l'écran Disclaimer.

    - Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    - Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

    Note : Les rapports sont sauvegardés dans le dossier C:\rsit.
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      Bonjour,

      MERCI, même la nuit, il y a des sauveteurs qui veillent sur nous.
      Ce matin j'ai repris le portable, je n'ai plus les multiples fenêtres iexplorer (?????) avez-vous une explication?
      J'ai fait tout de même le contenu complet de votre message, car je n'est toujours pas regedit ni le gestionnaire des tâches.
      Il y a beaucoup (trop) de choses sur ce portable !!! mais dur dur de reinstaller........j(ai un ghost mais ancien !

      Je vous remercie également pour toutes suggestions.


      les fichiers :

      Logfile of random's system information tool 1.05 (written by random/random)
      Run by CLAUDE at 2009-01-14 11:03:31
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 4 GB (16%) free of 26 GB
      Total RAM: 1022 MB (23% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 11:03:47, on 14/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\WINDOWS\system32\E_S00RP1.EXE
      C:\WINDOWS\System32\GEARSec.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      C:\PROGRA~1\AVG\AVG8\avgam.exe
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\PROGRA~1\AVG\AVG8\avgnsx.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\SAgent4.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\PROGRA~1\AVG\AVG8\avgemc.exe
      C:\WINDOWS\LSPRN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\system32\PRINTDRV.EXE
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
      C:\PROGRA~1\AVG\AVG8\avgtray.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe
      C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe
      C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Logitech\QuickCam\Quickcam.exe
      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
      C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
      C:\Program Files\HPQ\shared\hpqwmi.exe
      C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Fichiers communs\Teleca Shared\logger.exe
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\AVG\AVG8\avgscanx.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\RSIT.exe
      c:\Documents and Settings\Claude\Bureau\_____VIRUS VIRUS VIRUS JANV 20009\HiJackThis\CLAUDE.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O3 - Toolbar: &TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~1\TerraTec\TERRAT~1\THCDES~1.DLL
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [\\DANY\EPSON TEXTE] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P18 "\\DANY\EPSON TEXTE" /O18 "\\DANY\EPSON TEXTE" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [\\BURODANY-IB38\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P42 "\\BURODANY-IB38\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Auto EPSON Stylus DX4200 Series sur BURODANY-IB38] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P49 "Auto EPSON Stylus DX4200 Series sur BURODANY-IB38" /O26 "\\BURODANY-IB38\EPSON-IB38" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [\\PC-DANY\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P36 "\\PC-DANY\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [TerraTec Remote Control] "C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe"
      O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
      O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
      O4 - HKLM\..\Run: [HerculesCamService] C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
      O4 - HKLM\..\Run: [Printer Driver] C:\WINDOWS\system32\PRINTDRV.EXE
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
      O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - HKLM\..\Policies\Explorer\Run: [PrinterSecurityLayer] C:\WINDOWS\LSPRN.EXE
      O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cor2c95com.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
      O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
      O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
      O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      O23 - Service: Epson Printer Status Agent4 (StatusAgent4) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\SAgent4.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      0
    2. corclau95 Messages postés 29 Statut Membre 1
       
      Bonjour,

      MERCI, même la nuit, il y a des sauveteurs qui veillent sur nous.
      Ce matin j'ai repris le portable, je n'ai plus les multiples fenêtres iexplorer (?????) avez-vous une explication?
      J'ai fait tout de même le contenu complet de votre message, car je n'est toujours pas regedit ni le gestionnaire des tâches.
      Il y a beaucoup (trop) de choses sur ce portable !!! mais dur dur de reinstaller........j(ai un ghost mais ancien !

      Je vous remercie également pour toutes suggestions.


      les fichiers :

      Logfile of random's system information tool 1.05 (written by random/random)
      Run by CLAUDE at 2009-01-14 11:03:31
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 4 GB (16%) free of 26 GB
      Total RAM: 1022 MB (23% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 11:03:47, on 14/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\WINDOWS\system32\E_S00RP1.EXE
      C:\WINDOWS\System32\GEARSec.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      C:\PROGRA~1\AVG\AVG8\avgam.exe
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\PROGRA~1\AVG\AVG8\avgnsx.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\SAgent4.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\PROGRA~1\AVG\AVG8\avgemc.exe
      C:\WINDOWS\LSPRN.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\system32\PRINTDRV.EXE
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
      C:\PROGRA~1\AVG\AVG8\avgtray.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe
      C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe
      C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Logitech\QuickCam\Quickcam.exe
      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
      C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
      C:\Program Files\HPQ\shared\hpqwmi.exe
      C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Fichiers communs\Teleca Shared\logger.exe
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\AVG\AVG8\avgscanx.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\RSIT.exe
      c:\Documents and Settings\Claude\Bureau\_____VIRUS VIRUS VIRUS JANV 20009\HiJackThis\CLAUDE.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O3 - Toolbar: &TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~1\TerraTec\TERRAT~1\THCDES~1.DLL
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [\\DANY\EPSON TEXTE] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P18 "\\DANY\EPSON TEXTE" /O18 "\\DANY\EPSON TEXTE" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [\\BURODANY-IB38\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P42 "\\BURODANY-IB38\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Auto EPSON Stylus DX4200 Series sur BURODANY-IB38] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P49 "Auto EPSON Stylus DX4200 Series sur BURODANY-IB38" /O26 "\\BURODANY-IB38\EPSON-IB38" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [\\PC-DANY\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P36 "\\PC-DANY\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [TerraTec Remote Control] "C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe"
      O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
      O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
      O4 - HKLM\..\Run: [HerculesCamService] C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
      O4 - HKLM\..\Run: [Printer Driver] C:\WINDOWS\system32\PRINTDRV.EXE
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
      O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - HKLM\..\Policies\Explorer\Run: [PrinterSecurityLayer] C:\WINDOWS\LSPRN.EXE
      O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cor2c95com.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
      O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
      O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
      O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      O23 - Service: Epson Printer Status Agent4 (StatusAgent4) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\SAgent4.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      0
    3. corclau95 Messages postés 29 Statut Membre 1
       
      suite des fichiers

      info.txt logfile of random's system information tool 1.05 2009-01-14 11:03:53

      ======Uninstall list======

      -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE
      -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
      -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
      -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
      -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
      -->MsiExec.exe /I{C98E5F1B-5C2B-4FD1-BDF9-F3779DCAAA16}
      -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A2092B2A-A4FB-4464-A4C0-023D2C9993F8}\Setup.exe" -l0x40c
      -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
      3ivx D4 4.5.1 (remove only)-->"C:\Program Files\3ivx\3ivx D4 4.5.1\uninstall.exe"
      AC3Filter (remove only)-->C:\Program Files\AC3Filter\uninstall.exe
      ACDSee Pro 2.5-->MsiExec.exe /I{2D95950E-6D76-43E7-94A5-D9DBA2FD29E4}
      ACDSee Pro-->MsiExec.exe /I{6DE20125-6C25-46DD-8743-9C731E25ABA5}
      ACDSee RAW Image Decoder Plug-In Update 4.0-->MsiExec.exe /X{1BF38C77-E678-49AF-885A-BBD10AED2FF3}
      Ad-aware 6 - Traduction FR-->C:\Program Files\Lavasoft\Ad-aware 6\uninst-trad.exe
      Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
      Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
      Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
      Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
      Adobe Help Center 2.0-->MsiExec.exe /I{8FFC924C-ED06-44CB-8867-3CA778ECE903}
      Adobe PageMaker 7.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Adobe\PageMaker 7.0\Uninst.isu" -c"C:\Program Files\Adobe\PageMaker 7.0\Uninst.dll"
      Adobe Photoshop Elements 4.0-->msiexec /I {EBB7C1C1-D439-4D9B-9FDC-954C10F266B0}
      Adobe Type Manager Deluxe 4.1-->C:\WINDOWS\unin040c.exe -f"C:\Program Files\Adobe Type Manager\DeIsL1.isu" -c"C:\Program Files\Adobe Type Manager\UNINST.DLL"
      Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
      ATI - Utilitaire de désinstallation du logiciel-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
      ATI Control Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
      ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
      AtomTime Pro 3.1d-->"C:\Program Files\AtomTime Pro\unins000.exe"
      AusLogics Disk Defrag-->"C:\Program Files\AusLogics Disk Defrag\unins000.exe"
      AVG 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
      Azureus-->C:\Program Files\Azureus\Uninstall.exe
      Bridge Base Online-->C:\WINDOWS\iun506.exe c:\Bridge Base Online\irunin.ini
      Broadcom 802.11 Wireless LAN Adapter-->C:\WINDOWS\system32\BCMWLU00.exe verbose /rootkey=Software\Broadcom\802.11\UninstallInfo
      CamStudio-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{EB371786-9449-4ED8-B47A-032467A58CAD} anything\anything
      CDex extraction audio-->"C:\Program Files\CDex_170b2\uninstall.exe"
      ClickImpôts plus 2008-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2FEE57C6-9453-4B3A-B79E-130B83340A5C}\Setup.exe" -l0x40c
      ClickImpôts plus Premier 2007-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9426741-D051-45A9-8816-FCFBAEB4DC0A}\setup.exe" -l0x40c
      CodeStuff Starter-->"C:\Program Files\CodeStuff\Starter\unStarter.exe"
      Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
      Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
      Coffret de pilotes Logitech QuickCam-->"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\11.50.1145\LgDrvInst.exe" -remove -instdir"C:\Program Files\Fichiers communs\LogiShrd\LogiDriverStore\lvdrivers\" -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -promptuninstall -arpregkey"lvdrivers_11.50" /clone_wait /hide_progress
      Combined Community Codec Pack 2008-01-24-->"C:\Program Files\Combined Community Codec Pack\unins001.exe"
      Conexant AC-97 Audio-->CIAunwdm.exe
      Conexant Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_8086&DEV_266D&SUBSYS_3082103C\HXFSETUP.EXE -U -Ihpm30825.inf
      ConvertMovie 4.4-->C:\Program Files\ConvertMovie 4.4\uninst.exe
      Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
      Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
      Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
      CyberLink PhotoNow-->"C:\Program Files\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe" /z-uninstall
      CyberLink PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
      Data Exchange Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8A20EF70-2732-11D4-B952-0060970CDF91}\Setup.exe" UninstallThisProgramPlease
      DFX for Windows Media Player-->MsiExec.exe /I{da23cbf8-e992-4a92-ae92-cf0a5314bb55}
      Documents To Go-->MsiExec.exe /X{93214290-1113-43F5-9B5A-A9E1FA1C9322}
      DVD Audio Extractor 4.2.2-->"C:\Program Files\DVD Audio Extractor\unins000.exe"
      DVD Identifier-->"C:\Program Files\DVD Identifier\Uninst\unins000.exe"
      e-Carte Bleue LCL-->"C:\Program Files\InstallShield Installation Information\{3D6B54EF-65E4-4624-8709-03A3BBE2C240}\setup.exe" -runfromtemp -l0x040c -removeonly
      eMule-->"C:\Program Files\eMule\Uninstall.exe"
      EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
      Favorit-->"c:\documents and settings\claude\local settings\application data\qwdpmv.exe" -uninstall
      GoldWave v5.14-->"C:\Program Files\GoldWave\unstall.exe" "GoldWave v5.14" "C:\Program Files\GoldWave\unstall.log"
      Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
      Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
      Google Toolbar for Firefox-->MsiExec.exe /X{2CCBABCB-6427-4A55-B091-49864623C43F}
      Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
      Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
      Haali Media Splitter-->"C:\Program Files\Matroska Pack\haali\uninstall.exe"
      Hercules DualPix HD Webcam-->C:\Program Files\InstallShield Installation Information\{F0CFDC72-63D2-4086-A54F-1514494394A0}\setup.exe -runfromtemp -l0x040c -removeonly
      HijackThis 2.0.2-->"c:\Documents and Settings\Claude\Bureau\_____VIRUS VIRUS VIRUS JANV 20009\HiJackThis\HijackThis.exe" /uninstall
      Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
      HP Help and Support-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\setup.exe" -l0x40c -removeonly
      HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
      HP Wireless Assistant 1.01 A2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe" -l0x40c hpquninst
      Interlok driver setup x32-->MsiExec.exe /X{25613C10-27D2-410B-942B-D922D5C3A7BE}
      InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
      iTunes-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{BE20E2F5-1903-4AAE-B1AF-2046E586C925}
      J2SE Runtime Environment 5.0 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150020}
      Java 2 Runtime Environment, SE v1.4.1_02-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFCE5837-FC21-11D6-9D24-00010240CE95}\setup.exe" Anytext
      Java Web Start-->"C:\Program Files\Java\jre1.6.0_01\bin\uninst-javaws.exe"
      Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
      Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
      Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
      Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
      Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
      Java(TM) SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
      KaraWin Pro-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BFA52389-ECC9-4DA2-BDA0-D2C76F5B7F9A}\Setup.exe"
      K-Lite Codec Pack 2.89 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
      Language pack for Ad-Aware SE-->C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\Plugins\Langs\INSTALL.LOG
      Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
      LiveReg (Symantec Corporation)-->C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VCSETUP.EXE /REMOVE
      LiveUpdate 2.6 (Symantec Corporation)-->C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
      Logitech QuickCam-->MsiExec.exe /X{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}
      Lupas Rename 2000 v5.0 Release-->"C:\Program Files\Lupas Rename 2000\unins000.exe"
      Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
      Maxthon Browser (remove only)-->C:\Program Files\Maxthon\MaxthonUINST.exe
      Maxthon2 Browser (remove only)-->C:\Program Files\Maxthon2\MaxthonUINST.exe
      MediaLife -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{362BFFCD-8274-11D8-97C8-000129760CBE}\setup.exe" -uninstall
      Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
      Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
      Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
      Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
      Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
      Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
      Microsoft .NET Framework 3.0 Service Pack 1-->MsiExec.exe /I{2BA00471-0328-3743-93BD-FA813353A783}
      Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
      Microsoft .NET Framework 3.5-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5\setup.exe
      Microsoft .NET Framework 3.5-->MsiExec.exe /I{2FC099BD-AC9B-33EB-809C-D332E1B27C40}
      Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
      Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
      Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
      Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
      Microsoft Office 97 Professional-->C:\Program Files\Microsoft Office\Office\Install\Acme.exe /w Off97Pro.STF
      Microsoft Office Professional Edition 2003-->MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}
      Microsoft Office-->C:\MSOffice\Office\Install\Acme.exe /w Off95std.stf
      Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
      Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
      Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
      Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
      Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
      Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
      Mozilla Firefox (3.0.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
      MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
      MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
      MSXML 6 Service Pack 2 (KB954459)-->MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}
      MyFreeCodec-->C:\Program Files\MyFree Codec\09a beta\uninstall.exe
      MyPhoneExplorer-->C:\Program Files\MyPhoneExplorer\uninstall.exe
      Nero 6 Ultra Edition-->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
      NeroVision Express 3-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
      Netscape (7.1)-->C:\WINDOWS\NSUninst.exe /ua "7.1b1 (fr)"
      Norton Ghost 10.0-->MsiExec.exe /X{32F720F5-2D0D-4245-A2B0-9EB3CECF8101}
      OpenOffice.org Installer 1.0-->MsiExec.exe /X{3A2AF807-9F9F-43C9-A24A-17B617238B74}
      OT1 Font Manager-->MsiExec.exe /I{6A937F1C-F75A-4280-8D8E-E9AB314B504D}
      Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
      Palm-->MsiExec.exe /X{ADAED43C-BBD9-42C5-8B21-F4FBFA81E3C3}
      PC Suite for Sony Ericsson-->C:\WINDOWS\Installer\{E1252473-6306-4d5d-904D-B06AA7F38161}\Setup.exe /uninstall
      PC Suite for Sony Ericsson-->MsiExec.exe /I{AD501749-CD49-499A-AD54-51DC42A57434}
      Photo2DVD Studio Build 4.9.8.0-->"C:\Program Files\Wondershare\Photo2DVD Studio\unins000.exe"
      PL-2303 USB-to-Serial-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}\Setup.exe" -l0x9 Installed
      Poi Edit v3.0-->C:\PROGRA~1\DNOTES~1\POIEDI~1\UNWISE.EXE C:\PROGRA~1\DNOTES~1\POIEDI~1\INSTALL.LOG
      PoiEdit-->C:\PROGRA~1\DNOTES~1\POIEDI~2\UNWISE.EXE C:\PROGRA~1\DNOTES~1\POIEDI~2\INSTALL.LOG
      Professional Capture Systems 2.0-->C:\WINDOWS\UNWISE.EXE C:\PCS\INSTALL.LOG "Professional Capture Systems 2.1 Uninstall"
      Quick Launch Buttons 5.10 A2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CEB326EC-8F40-47B2-BA22-BB092565D66F}\setup.exe" -l0x40c -uninst
      QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
      RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
      REALTEK Gigabit and Fast Ethernet NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{94FB906A-CF42-4128-A509-D353026A607E}\Setup.exe" -l0x40c REMOVE
      RegSupreme Pro 1.1-->"C:\Program Files\RegSupreme Pro\unins000.exe"
      River Past Video Cleaner Pro-->C:\WINDOWS\Video Cleaner Pro Uninstaller.exe
      Samsung Media Studio-->C:\Program Files\InstallShield Installation Information\{C20CE592-B0F8-4D20-BF31-0151CA6331A6}\setup.exe -runfromtemp -l0x040c -removeonly
      ScenalyzerLive (remove)-->C:\WINDOWS\unslive.exe
      Sentinel System Driver-->C:\WINDOWS\SYSTEM32\RNBOSENT\SETUPX86.EXE /U /q
      SiemensQuickSync 2.0.15-->"C:\Program Files\Siemens AG\QuickSync\setup\setup.exe" /u
      SmartSound Quicktracks Plugin-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
      Sonic Audio Module-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
      Sonic Copy Module-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
      Sonic Data Module-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
      Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
      Sonic MyDVD Plus-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
      Sonic Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
      Sony Ericsson Media Manager 1.2-->MsiExec.exe /X{5F1ECBFB-048E-406E-A7AB-A81F9E359961}
      Sony Ericsson Symbian 9 Drivers-->C:\Program Files\Sony Ericsson\Sony Ericsson Symbian 9 Drivers\ZEBRUninstall.exe
      SopCast 3.0.1-->C:\Program Files\SopCast\uninst.exe
      Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
      TerraTec Home Cinema-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\setup.exe" -l0x40c
      Texas Instruments PCIxx21/x515 drivers.-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{612DC38A-B36A-4699-88EB-12C7394DE2FC} /l1036
      Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
      Traduction française pour jetAudio 6.2-->C:\Program Files\JetAudio\UnInstall_jetAudio.exe
      TrueImage-->MsiExec.exe /X{CA83357B-931E-44DC-AD43-9996FEEB8116}
      Ulead DVD MovieFactory 3 TV-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C7D89BBE-D4B3-49E8-B185-7966B5345866}\setup.exe" -l0x40c
      Update Service-->C:\Program Files\Sony Ericsson\Update Service\uninst.exe
      ViaMichelin Navigation-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{88C9863E-5495-4D66-8B00-2644E95837C0}\setup.exe" -l0x40c
      VideoLAN VLC media player 0.8.6i-->C:\Program Files\VideoLAN\VLC\uninstall.exe
      Viewpoint Media Player (Remove Only)-->C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u
      WebMediaPlayer-->C:\Program Files\WebMediaPlayer\uninst.exe
      WhereIsIt? 3.83-->"C:\Program Files\WhereIsIt\unins000.exe"
      WinAce Archiver-->c:\Program Files\WinAce\SXUNINST.EXE c:\Program Files\WinAce\SXUNINST.INI
      Winamp (remove only)-->"C:\Program Files\Winamp\UninstWA.exe"
      WinAVI DVD Copy-->"C:\Program Files\WinAVI DVD Copy\unins000.exe"
      Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
      Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}
      Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
      Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
      Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
      Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
      Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
      Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
      WinISO 5.3-->"C:\Program Files\WinISO\unins000.exe"
      WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
      WinTidy 2.0-->"C:\Program Files\WinTidy\unins000.exe"
      WinZip-->"C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
      WMV TO AVI CONVERTER version 3.1.1-->"C:\Program Files\WMVTOAVI\unins000.exe"
      Wondershare PPT to Video 4.0.0.6 Trial-->"C:\Program Files\Wondershare\PPT to Video\unins000.exe"
      XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
      XviD 1.1 final uninstall-->"C:\Program Files\XviD\unins000.exe"
      Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
      Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE

      ======Security center information======

      AV: AVG Internet Security

      System event log

      Computer Name: HP-PAP2
      Event Code: 62486
      Message: Invalid parameters

      Record Number: 56046
      Source Name: ati2mtag
      Time Written: 20090105172500.000000+060
      Event Type: Informations
      User:

      Computer Name: HP-PAP2
      Event Code: 62486
      Message: Invalid parameters

      Record Number: 56045
      Source Name: ati2mtag
      Time Written: 20090105172500.000000+060
      Event Type: Informations
      User:

      Computer Name: HP-PAP2
      Event Code: 62486
      Message: Invalid parameters

      Record Number: 56044
      Source Name: ati2mtag
      Time Written: 20090105172500.000000+060
      Event Type: Informations
      User:

      Computer Name: HP-PAP2
      Event Code: 62486
      Message: Invalid parameters

      Record Number: 56043
      Source Name: ati2mtag
      Time Written: 20090105172500.000000+060
      Event Type: Informations
      User:

      Computer Name: HP-PAP2
      Event Code: 62486
      Message: Invalid parameters

      Record Number: 56042
      Source Name: ati2mtag
      Time Written: 20090105172500.000000+060
      Event Type: Informations
      User:

      Application event log

      Computer Name: HP-PAP2
      Event Code: 1
      Message: L'application a démarré

      Record Number: 7989
      Source Name: ccSetMgr
      Time Written: 20080813191439.000000+120
      Event Type: Informations
      User: AUTORITE NT\SYSTEM

      Computer Name: HP-PAP2
      Event Code: 26
      Message: Démarrage de l'application

      Record Number: 7988
      Source Name: ccSetMgr
      Time Written: 20080813191439.000000+120
      Event Type: Informations
      User: AUTORITE NT\SYSTEM

      Computer Name: HP-PAP2
      Event Code: 100
      Message: Description : Infos 6C8F0427 : Service Norton Ghost démarré.
      Détails :
      Source : Norton Ghost

      Record Number: 7987
      Source Name: Norton Ghost
      Time Written: 20080813142105.000000+120
      Event Type: Informations
      User:

      Computer Name: HP-PAP2
      Event Code: 1
      Message:
      Record Number: 7986
      Source Name: avg8emc
      Time Written: 20080813142057.000000+120
      Event Type: Informations
      User:

      Computer Name: HP-PAP2
      Event Code: 1800
      Message: Le service Centre de sécurité Windows a démarré.

      Record Number: 7985
      Source Name: SecurityCenter
      Time Written: 20080813142052.000000+120
      Event Type: Informations
      User:

      ======Environment variables======

      "ComSpec"=%SystemRoot%\system32\cmd.exe
      "Path"=C:\Program Files\ATI Technologies\ATI Control Panel;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322;C:\Program Files\Ulead Systems\Ulead DVD MovieFactory 3 TV;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Fichiers communs\Teleca Shared;C:\Program Files\Intuwave\Shared\mRouterRuntime;C:\Program Files\QuickTime\QTSystem\
      "windir"=%SystemRoot%
      "FP_NO_HOST_CHECK"=NO
      "OS"=Windows_NT
      "PROCESSOR_ARCHITECTURE"=x86
      "PROCESSOR_LEVEL"=15
      "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 3, GenuineIntel
      "PROCESSOR_REVISION"=0403
      "NUMBER_OF_PROCESSORS"=2
      "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
      "TEMP"=%SystemRoot%\TEMP
      "TMP"=%SystemRoot%\TEMP
      "SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
      "DEFAULT_CA_NR"=CA8
      "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
      "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip

      -----------------EOF-----------------

      Bon courage et MERCI !!!!!
      0
  2. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    --> Télécharge UsbFix (de Chiquitine29) sur ton Bureau.

    --> Lance l'installation avec les paramètres par défaut.

    --> Branche tes sources de données externes à ton PC (clé USB, disque dur externe, carte SD, etc...) sans les ouvrir.

    --> Double-clique sur le raccourci UsbFix sur ton Bureau.

    --> Choisis l'option 1 (Nettoyage).

    --> Le PC va redémarrer.

    --> Après redémarrage, poste le rapport UsbFix.txt

    Note : le rapport UsbFix.txt est sauvegardé à la racine du disque.

    (Si le Bureau ne réapparaît pas, presse Ctrl+Alt+Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide)
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      Bonsoir.
      Voici le rapport UsbFix.txt



      -------------- UsbFix V2.414.1 ---------------

      * User : CLAUDE - HP-PAP2
      * Outils mis a jours le 14/01/2009 par Chiquitine29 et Chimay8
      * Recherche effectuée à 0:12:52 le 15/01/2009
      * Windows Xp - Internet Explorer 7.0.5730.13


      --------------- [ Processus actifs ] ----------------


      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\logonui.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\WINDOWS\system32\E_S00RP1.EXE
      C:\WINDOWS\System32\GEARSec.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
      C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\PROGRA~1\AVG\AVG8\avgam.exe
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\PROGRA~1\AVG\AVG8\avgnsx.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\SAgent4.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\PROGRA~1\AVG\AVG8\avgemc.exe

      --------------- [ Informations lecteurs ] ----------------

      C: - Lecteur fixe

      D: - Lecteur fixe

      F: - Lecteur fixe

      G: - Lecteur amovible

      H: - Lecteur amovible

      M: - Lecteur r‚seau ou … distance

      N: - Lecteur r‚seau ou … distance

      O: - Lecteur r‚seau ou … distance

      P: - Lecteur r‚seau ou … distance

      Q: - Lecteur r‚seau ou … distance

      R: - Lecteur r‚seau ou … distance

      S: - Lecteur r‚seau ou … distance

      T: - Lecteur r‚seau ou … distance

      U: - Lecteur fixe

      W: - Lecteur fixe


      --------------- [ Lecteur C ] ----------------

      C: - Lecteur fixe


      +- Listing des fichiers présents :

      [28/07/2007 23:36][--a------] C:\AUTOEXEC.BAT
      [05/08/2004 13:00][-rahs----] C:\NTDETECT.COM
      [13/04/2007 14:13][---hs----] C:\boot.ini
      [28/08/2008 09:58][--a------] C:\additdiag.txt
      [28/08/2008 09:58][--a------] C:\AdobeDebug.txt
      [28/08/2008 09:58][--a------] C:\adobelog.txt
      [28/08/2008 09:58][--a------] C:\gennavi.txt
      [28/08/2008 09:58][--a------] C:\gprs_log.txt
      [28/08/2008 09:58][--a------] C:\HuskyInstallerLog.txt
      [28/08/2008 09:58][--a------] C:\RVInfo.txt
      [28/08/2008 09:58][--a------] C:\UsbFix.txt
      [13/04/2007 14:20][--a------] C:\CONFIG.SYS
      [13/04/2007 14:20][--a------] C:\IO.SYS
      [13/04/2007 14:20][--a------] C:\MSDOS.SYS
      [13/04/2007 14:20][--a------] C:\pagefile.sys

      --------------- [ Lecteur D ] ----------------

      D: - Lecteur fixe


      +- Listing des fichiers présents :

      [18/09/2008 22:11][d--------] D:\ACDSee.Pro.2.v2.0.238-=(E.D)=-CORE.Team.(OSiOLEK.com)
      [29/07/2006 22:17][--a------] D:\e-como.exe
      [29/07/2006 22:17][--a------] D:\fotofacil2.exe
      [29/07/2006 22:17][--a------] D:\GoogleEarthWin.exe
      [29/07/2006 22:17][--a------] D:\install_flash_player.exe
      [29/07/2006 22:17][--a------] D:\mcombo.exe
      [29/07/2006 22:17][--a------] D:\mx_1.6.3.80.exe
      [29/07/2006 22:17][--a------] D:\mx_2.0.1.3018.exe
      [29/07/2006 22:17][--a------] D:\mx_2.0.7.1030.exe
      [29/07/2006 22:17][--a------] D:\NSSetup.exe
      [29/07/2006 22:17][--a------] D:\sleepy.exe

      --------------- [ Lecteur F ] ----------------

      F: - Lecteur fixe


      +- Listing des fichiers présents :


      --------------- [ Lecteur G ] ----------------

      G: - Lecteur amovible


      +- Listing des fichiers présents :

      [29/11/2007 08:42][d--------] G:\WhereIsIt.3.84.Build.715-=(E.D)=-Incl.Key.(OSiOLEK.com)
      [29/11/2007 08:42][d--------] G:\WhereIsIt 3.83 [Par Ratiatum.com]
      [09/12/2008 20:45][--a------] G:\Classic PhoneTools 9 keygen.exe
      [09/12/2008 20:45][--a------] G:\WINFAX EXPERT 9 crack(no cd).exe
      [09/12/2008 20:45][--a------] G:\WINFAX EXPERT 9 Crack.exe
      [09/12/2008 20:45][--a------] G:\7z444.exe
      [09/12/2008 20:45][--a------] G:\Click Impots Plus 2008.exe
      [09/12/2008 20:45][--a------] G:\DV500_45_small.exe
      [09/12/2008 20:45][--a------] G:\flashpoint.exe
      [09/12/2008 20:45][--a------] G:\GoogleEarthWin_EARW.exe
      [09/12/2008 20:45][--a------] G:\ie6setup.exe
      [09/12/2008 20:45][--a------] G:\Install_Messenger.exe
      [09/12/2008 20:45][--a------] G:\keyboard_desktop_v5.1.exe
      [09/12/2008 20:45][--a------] G:\AVSVideoConverter4.exe
      [09/12/2008 20:45][--a------] G:\MatroskaSplitter.exe
      [09/12/2008 20:45][--a------] G:\mpc_install_6.4.8.3_fr.exe
      [09/12/2008 20:45][--a------] G:\multishow11.exe
      [09/12/2008 20:45][--a------] G:\PDF2XL-Setup-Eval.exe
      [09/12/2008 20:45][--a------] G:\PPVIEWER.EXE
      [09/12/2008 20:45][--a------] G:\RealPlayer10-5GOLD_fr.exe
      [09/12/2008 20:45][--a------] G:\RegCleaner 4.3.0.780.exe
      [09/12/2008 20:45][--a------] G:\setup_eoclock.exe
      [09/12/2008 20:45][--a------] G:\vlc-0.8.4a-win32.exe
      [09/12/2008 20:45][--a------] G:\ATF-Cleaner.exe
      [09/12/2008 20:45][--a------] G:\ConvertXtoDVD Full VERSION3.exe
      [09/12/2008 20:45][--a------] G:\powervideomaker.exe
      [09/12/2008 20:45][--a------] G:\ppt2dvd.exe
      [09/12/2008 20:45][--a------] G:\ppttovideo_trial.exe
      [09/12/2008 20:45][--a------] G:\vlc-0.8.6d-win32.exe
      [03/11/2008 03:26][--a------] G:\Code Activation Dxo v5(1).txt
      [03/11/2008 03:26][--a------] G:\Code activation DXO v5(2).txt
      [03/11/2008 03:26][--a------] G:\Code activation DXO v5.txt
      [03/11/2008 03:26][--a------] G:\Code Dxo Optics Pro.txt
      [03/11/2008 03:26][--a------] G:\Serial Winfax Expert.txt
      [03/11/2008 03:26][--a------] G:\Winphone serial.txt
      [03/11/2008 03:26][--a------] G:\ACDSEE 8 du 19092006.txt
      [03/11/2008 03:26][--a------] G:\ACDSEE NUMERO SERIE.TXT
      [03/11/2008 03:26][--a------] G:\SYYSSTTRRAANN.TXT
      [03/11/2008 03:26][--a------] G:\POWERPOINT VERS VIDEO.txt

      --------------- [ Lecteur H ] ----------------

      H: - Lecteur amovible


      +- Listing des fichiers présents :

      [13/01/2009 16:29][--a------] H:\mbam-setup.exe
      [14/01/2009 00:24][--a------] H:\LES ADRESSES DES SITES INTERNET.txt

      --------------- [ Lecteur M ] ----------------

      M: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :

      [18/07/2007 23:50][--a------] M:\AUTOEXEC.BAT
      [03/08/2004 21:38][-rahs----] M:\NTDETECT.COM
      [21/06/2007 12:25][--ahs----] M:\boot.ini
      [11/12/2007 01:29][--a------] M:\PARTAGE PROGRAM FILES EN RESEAU.TXT
      [18/06/2007 22:55][--a------] M:\CONFIG.SYS
      [18/06/2007 22:55][--a------] M:\IO.SYS
      [18/06/2007 22:55][--a------] M:\MSDOS.SYS
      [18/06/2007 22:55][--a------] M:\pagefile.sys

      --------------- [ Lecteur N ] ----------------

      N: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :


      --------------- [ Lecteur O ] ----------------

      O: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :


      --------------- [ Lecteur P ] ----------------

      P: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :


      --------------- [ Lecteur Q ] ----------------

      Q: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :

      [30/11/2007 14:27][-r-h-----] Q:\NG Recovery Point Storage.ini
      [26/09/2004 00:35][--a------] Q:\ASAVOIR__DG-IBM80CXPF.txt

      --------------- [ Lecteur R ] ----------------

      R: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :

      [05/11/2007 00:29][-r-h-----] R:\NG Recovery Point Storage.ini
      [12/05/2006 22:51][--a------] R:\A SAVOIR.txt

      --------------- [ Lecteur S ] ----------------

      S: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :


      --------------- [ Lecteur T ] ----------------

      T: - Lecteur r‚seau ou … distance


      +- Listing des fichiers présents :

      [16/12/1996 23:00][--a------] T:\PNGSETUP.EXE
      [16/12/1996 23:00][--a------] T:\powervideomaker.exe
      [16/12/1996 23:00][--a------] T:\ppt2dvd.exe
      [16/12/1996 23:00][--a------] T:\ppttovideo_trial.exe
      [06/03/2008 08:18][-rah-----] T:\NG Recovery Point Storage.ini

      --------------- [ Lecteur U ] ----------------

      U: - Lecteur fixe


      +- Listing des fichiers présents :


      --------------- [ Lecteur W ] ----------------

      W: - Lecteur fixe


      +- Listing des fichiers présents :

      [09/12/2008 20:45][--a------] W:\Classic PhoneTools 9 keygen.exe
      [09/12/2008 20:45][--a------] W:\crack.exe
      [09/12/2008 20:45][--a------] W:\setpointfra.exe
      [21/10/2008 23:57][--a------] W:\pluserror.txt

      --------------- [ Registre / Startup ] ----------------

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Search Page"="https://www.google.com/?gws_rd=ssl"
      "Start Page"="https://www.orange.fr/portail"
      "Secondary Start Pages"=hex(7):68,00,74,00,74,00,70,00,3a,00,2f,00,2f,00,77,00,\

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
      mRouterConfig="C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
      Messenger (Yahoo!)="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      IMJPMIG8.1="C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      PHIME2002ASync=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      PHIME2002A=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      ATIPTA=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      Cpqset=C:\Program Files\HPQ\Default Settings\cpqset.exe
      eabconfg.cpl=C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      hpWirelessAssistant=C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      ISUSPM Startup=C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
      ISUSScheduler="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      ccApp="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      \\DANY\EPSON TEXTE=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P18 "\\DANY\EPSON TEXTE" /O18 "\\DANY\EPSON TEXTE" /M "Stylus DX4200"
      Logitech Hardware Abstraction Layer=KHALMNPR.EXE
      \\BURODANY-IB38\EPSON Stylus DX4200 Series=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P42 "\\BURODANY-IB38\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      Auto EPSON Stylus DX4200 Series sur BURODANY-IB38=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P49 "Auto EPSON Stylus DX4200 Series sur BURODANY-IB38" /O26 "\\BURODANY-IB38\EPSON-IB38" /M "Stylus DX4200"
      \\PC-DANY\EPSON Stylus DX4200 Series=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P36 "\\PC-DANY\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      AVG8_TRAY=C:\PROGRA~1\AVG\AVG8\avgtray.exe
      SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
      QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime
      TkBellExe="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      TerraTec Remote Control="C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe"
      TrueImageMonitor.exe=C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      Acronis Scheduler2 Service="C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
      PC Suite for Smartphones="C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
      HerculesCamService=C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      ISUSPM="C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
      Printer Driver=C:\WINDOWS\system32\PRINTDRV.EXE
      LogitechQuickCamRibbon="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      LogitechCommunicationsManager="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
      Installed=1
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
      Installed=1
      NoChange=1
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
      Installed=1

      --------------- [ Registre / Mountpoint2 ] ----------------

      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{68b7ebad-8f65-11dc-b8b4-00c09fdb91f7}\Shell\AutoRun\command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b5abdbc-3d5f-11dc-b867-00c09fdb91f7}\Shell\AutoRun\command
      Supprimé ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9e0289bf-1332-11dc-b848-00c09fdb91f7}\Shell\AutoRun\command

      --------------- [ Nettoyage des disques ] ----------------


      --------------- [ Resumé ] ----------------

      -> /!\ Le resultat doit etre interprété par un spécialiste /!\

      [28/07/2007 23:36][--a------] C:\AUTOEXEC.BAT
      [05/08/2004 13:00][-rahs----] C:\NTDETECT.COM
      [13/04/2007 14:13][---hs----] C:\boot.ini
      [18/09/2008 22:11][d--------] D:\ACDSee.Pro.2.v2.0.238-=(E.D)=-CORE.Team.(OSiOLEK.com)
      [29/07/2006 22:17][--a------] D:\e-como.exe
      [29/07/2006 22:17][--a------] D:\fotofacil2.exe
      [29/07/2006 22:17][--a------] D:\GoogleEarthWin.exe
      [29/07/2006 22:17][--a------] D:\install_flash_player.exe
      [29/07/2006 22:17][--a------] D:\mcombo.exe
      [29/07/2006 22:17][--a------] D:\mx_1.6.3.80.exe
      [29/07/2006 22:17][--a------] D:\mx_2.0.1.3018.exe
      [29/07/2006 22:17][--a------] D:\mx_2.0.7.1030.exe
      [29/07/2006 22:17][--a------] D:\NSSetup.exe
      [29/07/2006 22:17][--a------] D:\sleepy.exe
      [29/11/2007 08:42][d--------] G:\WhereIsIt.3.84.Build.715-=(E.D)=-Incl.Key.(OSiOLEK.com)
      [29/11/2007 08:42][d--------] G:\WhereIsIt 3.83 [Par Ratiatum.com]
      [09/12/2008 20:45][--a------] G:\Classic PhoneTools 9 keygen.exe
      [09/12/2008 20:45][--a------] G:\WINFAX EXPERT 9 crack(no cd).exe
      [09/12/2008 20:45][--a------] G:\WINFAX EXPERT 9 Crack.exe
      [09/12/2008 20:45][--a------] G:\7z444.exe
      [09/12/2008 20:45][--a------] G:\Click Impots Plus 2008.exe
      [09/12/2008 20:45][--a------] G:\DV500_45_small.exe
      [09/12/2008 20:45][--a------] G:\flashpoint.exe
      [09/12/2008 20:45][--a------] G:\GoogleEarthWin_EARW.exe
      [09/12/2008 20:45][--a------] G:\ie6setup.exe
      [09/12/2008 20:45][--a------] G:\Install_Messenger.exe
      [09/12/2008 20:45][--a------] G:\keyboard_desktop_v5.1.exe
      [09/12/2008 20:45][--a------] G:\AVSVideoConverter4.exe
      [09/12/2008 20:45][--a------] G:\MatroskaSplitter.exe
      [09/12/2008 20:45][--a------] G:\mpc_install_6.4.8.3_fr.exe
      [09/12/2008 20:45][--a------] G:\multishow11.exe
      [09/12/2008 20:45][--a------] G:\PDF2XL-Setup-Eval.exe
      [09/12/2008 20:45][--a------] G:\PPVIEWER.EXE
      [09/12/2008 20:45][--a------] G:\RealPlayer10-5GOLD_fr.exe
      [09/12/2008 20:45][--a------] G:\RegCleaner 4.3.0.780.exe
      [09/12/2008 20:45][--a------] G:\setup_eoclock.exe
      [09/12/2008 20:45][--a------] G:\vlc-0.8.4a-win32.exe
      [09/12/2008 20:45][--a------] G:\ATF-Cleaner.exe
      [09/12/2008 20:45][--a------] G:\ConvertXtoDVD Full VERSION3.exe
      [09/12/2008 20:45][--a------] G:\powervideomaker.exe
      [09/12/2008 20:45][--a------] G:\ppt2dvd.exe
      [09/12/2008 20:45][--a------] G:\ppttovideo_trial.exe
      [09/12/2008 20:45][--a------] G:\vlc-0.8.6d-win32.exe
      [13/01/2009 16:29][--a------] H:\mbam-setup.exe
      [18/07/2007 23:50][--a------] M:\AUTOEXEC.BAT
      [03/08/2004 21:38][-rahs----] M:\NTDETECT.COM
      [21/06/2007 12:25][--ahs----] M:\boot.ini
      [30/11/2007 14:27][-r-h-----] Q:\NG Recovery Point Storage.ini
      [05/11/2007 00:29][-r-h-----] R:\NG Recovery Point Storage.ini
      [16/12/1996 23:00][--a------] T:\PNGSETUP.EXE
      [16/12/1996 23:00][--a------] T:\powervideomaker.exe
      [16/12/1996 23:00][--a------] T:\ppt2dvd.exe
      [16/12/1996 23:00][--a------] T:\ppttovideo_trial.exe
      [06/03/2008 08:18][-rah-----] T:\NG Recovery Point Storage.ini
      [09/12/2008 20:45][--a------] W:\Classic PhoneTools 9 keygen.exe
      [09/12/2008 20:45][--a------] W:\crack.exe
      [09/12/2008 20:45][--a------] W:\setpointfra.exe

      --------------- [ Vaccination ] ----------------

      C:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      D:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      F:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      G:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      H:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      M:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      N:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      O:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      P:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      Q:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      R:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      S:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      T:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      U:\autorun.inf -> Dossier autorun.inf crée par UsbFix !
      W:\autorun.inf -> Dossier autorun.inf crée par UsbFix !

      --------------- ! Fin du rapport ! ----------------



      Les fenetre iexplorer sont reapparues apres presque une journée sans !

      Cordialement
      0
  3. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    --> Désinstalle UsbFix.

    --> Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) sur ton Bureau.
    --> Double-clique sur SmitfraudFix.exe et choisis l'option 1 puis Entrée.
    --> Un rapport sera généré, poste-le dans ta prochaine réponse.

    [*] Process.exe est détecté par certains antivirus comme étant un risktool. Il ne s'agit pas d'un virus mais d'un utilitaire destiné à mettre fin à des processus.

    /!\ Ne fais l'étape 2 que si on te le demande, on doit d'abord examiner le premier rapport de SmitfraudFix. /!\
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      Bonjour,

      Je viens de faire le rapport et je n'ai plus de fenetres multiples iexplorer, j'en avait ce matin ????
      Merci

      rapport demandé
      SmitFraudFix v2.391

      Rapport fait à 15:33:24,14, 15/01/2009
      Executé à partir de C:\Documents and Settings\CLAUDE\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\WINDOWS\system32\E_S00RP1.EXE
      C:\WINDOWS\System32\GEARSec.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\SAgent4.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\WINDOWS\LSPRN.EXE
      C:\WINDOWS\system32\PRINTDRV.EXE
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe
      C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe
      C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
      C:\Program Files\Logitech\QuickCam\Quickcam.exe
      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
      C:\Program Files\HPQ\shared\hpqwmi.exe
      C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Fichiers communs\Teleca Shared\logger.exe
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\agent.exe
      C:\Program Files\AVG\AVG8\avgtray.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\PROGRA~1\AVG\AVG8\avgam.exe
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\PROGRA~1\AVG\AVG8\avgnsx.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\PROGRA~1\AVG\AVG8\avgemc.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FARNAEE.EXE
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts


      »»»»»»»»»»»»»»»»»»»»»»»» C:\

      C:\autorun.inf PRESENT !

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\CLAUDE


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\CLAUDE\LOCALS~1\Temp


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\CLAUDE\Application Data


      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\CLAUDE\Favoris


      »»»»»»»»»»»»»»»»»»»»»»»» Bureau


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau



      »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      o4Patch
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri



      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri



      »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      Agent.OMZ.Fix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      404Fix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll


      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~4\\GOEC62~1.DLL,avgrsstx.dll C:\\PROGRA~1\\Google\\GOOGLE~4\\GOEC62~1.DLL"
      "LoadAppInit_DLLs"=dword:00000001


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» RK



      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Broadcom 802.11b/g WLAN - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 81.253.149.1
      DNS Server Search Order: 80.10.246.3

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{560338B3-457B-4CE1-94A0-D7E5A42DB62E}: DhcpNameServer=81.253.149.1 80.10.246.3
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{560338B3-457B-4CE1-94A0-D7E5A42DB62E}: DhcpNameServer=81.253.149.1 80.10.246.3
      HKLM\SYSTEM\CS2\Services\Tcpip\..\{560338B3-457B-4CE1-94A0-D7E5A42DB62E}: DhcpNameServer=81.253.149.9 80.10.246.132
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{560338B3-457B-4CE1-94A0-D7E5A42DB62E}: DhcpNameServer=81.253.149.1 80.10.246.3
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=81.253.149.1 80.10.246.3
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=81.253.149.1 80.10.246.3
      HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=81.253.149.9 80.10.246.132
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=81.253.149.1 80.10.246.3


      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      0
  4. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    ---> Supprime SmitfraudFix.

    ---> Fais analyser les fichiers suivants :
    - C:\WINDOWS\system32\PRINTDRV.EXE
    - C:\WINDOWS\LSPRN.EXE

    ---> Sur VirusTotal et poste les liens des analyses :
    https://www.virustotal.com/gui/
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      rebonjour,

      lsprn analyse virustotal

      Complete scanning result of "LSPRN.EXE", processed in VirusTotal at 01/15/2009 16:44:07 (CET).

      [ file data ]
      * name..: LSPRN.EXE
      * size..: 16896
      * md5...: 8c2fd5124bfcad46eff06a2cb2cc3324
      * sha1..: d46a0214420d3c3313a35f1384b14e1034cf0ea7
      * peid..: -

      [ scan result ]
      a-squared 4.0.0.73/20090115 found [Trojan-Spy.Win32.Agent.DI!IK]
      AhnLab-V3 2009.1.15.0/20090115 found [Win-Trojan/Xema.16896.M]
      AntiVir 7.9.0.54/20090115 found nothing
      Authentium 5.1.0.4/20090115 found [W32/Trojan2.EXXG]
      Avast 4.8.1281.0/20090115 found [Win32:Small-MHL]
      AVG 8.0.0.229/20090115 found nothing
      BitDefender 7.2/20090115 found [Trojan.Agent.ALKT]
      CAT-QuickHeal 10.00/20090115 found [Trojan.Small.ybe]
      ClamAV 0.94.1/20090115 found [Trojan.Small-8589]
      Comodo 932/20090115 found nothing
      DrWeb 4.44.0.09170/20090115 found [Trojan.LowZones.1024]
      eSafe 7.0.17.0/20090115 found nothing
      eTrust-Vet 31.6.6309/20090115 found nothing
      F-Prot 4.4.4.56/20090115 found [W32/Trojan2.EXXG]
      F-Secure 8.0.14470.0/20090115 found [Trojan.Win32.Small.ybe]
      Fortinet 3.117.0.0/20090115 found nothing
      GData 19/20090115 found [Trojan.Agent.ALKT]
      Ikarus T3.1.1.45.0/20090115 found [Trojan-Spy.Win32.Agent.DI]
      K7AntiVirus 7.10.584/20090109 found nothing
      Kaspersky 7.0.0.125/20090115 found [Trojan.Win32.Small.ybe]
      McAfee 5495/20090114 found [QLowZones-43]
      McAfee+Artemis 5495/20090114 found [QLowZones-43]
      Microsoft 1.4205/20090115 found [TrojanDropper:Win32/Small.HQ]
      NOD32 3768/20090115 found [probably unknown NewHeur_PE]
      Norman 5.93.01/20090115 found nothing
      nProtect 2009.1.8.0/20090115 found [Trojan/W32.Small.16896.AB]
      Panda 9.5.1.2/20090114 found nothing
      PCTools 4.4.2.0/20090115 found nothing
      Rising 21.12.32.00/20090115 found nothing
      SecureWeb-Gateway 6.7.6/20090115 found [Win32.LooksLike.Small.gen]
      Sophos 4.37.0/20090115 found nothing
      Sunbelt 3.2.1831.2/20090109 found nothing
      Symantec 10/20090115 found [Trojan Horse]
      TheHacker 6.3.1.4.220/20090114 found nothing
      TrendMicro 8.700.0.1004/20090115 found nothing
      VBA32 3.12.8.10/20090114 found [Trojan.Win32.Small.ybe]
      ViRobot 2009.1.15.1560/20090115 found [Trojan.Win32.Small.16896.E]
      VirusBuster 4.5.11.0/20090114 found [Trojan.Binky.Gen]

      ---------------------------------------------

      printdrv analyse virustotal

      File PRINTDRV.EXE received on 01.15.2009 16:58:43 (CET)
      Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


      Result: 29/39 (74.36%)
      Loading server information...
      Your file is queued in position: 3.
      Estimated start time is between 54 and 77 seconds.
      Do not close the window until scan is complete.
      The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
      If you are waiting for more than five minutes you have to resend your file.
      Your file is being scanned by VirusTotal in this moment,
      results will be shown as they're generated.
      Compact Print results
      Your file has expired or does not exists.
      Service is stopped in this moments, your file is waiting to be scanned (position: ) for an undefined time.

      You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.
      Email:


      Antivirus Version Last Update Result
      a-squared 4.0.0.73 2009.01.15 Win32.SuspectCrc!IK
      AhnLab-V3 2009.1.15.0 2009.01.15 Win-Trojan/Agent.505856.D
      AntiVir 7.9.0.54 2009.01.15 DR/Delphi.Gen
      Authentium 5.1.0.4 2009.01.15 W32/Backdoor2.DJAZ
      Avast 4.8.1281.0 2009.01.15 Win32:Small-MHL
      AVG 8.0.0.229 2009.01.15 -
      BitDefender 7.2 2009.01.15 Trojan.Spy.Delf.NRU
      CAT-QuickHeal 10.00 2009.01.15 Backdoor.Agent.slp
      ClamAV 0.94.1 2009.01.15 Trojan.Small-8589
      Comodo 932 2009.01.15 -
      DrWeb 4.44.0.09170 2009.01.15 Trojan.DownLoad.22906
      eSafe 7.0.17.0 2009.01.15 -
      eTrust-Vet 31.6.6309 2009.01.15 -
      F-Prot 4.4.4.56 2009.01.15 W32/Backdoor2.DJAZ
      F-Secure 8.0.14470.0 2009.01.15 Backdoor.Win32.Agent.slp
      Fortinet 3.117.0.0 2009.01.15 W32/Agent.SLP!tr
      GData 19 2009.01.15 Trojan.Spy.Delf.NRU
      Ikarus T3.1.1.45.0 2009.01.15 Win32.SuspectCrc
      K7AntiVirus 7.10.584 2009.01.09 Backdoor.Win32.Agent.slp
      Kaspersky 7.0.0.125 2009.01.15 Backdoor.Win32.Agent.slp
      McAfee 5495 2009.01.14 Spy-Agent.df
      McAfee+Artemis 5495 2009.01.14 Spy-Agent.df
      Microsoft 1.4205 2009.01.15 -
      NOD32 3768 2009.01.15 probably unknown NewHeur_PE
      Norman 5.93.01 2009.01.15 W32/Malware.EAZC
      nProtect 2009.1.8.0 2009.01.15 Backdoor/W32.Agent.582367
      Panda 9.5.1.2 2009.01.14 Bck/Agent.KFA
      PCTools 4.4.2.0 2009.01.15 -
      Prevx1 V2 2009.01.15 System Back Door
      Rising 21.12.31.00 2009.01.15 -
      SecureWeb-Gateway 6.7.6 2009.01.15 Trojan.Dropper.Delphi.Gen
      Sophos 4.37.0 2009.01.15 Mal/QLowZ-A
      Sunbelt 3.2.1831.2 2009.01.09 -
      Symantec 10 2009.01.15 Trojan Horse
      TheHacker 6.3.1.4.220 2009.01.14 -
      TrendMicro 8.700.0.1004 2009.01.15 BKDR_AGENT.AQUJ
      VBA32 3.12.8.10 2009.01.14 suspected of Embedded.Trojan.Win32.Small.ybe
      ViRobot 2009.1.15.1560 2009.01.15 -
      VirusBuster 4.5.11.0 2009.01.14 Trojan.Binky.Gen
      Additional information
      File size: 608837 bytes
      MD5...: 182818e2df809127b290ead82839f80c
      SHA1..: 949b4e723f68e644b5bb0cb18fa03ce55a61af9e
      SHA256: 7d391d7992aaf5788cc19994ae08c07a95fee21418d44f38e0d7672d1fe47bc7
      SHA512: 97bc79f348d78cc8ca496d59ec92e2f18f641423175fba26ea5d129f839e80e1
      0fa12ee3870aaeedb5953acc5da845967b20001e66923ca7b614aa06cefe8d1e

      ssdeep: 12288:XXNt0tM+esRIi1wUNZD9fvHTwL7qX+pd167QhEQ:XT0iORIi1vNlhzMuE6
      Eh

      PEiD..: -
      TrID..: File type identification
      InstallShield setup (74.6%)
      Win32 Executable Generic (14.7%)
      Win16/32 Executable Delphi generic (3.5%)
      Generic Win/DOS Executable (3.4%)
      DOS Executable Generic (3.4%)
      PEInfo: PE Structure information

      ( base data )
      entrypointaddress.: 0x458714
      timedatestamp.....: 0x48dfbaef (Sun Sep 28 17:12:15 2008)
      machinetype.......: 0x14c (I386)

      ( 8 sections )
      name viradd virsiz rawdsiz ntrpy md5
      .text 0x1000 0x56530 0x56600 6.54 9a650e3b9606abbb38d2b55c32df9d6d
      .itext 0x58000 0x83c 0xa00 5.50 bbccfcc05dbd90fbee6b3f49fce2c387
      .data 0x59000 0x1ab4 0x1c00 3.79 5257fe639b0df906a2b1827e01216149
      .bss 0x5b000 0x4f8c 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
      .idata 0x60000 0x288a 0x2a00 5.09 90b7db51c04c7391ba631d4fc4dd0ba9
      .tls 0x63000 0x34 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
      .rdata 0x64000 0x18 0x200 0.21 4cbc890194ae2fb00bbf8de89e61521c
      .rsrc 0x65000 0x1fc00 0x1fc00 6.98 aee45907fc32c3402b5c5fe6c9329276

      ( 16 imports )
      > oleaut32.dll: SysFreeString, SysReAllocStringLen, SysAllocStringLen
      > advapi32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey
      > user32.dll: GetKeyboardType, DestroyWindow, LoadStringA, MessageBoxA, CharNextA
      > kernel32.dll: GetACP, Sleep, VirtualFree, VirtualAlloc, GetTickCount, QueryPerformanceCounter, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, CompareStringA, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, CloseHandle
      > kernel32.dll: TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
      > user32.dll: CreateWindowExA, WindowFromPoint, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongW, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClassLongA, SetCapture, SetActiveWindow, SendMessageW, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageW, PeekMessageA, OffsetRect, OemToCharA, MessageBoxA, MapWindowPoints, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowUnicode, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageW, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongW, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMessagePos, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutNameA, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClientRect, GetClassLongA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EnumChildWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageW, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
      > gdi32.dll: UnrealizeObject, StretchBlt, SetWindowOrgEx, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RestoreDC, RectVisible, RealizePalette, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetTextMetricsA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetRgnBox, GetPixel, GetPaletteEntries, GetObjectA, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, ExcludeClipRect, DeleteObject, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, BitBlt
      > version.dll: VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
      > kernel32.dll: lstrcpyA, WriteFile, WaitForSingleObject, VirtualQuery, VirtualAlloc, TerminateProcess, SizeofResource, SetThreadLocale, SetFilePointer, SetEvent, SetErrorMode, SetEndOfFile, ResetEvent, ReadFile, OpenProcess, OpenMutexA, MulDiv, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalFindAtomA, GlobalDeleteAtom, GlobalAddAtomA, GetWindowsDirectoryA, GetVersionExA, GetVersion, GetTickCount, GetThreadLocale, GetSystemDirectoryA, GetStdHandle, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetFileAttributesA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCPInfo, FreeResource, InterlockedExchange, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumCalendarInfoA, EnterCriticalSection, DeleteFileA, DeleteCriticalSection, CreateThread, CreateMutexA, CreateFileA, CreateEventA, CopyFileA, CompareStringA, CloseHandle
      > advapi32.dll: RegSetValueExA, RegQueryValueExA, RegQueryInfoKeyA, RegOpenKeyExA, RegFlushKey, RegEnumKeyExA, RegDeleteValueA, RegDeleteKeyA, RegCreateKeyExA, RegCloseKey
      > kernel32.dll: Sleep
      > oleaut32.dll: SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopy, VariantClear, VariantInit
      > comctl32.dll: _TrackMouseEvent, ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_DragShowNolock, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
      > wininet.dll: InternetReadFile, InternetOpenUrlA, InternetOpenA, InternetCloseHandle
      > shell32.dll: ShellExecuteA
      > shell32.dll: SHGetSpecialFolderPathA

      ( 0 exports )

      Prevx info: <a href='http://info.prevx.com/aboutprogramtext.asp?PX5=6B80FEF945938E5F4A9109567403970074559693' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=6B80FEF945938E5F4A9109567403970074559693</a>
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Les deux fichiers sont des infections.

    ---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

    ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
    http://oldtimer.geekstogo.com/OTMoveIt3.exe

    ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

    ---> Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :files
    C:\WINDOWS\system32\PRINTDRV.EXE
    C:\WINDOWS\LSPRN.EXE
    C:\WINDOWS\taskmon.exe

    :reg
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Printer Driver"=-
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    "PrinterSecurityLayer"=-
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\WINDOWS\taskmon.exe"=-

    :commands
    [purity]
    [emptytemp]
    [reboot]

    ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

    ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

    ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      Bonsoir,

      ========== PROCESSES ==========
      Process explorer.exe killed successfully.
      ========== FILES ==========
      File move failed. C:\WINDOWS\system32\PRINTDRV.EXE scheduled to be moved on reboot.
      C:\WINDOWS\LSPRN.EXE moved successfully.
      File/Folder C:\WINDOWS\taskmon.exe not found.
      ========== REGISTRY ==========
      Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Printer Driver deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\\PrinterSecurityLayer deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\WINDOWS\taskmon.exe deleted successfully.
      ========== COMMANDS ==========
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\Perflib_Perfdata_131c.dat scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF717C.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF7181.tmp scheduled to be deleted on reboot.
      User's Temp folder emptied.
      User's Temporary Internet Files folder emptied.
      User's Internet Explorer cache folder emptied.
      Local Service Temp folder emptied.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      Local Service Temporary Internet Files folder emptied.
      File delete failed. C:\WINDOWS\temp\868a9b3c-4bfa-4494-8ba1-5a71d55f8bdd.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_13b8.dat scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_274.dat scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_3d0.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied.
      Java cache emptied.
      FireFox cache emptied.
      Temp folders emptied.

      OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01152009_200401

      Files moved on Reboot...
      C:\WINDOWS\system32\PRINTDRV.EXE moved successfully.
      File C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\Perflib_Perfdata_131c.dat not found!
      File C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF717C.tmp not found!
      File C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF7181.tmp not found!
      File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
      C:\WINDOWS\temp\868a9b3c-4bfa-4494-8ba1-5a71d55f8bdd.tmp moved successfully.
      C:\WINDOWS\temp\Perflib_Perfdata_13b8.dat moved successfully.
      File C:\WINDOWS\temp\Perflib_Perfdata_274.dat not found!
      File C:\WINDOWS\temp\Perflib_Perfdata_3d0.dat not found!
      0
  7. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    ---> Télécharge Malwarebytes' Anti-Malware (MBAM) sur ton Bureau.
    ---> Double-clique sur le fichier téléchargé pour lancer le processus d'installation.
    ---> Dans l'onglet Mise à jour, clique sur le bouton Recherche de mise à jour : si le pare-feu demande l'autorisation à MBAM de se connecter à Internet, accepte.
    ---> Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
    ---> Sélectionne Exécuter un examen rapide.
    ---> Clique sur Rechercher. L'analyse démarre.

    A la fin de l'analyse, un message s'affiche :

    L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.

    ---> Clique sur OK pour poursuivre. Si MBAM n'a rien trouvé, il te le dira aussi.
    ---> Ferme tes navigateurs.
    Si des malwares ont été détectés, clique sur Afficher les résultats.
    ---> Sélectionne tout (ou laisse coché) et clique sur Supprimer la sélection, MBAM va détruire les fichiers et clés de registre infectés et en mettre une copie dans la quarantaine.
    ---> MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Copie-colle ce rapport dans ta prochaine réponse.
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      rapport mbam

      Malwarebytes' Anti-Malware 1.33
      Version de la base de données: 1656
      Windows 5.1.2600 Service Pack 3

      16/01/2009 01:49:52
      mbam-log-2009-01-16 (01-49-52).txt

      Type de recherche: Examen rapide
      Eléments examinés: 56193
      Temps écoulé: 6 minute(s), 40 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 4
      Valeur(s) du Registre infectée(s): 1
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 29
      Fichier(s) infecté(s): 9

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webmediaplayer (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3550p (Rootkit.Agent) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe (Security.Hijack) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Printer Driver (Backdoor.Bot) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      C:\Program Files\WebMediaPlayer (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\resources (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\skins (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\updates (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\Hot internet offers (Trojan.Downloader) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKCU (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKCU\RunOnce (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKLM (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKLM\RunOnce (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\StartMenuAllUsers (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\StartMenuCurrentUser (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\BrowserObjects (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\LocalService\Application Data\WinIFixer.com\WinIFixer\Quarantine\Packages (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKCU (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKCU\RunOnce (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKLM (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\HKLM\RunOnce (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\StartMenuAllUsers (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Autorun\StartMenuCurrentUser (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\BrowserObjects (Rogue.WinIFixer) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Application Data\WinIFixer.com\WinIFixer\Quarantine\Packages (Rogue.WinIFixer) -> Quarantined and deleted successfully.

      Fichier(s) infecté(s):
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\qwdpmv_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\qwdpmv.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\qwdpmv.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\sqlite3.dll (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\uninst.exe (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\resources\languages_v2.xml (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\resources\webmedias (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\Program Files\WebMediaPlayer\skins\classic.skn (Rogue.WebMediaPlayer) -> Quarantined and deleted successfully.
      C:\WINDOWS\system32\msnav32.ax (Malware.Trace) -> Quarantined and deleted successfully.
      0
  8. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    - Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le Bureau.

    - Double-clique sur Navilog1.exe afin de lancer l'installation.

    - Si le fix ne se lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le Bureau.

    - Appuie sur F ou f puis valide par Entrée.

    - Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options.

    - Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix.

    - Patiente jusqu'au message : *** Analyse terminée le ..... ***

    - Le scan fini, le Bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse.

    - Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

    N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      JE N'AVAIS PAS DESACTIVE L'ANTIVIRUS AVG comme demandé avant OTMOVELT
      le bouclier résident m'a indiqué les menaces (voir a la fin SI CELA EST UTILE ???)

      Search Navipromo version 3.7.1 commencé le 16/01/2009 à 2:17:29,39

      !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
      !!! Postez ce rapport sur le forum pour le faire analyser !!!
      !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

      Outil exécuté depuis C:\Program Files\navilog1

      Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
      BIOS : Ver 1.00PARTTBL;
      USER : CLAUDE ( Administrator )
      BOOT : Normal boot

      Antivirus : AVG Internet Security 8.0 (Activated)


      C:\ (Local Disk) - NTFS - Total:25 Go (Free:4 Go)
      D:\ (Local Disk) - NTFS - Total:48 Go (Free:17 Go)
      F:\ (Local Disk) - FAT32 - Total:298 Go (Free:133 Go)
      G:\ (USB) - FAT32 - Total:7696 Mo (Free:0 Go)
      H:\ (USB) - FAT - Total:488 Mo (Free:0 Go)
      M:\ (Network Disk) - NTFS - Total:97 Go (Free:83 Go)
      N:\ (Network Disk) - NTFS - Total:200 Go (Free:48 Go)
      O:\ (Network Disk) - NTFS - Total:285 Go (Free:64 Go)
      P:\ (Network Disk) - NTFS - Total:368 Go (Free:48 Go)
      Q:\ (Network Disk) - FAT - Total:233 Go (Free:61 Go)
      R:\ (Network Disk) - FAT - Total:232 Go (Free:111 Go)
      S:\ (Network Disk) - NTFS - Total:465 Go (Free:349 Go)
      T:\ (Network Disk) - NTFS - Total:465 Go (Free:101 Go)
      U:\ (Local Disk) - NTFS - Total:465 Go (Free:431 Go)
      W:\ (Local Disk) - NTFS - Total:149 Go (Free:5 Go)
      X:\ (CD or DVD)


      Recherche executé en mode normal

      *** Recherche Programmes installés ***

      Favorit

      *** Recherche dossiers dans "C:\WINDOWS" ***


      *** Recherche dossiers dans "C:\Program Files" ***


      *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

      ...\WebMediaPlayer trouvé !

      *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


      *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


      *** Recherche dossiers dans "C:\Documents and Settings\CLAUDE\applic~1" ***


      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


      *** Recherche dossiers dans "C:\Documents and Settings\CLAUDE\locals~1\applic~1" ***


      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


      *** Recherche dossiers dans "C:\Documents and Settings\CLAUDE\menudm~1\progra~1" ***


      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


      *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
      pour + d'infos : http://www.gmer.net



      *** Recherche avec GenericNaviSearch ***
      !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
      !!! A vérifier impérativement avant toute suppression manuelle !!!

      * Recherche dans "C:\WINDOWS\system32" *

      * Recherche dans "C:\Documents and Settings\CLAUDE\locals~1\applic~1" *

      * Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *



      *** Recherche fichiers ***



      *** Recherche clés spécifiques dans le Registre ***
      !! Les clés trouvées ne sont pas forcément infectées !!

      HKEY_CURRENT_USER\Software\Lanconfig

      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche nouveaux fichiers Instant Access :


      2)Recherche Heuristique :

      * Dans "C:\WINDOWS\system32" :


      * Dans "C:\Documents and Settings\CLAUDE\locals~1\applic~1" :

      qwdpmv_navps.dat trouvé !

      * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


      3)Recherche Certificats :

      Certificat Egroup trouvé !
      Certificat Electronic-Group trouvé !
      Certificat Montorgueil absent !
      Certificat OOO-Favorit trouvé !
      Certificat Sunny-Day-Design-Ltd absent !

      4)Recherche autres dossiers et fichiers connus :



      *** Analyse terminée le 16/01/2009 à 2:24:22,42 ***


      --------------------------------------------------------------------------------------------------------------------
      BOUCLIER RESIDENT AVG

      "C:\Program Files\Navilog1\gnc.exe";"Package d'exécution fsg ";""
      "C:\WINDOWS\system32\gnc.exe";"Package d'exécution fsg ";""
      "C:\WINDOWS\system32\gnc.exe";"Package d'exécution fsg ";""
      "C:\WINDOWS\system32\divxdrv32.exe";"Cheval de Troie : Generic12.AVYV";"Infecté"
      "C:\Documents and Settings\CLAUDE\Local Settings\Application Data\gnc.exe";"Package d'exécution fsg ";""
      "C:\Documents and Settings\CLAUDE\Local Settings\Application Data\gnc.exe";"Package d'exécution fsg ";""
      "C:\Documents and Settings\CLAUDE\Local Settings\Application Data\gnc.exe";"Package d'exécution fsg ";""
      "C:\Documents and Settings\Administrateur\Local Settings\Application Data\gnc.exe";"Package d'exécution fsg ";""
      "C:\Documents and Settings\Administrateur\Local Settings\Application Data\gnc.exe";"Package d'exécution fsg ";""
      "C:\Documents and Settings\Administrateur\Local Settings\Application Data\gnc.exe";"Package d'exécution fsg ";""
      "C:\WINDOWS\system32\divxdrv32.exe";"Cheval de Troie : Generic12.AVYV";"Infecté"
      0
  9. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    C:\WINDOWS\system32\divxdrv32.exe

    Ce fichier, tu peux le virer.

    Le reste, c'est un fichier de Navilog1 qui est détecté (gnc.exe).

    ---> Relance Navilog1, fais l'option 2 et poste le rapport.
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      apres un premier lancement de navilog option2, il m'a fait refaire sous sans echec

      Clean Navipromo version 3.7.1 commencé le 16/01/2009 à 2:51:40,85

      Outil exécuté depuis C:\Program Files\navilog1

      Mise à jour le 02.01.2009 à 19h00 par IL-MAFIOSO

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) 4 CPU 3.00GHz )
      BIOS : Ver 1.00PARTTBL;
      USER : Administrateur ( Administrator )
      BOOT : Fail-safe boot

      Antivirus : AVG Internet Security 8.0 (Activated)


      C:\ (Local Disk) - NTFS - Total:25 Go (Free:4 Go)
      D:\ (Local Disk) - NTFS - Total:48 Go (Free:17 Go)
      F:\ (Local Disk) - FAT32 - Total:298 Go (Free:133 Go)
      G:\ (USB) - FAT32 - Total:7696 Mo (Free:0 Go)
      H:\ (USB) - FAT - Total:488 Mo (Free:0 Go)
      U:\ (Local Disk) - NTFS - Total:465 Go (Free:431 Go)
      W:\ (Local Disk) - NTFS - Total:149 Go (Free:5 Go)
      X:\ (CD or DVD)


      Mode suppression automatique
      avec prise en charge résultats Catchme et GNS


      Nettoyage executé en mode sans échec


      *** fsbl1.txt non trouvé ***
      (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)


      *** Suppression avec sauvegardes résultats GenericNaviSearch ***

      * Suppression dans "C:\WINDOWS\System32" *


      * Suppression dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" *


      * Suppression dans "C:\DOCUME~1\CLAUDE\locals~1\applic~1" *


      *** Suppression dossiers dans "C:\WINDOWS" ***


      *** Suppression dossiers dans "C:\Program Files" ***


      *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***

      ...\WebMediaPlayer ...suppression...
      ...\WebMediaPlayer supprimé !


      *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


      *** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


      *** Suppression dossiers dans "C:\Documents and Settings\Administrateur\applic~1" ***


      *** Suppression dossiers dans "C:\DOCUME~1\CLAUDE\applic~1" ***


      *** Suppression dossiers dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" ***


      *** Suppression dossiers dans "C:\DOCUME~1\CLAUDE\locals~1\applic~1" ***


      *** Suppression dossiers dans "C:\Documents and Settings\Administrateur\menudm~1\progra~1" ***


      *** Suppression dossiers dans "C:\DOCUME~1\CLAUDE\menudm~1\progra~1" ***



      *** Suppression fichiers ***


      *** Suppression fichiers temporaires ***

      Nettoyage contenu C:\WINDOWS\Temp effectué !
      Nettoyage contenu C:\Documents and Settings\Administrateur\locals~1\Temp effectué !

      *** Traitement Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

      2)Recherche, création sauvegardes et suppression Heuristique :


      * Dans "C:\WINDOWS\system32" *


      * Dans "C:\Documents and Settings\Administrateur\locals~1\applic~1" *


      * Dans "C:\DOCUME~1\CLAUDE\locals~1\applic~1" *


      qwdpmv_navps.dat trouvé !
      Copie qwdpmv_navps.dat réalisée avec succès !
      qwdpmv_navps.dat supprimé !


      *** Sauvegarde du Registre vers dossier Safebackup ***

      sauvegarde du Registre réalisée avec succès !

      *** Nettoyage Registre ***

      Nettoyage Registre Ok


      *** Certificats ***

      Certificat Egroup absent !
      Certificat Electronic-Group absent !
      Certificat Montorgueil absent !
      Certificat OOO-Favorit absent !
      Certificat Sunny-Day-Design-Ltdt absent !

      *** Recherche autres dossiers et fichiers connus ***



      *** Nettoyage terminé le 16/01/2009 à 2:53:50,62 ***



      -------------------------------
      j'ai enlever C:\WINDOWS\system32\divxdrv32.exe
      les autres vont disparaitre en desinstallant navilog ou je les supprime ??

      Il se fait tard, bonne nuit............a demain et merci pour la suite ?
      0
  10. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    ---> Désinstalle Navilog1.

    Tu peux supprimer le fichier gnc.exe.

    - Fais un scan en ligne ici https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr (Avec Internet Explorer).

    - En bas à droite, clique sur Démarrer Online-scanner.

    - Dans la nouvelle fenêtre qui s'affiche, clique sur J'accepte.

    - Accepte les Contrôles ActiveX.

    - Choisis Poste de travail pour le scan.

    - Celui-ci terminé, sauvegarde (Choisis fichier texte) et poste le rapport.

    - Pour t'aider à utiliser le scan en ligne :
    https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId291566

    NOTE : Si tu reçois le message La licence de Kaspersky On-line Scanner est périmée, va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte-toi sur le site de Kaspersky pour retenter le scan en ligne.
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      Bonjour,
      j'ai lancé kaspersky qui scanne le poste de travail sur mon portable.
      Il a pris les disques (plusieurs de 500 Go) en reseau sur autre ordinateur, au bout de 1 heure il est toujours a zero %.
      Il va lui falloir une ou plusieurs semaines ???
      Arreter le wi-fi pour limiter le scan seulement sur le portable ce qui devrait deja etre tres long (il y a environ 1200 Go en USB EXTERNE en plus de C et D du portable) ou laisser faire ? OU AUTRE SOLUTION ?
      Merci de votre réponse
      0
  11. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Dis à Kaspersky de scanner seulement le disque qu'il y a sur ton PC.
    0
  12. corclau95 Messages postés 29 Statut Membre 1
     
    Voici le rapport pour C et D
    -------------------------------------------------------------------------------
    KASPERSKY ON-LINE SCANNER REPORT
    Friday, January 16, 2009 2:29:40 PM
    Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
    Kaspersky On-line Scanner version : 5.0.84.2
    Dernière mise à jour de la base antivirus Kaspersky : 16/01/2009
    Enregistrements dans la base antivirus Kaspersky : 1463003
    -------------------------------------------------------------------------------

    Paramètres d'analyse:
    Analyser avec la base antivirus suivante: standard
    Analyser les archives: vrai
    Analyser les bases de messagerie: vrai

    Cible de l'analyse - Poste de travail:
    C:\
    D:\
    F:\
    G:\
    H:\
    M:\
    N:\
    O:\
    P:\
    Q:\
    R:\
    S:\
    T:\
    U:\
    W:\
    X:\

    Statistiques de l'analyse:
    Total d'objets analysés: 253086
    Nombre de virus trouvés: 1
    Nombre d'objets infectés: 1 / 0
    Nombre d'objets suspects: 0
    Durée de l'analyse: 04:24:37

    Nom de l'objet infecté / Nom du virus / Dernière action
    C:\Documents and Settings\All Users\Application Data\avg8\AvgAm\avgam.lck L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\emc\Log\emc.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgam.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcfg.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcfg.log.6 L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcore.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcore.log.2 L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avglng.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgns.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgrs.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgsched.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgsrm.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgwd.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\avgwdsvc.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\avg8\Log\commonpriv.log L'objet est verrouillé ignoré
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Application Data\Sony Ericsson\Teleca\Telecalib\Logging\Application logs\appLauncher_all_log.txt L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Application Data\Sony Ericsson\Teleca\Telecalib\Logging\Application logs\TlibCmnDlgs_log.txt L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Application Data\Sony Ericsson\Teleca\Telecalib\Logging\GE\DM-1.6.0.548.TXT L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Application Data\Sony Ericsson\Teleca\Telecalib\Logging\GE\SpecificSCOM-1.3.0.25.TXT L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Application Data\Sony Ericsson\Teleca\Telecalib\Logging\GE\SpecificUSB-1.3.0.5.TXT L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Yahoo\Y!Msgr\merlin.log L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Historique\History.IE5\MSHist012009011620090117\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Temp\Perflib_Perfdata_cc4.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Temp\~DF7B9F.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Temp\~DF7BAE.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\CLAUDE\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcrst.dll L'objet est verrouillé ignoré
    C:\Program Files\Yahoo!\Messenger\logs\billing_user.log L'objet est verrouillé ignoré
    C:\Program Files\Yahoo!\Messenger\logs\client_user.log L'objet est verrouillé ignoré
    C:\Program Files\Yahoo!\Messenger\logs\network_user.log L'objet est verrouillé ignoré
    C:\Program Files\Yahoo!\Messenger\logs\performance_build_0.log L'objet est verrouillé ignoré
    C:\Program Files\Yahoo!\Messenger\logs\reliablemessaging_user.log L'objet est verrouillé ignoré
    C:\Program Files\Yahoo!\Messenger\logs\voice_CLAUDE_0.log L'objet est verrouillé ignoré
    C:\Program Files\Yahoo!\Messenger\logs\ycp_user.log L'objet est verrouillé ignoré
    C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
    C:\WINDOWS\shapi32.dll Infecté : Backdoor.Win32.Agent.slp ignoré
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
    C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
    C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
    C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré
    C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\spool\PRINTERS\FP00000.SHD L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\b3bd0c0e-aa9b-4855-8348-781d008f2da4.tmp L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\Perflib_Perfdata_148.dat L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\Perflib_Perfdata_1b8.dat L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\Perflib_Perfdata_f94.dat L'objet est verrouillé ignoré
    C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
    C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
    C:\_OTMoveIt\MovedFiles\01152009_200401\WINDOWS\LSPRN.EXE L'objet est verrouillé ignoré
    C:\_OTMoveIt\MovedFiles\01152009_200401\WINDOWS\system32\PRINTDRV.EXE L'objet est verrouillé ignoré
    D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

    Analyse interrompue par l'utilisateur !

    est-il utile de le refaire plus tard sur les autres par securité ?
    0
  13. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    "est-il utile de le refaire plus tard sur les autres par securité ?"
    ---> Oui.

    ---> Relance MBAM, va dans Quarantaine et supprime tout.

    ---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

    ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
    http://oldtimer.geekstogo.com/OTMoveIt3.exe

    ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

    ---> Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :files
    C:\WINDOWS\shapi32.dll
    C:\WINDOWS\system32\divxdrv32.exe

    :commands
    [purity]
    [emptytemp]
    [reboot]

    ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

    ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

    ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      au reboot j'ai eu un message windows "recuperation erreur sérieuse"
      fichiers inclus dans ce rapport, mais je n'ai rien d'autre

      C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\WER3451.dir00\Mini011609-01.dmp
      C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\WER3451.dir00\sysdata.xml
      -------------------------------------------------------------------------------------------------------------------------------------------------------------
      ========== PROCESSES ==========
      Process explorer.exe killed successfully.
      ========== FILES ==========
      DllUnregisterServer procedure not found in C:\WINDOWS\shapi32.dll
      C:\WINDOWS\shapi32.dll NOT unregistered.
      C:\WINDOWS\shapi32.dll moved successfully.
      File/Folder C:\WINDOWS\system32\divxdrv32.exe not found.
      ========== COMMANDS ==========
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF69AB.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF69B0.tmp scheduled to be deleted on reboot.
      User's Temp folder emptied.
      User's Temporary Internet Files folder emptied.
      User's Internet Explorer cache folder emptied.
      Local Service Temp folder emptied.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      Local Service Temporary Internet Files folder emptied.
      File delete failed. C:\WINDOWS\temp\110031cf-d6cf-4705-ad1d-8267e8863b9e.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\1daac754-69a9-4f0a-957d-9c6aec563959.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\27db25c5-5b63-41da-8103-0a7e7d9e4fb1.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\31441537-052d-4025-bb4b-d301162778ab.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\35f5df14-4a1a-4139-b8f8-76ed5f78100e.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\362864ea-5606-49f9-adb2-f3331960d50e.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\3a2d36a3-33ad-4e90-a9cc-0b8dbdb9105d.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\3a359d0f-a745-4c65-a02c-0090aa2e9922.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\3edc0f00-7f41-4917-8ddd-87a7e38ce58a.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\47683cc6-07d8-4502-bdb6-3b8bec057a91.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\5aaaf165-5ee4-4211-8b8b-346d5555e089.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\6f68ac86-76e2-4b67-8b32-36af26c7c558.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\73c8b982-04db-44bf-8c47-9d3746701e02.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\7f268cf7-d123-4294-8042-973670ada36a.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\84b12d25-a3e2-4bb1-afef-b73bc8c415c8.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\8e63a21c-bba7-477f-af38-c26951ef4425.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\8f2da4ba-b9e3-41a6-88fd-ffcba453c55d.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\95cb740b-4296-409d-8895-ee953d5af7b3.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\9acc66f7-586e-4fd1-a5a9-90b5e7e0f2b8.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\a2dcfa30-0f5c-4e3a-bfa9-6ec013b2c1c2.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\a3fb8cc2-552b-462d-a257-2954dd581507.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\a56a19c5-8b0e-422a-8944-bfb97f3f375a.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\ac16b47a-b704-4286-b274-8d97e75bc17b.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\ced63522-eec4-44a8-81d7-e485f599ff4a.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\cee42350-bc8e-454e-95cc-b43e8ec8ca24.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\d1741641-77e2-4f89-a7fc-20c0abb98dc4.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\fe2fae6c-2dec-4a02-a1ab-cae2efbe9e81.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_148.dat scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_1b8.dat scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_f94.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied.
      Java cache emptied.
      FireFox cache emptied.
      Temp folders emptied.

      OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01162009_175404

      Files moved on Reboot...
      File C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF69AB.tmp not found!
      File C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF69B0.tmp not found!
      File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
      C:\WINDOWS\temp\110031cf-d6cf-4705-ad1d-8267e8863b9e.tmp moved successfully.
      C:\WINDOWS\temp\1daac754-69a9-4f0a-957d-9c6aec563959.tmp moved successfully.
      C:\WINDOWS\temp\27db25c5-5b63-41da-8103-0a7e7d9e4fb1.tmp moved successfully.
      C:\WINDOWS\temp\31441537-052d-4025-bb4b-d301162778ab.tmp moved successfully.
      C:\WINDOWS\temp\35f5df14-4a1a-4139-b8f8-76ed5f78100e.tmp moved successfully.
      C:\WINDOWS\temp\362864ea-5606-49f9-adb2-f3331960d50e.tmp moved successfully.
      C:\WINDOWS\temp\3a2d36a3-33ad-4e90-a9cc-0b8dbdb9105d.tmp moved successfully.
      C:\WINDOWS\temp\3a359d0f-a745-4c65-a02c-0090aa2e9922.tmp moved successfully.
      C:\WINDOWS\temp\3edc0f00-7f41-4917-8ddd-87a7e38ce58a.tmp moved successfully.
      C:\WINDOWS\temp\47683cc6-07d8-4502-bdb6-3b8bec057a91.tmp moved successfully.
      C:\WINDOWS\temp\5aaaf165-5ee4-4211-8b8b-346d5555e089.tmp moved successfully.
      C:\WINDOWS\temp\6f68ac86-76e2-4b67-8b32-36af26c7c558.tmp moved successfully.
      C:\WINDOWS\temp\73c8b982-04db-44bf-8c47-9d3746701e02.tmp moved successfully.
      C:\WINDOWS\temp\7f268cf7-d123-4294-8042-973670ada36a.tmp moved successfully.
      C:\WINDOWS\temp\84b12d25-a3e2-4bb1-afef-b73bc8c415c8.tmp moved successfully.
      C:\WINDOWS\temp\8e63a21c-bba7-477f-af38-c26951ef4425.tmp moved successfully.
      C:\WINDOWS\temp\8f2da4ba-b9e3-41a6-88fd-ffcba453c55d.tmp moved successfully.
      C:\WINDOWS\temp\95cb740b-4296-409d-8895-ee953d5af7b3.tmp moved successfully.
      C:\WINDOWS\temp\9acc66f7-586e-4fd1-a5a9-90b5e7e0f2b8.tmp moved successfully.
      C:\WINDOWS\temp\a2dcfa30-0f5c-4e3a-bfa9-6ec013b2c1c2.tmp moved successfully.
      C:\WINDOWS\temp\a3fb8cc2-552b-462d-a257-2954dd581507.tmp moved successfully.
      C:\WINDOWS\temp\a56a19c5-8b0e-422a-8944-bfb97f3f375a.tmp moved successfully.
      C:\WINDOWS\temp\ac16b47a-b704-4286-b274-8d97e75bc17b.tmp moved successfully.
      C:\WINDOWS\temp\ced63522-eec4-44a8-81d7-e485f599ff4a.tmp moved successfully.
      C:\WINDOWS\temp\cee42350-bc8e-454e-95cc-b43e8ec8ca24.tmp moved successfully.
      C:\WINDOWS\temp\d1741641-77e2-4f89-a7fc-20c0abb98dc4.tmp moved successfully.
      C:\WINDOWS\temp\fe2fae6c-2dec-4a02-a1ab-cae2efbe9e81.tmp moved successfully.
      C:\WINDOWS\temp\Perflib_Perfdata_148.dat moved successfully.
      File C:\WINDOWS\temp\Perflib_Perfdata_1b8.dat not found!
      C:\WINDOWS\temp\Perflib_Perfdata_f94.dat moved successfully.
      0
  14. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    1/

    ---> Relance MBAM, va dans Quarantaine et supprime tout.

    ---> Télécharge ToolsCleaner2 sur ton Bureau.
    * Double-clique sur ToolsCleaner2.exe pour le lancer.
    * Clique sur Recherche et laisse le scan agir.
    * Clique sur Suppression pour finaliser.
    * Tu peux, si tu le souhaites, te servir des Options Facultatives.
    * Clique sur Quitter pour obtenir le rapport.
    * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    2/

    - Télécharge Random's System Information Tool (RSIT) (par random/random) sur ton Bureau.

    - Double-clique sur RSIT.exe afin de lancer le programme.

    - Clique sur Continue à l'écran Disclaimer.

    - Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

    - Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront. Poste le contenu de log.txt (c'est celui qui apparaît à l'écran) ainsi que de info.txt (que tu verras dans la barre des tâches).

    Note : Les rapports sont sauvegardés dans le dossier C:\rsit.
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      reponse 1/

      [ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

      -->- Recherche:

      C:\fixnavi.txt: trouvé !
      C:\cleannavi.txt: trouvé !
      C:\UsbFix.txt: trouvé !
      C:\_OtMoveIt: trouvé !
      C:\Rsit: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\Navilog1.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\OTMoveIt3.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\Rsit.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\SmitFraudFix.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\UsbFix.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\OTMoveIt3.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\Rsit.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\HijackThis: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\SmitFraudfix: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\HijackThis: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\GenProc: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\HiJackThis\HijackThis.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\HiJackThis\hijackthis.log: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\HiJackThis\HijackThis.exe: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\HiJackThis\hijackthis.log: trouvé !
      C:\Documents and Settings\CLAUDE\Bureau\VOIR INSTALLATIONS\UsbFix.lnk: trouvé !
      C:\Documents and Settings\CLAUDE\Recent\HijackThis.lnk: trouvé !
      C:\Program Files\Navilog1: trouvé !
      C:\Program Files\UsbFix: trouvé !

      ---------------------------------
      -->- Suppression:

      C:\Documents and Settings\CLAUDE\Bureau\Navilog1.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\SmitFraudFix.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\HiJackThis\HijackThis.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\HiJackThis\HijackThis.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Recent\HijackThis.lnk: supprimé !
      C:\fixnavi.txt: supprimé !
      C:\cleannavi.txt: supprimé !
      C:\UsbFix.txt: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\OTMoveIt3.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\Rsit.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\UsbFix.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\OTMoveIt3.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\Rsit.exe: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\HiJackThis\hijackthis.log: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\HiJackThis\hijackthis.log: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\VOIR INSTALLATIONS\UsbFix.lnk: supprimé !
      C:\_OtMoveIt: supprimé !
      C:\Rsit: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\HijackThis: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\SmitFraudfix: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\HijackThis: supprimé !
      C:\Documents and Settings\CLAUDE\Bureau\COMMENTCAMARCHE\AVG DETECTIONSSS\_____VIRUS VIRUS VIRUS JANV 20009\GenProc: supprimé !
      C:\Program Files\Navilog1: supprimé !
      C:\Program Files\UsbFix: supprimé !

      --------------------------------------------------------------------------------------------------------

      reponse 2/

      Logfile of random's system information tool 1.05 (written by random/random)
      Run by CLAUDE at 2009-01-16 19:56:33
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 5 GB (17%) free of 26 GB
      Total RAM: 1022 MB (46% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:57:03, on 16/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\WINDOWS\system32\E_S00RP1.EXE
      C:\WINDOWS\System32\GEARSec.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      C:\PROGRA~1\AVG\AVG8\avgam.exe
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\PROGRA~1\AVG\AVG8\avgnsx.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\SAgent4.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\PROGRA~1\AVG\AVG8\avgemc.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe
      C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe
      C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
      C:\Program Files\Logitech\QuickCam\Quickcam.exe
      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
      C:\Program Files\HPQ\shared\hpqwmi.exe
      C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Fichiers communs\Teleca Shared\logger.exe
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\CLAUDE\Bureau\RSIT.exe
      C:\Program Files\trend micro\CLAUDE.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O3 - Toolbar: &TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~1\TerraTec\TERRAT~1\THCDES~1.DLL
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [\\DANY\EPSON TEXTE] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P18 "\\DANY\EPSON TEXTE" /O18 "\\DANY\EPSON TEXTE" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [\\BURODANY-IB38\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P42 "\\BURODANY-IB38\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Auto EPSON Stylus DX4200 Series sur BURODANY-IB38] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P49 "Auto EPSON Stylus DX4200 Series sur BURODANY-IB38" /O26 "\\BURODANY-IB38\EPSON-IB38" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [\\PC-DANY\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P36 "\\PC-DANY\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [TerraTec Remote Control] "C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe"
      O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
      O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
      O4 - HKLM\..\Run: [HerculesCamService] C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
      O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - HKLM\..\Policies\Explorer\Run: [PrinterSecurityLayer] C:\WINDOWS\LSPRN.EXE
      O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cor2c95com.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
      O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
      O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
      O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      O23 - Service: Epson Printer Status Agent4 (StatusAgent4) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\SAgent4.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      0
  15. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Peux-tu me poster les rapports de RSIT séparément ?
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      les deux rsit seuls
      ---------------------------------------------------------------

      Logfile of random's system information tool 1.05 (written by random/random)
      Run by CLAUDE at 2009-01-16 19:56:33
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 5 GB (17%) free of 26 GB
      Total RAM: 1022 MB (46% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:57:03, on 16/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\WINDOWS\system32\E_S00RP1.EXE
      C:\WINDOWS\System32\GEARSec.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      C:\PROGRA~1\AVG\AVG8\avgam.exe
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\PROGRA~1\AVG\AVG8\avgnsx.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\SAgent4.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\PROGRA~1\AVG\AVG8\avgemc.exe
      C:\Program Files\AVG\AVG8\avgcsrvx.exe
      C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe
      C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
      C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe
      C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe
      C:\Program Files\Logitech\QuickCam\Quickcam.exe
      C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
      C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
      C:\Program Files\HPQ\shared\hpqwmi.exe
      C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Fichiers communs\Teleca Shared\logger.exe
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
      C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\CLAUDE\Bureau\RSIT.exe
      C:\Program Files\trend micro\CLAUDE.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O3 - Toolbar: &TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\PROGRA~1\TerraTec\TERRAT~1\THCDES~1.DLL
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [\\DANY\EPSON TEXTE] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P18 "\\DANY\EPSON TEXTE" /O18 "\\DANY\EPSON TEXTE" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [\\BURODANY-IB38\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P42 "\\BURODANY-IB38\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [Auto EPSON Stylus DX4200 Series sur BURODANY-IB38] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P49 "Auto EPSON Stylus DX4200 Series sur BURODANY-IB38" /O26 "\\BURODANY-IB38\EPSON-IB38" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [\\PC-DANY\EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P36 "\\PC-DANY\EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [TerraTec Remote Control] "C:\Program Files\Fichiers communs\TerraTec\Remote\TTTvRc.exe"
      O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Micro Application\TrueImage\TrueImageMonitor.exe
      O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
      O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
      O4 - HKLM\..\Run: [HerculesCamService] C:\Program Files\Hercules\Hercules DualPix HD Webcam\CamService.exe
      O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\isuspm.exe" -scheduler
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
      O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - HKLM\..\Policies\Explorer\Run: [PrinterSecurityLayer] C:\WINDOWS\LSPRN.EXE
      O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cor2c95com.spaces.live.com/PhotoUpload/MsnPUpld.cab
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
      O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
      O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: EPSON V3 Service2(03) (EPSON_PM_RPCV2_01) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\E_S00RP1.EXE
      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
      O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\shared\hpqwmi.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
      O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      O23 - Service: Epson Printer Status Agent4 (StatusAgent4) - SEIKO EPSON CORPORATION - C:\WINDOWS\system32\SAgent4.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      0
  16. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    ---> Désactive ton antivirus le temps de la manipulation car OTMoveIt3 est détecté comme une infection à tort.

    ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
    http://oldtimer.geekstogo.com/OTMoveIt3.exe

    ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

    ---> Copie (Ctrl+C) le texte suivant ci-dessous :

    :processes
    explorer.exe

    :files
    C:\WINDOWS\system32\apiupd32.exe
    C:\WINDOWS\system32\apisc32.dll
    C:\WINDOWS\system32\apibsc32.dll

    :reg
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{318B20B9-E794-4CD3-A359-F7C17083456A}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{2F50E2C1-69F6-4D74-86A7-60CE6D6C9271}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{783F4F54-DF27-46D9-9BDF-89C4F2E57353}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{4121882B-BBD8-41C5-9F6E-6AAEB24C27A1}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{80FAF952-9D60-4637-BD73-E7DF277E7145}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{9CD1D4A5-B7E5-4474-9703-5C36EE8BFC2D}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{F6B204CD-BD3C-4E93-8F2E-13B3F311ECE6}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{A247FA1B-887B-4BBB-BD75-55DE5A1551DC}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{8564B84A-238D-4B0A-A442-1553BC5DEFF3}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{2E2DB6B3-DE3D-475A-B3E8-D53489088E01}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{24562B69-653A-4E73-8CE0-6B906187E742}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{41360AF2-746B-4685-B0D4-BDB5BF7890C8}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{6182D3F5-1169-45AC-A368-A0F7E09EEE05}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{4C2EE22F-542C-458C-8C36-5D657E44F7CD}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{782F36D0-24DC-42B5-95E1-DF0BA53D42BF}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-
    "C:\Documents and Settings\CLAUDE\Local Settings\Temp\{EC30D316-0783-4C5B-A76C-E44420F383F4}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe"=-

    :commands
    [purity]
    [emptytemp]
    [reboot]

    ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

    ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

    Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
    Accepte en cliquant sur YES.

    ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
    Le nom du rapport correspond au moment de sa création : date_heure.log
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      ========== PROCESSES ==========
      Process explorer.exe killed successfully.
      ========== FILES ==========
      C:\WINDOWS\system32\apiupd32.exe moved successfully.
      LoadLibrary failed for C:\WINDOWS\system32\apisc32.dll
      C:\WINDOWS\system32\apisc32.dll NOT unregistered.
      C:\WINDOWS\system32\apisc32.dll moved successfully.
      LoadLibrary failed for C:\WINDOWS\system32\apibsc32.dll
      C:\WINDOWS\system32\apibsc32.dll NOT unregistered.
      C:\WINDOWS\system32\apibsc32.dll moved successfully.
      ========== REGISTRY ==========
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{318B20B9-E794-4CD3-A359-F7C17083456A}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{2F50E2C1-69F6-4D74-86A7-60CE6D6C9271}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{783F4F54-DF27-46D9-9BDF-89C4F2E57353}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{4121882B-BBD8-41C5-9F6E-6AAEB24C27A1}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{80FAF952-9D60-4637-BD73-E7DF277E7145}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{9CD1D4A5-B7E5-4474-9703-5C36EE8BFC2D}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{F6B204CD-BD3C-4E93-8F2E-13B3F311ECE6}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{A247FA1B-887B-4BBB-BD75-55DE5A1551DC}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{8564B84A-238D-4B0A-A442-1553BC5DEFF3}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{2E2DB6B3-DE3D-475A-B3E8-D53489088E01}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{24562B69-653A-4E73-8CE0-6B906187E742}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{41360AF2-746B-4685-B0D4-BDB5BF7890C8}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{6182D3F5-1169-45AC-A368-A0F7E09EEE05}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{4C2EE22F-542C-458C-8C36-5D657E44F7CD}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{782F36D0-24DC-42B5-95E1-DF0BA53D42BF}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\CLAUDE\Local Settings\Temp\{EC30D316-0783-4C5B-A76C-E44420F383F4}\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}\CinergyDvrHelper.exe deleted successfully.
      ========== COMMANDS ==========
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\etilqs_6m7J5cJDfizbdmto8UPy scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF1861.tmp scheduled to be deleted on reboot.
      File delete failed. C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~WRF0000.tmp scheduled to be deleted on reboot.
      User's Temp folder emptied.
      User's Temporary Internet Files folder emptied.
      User's Internet Explorer cache folder emptied.
      Local Service Temp folder emptied.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      Local Service Temporary Internet Files folder emptied.
      File delete failed. C:\WINDOWS\temp\08d4a257-cfcd-4e4d-8045-47ff8df6ec24.tmp scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_638.dat scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6ac.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied.
      Java cache emptied.
      File delete failed. C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\XUL.mfl scheduled to be deleted on reboot.
      FireFox cache emptied.
      Temp folders emptied.

      OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 01162009_222230

      Files moved on Reboot...
      File C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\etilqs_6m7J5cJDfizbdmto8UPy not found!
      File C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~DF1861.tmp not found!
      C:\DOCUME~1\CLAUDE\LOCALS~1\Temp\~WRF0000.tmp moved successfully.
      File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
      C:\WINDOWS\temp\08d4a257-cfcd-4e4d-8045-47ff8df6ec24.tmp moved successfully.
      File C:\WINDOWS\temp\Perflib_Perfdata_638.dat not found!
      C:\WINDOWS\temp\Perflib_Perfdata_6ac.dat moved successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_001_ moved successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_002_ moved successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_003_ moved successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\Cache\_CACHE_MAP_ moved successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\urlclassifier3.sqlite moved successfully.
      C:\Documents and Settings\CLAUDE\Local Settings\Application Data\Mozilla\Firefox\Profiles\wu3403aq.default\XUL.mfl moved successfully.




      0
  17. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Ton PC va mieux je suppose.

    ---> Télécharge JavaRa.zip (de Paul 'Prm753' McLain et Fred de Vries) sur ton Bureau.
    * Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
    * Double-clique sur le répertoire JavaRa.
    * Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
    * Choisis Français puis clique sur Select.
    * Clique sur Effacer les anciennes versions.
    * Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK.
    * Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
    * Ferme l'application.

    Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      OOOHHHH OOUUUUIIII

      un grand MERCI !

      Comment réellement remercier un tel travail

      Reste encore quelques petites questions a suivre plus tard, mais OUF!

      a un moment j'ai eu un message d'erreur apres le clic "effacer les anciennes versions"

      -------------------------------------------
      JavaRa 1.13 Removal Log.

      Report follows after line.

      ------------------------------------

      The JavaRa removal process was started on Fri Jan 16 23:41:08 2009

      Found and removed: C:\Program Files\Java\j2re1.4.1_02

      Found and removed: C:\Program Files\Java\jre1.5.0_02

      Found and removed: C:\Program Files\Java\jre1.6.0_01

      Found and removed: C:\Program Files\Java\jre1.6.0_02

      Found and removed: C:\Program Files\Java\jre1.6.0_03

      Found and removed: C:\Program Files\Java\jre1.6.0_05

      Found and removed: C:\Program Files\Java\jre1.6.0_07

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\javaw.Exe

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.4

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Java Web Start

      Found and removed: Software\JavaSoft\Java2D\1.5.0_02

      Found and removed: Software\JavaSoft\Java2D\1.5.0_05

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510002

      Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510002

      Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510002

      Found and removed: SOFTWARE\Classes\JavaPlugin.150_02

      Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_02

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_02

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150020}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

      Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

      Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610001

      Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D610005

      Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610001

      Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D610005

      Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001

      Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_01

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_02

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_03

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_05

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_01

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_02

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_03

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_05

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_01

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_02

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_03

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_05

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610001

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D610005

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610001

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610003

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610005

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610001

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610002

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610003

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610005

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160010}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160020}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160030}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160050}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EFCE5837-FC21-11D6-9D24-00010240CE95}

      Found and removed: SOFTWARE\Classes\JavaPlugin.141_02

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.4.1_02

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.4.1_02

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_02

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

      Found and removed: Software\Classes\JavaPlugin.141_02

      Found and removed: Software\Classes\JavaPlugin.160_01

      Found and removed: Software\Classes\JavaPlugin.160_02

      Found and removed: Software\Classes\JavaPlugin.160_03

      Found and removed: Software\Classes\JavaPlugin.160_05

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_01

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_02

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_03

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_05

      Found and removed: Software\JavaSoft\Java2D\1.6.0_01

      Found and removed: Software\JavaSoft\Java2D\1.6.0_02

      Found and removed: Software\JavaSoft\Java2D\1.6.0_03

      Found and removed: Software\JavaSoft\Java2D\1.6.0_05

      Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_01

      Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_02

      Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_03

      Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_05

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

      Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_02\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_01\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_02\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_05\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_01\bin\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_02\bin\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_03\bin\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_05\bin\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_07\bin\

      JavaRa 1.13 Removal Log.

      Report follows after line.

      ------------------------------------

      The JavaRa removal process was started on Fri Jan 16 23:43:33 2009

      ------------------------------------

      Finished reporting.
      0
  18. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    1/

    ---> Désinstalle HijackThis.

    ---> Supprime JavaRa.

    ---> Télécharge ToolsCleaner2 sur ton Bureau.
    * Double-clique sur ToolsCleaner2.exe pour le lancer.
    * Clique sur Recherche et laisse le scan agir.
    * Clique sur Suppression pour finaliser.
    * Tu peux, si tu le souhaites, te servir des Options Facultatives.
    * Clique sur Quitter pour obtenir le rapport.
    * Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).

    2/

    ---> Télécharge et installe CCleaner (N'installe pas la Yahoo Toolbar) :
    * Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers etc....
    * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.
    * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs (Sauvegarde la base de registre).

    3/

    ---> Il est nécessaire de désactiver puis réactiver la restauration système pour la purger :
    http://www.infos-du-net.com/forum/272480-11-desactiver-activer-restauration-systeme

    ---> Je te conseille de créer un point de restauration que tu pourras utiliser plus tard si tu as un problème :
    https://www.vulgarisation-informatique.com/creer-point-restauration.php

    4/

    Conserve MBAM. Il te servira à scanner les fichiers douteux en complément de l'antivirus et scanne le disque dur régulièrement.

    Comme navigateur, utilise plutôt Mozilla Firefox qu'Internet Explorer. Tu peux utiliser l'extension Noscript pour plus de sécurité.

    Change tes mots de passe vu que tu étais infecté.

    Vérifie que les mises à jour automatiques sont bien activées (Menu Démarrer, clique droit sur Poste de travail, Onglet Mises à jour automatiques).

    Tu peux aussi modifier le fichier Hosts pour améliorer la sécurité de ton PC :
    http://www.commentcamarche.net/faq/sujet 5993 modifier son fichier hosts
    https://blog.sosordi.net/category/articles

    Par rapport au P2P :
    http://www.libellules.ch/...

    Voici un dossier complet (A lire avec Adobe Reader ou Foxit Reader) :
    https://www.malekal.com/fichiers/projetantimalwares/prevention-protection.pdf

    Sois plus vigilant sur Internet ;)
    0
    1. corclau95 Messages postés 29 Statut Membre 1
       
      J'ai pris bonne note de tous ces conseils que j'apprécierai mieux demain, ce soir je vais me coucher, hier il était 3 heures du matin.

      Je vous remercie encore et vous souhaite bonne nuit ??? vous êtes toujours présent

      P.S. je n'ai pas l'habitude de tutoyer (a mon âge) mais MERCI A TOI, a demain

      Corclau95
      0
  19. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Bonne nuit ;)
    0

Discussions similaires

problème avec regedit
Utilisateur anonyme -
Utilisateur anonyme -

27 réponses
REGEDIT
alex35 -
alex35 -

2 réponses
autoadminlogon dans regedit
patou28 -
jaime linforrube -

10 réponses
Ouverture automatique de session windows
bguillot11 -
Cpassimple -

15 réponses
Retrouver clé office 2021
blux -
blux -

5 réponses