PB PUB + MISE A JOUR Fermé

Question

Bonjour,

Ça fait un moment que je galère avec mon pc, nombreuses pub s'affiche sous firefox ainsi que sur explorer, les mises a jours automatiques se sont bloquées mon antivirus est panda j'ai aussi utilisé c cleaner et la je suis en train d'analyser avec malwarebytes ça fait + d'1 heure et 45 éléments infectés alors que l'analyse n'est pas terminée.
Je ne sais plus quoi faire je l'emmène en réparation très souvent mais rien n'est résolu pouvait vous m'aider?

Ca fait 2 fois que je pose cette question mes personnes ne me repond?
SVP aidez moi!

MERCI

V-X · Answer

Salut,

Dés que le scan de malwarebyte et fini tu poste le rapport sur le forum.

Supprime bien ce qu'il trouve.

A++

julieee · Answer

16/01/2009 14:37:28
mbam-log-2009-01-16 (14-37-28).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 169413
Temps écoulé: 8 hour(s), 3 minute(s), 54 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 3
Clé(s) du Registre infectée(s): 14
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 2
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 218

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\WINDOWS\system32\ddcDuVnL.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\iifecaYR.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\bipdac.dll (Trojan.Vundo) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{508e980c-f09f-4908-bcc6-f4c533a15ea6} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iifecayr (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{508e980c-f09f-4908-bcc6-f4c533a15ea6} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a0758cab-6b0c-4eba-aeb5-5d94694568e2} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a0758cab-6b0c-4eba-aeb5-5d94694568e2} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e49df6ea-1989-4ec5-9549-eda4dd32a173} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{e49df6ea-1989-4ec5-9549-eda4dd32a173} (Trojan.Vundo.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{508e980c-f09f-4908-bcc6-f4c533a15ea6} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a0758cab-6b0c-4eba-aeb5-5d94694568e2} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{e49df6ea-1989-4ec5-9549-eda4dd32a173} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoftdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\f0d29b1f (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{508e980c-f09f-4908-bcc6-f4c533a15ea6} (Trojan.Vundo) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\ddcduvnl -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\ddcduvnl  -> Delete on reboot.

Dossier(s) infecté(s):
C:\Program Files\PCHealthCenter (Trojan.Fakealert) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\WINDOWS\system32\iifecaYR.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\bipdac.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\ddcDuVnL.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\LnVuDcdd.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\LnVuDcdd.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\byaibhxk.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kxhbiayb.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cpjlwotn.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
towljpc.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ddcBRjIY.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\YIjRBcdd.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\YIjRBcdd.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\giaokqor.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32oqkoaig.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\klyiisyn.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
ysiiylk.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lashxter.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32etxhsal.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\urqRlLET.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\TELlRqru.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\TELlRqru.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\DOomi\Local Settings\Temporary Internet Files\Content.IE5\A5PIMM7E
d82m0[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\DOomi\Local Settings\Temporary Internet Files\Content.IE5\A5PIMM7E\zc113432[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\DOomi\Local Settings\Temporary Internet Files\Content.IE5\WW9RT5K8\index[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Invité\Local Settings\Temp\ejtwkr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Invité\Local Settings\Temp\hamlkkrg.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Invité\Local Settings\Temp	qjqfgcl.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Invité\Local Settings\Temporary Internet Files\Content.IE5\IUEDLDD3\index[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\RiCaRdoo\Local Settings\Temporary Internet Files\Content.IE5\2T252H4W\index[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Documents and Settings\RiCaRdoo\Local Settings\Temporary Internet Files\Content.IE5\MB6FE3ER\upd105320[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0092652.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0092676.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093674.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093675.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093676.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093677.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093678.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093679.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093680.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093681.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093682.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093683.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP121\A0093684.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP122\A0093696.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP122\A0094713.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP123\A0095748.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP123\A0095774.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP124\A0095794.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP124\A0095795.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP124\A0095818.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP124\A0095819.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP126\A0095896.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP126\A0095909.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP127\A0095947.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP128\A0095980.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP130\A0100171.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP130\A0100172.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP130\A0100173.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP130\A0100174.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP130\A0100175.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP131\A0100262.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP131\A0100263.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081886.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081906.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081907.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081908.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081909.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081910.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081912.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081945.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP113\A0081911.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP114\A0084048.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088085.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088106.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088113.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088128.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088127.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088178.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088179.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088180.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0088181.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0089205.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0089224.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP115\A0089229.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0089276.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0089242.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0089255.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0090291.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0090292.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0090293.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0090294.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP116\A0090295.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP117\A0090302.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP118\A0090506.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP119\A0090531.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP119\A0090550.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP119\A0090553.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP150\A0100787.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP150\A0100799.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP151\A0101824.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP154\A0101912.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP154\A0101913.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP154\A0102990.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP154\A0101974.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP156\A0105058.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP156\A0104018.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP156\A0105056.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP156\A0105057.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP156\A0105059.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP156\A0105060.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP156\A0105061.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP157\A0105085.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP157\A0105141.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP157\A0105191.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105207.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105219.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105220.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105221.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105222.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105224.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105225.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105226.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105227.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105228.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105229.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105230.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105231.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP158\A0105232.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP161\A0105293.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP120\A0090603.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP162\A0105308.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP162\A0105309.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP162\A0105313.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP162\A0106313.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP163\A0108343.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP169\A0111115.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP169\A0113141.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP169\A0113142.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP169\A0113145.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP169\A0113148.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP169\A0113156.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP170\A0113280.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP170\A0113282.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP170\A0113283.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP170\A0113288.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP175\A0113415.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP175\A0113416.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP175\A0113417.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP175\A0113418.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP175\A0113419.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP175\A0113420.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP175\A0113421.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP178\A0114699.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP179\A0114732.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{ED9CCE0F-1DCE-4134-8166-E69AEFC70BA3}\RP180\A0115759.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cijqosaf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\dvajomui.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\fkhrge.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\meubqsjl.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pmnnMecc.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\sgmysp.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32	efouyvx.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ukygce.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wifhmdhi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\uuewdreg.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\uykaapeo.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\awtQJcCR.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bpsmwm.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\fvubzm.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ggaroa.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\gvnwiust.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mgwgji.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32
ilnnmuo.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\okqurq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\puumgxfl.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32ezacy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\skasycjy.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\iudpuifm.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\jflpxabd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drawlohw.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hdowkq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hmoshz.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\csisrr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\snmaonjf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\alynreau.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wqijfa.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\xpcdbz.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yckdbh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\yqeuac.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\zlaawr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\zlcfgd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\zseajt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\jmctodsi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\jnlyxktf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32	rrbfu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qeqaekyl.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qmzpjm.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qoMeFuur.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qqlxhn.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vdqoqibu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vftqihjr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\vhyrgbib.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\krjbmkin.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hojcjjll.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\htwdiyus.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lnekouur.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\exiljwvd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\xmyrmh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\0.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\1.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\2.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\3.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\Program Files\PCHealthCenter\sc.html (Trojan.Fakealert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\mcrh.tmp (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\acrsecB.fon (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Fonts\acrsecI.fon (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Local Settings\Temp\lwpwer.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

V-X · Answer

Re,

Redémarre ton pc normalement et fait ce qui suit:

&#x25B6 Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

&#x25B6 Double clique sur RSIT.exe pour lancer l'outil.

&#x25B6 Clique sur ' continue ' à l'écran Disclaimer.

&#x25B6 Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

&#x25B6 Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports
( log.txt & info.txt )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

julieee · Answer

Il c'est déjà redémarré je le refait?

MERCI

julieee · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by laurie at 2009-01-16 15:06:13
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 94 GB (72%) free of 130 GB
Total RAM: 510 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:06:22, on 16/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApvxdWin.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\LVComsX.exe
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\RSIT(2).exe
C:\Program Files\Trend Micro\HijackThis\laurie.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: {c1733788-b381-8a2a-c794-2c4dbb217f0d} - {d0f712bb-d4c2-497c-a2a8-183b8873371c} - C:\WINDOWS\system32\wlpqjx.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [meet great active lies] C:\Documents and Settings\All Users\Application Data\soft chic meet great\soap base.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: wlpqjx.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe

julieee · Answer

info.txt logfile of random's system information tool 1.05 2009-01-16 15:06:25

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{685A56F8-75B6-44AD-B3DA-FB0A3266B47C}
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
Agere Systems PCI Soft Modem-->agrsmdel
Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Ask Toolbar-->rundll32 C:\PROGRA~1\AskSBar\bar\1.bin\AskSBar.dll,O 
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
C-Media WDM Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
HP Product Detection-->MsiExec.exe /X{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}
hp psc 2170 series-->MsiExec.exe /X{93FB47FB-4FDF-4131-B5FD-7A37883868E7}
hp psc 2170 series-->rundll32 hpzcon07.dll,VendorJettison hp psc 2170 series
iTunes-->MsiExec.exe /I{EF6C4600-306D-4F6A-A119-C2A877D25B4A}
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JavaScript Maker-->"C:\Program Files\JavaScript Maker\IsStub32.exe"  -f"C:\Program Files\JavaScript Maker\DeIsL1.isu"  -c"C:\Program Files\JavaScript Maker\_ISREG32.DLL"
K-Lite Codec Pack 2.75 Full (Beta 3)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe" -l0x40c 
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Navilog1 3.6.9-->"C:\Program Files\Navilog1\unins000.exe"
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NETGEAR GA511 Smart Wizard Utility-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{52CAD7C7-1E41-43FE-8613-AB9D79B2DBBC} 
Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
NVIDIA Drivers-->C:\WINDOWS\system32
vuninst.exe UninstallGUI
Panda Antivirus Pro 2009-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E55FB276-73C9-4776-AB53-BC028C0509ED}\SETUP.EXE" -l0x40c  -removeonly
Photo et imagerie HP 2.0 - All-in-One Pilote-->MsiExec.exe /X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
Photo et imagerie HP 2.0 - All-in-One-->MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1}
Photo et imagerie HP 2.0 - hp psc 2170 series-->C:\Program Files\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe"  -uninstall
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\setup.exe -runfromtemp -l0x040c -removeonly
SiSAGP driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC226AC9-0314-496C-BE6A-B6A132628466}\setup.exe" -l0x40c 
SiSRaidPackage-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{13D41D72-0284-4931-A261-F86F6565D4B4}\setup.exe" -l0x40c 
TomTom HOME-->C:\Program Files\TomTom HOME 2\Uninstall TomTom HOME.exe
VC_MergeModuleToMSI-->MsiExec.exe /I{900A92BA-19EF-4A34-86CF-7B6C85BDD971}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Security center information======

AV: Panda Antivirus Pro 2009

System event log

Computer Name: STEF-75DCECBE7F
Event Code: 7036
Message: Le service Mises à jour automatiques est entré dans l'état : en cours d'exécution.

Record Number: 9952
Source Name: Service Control Manager
Time Written: 20090108185432.000000+060
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Mises à jour automatiques.

Record Number: 9951
Source Name: Service Control Manager
Time Written: 20090108185432.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: STEF-75DCECBE7F
Event Code: 7036
Message: Le service Mises à jour automatiques est entré dans l'état : arrêté.

Record Number: 9950
Source Name: Service Control Manager
Time Written: 20090108185431.000000+060
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 7035
Message: Un contrôle Arrêter a correctement été envoyé au service Mises à jour automatiques.

Record Number: 9949
Source Name: Service Control Manager
Time Written: 20090108185431.000000+060
Event Type: Informations
User: STEF-75DCECBE7F\RiCaRdoo

Computer Name: STEF-75DCECBE7F
Event Code: 7036
Message: Le service Mises à jour automatiques est entré dans l'état : en cours d'exécution.

Record Number: 9948
Source Name: Service Control Manager
Time Written: 20090108185431.000000+060
Event Type: Informations
User: 

Application event log

Computer Name: STEF-75DCECBE7F
Event Code: 102
Message: msnmsgr (252) \.\C:\Documents and Settings\julie\Local Settings\Application Data\Microsoft\Messenger\lorinette3413@hotmail.com\SharingMetadata\Working\database_8CF0_D2AC_F0D2_9BB0\dfsr.db: Le moteur de base de données a démarré une nouvelle instance (0).

Record Number: 2285
Source Name: ESENT
Time Written: 20080828195459.000000+120
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 100
Message: msnmsgr (252) Le moteur de base de données 5.01.2600.5512 est démarré.

Record Number: 2284
Source Name: ESENT
Time Written: 20080828195459.000000+120
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 12001
Message: The Messenger Sharing USN Journal Reader service started successfully.

Record Number: 2283
Source Name: usnjsvc
Time Written: 20080828195451.000000+120
Event Type: 
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 1000
Message: Application défaillante iexplore.exe, version 7.0.6000.16705, module défaillant unknown, version 0.0.0.0, adresse de défaillance 0xaa019b10.

Record Number: 2282
Source Name: Application Error
Time Written: 20080828195239.000000+120
Event Type: erreur
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 11728
Message: Produit : hp psc 2170 series -- La configuration s'est terminée correctement.

Record Number: 2281
Source Name: MsiInstaller
Time Written: 20080828195019.000000+120
Event Type: Informations
User: STEF-75DCECBE7F\julie

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;C:\Program Files\Panda Security\Panda Antivirus Pro 2009\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

julieee · Answer

Voici les 2 analyses.

V-X · Answer

Re,

Combofix. Attention, ce logiciel est très puissant, une mauvaise utilisation peut faire des dégâts...

Fais exactement ce qui suit :

Télécharge ComboFix (de sUBs) sur ton Bureau (et pas ailleurs !) :
Fais un clic droit sur ce lien et choisis "enregistrer la cible sous ... " : dans la fenêtre qui s'ouvre tape C-Fix, choisis le bureau comme destination et valide : 

--------------------------------------------- [ ! ATTENTION ! ] ----------------------------------------------------------
!! déconnecte toi, ferme toutes tes applications en cours et DESACTIVE TOUTES TES DEFENCES (anti-virus, antispyware, pare-feu) le temps de la manipulation (si jamais tu en as et que je ne les ai pas vu sur le rapport hijackthis....)

---> Surtout, si tu rencontres des difficultés à ce niveau là, dis le moi avant de poursuivre...

--->Je te conseil d'installer la console de récupération.(Voir le tutoriel).

Tuto ici : TUTO
---------------------------------------------------------------------------------------------------------------------------------

Ensuite :

Double-clique sur C-Fix.exe (= combofix.exe ) .

Appuie sur une touche pour démarrer le scan .

Attention : n'utilise pas ta souris ni ton clavier pendant que le programme tourne. Cela pourrait figer l'ordi ---> si un message d'erreur windows apparait à un moment : clique sur la croix rouge en haut à droite de la fenêtre pour la fermer

Le rapport sera crée dans: C:\Combofix.txt , poste le ici stp 

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

V-X · Answer

Re,

Fait SA

julieee · Answer

je vois pas enregistrer la cible sous en faisant clique droit!

V-X · Answer

Re,

Clic droit sur ComboFix (de sUBs)

Ensuite "enregistre la cible sous........"

Et tu le met sur ton bureau.

Ou tu configure ton navigateur pour le télécharger directement sur ton bureau.

julieee · Answer

ComboFix 09-01-15.01 - laurie 2009-01-16 15:23:47.1 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.3.1252.1.1036.18.510.276 [GMT 1:00] Lancé depuis: c:\documents and settings\laurie.STEF-75DCECBE7F\Bureau\C-Fix.exe AV: Panda Antivirus Pro 2009 *On-access scanning disabled* (Outdated) * Un nouveau point de restauration a été créé . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Instafinder c:\windows\system32\akbviuhx.ini c:\windows\system32\awerkpnm.dll c:\windows\system32\aypnyrxj.ini c:\windows\system32\bdedumoc.ini c:\windows\system32\benepmlm.ini c:\windows\system32\bgrdtnyg.ini c:\windows\system32\dgmlftil.ini c:\windows\system32\dhqyfhpg.ini c:\windows\system32\dhvtgfly.ini c:\windows\system32\dsdefrid.dll c:\windows\system32\edhrhjif.dll c:\windows\system32\efpditoj.ini c:\windows\system32\ehiqitva.dll c:\windows\system32\ejdswtyq.ini c:\windows\system32\evrrsbxx.dll c:\windows\system32\fcgyioiy.ini c:\windows\system32\fhibaerw.ini c:\windows\system32\fkgihrce.ini c:\windows\system32\gcpkkioy.ini c:\windows\system32\gddfxhxt.dll c:\windows\system32\ghdsrhka.ini c:\windows\system32\gmgxoqys.ini c:\windows\system32\hfsismjy.ini c:\windows\system32\hfygpxbu.ini c:\windows\system32\iiguulgv.ini c:\windows\system32\ikrkvvof.ini c:\windows\system32\jfaaytbb.ini c:\windows\system32\jfdaicvx.dll c:\windows\system32\jfyiitma.dll c:\windows\system32\jhgdgnfk.ini c:\windows\system32\jtripsjc.dll c:\windows\system32\ktkxpwvh.ini c:\windows\system32\lmaumhkr.ini c:\windows\system32\lwyukxgi.ini c:\windows\system32\miphithd.ini c:\windows\system32\mjodilbo.ini c:\windows\system32 hfdjxdx.ini c:\windows\system32 hokhlta.ini c:\windows\system32 rbwmrlx.ini c:\windows\system32 swkbjgy.ini c:\windows\system32 upajbbi.ini c:\windows\system32 wjljwqh.ini c:\windows\system32 ywqndcq.ini c:\windows\system32\oflegrao.ini c:\windows\system32\pbbnzj.dll c:\windows\system32\pqqkxooa.ini c:\windows\system32\pwmyhrqh.ini c:\windows\system32\qicmbkcp.ini c:\windows\system32\qikyquqj.ini c:\windows\system32\qixanxoy.ini c:\windows\system32\qytwsdje.dll c:\windows\system32 poayldm.ini c:\windows\system32 tcjdgto.ini c:\windows\system32\sbfnlnsq.ini c:\windows\system32\sgtpcegc.ini c:\windows\system32\sqmhgdaa.ini c:\windows\system32 fmavuno.ini c:\windows\system32 kdbbtwj.ini c:\windows\system32 mkwuaag.ini c:\windows\system32 mxdpkyp.ini c:\windows\system32 wifvwwu.ini c:\windows\system32\uuwadfhx.ini c:\windows\system32\vshkoqrp.ini c:\windows\system32\wclravwx.ini c:\windows\system32\wlpqjx.dll c:\windows\system32\wyumcffl.dll c:\windows\system32\xcinmahd.ini c:\windows\system32\xfmcwrcs.ini c:\windows\system32\xhlkfijn.ini c:\windows\system32\xvkwkaam.ini c:\windows\system32\xyewdydy.ini c:\windows\system32\yfhmsbtn.ini c:\windows\system32\ylfnhnpj.ini c:\windows\system32\ynvboesh.ini c:\windows\system32\ywdrrjqu.ini . ((((((((((((((((((((((((((((( Fichiers créés du 2008-12-16 au 2009-01-16 )))))))))))))))))))))))))))))))))))) . 2009-01-16 15:06 . 2009-01-16 15:06 d-------- C: sit 2009-01-15 17:42 . 2009-01-15 17:42 0 --a------ c:\windows\Irremote.ini 2009-01-15 17:34 . 2009-01-15 17:34 d-------- c:\windows\SxsCaPendDel 2009-01-15 14:33 . 2009-01-15 14:35 d-------- c:\program files\Malwarebytes' Anti-Malware 2009-01-15 14:33 . 2009-01-15 14:33 d-------- c:\documents and settings\laurie.STEF-75DCECBE7F\Application Data\Malwarebytes 2009-01-15 14:33 . 2009-01-15 14:33 d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-01-15 14:33 . 2009-01-14 16:11 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-01-15 14:33 . 2009-01-14 16:11 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-01-15 14:13 . 2009-01-15 14:13 d-------- c:\program files\QUAD Utilities 2009-01-15 11:47 . 2008-10-15 17:35 337,408 -----c--- c:\windows\system32\dllcache etapi32.dll 2009-01-15 11:29 . 2009-01-15 11:29 d-------- c:\documents and settings\All Users\Application Data\Office Genuine Advantage 2009-01-11 12:51 . 2008-10-16 14:08 27,672 --a------ c:\windows\system32\wuapi.dll.mui 2008-12-18 12:11 . 2008-12-22 16:12 3,532 --a------ C:\drmHeader.bin . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2009-01-16 14:27 13,880 ----a-w c:\windows\system32\drivers\COMFiltr.sys 2009-01-15 16:50 --------- d--h--w c:\program files\InstallShield Installation Information 2009-01-08 16:58 --------- d-----w c:\documents and settings\All Users\Application Data\soft chic meet great 2008-12-22 15:35 --------- d-----w c:\documents and settings\laurie.STEF-75DCECBE7F\Application Data\Azureus 2008-12-12 14:39 --------- d-----w c:\program files\Azureus 2008-12-11 16:46 --------- d-----w c:\documents and settings\laurie.STEF-75DCECBE7F\Application Data\Ahead 2008-12-11 15:33 --------- d-----w c:\program files\Windows Live 2008-12-11 15:31 --------- d-----w c:\program files\Hewlett-Packard 2008-12-11 15:02 --------- d-----w c:\program files\PhotoFiltre 2008-12-10 12:37 --------- d-----w c:\program files\Trend Micro 2008-12-10 12:31 --------- d-----w c:\program files\Navilog1 2008-11-21 14:59 --------- d-----w c:\documents and settings\Invité\Application Data\Azureus 2008-11-16 15:09 --------- d-----w c:\documents and settings\Laurie\Application Data\ProxyBoob 2008-06-26 14:52 169 ---ha-w c:\documents and settings\laurie.STEF-75DCECBE7F\hpothb07.dat 2008-06-26 14:52 169 ---ha-w c:\documents and settings\Invité\hpothb07.dat 2008-06-26 14:52 169 ---ha-w c:\documents and settings\Invité\hpothb07.dat 2008-06-26 14:52 169 ---ha-w c:\documents and settings\Default User\hpothb07.dat 2008-06-26 14:52 169 ---ha-w c:\documents and settings\Administrateur\hpothb07.dat 2008-05-20 11:26 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008042820080505\index.dat 2008-05-20 11:26 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008052020080521\index.dat . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "APVXDWIN"="c:\program files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" [2008-12-03 869632] "SCANINICIO"="c:\program files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe" [2008-07-07 50432] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-03 13529088] "meet great active lies"="c:\documents and settings\All Users\Application Data\soft chic meet great\soap base.exe" [2009-01-16 757760] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\avldr] 2008-03-18 15:58 58672 c:\windows\system32\avldr.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=wlpqjx.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.X264"= x264vfw.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail] @="Service" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe"= "%windir%\Network Diagnostic\xpnetdiag.exe"= "c:\Program Files\Bonjour\mDNSResponder.exe"= "c:\Program Files\Messenger\msmsgs.exe"= "c:\Program Files\Azureus\Azureus.exe"= "c:\Program Files\Windows Live\Messenger\msnmsgr.exe"= "c:\Program Files\Windows Live\Messenger\livecall.exe"= R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [2008-09-13 28544] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2008-09-13 41144] R3 ComFiltr;Panda Anti-Dialer;c:\windows\system32\drivers\COMFiltr.sys [2008-09-13 13880] R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\PavTPK.sys --> c:\windows\system32\PavTPK.sys [?] R4 Gwmsrv;Panda Goodware Cache Manager;c:\windows\system32\svchost -k Panda --> c:\windows\system32\svchost -k Panda [?] R4 LANPkt;Realtek LANPkt Protocol;c:\windows\system32\drivers\LANPkt.sys [2006-11-28 8440] R4 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2008-09-13 179640] S3 Diag69xp;Diag69xp;c:\windows\system32\drivers\diag69xp.sys [2006-11-28 11237] --- Autres Services/Pilotes en mémoire --- *Deregistered* - Netman *Deregistered* - Nla *Deregistered* - NVSvc *Deregistered* - Panda Software Controller *Deregistered* - PAVFNSVR *Deregistered* - PavPrSrv *Deregistered* - PAVSRV *Deregistered* - PolicyAgent *Deregistered* - ProtectedStorage *Deregistered* - PSIMSVC *Deregistered* - PskSvcRetail *Deregistered* - RasMan *Deregistered* - RichVideo *Deregistered* - RpcSs *Deregistered* - SamSs *Deregistered* - Schedule *Deregistered* - seclogon *Deregistered* - SENS *Deregistered* - SharedAccess *Deregistered* - ShellHWDetection *Deregistered* - Spooler *Deregistered* - srservice *Deregistered* - SSDPSRV *Deregistered* - stisvc *Deregistered* - TapiSrv *Deregistered* - TermService *Deregistered* - Themes *Deregistered* - TPSrv *Deregistered* - TrkWks *Deregistered* - W32Time *Deregistered* - WebClient *Deregistered* - winmgmt *Deregistered* - wscsvc *Deregistered* - wuauserv *Deregistered* - WudfSvc *Deregistered* - WZCSVC [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] panda REG_MULTI_SZ Gwmsrv . Contenu du dossier 'Tâches planifiées' 2009-01-16 c:\windows\Tasks\A9440CD3918F8187.job - c:\docume~1 icardoo\applic~1\proxyb~1\file build bind.exe [] 2008-12-10 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 16:57] . - - - - ORPHELINS SUPPRIMES - - - - BHO-{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - (no file) BHO-{d0f712bb-d4c2-497c-a2a8-183b8873371c} - c:\windows\system32\wlpqjx.dll . ------- Examen supplémentaire ------- . uStart Page = about:blank mStart Page = about:blank FF - ProfilePath - c:\documents and settings\laurie.STEF-75DCECBE7F\Application Data\Mozilla\Firefox\Profiles\lhbukbmh.default\ FF - plugin: c:\program files\Mozilla Firefox\plugins\NPAskSBr.dll FF - plugin: c:\program files\Mozilla Firefox\plugins pOGAPlugin.dll . . ------- Associations de fichier ------- . JSEFile=c:\progra~1\PANDAS~1\PANDAA~2\PAVSCRIP.EXE "%1" %* VBEFile=c:\progra~1\PANDAS~1\PANDAA~2\PAVSCRIP.EXE "%1" %* VBSFile=c:\progra~1\PANDAS~1\PANDAA~2\PAVSCRIP.EXE "%1" %* . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-16 15:27:38 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'winlogon.exe'(656) c:\windows\system32\avldr.dll . ------------------------ Autres processus actifs ------------------------ . c:\program files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe c:\program files\Panda Security\Panda Antivirus Pro 2009\WebProxy.exe c:\windows\system32\agrsmsvc.exe c:\program files\Bonjour\mDNSResponder.exe c:\windows\system32 vsvc32.exe c:\program files\Panda Security\Panda Antivirus Pro 2009\PsCtrlS.exe c:\program files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe c:\program files\Fichiers communs\Panda Security\PavShld\PavPrSrv.exe c:\program files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe c:\program files\Panda Security\Panda Antivirus Pro 2009\psksvc.exe c:\program files\CyberLink\Shared files\RichVideo.exe c:\program files\Panda Security\Panda Antivirus Pro 2009\PAVSRV51.EXE c:\program files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE c:\program files\Internet Explorer\iexplore.exe c:\windows\system32\wscntfy.exe . ************************************************************************** . Heure de fin: 2009-01-16 15:32:14 - La machine a redémarré ComboFix-quarantined-files.txt 2009-01-16 14:32:09 Avant-CF: 97 954 263 040 octets libres Après-CF: 98,185,723,904 octets libres WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect 275 --- E O F --- 2008-09-12 14:02:35

V-X · Answer

Re,

Télécharge Lop S&D
 

&#x25B6 Double-clique dessus pour lancer l'installation

&#x25B6 Puis double-clique sur le raccourci Lop S&D présent sur ton bureau

&#x25B6 Séléctionne la langue souhaitée 

&#x25B6 Puis choisis l'Option 1 ( Recherche )

&#x25B6 Patiente jusqu'à la fin du scan

&#x25B6 Poste le rapport généré ( C:lopR.txt )

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

julieee · Answer

je n'arrive po a le telecharger

V-X · Answer

Re,

Redémarre ton pc normalement et essai de nouveau:

clic ici

julieee · Answer

J'ai redemarrer et ca ne marche tjr pas il me dit la conexion avec le serveur à été réinitialisé.

V-X · Answer

Re,

Essai celui la:

Télécharger Lopxp : (by Moe)

&#x25B6 Double-cliquer sur Lopxpsetup.exe pour lancer l'installation

&#x25B6 Au menu, choisir l'option 1

&#x25B6 Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !

&#x25B6 Le contenu du rapport est situé dans : C:\Programfiles\Lopxp\cid.txt

julieee · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.93GHz )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : laurie ( Administrator )
   BOOT : Normal boot
   Antivirus : Panda Antivirus Pro 2009 8.00.00 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:126 Go (Free:91 Go)
   H:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 16/01/2009|15:56 )
 
   --------------------\  Listing des dossiers dans APPLIC~1

   [12/09/2008|17:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

   [21/05/2008|05:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{B7A015B7-4802-4678-8CEC-700380BA9AFD}
   [30/05/2008|12:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [03/05/2008|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [02/09/2008|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [02/09/2008|18:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [21/05/2008|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
   [03/05/2008|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [28/05/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
   [03/05/2008|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [21/05/2008|05:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [15/01/2009|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [19/09/2008|10:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [15/01/2009|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
   [13/09/2008|10:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panda Security
   [10/11/2008|16:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panda Software
   [03/05/2008|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
   [08/01/2009|17:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great
   [15/08/2008|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
   [20/05/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [07/12/2007|13:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [12/09/2008|17:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [03/05/2008|17:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [03/12/2008|13:40] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
   [21/11/2008|15:59] C:\DOCUME~1\INVIT~1\APPLIC~1\Azureus
   [02/08/2008|16:06] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [19/11/2008|13:27] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [29/11/2008|18:18] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [19/11/2008|13:26] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
   [19/11/2008|14:34] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun


   [07/05/2008|19:50] C:\DOCUME~1\Laurie\APPLIC~1\Adobe
   [02/06/2008|18:25] C:\DOCUME~1\Laurie\APPLIC~1\Ahead
   [02/06/2008|13:26] C:\DOCUME~1\Laurie\APPLIC~1\Azureus
   [31/05/2008|20:15] C:\DOCUME~1\Laurie\APPLIC~1\DivX
   [04/05/2008|15:58] C:\DOCUME~1\Laurie\APPLIC~1\Google
   [04/05/2008|15:54] C:\DOCUME~1\Laurie\APPLIC~1\Identities
   [07/05/2008|19:52] C:\DOCUME~1\Laurie\APPLIC~1\Macromedia
   [01/06/2008|17:47] C:\DOCUME~1\Laurie\APPLIC~1\Microsoft
   [24/05/2008|11:20] C:\DOCUME~1\Laurie\APPLIC~1\Mozilla
   [16/11/2008|16:09] C:\DOCUME~1\Laurie\APPLIC~1\ProxyBoob
   [04/05/2008|16:28] C:\DOCUME~1\Laurie\APPLIC~1\Windows Live Writer
   [25/05/2008|18:03] C:\DOCUME~1\Laurie\APPLIC~1\WinRAR

   [10/09/2008|11:47] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Adobe
   [11/12/2008|17:46] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Ahead
   [22/12/2008|16:35] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Azureus
   [01/08/2008|16:35] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Google
   [01/08/2008|16:27] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Identities
   [09/08/2008|14:04] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Macromedia
   [15/01/2009|14:33] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Malwarebytes
   [05/11/2008|16:05] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Microsoft
   [18/11/2008|17:09] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Mozilla
   [07/11/2008|17:42] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\OpenOffice.org2
   [01/08/2008|16:34] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\ProxyBoob
   [17/09/2008|10:25] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Sun
   [18/09/2008|13:25] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\WinRAR

   [21/05/2008|14:50] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [03/05/2008|17:10] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [16/01/2009 15:00][--ah-----] C:\WINDOWS	asks\A9440CD3918F8187.job
   [10/12/2008 12:38][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [16/01/2009 15:48][--ah-----] C:\WINDOWS	asks\SA.DAT
   [02/03/2006 13:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   ( A9440CD3918F8187.job )=( c:\docume~1icardoo\applic~1\proxyb~1\filebuildbind.exe )

   --------------------\  Listing des dossiers dans C:\Program Files

   [30/05/2008|12:24] C:\Program Files\Adobe
   [02/09/2008|18:01] C:\Program Files\Apple Software Update
   [18/09/2008|12:06] C:\Program Files\AskSBar
   [03/05/2008|19:22] C:\Program Files\ASUSTeK
   [12/12/2008|15:39] C:\Program Files\Azureus
   [02/09/2008|18:03] C:\Program Files\Bonjour
   [12/09/2008|16:11] C:\Program Files\CCleaner
   [07/05/2008|12:32] C:\Program Files\C-Media
   [03/05/2008|17:04] C:\Program Files\ComPlus Applications
   [03/05/2008|18:03] C:\Program Files\CyberLink
   [31/05/2008|19:51] C:\Program Files\DivX
   [16/01/2009|15:24] C:\Program Files\Fichiers communs
   [03/05/2008|19:17] C:\Program Files\Google
   [11/12/2008|16:31] C:\Program Files\Hewlett-Packard
   [07/05/2008|11:59] C:\Program Files\HP
   [15/01/2009|17:50] C:\Program Files\InstallShield Installation Information
   [02/09/2008|18:02] C:\Program Files\Internet Explorer
   [01/08/2008|15:49] C:\Program Files\Java
   [01/08/2008|15:40] C:\Program Files\JavaScript Maker
   [03/05/2008|18:16] C:\Program Files\K-Lite Codec Pack
   [14/10/2008|09:24] C:\Program Files\Logitech
   [21/05/2008|05:15] C:\Program Files\ma-config.com
   [15/01/2009|14:35] C:\Program Files\Malwarebytes' Anti-Malware
   [14/08/2008|11:08] C:\Program Files\Messenger
   [07/12/2007|13:19] C:\Program Files\Messenger Plus! Live
   [19/09/2008|10:55] C:\Program Files\Microsoft ActiveSync
   [03/05/2008|17:07] C:\Program Files\microsoft frontpage
   [19/09/2008|10:52] C:\Program Files\Microsoft Office
   [19/08/2008|14:49] C:\Program Files\Microsoft Silverlight
   [04/05/2008|16:24] C:\Program Files\Microsoft SQL Server Compact Edition
   [19/09/2008|10:51] C:\Program Files\Microsoft.NET
   [20/05/2008|12:07] C:\Program Files\Movie Maker
   [16/01/2009|15:52] C:\Program Files\Mozilla Firefox
   [26/06/2008|16:46] C:\Program Files\MSECache
   [28/08/2008|12:23] C:\Program Files\MSN
   [03/05/2008|17:03] C:\Program Files\MSN Gaming Zone
   [10/12/2008|13:31] C:\Program Files\Navilog1
   [21/05/2008|05:03] C:\Program Files\NETGEAR GA511 Adapter
   [20/05/2008|12:02] C:\Program Files\NetMeeting
   [31/07/2008|10:56] C:\Program Files\Neuf
   [03/05/2008|17:04] C:\Program Files\Online Services
   [20/05/2008|12:02] C:\Program Files\Outlook Express
   [13/09/2008|10:26] C:\Program Files\Panda Security
   [11/12/2008|16:02] C:\Program Files\PhotoFiltre
   [02/06/2008|17:58] C:\Program Files\Pvm
   [15/01/2009|14:13] C:\Program Files\QUAD Utilities
   [21/05/2008|05:04] C:\Program Files\Realtek
   [03/05/2008|17:06] C:\Program Files\Services en ligne
   [21/05/2008|04:59] C:\Program Files\sisagp
   [15/08/2008|10:10] C:\Program Files\TomTom HOME 2
   [10/12/2008|13:37] C:\Program Files\Trend Micro
   [03/05/2008|17:14] C:\Program Files\Uninstall Information
   [11/12/2008|16:33] C:\Program Files\Windows Live
   [14/11/2008|11:02] C:\Program Files\Windows Live Toolbar
   [20/05/2008|12:43] C:\Program Files\Windows Media Connect 2
   [28/08/2008|09:56] C:\Program Files\Windows Media Player
   [20/05/2008|12:02] C:\Program Files\Windows NT
   [03/05/2008|17:06] C:\Program Files\WindowsUpdate
   [07/05/2008|11:27] C:\Program Files\WinRAR
   [03/05/2008|17:07] C:\Program Files\xerox
   [12/09/2008|16:11] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [30/05/2008|12:24] C:\Program Files\Fichiers communs\Adobe
   [19/09/2008|10:54] C:\Program Files\Fichiers communs\DESIGNER
   [26/06/2008|13:29] C:\Program Files\Fichiers communs\Hewlett-Packard
   [03/05/2008|19:20] C:\Program Files\Fichiers communs\InstallShield
   [03/05/2008|17:35] C:\Program Files\Fichiers communs\Java
   [02/06/2008|19:39] C:\Program Files\Fichiers communs\Logitech
   [19/09/2008|10:55] C:\Program Files\Fichiers communs\Microsoft Shared
   [03/05/2008|17:05] C:\Program Files\Fichiers communs\MSSoap
   [03/05/2008|18:56] C:\Program Files\Fichiers communs\ODBC
   [13/09/2008|09:50] C:\Program Files\Fichiers communs\Panda Security
   [12/09/2008|17:16] C:\Program Files\Fichiers communs\Panda Software
   [03/05/2008|17:05] C:\Program Files\Fichiers communs\Services
   [03/05/2008|18:56] C:\Program Files\Fichiers communs\SpeechEngines
   [19/09/2008|10:51] C:\Program Files\Fichiers communs\System
   [04/05/2008|16:04] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 39 Processes )

   IEXPLORE.EXE ~ [PID:2112]

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\Admin Move.exe
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\save dart.exe
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\soap base.dat
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\soap base.exe
   C:\DOCUME~1\Laurie\APPLIC~1\proxyb~1
   C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\proxyb~1
   C:\DOCUME~1\LAURIE~1.STE\Cookies\laurie@fr.thepimps.bigpoint[2].txt
   C:\DOCUME~1\LAURIE~1.STE\Cookies\laurie@partypoker[2].txt
   C:\WINDOWS\Tasks\A9440CD3918F8187.job
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
   "meet great active lies"="C:\Documents and Settings\All Users\Application Data\soft chic meet great\soap base.exe"

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-01-16 15:57:59
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:1][D:0]-> C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp
   [F:30][D:0]-> C:\DOCUME~1\LAURIE~1.STE\Cookies
   [F:580][D:4]-> C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 16/01/2009|15:59 - Option : [1]

   --------------------\  Fin du rapport a 15:59:08

V-X · Answer

Re,

&#x25B6 Relance Lop S&D

&#x25B6 Choisis cette fois ci l'Option 2 ( Suppression )

&#x25B6 Ne ferme pas la fenêtre lors de la suppression !

&#x25B6 Poste le rapport généré ( C:\lopR.txt )

( Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet Fichier,

Nouvelle tâche, tape explorer.exe et valide )

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

julieee · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free :               Intel(R) Pentium(R) 4 CPU 2.93GHz )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : laurie ( Administrator )
   BOOT : Normal boot
   Antivirus : Panda Antivirus Pro 2009 8.00.00 (Not Activated)
   C:\ (Local Disk) - NTFS - Total:126 Go (Free:91 Go)
   H:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 16/01/2009|16:02 )


   \\\\\\\\\\\\\\\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\Admin Move.exe
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\save dart.exe
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\soap base.dat
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great\soap base.exe
   Supprime! - C:\DOCUME~1\LAURIE~1.STE\Cookies\laurie@fr.thepimps.bigpoint[2].txt
   Supprime! - C:\DOCUME~1\LAURIE~1.STE\Cookies\laurie@partypoker[2].txt
   Supprime! - C:\WINDOWS\Tasks\A9440CD3918F8187.job 
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\soft chic meet great
   Supprime! - C:\DOCUME~1\Laurie\APPLIC~1\proxyb~1
   Supprime! - C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\proxyb~1
 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [12/09/2008|17:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

   [21/05/2008|05:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{B7A015B7-4802-4678-8CEC-700380BA9AFD}
   [30/05/2008|12:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [03/05/2008|18:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [02/09/2008|18:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [02/09/2008|18:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [21/05/2008|14:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
   [03/05/2008|18:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [28/05/2008|14:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
   [03/05/2008|18:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [21/05/2008|05:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ma-config.com
   [15/01/2009|14:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
   [19/09/2008|10:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [15/01/2009|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
   [13/09/2008|10:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panda Security
   [10/11/2008|16:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Panda Software
   [03/05/2008|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\sentinel
   [15/08/2008|10:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
   [20/05/2008|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [07/12/2007|13:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller
   [12/09/2008|17:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [03/05/2008|17:07] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [03/12/2008|13:40] C:\DOCUME~1\INVIT~1\APPLIC~1\Adobe
   [21/11/2008|15:59] C:\DOCUME~1\INVIT~1\APPLIC~1\Azureus
   [02/08/2008|16:06] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [19/11/2008|13:27] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [29/11/2008|18:18] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [19/11/2008|13:26] C:\DOCUME~1\INVIT~1\APPLIC~1\Mozilla
   [19/11/2008|14:34] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun


   [07/05/2008|19:50] C:\DOCUME~1\Laurie\APPLIC~1\Adobe
   [02/06/2008|18:25] C:\DOCUME~1\Laurie\APPLIC~1\Ahead
   [02/06/2008|13:26] C:\DOCUME~1\Laurie\APPLIC~1\Azureus
   [31/05/2008|20:15] C:\DOCUME~1\Laurie\APPLIC~1\DivX
   [04/05/2008|15:58] C:\DOCUME~1\Laurie\APPLIC~1\Google
   [04/05/2008|15:54] C:\DOCUME~1\Laurie\APPLIC~1\Identities
   [07/05/2008|19:52] C:\DOCUME~1\Laurie\APPLIC~1\Macromedia
   [01/06/2008|17:47] C:\DOCUME~1\Laurie\APPLIC~1\Microsoft
   [24/05/2008|11:20] C:\DOCUME~1\Laurie\APPLIC~1\Mozilla
   [04/05/2008|16:28] C:\DOCUME~1\Laurie\APPLIC~1\Windows Live Writer
   [25/05/2008|18:03] C:\DOCUME~1\Laurie\APPLIC~1\WinRAR

   [10/09/2008|11:47] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Adobe
   [11/12/2008|17:46] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Ahead
   [22/12/2008|16:35] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Azureus
   [01/08/2008|16:35] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Google
   [01/08/2008|16:27] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Identities
   [09/08/2008|14:04] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Macromedia
   [15/01/2009|14:33] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Malwarebytes
   [05/11/2008|16:05] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Microsoft
   [18/11/2008|17:09] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Mozilla
   [07/11/2008|17:42] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\OpenOffice.org2
   [17/09/2008|10:25] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\Sun
   [18/09/2008|13:25] C:\DOCUME~1\LAURIE~1.STE\APPLIC~1\WinRAR

   [21/05/2008|14:50] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [03/05/2008|17:10] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [10/12/2008 12:38][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [16/01/2009 15:48][--ah-----] C:\WINDOWS	asks\SA.DAT
   [02/03/2006 13:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [30/05/2008|12:24] C:\Program Files\Adobe
   [02/09/2008|18:01] C:\Program Files\Apple Software Update
   [18/09/2008|12:06] C:\Program Files\AskSBar
   [03/05/2008|19:22] C:\Program Files\ASUSTeK
   [12/12/2008|15:39] C:\Program Files\Azureus
   [02/09/2008|18:03] C:\Program Files\Bonjour
   [12/09/2008|16:11] C:\Program Files\CCleaner
   [07/05/2008|12:32] C:\Program Files\C-Media
   [03/05/2008|17:04] C:\Program Files\ComPlus Applications
   [03/05/2008|18:03] C:\Program Files\CyberLink
   [31/05/2008|19:51] C:\Program Files\DivX
   [16/01/2009|15:24] C:\Program Files\Fichiers communs
   [03/05/2008|19:17] C:\Program Files\Google
   [11/12/2008|16:31] C:\Program Files\Hewlett-Packard
   [07/05/2008|11:59] C:\Program Files\HP
   [15/01/2009|17:50] C:\Program Files\InstallShield Installation Information
   [02/09/2008|18:02] C:\Program Files\Internet Explorer
   [01/08/2008|15:49] C:\Program Files\Java
   [01/08/2008|15:40] C:\Program Files\JavaScript Maker
   [03/05/2008|18:16] C:\Program Files\K-Lite Codec Pack
   [14/10/2008|09:24] C:\Program Files\Logitech
   [21/05/2008|05:15] C:\Program Files\ma-config.com
   [15/01/2009|14:35] C:\Program Files\Malwarebytes' Anti-Malware
   [14/08/2008|11:08] C:\Program Files\Messenger
   [07/12/2007|13:19] C:\Program Files\Messenger Plus! Live
   [19/09/2008|10:55] C:\Program Files\Microsoft ActiveSync
   [03/05/2008|17:07] C:\Program Files\microsoft frontpage
   [19/09/2008|10:52] C:\Program Files\Microsoft Office
   [19/08/2008|14:49] C:\Program Files\Microsoft Silverlight
   [04/05/2008|16:24] C:\Program Files\Microsoft SQL Server Compact Edition
   [19/09/2008|10:51] C:\Program Files\Microsoft.NET
   [20/05/2008|12:07] C:\Program Files\Movie Maker
   [16/01/2009|15:52] C:\Program Files\Mozilla Firefox
   [26/06/2008|16:46] C:\Program Files\MSECache
   [28/08/2008|12:23] C:\Program Files\MSN
   [03/05/2008|17:03] C:\Program Files\MSN Gaming Zone
   [10/12/2008|13:31] C:\Program Files\Navilog1
   [21/05/2008|05:03] C:\Program Files\NETGEAR GA511 Adapter
   [20/05/2008|12:02] C:\Program Files\NetMeeting
   [31/07/2008|10:56] C:\Program Files\Neuf
   [03/05/2008|17:04] C:\Program Files\Online Services
   [20/05/2008|12:02] C:\Program Files\Outlook Express
   [13/09/2008|10:26] C:\Program Files\Panda Security
   [11/12/2008|16:02] C:\Program Files\PhotoFiltre
   [02/06/2008|17:58] C:\Program Files\Pvm
   [15/01/2009|14:13] C:\Program Files\QUAD Utilities
   [21/05/2008|05:04] C:\Program Files\Realtek
   [03/05/2008|17:06] C:\Program Files\Services en ligne
   [21/05/2008|04:59] C:\Program Files\sisagp
   [15/08/2008|10:10] C:\Program Files\TomTom HOME 2
   [10/12/2008|13:37] C:\Program Files\Trend Micro
   [03/05/2008|17:14] C:\Program Files\Uninstall Information
   [11/12/2008|16:33] C:\Program Files\Windows Live
   [14/11/2008|11:02] C:\Program Files\Windows Live Toolbar
   [20/05/2008|12:43] C:\Program Files\Windows Media Connect 2
   [28/08/2008|09:56] C:\Program Files\Windows Media Player
   [20/05/2008|12:02] C:\Program Files\Windows NT
   [03/05/2008|17:06] C:\Program Files\WindowsUpdate
   [07/05/2008|11:27] C:\Program Files\WinRAR
   [03/05/2008|17:07] C:\Program Files\xerox
   [12/09/2008|16:11] C:\Program Files\Yahoo!

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [30/05/2008|12:24] C:\Program Files\Fichiers communs\Adobe
   [19/09/2008|10:54] C:\Program Files\Fichiers communs\DESIGNER
   [26/06/2008|13:29] C:\Program Files\Fichiers communs\Hewlett-Packard
   [03/05/2008|19:20] C:\Program Files\Fichiers communs\InstallShield
   [03/05/2008|17:35] C:\Program Files\Fichiers communs\Java
   [02/06/2008|19:39] C:\Program Files\Fichiers communs\Logitech
   [19/09/2008|10:55] C:\Program Files\Fichiers communs\Microsoft Shared
   [03/05/2008|17:05] C:\Program Files\Fichiers communs\MSSoap
   [03/05/2008|18:56] C:\Program Files\Fichiers communs\ODBC
   [13/09/2008|09:50] C:\Program Files\Fichiers communs\Panda Security
   [12/09/2008|17:16] C:\Program Files\Fichiers communs\Panda Software
   [03/05/2008|17:05] C:\Program Files\Fichiers communs\Services
   [03/05/2008|18:56] C:\Program Files\Fichiers communs\SpeechEngines
   [19/09/2008|10:51] C:\Program Files\Fichiers communs\System
   [04/05/2008|16:04] C:\Program Files\Fichiers communs\WindowsLiveInstaller

   --------------------\  Process

   ( 37 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-01-16 16:04:34
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:1][D:0]-> C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp
   [F:31][D:0]-> C:\DOCUME~1\LAURIE~1.STE\Cookies
   [F:617][D:4]-> C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 16/01/2009|15:59 - Option : [1]
   2 - "C:\Lop SD\LopR_2.txt" - 16/01/2009|16:05 - Option : [2]

   --------------------\  Fin du rapport a 16:05:23

V-X · Answer

Re,

Redémarre ton pc normalement et refait un rapport avec RSIT.

Comment va le pc maintenant.

julieee · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by laurie at 2009-01-16 16:14:03
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 94 GB (72%) free of 130 GB
Total RAM: 510 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:14:09, on 16/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApvxdWin.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\RSIT(2).exe
C:\Program Files\Trend Micro\HijackThis\laurie.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: wlpqjx.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe

V-X · Answer

Re,

Refait un scan rapide avec malwarebyte.

merci

julieee · Answer

c'est très long !

V-X · Answer

Re,

Tu connais pas le dictons ou on dit:

"plus c long,plus c bon"...!!

Il faut en refaire un pour être sur que c bon et ensuite un autres scan en ligne et je pense que ce seras bon.

julieee · Answer

Oui c'est sur mais hier il a mis 8 heures j'espère que ce sera plus rapide?

V-X · Answer

Re,

OUi en rapide il mettra 4 heures.

LOL

julieee · Answer

c vrai pke je v devoir partir ?
je devrai faire quoi après?

V-X · Answer

Re,

On verra en fonction de malwarebyte.

julieee · Answer

En tout cas merci j'espere te retrouver quand ce sera terminer sinon je suis mal avc tt ces programmes.

V-X · Answer

Re,

Pas de problème.


A++

julieee · Answer

Malwarebytes' Anti-Malware 1.33
Version de la base de données: 1654
Windows 5.1.2600 Service Pack 3

16/01/2009 17:07:04
mbam-log-2009-01-16 (17-07-04).txt

Type de recherche: Examen rapide
Eléments examinés: 63745
Temps écoulé: 43 minute(s), 38 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

V-X · Answer

Re, OKI. Fait ce qui suit maintenant: > Fais un scan en ligne avec Kaspersky : Kaspersky N.B. : Le scan ne marche que sous Internet Explorer. - Commence par connecter tout ton matériel de stockage à ton PC (clés USB, DD amovible...). Allume les si necessaire. - Sous Démonstration en ligne, on t'explique la marche à suivre, et pour lancer le scan il faut sélectionner < Exécuter l'analyse en ligne >. - On va te demander de télécharger un contrôle active x, accepte . - Dans le menu < Choisissez la cible de l'analyse >, sélectionne < Poste de travail >. Le scan va commencer. - Poste le rapport qui sera généré stp. (clique sur puis sauvegarde-le sur ton bureau en choisissant "fichier texte (*.txt)" pour l'extension). S'il y a un problème, assure toi que les contrôles active x sont bien configurés dans les options internet comme décrit sur ce lien : clic ici Rappel : le scan est à faire sous Internet Explorer Tuto ici si problème NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne. Pour le rapport Kaspersky il faut que tu choisisses "Afficher le rapport" puis que tu l'enregistres sur ton bureau sous forme de fichier texte (type de fichier "tous les fichiers").

julieee · Answer

je le trouve ou dans le site? scan en ligne?

julieee · Answer

dsl je l'ai trouvé

julieee · Answer

Ca n'a pas l'aire de fonctionner kaspersky?

V-X · Answer

Re,

Regarde la =>http://www.vista-xp.fr/forum/topic109.html

julieee · Answer

Bonjour,

Je suis en train d'analyser avec kaspersky  est tu là V-X?

V-X · Answer

Re,

Oui j'attends le rapport de kas..

julieee · Answer

Ou ce trouve le rapport ?

V-X · Answer

Re,

- Poste le rapport qui sera généré stp. (clique sur <enregistrer le rapport> puis sauvegarde-le sur ton bureau en choisissant "fichier texte (*.txt)" pour l'extension). 

Tu la pas enregistrer ?

julieee · Answer

Je ne vois pas enregistrer il me marque le nombre de fichier infecté le nombre de virus et de dossier analysé mais c tout

V-X · Answer

Re,

Poste le .

merci

julieee · Answer

Je sais pas si c'est qu'elle est trop longue mais je n'arrive pas a la faire apparaitre ici l'analyse?

julieee · Answer

Ca c'est que le debut elle est vraiment très très longue!


-------------------------------------------------------------------------------
 KASPERSKY ON-LINE SCANNER REPORT
 Wednesday, January 21, 2009 2:37:40 PM
 Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
 Kaspersky On-line Scanner version : 5.0.84.2
 Dernière mise à jour de la base antivirus Kaspersky : 21/01/2009
 Enregistrements dans la base antivirus Kaspersky : 1489600
-------------------------------------------------------------------------------

Paramètres d'analyse:
	Analyser avec la base antivirus suivante: standard
	Analyser les archives: vrai
	Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
	C:\
	H:\

Statistiques de l'analyse:
	Total d'objets analysés: 108523
	Nombre de virus trouvés: 10
	Nombre d'objets infectés: 288 / 0
	Nombre d'objets suspects: 0
	Durée de l'analyse: 01:22:02

julieee · Answer

C'est encore moi je pense que vous devez être occupé je doit partir pouvez vous me donner les instruction pour la prochaine fois que je me connecte parceque j'ai encore les programmes je vois qu'il y a encore des virus.
MERCI pour toute votre aide, j'ai encore besoin de vous alors ne m'oublié pas svp.

V-X · Answer

Re,

Dans le menu Démarrer, clique droit sur l'icône Poste de travail.
Dans le menu contextuel qui s'affiche, clique sur Propriétés .
Dans l'onglet Restauration du système de la fenêtre qui suit, coche la
case Désactiver la Restauration du système sur tous les lecteurs, clique sur
Appliquer et, quand un message te le demande, confirme la désactivation.
Après quelques secondes d'attente (ou après avoir redémarré le PC), réactive la
Restauration du système en suivant la même procédure que précédemment, mais,
cette fois, en décochant la case Désactiver la Restauration du système sur
tous les lecteurs. Clique sur OK. 

Et recommence le scan de kaspersky et poste moi le rapport en entier.

julieee · Answer

-------------------------------------------------------------------------------
 KASPERSKY ON-LINE SCANNER REPORT
 Thursday, January 22, 2009 4:24:26 PM
 Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
 Kaspersky On-line Scanner version : 5.0.84.2
 Dernière mise à jour de la base antivirus Kaspersky : 22/01/2009
 Enregistrements dans la base antivirus Kaspersky : 1496517
-------------------------------------------------------------------------------

Paramètres d'analyse:
	Analyser avec la base antivirus suivante: standard
	Analyser les archives: vrai
	Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
	C:\
	H:\

Statistiques de l'analyse:
	Total d'objets analysés: 96791
	Nombre de virus trouvés: 1
	Nombre d'objets infectés: 3 / 0
	Nombre d'objets suspects: 0
	Durée de l'analyse: 01:30:59




Il est encore très longt est si je le poste en entier ca rentre pas comment puis je faire?

V-X · Answer

Re,

Poste le en deux ou trois fois sur le forum.

julieee · Answer

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Documents and Settings\All Users\Application Data\Panda Security\Panda Antivirus Pro 2009\asyncq.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\All Users\Application Data\Panda Security\Panda Antivirus Pro 2009\msje8tp.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Adobe\Acrobat\8.0\AdobeCMapFnt08.lst	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Adobe\Acrobat\8.0\AdobeSysFnt08.lst	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Adobe\Acrobat\8.0\JavaScripts\glob.js	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Adobe\Acrobat\8.0\JavaScripts\glob.settings.js	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Adobe\Acrobat\8.0\Synchronizer\adobesynchronizersu80	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Adobe\Acrobat\8.0\Synchronizer\metadata\Synchronizer80	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Adobe\Acrobat\8.0\UserCache.bin	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Ahead\Nero Burning ROM\UserImages.bmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Ahead\NeroShowTime.bmk	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Ahead\NeroVision\Direct3D.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Apple Computer\iTunes\CD Info.cidb	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Apple Computer\iTunes\iTunesPrefs.xml	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\.certs	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\.keystore	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\.lock	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\08217482244A3885228A3AF58A94957F6FEEE884.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\08217482244A3885228A3AF58A94957F6FEEE884.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\0CE839C1BBDEE4508B0CF4E297C16FB2C3DDFE91.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\0CE839C1BBDEE4508B0CF4E297C16FB2C3DDFE91.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\0E3FE64ADEDE36E4061E3BD58920040B33F33131.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\0E3FE64ADEDE36E4061E3BD58920040B33F33131.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\3EC4D48D8D3FE0740C0A789E07D68513811444AF.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\3EC4D48D8D3FE0740C0A789E07D68513811444AF.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\53C2A27C9A1CF895E70EB650F9C089A65748B6F2.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\53C2A27C9A1CF895E70EB650F9C089A65748B6F2.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\5EAA7AE54B612B05385FA1286F6510D7234F3F79.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\5EAA7AE54B612B05385FA1286F6510D7234F3F79.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\754EB8A5A79E7FB67490AFDA2660F6E6A4D6D792.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\754EB8A5A79E7FB67490AFDA2660F6E6A4D6D792.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\7574E3AA8E1492228AAEAE24C2A5A1FA0E399533.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\7574E3AA8E1492228AAEAE24C2A5A1FA0E399533.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\960A9376D0143CA5F5E09355B95EA8118F9A417C.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\960A9376D0143CA5F5E09355B95EA8118F9A417C.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\A070FEEE7139D14CDEBBDB50DE77F6A3A2EBAD11.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\A070FEEE7139D14CDEBBDB50DE77F6A3A2EBAD11.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\B01A00349FEF663B43F7A1F0ACCE3694722939F2.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\B01A00349FEF663B43F7A1F0ACCE3694722939F2.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\B2D19038E60ADB72B1A70015F6DE42935DA5873F.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\B2D19038E60ADB72B1A70015F6DE42935DA5873F.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\BF11DA51DC2F76C82DF4A999C3B1E98628366870.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\BF11DA51DC2F76C82DF4A999C3B1E98628366870.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\ED52FD8EC68E9E99E56E832A3C381BDEAA547899.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\ED52FD8EC68E9E99E56E832A3C381BDEAA547899.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\F2F3CEE6D6D931751C58D181FD4CAA50191B5231.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\F2F3CEE6D6D931751C58D181FD4CAA50191B5231.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\FD617769E3DBC30B53980752E7E338618D10A144.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\active\FD617769E3DBC30B53980752E7E338618D10A144.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\azureus.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\azureus.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\azureus.statistics	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\azureus.statistics.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\banips.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\banips.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\dht\addresses.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\dht\contacts.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\dht\diverse.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\dht\general.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\dht\version.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\downloads.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\downloads.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\friends.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\friends.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\ipfilter.cache	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\alerts_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\AutoSpeedSearchHistory_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\AutoSpeed_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\AutoSpeed_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\debug_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\debug_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\Friends_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\MetaSearch_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\NetStatus_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_alerts_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_AutoSpeedSearchHistory_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_AutoSpeed_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_AutoSpeed_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_debug_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_debug_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_Friends_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_MetaSearch_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_NetStatus_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_seltrace_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_SpeedMan_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_SpeedMan_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_thread_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_thread_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_v3.ads_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_v3.CMsgr_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_v3.emp_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_v3.Friends_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_v3.MD_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_v3.PMsgr_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\save\1219310296421_v3.Stream_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\seltrace_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\SpeedMan_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\SpeedMan_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs	hread_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs	hread_2.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\v3.ads_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\v3.CMsgr_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\v3.emp_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\v3.Friends_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\v3.MD_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\v3.PMsgr_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\logs\v3.Stream_1.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\metasearch.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\metasearch.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus
et\pm_15557.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus
et\pm_5410.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus
et\pm_default.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	ables.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	ables.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11343.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11344.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11345.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11346.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11347.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11348.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11349.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11350.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11355.tmp	L'objet est verrouillé	ignoré

julieee · Answer

C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11356.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	mp\AZU11357.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\-What_Happens_in_Vegas[FRENCH][DVDRIP_XVID_MP3][Mat@bad69]-[www.search-torrent.com].torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\1011.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\1082.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\2099.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\2105.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\2110.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\2264.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\83848.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\Alanis_Morissette_-_Flavors_Of_Entanglement_[mp3-320-2008].4201664.TPB.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\AZU11351.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\AZU38883.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\AZU42554.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\AZU42556.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\AZU49437.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\AZU54480.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\AZU54486.tmp	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\Bob_Marley_Discography.3724643.TPB.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\moriarty_-_gee_whiz_but_this_is_a_lonesome_town_flac[www.btmon.com].torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\Oasis - Live in Tokyo - 2006-www.trackertomia.com - by locuac.rar [mininova].torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\Pulp-Fiction-ENGLISH-FRENCH-DVDRip-h264+AAC-LoKi-mkv-[www.search-torrent.com].torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\Radiohead-In_Rainbows-(DISCBOX)-2CD-2007 [mininova].torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\Requiem_for_a_Dream_-_FR.avi.3344511.TPB.torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	orrents\Teeth-VOSTFR-DvDrip-Xvid-[www.search-torrent.com].torrent	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	racker.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus	racker.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\unsentdata.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\unsentdata.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\update.log	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\update.properties	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\updates\inst_1\install.act	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\v3.Friends.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\v3.Friends.dat.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\VuzeActivities.config	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Azureus\VuzeActivities.config.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\desktop.ini	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Google\Local Search History\google%2Eweb.w	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Hewlett-Packard\Digital Imaging\devices.xml	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Hewlett-Packard\Digital Imaging\settings.xml	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\affiliatevista.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\aka.fotovista.com\pixLogOp_855_fr.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\bannerfarm.ace.advertising.com\ft2262-17.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\cdn.lookery.com\f\pub\lcid.swf\com.lookery.LCID.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\ds.serving-sys.com\0806EABattlefield.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\embed.redtube.com\player\xmoov.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\embed.redtube.com\player\xmoov_redtube_original.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\eveiletjeux.com\CataInteractif\Catalogue_Graine\v320.swf\www.catalogue-virtuel.com.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\flash.quantserve.com\com.quantserve.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\fr.42.video.clickinvideo.net\com.jeroenwijerin.players.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\fr.46.video.clickinvideo.net\com.jeroenwijerin.players.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\fr.49.video.clickinvideo.net\com.jeroenwijerin.players.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\fr.youtube.com\soundData.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\fr.youtube.com\videostats.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\gdata.youtube.com\soundData.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\gdata.youtube.com\videostats.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\images.video.msn.com\flash\soapbox1_1.swf\CountryCode.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\images.video.msn.com\s_br.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\lads.myspace.com\videos\Main.swf\preferences.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\layouts1.lovemyflash.com\com.quantserve.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\lstatic.weborama.fr\ft2693-6.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\pan6.fotovista.com\pixmania\grafx\multipays\flashAS\Bann_580_100.swf\TestMovie_Config_Info.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73capp.persgroep.be\epg.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\s.ytimg.com\soundData.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\s.ytimg.com\videostats.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\secureinclude.ebaystatic.com\ebayLSO.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\slide.comatings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\wat.tv\images\v2.5\flash\player.swf\watPlayer.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.bigpoint.com\bpid\bpid.swf\bpid.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.cadeaux-poker.com\c2.swf\user_data.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.dailymotion.com\flash\dmplayer\dmplayer-fr.swf\dmplayer.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.pixmania.com\dev\gui_web\shopping\flashAS\Mac_180_150.swf\TestMovie_Config_Info.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.pornhub.com\videoplayer.swf\agriya_flv.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.pornhub.com\xmoov_flv\player\index.php\xmoov.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.pornhub.com\xmoov_flv\player\index.php\xmoov_younoob.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.sextube.si\com.jeroenwijerin.players.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.sextvx.com\com.jeroenwijerin.players.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.spreadshirt.net\s_br.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.xatech.com\chat.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.xvideos.com\sitevideos\flv_player_site_v3.swf\VolCookie.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.xvideos.com\sitevideos\flv_player_site_v4.swf\VolCookie.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.youtube.com\soundData.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\#SharedObjects\AZSK9D73\www.youtube.com\videostats.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#affiliatevista.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aka.fotovista.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bannerfarm.ace.advertising.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.lookery.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ds.serving-sys.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#embed.redtube.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#eveiletjeux.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.quantserve.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.42.video.clickinvideo.net\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.46.video.clickinvideo.net\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.49.video.clickinvideo.net\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#fr.youtube.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gdata.youtube.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.video.msn.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lads.myspace.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#layouts1.lovemyflash.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lstatic.weborama.fr\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pagead2.googlesyndication.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pan6.fotovista.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#rcapp.persgroep.be\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#slide.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wat.tv\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.bigpoint.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.cadeaux-poker.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dailymotion.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.france24.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pixmania.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pornhub.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.sextube.si\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.sextvx.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.spreadshirt.net\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.xatech.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.xvideos.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Media Player Classic\default.mpcpl	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Address Book\julie.wab	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Address Book\julie.wab~	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\0897206B35294097C3660E62BCDB227C	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\090F20467957B5DB76D35949C905F503	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\2BBA88436E92E1ABCED8E68D74DC5B38	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\3130B1871A126520A8C47861EFE3ED4D	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\3C19F8F5C2A69BEC912EF5B953293907	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\5C8DDA36D60247082B142836039F4636	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\903E3CF4DB61C46D2F6070EBE103A37F	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\B2F4B1D39F0694C6CDB433BC3CCF1418	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\B69D763EB21649DA26F20618312DEE70	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\CFC456E7E410D69E2C6F3E2DB75C7DB3	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\D9446DF6FD9BABE04CC252D4F0FB3D01	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\DC2135CED98D8A4D7C0CEE202BB0B810	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\E891C648621A40AC7F773694A17FE76C	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\F059616598EE3D5C45FB29443ED294E1	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\Content\F5A17C00E427F919C4A49EEF5AD0EE53	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\0897206B35294097C3660E62BCDB227C	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\090F20467957B5DB76D35949C905F503	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BBA88436E92E1ABCED8E68D74DC5B38	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\3130B1871A126520A8C47861EFE3ED4D	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C19F8F5C2A69BEC912EF5B953293907	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C8DDA36D60247082B142836039F4636	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\903E3CF4DB61C46D2F6070EBE103A37F	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\B2F4B1D39F0694C6CDB433BC3CCF1418	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\B69D763EB21649DA26F20618312DEE70	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\CFC456E7E410D69E2C6F3E2DB75C7DB3	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\D9446DF6FD9BABE04CC252D4F0FB3D01	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\DC2135CED98D8A4D7C0CEE202BB0B810	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\E891C648621A40AC7F773694A17FE76C	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\F059616598EE3D5C45FB29443ED294E1	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\CryptnetUrlCache\MetaData\F5A17C00E427F919C4A49EEF5AD0EE53	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\02948cfb4ed32eab5a3d4880d35b181e_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\1514646871f7f362d15b7577bc3a394f_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\2285d6ad194675aee77adf61b4b428a4_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\50f33d189186efd79cc61848de9f2657_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\6b29ae44e85efac3c72ff4d1865d73f1_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\83aa4cc77f591dfc2374580bbd95f6ba_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\8d6f10874c05776101ed9397a893f438_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\b44dba5c97f69698be1af7705c38ea0a_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\c24c21ecf6bd473d6fd84df96a160b94_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\c6d2c4b64243d2332c181696b12196c4_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\d55ad8c263a0c4b54ada11abc47f1948_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\da3bca0f2ab2c791e9b3c3445c4bf3d5_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Crypto\RSA\S-1-5-21-527237240-1645522239-839522115-1004\e0255b5d079785a4c49042f5ef274947_44b2bf51-a020-49ad-912c-b1160cb3c827	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\HTML Help\hh.dat	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\IdentityCRL\PRODUCTION\ppcrlconfig.dll	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Installer\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}\1036.MST	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Installer\{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}\ARPPRODUCTICON.exe	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\brndlog.bak	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\brndlog.txt	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Desktop.htt	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\Bureau.scf	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\Démarrer Internet Explorer.lnk	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero Home Essentials SE.lnk	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\Panda Antivirus + Firewall 2008.lnk	L'objet est verrouillé	ignoré
C:\Documents and Settings\julie\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk	L'objet est verrouillé	ignoré

julieee · Answer

Je n'arrive pas a tout poster il est trés longt il fodré ke je le poste en 20 x

V-X · Answer

Re,

Envoi moi le fichier txt 

---> Uploader un fichier sur Mediafire :
? Rends-toi sur ce lien : https://www.mediafire.com/
? Clique en haut sur Upload files To Media fire. Choisis ensuite I want to upload without an account.
? Une fenêtre de ton explorateur windows va s'ouvrir. Navigue jusqu'au rapport que je te demande d'uploader, sélectionne-le puis clique sur ouvrir.
? Clique ensuite sur Upload.
? A droite de l'écran, choisis : upload to a new folder. Laisse le nom par défaut (= la date).
? Valide et laisse l'upload se faire.
? Clique sur View uploaded file et copie-moi l'url (= le lien) du nouvel onglet ou de la nouvelle fenêtre qui va s'ouvrir dans ton prochain message. Ainsi, je pourrais télécharger le rapport demandé.

julieee · Answer

https://www.mediafire.com/?sharekey=03336802faaacdd79bf8d6369220dcabc904cedf41d31be1ce018c8114394287

V-X · Answer

Re,

Télécharge toolscleaner sur ton Bureau : 

toolscleaner

* Double-clique sur ToolsCleaner2.exe et laisse le travailler 

* Clique sur Recherche et laisse le scan se terminer. 

* Clique sur Suppression pour finaliser. 

* Tu peux, si tu le souhaites, te servir des Options facultatives. 

* Clique sur Quitter, pour que le rapport puisse se créer. 

* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

julieee · Answer

[ Rapport ToolsCleaner version 2.3.0 (par A.Rothstein & dj QUIOU) ]

-->- Recherche: 

C:\Combofix.txt: trouvé !
C:\lopR.txt: trouvé !
C:\Lop SD: trouvé !
C:\Qoobox: trouvé !
C:\Rsit: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\LopSD.exe: trouvé !
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\Rsit.exe: trouvé !
C:\Program Files\Navilog1: trouvé !
C:\Program Files\Navilog1\Navilog1.bat: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !

---------------------------------
-->- Suppression: 

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\LopSD.exe: supprimé !
C:\Program Files\Navilog1\Navilog1.bat: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Combofix.txt: supprimé !
C:\lopR.txt: supprimé !
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\Rsit.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\Lop SD: supprimé !
C:\Qoobox: supprimé !
C:\Rsit: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Navilog1: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Fichiers temporaires nettoyés !
Corbeille vidée!

julieee · Answer

V-X ou est tu?
Maintenant je n'ai plus de son!
Super l'informatique....

V-X · Answer

Re,

Désinstalle les pilote son et réinstalle l'ai.

Passe sa aussi:

&#9654; Télécharge RegCleaner

&#9654; Une fois installé, double-clique sur son icône pour l'exécuter

&#9654; Dans la barre de menu, clique sur Options puis sélectionne Language => Choose the language

&#9654; recherche French.rlg et double-clique dessus pour appliquer la langue

&#9654; Clique ensuite sur Outils dans la barre de menu

&#9654; Sélectionne Nettoyage du registre => Nettoyeur de registre automatique

&#9654; RegCleaner va alors lancer le nettoyage automatiquement

&#9654; Coche ensuite les entrées invalides et clique sur Supprimer sélections => Terminer => Quitter 

Tutoriel REG-CLEANER

julieee · Answer

Bonjour VX,
Pour le son je ne sais pas comment desinstaller les pilotes ni les reinstaller mais apperement l'ordi ne detecte aucun pilote son depuis tout les scan?
Ensuite nous n'avons pas terminer de nettoyer l'ordi puisque j'ai des pub qui revienne et j'ai tjr tout les programmes que nous avions telechargé!!

V-X · Answer

Re,

Tu as supprimer les outils avec toolscleaner !!!

Ensuite refait un rapport avec sa:

&#x25B6 Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

&#x25B6 Double clique sur RSIT.exe pour lancer l'outil.

&#x25B6 Clique sur ' continue ' à l'écran Disclaimer.

&#x25B6 Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

&#x25B6 Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports séparément.
( log.txt & info.txt )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.

julieee · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by laurie at 2009-02-06 13:56:35
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 96 GB (74%) free of 130 GB
Total RAM: 510 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:57:37, on 06/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Azureus\Azureus.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Local Settings\Temporary Internet Files\Content.IE5\MKV0BW5K\RSIT[1].exe
C:\Program Files	rend micro\laurie.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [meet great active lies] C:\Documents and Settings\All Users\Application Data\soft chic meet great	hunk road.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: wlpqjx.dll
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe

julieee · Answer

info.txt logfile of random's system information tool 1.05 2009-02-06 13:57:40

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 9 ActiveX-->MsiExec.exe /X{685A56F8-75B6-44AD-B3DA-FB0A3266B47C}
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
Agere Systems PCI Soft Modem-->agrsmdel
Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Ask Toolbar-->rundll32 C:\PROGRA~1\AskSBar\bar\1.bin\AskSBar.dll,O 
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
Azureus Vuze-->C:\Program Files\Azureus\uninstall.exe
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
C-Media WDM Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
HijackThis 2.0.2-->"C:\Program Files	rend micro\HijackThis.exe" /uninstall
HP Product Detection-->MsiExec.exe /X{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}
hp psc 2170 series-->MsiExec.exe /X{93FB47FB-4FDF-4131-B5FD-7A37883868E7}
hp psc 2170 series-->rundll32 hpzcon07.dll,VendorJettison hp psc 2170 series
iTunes-->MsiExec.exe /I{EF6C4600-306D-4F6A-A119-C2A877D25B4A}
Java(TM) 6 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040}
Java(TM) 6 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160050}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
JavaScript Maker-->"C:\Program Files\JavaScript Maker\IsStub32.exe"  -f"C:\Program Files\JavaScript Maker\DeIsL1.isu"  -c"C:\Program Files\JavaScript Maker\_ISREG32.DLL"
Kaspersky Online Scanner-->C:\WINDOWS\system32\KASPER~1\KASPER~1\kavuninstall.exe
K-Lite Codec Pack 2.75 Full (Beta 3)-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe" -l0x40c 
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
Mozilla Firefox (3.0.5)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
NETGEAR GA511 Smart Wizard Utility-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{52CAD7C7-1E41-43FE-8613-AB9D79B2DBBC} 
Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
NVIDIA Drivers-->C:\WINDOWS\system32
vuninst.exe UninstallGUI
Panda Antivirus Pro 2009-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E55FB276-73C9-4776-AB53-BC028C0509ED}\SETUP.EXE" -l0x40c  -removeonly
Photo et imagerie HP 2.0 - All-in-One Pilote-->MsiExec.exe /X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
Photo et imagerie HP 2.0 - All-in-One-->MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1}
Photo et imagerie HP 2.0 - hp psc 2170 series-->C:\Program Files\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot
PhotoFiltre-->"C:\Program Files\PhotoFiltre\Uninst.exe"
PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe"  -uninstall
Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\setup.exe -runfromtemp -l0x040c -removeonly
Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update pour Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
SiSAGP driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC226AC9-0314-496C-BE6A-B6A132628466}\setup.exe" -l0x40c 
SiSRaidPackage-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{13D41D72-0284-4931-A261-F86F6565D4B4}\setup.exe" -l0x40c 
TomTom HOME-->C:\Program Files\TomTom HOME 2\Uninstall TomTom HOME.exe
VC_MergeModuleToMSI-->MsiExec.exe /I{900A92BA-19EF-4A34-86CF-7B6C85BDD971}
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe

======Security center information======

AV: Panda Antivirus Pro 2009

System event log

Computer Name: STEF-75DCECBE7F
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

Record Number: 10583
Source Name: Service Control Manager
Time Written: 20090115110403.000000+060
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 4201
Message: Le système a détecté que la carte réseau \DEVICE\TCPIP_{313A5C86-F2AD-4D27-A7AF-EDAB88765B08} était connectée au réseau,
et a lancé une opération normale sur la carte réseau.

Record Number: 10582
Source Name: Tcpip
Time Written: 20090115110332.000000+060
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 6005
Message: Le service d'Enregistrement d'événement a démarré.

Record Number: 10581
Source Name: EventLog
Time Written: 20090115110311.000000+060
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 10580
Source Name: EventLog
Time Written: 20090115110311.000000+060
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 6006
Message: Le service d'Enregistrement d'événement a été arrêté.

Record Number: 10579
Source Name: EventLog
Time Written: 20090115094253.000000+060
Event Type: Informations
User: 

Application event log

Computer Name: STEF-75DCECBE7F
Event Code: 1
Message: 
Record Number: 2463
Source Name: Bonjour Service
Time Written: 20080904092843.000000+120
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 4000
Message: The Panda Anti-virus Service has started successfully.

Record Number: 2462
Source Name: Sentinel
Time Written: 20080904092827.000000+120
Event Type: Informations
User: 

Computer Name: STEF-75DCECBE7F
Event Code: 1015
Message: La connexion au serveur est impossible. Erreur : 0x8007041D

Record Number: 2461
Source Name: MsiInstaller
Time Written: 20080903195745.000000+120
Event Type: Avertissement
User: STEF-75DCECBE7F\julie

Computer Name: STEF-75DCECBE7F
Event Code: 11728
Message: Produit : hp psc 2170 series -- La configuration s'est terminée correctement.

Record Number: 2460
Source Name: MsiInstaller
Time Written: 20080903194533.000000+120
Event Type: Informations
User: STEF-75DCECBE7F\RiCaRdoo

Computer Name: STEF-75DCECBE7F
Event Code: 0
Message: 
Record Number: 2459
Source Name: NMIndexingService
Time Written: 20080903194416.000000+120
Event Type: Informations
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Panda Security\Panda Antivirus Pro 2009
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 1, GenuineIntel
"PROCESSOR_REVISION"=0401
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

V-X · Answer

Re,

---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
http://oldtimer.geekstogo.com/OTMoveIt3.exe

---> Double-clique sur OTMoveIt3.exe afin de le lancer.

---> Copie (Ctrl+C) le texte suivant en gras ci-dessous :

:processes
explorer.exe

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"meet great active lies"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

:files
c:\documents and settings\all users\application data\soft chic meet great	hunk road.exe

:commands
[purity]
[emptytemp]
[reboot] 



---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.

---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

julieee · Answer

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\meet great active lies deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\"AppInit_DLLs"|"" /E : value set successfully!
========== FILES ==========
c:\documents and settings\all users\application data\soft chic meet great	hunk road.exe moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp\~DF623C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp\~DFA5A0.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp\~DFAD56.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS	emp\e3320f8c78c83ce292677a2e1e73e807PSK_PLUGINS_1 scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS	emp\Perflib_Perfdata_f80.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
 
OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02062009_150731

Files moved on Reboot...
File C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp\~DF623C.tmp not found!
File C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp\~DFA5A0.tmp not found!
File C:\DOCUME~1\LAURIE~1.STE\LOCALS~1\Temp\~DFAD56.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
C:\WINDOWS	emp\e3320f8c78c83ce292677a2e1e73e807PSK_PLUGINS_1 moved successfully.
File C:\WINDOWS	emp\Perflib_Perfdata_f80.dat not found!

V-X · Answer

Re,

Redémarre ton pc et refait un log avec RSIT.

merci

julieee · Answer

Logfile of random's system information tool 1.05 (written by random/random)
Run by laurie at 2009-02-06 15:42:45
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 96 GB (74%) free of 130 GB
Total RAM: 510 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:42:56, on 06/02/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2009\WebProxy.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\AVENGINE.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApvxdWin.exe
C:\Program Files\Panda Security\Panda Antivirus Pro 2009\ApvxdWin.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\laurie.STEF-75DCECBE7F\Bureau\RSIT(2).exe
C:\Program Files	rend micro\laurie.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2009\Inicio.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Security, S.L. - C:\Program Files\Fichiers communs\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\pavsrv51.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\PskSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2009\TPSrv.exe

V-X · Answer

Re,

Ok maintenant, Fais un scan en ligne BitDefender (uniquement sous Internet Explorer) : https://www.bitdefender.com/toolbox/

Poste le rapport complet ici quand ce sera terminé.

V-X · Answer

Re,

Ensuite tu feras sa:

Télécharger Lopxp : (by Moe)

&#x25B6 Double-cliquer sur Lopxpsetup.exe pour lancer l'installation

&#x25B6 Au menu, choisir l'option 1

&#x25B6 Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !

&#x25B6 Le contenu du rapport est situé dans : C:\Programfiles\Lopxp\cid.txt

PB PUB + MISE A JOUR

68 réponses

Discussions similaires