Virus ?

Salut hackman !


merci pur ta reponse , je vais faire ce que tu m'as dit et je le telechargerai sur une cle usb et la reponse sa sera pour demain parceque le pc qui a ce problème est celui de mon bureau

re...


ok je le ferai merci @ demain

re ;


ok merci je v'ai essayé @+++

Re...


ça n'a pas marcher , toujours le même problème

@+++

bonjour hackman


voilà les rapports




############################## [ FindyKill V4.716 ]

# User : rza (Administrateurs) # RI-8FE4E3DEDF50
# Update on 10/02/09 by Chiquitine29
# Start at: 09:26:54 | 17/02/2009

# Intel(R) Pentium(R) D CPU 3.00GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 6.0.2900.2180
# Windows Firewall Status : Enabled
# AV : Avira AntiVir PersonalEdition Classic 8.0.1.30 [ Enabled | (!) Outdated ]

# A:\ # Lecteur de disquettes 3 ? pouces
# C:\ # Disque fixe local # NTFS
# D:\ # Disque fixe local # NTFS
# E:\ # Disque fixe local # NTFS
# F:\ # Disque fixe local # NTFS
# G:\ # Disque CD-ROM
# H:\ # Disque amovible (MAMOUD) # FAT32

############################## [ Processus actifs ]

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Athan\Athan.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection\EDICT.EXE
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SM1MT2.EXE
C:\Documents and Settings\rza\Application Data\Map Maker\MMManager.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\PROGRA~1\Systran\4_0\Premium\SYSTRA~1.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Fichiers / Dossiers infectieux C:\ ]


################## [ C:\WINDOWS ]


################## [ C:\WINDOWS\Prefetch ]


################## [ C:\WINDOWS\system32 ]


################## [ C:\WINDOWS\system32\drivers ]


################## [ C:\Documents and Settings\rza\Application Data ]


################## [ C:\DOCUME~1\rza\LOCALS~1\Temp ]


################## [ Registre / Clés infectieuses ]



################## [ Etat / Services ]

# Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio # Type de démarrage = 3

Ip6Fw # Type de démarrage = 3

SharedAccess # Type de démarrage = 2

wuauserv # Type de démarrage = 2

wscsvc # Type de démarrage = 2


################## [ Recherche dans supports amovibles]

# presence des fichiers :


################## [ Registre / Mountpoint2 ]

# -> Not found !

################## [ ! Fin du rapport # FindyKill V4.716 ! ]

voilà le 2eme




-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
BIOS : Default System BIOS
USER : rza ( Not Administrator ! )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition Classic 8.0.1.30 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:29 Go (Free:15 Go)
D:\ (Local Disk) - NTFS - Total:29 Go (Free:29 Go)
E:\ (Local Disk) - NTFS - Total:29 Go (Free:29 Go)
F:\ (Local Disk) - NTFS - Total:23 Go (Free:23 Go)
G:\ (CD or DVD)
H:\ (USB) - FAT32 - Total:982 Mo (Free:0 Go)

"H:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 17/02/2009| 9:42 )
C:\WINDOWS\iun6002.exe

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\AskTBar\bar
Echec ! - C:\Program Files\AskTBar\SrchAstt
Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin
Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
Supprime! - C:\WINDOWS\iun6002.exe
Echec ! - C:\Program Files\AskTBar

-----------\\ DEUXIEME PASSAGE

Echec ! - C:\Program Files\AskTBar\SrchAstt
Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin
Echec ! - C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
Echec ! - C:\Program Files\AskTBar

-----------\\ Recherche de Fichiers / Dossiers ...

C:\Program Files\AskTBar
C:\Program Files\AskTBar\SrchAstt
C:\Program Files\AskTBar\SrchAstt\2.bin
C:\Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Start Page"="https://webshots.com/r/internal/start/client/RAND"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Start Page"="https://www.msn.com/fr-fr/"


--------------------\\ Recherche d'autres infections


Aucune autre infection trouvée !


1 - "H:\ToolBar SD\TB_1.txt" - 17/02/2009| 9:46 - Option : [2]

-----------\\ Fin du rapport a 9:46:57,01



ps: sa a marcher aujourd'hui je l'ai utiluser directement de la cle usb

salut



[b]SDFix: Version 1.240 [/b]
Run by rza on 17/02/2009 at 10:55

Microsoft Windows XP [version 5.1.2600]
Running From: C:\SDFix

[b]Checking Services [/b]:


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


[b]Checking Files [/b]:

Trojan Files Found:

C:\WINDOWS\system32\sysinfo.exe - Deleted





Removing Temp Files

[b]ADS Check [/b]:



[b]Final Check [/b]:

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-17 10:58:49
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Midi\Ports\Mappeur MIDI Microsoft [)mulé]]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Midi\Ports\Mappeur MIDI Microsoft [)mulé]\Out]
"DMPortGUID"=hex:de,76,c0,25,02,cc,8a,45,a2,e5,c7,ea,6b,5a,3a,b6
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Midi\Ports\Synth9. SW table de sons GS Mic [)mulé]]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Midi\Ports\Synth9. SW table de sons GS Mic [)mulé]\Out]
"DMPortGUID"=hex:73,ca,3c,7e,b5,04,77,4e,b5,4d,80,57,24,a8,5e,9f
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaProperties\PrivateProperties\Midi\Ports\Mappeur MIDI Microsoft [)mulé]]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaProperties\PrivateProperties\Midi\Ports\Mappeur MIDI Microsoft [)mulé]\Out]
"DMPortGUID"=hex:de,76,c0,25,02,cc,8a,45,a2,e5,c7,ea,6b,5a,3a,b6
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaProperties\PrivateProperties\Midi\Ports\Synth9. SW table de sons GS Mic [)mulé]]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\MediaProperties\PrivateProperties\Midi\Ports\Synth9. SW table de sons GS Mic [)mulé]\Out]
"DMPortGUID"=hex:73,ca,3c,7e,b5,04,77,4e,b5,4d,80,57,24,a8,5e,9f

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


[b]Remaining Services [/b]:




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"="C:\\WINDOWS\\system32\\usmt\\migwiz.exe:*:Enabled:Assistant Transfert de fichiers et de paramŠtres"
"C:\\Documents and Settings\\mamoud\\Local Settings\\Application Data\\Skype\\Phone\\Skype.exe"="C:\\Documents and Settings\\mamoud\\Local Settings\\Application Data\\Skype\\Phone\\Skype.exe:*:Disabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[b]Remaining Files [/b]:


File Backups: - C:\SDFix\backups\backups.zip

[b]Files with Hidden Attributes [/b]:

Tue 21 Mar 2006 26,112 A..H. --- "C:\Documents and Settings\rza\Mes documents\BONS\~WRL0947.tmp"
Sun 7 May 2006 448,512 A..H. --- "C:\Documents and Settings\rza\Mes documents\mise en stock\~WRL0841.tmp"
Sun 7 May 2006 441,344 A..H. --- "C:\Documents and Settings\rza\Mes documents\mise en stock\~WRL3517.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\RECYCLER\S-1-5-21-602162358-362288127-725345543-1008\Dc2\usinage 2008\~WRL0009.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\RECYCLER\S-1-5-21-602162358-362288127-725345543-1008\Dc2\usinage 2008\~WRL2819.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\RECYCLER\S-1-5-21-602162358-362288127-725345543-1008\Dc2\usinage 2008\~WRL2986.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\RECYCLER\S-1-5-21-602162358-362288127-725345543-1008\Dc2\usinage 2008\~WRL3652.tmp"
Tue 23 Oct 2007 3,350,528 A..H. --- "C:\Documents and Settings\mamoud\Application Data\U3\temp\Launchpad Removal.exe"
Tue 23 Oct 2007 3,350,528 A..H. --- "C:\Documents and Settings\rza\Application Data\U3\temp\Launchpad Removal.exe"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\SI MOUH\Mes documents\GESTION BOUHAMADOUCHE\usinage 2008\~WRL0009.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\SI MOUH\Mes documents\GESTION BOUHAMADOUCHE\usinage 2008\~WRL2819.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\SI MOUH\Mes documents\GESTION BOUHAMADOUCHE\usinage 2008\~WRL2986.tmp"
Sun 27 Jan 2008 21,504 A..H. --- "C:\Documents and Settings\SI MOUH\Mes documents\GESTION BOUHAMADOUCHE\usinage 2008\~WRL3652.tmp"
Sun 2 Dec 2007 21,504 A..H. --- "C:\Documents and Settings\rza\Mes documents\mes documents\GESTION BOUHAMADOUCHE\COMMENTAIRE MTSA 2007\~WRL0001.tmp"
Mon 3 Dec 2007 22,016 A..H. --- "C:\Documents and Settings\rza\Mes documents\mes documents\GESTION BOUHAMADOUCHE\COMMENTAIRE MTSA 2007\~WRL0231.tmp"
Sun 2 Dec 2007 21,504 A..H. --- "C:\Documents and Settings\rza\Mes documents\mes documents\Mes documents\GESTION BOUHAMADOUCHE\COMMENTAIRE MTSA 2007\~WRL0001.tmp"
Mon 3 Dec 2007 22,016 A..H. --- "C:\Documents and Settings\rza\Mes documents\mes documents\Mes documents\GESTION BOUHAMADOUCHE\COMMENTAIRE MTSA 2007\~WRL0231.tmp"

[b]Finished![/b]

Re...



le lecteur H C' est c'est ma clé USB le i je ne sais pas quoi


@+++

bonjour ,

j'ai pas pu glisser ce que tu m'as dit ; je l'ai copier et coller


========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder H:\1t6yxlxx.cmd not found.
File/Folder I:\bjj3iccf.com not found.
File/Folder H:\diox3j.com not found.
File/Folder I:\diox3j.com not found.
File/Folder H:\abk.bat not found.
File/Folder H:\rapcjb.cmd not found.
File/Folder H:\u.bat not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DF551F.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DF5A4A.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DF6B8C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DFF0EA.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02242009_080311

Files moved on Reboot...
File C:\DOCUME~1\rza\LOCALS~1\Temp\~DF551F.tmp not found!
C:\DOCUME~1\rza\LOCALS~1\Temp\~DF5A4A.tmp moved successfully.
File C:\DOCUME~1\rza\LOCALS~1\Temp\~DF6B8C.tmp not found!
C:\DOCUME~1\rza\LOCALS~1\Temp\~DFF0EA.tmp moved successfully.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.



@++

salut Hacckman;


Logfile of random's system information tool 1.05 (written by random/random)
Run by rza at 2009-02-24 14:59:31
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 16 GB (52%) free of 30 GB
Total RAM: 959 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:59:33, on 24/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Athan\Athan.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection\EDICT.EXE
C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Documents and Settings\rza\Application Data\Map Maker\MMManager.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\wuauclt.exe
H:\RSIT_1.exe
C:\Documents and Settings\rza\Mes documents\monjack\rza.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.webshots.com/r/internal/start/client/RAND
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BHO pour Compagnon Web Encarta - {955BE0B8-BC85-4CAF-856E-8E0D8B610560} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O3 - Toolbar: Systran40premi.IEPlugIn - {CFB25594-4D5F-11D6-AB7B-00B0D094B576} - C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll
O3 - Toolbar: Compagnon Web Encarta - {147D6308-0614-4112-89B1-31402F9B82C4} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Web Companion\2007\ENCWCBAR.DLL
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [E07FDXRC_1355250] "C:\Program Files\Microsoft Encarta\Microsoft Encarta 2007 - Collection\EDICT.EXE" -m
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: SunClock5.lnk = C:\Documents and Settings\rza\Application Data\Map Maker\MMManager.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe

Salut hackman,

pour ce qui concerne l'ouverture de mes DD , ils s'ouvrent normalement en cliquant dessus donc c'était ça mon problème et je crois qu'il est résolu je te remercie , pour ton aide et ta patience avec moi ,

@+++



========== PROCESSES ==========
Process explorer.exe killed successfully.
========== REGISTRY ==========
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DF8C3E.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DF9183.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DF9EC9.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\rza\LOCALS~1\Temp\~DFA2BF.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02252009_082416

Files moved on Reboot...
File C:\DOCUME~1\rza\LOCALS~1\Temp\~DF8C3E.tmp not found!
C:\DOCUME~1\rza\LOCALS~1\Temp\~DF9183.tmp moved successfully.
C:\DOCUME~1\rza\LOCALS~1\Temp\~DF9EC9.tmp moved successfully.
File C:\DOCUME~1\rza\LOCALS~1\Temp\~DFA2BF.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.

Re...

Mais j'ai pas internet dans mon pc de bureau , peut être tu fais allusion à ça ,http://www.commentcamarche.net/forum/affich 11124052 je crois que mon pc est infecte?#27 normalement c'est bon ,

@+++

bonjour hackman,

sacre boulot , ok merci sa sera pour samedi

bonne journée ,

@+++

bonsoir gen-hackman

merci pour tout , et t'es bien gentil

bonne soirée ,