Procédure ccm pour 3 ordinateurs en réseau

makayabou Messages postés 14 Statut Membre -  
chimay8 Messages postés 7947 Statut Contributeur sécurité -
Bonjour,
J'aide une association à résoudre un problème d'infection par virus sur 3 ordinateurs reliés entre eux. N'étant pas là au moment de l'infection, je ne connait pas le problème exacte, mais j'ai pu déjà observer des changements dans la base de registre (barre de titre d'Internet Explorer "Hacked by Moozila")
Comme ils ont leur comptabilité et d'autres documents importants enregistrés sur les disques durs, je préfère observer la procédure complète pour les 3 ordinateurs, sans savoir lequel pourrait avoir été réélement infecté.

Voici donc le log.txt de RSIT pour le 1er ordinateur:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Propriétaire at 2009-06-29 14:39:55
Microsoft Windows XP Édition familiale Service Pack 2
System drive C: has 43 GB (86%) free of 50 GB
Total RAM: 479 MB (16% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:40:02, on 29/06/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Documents and Settings\Propriétaire\Bureau\RSIT.exe
C:\Program Files\trend micro\Propriétaire.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Décidez-vous à installer Linux sur ces ordinateurs (adressez-vous à Bellinux!)
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [SiSRaid] C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [OPSE reminder] "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe" -r "C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\ereg.ini"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6786 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2004-08-26 405504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SiSPower"=SiSPower.dll,ModeAgent []
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2004-10-14 1388544]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2004-09-23 860160]
"SiSRaid"=C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe [2005-05-18 905216]
"Easy-PrintToolBox"=C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE [2004-01-14 409600]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"OpwareSE2"=C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe [2003-05-08 49152]
"OPSE reminder"=C:\Program Files\ScanSoft\OmniPageSE2.0\EregFre\Ereg.exe [2003-07-07 729088]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-10-23 233472]
"HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe [2003-06-25 49152]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [2003-07-28 188416]
"DeviceDiscovery"=C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-05-21 229437]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-26 30192]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-02-05 81000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-05 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
shell\AutoRun\command - F:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0724f525-12ba-11dd-a16a-0019218e7d18}]
shell\Auto\command - AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1ce90440-103f-11dd-a166-0019218e7d18}]
shell\AutoRun\command - F:\ReadMe.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1d7ef01d-5a8f-11de-a308-0019218e7d18}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe IISDLL.dll.vbs

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{249cf8b4-a702-11dc-a0e2-0019218e7d18}]
shell\Auto\command - winsys3.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL winsys3.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{765daba8-2972-11dd-a17f-0019218e7d18}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe IISDLL.dll.vbs

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a6f947c0-cabc-11dd-a239-0019218e7d18}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe IISDLL.dll.vbs

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d31a82d6-a189-11dc-a0dd-0019218e7d18}]
shell\Auto\command - F:\AdobeR.exe e
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ff85fd66-1b3f-11dd-a173-0019218e7d18}]
shell\Auto\command - F:\PegeFile.pif
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL PegeFile.pif

======List of files/folders created in the last 1 months======

2009-06-27 16:03:43 ----D---- C:\Program Files\CCleaner
2009-06-27 15:46:49 ----D---- C:\Program Files\trend micro
2009-06-27 15:46:44 ----D---- C:\rsit
2009-06-25 10:27:12 ----A---- C:\WINDOWS\system32\aswBoot.exe
2009-06-11 12:26:07 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-06-11 12:26:03 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-06-11 12:25:05 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-06-11 12:24:34 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$

======List of files/folders modified in the last 1 months======

2009-06-29 14:39:12 ----D---- C:\WINDOWS\Temp
2009-06-29 14:35:25 ----D---- C:\WINDOWS
2009-06-29 14:35:23 ----D---- C:\WINDOWS\system32\CatRoot2
2009-06-29 14:32:41 ----D---- C:\WINDOWS\system32\config
2009-06-27 16:23:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-06-27 16:06:28 ----D---- C:\WINDOWS\Debug
2009-06-27 16:03:43 ----RD---- C:\Program Files
2009-06-27 16:03:27 ----D---- C:\WINDOWS\Prefetch
2009-06-25 10:27:27 ----D---- C:\WINDOWS\system32\drivers
2009-06-25 10:27:26 ----D---- C:\WINDOWS\system32
2009-06-23 15:11:24 ----D---- C:\Documents and Settings\Propriétaire\Application Data\U3
2009-06-16 18:32:35 ----HD---- C:\WINDOWS\inf
2009-06-11 12:26:09 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-11 12:26:03 ----HD---- C:\WINDOWS\$hf_mig$
2009-06-11 12:24:56 ----D---- C:\WINDOWS\system32\fr-fr
2009-06-11 12:24:56 ----D---- C:\Program Files\Internet Explorer
2009-06-01 18:51:12 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-02-05 26944]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2008-11-10 82380]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-02-05 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-02-05 51376]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-08-25 11904]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-02-05 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-02-05 94032]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2005-03-04 127872]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-02-05 23152]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2005-03-01 392704]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-09-03 261632]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2002-07-10 32256]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-03-28 220992]
R3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-05 26624]
R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-05 57600]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-05 17024]
R3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 hidusb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-05 9600]
S3 MidiSyn;MidiSyn; C:\WINDOWS\system32\drivers\MidiSyn.sys [2004-09-14 88960]
S3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-05 12288]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-02-05 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-02-05 138680]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-02-05 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-02-05 352920]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-01-26 30192]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

Voici le info.txt de RSIT pour le 1er ordinateur:

info.txt logfile of random's system information tool 1.06 2009-06-27 16:05:51

======Uninstall list======

-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E06E4F4E-72D6-4497-BFFD-BCB43077C2F4}\setup.exe" -l0x40c -uninst
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat 5.0-->C:\WINDOWS\ISUN040C.EXE -f"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Fichiers communs\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
ArcSoft PhotoStudio 5.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85309D89-7BE9-4094-BB17-24999C6118FC}\Setup.exe" -l0x40c
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Canon CanoScan Toolbox 4.9-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}\setup.exe" -l0x40c anything
Canon iR Toolbox 4.9.1.1.ir01-->MsiExec.exe /I{5EFD0498-E232-4F53-B279-03EBF3539D63}
Canon iR1018/1022/1023-->"C:\WINDOWS\system32\CanonMF Uninstaller Information\{5830B3AB-D08F-4a6d-9925-F95860EE2954}\misc\DelDrv.exe" /U:{5830B3AB-D08F-4a6d-9925-F95860EE2954} /L0x0000
Canon PhotoRecord-->MsiExec.exe /X{D958FAC4-BAE0-4B1D-A42E-DE9BFDE7DDEE}
Canon PIXMA iP1500-->C:\WINDOWS\system32\CNMCP5y.exe "-PRINTERNAMECanon PIXMA iP1500" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP1500 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP1500 Installer\Inst2\cnmi040c.dll"
Canon ScanGear Starter-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{18A5DFF2-8A95-49F3-873F-743CB5549F3D}\SETUP.EXE" -l0x40c anything
Canon Utilities Easy-PhotoPrint-->C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe C:\Program Files\Canon\Easy-PhotoPrint\uninst.ini
Canon Utilities Easy-PrintToolBox-->C:\WINDOWS\BJPSUNST.EXE
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Correctif Windows XP - KB873339-->C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
Correctif Windows XP - KB885835-->C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
Correctif Windows XP - KB885836-->C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
Correctif Windows XP - KB886185-->C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
Correctif Windows XP - KB887472-->C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Correctif Windows XP - KB888302-->C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Correctif Windows XP - KB890859-->"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Correctif Windows XP - KB891781-->C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
Disque de souvenirs HP-->MsiExec.exe /X{B376402D-58EA-45EA-BD50-DD924EB67A70}
Easy-WebPrint-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
hp deskjet 5600-->msiexec /x{DB5518BE-F40F-407A-B451-012625D4497B}
HP Photo and Imaging 2.0 - Deskjet Series-->MsiExec.exe /I{E0828692-FD9D-459F-9312-C645C3CA6650}
hp print screen utility-->C:\Program Files\Hewlett-Packard\hp print screen utility\UnInstall\prnunins.exe
Manual CanoScan LiDE 25-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{838BC0FB-4F8F-47B9-847F-06AE4CCE4181}\setup.exe" -l0x40c
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Small Business Edition 2003-->MsiExec.exe /I{91CA040C-6000-11D3-8CFE-0150048383C9}
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)-->"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)-->"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB890046)-->"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB893756)-->"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896358)-->"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896423)-->"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB896428)-->"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899587)-->"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB899591)-->"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB900725)-->"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901017)-->"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB901214)-->"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB902400)-->"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905414)-->"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB905749)-->"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB908519)-->"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911562)-->"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB911927)-->"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB913580)-->"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914388)-->"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB914389)-->"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB917344)-->"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918118)-->"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB918439)-->"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB919007)-->"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920213)-->"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920670)-->"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920683)-->"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB920685)-->"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB921503)-->"C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB922819)-->"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923191)-->"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923414)-->"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Mise à jour de sécurité pour Windows XP (KB923980)-->"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924270)-->"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924496)-->"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB924667)-->"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB925902)-->"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926255)-->"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB926436)-->"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927779)-->"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB927802)-->"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928255)-->"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB928843)-->"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB929123)-->"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB930178)-->"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931261)-->"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB931784)-->"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB932168)-->"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB933729)-->"C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935839)-->"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB935840)-->"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB936021)-->"C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938127)-->"C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB938829)-->"C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941202)-->"C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941568)-->"C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941644)-->"C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB941693)-->"C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB942615)-->"C:\WINDOWS\$NtUninstallKB942615$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943055)-->"C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943460)-->"C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB943485)-->"C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB944653)-->"C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB945553)-->"C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946026)-->"C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948590)-->"C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB948881)-->"C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950749)-->"C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Mise à jour de sécurité pour Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB894391)-->"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB900485)-->"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB908531)-->"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB910437)-->"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB911280)-->"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB916595)-->"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB920872)-->"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB922582)-->"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB927891)-->"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB930916)-->"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB932823-v3)-->"C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB938828)-->"C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942763)-->"C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB942840)-->"C:\WINDOWS\$NtUninstallKB942840$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB946627)-->"C:\WINDOWS\$NtUninstallKB946627$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
OmniPage SE 2.0-->MsiExec.exe /I{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}
SiS 900 PCI Fast Ethernet Adapter Driver-->C:\Progra~1\SiSLan\Uninst.exe
SiS VGA Utilities-->Rundll32 SiSInst.dll,Uninstall VGA,R,oem1.inf
SiSAGP driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC226AC9-0314-496C-BE6A-B6A132628466}\setup.exe" -l0x40c
SiSRaidPackage-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{08498FF9-6C9B-4FC2-8DE1-BD98C89CC220}\setup.exe" -l0x40c
SoundMAX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe" -l0x40c -removeonly
Windows Installer 3.1 (KB893803)-->"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"

======Security center information======

AV: avast! antivirus 4.8.1335 [VPS 090626-0]

======System event log======

Computer Name: RELAIS-F8280155
Event Code: 7036
Message: Le service avast! Mail Scanner est entré dans l'état : en cours d'exécution.

Record Number: 5
Source Name: Service Control Manager
Time Written: 20090627153007.000000+120
Event Type: Informations
User:

Computer Name: RELAIS-F8280155
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service avast! Mail Scanner.

Record Number: 4
Source Name: Service Control Manager
Time Written: 20090627153007.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: RELAIS-F8280155
Event Code: 7036
Message: Le service Compatibilité avec le Changement rapide d'utilisateur est entré dans l'état : en cours d'exécution.

Record Number: 3
Source Name: Service Control Manager
Time Written: 20090627153007.000000+120
Event Type: Informations
User:

Computer Name: RELAIS-F8280155
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Compatibilité avec le Changement rapide d'utilisateur.

Record Number: 2
Source Name: Service Control Manager
Time Written: 20090627153007.000000+120
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: RELAIS-F8280155
Event Code: 7036
Message: Le service Services Terminal Server est entré dans l'état : en cours d'exécution.

Record Number: 1
Source Name: Service Control Manager
Time Written: 20090627153007.000000+120
Event Type: Informations
User:

=====Application event log=====

Computer Name: RELAIS-F8280155
Event Code: 1000
Message: Les compteurs de performances pour le service ContentIndex (ContentIndex) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 5
Source Name: LoadPerf
Time Written: 20070208014700.000000+060
Event Type: Informations
User:

Computer Name: RELAIS-F8280155
Event Code: 1000
Message: Les compteurs de performances pour le service TermService (Services Terminal Server) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 4
Source Name: LoadPerf
Time Written: 20070208014658.000000+060
Event Type: Informations
User:

Computer Name: RELAIS-F8280155
Event Code: 1000
Message: Les compteurs de performances pour le service RemoteAccess (Routage et accès distant) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 3
Source Name: LoadPerf
Time Written: 20070208012840.000000+060
Event Type: Informations
User:

Computer Name: RELAIS-F8280155
Event Code: 1000
Message: Les compteurs de performances pour le service PSched (PSched) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 2
Source Name: LoadPerf
Time Written: 20070208012823.000000+060
Event Type: Informations
User:

Computer Name: RELAIS-F8280155
Event Code: 1000
Message: Les compteurs de performances pour le service RSVP (QoS RSVP) ont été chargés.
Les données d'enregistrement contiennent les nouvelles valeurs d'index
assignées à ce service.

Record Number: 1
Source Name: LoadPerf
Time Written: 20070208012822.000000+060
Event Type: Informations
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 10, AuthenticAMD
"PROCESSOR_REVISION"=040a
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

14 réponses

  1.
    le hollandais volant Messages postés 5294 Statut Membre 1 059
     
    salut : voici quelques pistes de virus possibles :
    https://www.processlibrary.com/en/directory/files/mdm/22562/

    https://www.processlibrary.com/en/search?q=iexplore

    RSIT.exe me parait louche aussi… et lui : "Propriétaire.exe".

    Aussi, je vois que ton PC est windows SP2 : c'est pas à jour. IL FAUT TOJOURS AVOIR UN PC À JOUR.

    Et aussi un antivirus à jours. Fais un scan avec Avast.
    5
  2. makayabou Messages postés 14 Statut Membre 4
     
    Bonjour,

    j'ai envoyé hier ces rapports et j'aimerais savoir si les ordinateurs sont désormais clean. Pour le scan en ligne, j'ai pourtant demandé comme seconde action "Report Only", comme indiqué dans le tuto. J'imagine donc que certains virus ne sont pas éliminés sauf si tout est parti au premier passage, ce que je n'arrive pas à voir sur les logs

    Merci
    4
  3. chimay8 Messages postés 7947 Statut Contributeur sécurité 60
     
    salut,

    infection par clé usb

    faut faire ça sur les trois pc

    Télécharge et installe ==>UsbFix<== de "C,C,C"

    Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d'avoir été infectées sans les ouvrir

    # Double-clique sur le raccourci UsbFix présent sur ton bureau .

    # Choisis l'option 1 ( Recherche )

    # Laisse travailler l'outil...

    # Ensuite,poste le rapport UsbFix.txt qui apparaitra.

    # Note : Le rapport UsbFix.txt est,en outre,sauvegardé à la racine du disque. ( C:\UsbFix.txt )
    0
  4. makayabou Messages postés 14 Statut Membre 4
     
    Cela ne m'étonne pas qu'il sagisse d'une infection par clé USB. Le problème est que je n'ai aucun moyen de faire la procédure demandée puisque la clé USB infectée a depuis été formatée. Je poste donc le log.txt de RSIT pour le deuxième ordinateur:
    Logfile of random's system information tool 1.06 (written by random/random)
    Run by RELAIS FEMMES at 2009-06-29 14:50:59
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 49 GB (85%) free of 57 GB
    Total RAM: 2047 MB (76% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:51:04, on 29/06/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\ATK0100\HControl.exe
    C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    C:\WINDOWS\vsnp2std.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\ATK0100\ATKOSD.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\RELAIS FEMMES\Bureau\RSIT.exe
    C:\Program Files\trend micro\RELAIS FEMMES.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lastchaos.in.th/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by MOOzilla
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
    O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
    O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
    O4 - HKLM\..\Run: [EOUApp] "C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe"
    O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
    O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJxdm351YYFR
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/ZwinkyInitialSetup1.0.1.1.cab
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. makayabou Messages postés 14 Statut Membre 4
     
    Voici le log.txt du 3eme ordi:

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by relais femme at 2007-05-02 00:02:30
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 64 GB (84%) free of 76 GB
    Total RAM: 1919 MB (72% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 00:02:38, on 02/05/2007
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\acs.exe
    C:\Program Files\Google\Update\GoogleUpdate.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Alwil Software\Avast4\setup\avast.setup
    C:\WINDOWS\system32\wuauclt.exe
    C:\Documents and Settings\relais femme\Bureau\RSIT.exe
    C:\Program Files\trend micro\relais femme.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: CCC.lnk = ?
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
    O23 - Service: Service de configuration Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
    O23 - Service: Service Google Update (gupdate1c9c2b8aeb08106) (gupdate1c9c2b8aeb08106) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    0
  7. chimay8 Messages postés 7947 Statut Contributeur sécurité 60
     
    pas important pour la clé...
    l'infection est aussi dans le pc!ainsi que dans le second
    +infection par my web search

    faus passer toolbar S&D

    0
  8. chimay8 Messages postés 7947 Statut Contributeur sécurité 60
     
    heu!

    RSIT.exe me parait louche aussi… et lui : "Propriétaire.exe".

    tu sais pas lire les log,avant de raconter des inepties renseigne toi un peu plus!!
    0
  9. makayabou Messages postés 14 Statut Membre 4
     
    Voici le rapport de l'antimalware pour le premier ordi:

    Malwarebytes' Anti-Malware 1.38
    Version de la base de données: 2350
    Windows 5.1.2600 Service Pack 2

    29/06/2009 15:55:04
    mbam-log-2009-06-29 (15-55-04).txt

    Type de recherche: Examen rapide
    Eléments examinés: 79534
    Temps écoulé: 4 minute(s), 17 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 3
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 0

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    (Aucun élément nuisible détecté)
    0
  10. makayabou Messages postés 14 Statut Membre 4
     
    Voici le rapport de l'antimalware pour le 3eme ordi:

    Malwarebytes' Anti-Malware 1.38
    Version de la base de données: 2350
    Windows 5.1.2600 Service Pack 3

    02/05/2007 01:01:19
    mbam-log-2007-05-02 (01-01-19).txt

    Type de recherche: Examen rapide
    Eléments examinés: 83198
    Temps écoulé: 3 minute(s), 4 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 3
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 0

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    (Aucun élément nuisible détecté)
    0
  11. makayabou Messages postés 14 Statut Membre 4
     
    Et voici enfin le rapport de l'antimalware pour le 2eme ordi, qui vient un peu plus tard car il avait besoin de rebooter pour éliminer certains fichiers:

    Malwarebytes' Anti-Malware 1.38
    Version de la base de données: 2350
    Windows 5.1.2600 Service Pack 3

    29/06/2009 15:57:29
    mbam-log-2009-06-29 (15-57-29).txt

    Type de recherche: Examen rapide
    Eléments examinés: 80809
    Temps écoulé: 2 minute(s), 9 second(s)

    Processus mémoire infecté(s): 1
    Module(s) mémoire infecté(s): 3
    Clé(s) du Registre infectée(s): 149
    Valeur(s) du Registre infectée(s): 8
    Elément(s) de données du Registre infecté(s): 3
    Dossier(s) infecté(s): 19
    Fichier(s) infecté(s): 81

    Processus mémoire infecté(s):
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Unloaded process successfully.

    Module(s) mémoire infecté(s):
    C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (Adware.MyWeb) -> Delete on reboot.
    C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWeb) -> Delete on reboot.
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Delete on reboot.

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\CLSID\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mywebsearchservice (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\mywebsearchservice (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mywebsearchservice (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Valeur(s) du Registre infectée(s):
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\my web search bar (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch email plugin (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch email plugin (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch plugin (Adware.MyWeb) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\ (Adware.Hotbar) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    Elément(s) de données du Registre infecté(s):
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Dossier(s) infecté(s):
    C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Delete on reboot.
    c:\program files\mywebsearch\bar (Adware.MyWebSearch) -> Delete on reboot.
    c:\program files\mywebsearch\bar\1.bin (Adware.MyWebSearch) -> Delete on reboot.
    c:\program files\mywebsearch\bar\Avatar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Game (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\icons (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Message (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\funwebproducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\funwebproducts\screensaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\funwebproducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\funwebproducts\Shared\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\documents and settings\RELAIS FEMMES\Application Data\FunWebProducts (Adware.MyWay) -> Quarantined and deleted successfully.
    c:\documents and settings\relais femmes\application data\funwebproducts\Data (Adware.MyWay) -> Quarantined and deleted successfully.
    c:\documents and settings\relais femmes\application data\funwebproducts\Data\RELAIS FEMMES (Adware.MyWay) -> Quarantined and deleted successfully.

    Fichier(s) infecté(s):
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWeb) -> Delete on reboot.
    C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (Adware.MyWeb) -> Delete on reboot.
    C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWeb) -> Delete on reboot.
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWeb) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL (Adware.MyWeb) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Delete on reboot.
    C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\WINDOWS\system32\f3PSSavr.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3REGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3RESTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3FFXTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3NTSTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3NTSTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\1.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B1E8E (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B2F57 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B42B0 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B67CC.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B6991.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B774D.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B8632.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\000B93CE.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\History\search3 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\mywebsearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\funwebproducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\program files\funwebproducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
    c:\documents and settings\relais femmes\application data\funwebproducts\Data\relais femmes\avatar.dat (Adware.MyWay) -> Quarantined and deleted successfully.
    0
  12. makayabou Messages postés 14 Statut Membre 4
     
    Voici le rapport bitdefender pour le deuxième ordi

    BitDefender Online Scanner -Scan ReportBitDefender Online Scanner
    Scan report generated at: Mon, Jun 29, 2009 - 16:34:40

    Scan path: C:\;D:\;E:\;

    Statistics
    Time00:19:26
    Files59067
    Folders2510
    Boot Sectors0
    Archives567
    Packed Files4485

    Results
    Identified Viruses 3
    Infected Files 22
    Suspect Files 0
    Warnings0
    Disinfected0
    Deleted Files43

    Engines Info
    Virus Definitions3762485
    Engine buildAVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008
    17:19:14)
    Scan plugins17
    Archive plugins44
    Unpack plugins7
    E-mail plugins6
    System plugins4

    Scan Settings
    First ActionDisinfect
    Second ActionDelete
    HeuristicsYes
    Enable WarningsYes
    Scanned Extensions*;
    Exclude Extensions
    Scan EmailsYes
    Scan ArchivesYes
    Scan PackedYes
    Scan FilesYes
    Scan BootYes

    Scanned File Status
    C:\autorun.inf=>(unicode)Infected with: Worm.VBS.Solow.C
    C:\autorun.inf=>(unicode)Disinfection failed
    C:\autorun.inf=>(unicode)Deleted
    C:\autorun.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP364\A0024419.DLLInfected
    with: Trojan.Generic.1775814
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP364\A0024419.DLLDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024933.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024933.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024933.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024933.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024941.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024941.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024941.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024941.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024951.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024951.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024951.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024951.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025010.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025010.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025010.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025010.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025025.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025025.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025025.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025025.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025038.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025038.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025038.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025038.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025053.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025053.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025053.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025053.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025070.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025070.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025070.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025070.infDeleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025085.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025085.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025085.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025085.infDeleted
    D:\autorun.inf=>(unicode)Infected with: Worm.VBS.Solow.C
    D:\autorun.inf=>(unicode)Disinfection failed
    D:\autorun.inf=>(unicode)Deleted
    D:\autorun.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024935.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024935.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024935.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP374\A0024935.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024943.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024943.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024943.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024943.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024953.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024953.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024953.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP375\A0024953.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025012.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025012.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025012.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025012.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025027.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025027.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025027.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025027.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025040.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025040.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025040.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025040.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025055.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025055.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025055.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025055.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025072.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025072.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025072.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025072.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025087.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025087.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025087.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP376\A0025087.infDeleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP377\A0026434.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP377\A0026434.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP377\A0026434.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{1EE62678-322C-411C-B11B-8420233DAFCA}\RP377\A0026434.infDeleted
    0
  13. makayabou Messages postés 14 Statut Membre 4
     
    Voici le rapport bitdefender pour le 1er ordi:

    BitDefender Online Scanner -Scan ReportBitDefender Online Scanner
    Scan report generated at: Mon, Jun 29, 2009 - 16:42:47

    Scan path: A:\;C:\;D:\;E:\;

    Statistics
    Time00:38:44
    Files56164
    Folders2315
    Boot Sectors0
    Archives474
    Packed Files4520

    Results
    Identified Viruses 3
    Infected Files 49
    Suspect Files 0
    Warnings0
    Disinfected0
    Deleted Files97

    Engines Info
    Virus Definitions3762485
    Engine buildAVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008
    17:19:14)
    Scan plugins17
    Archive plugins44
    Unpack plugins7
    E-mail plugins6
    System plugins4

    Scan Settings
    First ActionDisinfect
    Second ActionDelete
    HeuristicsYes
    Enable WarningsYes
    Scanned Extensions*;
    Exclude Extensions
    Scan EmailsYes
    Scan ArchivesYes
    Scan PackedYes
    Scan FilesYes
    Scan BootYes

    Scanned File Status
    C:\autorun.inf=>(unicode)Infected with: Worm.VBS.Solow.C
    C:\autorun.inf=>(unicode)Disinfection failed
    C:\autorun.inf=>(unicode)Deleted
    C:\autorun.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023634.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023634.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023634.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023634.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023639.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023639.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023639.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023639.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023671.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023671.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023671.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023671.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023693.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023693.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023693.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023693.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023707.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023707.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023707.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023707.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023717.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023717.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023717.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023717.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023722.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023722.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023722.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023722.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023732.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023732.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023732.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023732.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023755.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023755.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023755.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023755.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023765.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023765.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023765.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023765.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023775.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023775.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023775.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023775.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023785.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023785.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023785.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023785.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023809.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023809.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023809.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023809.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023819.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023819.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023819.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023819.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023824.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023824.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023824.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023824.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023840.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023840.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023840.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023840.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023863.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023863.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023863.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023863.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023875.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023875.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023875.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023875.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023894.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023894.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023894.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023894.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023904.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023904.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023904.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023904.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023964.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023964.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023964.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023964.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023992.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023992.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023992.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023992.infDeleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025947.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025947.inf=>(unicode)Disinfection
    failed
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025947.inf=>(unicode)Deleted
    C:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025947.infDeleted
    C:\WINDOWS\system32\Tools\Restart.exeInfected with: Virtool.18853
    C:\WINDOWS\system32\Tools\Restart.exeDeleted
    D:\autorun.inf=>(unicode)Infected with: Worm.VBS.Solow.C
    D:\autorun.inf=>(unicode)Disinfection failed
    D:\autorun.inf=>(unicode)Deleted
    D:\autorun.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023636.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023636.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023636.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP273\A0023636.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023641.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023641.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023641.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023641.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023673.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023673.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023673.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023673.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023697.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023697.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023697.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023697.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023709.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023709.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023709.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023709.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023719.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023719.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023719.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP274\A0023719.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023724.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023724.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023724.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023724.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023734.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023734.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023734.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023734.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023757.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023757.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023757.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023757.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023767.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023767.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023767.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023767.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023777.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023777.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023777.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023777.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023787.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023787.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023787.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023787.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023811.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023811.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023811.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023811.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023821.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023821.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023821.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP275\A0023821.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023826.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023826.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023826.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023826.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023842.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023842.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023842.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023842.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023865.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023865.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023865.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023865.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023877.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023877.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023877.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP276\A0023877.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023896.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023896.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023896.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023896.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023906.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023906.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023906.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023906.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023966.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023966.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023966.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP277\A0023966.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023995.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023995.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023995.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP278\A0023995.infDeleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025949.inf=>(unicode)Infected
    with: Worm.VBS.Solow.C
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025949.inf=>(unicode)Disinfection
    failed
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025949.inf=>(unicode)Deleted
    D:\System Volume
    Information\_restore{57ED36DA-9311-4782-BBF9-2AF782C0A0CD}\RP279\A0025949.infDeleted
    0
  14. makayabou Messages postés 14 Statut Membre 4
     
    Et enfin.. Voici le scan du bitdefender du 3eme ordi:

    *BitDefender Online Scanner*

    *Scan report generated at: Wed, May 02, 2007 - 01:42:37*

    * *

    *Scan path: *C:\;D:\;E:\;

    * *

    *Statistics*

    Time

    00:23:03

    Files

    74892

    Folders

    4559

    Boot Sectors

    0

    Archives

    1440

    Packed Files

    4379

    *Results*

    Identified Viruses

    0

    Infected Files

    0

    Suspect Files

    0

    Warnings

    0

    Disinfected

    0

    Deleted Files

    0

    *Engines Info*

    Virus Definitions

    3762485

    Engine build

    AVCORE v1.7 (build 8314.19) (i386) (Sep 29 2008 17:19:14)

    Scan plugins

    17

    Archive plugins

    44

    Unpack plugins

    7

    E-mail plugins

    6

    System plugins

    4

    *Scan Settings*

    First Action

    Disinfect

    Second Action

    Delete

    Heuristics

    Yes

    Enable Warnings

    Yes

    Scanned Extensions

    *;

    Exclude Extensions

    Scan Emails

    Yes

    Scan Archives

    Yes

    Scan Packed

    Yes

    Scan Files

    Yes

    Scan Boot

    Yes

    *Scanned File*

    * Status*

    No virus found.

    * *

    * *

    Merci pour tout à ceux qui s'occupent de ce forum!

    Makayabou
    0
  15. chimay8 Messages postés 7947 Statut Contributeur sécurité 60
     
    je t'ai dis ce que tu devais faire...
    ta passé MBAM et bit defender

    bref t'en fais qu'a ta tête
    0

Discussions similaires

"Nous n'avons pas pu nous connecter à ce réseau"
Aurore_1606 -
Damiennn -

25 réponses
Livebox 4 Réseau Orange non détecté
Azfun -
brupala -

10 réponses
Branchez le câble réseau du player freebox
Marie -
Frezdesboas -

3 réponses
Livebox s'allume mais marque pas de réseau orange
Bebelle -
kaumune -

9 réponses
Ca veut dire quoi :3
Moi -
Adraen -

3 réponses