Lo.st reste malgré ST_Fix-1

tat -
Utilisateur anonyme - 4 nov. 2009 à 14:38

Bonjour,
jai suivi vos indications pour se debarasser de lo.st.Je suis sur vista
Jai téléchargé ST_Fix-1 puis ca ma donné un rapport que je vous copie ci dessous mais quand jouvre internet ma page d'accueil est toujours lo.st!!!
Jai vraiment du mal dans le domaine de linformatique si quelqu'un peut maider???Merci davance!!
########################################################################
#
# ST_Fix v.2.05 par Batch_Man
# Mise à jour le 06/08/2009
# Début a 20:18 le 01/11/2009
# Système d'exploitation: Windows Vista (TM) Home Premium
# Mode de boot: Normal
# Lancé de C:\Users\tat\Desktop\ST_Fix.bat
#
################################ Suppression ###############################
#
# SUPPRIMÉ - [tat|drv2lwid.default] prefs user_pref("browser.startup.homepage", "http://lo.st#home");
# REMPLACEMENT - HKLM\..\AboutURLs,Tabs: http://www.lo.st/?tabs --> res://ieframe.dll/tabswelcome.htm
# SUPPRIMÉ - HKEY_USERS\S-1-5-21-4263123459-167285991-4254968985-1000\Software\EoRezo
# SUPPRIMÉ - HKEY_USERS\S-1-5-21-4263123459-167285991-4254968985-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
# SUPPRIMÉ - HKLM\SOFTWARE\Classes\EoRezoBHO.EoBHO
# SUPPRIMÉ - HKLM\SOFTWARE\Classes\EoRezoBHO.EoBHO.1
# SUPPRIMÉ - HKLM\SOFTWARE\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
# SUPPRIMÉ - HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
# SUPPRIMÉ - HKLM\SOFTWARE\EoRezo
# SUPPRIMÉ - HKLM\Software\Microsoft\Windows\CurrentVersion\Run,eoEngine
# SUPPRIMÉ - C:\Users\tat\AppData\Roaming\EoRezo
#
################################## Terminé ################################

Configuration: Windows Vista
Firefox 3.0.15

Afficher la suite

5 réponses

Réponse 1 / 5
Utilisateur anonyme

bonsoir, on ne passe pas les outils sans avoir l'avais d'un connaisseur :-)

ça va masquer les infections et rien de plus !!!

•Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.
http://images.malwareremoval.com/random/RSIT.exe

Tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
Double clique sur RSIT.exe pour lancer l'outil.
Clique sur ' continue ' à l'écran Disclaimer.
Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Une fois le scan fini, 2 rapports vont apparaître. Poste le contenu des 2 rapports séparément. Ils se trouvent sur c :
(log.txt & info.txt)
(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
0
1. tat
  
  bonjour!!alors jai fait ce que tu ma dit
  
  info.txt logfile of random's system information tool 1.06 2009-11-02 20:38:05
  
  ======Uninstall list======
  
  -->"C:\Program Files\HP Games\Bejeweled 2 Deluxe\Uninstall.exe"
  -->"C:\Program Files\HP Games\Blasterball 2 Revolution\Uninstall.exe"
  -->"C:\Program Files\HP Games\Blasterball 3\Uninstall.exe"
  -->"C:\Program Files\HP Games\Bricks of Egypt\Uninstall.exe"
  -->"C:\Program Files\HP Games\Chicken Invaders 3 - Revenge of the Yolk\Uninstall.exe"
  -->"C:\Program Files\HP Games\Chuzzle Deluxe\Uninstall.exe"
  -->"C:\Program Files\HP Games\Crystal Maze\Uninstall.exe"
  -->"C:\Program Files\HP Games\Diner Dash 2 Restaurant Rescue\Uninstall.exe"
  -->"C:\Program Files\HP Games\Diner Dash\Uninstall.exe"
  -->"C:\Program Files\HP Games\FATE\Uninstall.exe"
  -->"C:\Program Files\HP Games\Fish Tycoon\Uninstall.exe"
  -->"C:\Program Files\HP Games\Gem Shop\Uninstall.exe"
  -->"C:\Program Files\HP Games\Insaniquarium Deluxe\Uninstall.exe"
  -->"C:\Program Files\HP Games\Jewel Quest\Uninstall.exe"
  -->"C:\Program Files\HP Games\Magic Academy\Uninstall.exe"
  -->"C:\Program Files\HP Games\Mah Jong Quest\Uninstall.exe"
  -->"C:\Program Files\HP Games\My HP Game Console\Uninstall.exe"
  -->"C:\Program Files\HP Games\Ocean Express\Uninstall.exe"
  -->"C:\Program Files\HP Games\Peggle\Uninstall.exe"
  -->"C:\Program Files\HP Games\Penguins!\Uninstall.exe"
  -->"C:\Program Files\HP Games\Polar Bowler\Uninstall.exe"
  -->"C:\Program Files\HP Games\Polar Golfer Pineapple Cup\Uninstall.exe"
  -->"C:\Program Files\HP Games\Polar Golfer\Uninstall.exe"
  -->"C:\Program Files\HP Games\Puzzle Express\Uninstall.exe"
  -->"C:\Program Files\HP Games\Shooting Stars Pool\Uninstall.exe"
  -->"C:\Program Files\HP Games\Slingo Deluxe\Uninstall.exe"
  -->"C:\Program Files\HP Games\Sudoku Quest\Uninstall.exe"
  -->"C:\Program Files\HP Games\Super Granny\Uninstall.exe"
  -->"C:\Program Files\HP Games\Tradewinds\Uninstall.exe"
  -->"C:\Program Files\HP Games\Virtual Villagers - A New Home\Uninstall.exe"
  -->"C:\Program Files\HP Games\Zuma Deluxe\Uninstall.exe"
  -->C:\Program Files\Conexant\SmartAudio\SETUP.EXE -U -ISmartAudio -SM=SMAUDIO.EXE,1801
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {5A2F65A4-808F-4A1E-973E-92E17824982D}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {2AB528A5-BB1B-4EBE-8E51-AD0C4CD33CA9}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {3EC77D26-799B-4CD8-914F-C1565E796173}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {430971B1-C31E-45DA-81E0-72C095BAB72C}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {B3F4DC34-7F60-4B7C-A79F-1C13012D99D4}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {F7A31780-33C4-4E39-951A-5EC9B91D7BF1}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {90120000-00A1-040C-0000-0000000FF1CE} /uninstall {A0353900-21A2-42CF-B973-883500A027F7}
  2007 Microsoft Office Suite Service Pack 1 (SP1)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {BEE75E01-DD3F-4D5F-B96C-609E6538D419}
  Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
  Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
  Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
  Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
  Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003}
  Adobe Shockwave Player-->MsiExec.exe /X{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}
  AIM 6-->C:\Program Files\AIM6\uninst.exe
  AOL Toolbar 5.0-->"C:\Program Files\AOL\AOL Toolbar 5.0\uninstall.exe"
  Apple Mobile Device Support-->MsiExec.exe /I{EC4455AB-F155-4CC1-A4C5-88F3777F9886}
  Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
  Atheros Driver Installation Program-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe" -l0x40c -removeonly
  avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
  Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
  CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
  Conexant HD Audio-->C:\Program Files\CONEXANT\CNXT_AUDIO_HDA\UIU32a.exe -U -IQh30CFza.INF
  CyberLink YouCam-->"C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\setup.exe" /z-uninstall
  DVD Suite-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
  EA Link-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{F5577101-33CC-4711-8235-3A95BCD49DB0} /l1036
  ESU for Microsoft Vista-->MsiExec.exe /I{58511601-FBC1-4BE1-9AEA-3F6A7749F03A}
  Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
  Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
  Hauppauge MCE XP/Vista Software Encoder (2.0.25149)-->C:\PROGRA~1\WinTV\UNSftMCE.EXE C:\PROGRA~1\WinTV\softMCE.LOG
  HDAUDIO Soft Data Fax Modem with SmartCP-->C:\Program Files\CONEXANT\CNXT_MODEM_HDA_HSF\UIU32m.exe -U -I*.INF
  Hewlett-Packard Active Check for Health Check-->MsiExec.exe /X{254C37AA-6B72-4300-84F6-98A82419187E}
  Hewlett-Packard Asset Agent for Health Check-->MsiExec.exe /X{669D4A35-146B-4314-89F1-1AC3D7B88367}
  HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
  Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
  Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
  HP Active Support Library-->C:\Program Files\InstallShield Installation Information\{5DAA9C36-8F8B-462F-8CCA-E205BC3751F5}\setup.exe -runfromtemp -l0x0409
  HP Customer Experience Enhancements-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BD0E2B92-3814-46F0-893B-4612EA010C7E}\setup.exe" -l0x9 -removeonly
  HP Doc Viewer-->MsiExec.exe /I{082702D5-5DD8-4600-BCE5-48B15174687F}
  HP Easy Setup - Frontend-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9885A11E-60E4-417C-B58B-8B31B21C0B8A}\setup.exe" -l0x9 -removeonly
  HP Help and Support-->MsiExec.exe /X{31216452-5540-4C96-B754-94890A63D5AB}
  HP Quick Launch Buttons 6.30 E1-->C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe -runfromtemp -l0x040c uninst
  HP QuickPlay 3.6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{45D707E9-F3C4-11D9-A373-0050BAE317E1}\Setup.exe" -uninstall
  HP QuickTouch 1.00 C4-->MsiExec.exe /I{7DC4A410-9986-4329-9E5D-687B2C42CA39}
  HP Total Care Advisor-->MsiExec.exe /X{b02df929-29a7-4fd2-9a70-81a644b635f7}
  HP Update-->MsiExec.exe /X{7059BDA7-E1DB-442C-B7A1-6144596720A4}
  HP User Guides 0088-->MsiExec.exe /I{8347A7A5-4AB8-433F-82AA-496B0D189A9B}
  HP Wireless Assistant-->MsiExec.exe /I{CBAE4F50-9FC9-4557-AB36-9826DF3C103C}
  HPNetworkAssistant-->MsiExec.exe /I{228C6B46-64E2-404E-898A-EF0830603EF4}
  iTunes-->MsiExec.exe /I{318AB667-3230-41B5-A617-CB3BF748D371}
  Java(TM) 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
  Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
  LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\setup.exe" -uninstall
  LiveBox-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC7DDAAE-7F2B-4270-9BFD-5A130B667E9E}\Setup.exe" -l0x40c
  Microsoft .NET Framework 3.5 Language Pack SP1 - fra-->MsiExec.exe /I{3E31821C-7917-367E-938E-E65FC413EA31}
  Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
  Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
  Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
  Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
  Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
  Microsoft Office Language Pack 2007 Service Pack 1 (SP1)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {EC50B538-CBE1-42E6-B7FE-87AA540AADFB}
  Microsoft Office OneNote MUI (French) 2007-->MsiExec.exe /X{90120000-00A1-040C-0000-0000000FF1CE}
  Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
  Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
  Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
  Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
  Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
  Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
  Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
  Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
  Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
  Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
  Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
  Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
  Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
  Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
  Microsoft Works-->MsiExec.exe /I{3B160861-7250-451E-B5EE-8B92BF30A710}
  Microsoft Works-->MsiExec.exe /I{6B1CB38D-E2E4-4A30-933D-EFDEBA76AD9C}
  Mise à jour Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
  Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
  Mise à jour Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
  Module de compatibilité pour Microsoft Office System 2007-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
  Module linguistique Microsoft .NET Framework 3.5 SP1- fra-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - fra\setup.exe
  Mozilla Firefox (3.0.15)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
  MSCU for Microsoft Vista-->MsiExec.exe /I{E87F5651-CE15-493F-AE99-3B670E25A54E}
  MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
  MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
  MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
  MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
  muvee autoProducer 6.1-->C:\Program Files\InstallShield Installation Information\{250E9609-E830-43EB-B379-DAB7546A2422}\muveesetup.exe -removeonly -runfromtemp
  My HP Games-->"C:\Program Files\HP Games\Uninstall.exe"
  NetWaiting-->C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x040c -removeonly
  NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
  OLYMPUS Master 2-->MsiExec.exe /X{9FA93155-472F-4778-87A8-95244FD1535D}
  Power2Go-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\setup.exe" -uninstall
  PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" /z-uninstall
  QuickPlay SlingPlayer 0.4.4-->"C:\Program Files\HP\QuickPlay\unins000.exe"
  QuickTime-->MsiExec.exe /I{F958CA02-BB40-4007-894B-258729456EE4}
  RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x40c anything
  Security Update for 2007 Microsoft Office System (KB951550)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B243E9A5-ED77-4F1B-B338-2486FD82DC85}
  Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
  Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
  Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}
  Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}
  Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
  Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
  Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
  Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
  Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
  Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
  Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}
  Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
  Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
  Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
  Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
  Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
  Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
  
  ======Security center information======
  
  AV: avast! antivirus 4.8.1356 [VPS 091030-0]
  AS: Windows Defender
  AS: avast! antivirus 4.8.1356 [VPS 091030-0]
  
  ======System event log======
  
  Computer Name: pc_de_tat
  Event Code: 4374
  Message: Windows Servicing a déterminé que ce package KB972145(Update) n’est pas applicable à ce système.
  Record Number: 114482
  Source Name: Microsoft-Windows-Servicing
  Time Written: 20091102191904.000000-000
  
  Logfile of random's system information tool 1.06 (written by random/random)
  Run by tat at 2009-11-02 20:37:23
  Microsoft® Windows Vista™ Édition Familiale Premium
  System drive C: has 153 GB (68%) free of 226 GB
  Total RAM: 2046 MB (54% free)
  
  Logfile of Trend Micro HijackThis v2.0.2
  Scan saved at 20:38:03, on 02/11/2009
  Platform: Windows Vista (WinNT 6.00.1904)
  MSIE: Internet Explorer v7.00 (7.00.6000.16916)
  Boot mode: Normal
  
  Running processes:
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\Explorer.EXE
  C:\Windows\System32\rundll32.exe
  C:\Windows\System32\rundll32.exe
  C:\Program Files\Synaptics\SynTP\SynTPStart.exe
  C:\Program Files\Hp\QuickPlay\QPService.exe
  C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
  C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  C:\Program Files\Windows Defender\MSASCui.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
  C:\Program Files\Alwil Software\Avast4\ashDisp.exe
  C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Files\Windows Sidebar\sidebar.exe
  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
  C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
  C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
  C:\Program Files\Internet Explorer\IEUser.exe
  c:\program files\aol\aol toolbar 5.0\AolTbServer.exe
  C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
  C:\Windows\system32\conime.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Windows\system32\wuauclt.exe
  C:\Windows\system32\Macromed\Flash\FlashUtil9d.exe
  C:\Users\tat\Desktop\RSIT.exe
  C:\Program Files\trend micro\tat.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
  O1 - Hosts: ::1 localhost
  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
  O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
  O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
  O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
  O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
  O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
  O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
  O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
  O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0"
  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
  O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
  O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
  O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
  O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
  O4 - HKCU\..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun
  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
  O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
  O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe"
  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
  O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 5.0\resources\fr-fr\local\search.html
  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~2.0_0\bin\ssv.dll
  O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
  O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
  O13 - Gopher Prefix:
  O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
  O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
  O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
  O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
  O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
  O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
  O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
  
  0
Réponse 2 / 5
Utilisateur anonyme

bonsoir,
tu as une infection par support externe :

•/!\ Utilisateur de vista et windows 7 : ne pas oublier de désactiver Le contrôle des comptes utilisateurs
https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

Télécharge USBFIX de Chiquitine29, C_xx et Chimay8

http://pagesperso-orange.fr/NosTools/Chiquitine29/UsbFix.exe

/!\ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir
• Double clic sur le raccourci UsbFix présent sur ton bureau .
/!\Utilisateur de Vista : Clique droit sur le logo de USBFIX, « exécuter en tant qu’Administrateur »

• Choisis l'option 2 (suppression)

• Laisse travailler l'outil.
• Ensuite post le rapport UsbFix.txt qui apparaîtra.

• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

• Tuto : http://pagesperso-orange.fr/nostools/tuto_usbfix2.html
0
1. tat
  
  Voila je fais ce que tu mas dit en esperant que c'est bon...
  merci en tout cas
  
  ############################## | UsbFix V6.047 |
  
  User : tat (Administrateurs) # PC_DE_TAT
  Update on 02/11/2009 by Chiquitine29, C_XX & Chimay8
  Start at: 22:22:19 | 02/11/2009
  Website : http://pagesperso-orange.fr/NosTools/index.html
  Contact : FindyKill.Contact@gmail.com
  
  AMD Turion(tm) 64 X2 Mobile Technology TL-60
  Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6000 32-bit) #
  Internet Explorer 7.0.6000.16916
  Windows Firewall Status : Enabled
  AV : avast! antivirus 4.8.1356 [VPS 091030-0] 4.8.1356 [ Enabled | Updated ]
  
  C:\ -> Disque fixe local # 221,18 Go (149,42 Go free) # NTFS
  D:\ -> Disque fixe local # 11,71 Go (2,09 Go free) [HP_RECOVERY] # NTFS
  E:\ -> Disque CD-ROM
  
  ############################## | Processus actifs |
  
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\LogonUI.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
  C:\Program Files\Alwil Software\Avast4\ashServ.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
  C:\Program Files\Bonjour\mDNSResponder.exe
  C:\Program Files\Common Files\LightScribe\LSSrvc.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
  C:\Program Files\CyberLink\Shared Files\RichVideo.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\SearchIndexer.exe
  C:\Windows\system32\DRIVERS\xaudio.exe
  C:\Windows\system32\taskeng.exe
  C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
  C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
  c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
  C:\Windows\system32\wbem\wmiprvse.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\Explorer.EXE
  C:\Windows\system32\runonce.exe
  C:\Windows\system32\SearchProtocolHost.exe
  C:\Windows\system32\conime.exe
  C:\Windows\system32\SearchFilterHost.exe
  C:\Windows\system32\wbem\wmiprvse.exe
  
  ################## | Fichiers # Dossiers infectieux |
  
  ################## | Registre # Clés Run infectieuses |
  
  ################## | Registre # Mountpoints2 |
  
  Supprimé ! HKCU\...\Explorer\MountPoints2\{6fa73908-3d67-11de-bb05-001e6803a156}\Shell\AutoRun\Command
  Supprimé ! HKCU\...\Explorer\MountPoints2\{72ad4f03-9a0a-11de-ae60-001e6803a156}\Shell\AutoRun\Command
  
  ################## | Listing des fichiers présent |
  
  [24/10/2007 17:43|--a------|74] C:\autoexec.bat
  [02/11/2006 10:53|-rahs----|438840] C:\bootmgr
  [18/09/2006 22:43|--a------|10] C:\config.sys
  [?|?|?] C:\hiberfil.sys
  [29/10/2008 21:18|-rahs----|0] C:\IO.SYS
  [24/10/2007 17:20|--ah-----|362] C:\IPH.PH
  [29/10/2008 21:18|-rahs----|0] C:\MSDOS.SYS
  [?|?|?] C:\pagefile.sys
  [26/05/2008 16:13|--a------|91] C:\Setup.log
  [02/11/2009 22:23|--a------|3440] C:\UsbFix.txt
  [11/09/2005 16:18|---hs----|340] D:\AUTOMODE
  [26/05/2008 15:37|---hs----|13] D:\BLOCK.RIN
  [04/10/2006 00:02|---hs----|438328] D:\bootmgr
  [06/09/2008 12:19|---hs----|891] D:\Desktop.ini
  [10/09/2002 17:14|---hs----|8134] D:\Folder.htt
  [26/05/2008 15:54|--ahs----|816] D:\MASTER.LOG
  [16/09/2002 15:37|---hs----|181898] D:\protect.chinese hong kong
  [16/09/2002 15:37|---hs----|181916] D:\protect.chinese simplified
  [16/09/2002 15:37|---hs----|181898] D:\protect.chinese traditional
  [27/04/2006 17:19|---hs----|181865] D:\protect.czech
  [03/11/2005 16:21|---hs----|181726] D:\protect.danish
  [10/09/2002 14:56|---hs----|181605] D:\protect.dutch
  [10/09/2002 14:50|---hs----|181651] D:\protect.ed
  [22/11/2004 16:28|---hs----|181648] D:\protect.english
  [03/11/2005 16:20|---hs----|181673] D:\protect.finnish
  [03/11/2005 16:19|---hs----|181736] D:\protect.french
  [03/11/2005 16:18|---hs----|181669] D:\protect.german
  [23/11/2005 16:56|---hs----|182689] D:\protect.greek
  [23/01/2006 10:18|---hs----|182605] D:\protect.hebrew
  [28/08/2007 15:58|---hs----|181696] D:\protect.hungarian
  [03/11/2005 16:17|---hs----|181554] D:\protect.italian
  [10/04/2006 10:46|---hs----|182566] D:\protect.japanese
  [24/11/2005 12:24|---hs----|218295] D:\protect.korean
  [03/11/2005 16:15|---hs----|181578] D:\protect.norwegian
  [25/04/2006 15:44|---hs----|181789] D:\protect.polish
  [03/11/2005 16:13|---hs----|181624] D:\protect.portuguese
  [27/10/2005 20:24|---hs----|181882] D:\protect.portuguese brazilian
  [28/06/2004 09:52|---hs----|211936] D:\protect.russian
  [03/11/2005 16:11|---hs----|181586] D:\protect.spanish
  [10/09/2002 15:15|---hs----|181602] D:\protect.swedish
  [12/08/2003 11:37|---hs----|181783] D:\protect.turkish
  [13/01/2008 02:29|---hs----|0] D:\USER
  
  ################## | Vaccination |
  
  # C:\autorun.inf -> Dossier créé par UsbFix.
  # D:\autorun.inf -> Dossier créé par UsbFix.
  
  ################## | Suspect | https://www.virustotal.com/gui/ |
  
  ################## | Cracks / Keygens / Serials |
  
  ################## | ! Fin du rapport # UsbFix V6.047 ! |
  
  0
Réponse 3 / 5
Utilisateur anonyme

bonjour,
1°supprime le restant de norton avec ceci :

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924

Un complément
https://www.01net.com/telecharger/windows/Utilitaire/manipulation_de_fichier/fiches/32585.html

2°fais une mise à jour de vista pour passer à sp2

3° fais une mise à jour de ta console java :
Ta console java n'est pas à jour, ce qui constitue une faille de sécurité.

Ouvre ce lien :
https://www.java.com/fr/download/manual.jsp

Choisis la première ligne de téléchargement puis installe java.

En fin d'installation, revient sur la page pour vérifier ton installation.

Quand l'installation a réussi, ouvre le panneau de configuration, Ajout/suppression de programmes et supprime
J2SE Runtime Environment Version 5.0 Update xx.

4° vas à la base de registre et modifies la clé , faire comme ceci:
- Démarrer - Exécuter , puis entrer regedit dans le champs, puis valider.
- L'éditeur de registre s'ouvre.
- Développer l'arborescence "HKEY_LOCAL_MACHINE" jusqu'à atteindre la clé HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Internet Explorer/AboutURls/Tabs.
- Double-cliquer sur la clé Tabs , puis entrer la valeur res://ieframe.dll/tabswelcome.htm .
- Valider, puis fermer l'éditeur de registre.

@++
0
1. tat
  
  slt,comme je te l'ai je suis pourrie en informatique.
  Alors ca veut dire quoi sp2??
  Jai fait le truc avec java mais apres quand il fallait supprimer J2SE...etc ben je lais pas trouver et jai donc pas pu le supprimer...
  Quand à l'étape 4 alors la jai rien reussi.Sur vista quand on met demarer ben ya pas executer après...
  
  bon je sais pas si c'est grave davoir aps reussi a faire tout ca;dsl mais merci!!
  
  0
Réponse 4 / 5
ak210306 Messages postés 446 Statut Membre 29

bonjours à tout les deux, juste pour avancer:

-sous vista, pour faire apparaitre éxecuter, il faut appuyer en même temps sur la touche windows(celle avec le logo windows)+ R

-SP2 est la mise à jour de windows que tu dois faire en faisant windows update

Bonne continuation
0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 5
Utilisateur anonyme

bonjour,
je vois que c'est toujours la crise par ici :-)

il faut que tu arrives à faire ce que je t'ai noté en poste 5, ton pc n'est pas à jour, ce qui laisse une faille de sécurité pour windows et laisse renter des virus sur ton pc !!!

tu suis l'ensemble des étapes, une par une et là ou ça coince, tu me fais signe.
je te rappelle qu'il n'y a que toi devant ton pc, et je vois pas ton pc non plus, donc il faut bien que tu prennes ton courage en main et suivre les étapes :-)

ne t'inquiettes pas, tout va bien se passer.

maintenat au boulot et tu me tiens au courant de l'avancenet des choses :-)
0

Lo.st reste malgré ST_Fix-1

5 réponses

Discussions similaires

Newsletters