Messages d'erreurs surement virus pffff

bonjour

Télécharge Random's system information tool RSIT et enregistre le sur ton Bureau.
Double clique sur RSIT.exepour lancer l'outil.
Clique sur ' continue ' à l'écran Disclaimer.
Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports.

C:\RSIT\log.txt & C:\RSIT\info.txt

CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller

Tutoriel de RSIT

Comment héberger les rapports trop longs de RSIT

merci de ton aide je fait sa tout de suite je te poste la réponce dès que c'est fini ^^

voila les rapports:

info.txt logfile of random's system information tool 1.06 2009-12-28 12:12:54

======Uninstall list======

-->I:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
-->I:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->I:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->I:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->I:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->I:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 I:\WINDOWS\INF\PCHealth.inf
3ivx D4 4.5.1 (remove only)-->"I:\Program Files\3ivx\3ivx D4 4.5.1\uninstall.exe"
AC-3 ACM Decompressor-->I:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection DefaultUninstall 132 I:\WINDOWS\INF\AC3ACM.inf
Ad-Aware-->"I:\Documents and Settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->I:\Documents and Settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
Adobe Flash Player 10 ActiveX-->I:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->I:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
Anagramarama-->C:\logiciels\petit jeux\Anagramarama\UninstallAnagramarama.exe
Archiveur WinRAR-->I:\Program Files\WinRAR\uninstall.exe
Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
Atheros Communications Inc.(R) AR8121/AR8113 Gigabit/Fast Ethernet Driver-->RunDll32 I:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "I:\Program Files\InstallShield Installation Information\{3108C217-BE83-42E4-AE9E-A56A2A92E549}\Setup.exe" -l0x9 -removeonly
ATI - Utilitaire de désinstallation du logiciel-->I:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI AVIVO Codecs-->MsiExec.exe /I{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}
ATI Catalyst Control Center-->RunDll32 I:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "I:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0
ATI Display Driver-->rundll32 I:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
ATI HYDRAVISION-->RunDll32 I:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "I:\Program Files\InstallShield Installation Information\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}\setup.exe"
ATI Parental Control & Encoder-->MsiExec.exe /I{36CDA33B-909B-4719-97D1-C4B99309BDC7}
ATI Problem Report Wizard-->MsiExec.exe /X{5DA6F06A-B389-407B-BF8C-1548767914D8}
Audacity 1.2.6-->"C:\logiciels\vide1\Audacity\unins000.exe"
avast! Antivirus-->I:\Program Files\Alwil Software\Avast4\aswRunDll.exe "I:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
AviSynth 2.5-->"C:\logiciels\avisynth\AviSynth 2.5\Uninstall.exe"
CamStudio 2.0 Fr-->C:\logiciels\vide2\CamStudio\unins000.exe
Catalyst Control Center - Branding-->MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}
CCleaner (remove only)-->"I:\Program Files\CCleaner\uninst.exe"
Correctif pour Windows XP (KB942288-v3)-->"I:\WINDOWS\$NtUninstallKB942288-v3$\spuninst\spuninst.exe"
DivX Codec-->C:\logiciels\divx (2)\DivX\DivXCodecUninstall.exe /CODEC
DivX Player-->C:\logiciels\divx (2)\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\logiciels\divx (2)\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
EA SPORTS online 2004-->C:\Mes documents\Antonin\Nouveau dossier\EASOUNInstaller.exe
Easy GIF Animator 4.9-->"I:\Program Files\Easy GIF Animator\unins000.exe"
Enigma-->"C:\logiciels\petit jeux\Enigma\uninstall.exe"
EPSON Logiciel imprimante-->I:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
EPSON Scan-->I:\Program Files\epson\escndv\setup\setup.exe /r
FIFA 2004-->C:\logiciels\EAUninstall.exe
Football Manager 2008-->"C:\jeux\fm2008\Uninstall_Football Manager 2008\Uninstall Football Manager 2008.exe"
Football Manager 2010-->"I:\Program Files\Sports Interactive\Football Manager 2010\Uninstall_Football Manager 2010\Uninstall Football Manager 2010.exe"
Fraps-->"C:\logiciels\capture écran vidéo\uninstall.exe"
Galerie de photos Windows Live-->MsiExec.exe /X{B131E59D-202C-43C6-84C9-68F0C37541F1}
Gestionnaire Internet-->I:\PROGRA~1\Wanadoo\uninstall.exe
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Google Earth-->MsiExec.exe /X{C084BC61-E537-11DE-8616-005056806466}
High Definition Audio Driver Package - KB888111-->"I:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
HijackThis 2.0.2-->"I:\Program Files\trend micro\HijackThis.exe" /uninstall
Installation Windows Live-->I:\Program Files\Windows Live\Installer\wlarp.exe
Installation Windows Live-->MsiExec.exe /I{46ABBC54-1872-4AA3-95E2-F2C063A63F31}
Java 2 Runtime Environment, SE v1.4.0_03-->RunDll32 I:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "I:\Program Files\InstallShield Installation Information\{AC1E4C93-C1E7-11D6-9D10-00010240CE95}\Setup.exe" Anytext
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216013FF}
Jooleem 0.1.4-->C:\logiciels\petit jeux\Jooleem\uninst.exe
Junk Mail filter update-->MsiExec.exe /I{E2DFE069-083E-4631-9B6C-43C48E991DE5}
Kyodai Mahjongg 2006 v1.0-->"C:\logiciels\petit jeux\Kyodai Mahjongg 2006\unins000.exe"
Lame ACM MP3 Codec-->I:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_LameMP3 132 I:\WINDOWS\INF\LameACM.inf
LimeWire 5.1.2-->"C:\logiciels\lime wire\LimeWire\uninstall.exe"
Linéo-->C:\logiciels\petit jeux\Lineo\Uninstall.exe
marvell 61xx-->I:\Program Files\Marvell\61xx\uninst-61xx.exe
Microsoft .NET Framework 2.0-->I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (French) 2007-->MsiExec.exe /X{90120000-0044-040C-0000-0000000FF1CE}
Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office Professional Plus 2007-->"I:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2007-->MsiExec.exe /X{90120000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Mots En Scene-->"C:\logiciels\petit jeux\MotsEnScene\uninstall.exe"
Mozilla Firefox (3.5.6)-->I:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
Multimedia Card Reader-->I:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{CA529363-D0F2-41EA-B44B-D7515A254645}
MUSK Codec Pack v6.0-->"I:\Program Files\MUSK Codec Pack v6\unins000.exe"
Nero 7 Essentials-->MsiExec.exe /I{5C4620E8-D754-43F5-8F8D-54BF58611036}
Nuclear Coffee - VideoGet 2.0.2.26-->"C:\logiciels\vidéoget\VideoGet\uninstall.exe"
Nvu 1.0-->C:\logiciels\nVu\Nvu\unins000.exe
On2 VP7 Personal Edition-->RunDll32 I:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "I:\Program Files\InstallShield Installation Information\{DD0DDC9E-2ED4-44DD-B461-0EFC126813A0}\Setup.exe" -l0x9
Orange Plug-in messagerie vocale 888-->RunDll32 I:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "I:\Program Files\InstallShield Installation Information\{16E79B1D-D1C2-4CA6-8B23-F4D890E0DCB9}\Setup.exe" -l0x40c --AddRemove
Outil de mise à jour Google-->"I:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
PDFCreator-->C:\logiciels\pdf créator\PDFCreator\unins000.exe
QuickTime Alternative 1.56-->"I:\Program Files\MUSK Codec Pack v6\QT\INST\unins000.exe"
Real Alternative 1.50 Lite-->"I:\Program Files\MUSK Codec Pack v6\Real\INST\unins000.exe"
Realtek High Definition Audio Driver-->RunDll32 I:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "I:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x40c -removeonly
Ri4m v5.0.1d-->C:\logiciels\Ri4m_Uninstal.exe
Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
Shareaza 2.4.0.0-->"C:\logiciels\Nouveau dossier\Shareaza\Uninstall\unins000.exe"
SIW version 2009-03-17-->"I:\Program Files\SIW\unins000.exe"
SpeedFan (remove only)-->"I:\Program Files\SpeedFan\uninstall.exe"
Spybot - Search & Destroy-->"C:\logiciels\spybot\Spybot - Search & Destroy\unins000.exe"
Sunbelt Kerio Personal Firewall-->MsiExec.exe /X{E659E0EE-10E6-49B7-8696-60F38D0EB174}
SUPER © Version 2009.bld.35 (Jan 5, 2009)-->C:\LOGICI~1\super\Setup.exe /remove /q0
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->I:\WINDOWS\system32\msiexec.exe /x {F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VLC media player 0.9.9-->C:\Mes documents\Antonin\vlc(2)\VLC\uninstall.exe
Vuze-->I:\Program Files\Vuze\uninstall.exe
Wanadoo Messager-->I:\PROGRA~1\WANADO~1\UNWISE.EXE I:\PROGRA~1\WANADO~1\INSTALL.LOG
Windows Imaging Component-->"I:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Installer 3.1 (KB893803)-->"I:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live FolderShare-->MsiExec.exe /X{2075CB0A-D26F-4DAA-B424-5079296B43BA}
Windows Live Mail-->MsiExec.exe /I{5DD76286-9BE7-4894-A990-E905E91AC818}
Windows Live Messenger-->MsiExec.exe /X{770F1BEC-2871-4E70-B837-FB8525FFA3B1}
Windows Live Writer-->MsiExec.exe /X{4634B21A-CC07-4396-890C-2B8168661FEA}
Windows XP Service Pack 2-->I:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe
Wow Cartographe 1.08b-->I:\Documents and Settings\Mathilde\Bureau\WowCartographe\uninst.exe
Xvid 1.1.3 final uninstall-->"I:\Program Files\MUSK Codec Pack v6\XviD\INST\unins000.exe"
ZTE ZXDSL852-->"I:\Program Files\ZTE Corporation\ZXDSL852\setup.exe" -u

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======Security center information======

AV: avast! antivirus 4.8.1368 [VPS 091227-1]
FW: Sunbelt Kerio Personal Firewall

======System event log======

Computer Name: BRD
Event Code: 7036
Message: Le service Carte de performance WMI est entré dans l'état : en cours d'exécution.

Record Number: 24995
Source Name: Service Control Manager
Time Written: 20091209170732.000000+060
Event Type: Informations
User:

Computer Name: BRD
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service Carte de performance WMI.

Record Number: 24994
Source Name: Service Control Manager
Time Written: 20091209170732.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BRD
Event Code: 7036
Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

Record Number: 24993
Source Name: Service Control Manager
Time Written: 20091209170731.000000+060
Event Type: Informations
User:

Computer Name: BRD
Event Code: 7036
Message: Le service NLA (Network Location Awareness) est entré dans l'état : en cours d'exécution.

Record Number: 24992
Source Name: Service Control Manager
Time Written: 20091209170731.000000+060
Event Type: Informations
User:

Computer Name: BRD
Event Code: 7035
Message: Un contrôle Démarrer a correctement été envoyé au service aswRdr.

Record Number: 24991
Source Name: Service Control Manager
Time Written: 20091209170731.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

=====Application event log=====

Computer Name: BRD
Event Code: 1035
Message: Windows Installer a reconfiguré le produit. Nom du produit : Microsoft Office Proof (Arabic) 2007. Version du produit : 12.0.4518.1014. Langue du produit : 1025. Réussite de la reconfiguration ou état d’erreur : 0.

Record Number: 7443
Source Name: MsiInstaller
Time Written: 20091119065842.000000+060
Event Type: Informations
User: BRD\Sylvie

Computer Name: BRD
Event Code: 11728
Message: Product: Microsoft Office Proof (Arabic) 2007 -- ???? ??????? ?????.

Record Number: 7442
Source Name: MsiInstaller
Time Written: 20091119065842.000000+060
Event Type: Informations
User: BRD\Sylvie

Computer Name: BRD
Event Code: 1040
Message: Commencement d'une transaction Windows Installer : {90120000-001F-0401-0000-0000000FF1CE}. Id de processus client : 2676.

Record Number: 7441
Source Name: MsiInstaller
Time Written: 20091119065841.000000+060
Event Type: Informations
User: BRD\Sylvie

Computer Name: BRD
Event Code: 1042
Message: Fin d'une transaction Windows Installer {90120000-001F-0409-0000-0000000FF1CE}. Id de processus client : 2676.

Record Number: 7440
Source Name: MsiInstaller
Time Written: 20091119065841.000000+060
Event Type: Informations
User: AUTORITE NT\SYSTEM

Computer Name: BRD
Event Code: 1035
Message: Windows Installer a reconfiguré le produit. Nom du produit : Microsoft Office Proof (English) 2007. Version du produit : 12.0.4518.1014. Langue du produit : 1033. Réussite de la reconfiguration ou état d’erreur : 0.

Record Number: 7439
Source Name: MsiInstaller
Time Written: 20091119065841.000000+060
Event Type: Informations
User: BRD\Sylvie

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;I:\Program Files\ATI Technologies\ATI.ACE\Core-Static;I:\Program Files\Fichiers communs\DivX Shared\
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO

-----------------EOF-----------------

voici le 2ième:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Antonin at 2009-12-28 12:23:48
Microsoft Windows XP Professionnel Service Pack 2
System drive I: has 47 GB (58%) free of 82 GB
Total RAM: 3327 MB (90% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:23:57, on 28/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
I:\WINDOWS\System32\smss.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
I:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\Explorer.EXE
C:\temp\RSIT.exe
I:\Program Files\trend micro\Antonin.exe
I:\WINDOWS\system32\taskmgr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trooner.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - I:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - I:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\LOGICI~1\spybot\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - I:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - I:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - I:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Sunkist2k] I:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "I:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "I:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] I:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /F "I:\WINDOWS\TEMP\E_S7F.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "I:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] I:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] I:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [WOOWATCH] I:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] I:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [HKLM] I:\WINDOWS\system32\win32\Keygen.exe
O4 - HKCU\..\Run: [WOOKIT] I:\PROGRA~1\Wanadoo\GestMaj.exe GestionnaireInternet.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\logiciels\Daemont tool\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [ctfmon.exe] I:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "I:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] I:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\logiciels\spybot\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [HKCU] I:\WINDOWS\system32\win32\Keygen.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] I:\WINDOWS\system32\Macromed\Flash\FlashUtil10c.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] I:\WINDOWS\system32\win32\Keygen.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] I:\WINDOWS\system32\win32\Keygen.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] I:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = I:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SpeedFan.lnk = I:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://I:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - I:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - I:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - I:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\LOGICI~1\spybot\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\LOGICI~1\spybot\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - I:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - I:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - I:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - I:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - I:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - I:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - I:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - I:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Service Google Update (gupdate1c9e202e365e4cc) (gupdate1c9e202e365e4cc) - Google Inc. - I:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - I:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - I:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - I:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - I:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NBService - Nero AG - I:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

je tien a précisé que j'ai fait sa dans le mode sans échec car sa ne marchais pas en mode normal

ok

pas de souci

Télécharge UsbFix et enregistre-le [gras]sur ton bureau/gras

tutoriel recherche

[gras]Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d'avoir été infectés sans les ouvrir/gras

Double clic sur le raccourci UsbFix sur ton bureau, l'installation se fera automatiquement

Choisi l'[gras]option 1/gras (recherche)

Laisse travailler l'outil

Ensuite post le rapport UsbFix.txt qui apparaîtra

Note : le rapport UsbFix.txt est sauvegardé a la racine du disque
Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus

oké je fait sa

il a falu que je connecte mon autre pc a une clé usb qui a été connecter a mon pc infecter, est-ce qu'il y a un ridque pour l'autre pc?

voila le rapport

############################## | UsbFix V6.067 |

User : Antonin (Administrateurs) # BRD
Update on 24/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 14:05:37 | 28/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Processeur Intel Pentium III Xeon
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Disabled
AV : avast! antivirus 4.8.1368 [VPS 091227-1] 4.8.1368 [ Enabled | Updated ]
FW : Sunbelt Kerio Personal Firewall[ Enabled ]4.3.268 T

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 385,76 Go (270,52 Go free) [Donnees] # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 954,48 Mo (754,16 Mo free) [ANTON USB] # FAT
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque fixe local # 80 Go (46,07 Go free) # NTFS
J:\ -> Disque CD-ROM
K:\ -> Disque CD-ROM
L:\ -> Disque amovible
M:\ -> Disque amovible # 7,65 Go (3,8 Go free) [ARCHOS 2] # FAT32
N:\ -> Disque amovible
Z:\ -> Disque amovible

############################## | Processus actifs |

I:\WINDOWS\System32\smss.exe 492
I:\WINDOWS\system32\csrss.exe 556
I:\WINDOWS\system32\winlogon.exe 588
I:\WINDOWS\system32\services.exe 632
I:\WINDOWS\system32\lsass.exe 644
I:\WINDOWS\system32\Ati2evxx.exe 804
I:\WINDOWS\system32\svchost.exe 824
I:\WINDOWS\system32\svchost.exe 1216
I:\WINDOWS\System32\svchost.exe 1256
I:\WINDOWS\system32\Ati2evxx.exe 1364
I:\WINDOWS\System32\svchost.exe 1372
I:\WINDOWS\System32\svchost.exe 1448
I:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1516
I:\Program Files\Alwil Software\Avast4\ashServ.exe 1628
I:\WINDOWS\system32\spoolsv.exe 1848
I:\WINDOWS\System32\FTRTSVC.exe 1976
I:\Program Files\Java\jre6\bin\jqs.exe 220
I:\WINDOWS\Explorer.EXE 148
I:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe 776
I:\WINDOWS\System32\svchost.exe 1052
I:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe 1400
I:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 2028
I:\WINDOWS\System32\wbem\unsecapp.exe 692
I:\Program Files\Alwil Software\Avast4\ashWebSv.exe 2076
I:\WINDOWS\System32\wbem\wmiprvse.exe 2120
I:\WINDOWS\System32\alg.exe 2292
I:\WINDOWS\System32\wbem\wmiapsrv.exe 2612
I:\WINDOWS\system32\wscntfy.exe 2668
I:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe 2816
I:\Program Files\Multimedia Card Reader\shwicon2k.exe 2856
I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe 2928
I:\WINDOWS\RTHDCPL.EXE 3236
I:\Program Files\Java\jre6\bin\jusched.exe 3272
I:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 3296
I:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 3320
C:\logiciels\Daemont tool\DAEMON Tools Lite\daemon.exe 3428
I:\WINDOWS\system32\ctfmon.exe 3456
I:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe 3712
I:\Program Files\Mozilla Firefox\firefox.exe 3740
I:\PROGRA~1\Wanadoo\TaskBarIcon.exe 3756
C:\logiciels\spybot\Spybot - Search & Destroy\TeaTimer.exe 3820
I:\Program Files\SpeedFan\speedfan.exe 3936
I:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe 5592
I:\Program Files\Lavasoft\Ad-Aware\AAWService.exe 272
I:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe 6580
I:\Program Files\Wanadoo\GestionnaireInternet.exe 3112
I:\Program Files\Wanadoo\ComComp.exe 1856
I:\PROGRA~1\Wanadoo\Toaster.exe 8156
I:\PROGRA~1\Wanadoo\Inactivity.exe 6368
I:\PROGRA~1\Wanadoo\PollingModule.exe 2656
I:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE 5328
I:\Program Files\Wanadoo\Watch.exe 5816
I:\Program Files\Internet Explorer\iexplore.exe 9348
I:\Program Files\Internet Explorer\iexplore.exe 10236
I:\WINDOWS\System32\wbem\wmiprvse.exe 8676

################## | Elements infectieux |

F:\autorun.ini

################## | Registre |

################## | Mountpoints2 |

HKCU\..\..\Explorer\MountPoints2\{23d58982-49ec-11de-a073-00d0d08b5652}
Shell\AutoRun\command =L:\wdsync.exe

HKCU\..\..\Explorer\MountPoints2\{73e18ff5-300e-11de-a02b-00d0d08b5652}
Shell\AutoRun\command =L:\AppliCME.exe
Shell\start\command =L:\AppliCME.exe

HKCU\..\..\Explorer\MountPoints2\{98dc888c-4168-11de-a060-00d0d08b5652}
Shell\AutoRun\command =0qw6vege.exe
Shell\open\Command =0qw6vege.exe

################## | Cracks / Keygens / Serials |

"C:\Football Manager 2008 (PC) + crack\autorun.exe"
26/09/2007 18:38 |Size 39680 |Crc32 bc2f8d22 |Md5 72739f4e8aac2dcf0b5d177b10381b17

"C:\Football Manager 2008 (PC) + crack\fm.exe"
23/08/2008 20:14 |Size 33574912 |Crc32 8f3e3b1d |Md5 f3d4ccf9164019a9e27e042bd352a92e

"C:\Football Manager 2008 (PC) + crack\setup.exe"
26/09/2007 18:38 |Size 2868480 |Crc32 5d1ac318 |Md5 b4ec3f651ffe463975a7b408cb3b7c06

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Windows\VM\setup.exe"
27/09/2007 22:43 |Size 31739578 |Crc32 a0f223a5 |Md5 14fd4df75087ae6e55599a36d6fa98ff

"C:\Mes documents\Antonin\Cracks FM09\activator.exe"
22/10/2008 10:16 |Size 2000128 |Crc32 1f0c8a85 |Md5 ea6082eecce2d0d9cece19b335d0d29b

"C:\Mes documents\Antonin\Cracks FM09\autorun.exe"
13/10/2008 20:45 |Size 136448 |Crc32 f97804eb |Md5 b5f3e27414e1e02c8b27d450952617a4

"C:\Mes documents\Antonin\Cracks FM09\fm.exe"
14/04/2009 20:21 |Size 27840512 |Crc32 cfeec131 |Md5 3de9afa0cd7066a39788de81c4b98830

"C:\Mes documents\Antonin\Cracks FM09\FM2009v9.1.0Patch.exe"
15/11/2008 11:49 |Size 173625485 |Crc32 2e3d32d0 |Md5 0b9aba755a027ec93f3a86ce1793ca6e

"C:\Mes documents\Antonin\Cracks FM09\setup.exe"
03/10/2008 13:16 |Size 1893632 |Crc32 e852deba |Md5 ac6660b5fd03780317549df5b7d32b83

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\autorun.exe"
13/10/2008 20:45 |Size 136448 |Crc32 f97804eb |Md5 b5f3e27414e1e02c8b27d450952617a4

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\setup.exe"
03/10/2008 13:16 |Size 1893632 |Crc32 e852deba |Md5 ac6660b5fd03780317549df5b7d32b83

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Windows\VM\setup.exe"
22/10/2008 21:04 |Size 31698500 |Crc32 d2767b7a |Md5 5311db1bf36329833894977eabf8baee

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\thirdparty\steam\checkinternet.exe"
03/10/2008 12:16 |Size 54520 |Crc32 6c82f3e8 |Md5 0a4c48aa5f06d37d50d3dda9e619d1dc

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\autorun.exe"
13/10/2008 20:45 |Size 136448 |Crc32 f97804eb |Md5 b5f3e27414e1e02c8b27d450952617a4

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\setup.exe"
03/10/2008 13:16 |Size 1893632 |Crc32 e852deba |Md5 ac6660b5fd03780317549df5b7d32b83

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Windows\VM\setup.exe"
22/10/2008 21:04 |Size 31698500 |Crc32 d2767b7a |Md5 5311db1bf36329833894977eabf8baee

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\thirdparty\steam\checkinternet.exe"
03/10/2008 12:16 |Size 54520 |Crc32 6c82f3e8 |Md5 0a4c48aa5f06d37d50d3dda9e619d1dc

"C:\Mes documents\Antonin\poubelle\Football Manager 2008 PL\Crack\fm.exe"
28/04/2009 23:54 |Size 33574912 |Crc32 bcee2db5 |Md5 30adc5dd2b0beb53912549544de6c7ea

"C:\temp\crack\Football.Manager.2010.Update.10.1.0.Crackfix-BAT\fm.exe"
06/11/2009 13:10 |Size 30127432 |Crc32 532fe980 |Md5 12eb59eca9ad85e8bd4af4aff3eb7ad0

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\fm.exe"
30/10/2009 20:55 |Size 30127432 |Crc32 b040891c |Md5 5d5eca05e140e5fa397c21466b165df1

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier\Football.Manager.2010.Update.10.1.0.Cracked-BAT\Crack\fm.exe"
30/10/2009 20:55 |Size 30127432 |Crc32 b040891c |Md5 5d5eca05e140e5fa397c21466b165df1

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier\Football.Manager.2010.Update.10.1.0.Cracked-BAT\Patch\FM2010_v10.1.0_PC_Patch.exe"
30/10/2009 21:18 |Size 74412032 |Crc32 0506b52f |Md5 be39e3f4005901fafbc70350225b49c8

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier (2)\fm.exe"
30/10/2009 20:55 |Size 30127432 |Crc32 b040891c |Md5 5d5eca05e140e5fa397c21466b165df1

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier (2)\Nouveau dossier (6)\fm.exe"
06/11/2009 13:10 |Size 30127432 |Crc32 532fe980 |Md5 12eb59eca9ad85e8bd4af4aff3eb7ad0

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM_build_area\full fm2008\exe and dlls\msvcr71.dll

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : MakeExecutableAction_zg_ia_sf.jar

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM_build_area\full fm2008\exe and dlls\dbghelp.dll

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_data\code\releases\fm\8.0\english\tools\data editor\editor\builds\win32\nightly\release\signed\data editor.exe

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_data\code\releases\fm\8.0\english\game\builds\win32\nightly\release final\securom cd\SKU3\fm.exe

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\Execute.zip"
-> Contain : Archive File: Execute.zip [ZIP]

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\Exec.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecBeanInfo.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$1.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$2.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU$ThreadedExec.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\ExecPU.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\service\RegexEvaluatorWrapper.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\interfaces\util\regex\RegexEvaluator.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : MakeExecutableAction_zg_ia_sf.jar

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\dotnetfx.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\DXSETUP.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\builds\projects\tools\uniloc activator\branches\main\builds\win32\release\activator.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\fm.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\data editor\data editor.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\resource archiver\Resource Archiver.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\Execute.zip"
-> Contain : Archive File: Execute.zip [ZIP]

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\Exec.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecBeanInfo.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecFile.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecuteScript.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$1.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$2.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU$ThreadedExec.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\ExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\service\RegexEvaluatorWrapper.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\interfaces\util\regex\RegexEvaluator.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : MakeExecutableAction_zg_ia_sf.jar

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\dotnetfx.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\DXSETUP.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\builds\projects\tools\uniloc activator\branches\main\builds\win32\release\activator.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\fm.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\data editor\data editor.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\resource archiver\Resource Archiver.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\Execute.zip"
-> Contain : Archive File: Execute.zip [ZIP]

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\Exec.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecBeanInfo.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecFile.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecuteScript.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$1.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$2.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU$ThreadedExec.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\ExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\service\RegexEvaluatorWrapper.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\interfaces\util\regex\RegexEvaluator.class

"C:\temp\crack\Football.Manager.2010.Update.10.1.0.Crackfix-BAT\b-fm101f.rar"
-> contain : fm.exe

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Football Manager 2010 10.1 Crack [shaks786].rar"
-> contain : fm.exe

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier\Football.Manager.2010.Update.10.1.0.Cracked-BAT\b-fm1010.rar"
-> contain : Crack\fm.exe

################## | ! Fin du rapport # UsbFix V6.067 ! |

re

t'étonne pas d'être infecter avec tout les crack que tu as

tutoriel nettoyage

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectés sans les ouvrir

Double clic sur le raccourci UsbFix présent sur ton bureau

choisi l'option 2 ( Suppression )

Ton bureau disparaîtra et le pc redémarrera .

Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

Ensuite post le rapport UsbFix.txt qui apparaîtra avec le bureau .

Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

:!: UsbFix te proposera d'uploader un dossier compressé à cette adresse : https://www.ionos.fr/?affiliate_id=77097

Ce dossier a été créé par UsbFix et est enregistré sur ton bureau.

Merci de l'envoyer à l'adresse indiquée afin d'aider l'auteur de UsbFix dans ses recherches.

Merci d'avance pour ta contribution !!

et quand j'auré fait sa je devrai plus avoir de problème?

non je ne pense pas on verra ensuite

say est c'est fait et effecdtivement sa fait toujours pareille

ya toujours les messages d'erreurs quand je lance mon pc

veut tu le rapport?

poste le rapport de nettoyage stp

ensuite

Télécharge Malwarebytes

Tu auras un tutoriel à ta disposition pour l'installer et l'utiliser correctement.

Fais la mise à jour du logiciel (elle se fait normalement à l'installation)

Lance une analyse complète en cliquant sur "Exécuter un examen complet"

Sélectionnes les disques que tu veux analyser et cliques sur "Lancer l'examen"

L'analyse peut durer un bon moment.....

Une fois l'analyse terminée, cliques sur "OK" puis sur "Afficher les résultats"

Vérifies que tout est bien coché et cliques sur "Supprimer la sélection" => et ensuite sur "OK"

Un rapport va s'ouvrir dans le bloc note... Fais un copié/collé du rapport dans ta prochaine réponse sur le forum

* Il se pourrait que certains fichiers devront être supprimés au redémarrage du PC... Faites le en cliquant sur "oui" à la question posée

voila le rapport UsbFix

j'annalise avec Malwarebytes et je te redis

en tout cas merci pour ton aide

############################## | UsbFix V6.067 |

User : Antonin (Administrateurs) # BRD
Update on 24/12/2009 by Chiquitine29, C_XX & Chimay8
Start at: 14:43:15 | 28/12/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Processeur Intel Pentium III Xeon
Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
Internet Explorer 6.0.2900.2180
Windows Firewall Status : Disabled
AV : avast! antivirus 4.8.1368 [VPS 091227-1] 4.8.1368 [ Enabled | Updated ]
FW : Sunbelt Kerio Personal Firewall[ Enabled ]4.3.268 T

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 385,76 Go (270,52 Go free) [Donnees] # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque CD-ROM
F:\ -> Disque amovible # 954,48 Mo (754,16 Mo free) [ANTON USB] # FAT
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque fixe local # 80 Go (46,02 Go free) # NTFS
J:\ -> Disque CD-ROM
K:\ -> Disque CD-ROM
L:\ -> Disque amovible
Z:\ -> Disque amovible

############################## | Processus actifs |

I:\WINDOWS\System32\smss.exe 764
I:\WINDOWS\system32\csrss.exe 832
I:\WINDOWS\system32\winlogon.exe 864
I:\WINDOWS\system32\services.exe 908
I:\WINDOWS\system32\lsass.exe 920
I:\WINDOWS\system32\Ati2evxx.exe 1100
I:\WINDOWS\system32\svchost.exe 1120
I:\WINDOWS\system32\svchost.exe 1188
I:\WINDOWS\System32\svchost.exe 1292
I:\WINDOWS\System32\svchost.exe 1436
I:\WINDOWS\System32\svchost.exe 1520
I:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1580
I:\WINDOWS\system32\logonui.exe 1596
I:\WINDOWS\system32\Ati2evxx.exe 1636
I:\Program Files\Lavasoft\Ad-Aware\AAWService.exe 1680
I:\Program Files\Alwil Software\Avast4\ashServ.exe 1760
I:\WINDOWS\system32\spoolsv.exe 140
I:\WINDOWS\System32\FTRTSVC.exe 660
I:\Program Files\Google\Update\GoogleUpdate.exe 688
I:\WINDOWS\Explorer.EXE 708
I:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 772
I:\Program Files\Google\Update\GoogleUpdate.exe 792
I:\Program Files\Java\jre6\bin\jqs.exe 972
I:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe 1312
I:\WINDOWS\System32\svchost.exe 1504
I:\Program Files\Google\Update\GoogleUpdate.exe 1672
I:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe 2092
I:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 2424
I:\WINDOWS\System32\wbem\unsecapp.exe 2460
I:\Program Files\Alwil Software\Avast4\ashWebSv.exe 2472
I:\WINDOWS\System32\wbem\wmiprvse.exe 2576
I:\WINDOWS\System32\wbem\wmiprvse.exe 2732
I:\WINDOWS\System32\alg.exe 2820
I:\WINDOWS\system32\wscntfy.exe 3184
I:\WINDOWS\System32\wbem\wmiapsrv.exe 3220
I:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe 3408
I:\WINDOWS\system32\rundll32.exe 3596

################## | Elements infectieux |

Supprimé ! C:\Recycler\S-1-5-21-746137067-861567501-725345543-1003
Supprimé ! C:\Recycler\S-1-5-21-746137067-861567501-725345543-1004
Supprimé ! C:\Recycler\S-1-5-21-746137067-861567501-725345543-1005
Supprimé ! F:\autorun.ini
Supprimé ! F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
Supprimé ! I:\Recycler\S-1-5-21-746137067-861567501-725345543-1003
Supprimé ! I:\Recycler\S-1-5-21-746137067-861567501-725345543-1004
Supprimé ! I:\Recycler\S-1-5-21-746137067-861567501-725345543-1005

################## | Registre |

################## | Mountpoints2 |

Supprimé ! HKCU\...\Explorer\MountPoints2\{23d58982-49ec-11de-a073-00d0d08b5652}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{73e18ff5-300e-11de-a02b-00d0d08b5652}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{98dc888c-4168-11de-a060-00d0d08b5652}\Shell\AutoRun\Command

################## | Listing des fichiers présent |

[28/09/2009 13:57|--a------|2512700] C:\0250010A_LyceeEPS_Sauvegarde_20090928.wdz
[29/09/2009 10:41|--a------|2720368] C:\0250010A_LyceeEPS_Sauvegarde_20090929.wdz
[01/10/2009 14:45|--a------|3112118] C:\0250010A_LyceeEPS_Sauvegarde_20091001.wdz
[04/10/2009 17:43|--a------|3112118] C:\0250010A_LyceeEPS_Sauvegarde_20091004.wdz
[13/10/2009 18:14|--a------|4117917] C:\0250010A_LyceeEPS_Sauvegarde_20091013.wdz
[28/12/2009 14:42|--a------|1606] C:\aaw7boot.log
[08/11/2009 12:24|--a------|0] C:\asoutput.log
[26/12/2009 18:10|--a------|58066] C:\cc_20091226_180916.reg
[17/04/2009 15:20|--a------|237] C:\debugInstaller.txt
[28/05/2009 20:24|-rahs----|0] C:\IO.SYS
[17/04/2009 13:08|--a------|633] C:\mpeg.txt
[28/05/2009 20:24|-rahs----|0] C:\MSDOS.SYS
[16/03/2009 16:42|--a------|1048576] C:\P5QC-ASUS-2002.ROM
[26/12/2009 11:13|--a------|16384] C:\Pack_plugins_K!TV_2.3.0.1_20050309.srm
[09/12/2007 17:36|--a------|708723] C:\Pack_plugins_K!TV_2.3.0.1_20050309.zip
[28/05/2009 20:29|--a------|2360] C:\tracert.txt
[09/09/2009 13:22|--a------|27136] F:\cv.doc
[09/10/2009 08:46|--a------|2533240] F:\ed941.pdf
[08/09/2009 08:58|--a------|4682607] F:\ed874.pdf
[13/10/2009 10:25|--a------|29184] F:\CV anton.doc
[09/09/2009 13:40|--a------|28672] F:\C.V. Seb.doc
[09/09/2009 23:07|--a------|63122] F:\atestation.jpg
[28/12/2009 13:39|--a------|56062] F:\apart.jpg
[05/10/2009 22:43|--a------|22528] F:\lettre de motiv.doc
[10/11/2009 17:47|--a------|380928] F:\pays.mdb
[06/11/2009 13:10|--a------|30127432] F:\fm.exe
[06/09/2009 20:05|--a------|16409960] F:\spybotsd162.exe
[11/09/2009 14:49|--ah-----|4096] F:\._.Trashes
[09/10/2009 08:46|--a------|1353343] F:\ETECH.pdf
[22/10/2008 09:49|--a------|2529280] F:\La CEM ‚lŠve.ppt
[06/09/2009 01:22|--a------|544768] F:\saAudit2005MT.dll
[30/10/2009 15:35|--a------|27648150] F:\french.ltc
[09/10/2009 08:42|--a------|205921] F:\Aspects normatifscablofil.pdf
[09/10/2009 08:45|--a------|1501678] F:\Calcul section.pptx
[09/10/2009 08:45|--a------|2195943] F:\DiffPoseCables.pdf
[16/11/2009 15:34|--a------|384569] F:\GuideISA84-01.pdf
[16/11/2009 15:34|--a------|118202] F:\Sil sur Mesures.pdf
[16/11/2009 15:35|--a------|2046361] F:\Normes SIL.pdf
[04/09/2008 07:15|--a------|741888] F:\Conduite de Projet-2008.ppt
[02/12/2009 19:15|--a------|10287] F:\site weeb.docx
[25/12/2009 22:01|--a------|9988] F:\S‚rial.docx
[27/12/2009 16:05|--a------|36806] F:\journal d'analyse.txt
[28/12/2009 11:10|--a------|291078] F:\Sans titre.bmp
[28/12/2009 10:52|--a------|2359350] F:\message d'arreur.bmp
[02/07/2009 15:10|--a------|0] I:\asoutput.log
[12/04/2009 17:49|-rahs----|211] I:\boot.ini
[28/08/2001 13:00|-rahs----|4952] I:\Bootfont.bin
[12/06/2009 17:35|--a------|534] I:\error.log
[12/04/2009 17:48|-rahs----|47564] I:\NTDETECT.COM
[12/04/2009 17:48|-rahs----|251712] I:\ntldr
[29/02/2004 16:44|--a------|52576] I:\orange.bmp
[?|?|?] I:\pagefile.sys
[14/04/2009 19:39|--a------|1048576] I:\SAUVBIOS
[28/12/2009 14:47|--a------|6832] I:\UsbFix.txt

################## | Vaccination |

# C:\autorun.inf -> Dossier créé par UsbFix.
# F:\autorun.inf -> Dossier créé par UsbFix.
# I:\autorun.inf -> Dossier créé par UsbFix.

################## | Cracks / Keygens / Serials |

"C:\Football Manager 2008 (PC) + crack\autorun.exe"
26/09/2007 18:38 |Size 39680 |Crc32 bc2f8d22 |Md5 72739f4e8aac2dcf0b5d177b10381b17

"C:\Football Manager 2008 (PC) + crack\fm.exe"
23/08/2008 20:14 |Size 33574912 |Crc32 8f3e3b1d |Md5 f3d4ccf9164019a9e27e042bd352a92e

"C:\Football Manager 2008 (PC) + crack\setup.exe"
26/09/2007 18:38 |Size 2868480 |Crc32 5d1ac318 |Md5 b4ec3f651ffe463975a7b408cb3b7c06

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Windows\VM\setup.exe"
27/09/2007 22:43 |Size 31739578 |Crc32 a0f223a5 |Md5 14fd4df75087ae6e55599a36d6fa98ff

"C:\Mes documents\Antonin\Cracks FM09\activator.exe"
22/10/2008 10:16 |Size 2000128 |Crc32 1f0c8a85 |Md5 ea6082eecce2d0d9cece19b335d0d29b

"C:\Mes documents\Antonin\Cracks FM09\autorun.exe"
13/10/2008 20:45 |Size 136448 |Crc32 f97804eb |Md5 b5f3e27414e1e02c8b27d450952617a4

"C:\Mes documents\Antonin\Cracks FM09\fm.exe"
14/04/2009 20:21 |Size 27840512 |Crc32 cfeec131 |Md5 3de9afa0cd7066a39788de81c4b98830

"C:\Mes documents\Antonin\Cracks FM09\FM2009v9.1.0Patch.exe"
15/11/2008 11:49 |Size 173625485 |Crc32 2e3d32d0 |Md5 0b9aba755a027ec93f3a86ce1793ca6e

"C:\Mes documents\Antonin\Cracks FM09\setup.exe"
03/10/2008 13:16 |Size 1893632 |Crc32 e852deba |Md5 ac6660b5fd03780317549df5b7d32b83

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\autorun.exe"
13/10/2008 20:45 |Size 136448 |Crc32 f97804eb |Md5 b5f3e27414e1e02c8b27d450952617a4

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\setup.exe"
03/10/2008 13:16 |Size 1893632 |Crc32 e852deba |Md5 ac6660b5fd03780317549df5b7d32b83

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Windows\VM\setup.exe"
22/10/2008 21:04 |Size 31698500 |Crc32 d2767b7a |Md5 5311db1bf36329833894977eabf8baee

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\thirdparty\steam\checkinternet.exe"
03/10/2008 12:16 |Size 54520 |Crc32 6c82f3e8 |Md5 0a4c48aa5f06d37d50d3dda9e619d1dc

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\autorun.exe"
13/10/2008 20:45 |Size 136448 |Crc32 f97804eb |Md5 b5f3e27414e1e02c8b27d450952617a4

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\setup.exe"
03/10/2008 13:16 |Size 1893632 |Crc32 e852deba |Md5 ac6660b5fd03780317549df5b7d32b83

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Windows\VM\setup.exe"
22/10/2008 21:04 |Size 31698500 |Crc32 d2767b7a |Md5 5311db1bf36329833894977eabf8baee

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\thirdparty\steam\checkinternet.exe"
03/10/2008 12:16 |Size 54520 |Crc32 6c82f3e8 |Md5 0a4c48aa5f06d37d50d3dda9e619d1dc

"C:\Mes documents\Antonin\poubelle\Football Manager 2008 PL\Crack\fm.exe"
28/04/2009 23:54 |Size 33574912 |Crc32 bcee2db5 |Md5 30adc5dd2b0beb53912549544de6c7ea

"C:\temp\crack\Football.Manager.2010.Update.10.1.0.Crackfix-BAT\fm.exe"
06/11/2009 13:10 |Size 30127432 |Crc32 532fe980 |Md5 12eb59eca9ad85e8bd4af4aff3eb7ad0

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\fm.exe"
30/10/2009 20:55 |Size 30127432 |Crc32 b040891c |Md5 5d5eca05e140e5fa397c21466b165df1

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier\Football.Manager.2010.Update.10.1.0.Cracked-BAT\Crack\fm.exe"
30/10/2009 20:55 |Size 30127432 |Crc32 b040891c |Md5 5d5eca05e140e5fa397c21466b165df1

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier\Football.Manager.2010.Update.10.1.0.Cracked-BAT\Patch\FM2010_v10.1.0_PC_Patch.exe"
30/10/2009 21:18 |Size 74412032 |Crc32 0506b52f |Md5 be39e3f4005901fafbc70350225b49c8

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier (2)\fm.exe"
30/10/2009 20:55 |Size 30127432 |Crc32 b040891c |Md5 5d5eca05e140e5fa397c21466b165df1

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier (2)\Nouveau dossier (6)\fm.exe"
06/11/2009 13:10 |Size 30127432 |Crc32 532fe980 |Md5 12eb59eca9ad85e8bd4af4aff3eb7ad0

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM_build_area\full fm2008\exe and dlls\msvcr71.dll

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : MakeExecutableAction_zg_ia_sf.jar

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM_build_area\full fm2008\exe and dlls\dbghelp.dll

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_data\code\releases\fm\8.0\english\tools\data editor\editor\builds\win32\nightly\release\signed\data editor.exe

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_data\code\releases\fm\8.0\english\game\builds\win32\nightly\release final\securom cd\SKU3\fm.exe

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\Execute.zip"
-> Contain : Archive File: Execute.zip [ZIP]

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\Exec.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecBeanInfo.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$1.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$2.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU$ThreadedExec.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\ExecPU.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\service\RegexEvaluatorWrapper.class

"C:\Football Manager 2008 (PC) + crack\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\interfaces\util\regex\RegexEvaluator.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : MakeExecutableAction_zg_ia_sf.jar

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\dotnetfx.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\DXSETUP.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\builds\projects\tools\uniloc activator\branches\main\builds\win32\release\activator.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\fm.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\data editor\data editor.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\resource archiver\Resource Archiver.exe

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\Execute.zip"
-> Contain : Archive File: Execute.zip [ZIP]

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\Exec.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecBeanInfo.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecFile.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecuteScript.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$1.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$2.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU$ThreadedExec.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\ExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\service\RegexEvaluatorWrapper.class

"C:\Mes documents\Antonin\Cracks FM09\a instal‚\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\interfaces\util\regex\RegexEvaluator.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : MakeExecutableAction_zg_ia_sf.jar

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\dotnetfx.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\dev\projects\tools\installer\directx\DXSETUP.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\perforce_combined\builds\projects\tools\uniloc activator\branches\main\builds\win32\release\activator.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\fm.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\data editor\data editor.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\Resource1.zip"
-> Contain : E_\FM09_build_area\archived_data\sku2 steam\tools\resource archiver\Resource Archiver.exe

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\Execute.zip"
-> Contain : Archive File: Execute.zip [ZIP]

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\Exec.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecBeanInfo.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecFile.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\ExecuteScript.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$1.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable$2.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\actions\MakeExecutable.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU$ThreadedExec.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\CertifiedBourneExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\ExecPU.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\ia\installer\util\service\RegexEvaluatorWrapper.class

"C:\Mes documents\Antonin\Cracks FM09\Nouveau dossier\Disk1\InstData\MacOSX\setup.app\Contents\Resources\Java\IAClasses.zip"
-> Contain : com\zerog\interfaces\util\regex\RegexEvaluator.class

"C:\temp\crack\Football.Manager.2010.Update.10.1.0.Crackfix-BAT\b-fm101f.rar"
-> contain : fm.exe

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Football Manager 2010 10.1 Crack [shaks786].rar"
-> contain : fm.exe

"I:\Program Files\Sports Interactive\Football Manager 2010\crack\Nouveau dossier\Football.Manager.2010.Update.10.1.0.Cracked-BAT\b-fm1010.rar"
-> contain : Crack\fm.exe

################## | Upload |

Veuillez envoyer le fichier : I:\DOCUME~1\Antonin\Bureau\UsbFix_Upload_Me_BRD.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .

################## | ! Fin du rapport # UsbFix V6.067 ! |

voila ce que j'obtient
http://nsa10.casimages.com/img/2009/12/28/091228060332528442.jpg

je fait quoi je suprime tout??

j'ai fait suprimer
j'ai relancer mon pc et a parement mes message d'erreurs ne sont plus la.
je testerai ce soir voir comment évolue mon pc. mais a priori sa va.

est-ce tout ce que j'ai a faire ou il faut faire un truc en plus?

en tout cas merci pour ton aide qui m'a été très présieuse.

merci beaucoup ^^

ok

reposte un log RSIT stp

Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3443
Windows 5.1.2600 Service Pack 2 (Safe Mode)
Internet Explorer 6.0.2900.2180

28/12/2009 18:17:21
mbam-log-2009-12-28 (18-17-21).txt

Type de recherche: Examen complet (C:\|F:\|I:\|M:\|)
Eléments examinés: 213544
Temps écoulé: 42 minute(s), 18 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 8

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{w8os56i8-i50y-q127-6j48-p6ktm0ovmj0q} (Generic.Bot.H) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hkcu (Trojan.Dropper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\policies (Trojan.Dropper) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\hklm (Trojan.Dropper) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\policies (Trojan.Dropper) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
I:\WINDOWS\system32\win32\Keygen.exe (Generic.Bot.H) -> Quarantined and deleted successfully.
I:\Documents and Settings\Antonin\Application Data\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
I:\Documents and Settings\Mathilde\Application Data\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
I:\Documents and Settings\Sylvie\Application Data\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
I:\Documents and Settings\Antonin\Local Settings\Temp\UuU.uUu (Malware.Trace) -> Quarantined and deleted successfully.
I:\Documents and Settings\Antonin\Local Settings\Temp\XxX.xXx (Malware.Trace) -> Quarantined and deleted successfully.
I:\WINDOWS\system32\win32\logg.dat (Backdoor.Bot) -> Quarantined and deleted successfully.
I:\Documents and Settings\Antonin\Application Data\addons.dat (Bifrose.Trace) -> Quarantined and deleted successfully.

non cela et le rapport de MBAM

RSIT doit être sur ton bureau lance le et poste moi le nouveau rapport stp