Comment se libérer de Sécurity Master AV ?

Salut,

Désactive les logiciels de protection (Antivirus, Antispywares) puis :

Télécharge Combofix sUBs : http://download.bleepingcomputer.com/sUBs/ComboFix.exe et sauvegarde le sur ton bureau et pas ailleurs!

Double-clic sur combofix, accepte la licence d'utilisation et laisse toi guider.

Eventuellement, installe la console de récupération comme cela est conseillé

Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.

Tu as le tutorial sur ce lien pour t'aider : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

PS : si Combofix ne se lance pas, renomme le fichier Combofix et retente.

Si pas mieux, tente en mode sans échec sans prise en charge du réseau : Redémarre en mode sans échec, pour cela, redémarre l'ordinateur, avant le logo Windows, tapote sur la touche F8, un menu va apparaître, choisis Mode sans échec et appuye sur la touche entrée du clavier.

yep bha fais ça :)

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

* Sous Custom Scans/Fixes, copie-colle ce qu'il y a dans le cadre ci-dessous :
netsvcs
%SYSTEMDRIVE%\*.exe
c:\program files\gbllmbam /s
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32 /s
%systemroot%\*. /mp /s
CREATERESTOREPOINT
* Clique sur le bouton Quick Scan.
* Quand le scan est fini, utilise le site http://www.cijoint.fr/ pour me donner les deux rapports : OTL.Txt et Extras.Txt.

OK :)

Scanne ton PC avec Malwarebyte Anti-Malware : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

Tuto d'aide à l'utilisation : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Tu fais un scan et tu mets en quarantaine et voila.

puis :

- Télécharge http://www.trendsecure.com/portal/fr/_download/HJTInstall.exe ton bureau.
- Double-clic sur HijackThis
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur Do a scan and save log file.
- Le rapport s'ouvre sur le Bloc-Note
- Colle le rapport ici, pour cela :
- Menu Edition / Selectionner Tout
- Menu Edition / copier
- Ici dans un nouveau message : clic droit / coller

- Télécharge http://www.trendsecure.com/portal/fr/_download/HJTInstall.exe ton bureau.
- Double-clic sur HijackThis
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur Do a scan and save log file.
- Le rapport s'ouvre sur le Bloc-Note
- Colle le rapport ici, pour cela :
- Menu Edition / Selectionner Tout
- Menu Edition / copier
- Ici dans un nouveau message : clic droit / coller

C'est good.

Maintiens tes logiciel à jour c'est important, utilise ce programme : https://www.commentcamarche.net/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
Absolument à faire.

Pour désinstaller Combofix :
- Menu Démarrer / exécuter et tape : Combofix /uninstall puis OK (attention il y a pas d'espace entre le / et le uninstall)

Un peu de lecture pour éviter les infections :
- connaitre et éviter les infections : https://www.malekal.com/fichiers/projetantimalwares/ProjetAntiMalware-courte.pdf
- sécuriser son PC : http://forum.malekal.com/comment-securiser-son-ordinateur.html

génial ce ComboFix wow :)) enfin je suis libérééééééééééééé !!!!! lol thxxx

je rajoute le rapport extra

OTL Extras logfile created on: 19/02/2011 20:08:26 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\LILA\Downloads
Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 53,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298,09 Gb Total Space | 66,69 Gb Free Space | 22,37% Space Free | Partition Type: NTFS
Drive D: | 2,14 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: PC-DE-LILA | User Name: LILA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]

[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{2AB8BA7D-7B23-48C0-82AB-F42E75F2540B}" = rport=139 | protocol=6 | dir=out | app=system |
"{2BABC59D-8570-47C2-812D-F5B45DA33FF0}" = lport=445 | protocol=6 | dir=in | app=system |
"{45140EBB-AC2B-4617-BD4A-743B461023B6}" = lport=137 | protocol=17 | dir=in | app=system |
"{528B880B-C113-45E6-83D1-FE05E28068EE}" = lport=138 | protocol=17 | dir=in | app=system |
"{58B18DB2-F705-4C06-B755-3F8E8F0076CB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{5927A1DC-94D6-47D0-8D5A-933D47DF0A0F}" = rport=138 | protocol=17 | dir=out | app=system |
"{81A5B575-7DE0-4244-BA39-2BD2FD2B6D5E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{8B6C05A8-BA8F-41B3-B5FF-AE2DC7716FD2}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{B47901E6-F6F5-4BF9-B5C1-3C860E1ADAAD}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DE8C0E03-864A-4018-A8BC-975D621B7BEA}" = lport=139 | protocol=6 | dir=in | app=system |
"{F01C2607-0A2D-4ECC-9DDD-73ED0D622084}" = rport=445 | protocol=6 | dir=out | app=system |
"{FD8639B5-D4C2-4017-80FA-13E60A345B86}" = rport=137 | protocol=17 | dir=out | app=system |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06DE14D1-4E5A-461C-9C84-F7F3181FD84E}" = protocol=17 | dir=in | app=c:\program files\sfr\media center\httpd\httpd.exe |
"{0C5F4002-CD4E-4262-A27F-19556D7D03E2}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{1B6E0D51-3BE8-47CE-AECA-19B8CA7A9A53}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{30755D09-042B-4097-8BF8-64E925964260}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{388537E1-CFBD-4BCE-9661-6FAB1879D144}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{44E171BF-92EF-466E-9FF4-AC8F47DF4EE6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{4D504FAB-549C-4B45-B8D1-380D415D92FD}" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{52F562F2-15FA-4E1F-BA58-DB1FE10B49C5}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{657CB478-D902-476D-8161-1D9E99B55D12}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{74EB0038-7660-412C-8868-645F888952C4}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"{8659AA47-0D72-4EE0-B0C9-E8A93BE51FD8}" = protocol=6 | dir=in | app=c:\program files\sfr\media center\httpd\httpd.exe |
"{8CB25ED7-97D8-4D0F-8792-7E6A8E293546}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"{A747C7D1-F827-4188-8555-756216794A67}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{BA12856A-7FC6-4A20-BD4A-557869C6B6A5}" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"{BCE756B4-B810-4AB0-954E-69F34B8DBA0C}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{C7E97154-20F2-4476-960A-8C9B6AD6334B}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{C81D91E3-CDB2-46C3-815C-3A23E19A900C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{F3E060F0-11A5-4C7E-9C3A-46DDDA404FFE}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"TCP Query User{29768866-9920-4726-ABD8-599E8DFF1065}C:\program files\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{398887D6-C6EB-480C-845E-676CDAAA795A}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe |
"TCP Query User{5DA1AE59-8321-4B23-BD7C-1B6A6A3B1047}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{6F402947-D673-4677-BFF9-20DF2D9FA6AC}C:\programdata\2dde76d\sm2dde.exe" = protocol=6 | dir=in | app=c:\programdata\2dde76d\sm2dde.exe |
"TCP Query User{B22073C1-40AC-48DB-B56E-8051309C2220}C:\program files\bearshare applications\bearshare\bearshare.exe" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"TCP Query User{E371A623-5D42-4F58-AE13-85CAB3D38ABF}C:\program files\lime wire\ares.exe" = protocol=6 | dir=in | app=c:\program files\lime wire\ares.exe |
"TCP Query User{E4CCD5BB-FFCD-4D9C-9A63-F710527D45A7}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{0BC34B42-72FB-462B-85EC-671609405984}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
"UDP Query User{5942FEEE-9D16-47C4-B290-1591095DCC42}C:\programdata\2dde76d\sm2dde.exe" = protocol=17 | dir=in | app=c:\programdata\2dde76d\sm2dde.exe |
"UDP Query User{5F257895-A774-42D3-901C-7E4F2205AF91}C:\program files\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"UDP Query User{A526FEDC-92EE-4569-85F4-F40E5B700DFE}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{AF5E3FEE-4F04-4736-9AF9-0D6FCD167FCD}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe |
"UDP Query User{B6E6B3E0-499E-4C30-B6D9-E85308FA376B}C:\program files\lime wire\ares.exe" = protocol=17 | dir=in | app=c:\program files\lime wire\ares.exe |
"UDP Query User{E04A6A35-F780-4966-BDF2-04BFBFFD481A}C:\program files\bearshare applications\bearshare\bearshare.exe" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0DFB3DE8-65B9-44FF-AA0A-3BECC5A2BFD1}" = Adobe Flash Player 10 Plugin
"{0FA44E79-CD7D-4E8D-A2EE-26FE05F509B6}" = OpenOffice.org 3.1
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 21
"{3D9892BB-A751-4E48-ADC8-E4289956CE1D}" = QuickTime
"{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra
"{4634B21A-CC07-4396-890C-2B8168661FEA}" = Windows Live Writer
"{46ABBC54-1872-4AA3-95E2-F2C063A63F31}" = Installation Windows Live
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F624839-947D-46EA-BD63-FD847C1AC6F1}" = BearShare
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger
"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1036-7B44-A92000000001}" = Adobe Reader 9.2 - Français
"{B131E59D-202C-43C6-84C9-68F0C37541F1}" = Galerie de photos Windows Live
"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}" = iTunes
"{D5D81435-B8DE-4CAF-867F-7998F2B92CFC}" = Windows Live Contrôle parental
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype(TM) 5.1
"{EADAA6F7-991F-4CE9-B5CE-FCF3D81F7C7D}" = USB PC Camera (SN9C103)
"{ECD03DA7-5952-406A-8156-5F0C93618D1F}" = USB PC Camera Plus
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F30C2271-5D81-42DB-81C2-DD7853118F1E}" = W311U
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Ares" = Ares 2.1.2
"BearShare" = BearShare
"BearShare MediaBar" = MediaBar
"CCleaner" = CCleaner
"DivX Setup.divx.com" = Configuration DivX
"eMule" = eMule
"EoRezo_is1" = EoRezo 10.3
"Free Video Converter_is1" = Free Video Converter V 2.5
"Google Chrome" = Google Chrome
"HBLiteSA" = Hotbar
"LimeWire" = LimeWire 5.3.6
"Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"NSS" = Norton Security Scan
"NVIDIA Drivers" = NVIDIA Drivers
"PC SECURITY TEST 2010_is1" = PC SECURITY TEST 2010
"ResultBar" = ResultBar 1.0 build 113
"SFR_Kit" = SFR - Kit de connexion
"SFR_Media Center" = SFR - Media Center
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"ShopperReportsSA" = ShopperReports
"SoftwareUpdate_is1" = SoftwareUpdate 1.0
"VLC media player" = VLC media player 1.0.2
"WinLiveSuite_Wave3" = Installation Windows Live
"WinRAR archiver" = Logiciel d'archivage WinRAR

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 14/02/2011 03:43:00 | Computer Name = PC-de-LILA | Source = Software Licensing Service | ID = 8198
Description = L'activation des licences (SLUI.exe) a échoué avec le code d'erreur
suivant : 0x80070057

Error - 14/02/2011 04:10:04 | Computer Name = PC-de-LILA | Source = Application Error | ID = 1000
Description = Application défaillante DivXUpdate.exe, version 1.0.1.10, horodatage
0x4c06fc6d, module défaillant MSVCP80.dll, version 8.0.50727.4053, horodatage 0x4a594cd0,
code d'exception 0xc0000005, décalage d'erreur 0x000100b5, ID du processus 0xcd4,
heure de début de l'application 0x01cbcc1a614aecea.

Error - 15/02/2011 07:19:35 | Computer Name = PC-de-LILA | Source = Software Licensing Service | ID = 8198
Description = L'activation des licences (SLUI.exe) a échoué avec le code d'erreur
suivant : 0x80070057

Error - 15/02/2011 12:44:55 | Computer Name = PC-de-LILA | Source = Application Error | ID = 1000
Description = Application défaillante eorezo.exe, version 1.0.0.1, horodatage 0x4cb846fd,
module défaillant eorezo.exe, version 1.0.0.1, horodatage 0x4cb846fd, code d'exception
0x40000015, décalage d'erreur 0x00060d8b, ID du processus 0xc8c, heure de début
de l'application 0x01cbcd01c380663c.

Error - 17/02/2011 11:25:10 | Computer Name = PC-de-LILA | Source = Software Licensing Service | ID = 8198
Description = L'activation des licences (SLUI.exe) a échoué avec le code d'erreur
suivant : 0x80070057

Error - 17/02/2011 12:51:28 | Computer Name = PC-de-LILA | Source = Application Error | ID = 1000
Description = Application défaillante DivXUpdate.exe, version 1.0.1.10, horodatage
0x4c06fc6d, module défaillant MSVCP80.dll, version 8.0.50727.4053, horodatage 0x4a594cd0,
code d'exception 0xc0000005, décalage d'erreur 0x000100b5, ID du processus 0xcdc,
heure de début de l'application 0x01cbcebea9b29c57.

Error - 17/02/2011 16:07:12 | Computer Name = PC-de-LILA | Source = Application Error | ID = 1000
Description = Application défaillante eorezo.exe, version 1.0.0.1, horodatage 0x4cb846fd,
module défaillant eorezo.exe, version 1.0.0.1, horodatage 0x4cb846fd, code d'exception
0x40000015, décalage d'erreur 0x00060d8b, ID du processus 0xd3c, heure de début
de l'application 0x01cbcebea9d612ef.

Error - 18/02/2011 10:03:53 | Computer Name = PC-de-LILA | Source = Software Licensing Service | ID = 8198
Description = L'activation des licences (SLUI.exe) a échoué avec le code d'erreur
suivant : 0x80070057

Error - 19/02/2011 14:37:30 | Computer Name = PC-de-LILA | Source = Software Licensing Service | ID = 8198
Description = L'activation des licences (SLUI.exe) a échoué avec le code d'erreur
suivant : 0x80070057

Error - 19/02/2011 15:02:07 | Computer Name = PC-de-LILA | Source = Application Error | ID = 1000
Description = Application défaillante DivXUpdate.exe, version 1.0.1.10, horodatage
0x4c06fc6d, module défaillant MSVCP80.dll, version 8.0.50727.4053, horodatage 0x4a594cd0,
code d'exception 0xc0000005, décalage d'erreur 0x000100b5, ID du processus 0xc6c,
heure de début de l'application 0x01cbd063a003a2f9.

[ Media Center Events ]
Error - 06/07/2010 07:38:07 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

Error - 05/08/2010 15:46:20 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

Error - 24/08/2010 06:14:36 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

Error - 07/09/2010 11:43:23 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

Error - 07/09/2010 11:45:08 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.WaitForUploadComplete
failed. Please try to ping www.msn.com prior to filing a bug.; Win32 GetLastError
returned 10000109 Processus : DefaultDomain Nom de l'objet : Media Center Guide

Error - 07/09/2010 11:47:05 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.WaitForUploadComplete
failed. Please try to ping www.msn.com prior to filing a bug.; Win32 GetLastError
returned 10000109 Processus : DefaultDomain Nom de l'objet : Media Center Guide

Error - 07/09/2010 12:03:04 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

Error - 01/10/2010 15:21:03 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

Error - 09/01/2011 12:00:09 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

Error - 19/02/2011 14:36:35 | Computer Name = PC-de-LILA | Source = Media Center Guide | ID = 0
Description = Info sur l'événement : ERROR: SqmApiWrapper.TimerRecord failed; Win32
GetLastError returned 10000105 Processus : DefaultDomain Nom de l'objet : Media
Center Guide

[ System Events ]
Error - 12/02/2011 06:59:50 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 12/02/2011 07:23:25 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 13/02/2011 15:58:24 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 14/02/2011 03:39:09 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 15/02/2011 07:15:50 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 17/02/2011 11:22:19 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 17/02/2011 12:20:16 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 18/02/2011 10:00:56 | Computer Name = PC-de-LILA | Source = EventLog | ID = 6008
Description = L'arrêt système précédant à 21:08:59 le 17/02/2011 n'était pas prévu.

Error - 18/02/2011 10:00:58 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

Error - 19/02/2011 14:33:57 | Computer Name = PC-de-LILA | Source = HTTP | ID = 15016
Description =

< End of report >

Les nouveaux qui sont infectés.
Si vous avez besoin d'aide, merci de créer votre propre sujet.