VIRUS I-worm nimda.A.HTM

salut

télécharge

https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

a l'installation vérifie que mise a jour et lancer programme et scan COMPLET sont bien cocher

Une fois a jour, le programme va se lancer; clic sur l'onglet paramètre, et coche la case : "Arrêter internet explorer pendant la suppression".

A la fin du scan clique sur Afficher les résultats

Vérifier si tout est coché et clic Supprimer la sélection

S'il t'es demandé de redémarrer >>> clique sur "Yes"

Et tu poste le rapport générer

salut,

avant de recevoir ta réponse j'ai lancé spybot et ad aware j'ai donc le fichier d'analyse de ad aware qui est a la suite.
Entre-temps j'ai lancé malwarebytes et je posterai les résultats dès que l'analyse sera achevée.
ah oui et pour info, avg me dit maintenant que la menace détectée s'appelle : cheval de troie downloader.Agent2.AFEA

Merci pour ton aide !

Logfile created: 21/10/2010 07:32:05
Ad-Aware version: 8.3.4
Extended engine: 3
Extended engine version: 3.1.2770
User performing scan: Marine

*********************** Definitions database information ***********************
Lavasoft definition file: 150.130
Genotype definition file version: 2010/10/15 09:03:50
Extended engine definition file: 7108.0

******************************** Scan results: *********************************
Scan profile name: Analyse complète (ID: full)
Objects scanned: 199949
Objects detected: 139

Type Detected
==========================
Processes.......: 0
Registry entries: 99
Hostfile entries: 0
Files...........: 9
Folders.........: 4
LSPs............: 0
Cookies.........: 27
Browser hijacks.: 0
MRU objects.....: 0

Removed items:
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408910 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408955 Family ID: 0
Description: *bs.serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408902 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409130 Family ID: 0
Description: *webtrends* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 599640 Family ID: 0
Description: *2o7* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408943 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409020 Family ID: 0
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408910 Family ID: 0
Description: *bs.serving-sys* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408902 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 409130 Family ID: 0
Description: *doubleclick* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408875 Family ID: 0
Description: *2o7* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408943 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408921 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 409020 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408955 Family ID: 0
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408910 Family ID: 0
Description: *weborama* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408955 Family ID: 0
Description: *bs.serving-sys* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408902 Family ID: 0
Description: *serving-sys* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 409130 Family ID: 0
Description: *webtrends* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 599640 Family ID: 0
Description: *2o7* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408943 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 408921 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Failed Item ID: 409020 Family ID: 0
Description: c:\program files (x86)\shopperreports3 Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 1927534 Family ID: 3251
Description: c:\programdata\microsoft\windows\start menu\programs\shopperreports Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 1927535 Family ID: 3251
Description: c:\users\marine\application data\shopperreports3 Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 1927536 Family ID: 3251
Description: c:\users\marine\appdata\roaming\shopperreports3 Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336645 Family ID: 3251

Quarantined items:
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\shopperreports.dll Family Name: Win32.Adware.ShopperReports/E Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: e2f988bfca2bd9d0590568c814a17e71
Description: HKCR:CLSID\{100EB1FD-D03E-47fd-81F3-EE91287F9465}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 0 Family ID: 3251
Description: HKLM:Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\\{100EB1FD-D03E-47fd-81F3-EE91287F9465}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 0 Family ID: 3251
Description: c:\users\marine\downloads\vlcsetup.exe Family Name: Zango/W Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: 47547ad193cec7f37711973cdbd9f73b
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\brnstie.dll Family Name: Win32.Adware.ShopperReports/E Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: d46df4806ac0abf40fee42682df4bbbc
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\cmndff.dll Family Name: Win32.Adware.ShopperReports/E Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: 31103cd37c103932e01c919166dfbd62
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\cntntcntr.dll Family Name: Win32.Adware.ShopperReports/E Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: 5168eed802008e045f46f686f52e5629
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\mozillaps.dll Family Name: Win32.Adware.ShopperReports/E Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: 007b8fdecd2de553cb18be3b32baaf34
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\pltfrm.dll Family Name: Win32.Adware.ShopperReports/E Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: f432ef5cef020eab60771203dcbf75a4
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\firefox\firefoxtoolbar\extensions\components\brnstff.dll Family Name: Win32.Adware.ShopperReports/E Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: 9cf0b1706146c999e68a3130de9fa695
Description: c:\program files (x86)\shopperreports3\bin\3.0.485.0\shopperreportsuninstaller.exe Family Name: Win32.Adware.SmartShopper/C Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: f5b0fe2b779d7dca540a032e12197626
Description: HKCR:AppID\BRNstIE.DLL: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4336700 Family ID: 1107
Description: HKCR:AppID\CmndFF.DLL: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4336701 Family ID: 1107
Description: HKCR:AppID\mozillaps.dll: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4336702 Family ID: 1107
Description: HKCR:AppID\Pltfrm.DLL: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4336703 Family ID: 1107
Description: HKCR:CLSID\{09325003-167C-483d-A4BA-8B3122ABB432}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608610 Family ID: 1107
Description: HKCR:CLSID\{2721A8E5-BFDB-4562-9912-9E0531CA616C}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608611 Family ID: 1107
Description: HKCR:CLSID\{396CFC12-932D-496b-A0A8-5D7201E105E1}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608612 Family ID: 1107
Description: HKCR:CLSID\{60DA826C-B1C6-4358-BDEC-4837CED45470}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608615 Family ID: 1107
Description: HKCR:CLSID\{6DD76B7B-6423-4df0-9A07-84A6CAD973A0}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608616 Family ID: 1107
Description: HKCR:CLSID\{74C22317-5B90-471f-9AD2-FEC049870A16}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608617 Family ID: 1107
Description: HKCR:CLSID\{7F6CFB6A-9227-4bb8-B941-F2B067E76F51}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608618 Family ID: 1107
Description: HKCR:CLSID\{AB0EE208-DF60-4fa7-A617-C4269760033E}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608619 Family ID: 1107
Description: HKCR:CLSID\{C1089F63-7AFC-4538-B0EB-BEA0F4225A57}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608620 Family ID: 1107
Description: HKCR:CLSID\{CC7BD6F1-565C-47ce-A5BB-9C935E77B59D}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608621 Family ID: 1107
Description: HKCR:CLSID\{CFC16189-8A92-4a29-A940-60248385F426}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608622 Family ID: 1107
Description: HKCR:CLSID\{DEE758B4-C3FB-4a5b-9939-848B9C77A2FB}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608623 Family ID: 1107
Description: HKCR:CLSID\{E12AEAB6-7D12-4c07-8E36-5892EFB4DAFB}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608624 Family ID: 1107
Description: HKCR:CLSID\{E2F2C137-A782-4fb5-81AF-086156F5EB0A}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608625 Family ID: 1107
Description: HKCR:CLSID\{F1D06C9F-51F0-4476-BEDE-5DDF91BE304E}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608626 Family ID: 1107
Description: HKCR:CLSID\{F3A32DF2-7413-4fb1-B575-1AC920A17B76}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608627 Family ID: 1107
Description: HKCR:Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608628 Family ID: 1107
Description: HKCR:Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608629 Family ID: 1107
Description: HKCR:Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608630 Family ID: 1107
Description: HKCR:Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608631 Family ID: 1107
Description: HKCR:Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608632 Family ID: 1107
Description: HKCR:Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608633 Family ID: 1107
Description: HKCR:Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608634 Family ID: 1107
Description: HKCR:Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608635 Family ID: 1107
Description: HKCR:Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608636 Family ID: 1107
Description: HKCR:Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608637 Family ID: 1107
Description: HKCR:Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608638 Family ID: 1107
Description: HKCR:Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608639 Family ID: 1107
Description: HKCR:Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608640 Family ID: 1107
Description: HKCR:Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608641 Family ID: 1107
Description: HKCR:Interface\{F8B4EC8A-2407-4BE0-AEE2-0F430D65A90D}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608642 Family ID: 1107
Description: HKCR:TypeLib\{02AED140-2B62-4B49-8B3B-179020CC39B9}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608643 Family ID: 1107
Description: HKCR:TypeLib\{573F4ABB-A1A2-44ED-9BA9-A8DAD40AAC46}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608644 Family ID: 1107
Description: HKCR:TypeLib\{5FE0CEAE-CB69-40AF-A323-40F94257DACB}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608645 Family ID: 1107
Description: HKCR:TypeLib\{ACC62306-9A63-4864-BD2F-C8825D2D7EA6}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608647 Family ID: 1107
Description: HKCR:TypeLib\{F1A1892C-2A6C-4817-98B4-FF81443CBA20}: Family Name: Zango Engine: 1 Clean status: Success Item ID: 4608648 Family ID: 1107
Description: HKCR:CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52092 Family ID: 3251
Description: HKCR:CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52093 Family ID: 3251
Description: HKCR:CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52094 Family ID: 3251
Description: HKCR:CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52095 Family ID: 3251
Description: HKCR:CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52096 Family ID: 3251
Description: HKCR:TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52097 Family ID: 3251
Description: HKCR:TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52098 Family ID: 3251
Description: HKCR:TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52099 Family ID: 3251
Description: HKLM:SOFTWARE\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52100 Family ID: 3251
Description: HKLM:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100EB1FD-D03E-47FD-81F3-EE91287F9465}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52101 Family ID: 3251
Description: HKCR:Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52103 Family ID: 3251
Description: HKCR:Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52104 Family ID: 3251
Description: HKCR:Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52105 Family ID: 3251
Description: HKLM:SOFTWARE\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52106 Family ID: 3251
Description: HKU:S-1-5-21-2588857807-184109249-15248406-1001\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 52107 Family ID: 3251
Description: HKU:S-1-5-21-2588857807-184109249-15248406-1001\Software\ShopperReports3: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336657 Family ID: 3251
Description: HKCR:ShopperReports.AsyncReporter: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336658 Family ID: 3251
Description: HKCR:ShopperReports.AsyncReporter.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336659 Family ID: 3251
Description: HKCR:ShopperReports.CntntDic: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336660 Family ID: 3251
Description: HKCR:ShopperReports.CntntDic.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336661 Family ID: 3251
Description: HKCR:ShopperReports.CntntDisp: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336662 Family ID: 3251
Description: HKCR:ShopperReports.CntntDisp.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336663 Family ID: 3251
Description: HKCR:ShopperReports.Dwnldr: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336664 Family ID: 3251
Description: HKCR:ShopperReports.Dwnldr.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336665 Family ID: 3251
Description: HKCR:ShopperReports.HbAx: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336666 Family ID: 3251
Description: HKCR:ShopperReports.HbAx.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336667 Family ID: 3251
Description: HKCR:ShopperReports.HbGuru: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336668 Family ID: 3251
Description: HKCR:ShopperReports.HbGuru.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336669 Family ID: 3251
Description: HKCR:ShopperReports.HbInfoBand: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336670 Family ID: 3251
Description: HKCR:ShopperReports.HbInfoBand.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336671 Family ID: 3251
Description: HKCR:ShopperReports.IEButton: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336672 Family ID: 3251
Description: HKCR:ShopperReports.IEButton.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336673 Family ID: 3251
Description: HKCR:ShopperReports.IEButtonA: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336674 Family ID: 3251
Description: HKCR:ShopperReports.IEButtonA.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336675 Family ID: 3251
Description: HKCR:ShopperReports.KOPFF: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336676 Family ID: 3251
Description: HKCR:ShopperReports.KOPFF.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336677 Family ID: 3251
Description: HKCR:ShopperReports.MozillaNvgtnTrpr: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336678 Family ID: 3251
Description: HKCR:ShopperReports.MozillaNvgtnTrpr.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336679 Family ID: 3251
Description: HKCR:ShopperReports.MozillaPSExecuter: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336680 Family ID: 3251
Description: HKCR:ShopperReports.MozillaPSExecuter.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336681 Family ID: 3251
Description: HKCR:ShopperReports.ReportData: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336682 Family ID: 3251
Description: HKCR:ShopperReports.ReportData.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336683 Family ID: 3251
Description: HKCR:ShopperReports.Reporter: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336684 Family ID: 3251
Description: HKCR:ShopperReports.Reporter.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336685 Family ID: 3251
Description: HKCR:ShopperReports.RprtCtrl: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336686 Family ID: 3251
Description: HKCR:ShopperReports.RprtCtrl.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336687 Family ID: 3251
Description: HKCR:ShopperReports.Scopes: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336688 Family ID: 3251
Description: HKCR:ShopperReports.Scopes.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336689 Family ID: 3251
Description: HKCR:ShopperReports.Stock: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336690 Family ID: 3251
Description: HKCR:ShopperReports.Stock.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336691 Family ID: 3251
Description: HKCR:ShopperReports.TriggerImmidiate: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336692 Family ID: 3251
Description: HKCR:ShopperReports.TriggerImmidiate.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336693 Family ID: 3251
Description: HKCR:ShopperReports.TriggerImmidiateOrRandomTS: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336694 Family ID: 3251
Description: HKCR:ShopperReports.TriggerImmidiateOrRandomTS.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336695 Family ID: 3251
Description: HKCR:ShopperReports.TriggerOnceInDay: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336696 Family ID: 3251
Description: HKCR:ShopperReports.TriggerOnceInDay.1: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336697 Family ID: 3251
Description: HKLM:SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperReportsSA: Family Name: ShopperReports Engine: 1 Clean status: Success Item ID: 4336698 Family ID: 3251

Scan and cleaning complete: Finished correctly after 33042 seconds

*********************************** Settings ***********************************

Scan profile:
ID: full, enabled:1, value: Analyse complète
ID: folderstoscan, enabled:1, value: C:\,D:\
ID: useantivirus, enabled:1, value: true
ID: sections, enabled:1
ID: scancriticalareas, enabled:1, value: true
ID: scanrunningapps, enabled:1, value: true
ID: scanregistry, enabled:1, value: true
ID: scanlsp, enabled:1, value: true
ID: scanads, enabled:1, value: true
ID: scanhostsfile, enabled:1, value: true
ID: scanmru, enabled:1, value: true
ID: scanbrowserhijacks, enabled:1, value: true
ID: scantrackingcookies, enabled:1, value: true
ID: closebrowsers, enabled:1, value: false
ID: filescanningoptions, enabled:1
ID: archives, enabled:1, value: true
ID: onlyexecutables, enabled:1, value: false
ID: skiplargerthan, enabled:1, value: 20480
ID: scanrootkits, enabled:1, value: true
ID: rootkitlevel, enabled:1, value: mild, domain: medium,mild,strict
ID: usespywareheuristics, enabled:1, value: true

Scan global:
ID: global, enabled:1
ID: addtocontextmenu, enabled:1, value: true
ID: playsoundoninfection, enabled:1, value: false
ID: soundfile, enabled:0, value: N/A

Scheduled scan settings:
<Empty>

Update settings:
ID: updates, enabled:1
ID: launchthreatworksafterscan, enabled:1, value: off, domain: normal,off,silently
ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: schedules, enabled:1, value: true
ID: updatedaily1, enabled:1, value: Daily 1
ID: time, enabled:1, value: Thu Oct 21 07:14:00 2010
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updatedaily2, enabled:1, value: Daily 2
ID: time, enabled:1, value: Thu Oct 21 13:14:00 2010
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updatedaily3, enabled:1, value: Daily 3
ID: time, enabled:1, value: Thu Oct 21 19:14:00 2010
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updatedaily4, enabled:1, value: Daily 4
ID: time, enabled:1, value: Thu Oct 21 01:14:00 2010
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updateweekly1, enabled:1, value: Weekly
ID: time, enabled:1, value: Thu Oct 21 07:14:00 2010
ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: true
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: true
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false

Appearance settings:
ID: appearance, enabled:1
ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource
ID: showtrayicon, enabled:1, value: true
ID: autoentertainmentmode, enabled:1, value: true
ID: guimode, enabled:1, value: mode_simple, domain: mode_advanced,mode_simple
ID: language, enabled:1, value: fr, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language

Realtime protection settings:
ID: realtime, enabled:1
ID: layers, enabled:1
ID: useantivirus, enabled:1, value: true
ID: usespywareheuristics, enabled:1, value: true
ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,onlyimportant
ID: modules, enabled:1
ID: processprotection, enabled:1, value: true
ID: onaccessprotection, enabled:1, value: false
ID: registryprotection, enabled:1, value: true
ID: networkprotection, enabled:1, value: true

****************************** System information ******************************
Computer name: AGORA
Processor name: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Processor identifier: Intel64 Family 6 Model 37 Stepping 2
Processor speed: ~2128MHZ
Raw info: processorarchitecture 9, processortype 8664, processorlevel 6, processor revision 9474, number of processors 4, processor features: [MMX,SSE,SSE2,SSE3]
Physical memory available: 2335621120 bytes
Physical memory total: 4080623616 bytes
Virtual memory available: 1829568512 bytes
Virtual memory total: 2147352576 bytes
Memory load: 42%
Microsoft (build 7600)
Windows startup mode:

Running processes:
PID: 344 name: C:\Windows\System32\smss.exe owner: Système domain: AUTORITE NT
PID: 532 name: C:\Windows\System32\csrss.exe owner: Système domain: AUTORITE NT
PID: 580 name: C:\Windows\System32\wininit.exe owner: Système domain: AUTORITE NT
PID: 604 name: C:\Windows\System32\csrss.exe owner: Système domain: AUTORITE NT
PID: 612 name: C:\Program Files (x86)\AVG\AVG9\avgchsva.exe owner: Système domain: AUTORITE NT
PID: 628 name: C:\Program Files (x86)\AVG\AVG9\avgrsa.exe owner: Système domain: AUTORITE NT
PID: 668 name: C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe owner: Système domain: AUTORITE NT
PID: 732 name: C:\Windows\System32\winlogon.exe owner: Système domain: AUTORITE NT
PID: 752 name: C:\Windows\System32\services.exe owner: Système domain: AUTORITE NT
PID: 764 name: C:\Windows\System32\lsass.exe owner: Système domain: AUTORITE NT
PID: 772 name: C:\Windows\System32\lsm.exe owner: Système domain: AUTORITE NT
PID: 444 name: C:\Windows\System32\svchost.exe owner: Système domain: AUTORITE NT
PID: 1100 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1180 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1236 name: C:\Windows\System32\svchost.exe owner: Système domain: AUTORITE NT
PID: 1276 name: C:\Windows\System32\svchost.exe owner: Système domain: AUTORITE NT
PID: 1396 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1552 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 1732 name: C:\Windows\System32\GFNEXSrv.exe owner: Système domain: AUTORITE NT
PID: 1864 name: C:\Windows\System32\spoolsv.exe owner: Système domain: AUTORITE NT
PID: 1896 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1996 name: C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe owner: Système domain: AUTORITE NT
PID: 2044 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1340 name: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe owner: Système domain: AUTORITE NT
PID: 1252 name: C:\Windows\System32\svchost.exe owner: SERVICE LOCAL domain: AUTORITE NT
PID: 1656 name: C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe owner: Système domain: AUTORITE NT
PID: 2224 name: C:\Windows\System32\ThpSrv.exe owner: Système domain: AUTORITE NT
PID: 2252 name: C:\Windows\System32\TODDSrv.exe owner: Système domain: AUTORITE NT
PID: 2320 name: C:\Program Files (x86)\AVG\AVG9\avgnsa.exe owner: Système domain: AUTORITE NT
PID: 2352 name: C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe owner: Système domain: AUTORITE NT
PID: 2440 name: C:\Program Files\TOSHIBA\TECO\TecoService.exe owner: Système domain: AUTORITE NT
PID: 2484 name: C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE owner: Système domain: AUTORITE NT
PID: 2696 name: C:\Program Files (x86)\AVG\AVG9\avgemc.exe owner: Système domain: AUTORITE NT
PID: 2720 name: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe owner: Système domain: AUTORITE NT
PID: 2784 name: C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe owner: Système domain: AUTORITE NT
PID: 2808 name: C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE owner: Système domain: AUTORITE NT
PID: 3024 name: C:\Windows\System32\wbem\WmiPrvSE.exe owner: Système domain: AUTORITE NT
PID: 2080 name: C:\Windows\System32\wbem\unsecapp.exe owner: Système domain: AUTORITE NT
PID: 1604 name: C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe owner: Système domain: AUTORITE NT
PID: 3336 name: C:\Windows\System32\taskhost.exe owner: Marine domain: Agora
PID: 3460 name: C:\Windows\explorer.exe owner: Marine domain: Agora
PID: 3508 name: C:\Windows\System32\dwm.exe owner: Marine domain: Agora
PID: 3668 name: C:\Windows\System32\svchost.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 4068 name: C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe owner: Marine domain: Agora
PID: 4080 name: C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe owner: Marine domain: Agora
PID: 3080 name: C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe owner: Marine domain: Agora
PID: 3780 name: C:\Windows\System32\igfxtray.exe owner: Marine domain: Agora
PID: 3728 name: C:\Windows\System32\hkcmd.exe owner: Marine domain: Agora
PID: 4056 name: C:\Windows\System32\igfxpers.exe owner: Marine domain: Agora
PID: 3920 name: C:\Windows\System32\igfxsrvc.exe owner: Marine domain: Agora
PID: 2984 name: C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe owner: Marine domain: Agora
PID: 2992 name: C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe owner: Marine domain: Agora
PID: 3788 name: C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe owner: Marine domain: Agora
PID: 1568 name: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe owner: Marine domain: Agora
PID: 1296 name: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe owner: Marine domain: Agora
PID: 1372 name: C:\Windows\System32\ThpSrv.exe owner: Marine domain: Agora
PID: 4312 name: C:\Program Files\TOSHIBA\TECO\Teco.exe owner: Marine domain: Agora
PID: 4384 name: C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe owner: Marine domain: Agora
PID: 4456 name: C:\Windows\System32\SearchIndexer.exe owner: Système domain: AUTORITE NT
PID: 4616 name: C:\Program Files\Synaptics\SynTP\SynTPHelper.exe owner: Marine domain: Agora
PID: 4668 name: C:\Windows\System32\igfxext.exe owner: Marine domain: Agora
PID: 4792 name: C:\Windows\System32\StikyNot.exe owner: Marine domain: Agora
PID: 4808 name: C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe owner: Marine domain: Agora
PID: 4828 name: C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE owner: Marine domain: Agora
PID: 4864 name: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe owner: Marine domain: Agora
PID: 4872 name: C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe owner: Marine domain: Agora
PID: 4912 name: C:\Program Files\TOSHIBA\HDMICtrlMan\HCMSoundChanger.exe owner: Marine domain: Agora
PID: 4940 name: C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe owner: Marine domain: Agora
PID: 3816 name: C:\Windows\System32\taskeng.exe owner: Marine domain: Agora
PID: 4360 name: C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe owner: Marine domain: Agora
PID: 4624 name: C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe owner: Marine domain: Agora
PID: 3296 name: C:\Program Files (x86)\AVG\AVG9\avgtray.exe owner: Marine domain: Agora
PID: 4576 name: C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe owner: Marine domain: Agora
PID: 4788 name: C:\Program Files\Windows Media Player\wmpnetwk.exe owner: SERVICE RÉSEAU domain: AUTORITE NT
PID: 6116 name: C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe owner: Marine domain: Agora
PID: 1952 name: C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe owner: Système domain: AUTORITE NT
PID: 3012 name: C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe owner: Système domain: AUTORITE NT
PID: 3632 name: C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe owner: Système domain: AUTORITE NT
PID: 5252 name: C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe owner: Marine domain: Agora
PID: 5936 name: C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe owner: Système domain: AUTORITE NT
PID: 5496 name: C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe owner: Système domain: AUTORITE NT
PID: 4436 name: C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe owner: Marine domain: Agora
PID: 4372 name: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe owner: Système domain: AUTORITE NT
PID: 5488 name: C:\Program Files (x86)\AVG\AVG9\avgui.exe owner: Marine domain: Agora
PID: 1500 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe owner: Système domain: AUTORITE NT
PID: 3116 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe owner: Marine domain: Agora
PID: 4772 name: C:\Windows\System32\wbem\unsecapp.exe owner: Système domain: AUTORITE NT
PID: 1904 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe owner: Marine domain: Agora
PID: 4744 name: C:\Windows\System32\taskeng.exe owner: Système domain: AUTORITE NT
PID: 5340 name: C:\Program Files (x86)\AVG\AVG9\avgscana.exe owner: Marine domain: Agora
PID: 5236 name: C:\Windows\System32\conhost.exe owner: Marine domain: Agora
PID: 3268 name: C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe owner: Marine domain: Agora

Startup items:
Name: WebCheck
imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Name: TOSHIBA Online Product Information
imagepath: C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe
Name: IAStorIcon
imagepath: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
Name: ITSecMng
imagepath: %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
Name: TUSBSleepChargeSrv
imagepath: %ProgramFiles(x86)%\TOSHIBA\TOSHIBA USB Sleep and Charge Utility\TUSBSleepChargeSrv.exe
Name: ToshibaServiceStation
imagepath: "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
Name: TWebCamera
imagepath: "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun
Name: AVG9_TRAY
imagepath: C:\PROGRA~2\AVG\AVG9\avgtray.exe
Name: WinampAgent
imagepath: "C:\Program Files (x86)\Winamp\winampa.exe"
Name: DivXUpdate
imagepath: "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
Name: Adobe Reader Speed Launcher
imagepath: "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Name: Adobe ARM
imagepath: "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
Name:
imagepath: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

Bootexecute items:
Name:
imagepath: autocheck autochk *

Running services:
Name: AeLookupSvc
displayname: Expérience d'application
Name: Appinfo
displayname: Informations d'application
Name: AudioEndpointBuilder
displayname: Générateur de points de terminaison du service Audio Windows
Name: AudioSrv
displayname: Audio Windows
Name: avg9emc
displayname: AVG Free E-mail Scanner
Name: avg9wd
displayname: AVG Free WatchDog
Name: BFE
displayname: Moteur de filtrage de base
Name: BITS
displayname: Service de transfert intelligent en arrière-plan
Name: Browser
displayname: Explorateur d'ordinateurs
Name: cfWiMAXService
displayname: ConfigFree WiMAX Service
Name: ConfigFree Service
displayname: ConfigFree Service
Name: CryptSvc
displayname: Services de chiffrement
Name: DcomLaunch
displayname: Lanceur de processus serveur DCOM
Name: Dhcp
displayname: Client DHCP
Name: Dnscache
displayname: Client DNS
Name: DPS
displayname: Service de stratégie de diagnostic
Name: EapHost
displayname: Protocole EAP (Extensible Authentication Protocol)
Name: eventlog
displayname: Journal d'événements Windows
Name: EventSystem
displayname: Système d'événement COM+
Name: fdPHost
displayname: Hôte du fournisseur de découverte de fonctions
Name: FDResPub
displayname: Publication des ressources de découverte de fonctions
Name: FontCache
displayname: Service de cache de police Windows
Name: GFNEXSrv
displayname: GFNEX Service
Name: gpsvc
displayname: Client de stratégie de groupe
Name: HomeGroupProvider
displayname: Fournisseur HomeGroup
Name: IAStorDataMgrSvc
displayname: Intel(R) Rapid Storage Technology
Name: IKEEXT
displayname: Modules de génération de clés IKE et AuthIP
Name: iphlpsvc
displayname: Assistance IP
Name: KeyIso
displayname: Isolation de clé CNG
Name: LanmanServer
displayname: Serveur
Name: LanmanWorkstation
displayname: Station de travail
Name: Lavasoft Ad-Aware Service
displayname: Lavasoft Ad-Aware Service
Name: LMS
displayname: Intel(R) Management and Security Application Local Management Service
Name: MMCSS
displayname: Planificateur de classes multimédias
Name: MpsSvc
displayname: Pare-feu Windows
Name: Netman
displayname: Connexions réseau
Name: netprofm
displayname: Service Liste des réseaux
Name: NlaSvc
displayname: Connaissance des emplacements réseau
Name: nsi
displayname: Service Interface du magasin réseau
Name: PcaSvc
displayname: Service de l'Assistant Compatibilité des programmes
Name: PlugPlay
displayname: Plug-and-Play
Name: PolicyAgent
displayname: Agent de stratégie IPsec
Name: Power
displayname: Alimentation
Name: ProfSvc
displayname: Service de profil utilisateur
Name: RpcEptMapper
displayname: Mappeur de point de terminaison RPC
Name: RpcSs
displayname: Appel de procédure distante (RPC)
Name: SamSs
displayname: Gestionnaire de comptes de sécurité
Name: SBSDWSCService
displayname: SBSD Security Center Service
Name: Schedule
displayname: Planificateur de tâches
Name: SENS
displayname: Service de notification d'événements système
Name: ShellHWDetection
displayname: Détection matériel noyau
Name: Spooler
displayname: Spouleur d'impression
Name: SSDPSRV
displayname: Découverte SSDP
Name: stisvc
displayname: Acquisition d'image Windows (WIA)
Name: SysMain
displayname: Superfetch
Name: TemproMonitoringService
displayname: Notebook Performance Tuning Service (TEMPRO)
Name: Themes
displayname: Thèmes
Name: Thpsrv
displayname: TOSHIBA HDD Protection
Name: TMachInfo
displayname: TMachInfo
Name: TODDSrv
displayname: TOSHIBA Optical Disc Drive Service
Name: TosCoSrv
displayname: TOSHIBA Power Saver
Name: TOSHIBA eco Utility Service
displayname: TOSHIBA eco Utility Service
Name: TOSHIBA HDD SSD Alert Service
displayname: TOSHIBA HDD SSD Alert Service
Name: TPCHSrv
displayname: TPCH Service
Name: TrkWks
displayname: Client de suivi de lien distribué
Name: UNS
displayname: Intel(R) Management & Security Application User Notification Service
Name: UxSms
displayname: Gestionnaire de sessions du Gestionnaire de fenêtrage
Name: WdiServiceHost
displayname: Service hôte WDIServiceHost
Name: WdiSystemHost
displayname: Hôte système de diagnostics
Name: WinHttpAutoProxySvc
displayname: Service de découverte automatique de Proxy Web pour les services HTTP Windows
Name: Winmgmt
displayname: Infrastructure de gestion Windows
Name: Wlansvc
displayname: Service de configuration automatique WLAN
Name: wlidsvc
displayname: Windows Live ID Sign-in Assistant
Name: WMPNetworkSvc
displayname: Service Partage réseau du Lecteur Windows Media
Name: wscsvc
displayname: Centre de sécurité
Name: WSearch
displayname: Windows Search
Name: wuauserv
displayname: Windows Update
Name: wudfsvc
displayname: Windows Driver Foundation - Infrastructure de pilote mode-utilisateur

voila voila...
Je crois que le fichier ad aware que j'ai téléchargé est infecté... :/
Je dois le désinstaller ??

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4904

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

21/10/2010 20:16:13
mbam-log-2010-10-21 (20-16-13).txt

Type d'examen: Examen complet (C:\|D:\|E:\|F:\|)
Elément(s) analysé(s): 291481
Temps écoulé: 59 minute(s), 46 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 33
Valeur(s) du Registre infectée(s): 2
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\AppID\{0d82acd6-a652-4496-a298-2bde705f4227} (Adware.ClickPotato) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{7025e484-d4b0-441a-9f0b-69063bd679ce} (Adware.ClickPotato) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{8258b35c-05b8-4c0e-9525-9bccc70f8f2d} (Adware.ClickPotato) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{a89256ad-ec17-4a83-bef5-4b8bc4f39306} (Adware.ClickPotato) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{09325003-167c-483d-a4ba-8b3122abb432} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{20ea9658-6bc3-4599-a87d-6371fe9295fc} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{2721a8e5-bfdb-4562-9912-9e0531ca616c} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{396cfc12-932d-496b-a0a8-5d7201e105e1} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{60da826c-b1c6-4358-bdec-4837ced45470} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{6dd76b7b-6423-4df0-9a07-84a6cad973a0} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{74c22317-5b90-471f-9ad2-fec049870a16} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{7f6cfb6a-9227-4bb8-b941-f2b067e76f51} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{a16ad1e9-f69a-45af-9462-b1c286708842} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{ab0ee208-df60-4fa7-a617-c4269760033e} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{c1089f63-7afc-4538-b0eb-bea0f4225a57} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{c9ccbb35-d123-4a31-affc-9b2933132116} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{cc7bd6f1-565c-47ce-a5bb-9c935e77b59d} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{cfc16189-8a92-4a29-a940-60248385f426} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{dee758b4-c3fb-4a5b-9939-848b9c77a2fb} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{e12aeab6-7d12-4c07-8e36-5892efb4dafb} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{e2f2c137-a782-4fb5-81af-086156f5eb0a} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{f1d06c9f-51f0-4476-bede-5ddf91be304e} (Adware.ShopperReports) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{f3a32df2-7413-4fb1-b575-1ac920a17b76} (Adware.ShopperReports) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89f88394-3828-4d03-a0cf-8203604c3da6} (Adware.Hotbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d4233f04-1789-483c-a137-731e8f113dd5} (Adware.Hotbar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports3 (Adware.ShopperReports) -> No action taken.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\shopperreports 3.0.485.0 (Adware.HotBar) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\srs_it_e8790270b3765a5a32ac94 (Malware.Trace) -> No action taken.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\Marine\AppData\Local\Temp\HsyKQUzO.exe.part (Trojan.Dropper) -> No action taken.

oui tu supprime tout

Télécharge UsbFix de C_XX & Chiquitine29

http://www.teamxscript.org/usbfixTelechargement.html

(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

* Double clic sur "UsbFix.exe" présent sur ton bureau ( clic droit "exécuter en tant qu'administrateur" pour Vista & 7 )

* Choisis l'option F pour français et tape sur [entrée] .

* Choisis l'option 1 ( Recherche ) et tape sur [entrée] .

* Laisse travailler l'outil.

* Ensuite poste le rapport UsbFix.txt qui apparaitra.

* Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

############################## | UsbFix 7.032 | [Recherche]

Utilisateur: Marine (Administrateur) # AGORA [TOSHIBA SATELLITE U500]
Mis à jour le 17/10/10 par El Desaparecido / C_XX
Lancé à 21:29:06 | 21/10/2010
Site Web: http://www.teamxscript.org
Contact: eldesaparecido@arx-services.com

CPU: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
CPU 2: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Microsoft Windows 7 Édition Familiale Premium (6.1.7600 64-Bit) #
Internet Explorer 8.0.7600.16385

Pare-feu Windows: Activé
RAM -> 3892 Mo
C:\ (%systemdrive%) -> Disque fixe # 152 Go (68 Go libre(s) - 45%) [WINDOWS] # NTFS
D:\ -> Disque fixe # 146 Go (139 Go libre(s) - 95%) [Data] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 8 Go (88 Mo libre(s) - 1%) [USB DISK] # FAT32

################## | Éléments infectieux |

Présent! C:\Users\Marine\AppData\Local\Temp\xmlUpdater.exe
Présent! F:\PLAZMICA

################## | Registre |

################## | Mountpoints2 |

################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F |

Suppression

Branche tes sources de données externes à ton PC, (clé USB, disque dur externe......) susceptibles d'avoir été infectés sans les ouvrir

(1) Double clic sur le raccourci UsbFix présent sur ton bureau

(2) Choisi l option 2 ( Suppression )

Ton bureau disparaitra et le pc redémarrera .

Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.

Ensuite poste le rapport UsbFix.txt qui apparaitra avec le bureau .

Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Mon ordi ne s'est pas redémarré tout seul a la suite de la suppression et le bureau n'a pas disparu non plus ...
du coup je l'ai redémarré après avoir enregistré le rapport.

############################## | UsbFix 7.032 | [Suppression]

Utilisateur: Marine (Administrateur) # AGORA [TOSHIBA SATELLITE U500]
Mis à jour le 17/10/10 par El Desaparecido / C_XX
Lancé à 21:42:50 | 21/10/2010
Site Web: http://www.teamxscript.org
Contact: eldesaparecido@arx-services.com

CPU: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
CPU 2: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Microsoft Windows 7 Édition Familiale Premium (6.1.7600 64-Bit) #
Internet Explorer 8.0.7600.16385

Pare-feu Windows: Activé
RAM -> 3892 Mo
C:\ (%systemdrive%) -> Disque fixe # 152 Go (68 Go libre(s) - 45%) [WINDOWS] # NTFS
D:\ -> Disque fixe # 146 Go (139 Go libre(s) - 95%) [Data] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 8 Go (3 Mo libre(s) - 0%) [USB DISK] # FAT32

################## | Éléments infectieux |

Supprimé! C:\Users\Marine\AppData\Local\Temp\xmlUpdater.exe
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-2588857807-184109249-15248406-1001
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-2588857807-184109249-15248406-500
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-2588857807-184109249-15248406-1001
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-2588857807-184109249-15248406-500
Supprimé! F:\Recycler\S-5-3-42-2819952290-8240758988-879315005-3665
Supprimé! F:\PLAZMICA

################## | Registre |

################## | Mountpoints2 |

################## | Listing |

[21/10/2010 - 04:18:01 | D ] C:\$AVG
[21/10/2010 - 21:43:29 | SHD ] C:\$RECYCLE.BIN
[09/12/2009 - 12:33:40 | D ] C:\1033
[21/10/2010 - 20:50:43 | N | 2692] C:\aaw7boot.log
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[21/10/2010 - 20:50:43 | ASH | 3060465664] C:\hiberfil.sys
[27/01/2010 - 03:23:30 | D ] C:\Intel
[07/04/2010 - 14:59:50 | D ] C:\LBP-1120_R110_V110_Win_x32_FR_7
[20/07/2010 - 22:19:48 | D ] C:\Modalisa43
[09/12/2009 - 12:33:59 | RHD ] C:\MSOCache
[21/10/2010 - 20:50:49 | ASH | 4080623616] C:\pagefile.sys
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[20/10/2010 - 14:11:21 | D ] C:\Program Files
[21/10/2010 - 18:53:17 | D ] C:\Program Files (x86)
[21/10/2010 - 18:53:18 | HD ] C:\ProgramData
[27/01/2010 - 03:32:22 | N | 2942] C:\RHDSetup.log
[09/12/2009 - 14:41:43 | N | 70] C:\SWSTAMP.TXT
[20/10/2010 - 14:01:43 | SHD ] C:\System Volume Information
[13/03/2010 - 14:30:25 | D ] C:\Toshiba
[15/08/2010 - 16:29:48 | D ] C:\UBIOS
[21/10/2010 - 21:43:29 | D ] C:\UsbFix
[21/10/2010 - 21:42:51 | A | 2419] C:\UsbFix.txt
[07/04/2010 - 14:43:28 | D ] C:\Users
[09/04/2010 - 10:38:39 | D ] C:\wamp
[20/10/2010 - 14:13:13 | D ] C:\Windows
[09/12/2009 - 12:32:06 | D ] C:\Works
[21/10/2010 - 21:43:29 | SHD ] D:\$RECYCLE.BIN
[11/08/2010 - 13:50:11 | D ] D:\64a61e4f764fb06304bc6d936b
[25/06/2010 - 20:56:38 | D ] D:\bbdc1c016be171e89c89c3e3
[13/03/2010 - 23:20:12 | D ] D:\HDDRecovery
[15/03/2010 - 23:16:20 | D ] D:\PFiles
[18/12/2009 - 21:34:48 | N | 11] D:\R12193FR.tag
[27/01/2010 - 03:17:10 | SHD ] D:\System Volume Information
[07/02/2036 - 12:58:15 | RAD ] E:\AUDIO_TS
[07/02/2036 - 12:58:15 | RAD ] E:\VIDEO_TS
[08/07/2010 - 17:23:22 | D ] F:\éval SISM
[15/03/2010 - 12:06:04 | D ] F:\AVG
[06/03/2010 - 15:43:58 | D ] F:\.Trashes
[09/02/2010 - 09:02:18 | D ] F:\Photos India
[09/02/2010 - 15:29:30 | D ] F:\ud meditation2
[09/02/2010 - 15:33:24 | D ] F:\musique indienne
[09/02/2010 - 15:38:32 | D ] F:\Alanis Morisette
[09/02/2010 - 15:39:04 | D ] F:\U2
[09/02/2010 - 15:39:28 | D ] F:\inner peace - ani choying drolma
[09/02/2010 - 15:39:46 | D ] F:\tibetan recitations - the meditative sound of buddhhist chants
[09/02/2010 - 15:40:14 | D ] F:\The Cranberries
[20/07/2010 - 19:09:48 | D ] F:\.fseventsd
[09/02/2010 - 15:56:24 | D ] F:\India
[12/02/2010 - 18:28:42 | D ] F:\CONTROL
[06/03/2010 - 15:44:00 | D ] F:\.Spotlight-V100
[11/03/2010 - 14:15:36 | N | 35840] F:\Point_au_7_mars_2010.doc
[30/04/2010 - 11:31:32 | N | 147184] F:\Flyer 01-07-10.pdf
[06/04/2010 - 11:04:54 | D ] F:\.TemporaryItems
[17/02/2010 - 06:53:58 | D ] F:\Photos Samtèn
[17/02/2010 - 08:17:50 | D ] F:\Pictures to print
[15/07/2010 - 11:11:46 | D ] F:\Modalisa
[17/10/2010 - 21:44:52 | D ] F:\Appart
[17/02/2010 - 17:53:18 | D ] F:\samtèn
[21/07/2010 - 16:18:16 | N | 50439] F:\Paroles chansons.docx
[21/07/2010 - 16:00:02 | N | 22016] F:\lettre véolia.doc
[29/06/2010 - 14:46:06 | N | 424527] F:\Présentation Violences à l'accueil d'urgence sociale.pptx
[20/07/2010 - 19:14:58 | N | 4096] F:\._lettre véolia.doc
[17/02/2010 - 19:13:54 | D ] F:\Nouveau dossier
[24/02/2006 - 22:45:52 | N | 39598750] F:\Marcevol 2004 mantra de Tara.aif
[12/01/2010 - 03:06:36 | N | 150242] F:\UD 2010 program.pdf
[18/02/2010 - 06:05:40 | D ] F:\Unknown
[18/02/2010 - 06:06:52 | D ] F:\Divers
[18/02/2010 - 06:13:42 | D ] F:\Toots & the Maytals
[06/01/2007 - 07:00:20 | N | 733278208] F:\Le Fil De La Vie.avi
[18/02/2010 - 06:17:46 | D ] F:\The Rolling Stones
[18/02/2010 - 06:20:34 | D ] F:\Beres Hammond
[18/02/2010 - 06:20:48 | D ] F:\Blind Lemon Jefferson
[18/02/2010 - 06:20:52 | D ] F:\Blues Cafe 5
[18/02/2010 - 06:21:18 | D ] F:\Arno
[18/02/2010 - 06:21:26 | D ] F:\Artiste inconnu
[18/02/2010 - 06:21:34 | D ] F:\Barry White
[18/02/2010 - 06:22:20 | D ] F:\Billy Idol
[18/02/2010 - 12:24:48 | RSHD ] F:\RECYCLER
[08/03/2010 - 21:38:28 | N | 59488] F:\lettre de motivation ensatt.docx
[02/03/2010 - 11:51:08 | D ] F:\ADES
[25/08/2010 - 17:01:26 | N | 92672] F:\Dossier à rendre.doc
[30/08/2010 - 17:16:46 | D ] F:\Dossier à rendre
[04/10/2010 - 19:54:24 | N | 14369] F:\présentation CA.docx
[10/10/2010 - 23:39:52 | N | 366993408] F:\Films-Down.Com-Desperate.Housewives.S07E01.VOSTFR.HDTV.XviD-PTN.avi
[21/10/2010 - 15:29:56 | N | 6153352] F:\mbam-setup-1.46.exe
[21/10/2010 - 17:52:12 | N | 88160] F:\fichier d'analyse.txt
[21/10/2010 - 20:16:20 | N | 5244] F:\mbam-log-2010-10-21 (20-16-13).txt
[21/10/2010 - 20:49:22 | N | 6000] F:\mbam-log-2010-10-21 (20-48-26)2.txt
[21/10/2010 - 21:31:22 | N | 1098] F:\UsbFix.txt
[15/03/2010 - 11:55:32 | N | 89174096] F:\avg_free_stf_eu_90_790a2730.exe
[05/05/2010 - 18:54:52 | D ] F:\M1 anthropologie
[18/05/2010 - 16:09:34 | D ] F:\Cours M2
[19/05/2010 - 11:10:56 | N | 298496] F:\attestation stagiaires SLV.doc
[21/05/2010 - 17:25:04 | D ] F:\Pilotes enregistreur
[21/05/2010 - 23:11:18 | D ] F:\POUR AUDREY
[31/05/2010 - 23:53:06 | N | 89816] F:\Rapport stage.pptx
[28/05/2010 - 08:34:40 | N | 85254] F:\Rapport de stage.pptx
[07/06/2010 - 17:32:00 | D ] F:\Appel à projet
[08/06/2010 - 14:17:24 | N | 1727493] F:\04_rapp_preventionFinal.pdf
[21/06/2010 - 10:05:32 | D ] F:\Offre d'emploi
[25/06/2010 - 20:54:08 | N | 282210] F:\Violences à l'accueil d'urgence sociale.pptx

################## | Vaccin |

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_AGORA.zip
https://www.ionos.fr/?affiliate_id=77097
Merci de votre contribution.

################## | E.O.F |

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »

Clique sur la loupe pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long.

Ferme ZHPDiag en fin d'analyse.

Pour transmettre le rapport clique sur ce lien :

http://www.cijoint.fr/index.php
Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).

Sélectionne le fichier ZHPDiag.txt.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

et voila le lien :

http://www.cijoint.fr/cjlink.php?file=cj201010/cijKSQqzxa.txt

DÉSACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRÉSENTS !!!!!(car il est détecte a tort comme infection)

Télécharge ici :List_Kill'em de gen-hackman

http://sd-4.archive-host.com/membres/up/829108531491024/Mes_Tools/List_Killem_Install.exe

et enregistre le sur ton bureau

windows 7 => clic droit "exécuter en tant que administrateur

sur le raccourci sur ton bureau pour lancer l'installation

Laisse coché :

Exécuter List_Kill'em

une fois terminée , clic sur "terminer" et le programme se lancera seul

Il commencera par telecharger et installer ses mises à jour , puis te donnera son menu

choisis l'option Search

laisse travailler l'outil

il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "ok" ou "Agrée"

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal ,c'est une recherche supplementaire de fichiers cachés , le programme n'est pas bloqué.

Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

------ NE LE POSTE PAS SUR LE FORUM-------

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

Clique sur Parcourir et cherche le fichier C:\List'em.txt

Clique sur Ouvrir.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

Bon... ca va surement te paraitre stupide mais je n'arrive pas a désactiver avg... rien n'est proposé de tel, ni en cliquant droit sur l'icone ni une fois l'interface ouverte... je dois le désinstaller du coup ??

Bouclier résident
- Ouvrez l'interface d'utilisateur AVG.
- Double-cliquez sur le composant Bouclier résident.
- Décochez l'option du Bouclier résident active et cliquez sur le bouton Enregistrer les modifications.
- Bouclier résident est désactivé, s'il vous plaît vérifiez la question.
- Activez le Bouclier résident à nouveau après avoir vérifié la question.

LinkScanner
- Double-cliquez sur le composant LinkScanner.
- Décochez toutes les options et cliquez sur le bouton Enregistrer les modifications.
- Re-vérifiez la question.

S'il vous plaît premièrement désactivez un des composant et après les deux ensemble.

ca y est ! voila le lien :

http://www.cijoint.fr/cjlink.php?file=cj201010/cijn20Kkwx.txt

Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
mais cette fois-ci :

choisis l'option CLEAN

laisse travailler l'outil.

en fin de scan la fenêtre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau

lance en mode sans échec :

Pour cela, tu tapotes la touche F8 dès le début de l'allumage du pc sans t'arrêter.

Une fenêtre va s'ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s'il n'y a pas toutes les couleurs et autres c'est normal !
(Si F8 ne marche pas utilise la touche F5).

"pour le clean de list_kill'em s'il ne fonctionne pas :
executer clic droit en tant qu'administrateur :
C:\Program Files (X86)\List_kill'em\del_reg "

Ca a enfin marché ! Merci beaucoup !

le rapport je le colle direct sur le forum ou sur cijoint.fr ?

voilà :

http://www.cijoint.fr/cjlink.php?file=cj201010/cijHHIj5SH.txt

Télécharge DelFix sur ton bureau.

http://sd-1.archive-host.com/membres/up/17959594961240255/DelFix.exe

3.1 - Option Recherche

Téléchargez DelFix sur votre bureau.
Lancez le, tapez 1 et validez en appuyant sur [Entrée]
Patientez quelques secondes puis copiez/collez le contenu du rapport qui s'ouvrira sur le forum qui vous prend en charge.

Note : Le rapport est sauvegardé sous C:\DelFixSearch.txt

-------------------------

3.2 - Option Suppression

Téléchargez DelFix sur votre bureau
Lancez le, tapez 2 et validez en appuyant sur [Entrée]
Patientez quelques secondes puis copiez/collez le contenu du rapport qui s'ouvrira sur le forum qui vous prend en charge.

Note : Le rapport est sauvegardé sous C:\DelFixSuppr.txt

--------------Après------------------

tu va télécharger Ccleaner http://dl.commentcamarche.net/...

ouvre "Ccleaner" vas dans l'onglet "Option" puis "Avancé" puis décoches "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures."

. Puis vas dans l'onglet "Nettoyeur" fais "Analyse" puis "Lancer le nettoyage".
Puis vas dans l'onglet "Registre" puis fait "Chercher des erreurs" puis "Réparer les erreurs sélectionnée"
. Tu refais tous ca 4-5 fois (le nettoyage et le registre).

Puis reste dans "Ccleaner" puis va dans "Option" puis "Propriété" puis coches "Nettoyer automatiquement l'ordinateur au démarrage".

içi mode d'emploi pour ccleaner

https://www.malekal.com/tutoriel-ccleaner/

Rapport DelFix v6.0 - 25/10/2010 à 22:58,33
Mis à jour le 22/10/10 à 13h30 par Xplode
Système d'exploitation : Windows 7 Home Premium (64 bits) [version 6.1.7600]
Navigateur : Mozilla Firefox 3.6.11 (fr) [Navigateur par défaut]
Processeur : Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Mémoire vive totale : 3,79 Go
Nom d'utilisateur : Marine - AGORA (Administrateur)
Exécuté depuis : C:\Users\Marine\Desktop\PROCEDURES ANTIVIRUS\DelFix.exe

~~~~~~ Dossier(s) ~~~~~~

Présent : C:\USBFix
Présent : C:\Kill'em
Présent : C:\Program Files (x86)\List_Kill'em
Présent : C:\Program Files (x86)\ZHPDiag
Présent : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\List_Kill'em
Présent : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP

~~~~~~ Fichier(s) ~~~~~~

Présent : C:\List'em.txt
Présent : C:\UsbFix.txt
Présent : C:\UsbFix_Upload_Me_AGORA.zip
Présent : C:\Users\Marine\Desktop\Kill'em.txt

~~~~~~ Registre ~~~~~~

Clé Présente : HKCU\SOFTWARE\USBFix
Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Présente : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E88BA4E8-6B36-4D39-9499-C10B439819E1}_is1
Clé Présente : HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Présente : HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E88BA4E8-6B36-4D39-9499-C10B439819E1}_is1

########## EOF - "C:\DelFixSearch.txt" - [1610 octets] ##########