Connexion ralenti

Salut,

Télécharge HijackThis:
Téléchargement de HijackThis

Installe le dans son propre dossier:
-clic droit sur le bureau, choisis "nouveau dossier" puis installe le dedans.
Lance le, clic sur "do a system scan and save logfile"
Puis copie et colle le rapport ici stp

bon voila le log highjackthis

Logfile of HijackThis v1.99.1
Scan saved at 13:35:16, on 14/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Labtec\moffice.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Labtec\MOUSE32A.DAT
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
C:\WINDOWS\SCMain.exe
C:\WINDOWS\WCMain.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trojan Guarder Gold Version\Trojan Guarder.exe
C:\WINDOWS\twain_32\C6U14K\WATCH.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopOE.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Rar$EX00.562\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q305&bd=pavil...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q305&bd=pavil...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q305&bd=pavil...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q305&bd=pavil...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\moffice.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - HKCU\..\Run: [Felix II] C:\Program Files\ScreenMates\Felix II\Felix2.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Photo Express SE Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
O4 - Global Startup: Stardust Screen Saver Control 2003.lnk = C:\WINDOWS\SCMain.exe
O4 - Global Startup: Stardust Wallpaper Control 2003.lnk = C:\WINDOWS\WCMain.exe
O4 - Global Startup: Trojan Guarder Gold Version.lnk = C:\Program Files\Trojan Guarder Gold Version\Trojan Guarder.exe
O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\C6U14K\WATCH.exe
O8 - Extra context menu item: &Envoyer une E-carte-web avec cette image - file://C:\WINDOWS\web\ecarte.htm
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
O15 - Trusted Zone: *.adgate.info
O15 - Trusted Zone: *.dollarrevenue.com
O15 - Trusted Zone: *.imagesrvr.com
O15 - Trusted Zone: *.media-motor.com
O15 - Trusted Zone: *.mediatickets.net
O15 - Trusted Zone: *.snipernet.biz
O15 - Trusted Zone: *.snipernet.us
O15 - Trusted Zone: *.systemdoctor.com
O15 - Trusted Zone: *.winantivirus.com
O15 - Trusted Zone: *.yazzle.net
O15 - Trusted Zone: *.adgate.info (HKLM)
O15 - Trusted Zone: *.dollarrevenue.com (HKLM)
O15 - Trusted Zone: *.imagesrvr.com (HKLM)
O15 - Trusted Zone: *.media-motor.com (HKLM)
O15 - Trusted Zone: *.mediatickets.net (HKLM)
O15 - Trusted Zone: *.snipernet.biz (HKLM)
O15 - Trusted Zone: *.snipernet.us (HKLM)
O15 - Trusted Zone: *.systemdoctor.com (HKLM)
O15 - Trusted Zone: *.winantivirus.com (HKLM)
O15 - Trusted Zone: *.yazzle.net (HKLM)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://fragilfrance.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/crusher-fr.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game10.zylom.com/activex/zylomgamesplayer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{47055C28-AA98-468B-AC4B-08D6D55DCC7E}: NameServer = 84.103.237.141 86.64.145.141
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe

On va attendre la fin du scan pour voir ce qu'il trouve, fais ça en attendant pour verifier

Ouvre HijackThis

Clic sur "open the misc tools section"
Clic sur "open uninstall manager"
Clic sur "Save list" dans la fenêtre qui va s'ouvrir enregistre le fichier à un endroit ou tu le retrouvera facilement.

Ensuite, fais un copier du texte qui y aura dans ce fichier puis colles le ici stp

vla le rapport, mais a koi ca sert a par savoir les programmes que j'ai?

AC3Filter (remove only)
Acoustica CD/DVD Label Maker
Ad-Aware SE Personal
Adobe Photoshop 7.0
Adobe Reader 7.0.5 - Français
Adobe Shockwave Player
Adolix PDF Converter PRO v3.0
Agere Systems PCI Soft Modem
Archiveur WinRAR
ATI Control Panel
ATI Display Driver
Atlantis Evolution
avast! Antivirus
Barre d'outils MSN
CCleaner (remove only)
CD Box Labeler Pro
Collab
Compel Adaptec WinASPI
Connexion Facile à Internet
DivX
DivX Converter
DivX Converter
DivX Player
DivX Video Duplicator
DVD Profiler Version 2.4.0
E-Carte-Web-Immédiat 1.0
Elecard MPEG2 Player
eMule
Enhanced Multimedia Keyboard Solution
ewido anti-spyware 4.0
Filter Decode Pack Ver. 1.9.3 !BETA! (by goldfix)
FL Studio 6
GdiplusUpgrade
Google Desktop
Google Earth
Google Toolbar for Internet Explorer
HijackThis 1.99.1
HP Appareils photos Photosmart 4.5
HP Deskjet Printer Preload
HP Image Zone 4.8.6
HP Image Zone Plus 4.8.6
HP PSC & OfficeJet 4.7
HP Software Update
HPIZplus450
Incomedia WebSite X1
InterVideo WinDVD Player
J2SE Runtime Environment 5.0
J2SE Runtime Environment 5.0 Update 6
Janus 3 Demo All Modules
Janus 3.0 Update 17 Sep 2003
K-Lite Mega Codec Pack 1.02
L&H TTS3000 Français
Labtec Mouse
Lecteur Windows Media 10
LimeWire PRO 4.10.3
L'Internet ADSL de Cegetel
LiveUpdate 2.5 (Symantec Corporation)
Macromedia Extension Manager
Macromedia Flash 8
Macromedia Flash 8 Video Encoder
Macromedia Flash Player 8
MEDIADICO Word - L'Aventure Multimedia
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft Office 2000 Professional
MioMotion
mobile PhoneTools
Morgan Stream Switcher
Motorola Handset USB Driver
MSN
muvee autoProducer 4.0
My Privacy Online v. 3.0
Nero 7 Premium
PC-Doctor for Windows
Photosmart 320,370,7400,8100,8400 Series (fra)
PS2
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3
QuickTime
QuickTime Alternative 1.33
Real Alternative 1.23
Roxio Easy Media Creator 7
SAGEM F@st 800-840
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sunbelt Kerio Personal Firewall
TurboBT 5.0
VideoLAN VLC media player 0.8.4
VobSub v2.23 (Remove Only)
Windows Genuine Advantage v1.3.0254.0
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format Runtime
XoftSpy

le scan de bit defender n'est pas terminé mais a deja trouve un virus
backdoor.servu.25

j'ai desinstaller live update et installer les deux autre

quest ce ke je fais de ewido et spy terminator

au passage, impossible de supprimer le cookie de gmail, mee ccleaner n'y a rien fait, j'ai poste ce message dans la rubrique internet mais je me suis dis que tu pouvais surement y repondre en deux mots.

comment ca marche ce truc eurokiddies?, ya pas beaucoup d'info sur le site.

voila le rapportde bitdefender
BitDefender Online Scanner

Scan report generated at: Thu, Sep 14, 2006 - 17:26:54

Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;

Statistics

Time
02:52:37

Files
853269

Folders
7681

Boot Sectors
3

Archives
20050

Packed Files
103552

Results

Identified Viruses
1

Infected Files
2

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
2

Engines Info

Virus Definitions
454165

Engine build
AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

Scan plugins
13

Archive plugins
38

Unpack plugins
6

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\Program Files\Wingen\system.exe
Infected with: Backdoor.Servu.25

C:\Program Files\Wingen\system.exe
Disinfection failed

C:\Program Files\Wingen\system.exe
Deleted

C:\WINDOWS\I386\SYSMON.HL_
Clean

C:\WINDOWS\I386\SYSMON.HL_=>sysmon.hlp
Clean

C:\WINDOWS\I386\SYSMON.OC_
Clean

C:\WINDOWS\I386\SYSMON.OC_=>sysmon.ocx
Clean

C:\WINDOWS\I386\SYSMONP.CH_
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#SYSTEM
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/compile_date.htm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/nt_sysmon_concepts.htm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/nt_sysmon_howto.htm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/nt_sysmon_newways.htm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/nt_sysmon_topnode.htm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/nt_sysmon_under.htm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/nt_sysmon_using.htm
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/sysmon.hhc
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/sysmonP.hhk
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#WINDOWS
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$OBJINST
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/$FIftiMain
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#IDXHDR
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#TOCIDX
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#TOPICS
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#URLTBL
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#URLSTR
Clean

C:\WINDOWS\I386\SYSMONP.CH_=>sysmonp.chm=>/#STRINGS
Clean

C:\WINDOWS\I386\SYSOC.IN_
Clean

C:\WINDOWS\I386\SYSOC.IN_=>sysoc.inf
Clean

C:\WINDOWS\I386\SYSOC.IN_=>sysoc.inf=>(unicode)
Clean

C:\WINDOWS\I386\SYSOCMGR.EX_
Clean

C:\WINDOWS\I386\SYSOCMGR.EX_=>sysocmgr.exe
Clean

C:\WINDOWS\I386\SYSPARSE.EXE
Clean

C:\WINDOWS\I386\SYSPRINT.SE_
Clean

C:\WINDOWS\I386\SYSPRINT.SE_=>sysprint.sep
Clean

C:\WINDOWS\I386\SYSPROP.CH_
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#SYSTEM
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/compile_date.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_overview.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_overview_01.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_s0.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_s1.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_s2.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_s3.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_add_or_change_values_of_environment_variables.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_change_the_performance_of_foreground_and_background_programs.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_change_the_size_of_the_computer_s_registry.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_change_the_size_of_the_virtual_memory_paging_file.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_perform_a_remote_reboot.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_specify_the_default_operating_system_for_startup.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_view_system_properties.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_view_your_computer_s_network_identification.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_wbem_web_based_enterprise_management.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop_to_specify_what_happens_when_the_system_stops_unexpectedly.htm
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop.hhc
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/sysprop.hhk
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#WINDOWS
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$OBJINST
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/$FIftiMain
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#IDXHDR
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#TOCIDX
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#TOPICS
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#URLTBL
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#URLSTR
Clean

C:\WINDOWS\I386\SYSPROP.CH_=>sysprop.chm=>/#STRINGS
Clean

C:\WINDOWS\I386\SYSPRTJ.SE_
Clean

C:\WINDOWS\I386\SYSPRTJ.SE_=>sysprtj.sep
Clean

C:\WINDOWS\I386\SYSRESTP.CH_
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/#SYSTEM
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/compile_date.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_change.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_create.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_diskspace.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_exclude.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_off.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_on.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_overview.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_resume.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_safemode.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_settings.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_understand.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_undo.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_usingSR.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/app_system_restore_HSS_access.htm
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/SysRestP.hhc
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/SysRestP.hhk
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/#WINDOWS
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWKeywordLinks/BTree
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWKeywordLinks/Data
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWKeywordLinks/Map
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWKeywordLinks/Property
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWAssociativeLinks/BTree
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWAssociativeLinks/Data
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWAssociativeLinks/Map
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$WWAssociativeLinks/Property
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$OBJINST
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/$FIftiMain
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/#IDXHDR
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/#TOPICS
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/#URLTBL
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/#URLSTR
Clean

C:\WINDOWS\I386\SYSRESTP.CH_=>sysrestp.chm=>/#STRINGS
Clean

C:\WINDOWS\I386\SYSRESTR.HL_
Clean

C:\WINDOWS\I386\SYSRESTR.HL_=>sysrestr.hlp
Clean

C:\WINDOWS\I386\SYSSETUP.DL_
Clean

C:\WINDOWS\I386\SYSSETUP.DL_=>syssetup.dll
Clean

C:\WINDOWS\I386\SYSSETUP.IN_
Clean

C:\WINDOWS\I386\SYSSETUP.IN_=>syssetup.inf
Clean

C:\WINDOWS\I386\SYSSETUP.IN_=>syssetup.inf=>(unicode)
Clean

C:\WINDOWS\I386\SYSTEM.DR_
Clean

C:\WINDOWS\I386\SYSTEM.DR_=>system.drv
Clean

C:\WINDOWS\I386\SYSTEM.IN_
Clean

C:\WINDOWS\I386\SYSTEM.IN_=>system.ini
Clean

C:\WINDOWS\I386\SYSTEM.MO_
Clean

C:\WINDOWS\I386\SYSTEM.MO_=>system.mof
Clean

C:\WINDOWS\I386\SYSTEM.MO_=>system.mof=>(unicode)
Clean

C:\WINDOWS\system32\drivers\Wingen\system.exe
Infected with: Backdoor.Servu.25

C:\WINDOWS\system32\drivers\Wingen\system.exe
Disinfection failed

C:\WINDOWS\system32\drivers\Wingen\system.exe
Deleted

bon, j'ai redemarrer

bande pasante toujours naze

a+ et merci