PC trop lent, et autres nb pbs...HELP !

sophie -  
Bonjour, j'ai besoin d'aide !

Mon PC met plus de 3 min à démarrer, internet rame et des erreurs ferment les applications. parfois, me PC s'éteint même tout seul !

Quand j'essaie d'aller dans panneau de configuration, il est parfois impossible car la fenetre se ferme tout seul après un popup d'erreur.....

et je ne sais pas defragmenter un disk (l'un est plein l'autre vide...snif).

pas facile tout ca.
Après lecture des échanges sur ce forum j'ai installé spybot, avast et zonealarm. Pleins d'erreurs et autres diagnostiqués et je pense éliminiés mais mon pc rame toujours.

Merci mille fois pour votre aide à une jeune femme un peu perdue....

34 réponses

Résumé de la discussion

Le fil aborde un PC qui met plusieurs minutes à démarrer, des problèmes d'internet ralenti et des erreurs qui ferment des applications, avec des redémarrages spontanés et des fenêtres qui s'ouvrent puis ferment. Des solutions proposées impliquent sécurité et antivirus, puis outils anti-malware et désinfection comme BFU, BlackLight, EWIDO et HijackThis, ainsi que des conseils sur les disques et la défragmentation. Des échanges insistent sur la gestion du téléchargement d’outils, les risques et la nécessité de sauvegardes, de transferts de données et de nettoyages en plusieurs étapes pour éviter les conflits. En complément, des conseils évoquent la question des deux disques et l’importance du ménage régulier, sans conclure formellement sur l’état final du problème et en recommandant de poursuivre les manipulations.

Bobot (l’IA à votre service)
  1. lance_yien Contributeur
    bonjour sophie,

    jettes un coup d'oeil par ici:
    virus methode preliminaire de desinfection version fr

    et colles, ici les 3 rapports. ((merci lyonnais92))
    ---
    on y verra + clair après!

    a+
    0
    1. sophie
      rapport HiJackthis:

      Logfile of HijackThis v1.99.1
      Scan saved at 18:50:21, on 27/09/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\System32\drivers\CDAC11BA.EXE
      C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\sony\giga pocket\shwserv.exe
      C:\Program Files\Parental Filter\ServiceEPCP.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\sony\vaio media music server\SSSvr.exe
      C:\Program Files\sony\photo server\appsrv\PhotoAppSrv.exe
      C:\Program Files\sony\giga pocket\GPVSvr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
      C:\Program Files\Fichiers communs\sony shared\vaio media platform\SV_Httpd.exe
      C:\Program Files\Fichiers communs\sony shared\vaio media platform\UPnPFramework.exe
      C:\Program Files\Fichiers communs\sony shared\vaio media platform\SV_Httpd.exe
      C:\Program Files\Fichiers communs\sony shared\vaio media platform\UPnPFramework.exe
      C:\Program Files\Fichiers communs\Sony Shared\vaio media platform\sv_httpd.exe
      C:\Program Files\Fichiers communs\Sony Shared\vaio media platform\UPnPFramework.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\System32\ezSP_Px.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\PROGRA~1\Wanadoo\CnxMon.exe
      C:\PROGRA~1\MESSAG~1\StartMessager.exe
      C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
      C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
      C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\sony\usbsircs\usbsircs.exe
      C:\Program Files\Sony\VAIO Action Setup\VAServ.exe
      C:\Program Files\Sony\Wireless Panel\WPanel.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\sony\giga pocket\RM_SV.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Microsoft Office\Office\WINWORD.EXE
      C:\WINDOWS\msagent\AgentSvr.exe
      C:\Program Files\ewido anti-spyware 4.0\guard.exe
      C:\Program Files\ewido anti-spyware 4.0\ewido.exe
      C:\Documents and Settings\Sophie\Local Settings\Temp\Répertoire temporaire 1 pour hijackthis[1].zip\HijackThis.exe
      C:\Program Files\Messenger\msmsgs.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.sony-europe.com/
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.club-vaio.sony-europe.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
      O1 - Hosts: 169.254.217.252 NPIF921E6
      O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - (no file)
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
      O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
      O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
      O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
      O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
      O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Install_BlueDSL] F:\Install.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
      O4 - HKLM\..\Run: [LOGGING_EPCP] "C:\Program Files\Parental Filter\LoggingEPCP.exe" start
      O4 - HKLM\..\Run: [kzgbjvhc] c:\windows\system32\kzgbjvhc.exe kzgbjvhc
      O4 - HKLM\..\Run: [xrnazwyvtb] c:\windows\system32\xrnazwyvtb.exe xrnazwyvtb
      O4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe /StartUp
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Pilote Remocon.lnk = ?
      O4 - Global Startup: VAIO Action Setup (Serveur).lnk = ?
      O4 - Global Startup: Wireless Panel.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
      O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Unknown file in Winsock LSP: c:\program files\parental filter\hooklib.dll
      O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.com/
      O15 - Trusted Zone: *.sony-europe.com
      O15 - Trusted Zone: *.sonystyle-europe.com
      O15 - Trusted Zone: *.vaio-link.com
      O16 - DPF: {04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7} - https://www.afternic.com/domains/downloadv3.com
      O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1064_XP.cab
      O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - https://www.afternic.com/domains/downloadv3.com
      O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {17E7DE1A-E636-46E2-B626-E928F7966A2F} (hWebPass Control) - http://www.internetpayant.com/kit/ctrl/hWebPass.ocx
      O16 - DPF: {1CD4E2DC-2DA0-4154-8723-38CB04FB6A58} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1062_XP.cab
      O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - https://www.afternic.com/domains/downloadv3.com
      O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - https://www.afternic.com/domains/downloadv3.com
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} - http://www.edipole.fr/kits/WebInstall.dll
      O16 - DPF: {82FC4503-8459-4239-9B85-0617BEAA950A} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1061_XP.cab
      O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1059_XP.cab
      O16 - DPF: {8D8BAF56-B581-4B90-A549-C4AC6B03F1BB} - https://www.afternic.com/domains/downloadv3.com
      O16 - DPF: {92ABACFE-EF6E-42C7-A824-D50A914B5B70} (MastaCash Loader Class) - http://dx.mastacash.com/loader.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
      O16 - DPF: {AF7410C1-FBA3-415E-800A-4110CED40536} - http://ww1.dlv4.com
      O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - https://www.afternic.com/domains/downloadv3.com
      O16 - DPF: {C2481ED1-9896-4D49-AE90-69858DFDE446} - https://www.afternic.com/domains/downloadv3.com
      O16 - DPF: {CB5D474E-A510-40A4-B5A4-838933BCBA64} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1065_XP.cab
      O16 - DPF: {DDF44FD9-749F-4761-89BB-E8A59339E459} - https://www.afternic.com/domains/downloadv3.com
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: x-mem3n - {0F4413E7-5D3B-4B1A-8AA2-E2307F06B228} - C:\Program Files\Parental Filter\eztoolslib.net.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
      O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
      O23 - Service: Giga Pocket Hardware Detector - Sony Corporation - C:\Program Files\sony\giga pocket\shwserv.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
      O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
      O23 - Service: Parental Filter (ServiceEPCP) - - C:\Program Files\Parental Filter\ServiceEPCP.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
      O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\sony\giga pocket\halsv.exe
      O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\sony\giga pocket\RM_SV.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\Sptisrv.exe
      O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
      O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\sony\vaio media music server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing)
      O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\vaio media platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)
      O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\vaio media platform\UPnPFramework.exe
      O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\sony\photo server\appsrv\PhotoAppSrv.exe
      O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Fichiers communs\sony shared\vaio media platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing)
      O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Fichiers communs\sony shared\vaio media platform\UPnPFramework.exe
      O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\sony\giga pocket\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
      O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Fichiers communs\sony shared\vaio media platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
      O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Fichiers communs\sony shared\vaio media platform\UPnPFramework.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      0
      1. sophie
        Merci lance_yien... c'est un peu long, le rapport bitdefender tournent encore et ca a l'air d'etre la cata.

        J'ai l'impression que je suis infestée de virus....

        vois tu qqchose qui puisse m'aider à la lecture du premier rapport ?

        Merci encore de ton aide
        sophie
        0
        1. Utilisateur anonyme
          Salut,

          celui-ci aussi je suppose l'ance_yien ? j'trouve pas les deux autres :-/

          Sophie,

          rien ne sera supprimé sauf si indiqué
          ___
          Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

          O2 - BHO: (no name) - {008DB894-99ED-445D-8547-0E7C9808898D} - (no file)
          O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
          O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
          O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
          O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [Install_BlueDSL] F:\Install.exe
          O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
          O4 - HKLM\..\Run: [kzgbjvhc] c:\windows\system32\kzgbjvhc.exe kzgbjvhc
          O4 - HKLM\..\Run: [xrnazwyvtb] c:\windows\system32\xrnazwyvtb.exe xrnazwyvtb
          O4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe /StartUp
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
          O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
          O4 - Global Startup: Pilote Remocon.lnk = ?
          O4 - Global Startup: VAIO Action Setup (Serveur).lnk = ?
          O16 - DPF: {04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7} - https://www.afternic.com/domains/downloadv3.com
          O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1064_XP.cab
          O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} - https://www.afternic.com/domains/downloadv3.com
          O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab
          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
          O16 - DPF: {17E7DE1A-E636-46E2-B626-E928F7966A2F} (hWebPass Control) - http://www.internetpayant.com/kit/ctrl/hWebPass.ocx
          O16 - DPF: {1CD4E2DC-2DA0-4154-8723-38CB04FB6A58} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1062_XP.cab
          O16 - DPF: {2EF3FB47-7B1E-4536-BA4D-51427BD45DFA} (PIXACO Drag and Drop upload plugin) - https://www.snapfish.fr/2/home
          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
          O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - https://www.afternic.com/domains/downloadv3.com
          O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - https://www.afternic.com/domains/downloadv3.com
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
          O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} - http://www.edipole.fr/kits/WebInstall.dll
          O16 - DPF: {82FC4503-8459-4239-9B85-0617BEAA950A} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1061_XP.cab
          O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1059_XP.cab
          O16 - DPF: {8D8BAF56-B581-4B90-A549-C4AC6B03F1BB} - https://www.afternic.com/domains/downloadv3.com
          O16 - DPF: {92ABACFE-EF6E-42C7-A824-D50A914B5B70} (MastaCash Loader Class) - http://dx.mastacash.com/loader.cab
          O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
          O16 - DPF: {AF7410C1-FBA3-415E-800A-4110CED40536} - http://ww1.dlv4.com
          O16 - DPF: {BA749BC1-143E-430D-B1DA-1D2AF67A3658} - https://www.afternic.com/domains/downloadv3.com
          O16 - DPF: {C2481ED1-9896-4D49-AE90-69858DFDE446} - https://www.afternic.com/domains/downloadv3.com
          O16 - DPF: {CB5D474E-A510-40A4-B5A4-838933BCBA64} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1065_XP.cab
          O16 - DPF: {DDF44FD9-749F-4761-89BB-E8A59339E459} - https://www.afternic.com/domains/downloadv3.com

          Fait ce nettoyage: (à faire réguliérement)

          ¤Telecharges et installes ceci:
          CCleaner:
          Télécharger Ccleaner

          dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs.
          Les sauvegardes que tu aura faites tu pourra les supprimer si ton ordinateur n'a plus de problémes

          ¤Relance Ccleaner, vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage"

          Clic sur démarrer, rechercher ,cherche et supprime ces fichiers si présent:

          zgbjvhc.exe
          xrnazwyvtb.exe

          **Si un fichier persiste lors de la suppression fais ceci:
          -Redemarres ton pc, dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaitre choisis "mode sans echec" attends un peu.. puis vas supprimer les fichiers/dossiers qui persistaient, vides ta corbeille et redemarres normalement

          Télécharges Blacklight et sauvegarde le sur ton bureau.
          https://www.f-secure.com/en
          Double cliques sur " blbeta.exe " et acceptes la licence; clic sur "Scan" puis "Next"

          Un rapport, va se créer sur ton bureau "fslb-....."

          Copies et colles le contenu de ce rapport ici.

          Ne touche à rien d'autre!

          Redémarre ton Pc et dis nous si ça va mieux
          0
          2. lance_yien Contributeur
            bonjour à tous,

            @ boulepate62

            ** non celui-ci tu l'as vu avant moi .
            ** concerne les autres: t'as répondu, à toi seul, à 4/5 et c'est déjà TB

            bravo et surtout merci
            0
            1. sophie
              Bonjour messieurs et merci pour vos réponses

              3eme fois qie j'écris ce message, ce matin ca rame !!! j'ai tout rebooté.
              Je vais suivre vos procédures et je vous fais un copy/paste des deux autres rapports demandés.

              A tout à l'heure
              sophie

              EWIDO:
              ---------------------------------------------------------
              ewido anti-spyware - Scan Report
              ---------------------------------------------------------

              + Created at: 19:37:58 27/09/2006

              + Scan result:

              C:\WINDOWS\system32\egaccess4_1064.dll -> Dialer.EgroupDial.x : No action taken.
              HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access -> Dialer.Generic : No action taken.
              C:\WINDOWS\system32\dialx.exe -> Dialer.Masta.a : No action taken.
              C:\Documents and Settings\patrick planche\Local Settings\Temporary Internet Files\Content.IE5\5A22HK60\popup[1].php -> Downloader.IstBar.ai : No action taken.
              C:\WINDOWS\Downloaded Program Files\WebInstall.dll -> Downloader.WebInstall : No action taken.
              C:\WINDOWS\Downloaded Program Files\UWAS6_0001_N57M1312NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : No action taken.
              C:\WINDOWS\loader.dll -> Not-A-Virus.PornDownloader.Win32.Masta.a : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@247realmedia[1].txt -> TrackingCookie.247realmedia : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@247realmedia[2].txt -> TrackingCookie.247realmedia : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@microsoftwlmessengermkt.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@opodo.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ads.addynamix[2].txt -> TrackingCookie.Addynamix : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@gde.adocean[2].txt -> TrackingCookie.Adocean : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@z1.adserver[1].txt -> TrackingCookie.Adserver : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@adtech[2].txt -> TrackingCookie.Adtech : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@adtech[2].txt -> TrackingCookie.Adtech : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@adtech[1].txt -> TrackingCookie.Adtech : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@servedby.advertising[1].txt -> TrackingCookie.Advertising : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@atdmt[1].txt -> TrackingCookie.Atdmt : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@bfast[1].txt -> TrackingCookie.Bfast : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@iv2.bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@casalemedia[1].txt -> TrackingCookie.Casalemedia : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@casinodelrio[1].txt -> TrackingCookie.Casinodelrio : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@banner.casinoking[2].txt -> TrackingCookie.Casinoking : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@casinoking[1].txt -> TrackingCookie.Casinoking : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@banner.casinolasvegas[2].txt -> TrackingCookie.Casinolasvegas : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@casinolasvegas[1].txt -> TrackingCookie.Casinolasvegas : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@casinopays[1].txt -> TrackingCookie.Casinopays : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@crbanner.casinopays[2].txt -> TrackingCookie.Casinopays : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@casinotropez[2].txt -> TrackingCookie.Casinotropez : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@www.casinotropez[2].txt -> TrackingCookie.Casinotropez : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@casinotropez[1].txt -> TrackingCookie.Casinotropez : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@promo.casinotropez[1].txt -> TrackingCookie.Casinotropez : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@www.casinotropez[2].txt -> TrackingCookie.Casinotropez : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@clickbank[1].txt -> TrackingCookie.Clickbank : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@banner.clubdicecasino[2].txt -> TrackingCookie.Clubdicecasino : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@com[1].txt -> TrackingCookie.Com : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@doubleclick[2].txt -> TrackingCookie.Doubleclick : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@estat[1].txt -> TrackingCookie.Estat : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@estat[1].txt -> TrackingCookie.Estat : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@estat[1].txt -> TrackingCookie.Estat : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@estat[1].txt -> TrackingCookie.Estat : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@as1.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@as1.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@a.as-us.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@as-us.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@as1.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@banner.goldenpalace[2].txt -> TrackingCookie.Goldenpalace : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@goldenpalace[2].txt -> TrackingCookie.Goldenpalace : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@www.goldenpalace[1].txt -> TrackingCookie.Goldenpalace : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@grandonline[2].txt -> TrackingCookie.Grandonline : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@www.grandonline[1].txt -> TrackingCookie.Grandonline : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@ehg-yvesrocher.hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg-adversitement.hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg-neuftelecom.hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg-ogilvy.hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg-sonyeu.hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg-sonyny.hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg-ubisoft.hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ehg.hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@phg.hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@counter2.hitslink[2].txt -> TrackingCookie.Hitslink : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@mediaplex[2].txt -> TrackingCookie.Mediaplex : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@overture[1].txt -> TrackingCookie.Overture : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@paypopup[2].txt -> TrackingCookie.Paypopup : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@c.porngraph[2].txt -> TrackingCookie.Porngraph : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@qksrv[1].txt -> TrackingCookie.Qksrv : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@questionmarket[2].txt -> TrackingCookie.Questionmarket : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@realmedia[1].txt -> TrackingCookie.Realmedia : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@revenue[2].txt -> TrackingCookie.Revenue : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@edge.ru4[1].txt -> TrackingCookie.Ru4 : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@sexlist[1].txt -> TrackingCookie.Sexlist : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@counter15.sextracker[1].txt -> TrackingCookie.Sextracker : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@sextracker[1].txt -> TrackingCookie.Sextracker : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@ads.specificpop[1].txt -> TrackingCookie.Specificpop : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@statcounter[1].txt -> TrackingCookie.Statcounter : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : No action taken.
              C:\Documents and Settings\antoine planche\Cookies\antoine planche@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@valueclick[2].txt -> TrackingCookie.Valueclick : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@weborama[2].txt -> TrackingCookie.Weborama : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@weborama[2].txt -> TrackingCookie.Weborama : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@weborama[2].txt -> TrackingCookie.Weborama : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@yadro[1].txt -> TrackingCookie.Yadro : No action taken.
              C:\Documents and Settings\Sophie\Cookies\sophie@zedo[1].txt -> TrackingCookie.Zedo : No action taken.
              C:\Documents and Settings\louis planche\Cookies\louis planche@zedo[1].txt -> TrackingCookie.Zedo : No action taken.
              C:\Documents and Settings\patrick planche\Cookies\patrick planche@zedo[2].txt -> TrackingCookie.Zedo : No action taken.
              C:\WINDOWS\system32\EGAUTH.dll -> Trojan.P2E.ah : No action taken.
              C:\WINDOWS\system32\p2esocks_1020.dll -> Trojan.P2E.ah : No action taken.
              C:\WINDOWS\system32\authclient.exe -> Trojan.P2E.al : No action taken.

              ::Report end

              BITDEFENDER:
              BitDefender Online Scanner

              Scan report generated at: Wed, Sep 27, 2006 - 20:12:24

              Scan path: A:\;C:\;D:\;E:\;F:\;H:\;I:\;J:\;K:\;

              Statistics

              Time
              01:22:57

              Files
              457685

              Folders
              6744

              Boot Sectors
              3

              Archives
              7754

              Packed Files
              50679

              Results

              Identified Viruses
              26

              Infected Files
              33

              Suspect Files
              0

              Warnings
              0

              Disinfected
              0

              Deleted Files
              56

              Engines Info

              Virus Definitions
              456075

              Engine build
              AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

              Scan plugins
              13

              Archive plugins
              38

              Unpack plugins
              6

              E-mail plugins
              6

              System plugins
              1

              Scan Settings

              First Action
              Disinfect

              Second Action
              Delete

              Heuristics
              Yes

              Enable Warnings
              Yes

              Scanned Extensions
              *;

              Exclude Extensions

              Scan Emails
              Yes

              Scan Archives
              Yes

              Scan Packed
              Yes

              Scan Files
              Yes

              Scan Boot
              Yes

              Scanned File
              Status

              C:\Documents and Settings\patrick planche\Local Settings\Temporary Internet Files\Content.IE5\G5EWUMT4\egaccess4_1065_XP[1].cab=>egaccess4_1065.dll
              Infected with: DeepScan:Generic.Dialer.7762AD77

              C:\Documents and Settings\patrick planche\Local Settings\Temporary Internet Files\Content.IE5\G5EWUMT4\egaccess4_1065_XP[1].cab=>egaccess4_1065.dll
              Disinfection failed

              C:\Documents and Settings\patrick planche\Local Settings\Temporary Internet Files\Content.IE5\G5EWUMT4\egaccess4_1065_XP[1].cab=>egaccess4_1065.dll
              Deleted

              C:\Documents and Settings\patrick planche\Local Settings\Temporary Internet Files\Content.IE5\G5EWUMT4\egaccess4_1065_XP[1].cab
              Update failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03C07794=>(Quarantine-2)
              Infected with: DeepScan:Generic.Dialer.E841D137

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03C07794=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03C07794=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\075C56AE=>(Quarantine-2)=>egaccess4_1063.dll
              Infected with: DeepScan:Generic.Dialer.42698220

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\075C56AE=>(Quarantine-2)=>egaccess4_1063.dll
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\075C56AE=>(Quarantine-2)=>egaccess4_1063.dll
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\075C56AE=>(Quarantine-2)
              Update failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\111A14E7=>(Quarantine-2)=>egaccess4_1064.dll
              Detected with: Dialer.EGroupDial.A

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\111A14E7=>(Quarantine-2)=>egaccess4_1064.dll
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\111A14E7=>(Quarantine-2)=>egaccess4_1064.dll
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\111A14E7=>(Quarantine-2)
              Update failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D6864C5=>(Quarantine-2)
              Infected with: DeepScan:Generic.Dialer.791300BD

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D6864C5=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D6864C5=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D6C0EC1=>(Quarantine-2)
              Infected with: DeepScan:Generic.Dialer.42698220

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D6C0EC1=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D6C0EC1=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\24C5638C=>(Quarantine-2)
              Infected with: Trojan.Downloader.782

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\24C5638C=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\24C5638C=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\25C9496F=>(Quarantine-2)
              Infected with: Trojan.Downloader.Agent.AD

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\25C9496F=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\25C9496F=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2C0B06EA=>(Quarantine-2)
              Infected with: Trojan.Spy.Mslagent.E

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2C0B06EA=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2C0B06EA=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2CFB0062=>(Quarantine-2)
              Infected with: Trojan.Downloader.Wintrim.NAG

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2CFB0062=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2CFB0062=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2CFE2A5F=>(Quarantine-2)
              Infected with: Trojan.Downloader.Wintrim.NI

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2CFE2A5F=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2CFE2A5F=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D01545B=>(Quarantine-2)
              Infected with: Trojan.Dialer.PC

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D01545B=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D01545B=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D057E58=>(Quarantine-2)
              Infected with: DeepScan:Generic.Dialer.DA4CFC17

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D057E58=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D057E58=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D082854=>(Quarantine-2)
              Infected with: Trojan.Dialer.EG

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D082854=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2D082854=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\332B58E6=>(Quarantine-2)
              Infected with: Trojan.Downloader.Wintrim.BA

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\332B58E6=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\332B58E6=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\368161B1=>(Quarantine-2)
              Infected with: Trojan.Dialer.EG

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\368161B1=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\368161B1=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\381167EA=>(Quarantine-2)
              Infected with: Trojan.Downloader.Wintrim.CL

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\381167EA=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\381167EA=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3CE9416C=>(Quarantine-2)
              Infected with: Trojan.Spy.Mslagent.A

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3CE9416C=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3CE9416C=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3DDC28EF=>(Quarantine-2)
              Infected with: Trojan.Mailskinner.A

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3DDC28EF=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\44395C7B=>(Quarantine-2)
              Infected with: Trojan.Wintrim.CN

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\44395C7B=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\44395C7B=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5062510B=>(Quarantine-2)
              Infected with: Trojan.Downloader.Wintrim.B

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5062510B=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5062510B=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5A12398E=>(Quarantine-2)
              Infected with: Trojan.Downloader.Wintrim.CJ

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5A12398E=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5A12398E=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C8A459C=>(Quarantine-2)
              Infected with: Trojan.Dialer.FA

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C8A459C=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5C8A459C=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\656605C4=>(Quarantine-2)=>egaccess4_1062.dll
              Infected with: DeepScan:Generic.Dialer.791300BD

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\656605C4=>(Quarantine-2)=>egaccess4_1062.dll
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\656605C4=>(Quarantine-2)=>egaccess4_1062.dll
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\656605C4=>(Quarantine-2)
              Update failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6B91276E=>(Quarantine-2)
              Infected with: Trojan.Downloader.Wintrim.AZ

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6B91276E=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\760279B5=>(Quarantine-2)
              Infected with: Trojan.Dialer.EG

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\760279B5=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\760279B5=>(Quarantine-2)
              Deleted

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7721636D=>(Quarantine-2)
              Infected with: DeepScan:Generic.Dialer.949C67F6

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7721636D=>(Quarantine-2)
              Disinfection failed

              C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7721636D=>(Quarantine-2)
              Deleted

              C:\WINDOWS\Downloaded Program Files\WebInstall.dll
              Infected with: Trojan.Downloader.WebInstall.A

              C:\WINDOWS\Downloaded Program Files\WebInstall.dll
              Disinfection failed

              C:\WINDOWS\Downloaded Program Files\WebInstall.dll
              Deleted

              C:\WINDOWS\system32\authclient.exe
              Infected with: Trojan.P2E.AI

              C:\WINDOWS\system32\authclient.exe
              Disinfection failed

              C:\WINDOWS\system32\authclient.exe
              Deleted

              C:\WINDOWS\system32\egaccess4_1064.dll
              Detected with: Dialer.EGroupDial.A

              C:\WINDOWS\system32\egaccess4_1064.dll
              Disinfection failed

              C:\WINDOWS\system32\egaccess4_1064.dll
              Deleted

              C:\WINDOWS\system32\egaccess4_1065.dll
              Infected with: DeepScan:Generic.Dialer.7762AD77

              C:\WINDOWS\system32\egaccess4_1065.dll
              Disinfection failed

              C:\WINDOWS\system32\egaccess4_1065.dll
              Deleted

              C:\WINDOWS\system32\EGAUTH.dll
              Infected with: Trojan.P2e.AH

              C:\WINDOWS\system32\EGAUTH.dll
              Disinfection failed

              C:\WINDOWS\system32\EGAUTH.dll
              Deleted

              C:\WINDOWS\system32\p2esocks_1020.dll
              Infected with: Trojan.P2e.AH

              C:\WINDOWS\system32\p2esocks_1020.dll
              Disinfection failed

              C:\WINDOWS\system32\p2esocks_1020.dll
              Deleted
              0
              1. green day Modérateur
                Salut Sophie

                pour avancer un peu Boulepate ;-)

                tu es pas mal infecté !!!

                1/

                Télécharge Blacklight (de F-Secure) :

                https://www.f-secure.com/en

                et sauvegarde le sur ton Bureau.

                Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next

                Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

                Copie et colle le contenu de ce rapport dans ta prochaine réponse

                2/ ensuite refais un scan evec ewido ( car là il n'as rien fait ! ) et et regle ewido sur "deleted" pour qu'a chaque fois q'il te trouve une salté, il te la vire !

                @+
                0
                1. sophie
                  Miracle, j'arrive de nouveau à me connecter sur ce forum après des heures de non dispo !!! (c'est moi ou c'est le site ?)

                  Alors j'ai fait tout ce que tu m'as dit, voici le rapport demandé:

                  09/28/06 10:49:12 [Info]: BlackLight Engine 1.0.46 initialized
                  09/28/06 10:49:12 [Info]: OS: 5.1 build 2600 (Service Pack 2)
                  09/28/06 10:49:12 [Note]: 7019 4
                  09/28/06 10:49:12 [Note]: 7005 0
                  09/28/06 10:49:14 [Note]: 7006 0
                  09/28/06 10:49:14 [Note]: 7011 3976
                  09/28/06 10:49:14 [Note]: 7026 0
                  09/28/06 10:49:14 [Note]: 7026 0
                  09/28/06 10:49:14 [Note]: 7024 3
                  09/28/06 10:49:14 [Info]: Hidden process: C:\windows\system32\yznrhk.exe
                  09/28/06 10:49:14 [Note]: FSRAW library version 1.7.1019
                  09/28/06 10:54:36 [Note]: 4020 51564 458752
                  09/28/06 10:54:36 [Note]: 4020 51564 458752
                  09/28/06 10:54:36 [Note]: 4018 51564 458752
                  09/28/06 10:57:21 [Info]: Hidden file: c:\WINDOWS\Prefetch\YZNRHK.EXE-0B1D6B26.pf
                  09/28/06 10:57:21 [Note]: 10002 1
                  09/28/06 10:57:52 [Info]: Hidden file: c:\WINDOWS\system32\msclock32.dll
                  09/28/06 10:57:52 [Note]: 10002 1
                  09/28/06 10:57:58 [Info]: Hidden file: c:\WINDOWS\system32\msplock32.dll
                  09/28/06 10:57:58 [Note]: 10002 1
                  09/28/06 10:58:00 [Info]: Hidden file: c:\WINDOWS\system32\yznrhk.dat
                  09/28/06 10:58:00 [Note]: 10002 1
                  09/28/06 10:58:01 [Info]: Hidden file: C:\windows\system32\yznrhk.exe
                  09/28/06 10:58:01 [Note]: 10002 1
                  09/28/06 10:58:02 [Info]: Hidden file: c:\WINDOWS\system32\yznrhk_nav.dat
                  09/28/06 10:58:02 [Note]: 10002 1
                  09/28/06 10:58:04 [Info]: Hidden file: c:\WINDOWS\system32\yznrhk_navps.dat
                  09/28/06 10:58:04 [Note]: 10002 1
                  09/28/06 11:01:01 [Note]: 7007 0
                  0
                  1. sophie
                    voila j'ai aussi relancé EWIDO et delete les erreurs trouvées.

                    et maintenant que dois je faire ?
                    0
                    1. Utilisateur anonyme
                      Salut,

                      merci Green day

                      Sophie,

                      Télécharge BruteForce Uninstaller ici:
                      http://www.merijn.org/files/bfu.zip
                      Créé un nouveau dossier sur le bureau par exemple, nomme le CCM, dezippe le fichier telechargé à l'interieur

                      Ensuite, télécharge EGDACCESS :

                      Fais un clic droit ici:
                      http://metallica.geekstogo.com/EGDACCESS.bfu et choisis
                      Enregistre le sur le bureau, puis mets le dans le dossier CCM que tu as créer, tu aura donc les deux fichiers BFU.exe et EGDACCESS.bfu à l'interieur de ce dossier CCM

                      ----------
                      Lance "BruteForce Uninstaller" en cliquant sur BFU.exe
                      Clic sur le petit dossier jaune, et clique sur : EGDACCESS.bfu
                      Coches la case "Show log" after script ends
                      Clique sur Execute pour que le fix fasse son boulot

                      Attends que le message Complete script execution apparaîsse et clique sur OK.
                      Un rapport va s'afficher dans la fenetre du programme, copie et colle dans le bloc-notes, puis sauvegardes le.
                      Clique Exit pour fermer le programme BFU.

                      Ensuite, lance Blacklight en double cliquant sur blbeta.exe et accepte la licence.
                      Clique sur Scan pour lancer l'analyse.
                      Une fois fait, selectionnes chaques fichiers trouvés et clic sur "RENAME"
                      Puis valide.
                      Réponds oui aux messages d'avertissements et te demandant si tu autorises le reboot du pc.

                      ------------------

                      Après le reboot du pc, les fichiers :

                      c:\WINDOWS\Prefetch\YZNRHK.EXE-0B1D6B26.pf
                      c:\WINDOWS\system32\msplock32.dll
                      c:\WINDOWS\system32\yznrhk.dat
                      C:\windows\system32\yznrhk.exe
                      c:\WINDOWS\system32\yznrhk_nav.dat
                      c:\WINDOWS\system32\yznrhk_navps.dat

                      devraient être visible et pouvoir être supprimés sans aucuns soucis.
                      Blacklight ne les supprimes pas, il les renommes simplement et il va falloir que tu les vires toi même:
                      Va dans C:\Windows\system32\ et recherches et effaces:

                      c:\WINDOWS\Prefetch\YZNRHK.EXE-0B1D6B26.pf.ren
                      c:\WINDOWS\system32\msplock32.dll.ren
                      c:\WINDOWS\system32\yznrhk.dat.ren
                      C:\windows\system32\yznrhk.exe.ren
                      c:\WINDOWS\system32\yznrhk_nav.dat.ren
                      c:\WINDOWS\system32\yznrhk_navps.dat.ren

                      Une fois fait, poste le rapport de BFU que tu auras sauvegardé et un nouveau rapport de blacklight stp
                      0
                      1. sophie
                        Hello,

                        merci je vais faire ca mais juste une petite question d'une novice comme moi et complètement assistée en matière de PC....:

                        ca ne fait rien de télécharger autant de soft sur son pc ? y a pas des pbs ensuite de mémoire ou de conflit ?

                        j'ai aussi un autre pb, comme je le disais lors du premier message: j'ai 2 disques durs, l'un plein à 98% et l'autre vide à 98%. Je n'ai aucune idée de comment régler ca et ce que signifie "defragmenter" un dd.

                        Autre question (désolée) est ce que tu pourrais me dire, grosso modo, quels sont les pbs que tu vois qd tu me donnes toutes les manip à faire ?

                        Merci encore pour ton temps, c'est vraiment sympa et ca me sauve la vie !!!
                        0
                        1. sophie
                          je n'arrive pas à ouvrir le 2eme fichier, un pop up s'ouvre et me dit que windows ne peut pas ouvrir le fichier car programme inconnu ????
                          0
                          1. Utilisateur anonyme
                            non, ça ne risque rien d'en télécharger autant au contraire ça nous aide.

                            Pour ton DD plein il faut que tu fasses un transfére(si tu le souhaites) de ton DD plein vers le vide, ça l'allégera un peu.

                            Les problémes que t uas c'est que tu n'as pas l'air de faire souvent le ménage, donc des bestioles y ont prises place, et comme certaines sont bien cachées ils faut vers plusieurs manipulations pour les virer :-)
                            0
                            1. sophie
                              ca y est j'ai reussi, ca tourne et non tu as raison je ne fais jamais le menage et l'homme a qui appartient ce pc est encore pire que moi en matiere d'IT... c'est pas peu dire......autant dire qu'il n'y avait pas de firewall, ni d'anti virus qui tienne la route avant moi, imagines le carnage !!!!
                              0
                              1. lance_yien Contributeur
                                bonjour à tous,

                                désolé pour la déconnection momentanée,
                                merci encore, boulepate62 et green day pour le relais.

                                @sophie: t'en as fait des choses, dis donc, Félicitations!!!!
                                tu vas y arriver.
                                continues à suivre les consignes à fur et à mesure sans t'inquiéter pour quoi que ce soit...
                                bonne chasse!!!

                                bon courage à tous

                                a+
                                0
                                1. "de passage"
                                  Salut green day ;

                                  Astuces pour la manip avec le BFU pour cette infection :

                                  1) Toujours passer egdaccess.bfu en mode Sans Échec. Je sais d'où vient la manip que tu utilises, et elle date malheureusement :-(

                                  2) Pas nécessaire de faire cocher "Show log", car ce log est imprécis et ne nous aide pas. Par contre... tu demandes au visiteur de poster le contenu du fichier "C:\egd.txt" qui est généré par le script ; celui-ci va te montrer si la clé "Run" est toujours présente (celle qui correspond à la ligne O4 qui est souvent cachée). Tu peux même en voir plus d'une parfois, si le processus caché mute. Si la clé est repérée, demande un rapport HJT fait en Sans Échec, et là tu verras la (ou les) ligne O4 associée au processus. Demande de fixer celle-ci en Sans Échec, avec HJT.

                                  Bon succès..
                                  0
                                  1. sophie
                                    bonjour,

                                    j'ai été interrompue hier soir, je reprends...

                                    Je suis en train de faire retourner blacklight après avoir suivi des instructions. Par contre maintenant est apparu un nouveau phénomnène qui m'inquiète beaucoup:

                                    Après avoir rebooté mon pc hier soir, est apparu le message suivant provenant de windows microsoft: "vous etes peut etre victime d'une contrzfaçon de logiciel" !!!!

                                    alors la j'ai tres peur....

                                    en attendant voici le rappport BFU:
                                    BFU v1.00.9
                                    Windows XP SP2 (WinNT 5.01.2600 SP2)
                                    Script started at 19:02:43, on 28/09/2006

                                    Option Delete files to Recycle Bin: Yes
                                    Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|MC (key not found)
                                    Failed: RegDelValue HKCU\software\microsoft\windows\currentversion\wintrust\trust providers\software publishing\trust database\0|ELECTRONIC GROUP (key not found)
                                    Failed: DllUnregister C:\WINDOWS\System32\MSWBM32.DLL|1 (file not found)
                                    Failed: FileDelete C:\WINDOWS\System32\msclock32.dll (operation failed)
                                    Failed: FileDelete C:\WINDOWS\System32\msplock32.dll (operation failed)
                                    Failed: FolderDelete C:\Program Files\dialpass (folder not found)
                                    Failed: FolderDelete C:\Program Files\eghtmldialer (folder not found)
                                    Failed: FolderDelete C:\Program Files\egroup (folder not found)
                                    Failed: FolderDelete C:\Program Files\Instant Access (folder not found)
                                    Failed: FolderDelete C:\Program Files\InternetGameBox (folder not found)
                                    Failed: FolderDelete C:\Program Files\GoRecord2 (folder not found)
                                    Failed: FolderDelete C:\Program Files\GoAstro (folder not found)
                                    Failed: FolderDelete C:\Program Files\SudoPlanet (folder not found)
                                    Failed: FolderDelete C:\Program Files\WebMediaPlayer (folder not found)
                                    Failed: DllUnregister C:\WINDOWS\mslagent\2_mslagent.dll|1 (file not found)
                                    Failed: DllUnregister C:\WINDOWS\navmpc\2_navmpc.dll|1 (file not found)
                                    Failed: FolderDelete C:\WINDOWS\mslagent (folder not found)
                                    Failed: FolderDelete C:\WINDOWS\navmpc (folder not found)
                                    Failed: FolderDelete C:\WINDOWS\wintrim (folder not found)
                                    Failed: FolderDelete C:\WINDOWS\wincomp (folder not found)
                                    Failed: FolderDelete C:\WINDOWS\winmgts (folder not found)
                                    Failed: FolderDelete C:\WINDOWS\simcss (folder not found)
                                    Failed: FolderDelete C:\WINDOWS\mc (folder not found)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\Perflib_Perfdata_30c.dat (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\Perflib_Perfdata_544.dat (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR10.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR11.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR12.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR13.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR14.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR15.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR16.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR17.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR18.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR19.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR1A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR1B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR1C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR1E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR1F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR25.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR26.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR27.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR28.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR29.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR2A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR2B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR2C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR2D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR2E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR2F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR30.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR31.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR32.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR33.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR34.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR35.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR36.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR37.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR38.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR39.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR3A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR3B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR3C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR3D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR3E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR3F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR40.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR41.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR42.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR43.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR44.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR45.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR46.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR47.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR48.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR49.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR4A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR4B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR4C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR4D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR4E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR4F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR50.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR51.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR52.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR53.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR54.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR55.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR56.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR57.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR58.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR59.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR5A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR5B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR5C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR5D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR5E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR5F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR60.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR61.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR62.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR63.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR64.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR65.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR66.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR67.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR68.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR69.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR6A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR6B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR6C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR6D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR6E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR6F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR70.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR71.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR72.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR73.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR74.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR75.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR76.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR77.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR78.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR79.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR7A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR7B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR7C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR7D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR7E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR7F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR80.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR81.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR82.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR83.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR84.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR85.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR86.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR87.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR88.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR89.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR8A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR8B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR8C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR8D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR8E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR8F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR90.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR91.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR92.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR93.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR94.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR95.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR96.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR97.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR98.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR99.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR9A.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR9B.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR9C.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR9D.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR9E.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTR9F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA0.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA1.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA2.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA3.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA4.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA5.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA6.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA7.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA8.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRA9.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRAA.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRAB.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRAC.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRAD.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRAE.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRAF.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB0.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB1.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB2.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB3.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB4.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB5.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB6.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB7.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB8.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRB9.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRBA.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\TTRBB.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DF16F4.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DF3FEC.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DF403F.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DF5D17.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DF5D34.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DF7E74.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DFA445.tmp (operation failed)
                                    Failed: FileDelete C:\DOCUME~1\Sophie\LOCALS~1\Temp\~DFFAE4.tmp (operation failed)
                                    Failed: FileDelete C:\WINDOWS\Temp\JET330C.tmp (operation failed)
                                    Failed: FileDelete C:\WINDOWS\Temp\JET4E06.tmp (operation failed)
                                    Failed: FileDelete C:\WINDOWS\Temp\Perflib_Perfdata_6f4.dat (operation failed)
                                    Failed: FileDelete C:\WINDOWS\Temp\ZLT004bf.TMP (operation failed)
                                    Failed: FileDelete C:\WINDOWS\Temp\ZLT032f6.TMP (operation failed)
                                    Failed: FolderDelete C:\WINDOWS\Temp\_avast4_ (operation failed)
                                    Script completed.
                                    0
                                    1. sophie
                                      je viens de finir blacklight et il me dit qu'il n'a rien trouvé
                                      0
                                      1. green day Modérateur
                                        Salut à tous

                                        Lance_yien : pas d'quoi !

                                        "de passage" : je crois avoir deviner qui c'est :-)

                                        je note : Merci !

                                        Sophie : ton windows est bien legal ???

                                        télécharge ceci :

                                        CleanUp40 : pageperso.aol.fr/Balltrap34/CleanUp40.exe

                                        tuto : (Merci à Balltrap34 pour cette réalisation) pageperso.aol.fr/balltrap34/democleanup.htm

                                        ++
                                        0
                                        1. sophie
                                          oui il l'est, je l'ai eu avec le pc.
                                          je n'ai jamais eu ce message avant le reboot apres la manip de BFU

                                          est ce que je dois charger le cleaner que tu m'indiques ?
                                          0
                                          • 1
                                          • 2