Problème antivirus

Résolu
bonsoir,
j'ai du attraper une saloperie sur le net....
voilà, hier pour une raison inconnnu, norton s'est désactiver et impossible a réactiver. j'ai essayer de le désinstaller puis de le réinstaller, mais sans succès.. j'ai donc décider d'installer avast que j'ai réussi à faire, mais là impossible d'aller sur msn. ce matin j'ai voulu faire une restauration système et puis plus de avast dans mes programmes.
j'ai voulu le réinstaller, mais là impossible, une fois le module aswcmnos.dll est manquant, j'arrive à trouver le module, je réessaie donc d'installer avast, et là c'est le module aswcmnb.dll qui manque
qui peut m'aider?

36 réponses

Résumé de la discussion

Le fil expose une infection informatique où Norton se désactive et Avast installé sans résoudre le problème, avec des DLL manquantes aswcmnos.dll et aswcmnb.dll qui bloquent la réinstallation et l’accès à MSN. Solutions incluent l’usage de SDFix en mode sans échec pour supprimer trojans et entrées du registre, puis l’exécution d’HijackThis et un redémarrage pour nettoyer le système. D’autres conseils recommandent de désactiver ou de supprimer des services indésirables comme Boonty, d’employer CCleaner et CleanUp40 pour éliminer fichiers temporaires et erreurs, et de limiter à un seul antivirus. En cas de doute, la discussion rappelle qu’il faut privilégier une approche de nettoyage en profondeur plutôt que des réinstallations répétées et multiples antivirus, afin d’éviter les conflits et les résidus.

Bobot (l’IA à votre service)
  1. Modérateur
    re

    des saltés qui pourrait expliquer cette pagaille ...

    quel norton as tu et comment as tu fais pour le déinstaller ???

    Télécharge SDFix sur ton bureau

    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

    Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
    Redémarre ton ordinateur en mode sans échec
    Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.
    Appuie sur Y pour commencer le processus de nettoyage.
    Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
    Appuie sur une touche pour redémarrer le PC.
    Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
    Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
    Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
    Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
    Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

    ++
    1
    1. après un nouvel essai ça a marché, voici les rapports

      SDFix: Version 1.32
      -------------------

      Scan run on:
      28/10/2006

      Time:
      23:35

      Microsoft Windows XP [version 5.1.2600]

      Running from: C:\Documents and Settings\philippe\Bureau\SDFix

      Stage One...

      Checking Services...

      Name:
      -----

      Path:
      ----

      Repairing Registry...

      Restoring Default Hosts File...

      Stage One Complete

      Rebooting...

      Stage Two...

      Checking For Malware:
      --------------------

      C:\WINDOWS\system\smss.exe

      Backing Up and Removing any Files Found...

      Final Check:

      Services:
      ---------

      Files:
      ------

      Any files removed are saved to the SDFix\backups Folder

      FINISHED

      Logfile of HijackThis v1.99.1
      Scan saved at 23:44:28, on 28/10/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      C:\PROGRA~1\Iomega\System32\AppServices.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\system32\notepad.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
      C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Ohé\OHE.exe
      C:\Program Files\MessengerPlus! 3\MsgPlus.exe
      C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\WINDOWS\vVX3000.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\WINDOWS\System32\msiexec.exe
      C:\WINDOWS\System32\HPZipm12.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\Program Files\Outlook Express\msimn.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\philippe\Bureau\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: IEHlprObj Class - {CD4C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\Go!Zilla\GoIEHlp.dll (file missing)
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
      O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [OHE] C:\Program Files\Ohé\OHE.exe
      O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
      O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\philippe\LOCALS~1\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe -startup -product IncrediMail -skip_dialog info -skip_dialog language
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
      O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
      O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI
      O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
      O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
      O4 - Global Startup: officejet 6100.lnk = ?
      O8 - Extra context menu item: Download with Go!Zilla - file://C:\Program Files\Go!Zilla\download-with-gozilla.html
      O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
      O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
      O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
      O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
      O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version6/Applet/vchatsign.cab
      O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} - http://barremagique.aliceadsl.fr/download/BarreMagique.cab
      O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
      O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.pixdiscount.fr/clients/ImageUploader3.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
      O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install3.0/Installer.exe
      O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} (CamfrogWEB Advanced Unicode Control) - https://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
      O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
      O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
      O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
      1
      1. Modérateur
        Salut

        "inscrire" tu veux dire demander un clé d'activation ??? non, c'est toujours aussi gratuit :)

        ++
        1
        1. Modérateur
          Salut

          Télécharge ceci :

          Lien : hijackthis

          Démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

          Choisir l'option "do a scan and a logfile", et faire un copier/coller du rapport ainsi générer sur le forum.

          ++
          0
          1. voici mon scan et merci de m'aider, je suis sur ce truc depuis ce matin et je n'arrive pas à le résoudre
            Logfile of HijackThis v1.99.1
            Scan saved at 22:50:06, on 28/10/2006
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
            C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
            C:\PROGRA~1\Iomega\System32\AppServices.exe
            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
            C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
            C:\WINDOWS\system32\slserv.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
            C:\WINDOWS\SOUNDMAN.EXE
            C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
            C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
            C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
            C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
            C:\Program Files\Ohé\OHE.exe
            C:\Program Files\MessengerPlus! 3\MsgPlus.exe
            C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
            C:\WINDOWS\vVX3000.exe
            C:\WINDOWS\system32\svchost.exe
            C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
            C:\WINDOWS\System32\HPZipm12.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
            C:\Program Files\MSN Messenger\msnmsgr.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\Program Files\Outlook Express\msimn.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Documents and Settings\philippe\Bureau\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
            R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O2 - BHO: IEHlprObj Class - {CD4C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\Go!Zilla\GoIEHlp.dll (file missing)
            O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
            O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
            O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
            O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
            O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Update_OB\realsched.exe" -osboot
            O4 - HKLM\..\Run: [OHE] C:\Program Files\Ohé\OHE.exe
            O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
            O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\philippe\LOCALS~1\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe -startup -product IncrediMail -skip_dialog info -skip_dialog language
            O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
            O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
            O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
            O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
            O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI
            O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
            O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
            O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
            O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
            O4 - Global Startup: officejet 6100.lnk = ?
            O8 - Extra context menu item: Download with Go!Zilla - file://C:\Program Files\Go!Zilla\download-with-gozilla.html
            O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
            O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
            O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
            O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
            O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version6/Applet/vchatsign.cab
            O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} - http://barremagique.aliceadsl.fr/download/BarreMagique.cab
            O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
            O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
            O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
            O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.pixdiscount.fr/clients/ImageUploader3.cab
            O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
            O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
            O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
            O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install3.0/Installer.exe
            O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} (CamfrogWEB Advanced Unicode Control) - https://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
            O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
            O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
            O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
            O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
            O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
            O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
            O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
            O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
            O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
            O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
            0
            1. impossible de faire ce que tu me dit, je ne retrouve pas le dossier sd fix une fois en mode sans echec
              0
              1. Modérateur
                re

                il doit normalement se trouver à l'endroit où tu l'as télécharger en mode normal ...

                ++
                0
                1. Modérateur
                  re

                  ok, à faire : le 1/ et 2/ de ce lien stp :

                  virus methode preliminaire de desinfection version fr

                  ++
                  0
                  1. ok, c'est parti pour ewido, le temps de scanner et j'envoie le tout
                    0
                    1. Modérateur
                      Salut

                      où en sont tes soucis ???

                      @+
                      0
                      1. salut,
                        mes soucis sont toujours au même point... je viens de rentrer du boulot, et oui y en as qui bosse le dimanche...lol
                        j'ai eu des misères avec ewido qui se fermait avant la fin du scan.. mais j'y suis enfin arrivé, là je suis sur bitdefender, dès le scan fini, je t'envois le tout...
                        quant à norton, c'est une option avec alice que j'ai pris, je l'ai supprimé à l'aide de ajout/suppression de programme et aussi avec un programme qui s'appelle norton removal tool...
                        que dois je faire pour installer avast, j'en ai entendu beaucoup de bien, je l'avais installé et suite à une restauration système il a été supprimé de l'ordi et quand je le réinstalle il manque des modules dll, cité en haut de ma demande
                        0
                    2. Modérateur
                      Salut

                      poste les rapports, on verra par la suite

                      ++
                      0
                      1. voici mes rapports, en te remerciant pour le temps que tu m'accordes
                        ---------------------------------------------------------
                        ewido anti-spyware - Scan Report
                        ---------------------------------------------------------

                        + Created at: 07:25:22 29/10/2006

                        + Scan result:

                        C:\Documents and Settings\Invité\Cookies\invité@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
                        C:\Documents and Settings\philippe\Cookies\philippe@www.burstnet[2].txt -> TrackingCookie.Burstnet : No action taken.
                        C:\Documents and Settings\philippe\Cookies\philippe@clickbank[2].txt -> TrackingCookie.Clickbank : No action taken.
                        C:\Documents and Settings\philippe\Cookies\philippe@weborama[2].txt -> TrackingCookie.Weborama : No action taken.

                        ::Report end
                        BitDefender Online Scanner

                        Scan report generated at: Sun, Oct 29, 2006 - 17:29:18

                        Scan path: C:\;D:\;E:\;F:\;I:\;J:\;

                        Statistics

                        Time
                        09:59:31

                        Files
                        311355

                        Folders
                        5111

                        Boot Sectors
                        3

                        Archives
                        11812

                        Packed Files
                        28498

                        Results

                        Identified Viruses
                        5

                        Infected Files
                        33

                        Suspect Files
                        0

                        Warnings
                        0

                        Disinfected
                        0

                        Deleted Files
                        62

                        Engines Info

                        Virus Definitions
                        479341

                        Engine build
                        AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

                        Scan plugins
                        13

                        Archive plugins
                        38

                        Unpack plugins
                        6

                        E-mail plugins
                        6

                        System plugins
                        1

                        Scan Settings

                        First Action
                        Disinfect

                        Second Action
                        Delete

                        Heuristics
                        Yes

                        Enable Warnings
                        Yes

                        Scanned Extensions
                        *;

                        Exclude Extensions

                        Scan Emails
                        Yes

                        Scan Archives
                        Yes

                        Scan Packed
                        Yes

                        Scan Files
                        Yes

                        Scan Boot
                        Yes

                        Scanned File
                        Status

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\030E41DE.exe=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\030E41DE.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\030E41DE.exe=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03DC16FC.exe=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03DC16FC.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\03DC16FC.exe=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\093A3609=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\093A3609=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\093A3609=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\11037A88=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\11037A88=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\11037A88=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\242360E6=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\242360E6=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\242360E6=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24782489=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24782489=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24782489=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24887677=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24887677=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24887677=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\248F4A6F=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\248F4A6F=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\248F4A6F=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\267F384D=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\267F384D=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\267F384D=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\269C322D=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\269C322D=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\269C322D=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2F5A3674.par=>(Quarantine-2)
                        Infected with: Win32.Worm.VB.DY

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2F5A3674.par=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\32FC6D65.exe=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\32FC6D65.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\32FC6D65.exe=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\33F46454.exe=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\33F46454.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\33F46454.exe=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\33F80E50.exe=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\33F80E50.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\33F80E50.exe=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A0608C5=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A0608C5=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A0608C5=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A784647=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A784647=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3A784647=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44932B29=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44932B29=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\44932B29=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\449C291E=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\449C291E=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\449C291E=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\64404C5F.dll=>(Quarantine-2)
                        Infected with: Trojan.Clicker.GG

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\64404C5F.dll=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\64404C5F.dll=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\71A078A4.par=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\71A078A4.par=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\71A078A4.par=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\760E482A=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\760E482A=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\760E482A=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7C2A5CCB=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7C2A5CCB=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7C2A5CCB=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7E4B54B4.par=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7E4B54B4.par=>(Quarantine-2)
                        Disinfection failed

                        C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7E4B54B4.par=>(Quarantine-2)
                        Deleted

                        C:\Documents and Settings\philippe\Bureau\SDFix\backups\backups.zip=>backups/smss.exe
                        Infected with: Backdoor.Robobot.AU

                        C:\Documents and Settings\philippe\Bureau\SDFix\backups\backups.zip=>backups/smss.exe
                        Disinfection failed

                        C:\Documents and Settings\philippe\Bureau\SDFix\backups\backups.zip=>backups/smss.exe
                        Deleted

                        C:\Documents and Settings\philippe\Bureau\SDFix\backups\backups.zip
                        Updated

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP497\A0042552.exe
                        Infected with: Backdoor.Robobot.AU

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP497\A0042552.exe
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP497\A0042552.exe
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP500\A0050413.exe
                        Infected with: Backdoor.Robobot.AU

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP500\A0050413.exe
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP500\A0050413.exe
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053159.exe
                        Infected with: Backdoor.Robobot.AU

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053159.exe
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053159.exe
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053196.exe=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053196.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053196.exe=>(Quarantine-2)
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053197.exe=>(Quarantine-2)
                        Infected with: Win32.Vb.AN@mm

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053197.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053197.exe=>(Quarantine-2)
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053198.exe=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053198.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053198.exe=>(Quarantine-2)
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053199.exe=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053199.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053199.exe=>(Quarantine-2)
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053200.exe=>(Quarantine-2)
                        Infected with: Worm.P2P.VB.Bacteria.B

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053200.exe=>(Quarantine-2)
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053200.exe=>(Quarantine-2)
                        Deleted

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053201.dll=>(Quarantine-2)
                        Infected with: Trojan.Clicker.GG

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053201.dll=>(Quarantine-2)
                        Disinfection failed

                        C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP501\A0053201.dll=>(Quarantine-2)
                        Deleted
                        0
                        1. Modérateur
                          re

                          ok, tu avais quel norton ???

                          regarde par là pour le déinstaller correctement :

                          supprimer desinstaller norton antivirus norton internet security

                          ensuite reposte un nouveau hijackthis stp

                          ++
                          0
                          1. j'avais norton internet secuirty 2006
                            Logfile of HijackThis v1.99.1
                            Scan saved at 17:47:22, on 29/10/2006
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\WINDOWS\SOUNDMAN.EXE
                            C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
                            C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
                            C:\Program Files\Ohé\OHE.exe
                            C:\Program Files\MessengerPlus! 3\MsgPlus.exe
                            C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
                            C:\WINDOWS\vVX3000.exe
                            C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
                            C:\WINDOWS\system32\ctfmon.exe
                            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
                            C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
                            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe
                            C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                            C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
                            C:\PROGRA~1\Iomega\System32\AppServices.exe
                            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                            C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
                            C:\WINDOWS\system32\slserv.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
                            C:\WINDOWS\System32\msiexec.exe
                            C:\WINDOWS\system32\wscntfy.exe
                            C:\WINDOWS\System32\HPZipm12.exe
                            C:\WINDOWS\System32\MsiExec.exe
                            C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
                            C:\WINDOWS\System32\MsiExec.exe
                            C:\WINDOWS\system32\wuauclt.exe
                            C:\Documents and Settings\philippe\Bureau\HijackThis.exe

                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=D4322FEE7CF74A348CB9CE970F098EF5
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
                            R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O2 - BHO: IEHlprObj Class - {CD4C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\Go!Zilla\GoIEHlp.dll (file missing)
                            O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                            O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
                            O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                            O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
                            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\ACE Mega CoDecS Pack\SystemS\RealMedia\Update_OB\realsched.exe" -osboot
                            O4 - HKLM\..\Run: [OHE] C:\Program Files\Ohé\OHE.exe
                            O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
                            O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\philippe\LOCALS~1\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe -startup -product IncrediMail -skip_dialog info -skip_dialog language
                            O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                            O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
                            O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
                            O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
                            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
                            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                            O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\WINSOS\WINSOS.EXE" MINI
                            O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                            O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
                            O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
                            O4 - Global Startup: officejet 6100.lnk = ?
                            O8 - Extra context menu item: Download with Go!Zilla - file://C:\Program Files\Go!Zilla\download-with-gozilla.html
                            O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
                            O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
                            O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\PROGRA~1\ALLOCA~1\allocam.exe (file missing)
                            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                            O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
                            O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                            O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version6/Applet/vchatsign.cab
                            O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} - http://barremagique.aliceadsl.fr/download/BarreMagique.cab
                            O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
                            O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                            O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
                            O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.pixdiscount.fr/clients/ImageUploader3.cab
                            O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                            O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                            O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
                            O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/player.virtools.com/downloads/player/Install3.0/Installer.exe
                            O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} (CamfrogWEB Advanced Unicode Control) - https://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
                            O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
                            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                            O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                            O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                            O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                            O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
                            O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
                            O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
                            O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
                            O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                            O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
                            0
                            1. j'ai un autre problème, maintenant à chaque démarage, j'ai un programme word 2002 qui tente de s'installer, mais ca marque que le fichier wordret.msi est manquant
                              0
                              1. Modérateur
                                re

                                pour word , est-ce un programme à toi, que tu avais ou installer recement ???

                                # Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

                                O2 - BHO: IEHlprObj Class - {CD4C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\Go!Zilla\GoIEHlp.dll (file missing)

                                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\ACE Mega CoDecS
                                O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\philippe\LOCALS~1\Temp\ImInstaller\IncrediMail\IncrediMail_Install.exe -startup -product IncrediMail -skip_dialog info -skip_dialog language
                                O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
                                O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
                                O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                                O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
                                O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
                                O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
                                O4 - Global Startup: officejet 6100.lnk = ?

                                O8 - Extra context menu item: Download with Go!Zilla - file://C:\Program Files\Go!Zilla\download-with-gozilla.html
                                O8 - Extra context menu item: Télécharger avec Star Downloader - C:\Program Files\Star Downloader\sdie.htm

                                O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version6/Applet/vchatsign.cab
                                O16 - DPF: {041816FE-7869-4B5F-9BE4-FFF3B7368727} - http://barremagique.aliceadsl.fr/download/BarreMagique.cab

                                O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                                O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                                O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://abonnement.aliceadsl.fr/configurateur/AccountHelper.cab
                                O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - http://www.pixdiscount.fr/clients/ImageUploader3.cab
                                O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                                O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                                O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game07.zylom.com/activex/zylomgamesplayer.cab
                                O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/
                                O16 - DPF: {DFB5BCF1-06AE-4ABB-BFA8-1E228F41C50A} (CamfrogWEB Advanced Unicode Control) - https://www.bobtv.fr/download/cfweb_www.bobtv.fr-download_instmodule.exe
                                O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab

                                O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

                                ==> cherche et supprime le dossier en gras :

                                C:\Program Files\Go!Zilla\GoIEHlp.dll

                                Cliques sur :

                                demarrer < executer < tapes " services.msc"

                                cherches dans la liste cette ligne et regles la sur "desactivé"

                                Service: Boonty Games


                                # télécharge et execute ceci :

                                * CleanUp40 (qui élimine les fichiers temporaires + cookies : gratuit )
                                http://pageperso.aol.fr/Balltrap34/CleanUp40.exe

                                tuto : (merci à Balltrap) http://pageperso.aol.fr/balltrap34/democleanup.htm

                                * Ccleaner : Telecharge et installe ceci, dans la colonne de gauche clique sur "erreurs" coche toute les cases, puis clique en bas sur "chercher des erreurs" une fois finit, clique sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs .

                                *Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoche la derniere case (Avancé si elle
                                est cochée) puis clique sur "lancer le nettoyage"

                                ccleaner

                                tuto: https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

                                ==> cliques sur demarrer < executer et tapes : Prefetch
                                et supprime tout le contenu de ce dossier !

                                pour ton antivirus, je vois que tu as déjà antivir ... dans ce cas pas besion d'installe avast car il faut obligatoirement un seul entivirus et un seul parfeu !!! sinon, si tu veux avast, qui est "mieux" qu'avg, tu vire avg avant !

                                avast

                                et installe un parfeu !!!

                                kerio

                                tuto : pour configurer et comprendre Kerio
                                https://www.vulgarisation-informatique.com/kerio.php

                                precise tes soucis s'il en reste !

                                @+

                                **En vérité, le chemin importe peu, la volonté d'arriver suffit à tout ( A.Camus ) **
                                0
                                1. re
                                  j'ai fait toutes les manipulations, cependant toujours un problème, je ne peux toujours pas réinstaller avast, on me dit encore que le fichier aswcmnos.dll et aswcmnb.dll est introuvable... j'ai désinstallé antivir...
                                  quant à word 2002 qui se lance, c'est windows installer qui me le démarre, c'est une mise à jour que windows me demande pour installer sp3 mais je n'ai pas le module wordret.msi
                                  0
                                  1. bon sp3 on verra après, une fois que j'aurai un antivirus...
                                    j'ai suivi ton lien, j'ai télécharger aswcmnos.dll maintenant on me demande le fichier aswcmnB.dll
                                    je comprend pas que ces modules sont absent du pc car j'ai déjà installé avast vendredi sans problème
                                    0
                                    1. Modérateur
                                      re

                                      voici l'autre :

                                      http://www.dynamiclink.nl/htmfiles/rframes/dll-a09.htm

                                      pourquoi ces fichiers ne sont plus là, ben j'ai vu sur le net que c'était un problèmes recurrents pour avast, perso, je ne sais pas ...

                                      ++
                                      0
                                      • 1
                                      • 2