Débordement de la mémoire tampon

Résolu
Charle07 -  
bonjour, j'ai besoin d'aide pour résoudre un problème de blocage pour cause de débordement de la mémoire tampon décelé par virus scan entreprise 8.0

Merci à l'avance pour votre aide!!
Configuration: Windows XP
Firefox 1.0.7

11 réponses

  1.  Kristopher Contributeur
    Bonjour,

    Comment ça un "débordement de la mémoire tampon décelé par virus scan entreprise 8.0" ?

    Comment un antivirus peut-il déceler un problème de mémoire tampon ?

    Tu as plusieurs solutions :

    -Racheter de la mémoire vive (c'est bien d'avoir au moins 512 MB voire plus)

    -Changer d'antivirus si celui-ci te ralenti trop le PC

    Bonne chance
    0
    1. Charle07 Auteur
      bonjour kristopher,
      y a-t-il aucun programme qui puisse enrayer ce virus? Dans une discussion pour un problème similaire présentée sur le forum en 2006, la personne ayant le même problème que moi s'est fait conseiller d'utiliser hijackthis. Est-ce que ce programme pourrait m'aider à enrayer mon virus causant un débordement de la mémoire tampon?
      merci de ton aide!
      Charles
      0
  2. Kristopher Contributeur
    Ah ! Maintenant que tu as explicité ton problème, je peux mieux t'aider Charles !

    Commence par ceci stp.

    virus methode preliminaire de desinfection version fr
    0
    1. Charle07
      bonjour kristopher, voici enfin le rapport du scan hijackthis que j'ai fait ce matin:

      Logfile of HijackThis v1.99.1
      Scan saved at 11:23:15, on 2007-02-11
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system32\igfxtray.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
      C:\WINDOWS\system32\dla\tfswctrl.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
      C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      C:\Program Files\Network Associates\VirusScan\mcshield.exe
      C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Network Associates\VirusScan\SCAN32.EXE
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Charles Gagnon\Bureau\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      F2 - REG:system.ini: Shell=Explorer.exe, msmsgs.exe
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
      O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
      O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [HELP ELSE WIN DRV] C:\Documents and Settings\All Users\Application Data\NewLicenseHelpElse\Exit Knob.exe
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
      O4 - HKCU\..\Run: [Debug obj] C:\DOCUME~1\CHARLE~1\APPLIC~1\PROCFI~1\Send platform mode.exe
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
      O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
      0
  3. Kristopher Contributeur
    Charle07,

    Stp, tu es très infecté donc tu ferais mieux de faire ce que je te conseille.

    Sur cette page, tout est bien expliqué.

    virus methode preliminaire de desinfection version fr

    Tu dois passer par 4 logiciels et me fournir 3 rapports (regarde les tutoriels si besoin est).

    J'attends cette fois-ci les bons rapports dans l'ordre :)

    a+
    0
    1. Charles Gagnon
      Bonjour Kristopher,
      Merci de ta patience dans tes explications... voici donc, dans l'ordre les rapports de avg anti-spyware, bitdefender et hijack this. Comme tu dis, ça grouille de vermines dans cet ordi...
      Merci pour ton aide!
      Charles

      ---------------------------------------------------------
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 13:37:03 2007-02-15

      + Résultat de l'analyse:

      HKLM\SOFTWARE\ShudderLTD -> Adware.PSGuard : Aucune action entreprise.
      HKLM\SOFTWARE\ShudderLTD\PSGuard -> Adware.PSGuard : Aucune action entreprise.
      HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard -> Adware.PSGuard : Aucune action entreprise.
      HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard\License -> Adware.PSGuard : Aucune action entreprise.
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP353\A0043431.exe -> Downloader.Swizzor.fo : Aucune action entreprise.
      :mozilla.43:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
      :mozilla.44:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
      :mozilla.26:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
      :mozilla.24:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
      :mozilla.15:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
      :mozilla.11:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
      :mozilla.22:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
      :mozilla.23:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
      :mozilla.51:C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\Profiles\x0r262m7.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
      C:\Program Files\BitDownload\ZM\minime.exe -> Trojan.Inject.ba : Aucune action entreprise.
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP353\A0043430.exe -> Trojan.Obfuscated.bk : Aucune action entreprise.

      Fin du rapport

      Rapport de BitDefender
      BitDefender Online Scanner
      Scan report generated at: Thu, Feb 15, 2007 - 16:02:21
      Scan path: C:\;D:\;E:\;

      Statistics
      Time 01:56:15
      Files 440389
      Folders 6818
      Boot Sectors 4
      Archives 8819
      Packed Files 67341

      Results
      Identified Viruses 1
      Infected Files 3
      Suspect Files 0
      Warnings 0
      Disinfected 0
      Deleted Files 3

      Engines Info
      Virus Definitions 388343
      Engine build AVCORE v1.0 (build 2371) (i386) (Dec 13 2006 11:16:42)
      Scan plugins 14
      Archive plugins 38
      Unpack plugins 6
      E-mail plugins 6
      System plugins 1

      Scan Settings
      First Action Disinfect
      Second Action Delete
      Heuristics Yes
      Enable Warnings Yes
      Scanned Extensions *;
      Exclude Extensions
      Scan Emails Yes
      Scan Archives Yes
      Scan Packed Yes
      Scan Files Yes
      Scan Boot Yes

      Scanned File Status
      C:\Documents and Settings\Charles Gagnon\Application Data\PROC FIND\MagsBowsPlay.exe Infected with: Trojan.FatObfus.Gen
      C:\Documents and Settings\Charles Gagnon\Application Data\PROC FIND\MagsBowsPlay.exe Disinfection failed
      C:\Documents and Settings\Charles Gagnon\Application Data\PROC FIND\MagsBowsPlay.exe Deleted
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP360\A0043660.exe Infected with: Trojan.FatObfus.Gen
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP360\A0043660.exe Disinfection failed
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP360\A0043660.exe Deleted
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP364\A0043968.exe Infected with: Trojan.FatObfus.Gen
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP364\A0043968.exe Disinfection failed
      C:\System Volume Information\_restore{C0D8D08B-518F-4FEE-8456-723FC27D3021}\RP364\A0043968.exe Deleted

      Rapport de HijackThis :
      Scan saved at 16:10:10, on 2007-02-15
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system32\igfxtray.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
      C:\WINDOWS\system32\dla\tfswctrl.exe
      C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
      C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
      C:\Program Files\Network Associates\VirusScan\mcshield.exe
      C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
      C:\Documents and Settings\Charles Gagnon\Bureau\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      F2 - REG:system.ini: Shell=Explorer.exe, msmsgs.exe
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
      O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
      O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
      O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O11 - Options group: [INTERNATIONAL] International*
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
      O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
      0
      2. Kristopher Contributeur
        Charles,

        Tu es très infecté.

        Mais tu n'as rien nettoyé avec AVG Anti-Spyware !

        Regarde mon tutoriel et refais un scan puis nettoie tout le PC; copie/colle le rapport stp.

        Puis un nouveau log de HijackThis aussi.

        Et dis moi enfin quels sont tes logiciels de sécurité (antivirus, firewall, antispywares).

        a+
        0
        1. Charles
          Salut Kristopher,
          Voici donc les 4 rapports que tu m'as demandé:
          Rapport CCleaner
          NETTOYAGE COMPLET - (6,445 secs)
          ------------------------------------------------------------------------------------------
          45,0MB supprimés.
          ------------------------------------------------------------------------------------------

          Détails des fichiers effacés
          ------------------------------------------------------------------------------------------
          Fichiers Temporaires d'Internet Explorer (fichiers 1014) 25,7MB
          Cookie:charles gagnon@www.portail.umontreal.ca/psp/PRTPRDS/UM_SITE_ETUDIANTS/ENTP/h/(&H100001) 147 bytes
          Cookie:charles gagnon@ledevoir.com/(&H100001) 341 bytes
          Cookie:charles gagnon@qc.yahoo.com/(&H100001) 134 bytes
          Cookie:charles gagnon@portail.umontreal.ca/(&H100001) 92 bytes
          Cookie:charles gagnon@branchez-vous.com/(&H100001) 98 bytes
          Cookie:charles gagnon@xiti.com/(&H100001) 106 bytes
          Cookie:charles gagnon@www.ledevoir.com/(&H100001) 82 bytes
          Cookie:charles gagnon@ca.yahoo.com/(&H100001) 235 bytes
          Cookie:charles gagnon@google.ca/(&H100001) 130 bytes
          Cookie:charles gagnon@www.portail.umontreal.ca/psp/PRTPRDS/UM_SITE_EMPLOYES/ENTP/h/(&H100001) 145 bytes
          Cookie:charles gagnon@canadiantreeplanting.com/(&H100001) 403 bytes
          Cookie:charles gagnon@yahoo.com/(&H100001) 367 bytes
          Cookie:charles gagnon@ssl-hints.netflame.cc/(&H100001) 300 bytes
          Cookie:charles gagnon@accesd.desjardins.com/(&H100001) 128 bytes
          Cookie:charles gagnon@www.commentcamarche.net/(&H100001) 114 bytes
          Cookie:charles gagnon@sp2.information.com/(&H100001) 444 bytes
          Cookie:charles gagnon@google.com/support/(&H100001) 386 bytes
          Cookie:charles gagnon@247realmedia.com/(&H100001) 92 bytes
          Cookie:charles gagnon@microsoft.com/(&H100001) 126 bytes
          Cookie:charles gagnon@aboutus.org/(&H100001) 286 bytes
          Cookie:charles gagnon@translate.google.com/(&H100001) 393 bytes
          Cookie:charles gagnon@bitdefender.com/(&H100001) 466 bytes
          Cookie:charles gagnon@revenue.net/(&H100001) 179 bytes
          Cookie:charles gagnon@ads.bleublancrouge.ca/(&H100001) 102 bytes
          Cookie:charles gagnon@m.webtrends.com/(&H100001) 186 bytes
          Marqué pour l'effacement: C:\Documents and Settings\Charles Gagnon\Local Settings\Temporary Internet Files\Content.IE5\index.dat
          Marqué pour l'effacement: C:\Documents and Settings\Charles Gagnon\Cookies\index.dat
          Poubelle vidée (5 fichiers) 15,8MB
          C:\DOCUME~1\CHARLE~1\LOCALS~1\Temp\8A56EAB7.TMP 122 bytes
          C:\WINDOWS\system32\wbem\Logs\FrameWork.log 14,72KB
          C:\WINDOWS\system32\wbem\Logs\wbemess.log 30,73KB
          C:\WINDOWS\system32\wbem\Logs\wmiadap.log 636 bytes
          C:\WINDOWS\system32\wbem\Logs\wmiprov.log 3,46KB
          C:\WINDOWS\system32\wbem\Logs\wbemess.lo_ 64,03KB
          C:\WINDOWS\0.log 0 bytes
          C:\WINDOWS\comsetup.log 36,13KB
          C:\WINDOWS\FaxSetup.log 0,10MB
          C:\WINDOWS\IDNMitigationAPIs.log 16,62KB
          C:\WINDOWS\ie7.log 60,01KB
          C:\WINDOWS\ie7_main.log 45,37KB
          C:\WINDOWS\iis6.log 0,14MB
          C:\WINDOWS\imsins.log 1,34KB
          C:\WINDOWS\KB904942.log 13,81KB
          C:\WINDOWS\KB914440.log 6,56KB
          C:\WINDOWS\KB915865.log 12,91KB
          C:\WINDOWS\KB918118.log 17,94KB
          C:\WINDOWS\KB923723.log 14,83KB
          C:\WINDOWS\KB924667.log 24,00KB
          C:\WINDOWS\KB926436.log 17,73KB
          C:\WINDOWS\KB927779.log 29,14KB
          C:\WINDOWS\KB927802.log 19,70KB
          C:\WINDOWS\KB928090-IE7.log 13,53KB
          C:\WINDOWS\KB928255.log 28,76KB
          C:\WINDOWS\KB928843.log 17,92KB
          C:\WINDOWS\KB929969.log 3,08KB
          C:\WINDOWS\KB931836.log 38,37KB
          C:\WINDOWS\MedCtrOC.log 7,82KB
          C:\WINDOWS\msgsocm.log 5,64KB
          C:\WINDOWS\msmqinst.log 38,82KB
          C:\WINDOWS\netfxocm.log 19,03KB
          C:\WINDOWS\NLSDownlevelMapping.log 16,28KB
          C:\WINDOWS\ntdtcsetup.log 22,87KB
          C:\WINDOWS\ocgen.log 59,71KB
          C:\WINDOWS\ocmsn.log 6,17KB
          C:\WINDOWS\setupact.log 0 bytes
          C:\WINDOWS\setupapi.log 71,39KB
          C:\WINDOWS\setuperr.log 0 bytes
          C:\WINDOWS\spupdsvc.log 6,13KB
          C:\WINDOWS\Sti_Trace.log 0 bytes
          C:\WINDOWS\tabletoc.log 5,16KB
          C:\WINDOWS\tsoc.log 52,03KB
          C:\WINDOWS\updspapi.log 33,87KB
          C:\WINDOWS\wmsetup.log 404 bytes
          C:\WINDOWS\imsins.BAK 1,34KB
          C:\WINDOWS\Debug\mrt.log 2,16KB
          C:\WINDOWS\Debug\UserMode\userenv.log 13,60KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\064EA81Cd01 17,04KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\0C5E5822d01 20,55KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\0C5E6822d01 22,10KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\231294FCd01 16,96KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\23624521d01 16,46KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\30729557d01 24,83KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\333573C3d01 36,38KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\3E170972d01 19,03KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\4FD537DAd01 16,50KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\55DC3AEAd01 41,13KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\55DC3F7Cd01 23,26KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\6A8D22D6d01 16,44KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\6A8D2740d01 30,52KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\6A9C134Dd01 28,68KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\6A9C16DBd01 18,01KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\7627BF11d01 0,15MB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\862F729Bd01 16,02KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\8701B16Ed01 0,28MB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\976689D2d01 16,28KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\BAA041B6d01 16,96KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\C1EA7145d01 18,04KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\D3EC2C8Bd01 24,81KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\DFDCA0D4d01 18,70KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\E5822D71d01 23,44KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\F96A2ED9d01 56,00KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\FEF5DE5Bd01 17,09KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\_CACHE_001_ 0,19MB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\_CACHE_002_ 0,19MB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\_CACHE_003_ 0,32MB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\cache\_CACHE_MAP_ 0,13MB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\history.dat 10,60KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Mozilla\Firefox\profiles\x0r262m7.default\downloads.rdf 206 bytes
          Cookie supprimé: xiti.com
          Cookie supprimé: www.commentcamarche.net
          Cookie supprimé: yahoo.com
          Cookie supprimé: yahoo.com
          Cookie supprimé: canadiantreeplanting.com
          Cookie supprimé: canadiantreeplanting.com
          Cookie supprimé: canadiantreeplanting.com
          Cookie supprimé: dlink.ca
          Cookie supprimé: dlink.ca
          Cookie supprimé: dlink.ca
          Cookie supprimé: google.ca
          C:\Documents and Settings\Charles Gagnon\Local Settings\Application Data\Apple Computer\QuickTime\downloads\13\13\dd82bbeb-07fadf0a-7fe002b0-44733101.qtch 1,49KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 348 bytes
          C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.070214-1134.log 241 bytes
          C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Checks.070214-1142.txt 1,31KB
          C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\Update downloads.log 1,43KB
          C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Statistics.ini 0 bytes
          C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref.old 0,45MB
          C:\Documents and Settings\Charles Gagnon\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-15 16-37-40.txt 27,03KB
          C:\Documents and Settings\Charles Gagnon\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-15 16-40-32.txt 27,33KB
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\logfile.txt 2,16KB
          ---------------------------------------------------------
          AVG Anti-Spyware - Rapport d'analyse
          ---------------------------------------------------------

          + Créé à: 18:53:19 2007-02-17

          + Résultat de l'analyse:

          HKLM\SOFTWARE\ShudderLTD -> Adware.PSGuard : Erreur lors du nettoyage.
          HKLM\SOFTWARE\ShudderLTD\PSGuard -> Adware.PSGuard : Erreur lors du nettoyage.
          HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard -> Adware.PSGuard : Erreur lors du nettoyage.
          HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard\License -> Adware.PSGuard : Nettoyé.

          Fin du rapport

          Rapport de BitDefender
          BitDefender Online Scanner
          Scan report generated at: Sat, Feb 17, 2007 - 20:49:10

          Scan path: C:\;D:\;E:\;

          Statistics
          Time 01:48:12
          Files 440368
          Folders 6924
          Boot Sectors 4
          Archives 8817
          Packed Files 67334

          Results
          Identified Viruses 0
          Infected Files 0
          Suspect Files 0
          Warnings 0
          Disinfected 0
          Deleted Files 0

          Engines Info
          Virus Definitions 388714
          Engine build AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)
          Scan plugins 14
          Archive plugins 38
          Unpack plugins 6
          E-mail plugins 6
          System plugins 1

          Scan Settings
          First Action Disinfect
          Second Action Delete
          Heuristics Yes
          Enable Warnings Yes
          Scanned Extensions *;
          Exclude Extensions
          Scan Emails Yes
          Scan Archives Yes
          Scan Packed Yes
          Scan Files Yes
          Scan Boot Yes

          Scanned File Status
          No virus found.

          Logfile of HijackThis v1.99.1
          Scan saved at 00:33:15, on 2007-02-18
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16414)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\LEXBCES.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\LEXPPS.EXE
          C:\WINDOWS\system32\igfxtray.exe
          C:\WINDOWS\system32\hkcmd.exe
          C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
          C:\WINDOWS\system32\dla\tfswctrl.exe
          C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\WINDOWS\system32\hphmon05.exe
          C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
          C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
          C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
          C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe
          C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
          C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\WINDOWS\system32\wbem\wmiapsrv.exe
          C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
          C:\Program Files\iTunes\iTunes.exe
          C:\Program Files\Druide\Antidote\Antidote\Antido32.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Network Associates\VirusScan\mcshield.exe
          C:\Program Files\Network Associates\VirusScan\SCAN32.EXE
          C:\Documents and Settings\Charles Gagnon\Bureau\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
          R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
          R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
          O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
          O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
          O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
          O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
          O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
          O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
          O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
          O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
          O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
          O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
          O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
          O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
          O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
          O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
          O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
          O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
          O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
          O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe"
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
          O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
          O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
          O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
          O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
          O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe

          Mon antivirus est VirusScan Enterprise 8.0, mon firewall est celui de Windows XP, et j'ai maintenant téléchargé depuis une semaine les logiciels suivants: Spybot-Search&Destroy, HijackThis, CCleaner, AVG Anti-Spyware, SpywareBlaster et Ad-Aware SE Personal.
          Voilà, en espérant que toutes les informations que tu m'as demandé seront là... Merci encore de ta patience et de ton aide!
          À bientôt!
          Charles
          0
          1. Kristopher Contributeur
            Charles,

            Mets AVG Anti-Spyware à jour !

            Puis redémarre en mode sans échec pour effectuer un scan complet et supprime toutes les infections.

            Sauvegarde le rapport.

            Redémarre ne mode normal et poste ce rapport stp.

            Ensuite :

            Télécharge SDFix sur ton bureau :

            http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

            Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau.
            Redémarre ton ordinateur en mode sans échec (redemarrage + tapotte sans arret sur F8 desque l'ordi s'allume)
            Ouvre le dossier SDFix qui vient d'être créé sur le Bureau et double clique sur RunThis.bat pour lancer le script.
            Appuie sur Y pour commencer le processus de nettoyage.
            Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
            Appuie sur une touche pour redémarrer le PC.
            Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
            Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
            Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
            Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.

            Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum, avec un nouveau log Hijackthis !

            a+
            0
            1. charles
              Bonjour Kristopher,
              J'ai fait dans l'ordre les scans que tu m'as prescris, et voici les 3 rapports que tu m'as demandé!
              Merci encore et à bientôt!
              Charles

              ---------------------------------------------------------
              AVG Anti-Spyware - Rapport d'analyse
              ---------------------------------------------------------

              + Créé à: 14:57:27 2007-02-18

              + Résultat de l'analyse:

              HKLM\SOFTWARE\ShudderLTD -> Adware.PSGuard : Erreur lors du nettoyage.
              HKLM\SOFTWARE\ShudderLTD\PSGuard -> Adware.PSGuard : Erreur lors du nettoyage.
              HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard -> Adware.PSGuard : Erreur lors du nettoyage.
              HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard\License -> Adware.PSGuard : Nettoyé.
              C:\Documents and Settings\Charles Gagnon\Cookies\charles_gagnon@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.

              Fin du rapport

              SDFix: Version 1.66

              Run by Charles Gagnon - 2007-02-18 @ 15:38:10,72

              Microsoft Windows XP [version 5.1.2600]

              Running From: C:\SDFix

              Safe Mode:
              Checking Services:

              Name:

              Path:

              Restoring Windows Registry Entries
              Restoring Default Hosts File

              Rebooting...

              Normal Mode:
              Checking Files:

              No Trojan Files Found...

              ADS Check:

              C:\WINDOWS\system32
              No streams found.

              Final Check:

              Remaining Services:
              ------------------

              Authorized Application Key Export:

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
              "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
              "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
              "C:\\WINDOWS\\system32\\mshta.exe"="C:\\WINDOWS\\system32\\mshta.exe:*:Enabled:Microsoft (R) HTML Application host"
              "C:\\Documents and Settings\\Charles Gagnon\\Mes documents\\Morpheus\\Morpheus.exe"="C:\\Documents and Settings\\Charles Gagnon\\Mes documents\\Morpheus\\Morpheus.exe:*:Enabled:M5Shell"
              "C:\\Program Files\\DAP\\DAP.exe"="C:\\Program Files\\DAP\\DAP.exe:*:Enabled:Download Accelerator Plus (DAP)"
              "C:\\Program Files\\Morpheus\\Morpheus.exe"="C:\\Program Files\\Morpheus\\Morpheus.exe:*:Enabled:Morpheus"
              "C:\\WINDOWS\\system32\\java.exe"="C:\\WINDOWS\\system32\\java.exe:*:Enabled:java"
              "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
              "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
              "C:\\Documents and Settings\\Charles Gagnon\\Bureau\\eMule0.47c\\emule.exe"="C:\\Documents and Settings\\Charles Gagnon\\Bureau\\eMule0.47c\\emule.exe:*:Enabled:eMule"
              "C:\\Program Files\\eMule\\eMule0.47c\\emule.exe"="C:\\Program Files\\eMule\\eMule0.47c\\emule.exe:*:Enabled:eMule"
              "C:\\Program Files\\BitDownload\\BitDownload.exe"="C:\\Program Files\\BitDownload\\BitDownload.exe:*:Enabled:Torrent P2P application"
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
              "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
              "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

              Remaining Files:
              ---------------

              Checking For Files with Hidden Attributes :

              C:\Program Files\Messenger\msmsgs.exe
              C:\Documents and Settings\All Users\DRM\Cache\Indiv03.tmp
              C:\Documents and Settings\Charles Gagnon\Bureau\Benoit\~WRL0018.tmp
              C:\Documents and Settings\Charles Gagnon\Bureau\Benoit\~WRL1775.tmp
              C:\Documents and Settings\Charles Gagnon\Bureau\Benoit\~WRL1805.tmp
              C:\Documents and Settings\Charles Gagnon\Bureau\Benoit\~WRL2347.tmp
              C:\Documents and Settings\Charles Gagnon\Bureau\Benoit\~WRL3586.tmp
              C:\Documents and Settings\Charles Gagnon\Bureau\Projet de maŒtrise\~WRL0978.tmp
              C:\Documents and Settings\Charles Gagnon\Bureau\Projet de maŒtrise\~WRL2213.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\benoit\~WRL0001.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\benoit\~WRL1118.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\benoit\~WRL2303.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\benoit\~WRL3764.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL0001.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL0003.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL0004.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL0033.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL0448.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL0823.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL1000.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL1015.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL1413.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL1416.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL2176.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL2337.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\~WRL2541.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\Plan\~WRL1981.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\Plan\~WRL3407.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Septem\Plan\~WRL3468.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Po‚sie\Textes ‚pars et po‚sie 3\~WRL1516.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL0005.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL0323.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL0400.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL0508.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL0986.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL1026.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL2433.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL2620.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL3492.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL3675.tmp
              C:\Documents and Settings\Charles Gagnon\Mes documents\Universit‚\Automne 04\~WRL4058.tmp
              C:\WINDOWS\system32\config\default.tmp.LOG
              C:\WINDOWS\system32\config\software.tmp.LOG
              C:\WINDOWS\system32\config\system.tmp.LOG

              Add/Remove Programs List:

              Commande ECHO d‚sactiv‚e.
              Ad-Aware SE Personal
              Adobe Photoshop 7.0
              Adobe Photoshop Elements 2.0
              Antidote
              AVG Anti-Spyware 7.5
              CCleaner (remove only)
              SoftV92 Data Fax Modem with SmartCP
              Conexant AC-Link Audio
              eMule
              HijackThis 1.99.1
              Microsoft Internationalized Domain Names Mitigation APIs
              Windows Internet Explorer 7
              Correctif Windows XP - KB873333
              Correctif Windows XP - KB873339
              Correctif Windows XP - KB885250
              Correctif Windows XP - KB885443
              Correctif Windows XP - KB885835
              Correctif Windows XP - KB885836
              Correctif Windows XP - KB886185
              Correctif Windows XP - KB887472
              Correctif Windows XP - KB887742
              Correctif Windows XP - KB888113
              Correctif Windows XP - KB888302
              Correctif Windows XP - KB890859
              Correctif Windows XP - KB891781
              Correctif Windows XP - KB893086
              Lexmark 1200 Series
              LiveUpdate 1.90 (Symantec Corporation)
              McAfee Anti-Spyware Enterprise Module
              Microsoft .NET Framework 1.1
              Mozilla Firefox (1.0.7)
              Microsoft Compression Client Pack 1.0 for Windows XP
              Barre d'outils MSN
              Microsoft National Language Support Downlevel APIs
              Adobe Flash Player 9 ActiveX
              Spybot - Search & Destroy 1.4
              SpywareBlaster v3.5.1
              Synaptics Pointing Device Driver
              VideoLAN VLC media player 0.8.4a
              Lecteur Windows Mediaÿ11
              Archiveur WinRAR
              Microsoft User-Mode Driver Framework Feature Pack 1.0
              Yahoo! Toolbar avec bloqueur de fenˆtres pop-up
              Yahoo! Toolbar
              Yahoo! Install Manager
              Sonic Update Manager
              Sonic DLA
              HP Software Update
              iTunes
              Photosmart 140,240,7200,7600,7700,7900 Series
              McAfee VirusScan Enterprise
              QuickTime
              LaCie Backup Software v1.5.2215
              Java 2 Runtime Environment, SE v1.4.2_03
              PSShortcutsP
              Intel(R) Extreme Graphics 2 Driver
              Microsoft Office Standard Edition 2003
              RecordNow!
              InterVideo WinDVD
              Microsoft .NET Framework 1.1 French Language Pack
              Apple Software Update
              Adobe Reader 8 - Fran‡ais
              Microsoft .NET Framework 1.1
              Quick Launch Buttons 5.00 B3
              HpSdpAppCoreApp
              HP Deskjet Preloaded Printer Drivers

              Finished

              Logfile of HijackThis v1.99.1
              Scan saved at 15:46:41, on 2007-02-18
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16414)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\LEXBCES.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\system32\LEXPPS.EXE
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
              C:\Program Files\Network Associates\VirusScan\mcshield.exe
              C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\WINDOWS\system32\notepad.exe
              C:\WINDOWS\system32\igfxtray.exe
              C:\WINDOWS\system32\hkcmd.exe
              C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
              C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe
              C:\WINDOWS\system32\dla\tfswctrl.exe
              C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
              C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
              C:\WINDOWS\system32\hphmon05.exe
              C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
              C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
              C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
              C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe
              C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
              C:\Program Files\QuickTime\qttask.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\Program Files\iPod\bin\iPodService.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\LaCie\Backup Software\LaCieBackup.exe
              C:\WINDOWS\system32\wbem\wmiapsrv.exe
              C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
              C:\Documents and Settings\Charles Gagnon\Bureau\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ycomp/defaults/sp/*https://fr.yahoo.com/
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
              R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
              R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
              O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
              O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr-ca\msntb.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
              O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
              O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
              O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
              O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
              O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
              O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
              O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
              O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
              O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
              O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
              O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
              O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
              O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
              O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
              O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
              O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
              O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\tbmon.exe"
              O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [LaCie Backup] C:\Program Files\LaCie\Backup Software\\LaCieBackup.exe /background
              O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
              O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
              O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O11 - Options group: [INTERNATIONAL] International*
              O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
              O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
              O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
              O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
              O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
              0
              1. Kristopher Contributeur
                Charles,

                As-tu lancé AVG Anti-Spyware en mode sans échec ?
                0
                1. Charles
                  Salut Kristopher,
                  Effectivement, je n'avais pas lancé antivirus avg en mode sans échec, mais bien en mode normal... Je viens de le refaire et voici le rapport:
                  ---------------------------------------------------------
                  AVG Anti-Spyware - Rapport d'analyse
                  ---------------------------------------------------------

                  + Créé à: 15:20:08 2007-02-19

                  + Résultat de l'analyse:

                  HKLM\SOFTWARE\ShudderLTD -> Adware.PSGuard : Erreur lors du nettoyage.
                  HKLM\SOFTWARE\ShudderLTD\PSGuard -> Adware.PSGuard : Erreur lors du nettoyage.
                  HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard -> Adware.PSGuard : Erreur lors du nettoyage.
                  HKLM\SOFTWARE\ShudderLTD\PSGuard\PSGuard\License -> Adware.PSGuard : Nettoyé.
                  C:\quarantaine\charles_gagnon@247realmedia[1].txt.Vir -> TrackingCookie.247realmedia : Nettoyé.
                  C:\Documents and Settings\Charles Gagnon\Cookies\charles_gagnon@bilbo.counted[2].txt -> TrackingCookie.Counted : Nettoyé.
                  C:\Documents and Settings\Charles Gagnon\Cookies\charles_gagnon@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
                  C:\quarantaine\charles_gagnon@searchportal.information[1].txt.Vir -> TrackingCookie.Information : Nettoyé.
                  C:\quarantaine\charles_gagnon@revenue[1].txt.Vir -> TrackingCookie.Revenue : Nettoyé.

                  Fin du rapport

                  Je t'envoie les rapports de SDFix et HijackThis dès qu'ils auront été faits!
                  à plus tard!
                  Charles
                  0
                  1. Kristopher Contributeur
                    Charles,

                    Si tu comptes lancer SDFix et HijackThis ce n'est pas une bonne idée !

                    Cette anticipation n'était pas bonne, mais j'approuve quand même ton essaie :)

                    Maintenant fais ceci :

                    1/ - Télécharge le logiciel SmitfraudFix crée par S!Ri :
                    http://siri.urz.free.fr/Fix/SmitfraudFix.zip et décompresse le.

                    - Ouvre le dossier "SmitfraudFix" qui sera apparu, double clic sur "Smitfraudfix.cmd", choisis l’option 1, un log va être généré…

                    Copie et colle le rapport sur le forum.

                    Ensuite

                    Fais cette manipulation :

                    - Redémarre le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou bien F5 selon la version de Windows) et tu choisis le mode "sans échec".

                    - Tu relances SmitfraudFix cette fois-ci en choisissant l'option 2 et tu réponds oui à tout.

                    Colle le nouveau rapport après.

                    2/ Scanne ton PC avec cet antispyware en ligne :
                    https://www.trendmicro.com/en_us/forHome/products/housecall.html
                    Clique sur "I Accept" et patiente un peu…
                    Ensuite, clique sur "Start Scan"
                    À la fin du scan "Scan Results" -> "Clean Threats Now"

                    Dis moi ce qu'il t'as trouvé ;)

                    a+
                    0

                    Discussions similaires

                    Qu'est qu'un disque mémoire flash usb ?
                    danielarsod

                    1 réponse
                    Comment vider la memoire RAM de ma TV LG?
                    Ozoori

                    15 réponses
                    disque mémoire flash usb
                    coquelicot33

                    14 réponses
                    Comment vider la mémoire vive de mon téléviseur?
                    jackthedoctor

                    2 réponses
                    Réinitialiser un mot de passe avec disque memoire flash
                    athurin

                    4 réponses