Infection sur mon ordi - Page 2

Résolu
Précédent
  • 1
  • 2
  1. papyber Messages postés 6430 Statut Contributeur sécurité 257
     
    pour vundo on va faire comme ceci
    Relance Vundofix
    http://www.atribune.org/ccount/click.php?id=4

    * Ne clique pas sur "Scan for a vundo"
    * Clique droit au milieu de la fenêtre
    * Clique sur Add more files ?
    * Copie/colle les fichiers ci-dessous ( un par case) :

    C:\WINDOWS\system32\tmp23.tmp.dll
    C:\WINDOWS\mlmmnk.dll

    * Clique sur Add files
    * Ensuite clique sur Close Windows
    * Enfin, clique sur Remove Vundo ( les fichiers précédents doivent apparaitre dans la fenêtre principale)
    * Si l'outils demande un redémarrage, accepte
    * Poste le rapport Vundofix, ainsi qu'un nouveau log hijackthis
    0
  2. apho Messages postés 35 Statut Membre 2
     
    Alors j'ai bien fait ce que tu m'as dit. le rapport est lui trés simple :

    C:\WINDOWS\system32\tmp23.tmp.dll
    C:\WINDOWS\system32\tmp23.tmp.dll

    j'ai une erreur au demarrage de windows :

    erreur de chargement de c:\WINDOWS\mlmmnk.dll
    Le module spécifié est introuvable

    pour hijackthis je ne peux pas faire le log . Quand je lance je tombe directement sur la page du scan.. je n'ai plus la premiere page ou j'ai le choix pour scan et log...
    0
  3. apho Messages postés 35 Statut Membre 2
     
    pardon, j'ai trouvé "main menu"... désolé
    voilà le log

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 09:50:18, on 21/04/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\CTsvcCDA.EXE
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\McAfee\MBK\MBackMonitor.exe
    C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
    c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\PROGRA~1\McAfee\MPS\mps.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\SiteAdvisor\6066\SAService.exe
    C:\WINDOWS\system32\svchost.exe
    c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\Program Files\McAfee\MPS\mpsevh.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\vphc700.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\McAfee\MSK\MskAgent.exe
    C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
    C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    C:\Program Files\Opdicom\OpdiTracker\OptT3STA.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Philips\SPC 700NC PC Camera\TrayMin700.exe
    C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Documents and Settings\Arnaud\Bureau\HiJackThis_v2.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail1.voila.fr/webmail/fr_FR/login.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O2 - BHO: (no name) - {1557B435-8242-4686-9AA3-9265BF7525A4} - C:\WINDOWS\system32\tmp23.tmp.dll (file missing)
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {E5A1691B-D188-4419-AD02-90002030B8EE} - (no file)
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
    O4 - HKLM\..\Run: [phc700] C:\WINDOWS\vphc700.exe
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Audigy 2 ZS Video Editor\Surround Mixer\CTSysVol.exe /r
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [fnacVOD] C:\Program Files\fnacVOD\fnacVOD.exe
    O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
    O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
    O4 - HKLM\..\Run: [McAfee Backup] C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
    O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [BootService] rundll32.exe "C:\WINDOWS\mlmmnk.dll",realset
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Démarrer OpdiTracker.lnk = C:\Program Files\Opdicom\OpdiTracker\OptT3STA.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: TrayMin.lnk = C:\Program Files\Philips\SPC 700NC PC Camera\TrayMin700.exe
    O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5011/mcfscan.cab
    O20 - AppInit_DLLs:
    O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
    O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
    O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
    O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
    O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
    O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
    O24 - Desktop Component 0: (no name) - http://www.enigmacretu.com/tapety/800-600/002.jpg
    0
  4. apho Messages postés 35 Statut Membre 2
     
    sous c: je viens de voir que j'ai un fichier VundoFix.txt .... je pense que c'est ça que tu voulais :

    VundoFix V6.3.19

    Checking Java version...

    Java version is 1.5.0.6
    Old versions of java are exploitable and should be removed.

    Java version is 1.5.0.10

    Scan started at 00:37:05 19/04/2007

    Listing files found while scanning....

    No infected files were found.

    VundoFix V6.3.19

    Checking Java version...

    Java version is 1.5.0.6
    Old versions of java are exploitable and should be removed.

    Java version is 1.5.0.10

    Scan started at 19:12:31 20/04/2007

    Listing files found while scanning....

    No infected files were found.

    Beginning removal...

    VundoFix V6.3.19

    Checking Java version...

    Java version is 1.5.0.6
    Old versions of java are exploitable and should be removed.

    Java version is 1.5.0.10

    Scan started at 19:23:24 20/04/2007

    Listing files found while scanning....

    No infected files were found.

    Beginning removal...

    VundoFix V6.3.19

    Checking Java version...

    Java version is 1.5.0.6
    Old versions of java are exploitable and should be removed.

    Java version is 1.5.0.10

    Scan started at 19:28:51 20/04/2007

    Listing files found while scanning....

    No infected files were found.

    Beginning removal...

    VundoFix V6.3.19

    Checking Java version...

    Java version is 1.5.0.6
    Old versions of java are exploitable and should be removed.

    Java version is 1.5.0.10

    Scan started at 20:03:55 20/04/2007

    Listing files found while scanning....

    No infected files were found.

    Beginning removal...

    VundoFix V6.3.19

    Checking Java version...

    Java version is 1.5.0.6
    Old versions of java are exploitable and should be removed.

    Java version is 1.5.0.10

    Scan started at 23:56:02 20/04/2007

    Listing files found while scanning....

    No infected files were found.

    Beginning removal...

    Beginning removal...

    Attempting to delete C:\WINDOWS\system32\tmp23.tmp.dll
    C:\WINDOWS\system32\tmp23.tmp.dll Has been deleted!

    Performing Repairs to the registry.
    Done!
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. papyber Messages postés 6430 Statut Contributeur sécurité 257
     
    voilà on a supprimé vundo
    maintenant faire un scan antivirus en ligne avec internet explorer et accepter l'activex
    poster le rapport ici ensuite
    https://www.bitdefender.fr/

    En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
    Dans la nouvelle fenêtre, clique sur I agree
    La fenêtre change encore, clique sur Click here to scan
    Les signatures se chargent, etc.

    tuto en image
    http://pageperso.aol.fr/rginformatique/mapage/defender.htm
    0
  7. apho Messages postés 35 Statut Membre 2
     
    alors comme prévu voici le rapport du scan mais juste avant je pense qu'il est important que je te dise que pendant le scan de Bitdefender, mon antivirus mcaféé m'a envoyé 2 messages :

    il a trouvé un virus new poly win 32
    et à nouveau vundo... (donc il est toujours sur ma machine)
    Quand je vais dans l'historique de mcafee en fait je me rends compte qu'il trouve sans arret vundo et qu'il le supprime et ça recommence.....

    voici donc le rapport de Bitdefender :

    <HTML>
    <HEAD>
    <TITLE>BitDefender Online Scanner - Rapport d'analyse</TITLE>
    <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
    </HEAD>
    <BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >

    <table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
    <tr>
    <td width="458">
    <p><font face="Arial" color=red><span style="font-size:14pt;"><b>BitDefender Online Scanner</b></span></font></p>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>
    <tr>
    <td colspan="3" width="912">
    <p><font face="Arial"><span style="font-size:11pt;"><B>Rapport d'analyse généré à: Sat, Apr 21, 2007 - 11:17:30</b></span></font></p>
    </td>
    </tr>

    <tr>
    <td width="458">
    <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>

    <tr>
    <td width="458">
    <p><font face="Arial"><span style="font-size:11pt;"><B>Voie d'analyse: </b></span><span style="font-size:10pt;">A:\;C:\;D:\;E:\;F:\;G:\;H:\;I:\;</span></font></p>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>

    <tr>
    <td width="458">
    <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>

    <tr>
    <td width="458">
    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
    <tr>
    <td width="451" colspan="2" bgcolor="#CCCCCC">
    <p><font face="Arial" size="2"><B>Statistiques</b></font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Temps</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">01:05:15</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Fichiers</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">304675</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Directoires</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">8617</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Secteurs de boot</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">5</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Archives</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">2843</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Paquets programmes</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">17230</font></p>
    </td>
    </tr>
    </table>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>

    <tr>
    <td width="458">
    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
    <tr>
    <td width="451" colspan="2" bgcolor="#CCCCCC">
    <p><font face="Arial" size="2"><B>Résultats</b></font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Virus identifiés</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">2</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Fichiers infectés</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">13</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Fichiers suspects</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">0</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Avertissements</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">0</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Désinfectés</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">0</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Fichiers effacés</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">13</font></p>
    </td>
    </tr>
    </table>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>

    <tr>
    <td width="458">
    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
    <tr>
    <td width="451" colspan="2" bgcolor="#CCCCCC">
    <p><font face="Arial" size="2"><B>Info sur les moteurs</b></font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Définition virus</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">487195</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Version des moteurs</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Analyse des plugins</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">14</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Archive des plugins</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">38</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Unpack des plugins</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">6</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">E-mail plugins</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">6</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Système plugins</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">1</font></p>
    </td>
    </tr>
    </table>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>

    <tr>
    <td width="458">
    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
    <tr>
    <td width="451" colspan="2" bgcolor="#CCCCCC">
    <p><font face="Arial" size="2"><B>Paramètres d'analyse</b></font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Première action</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Désinfecté</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Seconde Action</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Supprimé</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Heuristique</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Oui</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Acceptez les avertissements</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Oui</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Extensions analysées</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">*;</font></p>
    </td>
    </tr>

    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Excludez les extensions</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2"> </font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Analyse d'emails</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Oui</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Analyse des Archives</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Oui</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Analyser paquets programmes</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Oui</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Analyse des fichiers</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Oui</font></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">Analyse de boot</font></p>
    </td>
    <td width="43%" align="right">
    <p><font face="Arial" size="2">Oui</font></p>
    </td>
    </tr>
    </table>
    </td>
    <td width="40%">
    <p> </p>
    </td>
    <td width="10%">
    <p> </p>
    </td>
    </tr>

    <tr>
    <td colspan=2>  
    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
    <tr>
    <td width="252" bgcolor="#CCCCCC">
    <p><font face="Arial" size="2"><B>Fichier analysé</b></font></p>
    </td>
    <td width="195" bgcolor="#CCCCCC" align="right">
    <p align="left"><b><font size="2" face="Arial"> Statut</font></b></p>
    </td>
    </tr>
    <tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/es-ES/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fi-FI/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fr-FR/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/hu-HU/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/it-IT/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/nl-NL/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pl-PL/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pt-BR/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/sk-SK/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/zh-CN/workbench/apNetworkStatusOverlay.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/en-US/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/bg-BG/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/cs-CZ/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/de-DE/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/el-GR/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/es-ES/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fi-FI/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fr-FR/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/hu-HU/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/it-IT/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/nl-NL/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pl-PL/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pt-BR/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/sk-SK/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/zh-CN/workbench/apWrongInstall.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/en-US/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/bg-BG/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/cs-CZ/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/de-DE/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/el-GR/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/es-ES/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fi-FI/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fr-FR/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/hu-HU/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/it-IT/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/nl-NL/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pl-PL/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pt-BR/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/sk-SK/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/zh-CN/workbench/Workbench.dtd</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/en-US/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/bg-BG/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/cs-CZ/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/de-DE/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/el-GR/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/es-ES/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fi-FI/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fr-FR/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/hu-HU/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/it-IT/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/nl-NL/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pl-PL/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pt-BR/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/sk-SK/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/zh-CN/workbench/Workbench.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>content/workbench/apToolBarOverlay.xul</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/en-US/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/bg-BG/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/cs-CZ/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/de-DE/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/el-GR/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/es-ES/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fi-FI/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/fr-FR/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/hu-HU/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/it-IT/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/nl-NL/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pl-PL/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/pt-BR/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/sk-SK/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>locale/zh-CN/superhub/superhub.properties</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>skin/classic/storageinspector/si_32.png</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>skin/classic/storageinspector/si_20.png</font></p>
    </td>
    <td width="43%" align="left">
    <p><font face="Arial" size="2">Nettoyé</font></p>
    </td>
    </tr><tr>
    <td width="57%">
    <p><font face="Arial" size="2">C:\Documents and Settings\Arnaud\Application Data\Mozilla\Firefox\Profiles\w5q8myw5.default\extensions\allpeers@allpeers.com\chrome\allpeers.jar=>skin/classic/storageinspector/si_16.png</font></p>
    </td&g
    0
  8. apho Messages postés 35 Statut Membre 2
     
    aprés redemarrage suite au scan de bitdefendervoici un nouveau log au cas où...

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 11:36:46, on 21/04/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\CTsvcCDA.EXE
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\McAfee\MBK\MBackMonitor.exe
    C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
    c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\PROGRA~1\McAfee\MPS\mps.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\vphc700.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\McAfee\MPS\mpsevh.exe
    C:\Program Files\McAfee\MSK\MskAgent.exe
    C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
    C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
    C:\Program Files\SiteAdvisor\6066\SAService.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\system32\svchost.exe
    c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Spyware Doctor\SDTrayApp.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    C:\Program Files\Opdicom\OpdiTracker\OptT3STA.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\Philips\SPC 700NC PC Camera\TrayMin700.exe
    C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe
    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
    C:\WINDOWS\System32\alg.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Documents and Settings\Arnaud\Bureau\HiJackThis_v2.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail1.voila.fr/webmail/fr_FR/login.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {E5A1691B-D188-4419-AD02-90002030B8EE} - (no file)
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
    O4 - HKLM\..\Run: [phc700] C:\WINDOWS\vphc700.exe
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Audigy 2 ZS Video Editor\Surround Mixer\CTSysVol.exe /r
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [fnacVOD] C:\Program Files\fnacVOD\fnacVOD.exe
    O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
    O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
    O4 - HKLM\..\Run: [McAfee Backup] C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
    O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [BootService] rundll32.exe "C:\WINDOWS\mlmmnk.dll",realset
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [SDTray] C:\Program Files\Spyware Doctor\SDTrayApp.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Démarrer OpdiTracker.lnk = C:\Program Files\Opdicom\OpdiTracker\OptT3STA.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: TrayMin.lnk = C:\Program Files\Philips\SPC 700NC PC Camera\TrayMin700.exe
    O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5011/mcfscan.cab
    O20 - AppInit_DLLs:
    O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
    O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
    O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
    O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
    O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
    O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
    O24 - Desktop Component 0: (no name) - http://www.enigmacretu.com/tapety/800-600/002.jpg
    0
  9. apho Messages postés 35 Statut Membre 2
     
    Pendant que tu n'es pas là j'ai decidé de faire plusieurs scans : adaware, avg antispyware, spyware doctor et pour finir un scan antivirus avec mon mcafee.... aucune menace n'a été trouvée .... plutot une bonne nouvelle...

    PAPYBER tu es un dieu !!!!!!!!!!!

    Par contre mon ordi m'a fait une chose bizarre.. à la fin de tous ces scans : ecran bleu et le message c'était bad pool bla bla bla (lol j'ai pas noté)

    alors je pense que tous ces virus ont mis la pagaille dans mon ordi et c'est pour ça. donc là je vais faire une defragmentation mais as-tu un tuyau pour un bon logiciel qui peut me faire ça car sous windows en general il me laisse toujours des fichiers qui n'ont pas pu être défragmenté et lorque je veux defragmenté mes autres disques, la defragmentation commence mais fini trés rapidement et finalement j'ai tous les fichiers des 2 disques supplémentaires qui restent fragmentés....

    J'attends donc ta réponse.
    0
  10. papyber Messages postés 6430 Statut Contributeur sécurité 257
     
    pour défragmenter j'en suis resté à la méthode windows!! et je n'ai pas desoucis
    fais une recherche sur google tu devrais trouver ta vie

    lance hijack pour un scan et coche les lignes suivantes
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {E5A1691B-D188-4419-AD02-90002030B8EE} - (no file)
    O4 - HKLM\..\Run: [BootService] rundll32.exe "C:\WINDOWS\mlmmnk.dll",realset
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O20 - AppInit_DLLs:

    ferme toutes tes fenêtres et clic sur fixer l'objet

    Télécharge Pocket KillBox sur ton bureau.
    * Double-clique sur le fichier Killbox.exe, et coche la case "Delete on reboot".
    * copie d'un trait les lignes de la citation suivante :
    C:\WINDOWS\mlmmnk.dll


    Sur PocketKillBox --> menu "File" --> "Paste from Clipboard" (tu ne verras rien se passer).

    Tu peux vérifier dans le menu déroulant que tous les fichiers sont bien présents.
    - coche la case "Unregister dll before deleting" (si tu en as la possibilité)
    - clique sur le bouton "All files"
    - clique ensuite sur la croix rouge

    Au deux messages qui vont s'afficher, tu réponds par "YES"
    L'ordinateur doit redémarrer, sinon, fais le toi-même, quoiqu'il arrive.

    / Dès le redémarrage, lance le nettoyage avec CCleaner et supprime :
    C:\!Killbox <------- le dossier

    et dis moi comment va le PC
    0
  11. apho Messages postés 35 Statut Membre 2
     
    alors 2 problemes
    j'ai bien fixer les lignes que tu m'as donné sauf 2 qui ne sont plus dans le nouveau scan (etonnant non ?)

    O4 - HKLM\..\Run: [BootService] rundll32.exe "C:\WINDOWS\mlmmnk.dll",realset
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

    et sinon j'ai téléchargé

    PocketKillBox sur le lien : https://www.bleepingcomputer.com/download/linux/

    et au moment de l'executer j'ai un message d'erreur de windows : n'est pas une application win32 valide

    que dois-je faire ?
    0
  12. apho Messages postés 35 Statut Membre 2
     
    voici le nouveau log aprés avoir fixé :

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 15:29:26, on 21/04/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\CTsvcCDA.EXE
    C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\McAfee\MBK\MBackMonitor.exe
    C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
    c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\PROGRA~1\McAfee\MPS\mps.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\WINDOWS\system32\HPZipm12.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\vphc700.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\McAfee\MSK\MskAgent.exe
    C:\Program Files\SiteAdvisor\6066\SAService.exe
    C:\Program Files\McAfee\MPS\mpsevh.exe
    C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
    C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
    c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Spyware Doctor\SDTrayApp.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Opdicom\OpdiTracker\OptT3STA.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Philips\SPC 700NC PC Camera\TrayMin700.exe
    C:\Program Files\SAGEM Wi-Fi USB 802.11g\WLANUTL.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\system32\oodag.exe
    C:\Program Files\OO Software\Defrag Professional\oodcnt.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Documents and Settings\Arnaud\Bureau\HiJackThis_v2.exe
    C:\WINDOWS\system32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail1.voila.fr/webmail/fr_FR/login.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
    O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
    O4 - HKLM\..\Run: [phc700] C:\WINDOWS\vphc700.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
    O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
    O4 - HKLM\..\Run: [McAfee Backup] C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
    O4 - HKLM\..\Run: [MBkLogOnHook] C:\Program Files\McAfee\MBK\LogOnHook.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [SDTray] C:\Program Files\Spyware Doctor\SDTrayApp.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Démarrer OpdiTracker.lnk = C:\Program Files\Opdicom\OpdiTracker\OptT3STA.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: TrayMin.lnk = C:\Program Files\Philips\SPC 700NC PC Camera\TrayMin700.exe
    O4 - Global Startup: Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk = ?
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5011/mcfscan.cab
    O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: McAfee Application Installer Cleanup (0170561177156140) (0170561177156140mcinstcleanup) - McAfee, Inc. - C:\WINDOWS\TEMP\017056~1.EXE
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
    O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\FICHIE~1\McAfee\EmProxy\emproxy.exe
    O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: MBackMonitor - McAfee - C:\Program Files\McAfee\MBK\MBackMonitor.exe
    O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Fichiers communs\McAfee\HackerWatch\HWAPI.exe
    O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\fichiers communs\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\FICHIE~1\mcafee\redirsvc\redirsvc.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
    O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
    O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
    O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
    O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
    O24 - Desktop Component 0: (no name) - http://www.enigmacretu.com/tapety/800-600/002.jpg
    0
  13. papyber Messages postés 6430 Statut Contributeur sécurité 257
     
    tu as redémarré ton PC entre temps?
    en tout cas c'est propre cette fois ci
    0
  14. apho Messages postés 35 Statut Membre 2
     
    oui comme je l'avais dit j'ai eu un ecran bleu et du coup le pc à redemarré... il me semble que tout va bien sur mon pc ... pour la defragmentation j'ai pris o&o drefrag (recommandé par de nombreux utilisateurs sur le forum)

    bon ben je pense que tout est resolu....

    Merci merci merci merci
    0
  15. papyber Messages postés 6430 Statut Contributeur sécurité 257
     
    si tout va bien supprime tout ce qu'on a utilisé car ce ne sera plus utile désormais
    conserve néanmoins ccleaner et effectue le nettoyage tous les jours avant de couper le PC

    installe ce logiciel très utile et scanne ton PC avec une fois par semaine au moins...
    AVG Antispyware
    https://www.avg.com/en-ww/free-antivirus-download

    mode d'utilisation :
    Lance AVG Anti-Spyware, mets le à jour,
    Clique sur le bouton « Analyse »
    Puis « Comment réagir », clique sur Actions recommandées. Sélectionne Quarantaine.
    Retour à l'onglet Analyse.
    Clique sur Analyse complète du système.
    A la fin du scan, choisis " Appliquer toutes les actions "
    Clique sur "Enregistrer le rapport". Le fichier texte se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

    tu peux le coupler avec celui-ci
    spybot search and destroy
    https://www.safer-networking.org/?page=download

    défragmente

    pense à bien te protéger, la sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...
    j'ai découvert ce lien qui est plutôt pas mal à ce sujet
    https://forum.pcastuces.com/default.asp

    et bon surf
    0
  16. apho Messages postés 35 Statut Membre 2
     
    Merci pour tout Papyber....
    Je desinstalle tout ce qu'on a installer et garde ce que tu m'as dit de garder...

    Merci aussi à Regis59 d'avoir avancé le post hier soir et à Lunkonnu.

    Vous êtes géniaux sur ce forum !!!
    0
Précédent
  • 1
  • 2