Souci avec internet

Résolu
sandrine -  
Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   -
mon ordi a été formaté il y a un mois et depuis une semaine internet est lent (1 minute pour afficher une page)

comme logiciel de securité j'ai ad aware spybot avast et ccleaner.
ils disent qu'il n'y a pas de virus ni spy donc je ne comprends pas d'ou vient le probleme.
j'ai regardé plusieurs forums et je n'ai toujours pas trouvé de solutions si quelqu'un pouvait m'aider ce serait sympa

voici mon rapport hijackthis si necessaire

Logfile of HijackThis v1.99.1
Scan saved at 16:26:28, on 23/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Ares\chatServer.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Ares\Ares.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
C:\PROGRA~1\FICHIE~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Tigresse\LOCALS~1\Temp\Rar$EX47.188\HijackThis.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [Okay up user link] C:\Documents and Settings\All Users\Application Data\Once long okay up\pinggrid.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Raccourci vers orange adsl.lnk = ?
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
Configuration: Windows XP
Opera 9.20

13 réponses

  1. raleuboleu Messages postés 5028 Statut Membre 79
     
    salut

    je vois que tu n'as pas de parefeu peux tu installer kério , voici 1 lien qui t'aidera a le configurer :

    http://kerio.probb.fr/Systemesd-exploitation-c1/Logiciels-et-tutoriels-gratuits-tries-par-categorie-f6/Tutoriel-pour-Kerio-4-version-gratuite-t201.htm

    aussi hijack est mal placé , regarde ce lien qui t'indiquera comment le réinstaller correctement :

    https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

    ensuite reposte 1 log stp

    on passera au nettoyage ensuite

    bizz
    0
  2. sandrine
     
    slt alors g installé kerio et voici le nouveau log

    Logfile of HijackThis v1.99.1
    Scan saved at 20:11:14, on 23/05/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16441)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Ares\chatServer.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
    C:\WINDOWS\system32\svchost.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Opera\Opera.exe
    C:\hijackthis\HijackThis.exe
    C:\WINDOWS\system32\cidaemon.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Startup: Raccourci vers orange adsl.lnk = ?
    O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
    O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe

    -_-_-_- merci a toi -_-_-_-
    0
  3. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    slt,

    désinstalle Flashget , il contient un spyware ..

    C:\Program Files\FlashGet

    ensuite :

    Télécharge et installe ce log :

    * AVG AS

    AVG anti spyware
    avg antispyware
    Met le a jour avant de lancer le scan.
    Tuto :
    http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

    ->Relance AVG AS -> "Analyse" ->"Paramètres"

    Sous la question "Comment réagir ?" :

    -> clique sur "Actions recommandées" et choisis "Quarantaines"
    -> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

    Si un fichier est infecté en fin d'analyse

    ->Clique sur "Appliquer toutes les actions "

    ->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".

    ->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici

    0
  4. sandrine
     
    voici le rapport avg

    ---------------------------------------------------------
    AVG Anti-Spyware - Rapport d'analyse
    ---------------------------------------------------------

    + Créé à: 22:25:10 23/05/2007

    + Résultat de l'analyse:

    C:\Documents and Settings\Tigresse\Cookies\tigresse@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
    :mozilla.31:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
    :mozilla.12:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
    :mozilla.13:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@adtech[2].txt -> TrackingCookie.Adtech : Nettoyé.
    :mozilla.80:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
    :mozilla.81:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Advertising : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
    :mozilla.74:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Adviva : Nettoyé.
    :mozilla.34:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
    :mozilla.39:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Atdmt : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
    C:\Documents and Settings\gg\Cookies\gg@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
    :mozilla.31:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
    :mozilla.61:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Bluestreak : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
    :mozilla.33:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Com : Nettoyé.
    :mozilla.30:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
    :mozilla.62:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Doubleclick : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
    :mozilla.54:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
    C:\Documents and Settings\Famille\Cookies\famille@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@as1.falkag[1].txt -> TrackingCookie.Falkag : Nettoyé.
    :mozilla.15:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Mediaplex : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Nettoyé.
    :mozilla.13:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.14:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.15:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.16:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.17:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.18:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Serving-sys : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
    :mozilla.55:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.56:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.57:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.6:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.7:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.8:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Smartadserver : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
    :mozilla.22:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    :mozilla.23:C:\Documents and Settings\gg\Application Data\Mozilla\Firefox\Profiles\6d3iny58.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    :mozilla.70:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Tradedoubler : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Nettoyé.
    C:\Documents and Settings\Elise\Cookies\elise@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
    C:\Documents and Settings\gg\Cookies\gg@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
    :mozilla.68:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    :mozilla.69:C:\Documents and Settings\Elise\Application Data\Mozilla\Firefox\Profiles\r7rjuhff.default\cookies.txt -> TrackingCookie.Yieldmanager : Nettoyé.
    F:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP27\A0011871.exe -> Worm.VB.dz : Nettoyé.
    F:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP34\A0013668.exe -> Worm.VB.dz : Nettoyé.

    Fin du rapport
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    Ta resto système était infectée ...

    Ou en sont tes probs ?

    Remet un log hijack .

    a+
    0
  7. sandrine
     
    le probleme c'est la lenteur d'internet

    voici le log

    Logfile of HijackThis v1.99.1
    Scan saved at 10:35:23, on 24/05/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16441)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\ctfmon.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\MSN Messenger\livecall.exe
    C:\Program Files\Ares\Ares.exe
    C:\Program Files\Opera\Opera.exe
    C:\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
    O4 - HKLM\..\Run: [FlashGet] "C:\Program Files\FlashGet\FlashGet.exe" /min
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKCU\..\Run: [Wait Mags] C:\DOCUME~1\Famille\APPLIC~1\THIRDP~1\internetdead.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
    0
  8. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    Flashget est encore installé, vire le !

    Télécharge ceci:
    http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip

    Dézippe-le (clic droit >> Extraire tout) et double clique sur le fichier lopxpMH.bat.

    Poste le contenu du rapport qui va s'ouvrir.

    a+
    0
  9. sandrine
     
    slt, désolé pour le retard

    flash get avait deja été supprimé et voici le rapport

    Rapport lopxpMH2 version 2.0 fait à 9:09:27,29 le 25/05/2007
    C:\Documents and Settings\Tigresse\Bureau

    ******************************************
    ## Répertoires Application Data

    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Administrateur\Application Data

    09/05/2007 21:48 <REP> .
    09/05/2007 21:48 <REP> ..
    09/05/2007 21:48 <REP> Microsoft
    09/05/2007 21:48 62 desktop.ini
    1 fichier(s) 62 octets
    3 Rép(s) 7 478 956 032 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Administrateur\Local Settings\Application Data

    09/05/2007 21:48 <REP> .
    09/05/2007 21:48 <REP> ..
    09/05/2007 21:48 <REP> Microsoft
    09/05/2007 21:49 3 712 656 IconCache.db
    1 fichier(s) 3 712 656 octets
    3 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\All Users\Application Data

    04/04/2007 15:45 <REP> .
    04/04/2007 15:45 <REP> ..
    04/04/2007 23:39 <REP> Adobe
    16/04/2007 13:32 <REP> Apple Computer
    04/04/2007 21:59 <REP> Downloaded Installations
    21/05/2007 10:12 <REP> Emjysoft
    06/04/2007 12:32 <REP> Google
    29/04/2007 12:10 <REP> Macrovision
    04/04/2007 21:29 <REP> Messenger Plus!
    04/04/2007 15:45 <REP> Microsoft
    20/05/2007 19:29 <REP> Once long okay up
    04/04/2007 22:00 <REP> PC Suite
    04/04/2007 22:06 <REP> Sony Ericsson
    05/04/2007 08:35 <REP> Spybot - Search & Destroy
    20/05/2007 12:16 <REP> TuneUp Software
    13/04/2007 14:24 <REP> Ulead Systems
    07/04/2007 11:35 <REP> Windows Genuine Advantage
    11/04/2007 10:25 <REP> Windows Live Toolbar
    04/04/2007 15:45 62 desktop.ini
    1 fichier(s) 62 octets
    18 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Default User\Application Data

    04/04/2007 15:45 <REP> .
    04/04/2007 15:45 <REP> ..
    04/04/2007 15:45 <REP> Microsoft
    04/04/2007 15:45 62 desktop.ini
    1 fichier(s) 62 octets
    3 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data

    04/04/2007 15:45 <REP> .
    04/04/2007 15:45 <REP> ..
    04/04/2007 13:54 <REP> Microsoft
    0 fichier(s) 0 octets
    3 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Elise\Application Data

    04/04/2007 15:15 <REP> .
    04/04/2007 15:15 <REP> ..
    09/04/2007 10:20 <REP> Adobe
    01/05/2007 11:33 <REP> Datalayer
    09/04/2007 10:32 <REP> Google
    04/04/2007 15:15 <REP> Identities
    11/04/2007 17:33 <REP> Macromedia
    04/04/2007 15:15 <REP> Microsoft
    09/04/2007 10:32 <REP> Mozilla
    25/05/2007 08:01 <REP> Opera
    09/04/2007 10:20 <REP> PC Suite
    09/04/2007 10:20 <REP> Real
    09/04/2007 10:20 <REP> Webroot
    04/04/2007 15:15 62 desktop.ini
    1 fichier(s) 62 octets
    13 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Elise\Local Settings\Application Data

    04/04/2007 15:15 <REP> .
    04/04/2007 15:15 <REP> ..
    11/04/2007 17:48 <REP> Adobe
    27/04/2007 17:29 <REP> Ahead
    09/04/2007 10:32 <REP> Google
    01/05/2007 10:22 <REP> Identities
    04/04/2007 15:15 <REP> Microsoft
    09/04/2007 10:32 <REP> Mozilla
    09/04/2007 10:55 5 120 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    09/04/2007 10:29 89 496 GDIPFONTCACHEV1.DAT
    04/04/2007 22:09 5 906 684 IconCache.db
    3 fichier(s) 6 001 300 octets
    8 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Famille\Application Data

    06/04/2007 20:20 <REP> .
    06/04/2007 20:20 <REP> ..
    06/04/2007 20:20 <REP> Adobe
    22/04/2007 23:34 <REP> Ahead
    12/04/2007 11:41 <REP> Arcsoft
    08/04/2007 12:02 <REP> Datalayer
    10/04/2007 09:51 <REP> GetRight
    06/04/2007 20:24 <REP> Google
    06/05/2007 09:13 <REP> Help
    06/04/2007 20:20 <REP> Identities
    22/05/2007 17:20 <REP> Lavasoft
    06/04/2007 20:30 <REP> Macromedia
    06/04/2007 20:20 <REP> Microsoft
    08/04/2007 11:38 <REP> Mozilla
    12/04/2007 13:13 <REP> Nokia
    12/04/2007 11:34 <REP> Nokia Multimedia Player
    22/05/2007 14:22 <REP> Opera
    06/04/2007 20:20 <REP> PC Suite
    06/04/2007 20:20 <REP> Real
    16/04/2007 00:47 <REP> Sun
    20/05/2007 19:29 <REP> third platform
    16/04/2007 14:19 <REP> vlc
    08/04/2007 09:05 <REP> Webroot
    06/04/2007 20:20 62 desktop.ini
    14/04/2007 12:19 89 496 GDIPFONTCACHEV1.DAT
    2 fichier(s) 89 558 octets
    23 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Famille\Local Settings\Application Data

    06/04/2007 20:20 <REP> .
    06/04/2007 20:20 <REP> ..
    16/04/2007 14:07 <REP> {C0DAB3BD-FE6D-43C8-BADB-6E6D26647526}
    10/04/2007 15:10 <REP> Adobe
    21/04/2007 23:02 <REP> Ahead
    08/04/2007 09:39 <REP> ApplicationHistory
    12/05/2007 16:48 <REP> Ares
    06/04/2007 20:24 <REP> Google
    18/04/2007 16:31 <REP> Help
    02/05/2007 20:07 <REP> Identities
    06/04/2007 20:20 <REP> Microsoft
    08/04/2007 11:38 <REP> Mozilla
    16/04/2007 14:09 <REP> Pando
    08/04/2007 10:53 24 064 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    08/04/2007 09:39 130 fusioncache.dat
    06/04/2007 20:42 89 496 GDIPFONTCACHEV1.DAT
    06/04/2007 22:39 4 842 366 IconCache.db
    4 fichier(s) 4 956 056 octets
    13 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\gg\Application Data

    18/05/2007 12:39 <REP> .
    18/05/2007 12:39 <REP> ..
    18/05/2007 12:40 <REP> Adobe
    20/05/2007 10:18 <REP> Google
    18/05/2007 12:39 <REP> Identities
    20/05/2007 10:17 <REP> Macromedia
    18/05/2007 12:39 <REP> Microsoft
    20/05/2007 09:52 <REP> Mozilla
    18/05/2007 12:39 62 desktop.ini
    1 fichier(s) 62 octets
    8 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\gg\Local Settings\Application Data

    18/05/2007 12:39 <REP> .
    18/05/2007 12:39 <REP> ..
    18/05/2007 12:40 <REP> Ahead
    20/05/2007 10:18 <REP> Google
    18/05/2007 12:39 <REP> Microsoft
    20/05/2007 09:52 <REP> Mozilla
    18/05/2007 12:42 89 496 GDIPFONTCACHEV1.DAT
    18/05/2007 12:48 6 291 456 IconCache.db
    2 fichier(s) 6 380 952 octets
    6 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\LocalService\Application Data

    04/04/2007 13:59 <REP> .
    04/04/2007 13:59 <REP> ..
    08/04/2007 01:26 <REP> Google
    04/04/2007 13:59 <REP> Microsoft
    0 fichier(s) 0 octets
    4 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data

    04/04/2007 13:59 <REP> .
    04/04/2007 13:59 <REP> ..
    06/05/2007 20:24 <REP> Adobe
    08/04/2007 01:26 <REP> Google
    04/04/2007 13:59 <REP> Microsoft
    0 fichier(s) 0 octets
    5 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\NetworkService\Application Data

    04/04/2007 13:59 <REP> .
    04/04/2007 13:59 <REP> ..
    04/04/2007 13:59 <REP> Microsoft
    0 fichier(s) 0 octets
    3 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data

    04/04/2007 13:59 <REP> .
    04/04/2007 13:59 <REP> ..
    04/04/2007 13:59 <REP> Microsoft
    0 fichier(s) 0 octets
    3 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Tigresse\Application Data

    04/04/2007 14:01 <REP> .
    04/04/2007 14:01 <REP> ..
    04/04/2007 23:41 <REP> Adobe
    21/04/2007 21:04 <REP> Ahead
    11/05/2007 17:50 <REP> Azureus
    05/04/2007 13:51 <REP> Datalayer
    19/05/2007 22:26 <REP> DeepBurner
    21/05/2007 10:12 <REP> Emjysoft
    06/04/2007 12:33 <REP> Google
    04/04/2007 23:44 <REP> Help
    04/04/2007 14:01 <REP> Identities
    15/05/2007 20:01 <REP> Jetico Personal Firewall
    05/04/2007 00:38 <REP> Lavasoft
    05/04/2007 08:18 <REP> Macromedia
    04/04/2007 14:01 <REP> Microsoft
    04/04/2007 23:06 <REP> Mozilla
    16/04/2007 22:40 <REP> MSNInstaller
    05/04/2007 14:12 <REP> Nokia
    05/04/2007 14:16 <REP> Nokia Multimedia Player
    20/05/2007 15:24 <REP> Opera
    04/04/2007 22:12 <REP> PC Suite
    04/04/2007 22:12 <REP> Real
    05/05/2007 11:32 <REP> Sun
    20/05/2007 12:17 <REP> TuneUp Software
    13/04/2007 14:38 <REP> Ulead Systems
    21/05/2007 13:06 <REP> vlc
    04/04/2007 14:01 62 desktop.ini
    19/04/2007 19:02 89 496 GDIPFONTCACHEV1.DAT
    2 fichier(s) 89 558 octets
    26 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Documents and Settings\Tigresse\Local Settings\Application Data

    04/04/2007 14:01 <REP> .
    04/04/2007 14:01 <REP> ..
    04/04/2007 23:40 <REP> Adobe
    21/04/2007 21:24 <REP> Ahead
    23/05/2007 23:00 <REP> Apple Computer
    19/05/2007 17:01 <REP> ApplicationHistory
    11/05/2007 18:29 <REP> Ares
    06/04/2007 12:33 <REP> Google
    04/04/2007 23:44 <REP> Help
    05/04/2007 00:33 <REP> Identities
    04/04/2007 14:01 <REP> Microsoft
    04/04/2007 23:06 <REP> Mozilla
    27/04/2007 09:42 <REP> Pando
    05/04/2007 21:48 29 696 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    19/05/2007 17:01 131 fusioncache.dat
    04/04/2007 15:15 89 496 GDIPFONTCACHEV1.DAT
    04/04/2007 14:04 5 364 070 IconCache.db
    4 fichier(s) 5 483 393 octets
    13 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data

    04/04/2007 13:58 <REP> .
    04/04/2007 13:58 <REP> ..
    04/04/2007 13:58 <REP> Microsoft
    04/04/2007 13:58 62 desktop.ini
    1 fichier(s) 62 octets
    3 Rép(s) 7 478 890 496 octets libres
    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

    04/04/2007 13:58 <REP> .
    04/04/2007 13:58 <REP> ..
    04/04/2007 13:58 <REP> Microsoft
    0 fichier(s) 0 octets
    3 Rép(s) 7 478 890 496 octets libres

    ******************************************
    Recherche des taches planifiées dans C:\WINDOWS\tasks

    C:\WINDOWS\Tasks\AC21FBBB918A6EB7.job
    s "€!× m : c : \ d o c u m e ~ 1 \ f a m i l l e \ a p p l i c ~ 1 \ t h i r d p ~ 1 \ H e c k m a i l m e d i a . e x e F a m i l l e 0 Î   <

    C:\WINDOWS\Tasks\Maintenance
    Maintenance inexploitable

    ******************************************
    ## Répertoires de C:\Program Files

    Le volume dans le lecteur C s'appelle Windows
    Le numéro de série du volume est CCA8-3FE5

    Répertoire de C:\Program Files

    25/05/2007 09:09 <REP> .
    25/05/2007 09:09 <REP> ..
    21/05/2007 21:14 <REP> 7-Zip
    11/05/2007 12:26 <REP> Adobe
    20/05/2007 19:28 <REP> Adverts
    04/04/2007 21:22 <REP> Alwil Software
    25/05/2007 09:06 <REP> Ares
    21/05/2007 21:40 <REP> Astonsoft
    11/05/2007 11:49 <REP> CCleaner
    04/04/2007 13:50 <REP> ComPlus Applications
    04/04/2007 22:01 <REP> DIFX
    04/04/2007 23:48 <REP> directx
    23/05/2007 16:26 <REP> Fichiers communs
    16/04/2007 14:03 <REP> Free Audio Pack
    06/04/2007 20:15 <REP> Google
    23/05/2007 20:49 <REP> Grisoft
    25/04/2007 18:25 <REP> HardwareDetection
    04/04/2007 21:55 <REP> honestech
    15/04/2007 15:10 <REP> ImTOO
    22/05/2007 22:26 <REP> Internet Explorer
    02/05/2007 12:34 <REP> Java
    21/05/2007 21:42 <REP> Lavasoft
    06/04/2007 22:22 <REP> Messenger
    20/05/2007 19:28 <REP> Messenger Plus! Live
    04/04/2007 13:55 <REP> microsoft frontpage
    04/04/2007 15:20 <REP> Microsoft Office
    04/04/2007 13:51 <REP> Movie Maker
    13/04/2007 20:27 <REP> MSN
    04/04/2007 13:50 <REP> MSN Gaming Zone
    24/05/2007 00:01 <REP> MSN Messenger
    06/04/2007 21:51 <REP> MSXML 4.0
    04/04/2007 13:52 <REP> NetMeeting
    04/04/2007 22:00 <REP> Nokia
    04/04/2007 13:50 <REP> Online Services
    20/05/2007 15:23 <REP> Opera
    06/04/2007 21:49 <REP> Outlook Express
    15/05/2007 12:01 <REP> Picasa2
    24/04/2007 18:13 <REP> PMSSAARI
    15/04/2007 15:10 <REP> QuickTime
    04/04/2007 15:27 <REP> Real
    24/04/2007 18:09 <REP> Sage
    04/04/2007 23:27 <REP> SAGEM
    04/04/2007 13:52 <REP> Services en ligne
    04/04/2007 22:06 <REP> Sony Ericsson
    21/05/2007 21:11 <REP> Soulseek-Test
    21/05/2007 22:47 <REP> Spybot - Search & Destroy
    23/05/2007 19:55 <REP> Sunbelt Software
    04/04/2007 21:27 <REP> SuperCopier2
    13/04/2007 22:14 <REP> Ulead Systems
    20/04/2007 23:25 <REP> VIA
    20/04/2007 23:06 <REP> VIA Technologies, Inc
    20/04/2007 23:03 <REP> VIAudioi
    04/04/2007 20:39 <REP> VideoLAN
    08/04/2007 01:08 <REP> Webroot
    04/04/2007 23:54 <REP> Windows Media Connect 2
    06/04/2007 21:56 <REP> Windows Media Player
    04/04/2007 13:50 <REP> Windows NT
    09/04/2007 20:58 <REP> WinRAR
    04/04/2007 13:55 <REP> xerox
    0 fichier(s) 0 octets
    59 Rép(s) 7 478 947 840 octets libres

    ******************************************
    ## Popups autorisées

    * Internet Explorer

    ! REG.EXE VERSION 3.0

    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow

    * Mozilla Firefox (1 autorisé 2 interdit)

    ******************************************
    ## Registre

    * [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
    Search Bar REG_SZ http://www.google.com/toolbar/ie8/sidebar.html

    ******************************************
    ## Zones de sécurité

    * HKCU Domains (4)

    * P3P History (5)

    ******************************************
    ## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"

    *************** Fin du rapport ****************
    0
  10. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    ok

    1/Telecharge ceci: Clean Up 40:
    http://pageperso.aol.fr/balltrap34/CleanUp40.exe
    -aide en image:(merci à Balltrap34).
    http://perso.orange.fr/rginformatique/section%20virus/democleanup.htm

    Déconnecte toi d'Internet et ferme tout les programmes en cours.

    Redémarre en mode sans échec
    Redémarre le pc, laisse passer l'écran du bios, puis tapote sur la touche F8 avant qu'apparaisse l'écran de chargement de windows.
    Choisis le mode sans échec dans les options et valide avec entrée.
    (Si F8 ne marche pas, essai F5)

    Rend visible les fichiers cachés et système
    panneau de configuration > options des dossiers > onglet affichage
    Cocher la case devant " afficher les fichiers et dossiers cachés "
    Décocher la case devant " masquer les extensions des fichiers dont le type est connu"
    Décocher la case devant " masquer les fichiers protégés du système"
    clic sur [Appliquer] puis sur [ok] pour valider
    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    Lance hijackthis et clic sur [do a system scan only]
    cocher la case au début des lignes suivantes:

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

    O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIA\VIAudioi\SBADeck\ADeck.exe 1
    O4 - HKLM\..\Run: [FlashGet] "C:\Program Files\FlashGet\FlashGet.exe" /min
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKCU\..\Run: [Wait Mags] C:\DOCUME~1\Famille\APPLIC~1\THIRDP~1\internetdead.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm

    valider en cliquant sur le bouton [fix checked]
    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    Recherche et supprime ces dossiers:
    Supprimer les fichiers en suivant le chemin des fichiers infectés…

    S'ils sont présents, supprime:

    C:\Documents and Settings\Famille\Application Data\third platform

    C:\Program Files\FlashGet

    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    Ensuite fais Démarrer -> exécuter et tape cmd
    puis [ok]

    dans la fenêtre qui va s'ouvrir, copie et colle ceci:

    del /a C:\WINDOWS\tasks\AC21FBBB918A6EB7.job

    et valide en appuyant sur [entrée]
    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    Ensuite :

    -> Supprime les fichiers temporaires

    Pour ça, exécute cleanup40 (voir démo)

    Lance le, vérifie que tu es bien en "option standard", ensuite [cleanup] à la fin tu auras une fenêtre qui s'ouvre clique sur [oui], ton PC va redémarrer.
    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
    Redémarre normalement et reposte un Hijackthis sur le poste…

    Précises moi ou en sont tes soucis…

    A+
    0
  11. sandrine
     
    salut, j'ai fait ce que tu as dit et voici le nouveau log

    Logfile of HijackThis v1.99.1
    Scan saved at 21:43:52, on 26/05/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16441)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Ares\chatServer.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\hijackthis\HijackThis.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\system32\dwwin.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: Raccourci vers orange adsl.lnk = ?
    O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\RocketDock\RocketDock.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
    O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{B5FF41BD-2B76-436C-92E5-1295A27992CA}: NameServer = 80.10.246.130 80.10.246.3
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    la j'ai plus de souci merci beaucoup
    mes pages s'affichent normalement
    0
  12. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    Ok ton log m'a l'air clean ..

    - > Pour vérifier, scanne ton PC avec cet antivirus en ligne (sous IE et accepte l’activX) :
    http://www.bitdefender.fr/bd/site/search.php#
    Clique sur « Bitdefender scan on line » suis les instructions.
    Démo (merci à balltrap pour cette démo) :
    http://perso.orange.fr/rginformatique/section%20virus/defender.htm

    Et colle le rapport.

    a+
    0
  13. sandrine
     
    re,
    voici le rapport du scan

    BitDefender Online Scanner

    Scan report generated at: Sun, May 27, 2007 - 22:34:35

    Scan path: A:\;C:\;D:\;E:\;F:\;

    Statistics

    Time
    02:36:05

    Files
    252735

    Folders
    5440

    Boot Sectors
    3

    Archives
    2462

    Packed Files
    21668

    Results

    Identified Viruses
    1

    Infected Files
    2

    Suspect Files
    0

    Warnings
    0

    Disinfected
    0

    Deleted Files
    2

    Engines Info

    Virus Definitions
    508862

    Engine build
    AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

    Scan plugins
    14

    Archive plugins
    38

    Unpack plugins
    6

    E-mail plugins
    6

    System plugins
    1

    Scan Settings

    First Action
    Disinfect

    Second Action
    Delete

    Heuristics
    Yes

    Enable Warnings
    Yes

    Scanned Extensions
    *;

    Exclude Extensions

    Scan Emails
    Yes

    Scan Archives
    Yes

    Scan Packed
    Yes

    Scan Files
    Yes

    Scan Boot
    Yes

    Scanned File
    Status

    C:\Program Files\Adverts\uninst.exe
    Infected with: Trojan.FatObfus.Gen

    C:\Program Files\Adverts\uninst.exe
    Disinfection failed

    C:\Program Files\Adverts\uninst.exe
    Deleted

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundattachment.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundcolor.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundimage.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundposition.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositionx.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundpositiony.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/backgroundrepeat.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/balance.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/behavior_1.htm=>(JAVASCRIPT 7)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgcolor_0.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bgproperties.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_0.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_1.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/border_2.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottom.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomcolor.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomstyle.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderbottomwidth.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercollapse.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_0.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolor_1.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolordark.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/bordercolorlight.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleft.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftcolor.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftstyle.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderleftwidth.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderright.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightcolor.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightstyle.htm=>(JAVASCRIPT 6)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 2)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 3)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 4)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 5)
    Clean

    C:\Program Files\Microsoft Office\Office10\1036\HTMLREF.CHM=>/workshop/author/dhtml/reference/properties/borderrightwidth.htm=>(JAVASCRIPT 6)
    Clean

    C:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP42\A0029820.exe
    Infected with: Trojan.FatObfus.Gen

    C:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP42\A0029820.exe
    Disinfection failed

    C:\System Volume Information\_restore{39B4130B-07A2-4D63-9662-9C555A180739}\RP42\A0029820.exe
    Deleted

    -_-_-_-_- merci pour ton aide -_-_-_-_-
    0
  14. Séb08 Messages postés 18169 Date d'inscription   Statut Contributeur Dernière intervention   1 430
     
    Ou en sont tes probs ?

    0