(virus)infecte par triangle jaune avec !
bonjour,
j'ai un probleme avec un triangle jaune ,comme beaucoup apparemment mais comme je n'ai pas eu la solution avec les autres toppics je lance un nouvel "a l'aide".....!!donc triangle jaune qui m'empeche d'aller dans "ajoutez ou supprimer des programmes"il me met un message de restriction et de consulter l'administrateur......etc....,sinon lorsque je clique sur ce triangle il me renvoi sur une soi disante fenetre de desinfection......j'ai sortis un rapport si ca peut vous etre utile..........merci de me filer une belle astuce pour eradiquer ce virus...:Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 05:55:50, on 02/08/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\printer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\The Cleaner\tca.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\System32\printer.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WinAVX] C:\WINDOWS\System32\WinAvXX.exe
O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [melg3445] C:\WINDOWS\system32\mdmdd.exe
O4 - HKCU\..\Run: [sixer566] C:\WINDOWS\system32\sscc.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WinAVX] C:\WINDOWS\System32\WinAvXX.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: system.exe
O4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: autorun.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O20 - AppInit_DLLs: C:\WINDOWS\System32\hrum133.txt
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
--
End of file - 4458 bytes
j'ai un probleme avec un triangle jaune ,comme beaucoup apparemment mais comme je n'ai pas eu la solution avec les autres toppics je lance un nouvel "a l'aide".....!!donc triangle jaune qui m'empeche d'aller dans "ajoutez ou supprimer des programmes"il me met un message de restriction et de consulter l'administrateur......etc....,sinon lorsque je clique sur ce triangle il me renvoi sur une soi disante fenetre de desinfection......j'ai sortis un rapport si ca peut vous etre utile..........merci de me filer une belle astuce pour eradiquer ce virus...:Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 05:55:50, on 02/08/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\printer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\The Cleaner\tca.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\System32\printer.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WinAVX] C:\WINDOWS\System32\WinAvXX.exe
O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [melg3445] C:\WINDOWS\system32\mdmdd.exe
O4 - HKCU\..\Run: [sixer566] C:\WINDOWS\system32\sscc.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WinAVX] C:\WINDOWS\System32\WinAvXX.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User 'Default user')
O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: system.exe
O4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: autorun.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O20 - AppInit_DLLs: C:\WINDOWS\System32\hrum133.txt
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
--
End of file - 4458 bytes
Configuration: Windows XP Internet Explorer 6.0
11 réponses
-
Tout d'abord Bonjour et bienvenue sur le forum d'entraide COMMENT CA MARCHE
Ouvre ce lien (merci a S!RI pour ce programme). http://siri.urz.free.fr/Fix/SmitfraudFix.php
et télécharge SmitfraudFix.exe.
Regarde le tuto
Exécute le en choisissant l’option 1, il va générer un rapport
Copie/colle le sur le poste stp.
-
quelle rapidite de reponse..........et voila:SmitFraudFix v2.209
Rapport fait à 6:17:08,53, 02/08/2007
Executé à partir de C:\Documents and Settings\manu\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est FAT32
Fix executé en mode normal
»»»»»»»»»»»»»»»»»»»»»»»» Process
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\printer.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\The Cleaner\tca.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe
»»»»»»»»»»»»»»»»»»»»»»»» hosts
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
C:\WINDOWS\system32\dload.exe PRESENT !
C:\WINDOWS\system32\migicons.exe PRESENT !
C:\WINDOWS\system32\printer.exe PRESENT !
C:\WINDOWS\system32\WinAvXX.exe PRESENT !
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\manu
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\manu\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\manu\Favoris
»»»»»»»»»»»»»»»»»»»»»»»» Bureau
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues
»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\WINDOWS\\System32\\hrum133.txt"
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Rustock
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family
DNS Server Search Order: 192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{9B31435D-64DC-4790-B2B1-8441514ADE7A}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{9B31435D-64DC-4790-B2B1-8441514ADE7A}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{9B31435D-64DC-4790-B2B1-8441514ADE7A}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll
»»»»»»»»»»»»»»»»»»»»»»»» Fin -
Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter.
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
----------------------------------------------------------------------------
Relance le programme Smitfraud,
Cette fois choisit l’option 2, répond oui a tous ;
Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum
-
@rudyritalenfin..........:
SmitFraudFix v2.209
Rapport fait à 11:55:43,72, 02/08/2007
Executé à partir de C:\Documents and Settings\manu\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est FAT32
Fix executé en mode sans echec
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus
»»»»»»»»»»»»»»»»»»»»»»»» hosts
192.168.200.3 ad.doubleclick.net
192.168.200.3 ad.fastclick.net
192.168.200.3 ads.fastclick.net
192.168.200.3 ar.atwola.com
192.168.200.3 atdmt.com
192.168.200.3 avp.ch
192.168.200.3 avp.com
192.168.200.3 avp.ru
192.168.200.3 awaps.net
192.168.200.3 banner.fastclick.net
192.168.200.3 banners.fastclick.net
192.168.200.3 ca.com
192.168.200.3 click.atdmt.com
192.168.200.3 clicks.atdmt.com
192.168.200.3 customer.symantec.com
192.168.200.3 dispatch.mcafee.com
192.168.200.3 download.mcafee.com
192.168.200.3 downloads-us1.kaspersky-labs.com
192.168.200.3 downloads-us2.kaspersky-labs.com
192.168.200.3 downloads-us3.kaspersky-labs.com
192.168.200.3 downloads1.kaspersky-labs.com
192.168.200.3 downloads2.kaspersky-labs.com
192.168.200.3 downloads3.kaspersky-labs.com
192.168.200.3 downloads4.kaspersky-labs.com
192.168.200.3 engine.awaps.net
192.168.200.3 f-secure.com
192.168.200.3 fastclick.net
192.168.200.3 ftp.avp.ch
192.168.200.3 ftp.downloads1.kaspersky-labs.com
192.168.200.3 ftp.downloads2.kaspersky-labs.com
192.168.200.3 ftp.downloads3.kaspersky-labs.com
192.168.200.3 ftp.f-secure.com
192.168.200.3 ftp.kasperskylab.ru
192.168.200.3 ftp.sophos.com
192.168.200.3 ids.kaspersky-labs.com
192.168.200.3 kaspersky-labs.com
192.168.200.3 kaspersky.com
192.168.200.3 liveupdate.symantec.com
192.168.200.3 liveupdate.symantecliveupdate.com
192.168.200.3 mast.mcafee.com
192.168.200.3 mcafee.com
192.168.200.3 media.fastclick.net
192.168.200.3 my-etrust.com
192.168.200.3 nai.com
192.168.200.3 networkassociates.com
192.168.200.3 norton.com
192.168.200.3 phx.corporate-ir.net
192.168.200.3 rads.mcafee.com
192.168.200.3 secure.nai.com
192.168.200.3 securityresponse.symantec.com
192.168.200.3 service1.symantec.com
192.168.200.3 sophos.com
192.168.200.3 spd.atdmt.com
192.168.200.3 symantec.com
192.168.200.3 trendmicro.com
192.168.200.3 update.symantec.com
192.168.200.3 updates.symantec.com
192.168.200.3 updates1.kaspersky-labs.com
192.168.200.3 updates2.kaspersky-labs.com
192.168.200.3 updates3.kaspersky-labs.com
192.168.200.3 updates4.kaspersky-labs.com
192.168.200.3 updates5.kaspersky-labs.com
192.168.200.3 us.mcafee.com
192.168.200.3 vil.nai.com
192.168.200.3 viruslist.com
192.168.200.3 viruslist.ru
192.168.200.3 virusscan.jotti.org
192.168.200.3 virustotal.com
192.168.200.3 www.avp.ch
192.168.200.3 www.avp.com
192.168.200.3 www.avp.ru
192.168.200.3 www.awaps.net
192.168.200.3 www.ca.com
192.168.200.3 www.f-secure.com
192.168.200.3 www.fastclick.net
192.168.200.3 www.grisoft.com
192.168.200.3 www.kaspersky-labs.com
192.168.200.3 www.kaspersky.com
192.168.200.3 www.kaspersky.ru
192.168.200.3 www.mcafee.com
192.168.200.3 www.my-etrust.com
192.168.200.3 www.nai.com
192.168.200.3 www.networkassociates.com
192.168.200.3 www.sophos.com
192.168.200.3 www.symantec.com
192.168.200.3 www.symantec.com
192.168.200.3 www.trendmicro.com
192.168.200.3 www.viruslist.com
192.168.200.3 www.viruslist.ru
192.168.200.3 www.virustotal.com
192.168.200.3 www3.ca.com
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés
C:\WINDOWS\system32\printer.exe supprimé
C:\WINDOWS\system32\WinAvXX.exe supprimé
»»»»»»»»»»»»»»»»»»»»»»»» DNS
HKLM\SYSTEM\CCS\Services\Tcpip\..\{9B31435D-64DC-4790-B2B1-8441514ADE7A}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{9B31435D-64DC-4790-B2B1-8441514ADE7A}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{9B31435D-64DC-4790-B2B1-8441514ADE7A}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
Nettoyage terminé.
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Fin
-
-
salut rudyrital!!
eh bien toujours pas d'evolution......meme en mode sans echec je n'arrive pas a supprimer des programmes...il me met tjrs la meme chose ,cet "acces est impossible en raison des restrictions de votre ordinateur ,contacter l'administrateur systeme......"en plus au demarrage maintenant j'ai un message me disant qu'il manque un fichier windows32..etc.je crois.......j'attends avec impatience a nouveau ton aide,merci. -
fait un scan ici
https://www.bitdefender.fr/
* En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
* Dans la nouvelle fenêtre, clique sur j‘accepte
* Accepte le contrôle Active X et Installe le. Le scanner se charge
* La fenêtre change encore, clique sur ’cliquez ici pour scanner’
* Les signatures se chargent, etc.
tuto en image :
http://pageperso.aol.fr/rginformatique/mapage/defender.htm
copie colle le résultat ici-
merci d'etre encore la..........voici mon rapport et tjrs pas d'evolution.....:
BitDefender Online Scanner
Scan report generated at: Fri, Aug 03, 2007 - 18:22:28
Scan path: A:\;C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;
Statistics
Time
00:59:59
Files
164311
Folders
5977
Boot Sectors
8
Archives
966
Packed Files
3641
Results
Identified Viruses
4
Infected Files
7
Suspect Files
0
Warnings
0
Disinfected
0
Deleted Files
6
Engines Info
Virus Definitions
690334
Engine build
AVCORE v1.0 (build 2410) (i386) (Jun 12 2007 21:08:27)
Scan plugins
14
Archive plugins
38
Unpack plugins
6
E-mail plugins
6
System plugins
1
Scan Settings
First Action
Disinfect
Second Action
Delete
Heuristics
Yes
Enable Warnings
Yes
Scanned Extensions
*;
Exclude Extensions
Scan Emails
Yes
Scan Archives
Yes
Scan Packed
Yes
Scan Files
Yes
Scan Boot
Yes
Scanned File
Status
C:\WINDOWS\Driver Cache\i386\driver.cab=>cn8iit.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb1000.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb1000.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb1000s.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb1000s.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2000.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2000.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2000s.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2000s.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb210.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb210.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2100.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2100.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2100s.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb2100s.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb210sp.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb210sp.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb240.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb240.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb250.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb250.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb255sp.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb255sp.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25fe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25ff3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25ge3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25gf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25gp3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25he3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25hf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25hp3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25pe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb25pf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb265sp.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb265sp.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb3000.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb3000.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4000.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4000.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4100.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4100.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4200.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4200.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4200s.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4200s.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4300.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4300.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4300s.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4300s.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43be3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43bea.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43fd3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43fe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43fea.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43ff3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43ffa.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43gd3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43ge3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43gea.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43gf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43gfa.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43gp3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43gs3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43hd3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43he3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43hea.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43hf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43hfa.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43hp3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43hs3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43pd3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43pe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43pea.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43pf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43pfa.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43pp3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb43ps3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4400.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4400.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4550.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4550.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4650.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb4650.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb50.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb50.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb55.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb55.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb5500.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb5500.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb600.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb600.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6000.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6000.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb600e.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb600e.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb60oe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb60of3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb60pe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb60pf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb610.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb610.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6100.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6100.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61fe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61fe7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61ff3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61ff7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61ge3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61ge7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61gf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61gf7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61he3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61he7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61hf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61hf7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61pe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61pe7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61pf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb61pf7.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb620.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb620.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6200.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6200.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6500.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb6500.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb7000.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb7000.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70be6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70bf6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70bm0.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70fe6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70ff6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70fm0.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70fm6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70ge6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70gm0.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70gm6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70he6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70hf6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70hm0.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70hm6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70oe6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70om0.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70pe6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70pf6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70pm0.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70xe6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70xf6.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb70xm0.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb7100.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb7100.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb80.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb80.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb800.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb800.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb8000.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb8000.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb80oe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb80of3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb80pe3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb80pf3.icm
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb820.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb820.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb85.dll
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnb85.gpd
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnbj.ini
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnbj0600.tbl
Clean
C:\WINDOWS\Driver Cache\i386\driver.cab=>cnbj0600.tbl=>REMOVED_NULLS
Clean
C:\WINDOWS\SYSTEM32\DRIVERS\etc\hosts
Infected with: Generic.Qhost.60FEA05A
C:\WINDOWS\SYSTEM32\DRIVERS\etc\hosts
Disinfection failed
C:\WINDOWS\SYSTEM32\DRIVERS\etc\hosts
Deleted
C:\WINDOWS\SYSTEM32\printer.exe
Infected with: Trojan.Agent.AZE
C:\WINDOWS\SYSTEM32\printer.exe
Disinfection failed
C:\WINDOWS\SYSTEM32\printer.exe
Delete failed
C:\WINDOWS\SYSTEM32\WinAvXX.exe
Infected with: Trojan.Agent.AZE
C:\WINDOWS\SYSTEM32\WinAvXX.exe
Deleted
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\autorun.exe
Infected with: Trojan.Agent.AZE
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\autorun.exe
Deleted
C:\Documents and Settings\manu\Menu Démarrer\Programmes\Démarrage\system.exe
Infected with: Trojan.Agent.AZE
C:\Documents and Settings\manu\Menu Démarrer\Programmes\Démarrage\system.exe
Deleted
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0027
Infected with: Trojan.Dloader.NN
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0027
Disinfection failed
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0027
Deleted
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf
Update failed
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0028=>(ZIP Sfx s)=>cd_htm.dll
Detected with: Adware.CyDoor
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0028=>(ZIP Sfx s)=>cd_htm.dll
Disinfection failed
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0028=>(ZIP Sfx s)=>cd_htm.dll
Deleted
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0028=>(ZIP Sfx s)
Updated
G:\System Volume Information\_restore{6AA6FC6A-E081-4ACE-8031-599AB5657ACF}\RP16\A0005656.rbf=>wise0028
Update failed
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9179.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9180.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9181.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9182.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9183.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9184.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9186.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9187.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9188.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9189.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9190.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9191.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9193.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9194.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9195.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9196.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9199.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9200.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9201.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9202.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9203.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9204.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9205.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9206.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9207.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9208.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9209.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9210.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9211.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9212.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9213.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9214.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9215.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9216.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9217.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9218.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9220.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9221.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9222.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9223.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9224.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9225.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9226.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9227.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9228.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9229.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9230.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9231.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9232.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9233.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9235.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9236.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9238.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9239.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9240.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9241.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9242.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9243.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9244.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9245.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9246.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9247.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9248.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9249.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9250.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9251.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9252.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9253.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9255.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9256.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9257.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9258.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9260.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9261.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9262.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\IMG_9263.jpg
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03288.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03292.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03293.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03294.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03295.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03296.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03297.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03298.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03305.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\MOV03307.MPG
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\DCIM\101MSDCF\Thumbs.db
Clean
J:\beber s family\CARNAC EXPRESS\'06_04_23_01\SONYCOPY.IND
Clean
J:\beber s family\christmas 2006\
Clean
J:\beber s family\christmas 2006\DSC03694.JPG
Clean
J:\beber s family\christmas 2006\DSC03695.JPG
Clean
J:\beber s family\christmas 2006\DSC03696.JPG
Clean
J:\beber s family\christmas 2006\DSC03697.JPG
Clean
J:\beber s family\christmas 2006\DSC03698.JPG
Clean
J:\beber s family\christmas 2006\DSC03699.JPG
Clean
J:\beber s family\christmas 2006\DSC03700.JPG
Clean
J:\beber s family\christmas 2006\DSC03701.JPG
Clean
J:\beber s family\christmas 2006\DSC03702.JPG
Clean
J:\beber s family\christmas 2006\DSC03703.JPG
Clean
J:\beber s family\christmas 2006\DSC03704.JPG
Clean
J:\beber s family\christmas 2006\DSC03705.JPG
Clean
J:\beber s family\christmas 2006\DSC03706.JPG
Clean
J:\beber s family\christmas 2006\Thumbs.db
Clean
J:\beber s family\DIVERS A CLASSERbis\
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03099.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03100.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03101.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03102.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03103.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03105.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03107.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03120.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03121.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03122.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03123.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03126.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03127.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03132.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03133.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03134.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03135.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03136.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03137.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03138.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03139.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03139.MPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03140.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03140.MPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03141.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03141.MPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03452.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03453.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03454.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03456.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03457.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03458.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03459.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03460.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03461.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03462.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03463.JPG
Clean
J:\beber s family\DIVERS A CLASSERbis\'06_03_17_01\DCIM\101MSDCF\DSC03464.JPG
Clean
J:\beber s family\HOUAT\DSC03662.JPG
Clean
J:\beber s family\HOUAT\DSC03663.JPG
Clean
J:\beber s family\HOUAT\DSC03664.JPG
Clean
J:\beber s family\HOUAT\DSC03665.JPG
Clean
J:\beber s family\HOUAT\DSC03671.JPG
Clean
J:\beber s family\HOUAT\DSC03672.JPG
Clean
J:\beber s family\HOUAT\DSC03673.JPG
Clean
J:\beber s family\HOUAT\fravalo's family.JPG
Clean
J:\beber s family\HOUAT\MOV03627.MPG
Clean
J:\beber s family\HOUAT\MOV03631.MPG
Clean
J:\beber s family\HOUAT\MOV03632.MPG
Clean
J:\beber s family\HOUAT\MOV03635.MPG
Clean
J:\beber s family\HOUAT\MOV03637.MPG
Clean
J:\beber s family\HOUAT\MOV03647.MPG
Clean
J:\beber s family\HOUAT\MOV03666.MPG
Clean
J:\beber s family\HOUAT\MOV03667.MPG
Clean
J:\beber s family\HOUAT\MOV03668.MPG
Clean
J:\beber s family\HOUAT\MOV03669.MPG
Clean
J:\beber s family\HOUAT\MOV03670.MPG
Clean
J:\beber s family\HOUAT\MOV03674.MPG
Clean
J:\beber s family\HOUAT\Thumbs.db
Clean
J:\cailloux LA TRIN+CAMPING\
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01749.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01750.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01751.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01752.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01753.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01754.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01755.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01759.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01760.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01761.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01762.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01763.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01764.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01765.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01766.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01767.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01768.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01770.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01771.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01772.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01773.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01774.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01775.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01776.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01777.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01778.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01779.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01780.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01781.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01782.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01783.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01784.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01785.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01786.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01787.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01788.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01789.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01790.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01791.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01792.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01793.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01794.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01795.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01796.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01797.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01798.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01799.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01800.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01801.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01802.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01803.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01804.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01805.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01806.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01807.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01808.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01809.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01810.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01811.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01812.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01813.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01814.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01815.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01816.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01817.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01818.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01819.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01820.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01821.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01822.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01823.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01824.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01825.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01826.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01827.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01828.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01829.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01830.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01831.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01832.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01833.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01834.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01835.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01836.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01837.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01838.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01839.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01840.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01841.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01842.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01843.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01844.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01845.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01846.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\DSC01847.JPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\MOV01756.MPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\MOV01757.MPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\MOV01758.MPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\MOV01769.MPG
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\DCIM\101MSDCF\Thumbs.db
Clean
J:\cailloux LA TRIN+CAMPING\'05_02_26_01\SONYCOPY.IND
Clean
J:\E.A.F\
Clean
J:\E.A.F\appart nancy sous la neige.mpg
Clean
J:\E.A.F\appart NANCY.mpg
Clean
J:\E.A.F\au travail chez EAF£\
Clean
J:\E.A.F\au travail chez EAF£\DCIM\
Clean
J:\E.A.F\au travail chez EAF£\DCIM\101MSDCF\
Clean
J:\E.A.F\au travail chez EAF£\DCIM\101MSDCF\MOV01667.MPG
Clean
J:\E.A.F\au travail chez EAF£\DCIM\101MSDCF\Thumbs.db
Clean
J:\E.A.F\au travail chez EAF£\SONYCOPY.IND
Clean
J:\E.A.F\DAVID AU TAF£.mpg
Clean
J:\E.A.F\emma coudrains.bmp
Clean
J:\E.A.F\finale test IR ROMU.mpg
Clean
J:\E.A.F\flamingo departure from nancy\
Clean
J:\E.A.F\flamingo departure from nancy\DCIM\
Clean
J:\E.A.F\flamingo departure from nancy\DCIM\101MSDCF\
Clean -
Rends toi sur ce site :
https://www.virustotal.com/gui/
Clique sur parcourir et cherche ce fichier :
C:\WINDOWS\SYSTEM32\printer.exe
Clique sur send.
Un rapport va s'élaborer ligne à ligne.
Attends la fin. Il doit comprendre la taille du fichier envoyé.
Sauvegarde le rapport avec le bloc-note.
Copie le dans ta réponse. -
@rudyritalbonjour,
pour l'instant le site virustotal n'est pas accessible........."impossible de trouver la page",j'espere que ca ne vient pas de moi.......donc j'attends que ca se debloque.........a plus tard! -
@rudyritalVas sur le site https://virusscan.jotti.org/
- Clic en haut à droite sur "Parcourir", navigue dans les dossiers et sélectionne ce fichier :
C:\WINDOWS\SYSTEM32\printer.exe
- Clic sur submit toujours en haut à droite
- Le scan va se lancer, ça va prendre un petit instant
- En bas, tu as le résultat du scan, copie/colle le résultat complet du scan ici.
Aide : https://www.malekal.com/scan-antivirus-ligne-nod32/#mozTocId662799
-
@rudyritalce n'est pas possible.............je dois avoir la "poisse"cette nouvelle adresse n'est pas accessible non plus.......est-ce que pour toi ca passe..........?incroyable!!
-
-
télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
Citation :
C:\WINDOWS\SYSTEM32\printer.exe
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.-
alors..........qd j'arrive sur le moveit.exe...dans la colonne de gauche"paste list of files........"je n'ai rien qd je clique sur move it j'ai en reponse "can not create file C:/_OTMOVEIT.......etc.....,et donc j'ai clique sur clean up apres.....et la j'ai une liste qui s'affiche dans la colonne de droite(results)...:
File/Folder [nobackups] not found.
File/Folder avenger.zip <Avenger by Swandog46> not found.
File/Folder Avenger not found.
File/Folder avenger.txt not found.
File/Folder bfu.zip <BFU by Merijn> not found.
File/Folder BFU not found.
File/Folder combofix.exe <ComboFix by sUBs> not found.
File/Folder QooBox not found.
File/Folder ComboFix*.txt not found.
File/Folder catchme.exe not found.
File/Folder nircmd.exe not found.
File/Folder swreg.exe not found.
File/Folder Swxcacls.exe not found.
File/Folder Swsc.exe not found.
File/Folder dss.exe <Deckard's System Scanner by Deckard> not found.
File/Folder Deckard not found.
File/Folder FindAWF.exe <FindAWF by noahdfear> not found.
File/Folder AWF.txt not found.
File/Folder fixwareout.exe <FixWareout by LonnyRJones> not found.
File/Folder fixwareout not found.
File/Folder fsbl.exe <F-Secure BlackLight> not found.
File/Folder fsbl*.log not found.
File/Folder gmer.exe <GMER by Gmer> not found.
File/Folder gmer.dll not found.
File/Folder gmer.ini not found.
File/Folder gmer.log not found.
File/Folder gmer_uninstall.cmd not found.
File/Folder gmer.sys not found.
File/Folder gmer <delete service> not found.
File/Folder haxfix.exe <Haxfix by Markie> not found.
File/Folder haxfix.txt not found.
File/Folder killbox.exe <Killbox by Option^Explicit> not found.
File/Folder !Killbox not found.
File/Folder OTMoveIt.exe <OTMoveIt by OldTimer> not found.
File/Folder _OTMoveIt not found.
File/Folder rustbfix.exe <Rustbfix by Ejvindh> not found.
File/Folder Rustbfix not found.
File/Folder sdfix.exe <SDFix by Andy_Manchesta> not found.
File/Folder SDFix not found.
File/Folder SmitfraudFix.exe <SmitfraudFix by S!Ri> not found.
File/Folder SmitfraudFix not found.
File/Folder rapport.txt not found.
File/Folder SysInsite <System Insite by Bobbi Flekman> not found.
File/Folder VundoFix.exe <VundoFix by Atribune> not found.
File/Folder VundoFix Backups not found.
File/Folder vundofix.txt not found.
File/Folder win32delfkil.exe <WinDelfKil by Markie> not found.
File/Folder _backupD not found.
File/Folder windelf.txt not found.
File/Folder winpfind.exe <WinPfind by OldTimer> not found.
File/Folder WinPfind not found.
File/Folder winpfind3u.exe <WinPFind3 by OldTimer> not found.
File/Folder WinPFind3u not found.
File/Folder cleanup.txt not found.
File/Folder [deleteself] not found.
Created on 08/04/2007 02:31:37
mais ne suis pas sur d'avoir bien utiliser ce logiciel.........!!VOILA
-
-
télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie et colle :
C:\WINDOWS\SYSTEM32\printer.exe
dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes. -
refait un scan en ligne bit defender
copie colle le rapport -
c'est parti..............pour 45mn de scan environ...........!!
-
en esperant que tout soit ok
-
eh bien encore et tjrs des soucis....maintenant c'est iexplore.exe qui me dit q'il ya eu un bug.......j'ai tente de scanner 2 fois avec bitdefender......et a chaque fois probleme iexplore.exe,du coup je vais me coucher j'essaierai demain......encore merci pour l'assistance d'aujourd'hui.........
-
désolé
-
Salut.
Je te donne ces informations uniquement par solidarité informatique sans garantie autre que le fait que chez moi le problème qui avait l'air d'avoir la même origine a l'air de ne plus se présenter.
J'ai eu la meme merde et cela fait 3 heures que je bataille.
J'avais un antivirus Norton Corporate Edition mis à jour, mais ca n'a pas empêché que sur un site merdique j'ai quand même chopé cette saloperie.
En fait lors de l'activation d'un ActiveX de présentation vidéo s'installe un .EXE qui s'appelle autorun.exe dans un sous répertoire de documents and settings\ALL USERS\...\startup\ et c'est lui qui fout la merde partout.
Pour te débarasser ce cette saloperie. Il faut que tu te logues en safe mode en mode commande DOS (que ne ferait on sans ce mode)
Puis tu élimines autorun.exe de ce répertoire
system.exe de tous les répertoire \documents and settings\xxx\...\...\startup
Winavxx.exe du répertoire \windows\system32
printer.exe du répertoire \windows\system32
avant d'éliminer ces fichiers qui pourraient avoir une autre signification chez toi assure toi qu'ils sont tous de la même date et de la meme taille. Eventuellement recopie les dans un répertoire bidon au cas ou.
Cordialement
Marc BICHARA-
-
Télécharge AVG anti-rootkit.
http://beta.grisoft.cz/beta/betarep.files/antirootkit/AVG_AntiRootkit_1.0.0.13.exe
* Double clique sur le fichier télécharger.
accepte la licence.
puis sur next puis install
redemarre ton ordinateur.
* Lance le programme
clique sur /search for rootkit
s'il trouve qu'elle que chose clique sur save result to file.
puis sur /Perform in-deph searchavg anti-rootkit
et poste les rapports.
avg anti-rootkit
lance le programme
clique sur /search for rootkit
s'il trouve qu'elle que chose sélectionne, se qu'il a trouver.
puis clique sur remove selected items
Tentative de suppression du rootkit détecté
-- Sélection du « rootkit » » détecté puis utilisation de [remove selected items]
-- Affichage d'un message d'alerte « Warning ! » ... l'action est dangereuse => [O.K]
Affichage d'un deuxième message qui demande un reboot pour terminer l'opération de nettoyage.
pour voir si l'opération a marcher.
avg anti-rootkit
clique sur /search for rootkit
s'il trouve qu'elle que chose clique sur save result to file.
et post le rapport si il y en a un.
-
