probleme de pc. virus probable

Question

Bonjour,
J'ai un probleme avec mon PC :Windows XP. Lent et incohérent.J'ai scanné, mais rien ni change. je vous envoie
le rapport hijack. merci de m'expliquer. Je rame dans ce domaine.

Utilisateur anonyme · Answer

Salut

Il est ou le rapport ?

Utilisateur anonyme · Answer

Re ,   eh bien tu le colle la ou tu écrit.

C'est simplement du texte ;)

A+

Utilisateur anonyme · Answer

Je n'ai rien recu.
...

On va faire différemment :

&#8594; Télécharge HJT



Place le dans '  C:\programmes\  '  Une fois cela fait , merci de renommer l'icône ( clique droit > renommer )' Hijackthis.exe 'située dans le dossier dans C:\ , en ' HJT.exe '  <<<<<<<<< Important !!! <<<<<<<

Le chemin d'accés du programme doit être ressemblant à celui-ci  :  C:\Programme\Trend Micro\Hijackthis\HJT.exe

&#8594; Ne pas renommer l'icône du raccourci sur le bureau bien entendu ... 

&#8594; Puis lance-le et choisi l'option '' do a system scan and save a logfile '' et poste moi le rapport ( qui apparait sur le bloc-note )

Tuto si tu n'y arrive pas : http://pageperso.aol.fr/balltrap34/demohijack.htm

A+

Utilisateur anonyme · Answer

Re , fait ceci :

Va sur ce site , /!\ Internet Explorer obligatoire /!\ , Clique sur ' J'accepte '  , Installe les ActiveX si necessaire ,et vérifie si ils sont bien configurés Clique sur ' installer ' puis ' click here to scan '( ou : cliquez ici pour scanner ).
Et poste moi le rapport.

a+

Utilisateur anonyme · Answer

Re , ah merde.

Lance AVG Anti-Spyware

Clique sur le bouton Analyse (de la barre d'outils)

fais dans l'ordre stp. Tu sauvegardes le rapport APRES avoir mis les actions.

Puis sur l'onglet Paramètres
sous "Comment réagir", clique sur Actions recommandées. Sélectionne Quarantaine.

Reviens à l'onglet Analyse. Clique sur Analyse complète du système.

A la fin du scan, choisis l'option 3

"Appliquer toutes les actions " en bas.

Clique sur "Enregistrer le rapport".

Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware. 

Poste le moi.

A+

Utilisateur anonyme · Answer

Recommence il a tout ignoré.

fait ceci :

Puis sur l'onglet Paramètres
sous "Comment réagir", clique sur Actions recommandées. Sélectionne Quarantaine.




A+

Utilisateur anonyme · Answer

Re ,

Reposte un rapport Hijackthis stp.

A+

Utilisateur anonyme · Answer

Re !

Tu habites en Italie ?

*******************************************************

Ta version d'Adobe n'est pas à jour , désinstalle ta version actuelle en passant par ' ajout et supréssion de programmes '

Puis télécharge la dernière , via ce site --> https://get2.adobe.com/reader/otherversions/


Bulletin de sécurité sur les versions Adobe 7.0.8 et antérieures :

https://www.adobe.com/support/security/bulletins/apsb07-01.html


https://get2.adobe.com/reader/otherversions/

**************************************************
&#8594; Relance hijackthis , Choisis ' Do a system scan ' Et fixe ces lignes : ( coche la case à leurs gauches > ' fixchecked ')

O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = ?
O22 - SharedTaskScheduler: flammei - {9d635a36-6b3c-4146-8625-f3aaf507bbf8} - (no file) 

**********************************************

Désinstalle Norton :

http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20050414110429924

Et télécharge Antivir ( PersonnalEdition Classic) &#8594; ici 

Tuto Installation + configuration Antivir &#8594; https://www.malekal.com/avira-free-security-antivirus-gratuit/

Tuto Installation :  &#8594; https://www.astucesinternet.com/modules/news/article.php?storyid=253

Pour le rendre encore plus discret....

******************************************

Télécharge le pare-feu ZoneAlarm  Lit bien tout l'article pour éviter les surprises.

Des soucis avec ? 

***************************************

&#8594; Télécharge CleanUp452 ( Primary download site ... )

&#8594; Lance-le et choisi l'option ' cleanup! ' 

&#8594; Poste le rapport.

Tutorial: http://pageperso.aol.fr/balltrap34/democleanup.htm ( merci à balltrap34 )

************************************

&#8594; Télécharge clean : http://www.malekal.com/download/clean.zip

&#8594; Dézippe-le ( clique droit , extraire tout) 

&#8594; Lance clean.cmd ( ou clean ), Choisi l'option 1 et poste moi le rapport.

(- Où est le rapport clean ? : « Poste de travail » / double clic sur disque « C / » double-clic sur « rapport_clean.txt » et « copier/coller le contenu » sur le forum. )

Note : Tu auras peut-être un message qui t'invitera a uploader un fichier , fait-le dès que tu pourras. 

*********************************

3 rapports.

_Cleanup
_Clean
_Hijackthis

A poster dans l'ordre.

A+

latouffe · Answer

Voici le 1er rapport sur les trois demandés.
 En effet je réside en Italie. Dans un petit village où je suis bien isolé(informatiquement parlant) je n'ai pas d'échanges.

Heureusement qu'il existe cette communauté et des gens comme toi pour aider les modestes internautes. Merci

CleanUp! started on 03/24/08 09:56:03.
...
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\unlimited[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\UT[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\WindowsLive[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\I31FHGHA\yui_2.3.1_1[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\0000000001_000000000000000301318[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\0000000001_000000000000000319645[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\0000000001_000000000000000353126[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\10356336-4[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\1431867162@Top,Middle,TopRight[1] - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\35373037636537343437653535326330[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\5[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\61046683[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\70x50cetelem[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\931x100_mobile[1].swf - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[3].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ADSAdClient31[4].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\answers_favicon[1].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\antivir-parametrage-002[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\Antivir-parametrage-menu-001[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\arrow[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\arrow[2].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ATT00083[1].swf - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\b3[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_onglets[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_suite02[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_tabs[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\back_titre[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bcr_2.0.4[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bhp002[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bhp006[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\bhp010[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\botSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\btnMenu01[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\btn_search_01[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\BurstingInteractionsPipe[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\button_bg[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\CAAWDSBC.HTM - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\CAJERGD6 - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\calciatori2_2[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\clear[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\clear[2].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\easte1[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\faviconCA0E1LBG.ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\faviconCAYE6QIL.ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[10].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[11].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[1].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[2].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[3].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[4].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[5].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[6].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[7].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[8].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\favicon[9].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\flechebas[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\fotDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\freccette_Big[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\fr_yahoo_com[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\gif_totocalcio_tris[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\giocoResponsabile[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\header[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\hit[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\homeScommesse[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\icoLogout[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\InboxLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\i_help[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\i_yellowshield[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\LayoutCommon[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\Light[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\logoAmsBkgnd[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\logoAmsPart2[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\logo[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\manifestazioniDwr[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\midDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\midSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\midSx[2].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\mpoko8[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA
ever_lose[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA
issa[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\pcbackedup_gw_logo[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\pic_empty[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\pic_rss[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\plx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[3].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ReadMessageLight[4].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\Request[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\show_ads[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\sprite_forum[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	emplate_css[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\TFSMflashobject[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	hala7[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\ToolbarBG[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	opCen[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	opDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	opSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	ouch[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	racker[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	ransp[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA	ryitfree_gw_logo[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\utbkgnd[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\util[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\v53[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\wbk194.tmp - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\P0GV4BDA\zlsSetup_70_462_000_fr[1].exe - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\10356341-3[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\1149046468@Position4!Position4[1] - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\60996034[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\61045671[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\actions_06[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[3].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[4].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[5].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ADSAdClient31[6].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ads[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\advertisement[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\affich-5553728-probleme-de-pc-virus-probable[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\affich-5553728-probleme-de-pc-virus-probable[2].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ajout[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\b2[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_ccm_ht[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_suite01[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_tab_off6[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\back_titre[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bannerSMSetteMezzo[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bannerSM_FortunaGira[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bannerSM_Miliardario[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bgMenu[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bhp003[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bhp007[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\bnt_search[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\botSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\btnApriContoTop[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\calcio_portiere_S[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\carrelloDwr[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\doveGiocare[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ebay2[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\emailButton[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\empty[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\engine[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\faviconCA0J7IGQ.ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[10].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[11].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[1].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[2].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[3].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[4].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[5].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[6].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[7].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[8].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\favicon[9].ico - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\flag_es[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\flag_fr[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\forum[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\header_short[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\homeBetterDwr[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\home_better[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\icc_left1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\icons_1.1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ilede1[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\InboxLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\indent1[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\intermerche350x200[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\jewel_24_hover[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\jquery-1.2.3.pack[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\LayoutInbox_12.4.0078.0228[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\LayoutItemList[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\lmatica_testata[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\logo_box_gvinci[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\lottomaticard[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\lunet1[1].jpg - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\midDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\midSx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\paic2[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\pic_02[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\pic_next[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\poivre[1].swf - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\prof[1].xml - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\p[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ReadMessageLight[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ReadMessageLight[1].js - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NWssico[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\scommesse[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sc_rest[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sempliceVeloce[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sfondoIcone[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sfondo_banner[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\spacerVerdeScommesse[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sprite_charte[1].png - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\sp_3[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\supporto[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\ThemeCommon_12.4.0078.0228[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW	itGiocoOnLine[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW	opCen[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW	opDx[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW	rans1x1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW	rans1[1].gif - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\WEBWinLive1036[1].css - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\WLLogin_JS[1].htm - deleted
C:\Documents and Settings\james\Local Settings\Temporary Internet Files\Content.IE5\VO82Q4NW\yad5[1].js - deleted
C:\Documents and Settings\Default User\Cookies\index.dat - deleted
C:\Documents and Settings\Default User\locals~1	empor~1\Content.IE5\index.dat - deleted
C:\Documents and Settings\Default User\Cookies\index.dat - deleted
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\index.dat - deleted
Emptied Recycle Bin on drive C:
'Run MRU' list - removed from the registry.
'Doc Find Spec MRU' list - removed from the registry.
'FindComputerMRU' list - removed from the registry.
'ComputerNameMRU' list - removed from the registry.
'ContainingTextMRU' list - removed from the registry.
'FilesNamedMRU' list - removed from the registry.
Search Assistant MRU list - removed from the registry.
Explorer Open/Save MRU list - removed from the registry.
Explorer Last Visited MRU list - removed from the registry.
Paint Recent File List - removed from the registry.
WordPad Recent File List - removed from the registry.
Telnet's MRU list - removed from the registry.
Windows Media Player Recent File List - removed from the registry.
WinZip Extract MRU list - removed from the registry.
WinZip File MRU list - removed from the registry.
CleanUp! 4.5.2 recovered 368.0 MB of disk space from 3664 files.
CleanUp! finished on 03/24/08 09:56:32.

Utilisateur anonyme · Answer

De rien =)

Et hop 370 mo de gagné ;)

Passe à clean maintenant.

A+

Utilisateur anonyme · Answer

Re , 

C'est marqué pourtant ...

clean.cmd ( ou clean tout seul )

a+

Utilisateur anonyme · Answer

? 

tu tapes 1 puis [entrée]

A+

Utilisateur anonyme · Answer

&#8594; Redémarre en MSE

Autre tutorials pour MSE:

https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php
http://www.coupdepoucepc.com/modules/news/article.php?storyid=253

&#8594; Re-lance clean  -> Choisis l'option 2

---Clean va travailler.---

&#8594; Un rapport Va etre généré , poste le moi ;)

( Le rapport est aussi sauvegardé dans C:\Rapport_clean.txt )


+ un autre rapport hijackthis.

a+

latouffe · Answer

clean relancé e MSE: 24/03/2008 a 21:14:59,45 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
 
*** Recherche des fichiers dans C:\Program Files 
"C:\Program Files\InternetGameBox\" FOUND 
*** Fin du rapport ! 

Et dernier rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:30:54, on 24/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\OdHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: PagoBar - {0A4F47F9-E276-4AE4-83E5-C7D9E476883A} - C:\PROGRA~1\PagoBar\PagoBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [9xadiras] 9xadiras.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Wireless-G Notebook Adapter.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O17 - HKLM\System\CS1\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Utilisateur anonyme · Answer

Clean option2 stp pas 1.
Recommence
A+

latouffe · Answer

En MSE j'ai cliqué sur 2 ( nettoyage)

Script execute en mode sans echec 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec 24/03/2008 a 21:46:03,76 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
 
*** Suppression des fichiers dans C:\Program Files 
tentative de suppression de "C:\Program Files\InternetGameBox\" 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport ! 
 
Je t'ai refais hijack

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:59:21, on 24/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla	fswctrl.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter\OdHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: PagoBar - {0A4F47F9-E276-4AE4-83E5-C7D9E476883A} - C:\PROGRA~1\PagoBar\PagoBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [9xadiras] 9xadiras.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD	oscdspd.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Wireless-G Notebook Adapter.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\Gcc.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O17 - HKLM\System\CS1\Services\Tcpip\..\{3E4E9FDC-67A5-45FA-9AA4-50D7CF1507CB}: NameServer = 85.37.17.55 85.38.28.93
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Utilisateur anonyme · Answer

Re ahh voila =)

bon bon bon :


&#8594; Ferme toutes les applications en cours, puis télécharge ToolsCleaner2 sur ton Bureau.

&#8594; Double clique sur ToolsCleaner2.exe >
&#8594; Clique sur .Recherche
&#8594; puis sur Suppression quand la liste est trouvée.
&#8594; Poste le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\). 
 
Note : ton bureau RISQUE de disparaître, c'est normal. S'il n'apparaît pas à la fin du scan, fais la manip suivante :

CTRL+ALT+SUPP pour ouvrir le Gestionnaire des tâches.
Puis rends toi à l'onglet "Processus". Clique en haut à gauche sur Fichiers et choisis "Exécuter"

Tape explorer.exe et valide. Cela fera re-apparaître le Bureau

Tuto : http://www.commentcamarche.net/faq/sujet 8341 toolscleaner suppression des fix de force brute ( merci espion3004 )



ton pc est-t'il toujours aussi lent ?
a+

latouffe · Answer

Voici le rapport. mon PC est moins lent.

-->- Recherche: 

C:\Clean.zip: trouvé !
C:\HijackThis: trouvé !
C:\clean\clean	ar.exe: trouvé !
C:\clean\cleanemove.reg: trouvé !
C:\clean\clean\pskill.exe: trouvé !
C:\clean\clean\LFiles.exe: trouvé !
C:\clean\clean\gzip.exe: trouvé !
C:\clean\clean\delsiri.cmd: trouvé !
C:\clean\clean\delr.cmd: trouvé !
C:\clean\clean\del3.cmd: trouvé !
C:\clean\clean\del2.cmd: trouvé !
C:\clean\clean\clean.cmd: trouvé !
C:\clean\clean\cherche.cmd: trouvé !
C:\Documents and Settings\james\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\james\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 1 pour clean.zip\clean\clean.cmd: trouvé !
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 2 pour clean.zip\clean\clean.cmd: trouvé !
C:\Documents and Settings\james\Mes documents\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean	ar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\cleanemove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96	ar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96emove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean	ar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\cleanemove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean	ar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\cleanemove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean	ar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\cleanemove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\cherche.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99	ar.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99emove.reg: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\pskill.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\LFiles.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\gzip.exe: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delsiri.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delr.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del3.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del2.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\clean.cmd: trouvé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\cherche.cmd: trouvé !

---------------------------------
-->- Suppression: 

C:\Clean.zip: supprimé !
C:\clean\clean	ar.exe: supprimé !
C:\clean\cleanemove.reg: supprimé !
C:\clean\clean\pskill.exe: supprimé !
C:\clean\clean\LFiles.exe: supprimé !
C:\clean\clean\gzip.exe: supprimé !
C:\clean\clean\delsiri.cmd: supprimé !
C:\clean\clean\delr.cmd: supprimé !
C:\clean\clean\del3.cmd: supprimé !
C:\clean\clean\del2.cmd: supprimé !
C:\clean\clean\clean.cmd: supprimé !
C:\clean\clean\cherche.cmd: supprimé !
C:\Documents and Settings\james\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\james\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 1 pour clean.zip\clean\clean.cmd: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\james\Local Settings\Temp\Répertoire temporaire 2 pour clean.zip\clean\clean.cmd: ERREUR DE SUPPRESSION !!
C:\Documents and Settings\james\Mes documents\HijackThis.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean	ar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\cleanemove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc101\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96	ar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96emove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean	ar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\cleanemove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc96\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean	ar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\cleanemove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc97\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean	ar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\cleanemove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc98\clean\cherche.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99	ar.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99emove.reg: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\pskill.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\LFiles.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\gzip.exe: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delsiri.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\delr.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del3.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\del2.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\clean.cmd: supprimé !
C:\RECYCLER\S-1-5-21-502582692-2177282731-3641348132-1006\Dc99\cherche.cmd: supprimé !
C:\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !

Sauvegarde du registre crée !

Utilisateur anonyme · Answer

Re =)

Maintenant que ton PC n'est plus infecté, désactive ta "Restauration du système" puis réactive la, ce qui créer un point de restauration sain...

Désactivation :
Clique droit sur le "Poste de travail" > Propriétés > onglet "Restauration du système" > coche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Applique patiente jusqu’à ce que cela soit marqué "désactivé" puis Ok.

Activation :
Suivre le même chemin ; décoche la case "Désactiver la Restauration du système sur tous les lecteurs"
> Applique attends que cela soit à nouveau sur "surveillance" puis Ok. Redémarre l'ordinateur.

+++

latouffe · Answer

Bonsoir,
j'ai fait la manip. je voudrais savoir ce que je dois conserver. tout ce que tu m'as demandé de télécharger :

AVIR, AVG, CLEAN, ZONEALARM etc... NORTON que j'avais jusqu'à maintenant, je laisse tomber? merci de

me dire.

Utilisateur anonyme · Answer

Oui Norton tu laisses tomber , à moins que tu tiennes à avoir des problèmes ...

ZoneAlarm  tu gardes 
Clean a été supprimé
Antivir , tu gardes bien évidemment 
AVG dans 30 jours la licence va expirer , donc tu auras des options en moins mais tu pourras toujours t'en servir.

Supprime Toolcleaner & Cleanup
=)

++

latouffe · Answer

C'est fait. Merci pour tout !!!

Utilisateur anonyme · Answer

De rien , bonne continuation  :D

++

Probleme de pc. virus probable - Page 2

Newsletters